top | item 46513411

(no title)

erk__ | 1 month ago

A quick unscientific count on cve.org counts ~86 race condition CVEs in the Linux kernel last year, so you might be overstating how well bug antennas work.

discuss

order

antirez|1 month ago

If the kernel was completely written in Rust, we could have a lot of unsafe places, and many Rust CVEs. It is hard to tell, and the comparison in theory should be made after the kernel is developed only by people lacking the C experience that made the current developers so able to reason about race conditions (also when they write Rust).

Certhas|1 month ago

That's quite the double standard. You extrapolate from one single Rust bug, but insist that "it's hard to tell" and you need completely unrealistic levels of empirical evidence to draw conclusions from the reported C bugs...

Reminds me of this classic: "Beware Isolated Demands For Rigor" (https://slatestarcodex.com/2014/08/14/beware-isolated-demand...)

atherton94027|1 month ago

86 race conditions compared to what baseline? This is a bit meaningless without benchmarking against other kernels

staticassertion|1 month ago

It's 1 compared to 86, 86 is the baseline.