corpus.blog
42,281 blogs · 5,361,753 posts Claim your blog
Record · corpus.blog/posts/01a08789-803c-7129-942f-6f850fa58d6c

Safety and Soundness in Rust

jacko.io · published 5 March 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at jacko.io Wayback capture
2blogs citing
First cited
1 Dec 2024
Most recent
2 Nov 2025
Rank this month
not ranked
External links
27
Words captured
1,935

Cited by

Blog
In the post
Date
the website of jyn
build system tradeoffs Read at the source ↗
2 Nov 2025
Blog · Jon Seager
Experimenting with Rust, Nix, K6 and Parca Read at the source ↗
1 Dec 2024

Links from this post

Link
Host
https://en.wikipedia.org/wiki/Undefined_behavior
en.wikipedia.org
https://doc.rust-lang.org/reference/behavior-considered-undefined.html
doc.rust-lang.org
Do we need a "Rust Standard"?
blog.m-ou.se
https://ferrous-systems.com/ferrocene/
ferrous-systems.com
https://www.ralfj.de/blog/2020/12/14/provenance.html
ralfj.de
https://github.com/rust-lang/rust/issues/95228
github.com
https://github.com/rust-lang/miri
github.com
Observational equivalence and unsafe code Read at the source ↗
smallcultfollowing.com
https://doc.rust-lang.org/stable/std/thread/fn.scope.html
doc.rust-lang.org
https://github.com/rust-lang/unsafe-code-guidelines/issues/379
github.com
https://github.com/rust-lang/rust/issues/25860
github.com
https://plv.mpi-sws.org/rustbelt/
plv.mpi-sws.org
https://research.ralfj.de/thesis.html
research.ralfj.de
https://godbolt.org/
godbolt.org
https://play.rust-lang.org/?version=stable&mode=debug&edition=2021&code=static+BYTES%3A+%26%5Bu8%5D+%3D+b%22hello+world%22%3B%0A%0Afn+foo1%28index%3A+usize%29+-%3E+u8+%7B%0A++++BYTES%5Bindex%5D%0A%7D%0A%0Afn+main%28%29+%7B%0A++++let+index%3B+%2F%2F+uninitialized%0A++++foo1%28index%29%3B%0A%7D%0A
play.rust-lang.org
https://play.rust-lang.org/?version=stable&mode=debug&edition=2021&code=use+std%3A%3Amem%3A%3AMaybeUninit%3B%0Ause+std%3A%3Aptr%3A%3Acopy_nonoverlapping%3B%0A%0Afn+foo1%28_index%3A+usize%29+%7B%0A++++%2F%2F+The+body+here+doesn%27t+matter.+In+this+example+it%27s+empty.%0A%7D%0A%0Afn+main%28%29+%7B%0A++++%2F%2F+Note+that+we+*don%27t*+use+mem%3A%3Aunitialized%28%29+or+MaybeUninit%3A%3Aassume_init%28%29%0A++++%2F%2F+here%2C+because+we+want+to+demonstrate+UB+on+line+22+below%2C+and+either+of%0A++++%2F%2F+those+approaches+would+actually+be+UB+right+here%2C+because+returning+an%0A++++%2F%2F+uninitialized+integer+is+considered+%22using%22+it+%28today%29.%0A++++let+mut+index+%3D+0%3B%0A%0A++++%2F%2F+Copy+an+uninitialized+value+into+%60index%60.+Because+%60copy_nonoverlapping%60%0A++++%2F%2F+is+allowed+to+handle+uninitialized+values%2C+this+isn%27t+per+se+UB+%28today%29.%0A++++%2F%2F+The+C+equivalent+of+%60copy_nonoverlapping%60+is+%60memcpy%60.%0A++++unsafe+%7B%0A++++++++copy_nonoverlapping%28MaybeUninit%3A%3Auninit%28%29.as_ptr%28%29%2C+%26mut+index%2C+1%29%3B%0A++++%7D%0A%0A++++%2F%2F+Even+though+the+body+of+%60foo1%60+is+empty%2C+calling+it+with+an+uninitialized%0A++++%2F%2F+argument+is+UB+%28today%29.+If+you+run+this+with+Tools-%3EMiri+above%2C+it+fails%0A++++%2F%2F+on+this+line.%0A++++foo1%28index%29%3B%0A%7D%0A
