3 ms·
V8 compiles JavaScript into machine code, which is then executed. It is an inherently unsafe business to be in, while Rust might make it more safe it will never
by zarzavat 5y ago
V8 compiles JavaScript into machine code, which is then executed. It is an inherently unsafe business to be in, while Rust might make it more safe it will never make it safe. Better to put that effort into better sandboxing, as that is the weakest link.
- saagarjha 5y agoJust because the Rust code cannot be made "fully" safe doesn't mean it should be ruled out and replaced with sandboxing. For one, they can both be worked on, but it's also important to note that Rust can provide useful safety guarantees that are actually useful to have. For example, in C++ a linear overflow may end up leading to the ability to spray arbitrary shellcode, but in Rust you may be able to guarantee that any out-of-bounds accesses cannot be used to do this.
- pjmlp 5y agoIt would be so nice to have something like -fsafe instead of a myriad of mitigations, where the right defaults get enabled, but it will never happen. By the way, the upcoming ARM conference has sessions regarding MTE.