In the end, coding kernel code in Rust is a *huge* change from coding C. With C you have two options:<li>Wing it and either hope reviewers catch it or suffer debugging subtle oopses</li><li>Spend hours understanding the code before you dare use it, and hope you caught everything.</li>
This adds extra reviewer and maintainer workload too! It means that they need to review submissions to ensure they follow all these hidden rules that aren't documented. Sometimes they miss things. Sometimes the problem is major enough the code needs a big refactor.
All that just goes away with Rust. Poof. Gone. If it compiles it's safe and won't oops or leak references (except unsafe code, but then you only have to review THAT and the rule is it has to be carefully documented).
Of course we still need code reviews, and help from experts in specific subsystems. Rust doesn't magically make code perfect.
But it does get rid of all the silly low level problems and mistakes, so you can focus on the high level ones.
Asahi Lina (朝日リナ) // nullptr::live /
npub1cx…z6wtz
2024-08-31 11:44:54
in reply to nevent1q…94u8
Author Public Key
npub1cxqje22r8ewnr30rt625d58cr8gpdjnw405cq5765m2qsvghnmpquz6wtzSeen on
wss://relay.noswhere.comPublished at
2024-08-31 11:44:54Event JSON
{
"id": "5cf04069a0734eb1c029f9c17a622c1fb88b67767fa4b0d3641406e4487de69c",
"pubkey": "c1812ca9433e5d31c5e35e9546d0f819d016ca6eabe98053daa6d40831179ec2",
"created_at": 1725104694,
"kind": 1,
"tags": [
[
"p",
"c1812ca9433e5d31c5e35e9546d0f819d016ca6eabe98053daa6d40831179ec2"
],
[
"e",
"b853271c1960b8ee9ad9bbd5e5d71cf93dab8ec3348aabdd9d441d592923e6e6",
"",
"root",
"c1812ca9433e5d31c5e35e9546d0f819d016ca6eabe98053daa6d40831179ec2"
],
[
"e",
"704527fad6ec54779436572574ec949cccb40628fac337a641234f8e920ca056",
"",
"reply",
"c1812ca9433e5d31c5e35e9546d0f819d016ca6eabe98053daa6d40831179ec2"
],
[
"proxy",
"https://vt.social/@lina/113056461227971610",
"web"
],
[
"proxy",
"https://vt.social/users/lina/statuses/113056461227971610",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://vt.social/users/lina/statuses/113056461227971610",
"pink.momostr"
],
[
"-"
]
],
"content": "In the end, coding kernel code in Rust is a *huge* change from coding C. With C you have two options:\u003cli\u003eWing it and either hope reviewers catch it or suffer debugging subtle oopses\u003c/li\u003e\u003cli\u003eSpend hours understanding the code before you dare use it, and hope you caught everything.\u003c/li\u003e\n\nThis adds extra reviewer and maintainer workload too! It means that they need to review submissions to ensure they follow all these hidden rules that aren't documented. Sometimes they miss things. Sometimes the problem is major enough the code needs a big refactor.\n\nAll that just goes away with Rust. Poof. Gone. If it compiles it's safe and won't oops or leak references (except unsafe code, but then you only have to review THAT and the rule is it has to be carefully documented).\n\nOf course we still need code reviews, and help from experts in specific subsystems. Rust doesn't magically make code perfect.\n\nBut it does get rid of all the silly low level problems and mistakes, so you can focus on the high level ones.",
"sig": "1254e7b9e514cbea7401ffd188bb75714848f4eaef57a0dc5e157655bbdd16a3bda1bba5145d1b5cd031bb7b563cb64c44d7c8a6611b7be8d8989bef8a6d9efe"
}