Comment

Comment on Maestro, a Linux compatible kernel written in Rust.

nickwitha_k@lemmy.sdf.org ⁨8⁩ ⁨months⁩ ago

I feel like this is an example of innovation vs invention. Rust did not invent borrow checking. It did, however, make the borrow checker an integral part of the language and compiler. Making memory safety the default behavior is innovative and makes it the path of least resistance.

Memory safety issues are responsible not just for crashes and perf degredation but are a significant attack vector for exploits. Making it harder to land there makes these exploitable conditions less common. The mechanism is not unique but its integral place in the language is.

source

Sort:hotnew top

barsoap@lemm.ee ⁨8⁩ ⁨months⁩ ago
It kinda really pioneered its particular kind of memory management. There’s some theoretical ancestry involving ML-based research languages with region typing, stuff like this, but those are ultimately quite different. The rest of the type system is basically a cut-down Haskell (Hindley-Milner with qualified types (typeclasses/traits)), with some minor titbits and fiddling.

source
bacon_pdp@lemmy.world ⁨8⁩ ⁨months⁩ ago
not exactly, as there are rust compilers like mrust that don’t actually have borrow checkers and virtually none of those safety checks actually occur and there is a question of if the gcc rust compiler would be implementing that feature into the compiler.

So, that would be an attribution failure; as it isn’t required by the language but the most popular rust compiler does include that feature.

But yes, more compilers would likely benefit the languages they support by also adopting that feature by default.

source
- QuaternionsRock@lemmy.world ⁨8⁩ ⁨months⁩ ago
  Borrow checking is part of the language specification, and a compiler that does not include it is, by definition, incomplete. The authors of mrust even state this in the project README.
  
  Your claim is roughly equivalent to saying a C compiler which does not produce an error when a program calls an undeclared function means that C as a language does not ensure that your code calls a function that exists.
  
  source