Elektrine lite

← Feed

@Suiseiseki@freesoftwareextremist.com

Post #1091173

2026-04-12 10:37 UTC

@squid64 Firefox uses Rust. Use after free and bounds checking are often the only bugs left is well developed GNU C projects and well that's a simple matter of fixing the mistake and the bug is fixed. Using Rust for a big project will result in exponentially more security issues than using GNU C, as the more syntactical tokens required to implement certain functionality, the greater the number of bugs you have. Remember that most bugs are logic bugs - not memory bugs. Memory bugs are easy to find and fix, while logic bugs are not. The borrow checker in Rust pretty much forces the programmer to implement logic bugs - but the resulting program is so complicated, it's very difficult to find them.

Replies (1)

  • @squid64@fedi.squid64.ca 2026-04-12 13:38

    Just look at the CVEs for Firefox most of them are memory bugs. And yeah Firefox does have some rust code but its only like 10% and the rest is C, C++ and JavaScript

    Open ##1093767