|
|
|
|
|
|
by panick21_
14 days ago
|
|
|
Can you show me that research? Also, nothing new in C is just not happening, there is massive amounts of things that will not switch for decades. Why not just switch to a slightly different compiler and core, and then you make all your old code safe without verifying it. And your new code in whatever language is also safe. Also it helps with debugging. Also it helps you enforce security constraints on higher level. CHERI also gives you features you can build more on-top off. The silicon area and the performance hit are pretty minor, if it 'just' works for most code and most open source code just works, many people will want to use it. Yes most bugs are new code, but plenty of bugs aren't and with CHERI I can be much more confident in running all that stuff. Specially older code that isn't as well used and tested as say Linux kernel. |
|
|
You don't even need a new core. Fil-C makes regular old (and new) C code memory-safe. You can use it for individual apps on your existing OS, or Filip Pizło has been making an entire distro work with it ... libc, bash, ssh ... everything. He's got web browsing working and at the moment is working on LibreOffice. Many things work as-is, most things require very minor patches (which he's upstreaming).
Unlike Rust, there is no "unsafe" escape hatch (and it's not needed).
Follow https://x.com/filpizlo for progress.