undefined | Better HN

0 pointsuecker3mo ago0 comments

Was it? It seems more a fantastic demonstration how the same type of errors can also occur in Rust code.

0 comments

In C this kind of issue is so common it wouldn't raise to the status of "CVE". People would just shrug and say "git gud".

ueckerOP3mo ago

This is certainly not true. But also arguments about "common" are completely misleading as long as there is many orders of magnitude more C code than Rust code.

Certhas3mo ago

Maybe you haven't been paying much attention in this space. Google found empirically that error density in _unsafe_ Rust is still much lower than in C/C++. And only a small portion of code is unsafe. So per LOC Rust has orders of magnitudes fewer errors than C/C++ in real world Android development. And these are not small sample sizes. By now more code is being written in Rust than C++ at Google:

https://security.googleblog.com/2025/11/rust-in-android-move...

But don't take my word for it, you can hear about the benefits of Rust directly from GKH:

www.youtube.com/watch?v=HX0GH-YJbGw

There really isn't a good faith argument here. You can make mistakes in Rust? No one denies that. There is more C code so of course there are more mistakes in C code than in Rust? Complete red herring.

2 more replies

j / k navigate · click thread line to collapse