2 ms·
The "large project" part pretty much explains why the don't just rewrite it in Rust. It might be easier to audit the source code and rewrite the offending code,
by petre 6y ago
The "large project" part pretty much explains why the don't just rewrite it in Rust. It might be easier to audit the source code and rewrite the offending code, write C++ libraries to mitigate the issue or both. Also see:
https://news.ycombinator.com/item?id=23059477 https://news.ycombinator.com/item?id=23059477
- the_why_of_y 6y ago> It might be easier to audit the source code and rewrite the offending code What do you think Chromium developers have been doing for the last 10 years, sitting on their hands? My understanding is that the main reason why Google OSS-Fuzz exists is Chromium. The problem with this approach is that it evidently (see OP) doesn't work to find all the bugs before release.