3 ms·
And it only catches a trivial minority of actual security problems, which can occur in a lot more ways than use after free/etc. IMHO, Rust simply isn't good en
by StillBored 6y ago
And it only catches a trivial minority of actual security problems, which can occur in a lot more ways than use after free/etc.
IMHO, Rust simply isn't good enough at catching all types of bugs to justify rewrites at this point, and its likely when you look at some of the work being done at the processor manufacturing companies that they don't believe it either.
Consider: https://en.wikichip.org/wiki/arm/mte https://en.wikichip.org/wiki/arm/mte,
https://en.wikipedia.org/wiki/Intel_MPX https://en.wikipedia.org/wiki/Intel_MPX, and
https://lwn.net/Articles/718888/ https://lwn.net/Articles/718888/
There are quite a number of these in the pipeline, which make some of what rust does redundant.
- saagarjha 6y agoUh, not at all. Rust’s compiler probably catches like half of all bugs that currently lead to security issues in memory-unsafe languages. And the things you mentioned are similar band-aids, not fixes.