MacMusic  |  PcMusic  |  440 Software  |  440 Forums  |  440TV  |  Zicos
rust
Search

Rustproofing Linux (nccgroup)

Wednesday February 8, 2023. 04:54 PM , from LWN.net
The nccgroup blog is carrying a
four-part series by Domen Puncer Kugler on how vulnerabilities can make
their way into device drivers written in Rust.

In other words, the CONFIG_INIT_STACK_ALL_ZERO build
option does nothing for Rust code! Developers must be cautious to
avoid shooting themselves in the foot when porting a driver from C
to Rust, especially if they previously relied on this config option
to mitigate this class of vulnerability. It seems that kernel info
leaks and KASLR bypasses might be here to stay, at least, for a
little while longer.
https://lwn.net/Articles/922638/
News copyright owned by their original publishers | Copyright © 2004 - 2024 Zicos / 440Network
Current Date
Apr, Thu 25 - 13:07 CEST