3 ms·
Honestly, I think anyone who has written Rust, even low level Rust, intuitively understands that it wouldn't even be close. It's not really worth measuring - li
by staticassertion 6y ago
Honestly, I think anyone who has written Rust, even low level Rust, intuitively understands that it wouldn't even be close. It's not really worth measuring - like measuring C vs Java, no one really needs to do it because it's so obvious that C will have many times more memory safety issues.
- nullc 6y agoBad science. Rust code does have unsafe at times, so it can still have memory safety issues. It may not matter that your program is memory safe if it was written by people who don't understand the problem domain and doesn't work correctly. E.g. for qemu, it's perfectly possible to be absurdly vulnerable -- giving target code control of the host -- without any memory safety bug at all.
- staticassertion 6y agoIn fact it's not science at all. I didn't claim it was science, I claimed it was so obvious and intuitive that science was unnecessary. > without any memory safety bug at all. Most QEMU escapes I have seen are memory safety issues in emulated devices.