Eliminating Memory Safety Vulnerabilities at the Source
security.googleblog.com
Posted by Jeff Vander Stoep - Android team, and Alex Rebert - Security Foundations Memory safety vulnerabilities remain a pervasive threa...
  • @[email protected]
    19•3 months ago

    I’m not sure where the Linux kernel part comes from, but if I open the article and search for “linux” or “kernel”, there are no matches…

    • LeafletOPEnglish
      21•3 months ago

      Android uses forked versions of the Linux kernel, based on Linux LTS versions. They added in Rust support in 2019 and most new code since then has been written in Rust in order to avoid memory safety vulnerabilities. And memory safety vulnerabilities have been significantly down since 2019.

      Now that upstream Linux is adopting Rust, we should hopefully see a similar results. Though likely slower than Google (they went all-in on Rust) while upstream Linux new code will seemingly be mainly C for the foreseeable future.

      • @[email protected]English
        5•3 months ago

        Now that upstream Linux is adopting Rust,

        is it? From what I read the old kernel developers are really opposing it

        • LeafletOPEnglish
          18•3 months ago

          Linux support is definitely moving slower than the Rust team wants, but the team and Linus are still optimistic.