51
Bugs Rust Won't Catch | corrode Rust Consulting - Analysis of Rust Coreutils (uutils) Bugs (corrode.dev)
submitted 6 months ago by to c/linux@lemmy.ml
6 comments fedilink hide all child comments
 

I’m not writing this to criticize the uutils team. Quite the contrary; I actually want to thank them for sharing the audit results in such detail so that we can all learn from them.

you are viewing a single comment's thread
view the rest of the comments
[–] [S] 3 points 6 months ago* (last edited 6 months ago)

It could be improved. Sebastian Wick and Lennart Poettering made comments on how hard POSIX makes it hard to be secure. There are better APIs that try to be safer.

And since uutils is not Linux only, it can't use these safer APIs directly, or at least not without writing more platform-specific code.

  • permalink
  • fedilink
  • source
  • parent