Comment on Linux Kernel Rust Code Sees Its First CVE Vulnerability
vrighter@discuss.tchncs.de 6 hours agodoesn’t change anything if you can’t avoid having to write the unsafe parts
Comment on Linux Kernel Rust Code Sees Its First CVE Vulnerability
vrighter@discuss.tchncs.de 6 hours agodoesn’t change anything if you can’t avoid having to write the unsafe parts
nsfw936421@lemmynsfw.com 5 hours ago
It certainly does. It’s way simpler to keep up all invariants and to review the few percent lines of code in unsafe blocks than making sure that the 30 million lines of code are free of undefined behavior.
Is some part of the code it battle tested of course it’s complete unreasonable to rewrite it in any language, but if you have to do a major rewrite anyway or write a new component you should definitely use a memory safe language. And no it doesn’t matter that there is an unsafe escape hatch because it’s literally impossible to write low level kernel stuff or FFI to other languages without unsafe because Rust can’t uphold/guarantee the invariants of the hardware itself or the behavior of other languages.