3 ms·
> Control Flow Guard on Windows I gather from the description that this is not enabled by default. Is that correct? If so, why isn't it enabled by default? It
by mwcampbell 6y ago
> Control Flow Guard on Windows
I gather from the description that this is not enabled by default. Is that correct? If so, why isn't it enabled by default? It would seem to fit with Rust's focus on safety.
- tptacek 6y agoIt's a memory safe language, and CFI has overhead.
- mlindner 6y agoBecause it has no purpose in normal Rust code as it's already guaranteed to be safe. It's only purpose would be on {unsafe code, inline assembly} and is just a performance penalty otherwise.
- fulafel 6y agoThere's no formal verification that uses of unsafe in the standard library are correct and there are no bugs. (Of course goes for other libs too). So this justification doesn't really feel robust.
- mlindner 6y agoThere's no formal verification that the Windows OS syscalls are correct and there are no bugs either.