this post was submitted on 12 Apr 2024
35 points (80.7% liked)

Open Source

31028 readers
621 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS
 

"Anything that can be written in Rust will eventually be written in Rust"

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 19 points 6 months ago (2 children)

Can you share what would be a concrete example of the risk taken by running a RM program with a memory leak or dangling pointers? I fail to see, by my own ignorance, the benefit of memory safety everywhere. But I do enjoy the rust rewrites of shell tools because of the ergonomics, speed, and new functionalities. I'm asking because the first thing you mentioned as a benefit was memory safety.

[–] [email protected] 7 points 6 months ago* (last edited 6 months ago)

This probably isn't the answer you're looking for, but vpr being memory-safe isn't a benefit that it has over rm, since rm apparently doesn't allocate any memory (as @[email protected] wrote).

the first thing you mentioned as a benefit was memory safety.

Looks like I worded my project description poorly. As I wrote in another comment, I meant that this alternative is memory-safe (being written in safe Rust), but not that rm isn't.

edit: I've updated the post's title to clear things up

[–] [email protected] 7 points 6 months ago

Unfortunately, I don’t remember the source so we may need to go digging. But I recall reading that something like 1/3 of all bugs are related to memory safety. And those bugs translate to things like buffer overflow and privilege escalation attacks.

The proclaimed advantage is that by making the entirety of Rust memory safe, that entire class of bugs simply won’t exist for projects written in Rust. When they do happen, the bugs will be addressed by the language rather than many thousands of downstream projects. It should be an enormous gain in development performance for the world.

I think the idea makes sense. Time will tell us how well that works.