3 ms·
I actually am waiting for the increase in CVE number of rust replacements. So we can compare. As for now, less exposure means less CVE. So the numbers are bias
by thesnide 3y ago
I actually am waiting for the increase in CVE number of rust replacements. So we can compare.
As for now, less exposure means less CVE. So the numbers are biased.
As usually, time will tell.
- Gigachad 3y agoWe have the data now https://security.googleblog.com/2022/12/memory-safe-languages-in-android-13.html https://security.googleblog.com/2022/12/memory-safe-language... 1.5M lines of Rust in Android and not a single memory vulnerability found, including in their unsafe Rust code. They also observe that the number of memory vulnerabilities decreases almost exactly inline with the decreasing use of memory unsafe language in Android. The Android Rust code is also showing to have less bugs in general than the C/++ code.