3 ms·
Re UB: > The idea seems to be that you can run your program enough times in the checked release modes to have reasonable confidence that there will be no illeg
by vlovich123 11mo ago
Re UB:
> The idea seems to be that you can run your program enough times in the checked release modes to have reasonable confidence that there will be no illegal behavior in the unchecked build of your program. That seems like a highly pragmatic design to me.
This is only pragmatic if you ignore the real world experience of sanitizers which attempt to do the same thing and failing to prevent memory safety and UB issues in deployed C/C++ codebases (eg Android definitely has sanitizers running on every commit and yet it wasn’t until they switched to Rust that exploits started disappearing).
- qouteall 11mo agoCan you provide the source of "(eg Android definitely has sanitizers running on every commit and yet it wasn’t until they switched to Rust that exploits started disappearing)"?
- vlovich123 11mo agoHere’s the report showing the impact has had on memory vulnerabilities in Rust. I guess you’ll have to take my word that they run sanitizers, I don’t know of any good link summarizing their usage, other than it’s listed in AOSP and has instructions on how to use it. https://security.googleblog.com/2025/11/rust-in-android-move-fast-fix-things.html?m=1 https://security.googleblog.com/2025/11/rust-in-android-move... https://source.android.com/docs/security/test/sanitizers https://source.android.com/docs/security/test/sanitizers