3 ms·
C can be memory safe, we only need to turn these features on. Oh, by the way, these features don’t exist.
by nesarkvechnep 2y ago
C can be memory safe, we only need to turn these features on. Oh, by the way, these features don’t exist.
- favorited 2y agoDon't worry, they said it's relatively easy to add!
- bee_rider 2y agoEverything is relatively easy, relative to something out there.
- musicale 2y ago10K memory safe packages (so far): https://www.cheribsd.org https://www.cheribsd.org
- janice1999 2y agoAnd it only requires massive hardware changes and overhead that no one has put into production. Morello is still a research project afaik.
- kwitaszczyk 2y agoCHERI-RISC-V is being standardised [1], Codasip is working on a commercial implementation of CHERI-RISC-V [2], and lowRISC is working on the Sonata project [3] implementing CHERIoT. The Early performance results from the prototype Morello microarchitecture report [4] predicts the overhead between 1.8% and 3.0%. We don’t know what that overhead would be in production until such a commercial implementation is delivered but we have enough evidence it is worth the effort with the current estimates and given that CHERI can deterministically prevent around 2/3 of memory-safety-related vulnerabilities [5], not to mention benefits of mitigating future unknown vulnerabilities with compartmentalisation. [1] https://github.com/riscv/riscv-cheri https://github.com/riscv/riscv-cheri [2] https://codasip.com/solutions/riscv-processor-safety-security/cheri/ https://codasip.com/solutions/riscv-processor-safety-securit... [3] https://www.sunburst-project.org/ https://www.sunburst-project.org/ [4] https://ctsrd-cheri.github.io/morello-early-performance-results/headline-results/initial-measured-performance.html https://ctsrd-cheri.github.io/morello-early-performance-resu... [5] https://msrc.microsoft.com/blog/2020/10/security-analysis-of-cheri-isa/ https://msrc.microsoft.com/blog/2020/10/security-analysis-of...
- pjmlp 2y agoWhile CHERI isn't, SPARC ADI, and ARM MTE are.
- pizlonator 2y agoThey do https://github.com/pizlonator/llvm-project-deluge/blob/deluge/Manifesto.md https://github.com/pizlonator/llvm-project-deluge/blob/delug... Or https://www.circle-lang.org/site/intro/ https://www.circle-lang.org/site/intro/
- janice1999 2y agoCircle is C++ not C and its Safety proposals are mostly just ideas at the moment.
- pizlonator 2y agoMore than ideas I think, and any safety proposal based on pointer annotations will carry a much higher burden than converting to C++ anyway. Fil-C is more than just ideas though.
- deleted 2y ago[deleted]