Localised bugs [LWN.net]

Localised bugs

Posted Sep 26, 2024 10:00 UTC (Thu) by gmatht (subscriber, #58961)
In reply to: New Tools by Wol
Parent article: Resources for learning Rust for kernel development

As I understand, bugs in safe rust are likely only to affect the module in which the bugs occur (and which call the affected module, etc). For example, if you had an intern who was a bit of a space cadet, you could get them to clean up the gazpacho soup module. Sure, the soup dispenser might start endlessly dispensing "trout a la creme", but an off-by-one error shouldn't cause the reactor to vent radiation into the crew quarters.

to post comments

Localised bugs

Posted Sep 26, 2024 13:35 UTC (Thu) by pizza (subscriber, #46) [Link] (4 responses)

> but an off-by-one error shouldn't cause the reactor to vent radiation into the crew quarters.

If your reactor core is capable of venting radiation into crew quarters and/or your soup dispenser is connected to the reactor in any way, you have far more serious problems than the language the language used to write their respective control software.

Localised bugs

Posted Sep 26, 2024 14:15 UTC (Thu) by Wol (subscriber, #4433) [Link] (1 responses)

> If your reactor core is capable of venting radiation into crew quarters and/or your soup dispenser is connected to the reactor in any way, you have far more serious problems than the language the language used to write their respective control software.

Doesn't that describe the modern car, though? :-)

Cheers,
Wol

Localised bugs

Posted Sep 26, 2024 15:11 UTC (Thu) by pizza (subscriber, #46) [Link]

> Doesn't that describe the modern car, though? :-)

As someone whose $dayjob currently revolves around SoCs targeting next-gen Automobiles, yes and no.

Yes in the sense that these systems _may_ share common physical communication buses, but No in the sense that when they do, there are figurative (as well as literal) firewalls designed into the overall system to ensure only suitably blessed messages are acted upon by any given component.

That isn't to say that bugs can't occur [1], just that this class of bug is nearly always due to incorrect/incomplete specifications, typically due to poorly-thought-out scope creep [2], not traits of the language used to implement the specification.

[1] I recall reading that someone was able to trigger brake lockup on some Jeep models via their cellular modems
[2] eg by exposing what was once a completely private and trusted bus to the open internet with no authentication to enable remote start capabilities.

Localised bugs

Posted Sep 26, 2024 16:22 UTC (Thu) by james (guest, #1325) [Link]

For what it's worth, I think gmatht was referring to the British sit-com Red Dwarf, where they explored this management failing in depth.

Localised bugs

Posted Oct 14, 2024 9:52 UTC (Mon) by sammythesnake (guest, #17693) [Link]

I think AJ Rimmer's defence council described anyone who would craft such a situation as "a yogurt"...