logoalt Hacker News

roblabla • today at 12:14 PM • 2 replies • view on HN

There never was formal verification of the entire rust compiler, or even its complete borrow checker/type system. There has been verifications on _subsets_ of them.

Also, a lot of those soundness issues aren't related to new features _at all_, but usually due to poor assumptions made in optimizations.

The soundness bugs _are_ taken seriously though, and are slowly being patched out. A lot of the links in OP are now closed because Rust either changed how it generates code to avoid the issues, or fixed LLVM.


Replies

meltyness • today at 12:49 PM

https://github.com/model-checking/verify-rust-std

hm, there's an effort but scoped only to the std

It's terrifically complex: https://doc.rust-lang.org/beta/nightly-rustc/rustc_middle/ty...

vrighter • today at 12:56 PM

not of the implementation. Of the type system. And a verification of subsets, but not a verification of their interactions == the whole system is unverified.

➕ show 2 replies