User Profile

[oleid]

That can be tricky to do as part of a CI pipeline. The variances will be high.
What the rust team does is they also count the number of instructions...

[oleid]

haha, I decompress the zstd archive just to compress it again with btrfs. If only I could skip decompression

[oleid]

Na, I don't think it works that way.
Bugs are looked for if there is a bug report. Assuming we have the same amount of bug hunters as before adding...

[oleid]

with idiomatic rust code you mean 'restricting to safe rust?
Considering C++ - no, C++ is not as safe. Not even if you only use modern C++17...

[oleid]

True, but usually you can contain it and know exactly where to look for...

[oleid]

I'm arguing: if you want safe code, don't use unsafe. Nothing more, nothing less.



And avoid all references. Classic example...

[oleid]

Well, you claimed something and didn't back it up.

The linked bug reports is https://bugzilla.mozilla.org/show_bug.cgi?id=1690718
...

[oleid]

If we are lucky, by the time rust is needed for building the kernel, we have a gcc based rust implementation....

[oleid]

1. You didn't provide rust CVEs for firefox, just some statistics. I checked a few CVEs and they are all in C++ code. So no, guesstimating doesn't help.

...

[oleid]

From what I've heard about the discussion in systemd on adding rust, it is hard to find C maintainers. Probably harder for the kernel.

...

[oleid]

Oh, you just assume those bugs are in rust code, but you actually don't know...



Well, another explanation might be: the tools...

[oleid]

The first was not rust. The 2nd was already in rust code. But if you read what I wrote carefully, I'm not distracting from anything. I explicitly wro...

[oleid]

Well, one would need to analyze what actually happened here in order to properly comment on this. Did you do the analysis and can share it?
...

[oleid]

• A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c [...]
  This is actually C code
• Deno is a runtime for JavaScript

...

[oleid]

Well, Firefox only being 20% rust is part of the problem. Many CVEs in firefox are about dealing with C interfaces in a safe way....

[oleid]

It is there temporarily. To re-build the standard-library with the aforementioned "no abort if allocation doesn't work"-features. And the standard...