3 ms·
Rust is able to be almost (unsafe blocks) free of segfaults without runtime overhead. That's the core feature that Rust provides with lifetimes. The Rust compi
by Havvy 12y ago
Rust is able to be almost (unsafe blocks) free of segfaults without runtime overhead. That's the core feature that Rust provides with lifetimes.
The Rust compiler can (and does) have bugs, but they get weeded out over time. But so can whatever proof system or proof checker is used on SEL4.
As for integer overflow, yeah...that's a hard problem with Rust, and unfortunately, unlikely to be fixed.
- MichaelGG 12y agoAren't bounds checks and unwinding examples of non-free safety code in Rust?
- kibwen 12y agoUnwinding is only potentially unsafe if you're already using `unsafe` blocks. If you're sticking to safe Rust, unwinding can't cause memory unsafety.
- steveklabnik 12y agoYou can largely eliminate bounds checks by using iterators.