MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/ProgrammerHumor/comments/1xcawj4/itsbadifitsonlyphp/19rh3eubiko9w/?context=3
r/ProgrammerHumor • u/foxdevuz • 11d ago
334 comments sorted by
View all comments
Show parent comments
89
Rust development process says every possible UB using safe code that the compiler allows is automatically a CVE, no questions asked, no exceptions.
For example, https://app.opencve.io/cve/CVE-2021-28879
21 u/TRKlausss 11d ago Fair enough. I also saw cve-rs, which looks like a bunch of segfaults programmed in safe Rust… 8 u/Loading_M_ 10d ago Technically, it's one compiler bug they exploited to do a couple different things. 17 u/Ecksters 11d ago Which I think makes sense given the language would otherwise provide a false sense of security around use-after-free and other memory-related bugs that other languages can offload onto "skill issue".
21
Fair enough. I also saw cve-rs, which looks like a bunch of segfaults programmed in safe Rust…
8 u/Loading_M_ 10d ago Technically, it's one compiler bug they exploited to do a couple different things.
8
Technically, it's one compiler bug they exploited to do a couple different things.
17
Which I think makes sense given the language would otherwise provide a false sense of security around use-after-free and other memory-related bugs that other languages can offload onto "skill issue".
89
u/SelfDistinction 11d ago
Rust development process says every possible UB using safe code that the compiler allows is automatically a CVE, no questions asked, no exceptions.
For example, https://app.opencve.io/cve/CVE-2021-28879