Prossimo, chirongwa cheISRG chekuchengetedza Linux kernel memory neRust

Josh Aas, CEO weInternet Security Research Boka (ISRG, musangano wevabereki weiyo Let Encrypt chirongwa) akazivisa vhiki rapfuura nekutumira zvinangwa zvake zvekutsigira Miguel Ojeda (Linux kernel yekuvandudza uye software injinjini), ine chinangwa chekubatanidza kuyedza kuendesa yakakosha software zvivakwa kune memory-yakachengeteka kodhi.

Uye ndeyekuti ISRG yakapa mushambadzi akakurumbira Miguel Ojeda a gore rimwe chibvumirano chekushanda paRust paLinux uye kumwe kuzere-kwekuchengetedza kwekuedza.

Sekureva kwaMiguel Ojeda, mabhenefiti ekuunza mutauro Ngura pane iyo Linux kernel kudarika zvinodhura. Zvemugadziri, kana uchishandisa Rust pane iyo Linux kernel, kodhi nyowani yakanyorwa muRust ine njodzi yakadzikira yekukanganisa kuchengetedzwa kwendangariro, nekuda kwezvivakwa zvemutauro weRust. Mutauro weRust waizove unozivikanwa nekuda kwekuchengeteka kwawo.

Kuedza kuita Rust mutauro unoshanda weLinux kernel kuvandudza kwakatanga paLinux Plumbers 2020 musangano, ine pfungwa yaLinus Torvalds iye.

Torvalds akanyatsokumbira kuwanikwa kweiyo Rust compiler mune yakasarudzika kernel kuvaka nharaunda kutsigira kwakadaro kuedza, kwete kutsiva ese Linux kernel sosi kodhi neRust-yakagadzirwa zvakaenzana, asi kubvumidza kuvandudzwa kutsva kushanda nemazvo.

Kushandisa Rust yekodhi nyowani mu kernel kunogona kureva madhiraivha matsva kana kunyange kutsiva GNU Coreutils, zvingangoita kudzikamisa huwandu hweyakavanzika kernel bugs. Ngura haingabvumiri mugadziri kuburitsa ndangariro kana kuumba mukana wekuti buffer ifashukire, sosi huru dzekuita, uye nenyaya dzekuchengetedza mune yakaoma C-mutauro kodhi.

Chibvumirano chitsva Internet Security Yekutsvagisa Boka inopa Ojeda mubhadharo wenguva yakazara kuti aenderere mberi nebasa rekuchengetedza ndangariro Ini ndanga ndave kutoita part time. ISRG CEO Josh Aas anoti boka rakashanda padhuze naGoogle injinjiniya Dan Lorenc, uye kuti rutsigiro rwemari rweGoogle rwakakosha kutsigira basa raOjeda.

"Kuedza kukuru kubvisa makirasi ese ezvekuchengetedza matambudziko ndiyo mari yakanaka kwazvo," akadaro Lorenc, achiwedzera kuti Google "inofara kubatsira ISRG kutsigira basa raMiguel Ojeda rekuvandudza kuchengetedzwa kwendangariro. Kernel yemunhu wese».

"Chirongwa chePRRimoimo chekuchengetedza kuchengetedza kweISRG chine chinangwa chekubatanidza kuyedza kufambisa hurongwa hwehurongwa hwakakosha kubva paInternet kuchengetedza kodhi mundangariro. Kana isu tichifunga nezve yakanyanya kunetsa kodhi yeInternet nhasi, iyo Linux kernel iri pamusoro pechinyorwa. Kuunza ndangariro chengetedzo kuLinux kernel ibasa rakakura, asi iyo Rust yeLinux chirongwa chiri kuita nhanho huru. Isu tinofara kuzivisa kuti isu takatanga zviri pamutemo kutsigira iri basa muna Kubvumbi 2021 nekupa Miguel Ojeda kondirakiti yekushanda paRust yeLinux uye kumwe kuzara-kwekuchengetedza kwekuedza kwegore rimwe. Izvi zvakagoneka nerutsigiro rwemari kubva kuGoogle. Asati ashanda neISRG, Miguel aiita basa iri seprojekti yepadivi. Isu tinofara kuita chikamu chedu kutsigira zvigadzirwa zvemadhijitari nekutendera iwe kuti ushande imomo nguva izere.

"Takashanda padhuze naDan Lorenc, injinjini yeGoogle kuita kuti kubatana uku kuvepo."

Basa raOjeda ndiro rekutanga rakatsigirwa chirongwa pasi peProssimo banner yeISRG, asi harisi iro danho rekutanga iro sangano ratora rakanangana nekuchengetedza kukuru kwendangariro. Iyo apfuura zvirongwa zvinosanganisira yakachengeteka TLS module mu-ndangariro yeiyo Apache webhu server, iri-mundangariro yakachengeteka vhezheni yeiyo curl uye ngura dhata rekufambisa dhata, iyo mu-ndangariro yakachengeteka imwe nzira kune ubiquitous OpenSSL network encryption raibhurari.

Sekutsanangura kunoita Josh Aas,

"Kunyangwe ichi chiri chekutanga chekuchengetedza kuchengetedzwa kwekushambadzira kwatakazivisa pasi pezita redu nyowani purojekiti Prossimo, basa redu rekuchengetedza ndangariro rakatanga muna 2020 uye neApache HTTP server, uye kuwedzera zvinowedzera kuraibhurari yeRustls TLS.".

mabviro: https://www.memorysafety.org


Iva wekutanga kutaura

Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa. Raida minda anozivikanwa ne *

*

*

  1. Inotarisira data: AB Internet Networks 2008 SL
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako