4 ms·
Why just consider? Hell yes. Anything that has remotely something to do with user-supplied data should be done in Rust, especially for such a high profile piec
by justmarc 2y ago
Why just consider? Hell yes.
Anything that has remotely something to do with user-supplied data should be done in Rust, especially for such a high profile piece of software.
- amelius 2y agoRust adds a lot of complexity (a new language) and does not even offer a general approach to automated correctness verification (not saying that C++ is better in this regard). Maybe it is just better to wait for Rust++.
- SahAssar 2y agoRust is already in the firefox codebase (hell, it was basically invented to be used in firefox) so it doesn't add any complexity.
- dwattttt 2y agoRust is not a new language for Firefox, some of Firefox is already written in Rust.
- pornel 2y agoRust is much better suited to static analysis and formal verification than C++, primarily thanks to stricter pointer aliasing, immutability without loopholes of const, and thread safety annotations in the type system. Most things that are advanced correctness verification in C++ are regular compiler errors in Rust.
- deleted 2y ago[deleted]
- Omin 2y agoThey are not on the fence about Rust. They are on the fence about JPEG-XL when it entails a major increase in attack surface due to the current implementation being in C++.
- johnisgood 2y agoOr Ada / SPARK which is widely used in production for critical-systems.