3 ms·
Not talking about situations where the compiler or the OS are compromised - of course all bets are off in those situations. But "guaranteed" that there can be
by nineteen999 5y ago
Not talking about situations where the compiler or the OS are compromised - of course all bets are off in those situations.
But "guaranteed" that there can be no security holes in code marked "safe" due to an inadvertent compiler bug? I would be very surprised if that is actually the case.
Less likely than C/C++? Yes of course. Guaranteed? Probably not.
- Cyph0n 5y agoAn inadvertent bug in the compiler can be modeled as a compromise. So, as before, it depends on how you define “safe” in your model. In the case of Rust, the compiler is safe and is considered to be within the safety boundary. Will the Rust compiler have bugs in practice? Of course. Do you - as a developer - have a different safety model than the Rust language (i.e., one that does not include the compiler)? If the answer is no, you can “ignore” compiler bugs from a safety perspective.