Hal-5700XDec 17

Linux Kernel Rust Code Sees Its First CVE Vulnerability

https://sh.itjust.works/post/51782957

Linux Kernel Rust Code Sees Its First CVE Vulnerability - sh.itjust.works

Lemmy

Show threadjohn_tDec 18
No one said rust was invulnerable.
Show threadpryreDec 18
I think the other takeaway here is that it was found in a section marked “unsafe”. At the very least, that’s a useful tool for the Devs to isolate potential problem areas. Comparing that to a pure C codebase where the problem could be anywhere.
Show threadhummingbirdDec 19
The funny part is: the fix does not change the unsafe block at all. The issue is elsewhere in safe rust code.
Show threadpryre

I’ll admit, I haven’t looked at the code. I would stand by my comment of the unsafe block being a start point.

Countering that however, what is the difference to just debugging effectively? Not sure. I suppose it’s down to the people that identified it and fixed it at the end of the day to say if there was any benefit.

Dec 19 at 8:41amWeb