3 ms·
Unsafe doesn't mean unsafe. It means not provably safe by the compiler. That matters on large code bases, or as code ages and has multiple contributors. Keeping
by api 5y ago
Unsafe doesn't mean unsafe. It means not provably safe by the compiler. That matters on large code bases, or as code ages and has multiple contributors. Keeping dangerous security bugs out of C is very difficult under those circumstances, but in Rust you can largely trust the compiler and can easily search for all uses of "unsafe" and audit them.
- sharikone 5y agoYes but if you do much low level it is annoying to use a language that constant treats you at best as a dark magic wizard, at worst as a dangerous risk seeker. All my point was that Rust is not a substitute for C, too heavy and complex and not enough liberating for low level "assembly-wrapping" stuff.
- pjmlp 5y agoThe concept of unsafe language constructs are about 10 years older than C's birthdate, written in different forms, lowercase, uppercase, special module to be imported, whatever, all ignored by C's authors. As for C being low level "assembly-wrapping" stuff, yeah when all you have is a PDP-11 clone. https://queue.acm.org/detail.cfm?id=3212479 https://queue.acm.org/detail.cfm?id=3212479