3 ms·
It's difficult to say if a kernel written in rust would not have similar vulnerabilites, because it would be impossible to build a kernel without significant am
by efficax 3mo ago
It's difficult to say if a kernel written in rust would not have similar vulnerabilites, because it would be impossible to build a kernel without significant amounts of `unsafe`.
- anoneng 3mo agoOh it’s possible and people do it in embedded all the time at great expense, but that safety isn’t assured by using a “safe” language, it comes from the requirements, documentation and verification process. OpenBSD’s kernel was developed with security in mind but not that level of safety.
- efficax 3mo agoNot really sure what you mean? You have to use `unsafe` in Rust to access arbitrary mutable pointers. How would you do DMA, or write a device driver, without `* mut T`
- anoneng 3mo agoI’m referring to use of process (sometimes with a partial assist from qualified tools, of which Rust is NOT one) for safety assurance, not the language. As is done in safety and security critical embedded contexts. eg DO-178, Common Criteria, etc.