Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The area of Rust code that is unsafe is much, much smaller than the amount in equivalent C code, making it much more tractable to audit. I won't pretend that it's perfect, but it's not remotely comparable to C.


There’s no easy bound on the set of code you’d have to audit to confirm that even one use of unsafe is in fact safe.


It's literally THE unsafe part of the code. It's the only part of code that can invoke UB.

  fn do_something() {
      unsafe { ... }
  }

  // Somewhere in the program
  do_something();
Doesn't matter where "do_something" is used and how much. The only possibly problematic part of this code is the unsafe block. You only audit it.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: