验证 Rust 标准库的安全性.pdf

《验证 Rust 标准库的安全性.pdf》由会员分享，可在线阅读，更多相关《验证 Rust 标准库的安全性.pdf（35页珍藏版）》请在三个皮匠报告上搜索。

1、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.I N V 5 1 8Verifying the safety of theRust standard libraryRahul KumarHe/HimMichael TautschnigHe/Him 2025,Amazon Web Services,Inc.or its affiliates.All rights reserv

2、ed.Safety of the Rust Standard LibraryCore and std crates contain 27k+functions7377:Unsafe Functions2365:Safe AbstractionsSafe Functions64%Safe Abstractions9%Unsafe Functions27%Usage of Unsafe in the Rust Standard Library 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Safety of t

3、he Rust Standard LibraryReally SafeFunctions17%Transitive Unsafe47%Safe Abstractions9%Unsafe Functions27%Usage of Unsafe in the Rust Standard LibraryCore and std crates contain 27k+functions7377:Unsafe Functions2365:Safe Abstractions23k+:Transitive unsafe dependencies 2025,Amazon Web Services,Inc.or

4、 its affiliates.All rights reserved.Why verify the standard library?Bugs in the standard library undermine trust in Rusts guaranteesFoundation for verifying Rust applications:95%of crates on crates.io code use the Rust standard library6922Soundness issues in the Standard Library have been reportedCV

5、Es related to the Std Library(since 1.0)2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.What is this work about?Strengthen Rusts safety guarantees by crowd sourcing the verification of the Rust standard library.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Con

6、test$5K-25K reward for solutions$40K for tools.ChallengeSolutionTechnical Review CommitteeRewards Committee 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.8ChallengeGoalMotivationSuccess Criteria 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Notable Results94