Remix.run Logo
procaryote 15 hours ago

If you can rely on memory errors panicing before the memory error can have an effect, you're memory safe. Memory safety doesn't require "can't crash".

Too 11 hours ago | parent | next [-]

From a definition point of view that might be right and it’s no doubt a good step up, compared to continuing with tainted data. In practice though, that is still not enough, these days we should expect higher degree of confidence from our code before it’s run. Especially with the mountains of code that LLMs will pour over us.

procaryote 4 hours ago | parent [-]

It's a nice ambition, but it's a different thing than memory safety

seabrookmx 15 hours ago | parent | prev [-]

Exactly. Or Rust wouldn't be memory safe due to the existence of unwrap().

Not that crashing can't be bad, as we saw recently with Cloudflare's recent unwrap-based incident.

brabel 9 hours ago | parent [-]

Even without unwrap, Rust could still crash on array out of bounds access. And probably more similar cases.