User Profile

[ultimA]

Of course not and I know that too. This was a rhetorical question, meant to point out how wrong their argument is. Because if it was true what they said...

[ultimA]

You are conveniently grabbing onto a single example that happens to not contradict your point. Even if the motivation of replacing C++ with Rust in Firefox's...

[ultimA]

You cannot mean this seriously! When I said "come and explain it" I meant provide some plausible explanation, not some random brainfart. You...

[ultimA]

True, yes, but that would imply the bugs are found in the Rust part. Unsafe blocks, C/Rust interfaces, better compiler diagnostics, are the stuff that...

[ultimA]

If there is a "bottleneck on the time of skilled bug-finders doing the looking", that means less bugs will be found, because basically there...

[ultimA]

mdedetrich You come and accuse people of being deceptive, shoddy, not having even the faintest understanding etc. but the fact is it is perfectly logical:...

[ultimA]

I never compared Rust to C. I agree 100%, C is ridiculously bad in this aspect. However, the memory-safety difference between idiomatic Rust and idiomatic...

[ultimA]

Now don't mistake me. I'm not saying this is the destiny of all Rust projects. Of course it is possible to write Rust code which is completely safe. Projects...

[ultimA]

Yes, now go and tell this kernel developers. Or to Mozilla. Or to all crate developers who have already committed this "crime" numerous times....

[ultimA]

The CVE summary states it is a memory corruption bug. How it comes to be is irrelevant.



Not being able to continue execution...

[ultimA]

As you command, my lord. CVE-2021-23987. Purely rust, memory corruption.
Too bad you didn't check all. You cannot just check a small portion of...

[ultimA]

I just explained in the post that you answered to what the reasoning is, why it must be. And no, those other "possible" reasons you name cannot...

[ultimA]

I didn't but no need. The point is if we assume that the part of C++ code that was rewritten in Rust had percentage-wise as many memory-issues before...

[ultimA]

The list was created by simply searching for Rust, so there is a small number of false positives there which aren't Rust. But if you take a look at that...

[ultimA]

Sorry, double-post.

[ultimA]

Sure, and because it is not completely written in Rust, I am not expecting Firefox to be free of memory-related issues. But if it is 20% Rust, I do expect...

[ultimA]

But is Rust's security really that much better? -O3 is irrelevant (I don't care about that either), but as for security, real world shows Rust's most...

[ultimA]

I'm questioning the effectiveness and rationale as a whole. I know this is only a sw-layer change, but isn't the problem unfixable even on the hw-level?...

[ultimA]

How does this prevent information leakage? SSDs do wear-levelling and LBA remapping all the time, so even though the information gets deleted under the...