3 ms·
Because it has no purpose in normal Rust code as it's already guaranteed to be safe. It's only purpose would be on {unsafe code, inline assembly} and is just a
by mlindner 6y ago
Because it has no purpose in normal Rust code as it's already guaranteed to be safe. It's only purpose would be on {unsafe code, inline assembly} and is just a performance penalty otherwise.
- fulafel 6y agoThere's no formal verification that uses of unsafe in the standard library are correct and there are no bugs. (Of course goes for other libs too). So this justification doesn't really feel robust.
- mlindner 6y agoThere's no formal verification that the Windows OS syscalls are correct and there are no bugs either.