play.rust-lang.org
https://news.ycombinator.com/item?id=35035347
news.ycombinator.com
https://play.rust-lang.org/?version=stable&mode=debug&edition=2024&code=static+BYTES%3A+%26%5Bu8%5D+%3D+b%22hello+world%22%3B%0A%0Apub+unsafe+fn+foo2%28index%3A+usize%29+-%3E+u8+%7B%0A++++*BYTES.as_ptr%28%29.add%28index%29%0A%7D
play.rust-lang.org
https://play.rust-lang.org/?version=stable&mode=debug&edition=2021&code=static+BYTES%3A+%26%5Bu8%5D+%3D+b%22hello+world%22%3B%0A%0Aunsafe+fn+foo2%28index%3A+usize%29+-%3E+u8+%7B%0A++++*BYTES.as_ptr%28%29.add%28index%29%0A%7D%0A%0Afn+main%28%29+%7B%0A++++foo2%280%29%3B%0A%7D%0A
play.rust-lang.org
https://play.rust-lang.org/?version=stable&mode=debug&edition=2021&code=static+BYTES%3A+%26%5Bu8%5D+%3D+b%22hello+world%22%3B%0A%0Afn+foo2%28index%3A+usize%29+-%3E+u8+%7B%0A++++*BYTES.as_ptr%28%29.wrapping_add%28index%29%0A%7D
play.rust-lang.org
https://play.rust-lang.org/?version=stable&mode=debug&edition=2021&code=static+BYTES%3A+%26%5Bu8%5D+%3D+b%22hello+world%22%3B%0A%0Afn+foo3%28index%3A+usize%29+-%3E+u8+%7B%0A++++unsafe+%7B%0A++++++++*BYTES.as_ptr%28%29.add%28index%29%0A++++%7D%0A%7D%0A%0Afn+main%28%29+%7B%0A++++%2F%2F+Use+an+index+that%27s+way+too+large.+In+debug+mode%2C+this+will+segfault.+If%0A++++%2F%2F+you+run+it+with+Tools+-%3E+Miri+in+the+top+right%2C+Miri+will+print+an%0A++++%2F%2F+%22out-of-bounds+pointer+arithmetic%22+error.%0A++++foo3%280xffffffff%29%3B%0A%7D%0A
play.rust-lang.org
https://play.rust-lang.org/?version=stable&mode=debug&edition=2021&code=static+BYTES%3A+%26%5Bu8%5D+%3D+b%22hello+world%22%3B%0A%0Afn+foo3%28index%3A+usize%29+-%3E+u8+%7B%0A++++unsafe+%7B%0A++++++++*BYTES.as_ptr%28%29.add%28index%29%0A++++%7D%0A%7D%0A%0Afn+foo4%28index%3A+usize%29+-%3E+u8+%7B%0A++++foo3%28index%29%0A%7D%0A%0Afn+main%28%29+%7B%0A++++%2F%2F+Use+an+index+that%27s+way+too+large.+In+debug+mode%2C+this+will+segfault.+If%0A++++%2F%2F+you+run+it+with+Tools+-%3E+Miri+in+the+top+right%2C+Miri+will+print+an%0A++++%2F%2F+%22out-of-bounds+pointer+arithmetic%22+error.%0A++++foo4%280xffffffff%29%3B%0A%7D%0A
play.rust-lang.org
https://play.rust-lang.org/?version=stable&mode=debug&edition=2021&code=static+BYTES%3A+%26%5Bu8%5D+%3D+b%22hello+world%22%3B%0A%0Aunsafe+fn+foo3%28index%3A+usize%29+-%3E+u8+%7B%0A++++*BYTES.as_ptr%28%29.add%28index%29%0A%7D%0A%0Afn+foo4%28index%3A+usize%29+-%3E+u8+%7B%0A++++foo3%28index%29%0A%7D
play.rust-lang.org
Memory Safe Languages in Android 13 Read at the source ↗
security.googleblog.com
https://www.reddit.com/r/rust/comments/11j8k8d/safety_and_soundness_in_rust/?
reddit.com
https://news.ycombinator.com/item?id=35032915
news.ycombinator.com
https://lobste.rs/s/tpstyz/safety_soundness_rust
lobste.rs