29 ms·
My claim is that's not actually very useful for ensuring the correctness of code, since Rust doesn't dependent typing.
by duped 2y ago
My claim is that's not actually very useful for ensuring the correctness of code, since Rust doesn't dependent typing.
- AlotOfReading 2y agoCorrectness of safety critical code (and others) is about more than just memory and logical safety. Imagine your brake control module is running rust and something unwinds. Now your time budget is being spent unwinding the stack and you're probably going to run into a watchdog halfway through, forcing a reboot and possibly escalating into a hard stop depending on the safety model. You can imagine similar issues with cryptography for example, or network stacks. I'm not saying that lint should be enabled by default. It's a highly specialized config, but it's an important protection when it's useful.