63
you are viewing a single comment's thread
view the rest of the comments

Given that this issue has been shared online and is currently getting quite a few visitors, here's some additional context.

Rust's type system is intended to prevent memory unsafety. Upholding this promise is something we take very seriously, which is why we've been working on things like the next-generation trait solver, the region constraint rework, and more generally Project Zero. It is a large priority of the Types Team to fix all type system unsoundnesses and to work towards there being a solid foundation to minimize the risk of unknown ones.

This bug is a P-high issue and would have been P-critical regardless of whether people encountered it in the wild. The reason that it is "only P-high" is that it's 11 years old. A bug like this which has not been found during the last 11 years cannot actually be that easy to hit.

Looking at the bug itself, it is also very likely that this unsoundness has not caused memory unsafety by accident. While it looks easy to trigger, to exploit this you need an intentionally malicious Drop implementation.

[-] glimse@lemmy.world 9 points 1 day ago

A bug like this which has not been found during the last 11 years cannot actually be that easy to hit.

Not sure why but I found this completely justified reasoning to be very funny. Getting ahead of the people complaining that it needs fixing NOW by saying, correctly, "it's not that serious"

[-] thedeadwalking4242@lemmy.world 7 points 1 day ago

I do this at work all the time "this tech has been available to us for the past 20 years and you did nothing with it, now you want it done in a year?"

this post was submitted on 14 Oct 2026
63 points (100.0% liked)

Programming

28830 readers
298 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev



founded 3 years ago
MODERATORS