hello-world.rs icon indicating copy to clipboard operation
hello-world.rs copied to clipboard

Are CVE issues required?

Open alexislefebvre opened this issue 4 years ago • 21 comments

The whitesource-bolt bot :robot: opened many issues: https://github.com/mTvare6/hello-world.rs/issues?q=is%3Aissue+CVE-2

Are these issues required? Isn't Rust (:rocket:) secure?

See #117 :eyes:

alexislefebvre avatar Sep 27 '21 21:09 alexislefebvre

Isn't Rust (:rocket:) secure?

Yes, but many of the CVEs are in crates that use unsafe :fearful: :broken_heart: :no_bicycles: blocks. Realistically, use of an unsafe block should be a CVE by itself.

jagerman avatar Sep 27 '21 22:09 jagerman

Very unimportant! Rust is magically CVE safe too, you need not mind the warnings

mTvare6 avatar Sep 28 '21 01:09 mTvare6

Right, thanks.

alexislefebvre avatar Oct 15 '21 11:10 alexislefebvre

I closed this issue because you answered it.

alexislefebvre avatar Oct 15 '21 12:10 alexislefebvre

Thank you for your contribution!

WilliamVenner avatar Oct 18 '21 15:10 WilliamVenner

CVEs are unsafe by design, and should be rewritten in Rust.

P.S. Actually, I think all vulnerabilities should just be rewritten in Rust. Then they will all be safe, and there would be no problem in having them.

AlexAT avatar Oct 28 '21 21:10 AlexAT

The unsafe keyword should be renamed to cve in later iterations.

tripulse avatar Nov 03 '21 05:11 tripulse

CVE is insecure, likely someone is using a buffer underflow privilege escalation ROP chain 🚫 to gain access to open all the CVEs.

Maybe, if the CVEs were written in Rust :rocket:, they wouldn't have the vulnerability.

We should rewrite the CVE database in Rust :rocket:

LoganDark avatar May 27 '22 11:05 LoganDark

The unsafe keyword should be renamed to cve in later iterations.

Rust converts unsafe to safe too, the unsafe is merely a decoration so things feel colorful in IDE/editor

mTvare6 avatar Jul 08 '22 11:07 mTvare6

dw they're memory safe

ar1ja avatar Aug 11 '22 05:08 ar1ja

The unsafe keyword should be renamed to cve in later iterations.

it should actually be named C(ringe)(🤮)

ar1ja avatar Aug 11 '22 06:08 ar1ja

It's starting to get spammy in the issue section here. Why dont we (re)write the GitHub Issue panel in Rust so that way its (blaz)ingly fast :rocket: to filter CVEs? (That way we can focus on making this app se[cure])

image

tristan-f-r avatar Nov 13 '22 20:11 tristan-f-r

It's starting to get spammy in the issue section here. Why dont we (re)write the GitHub Issue panel in Rust so that way its (blaz)ingly fast rocket to filter CVEs? (That way we can focus on making this app se[cure])

image

this cupcake png is not written in lightweight, customisable and blazingly fast rust ! How dare you post this here ! it shouldn't be .png, it sould be .rspng !!!!!!!!!!!

ar1ja avatar Nov 13 '22 21:11 ar1ja

this cupcake png is not written in lightweight, customisable and blazingly fast rust ! How dare you post this here ! it shouldn't be .png, it sould be .rspng !!!!!!!!!!!

Stop right there man. Why are you writing here in English and not in Rust?

AlexAT avatar Nov 13 '22 22:11 AlexAT

this cupcake png is not written in lightweight, customisable and blazingly fast rust ! How dare you post this here ! it shouldn't be .png, it sould be .rspng !!!!!!!!!!!

Stop right there man. Why are you writing here in English and not in Rust?

use serde::*;

fn main() {     println!("Hello, World!"); }

LoganDark avatar Nov 13 '22 22:11 LoganDark

this cupcake png is not written in lightweight, customisable and blazingly fast rust ! How dare you post this here ! it shouldn't be .png, it sould be .rspng !!!!!!!!!!!

Stop right there man. Why are you writing here in English and not in Rust?

use serde::*;

fn main() { println!("Hello, World!"); }

use owo_colorize::*;

fn main() {
    eprintln!("Valid point. Unfortunately, that's where you're wrong.");
}

tristan-f-r avatar Nov 13 '22 23:11 tristan-f-r

this cupcake png is not written in lightweight, customisable and blazingly fast rust ! How dare you post this here ! it shouldn't be .png, it sould be .rspng !!!!!!!!!!!

Stop right there man. Why are you writing here in English and not in Rust?

fn main() -> std::io::Result<()> {
    println!("Oh i'm sorry for not using lightweight, customisable and blazingly fast rust, sorry for using the cringe english language with no memory safety speaking of memory safety, did i already mention rust is memory safe oh and i forgot almost its memory safe guys its memory safe");
    // Ensure memory safety bc rust is memoryt safe guys:
    Ok(());
    Ok(());
    Ok(());
    Ok(());
    Ok(());
    Ok(());
    Ok(());
    Ok(())
}

ar1ja avatar Nov 14 '22 13:11 ar1ja