Ukugqwala sekuvele kuyintandokazi yokuthuthuka kwe-Android

I-Google ivuliwe muva nje ukuthambekela ulimi lokuhlela Ukugqwala phakathi kwezilimi ezivunyelwe yokuthuthuka kwe-Android.

Njengoba i-Rust compiler ifakiwe esihlahleni somthombo we-Android ngo-2019, kepha ukwesekwa kolimi kwaqhubeka kungukuhlola. Ezinye zezinto zokuqala zeRust ezizothunyelwa ku-Android ukusetshenziswa okusha kwendlela yokuxhumana ye-Binder inter-process kanye nesitaki se-Bluetooth.

Ukuqaliswa kokugqwala kwenziwa njengengxenye yephrojekthi yokuqinisa ezokuphepha, thuthukisa amasu wokufaka amakhodi aphephile futhi uthuthukise ukusebenza kahle kokukhomba izinkinga lapho usebenza ngememori ku-Android. Kuyabonakala ukuthi cishe ama-70% wabo bonke ubungozi obuyingozi obukhonjiswe ku-Android abangelwa amaphutha lapho esebenza ngememori.

Ukusetshenziswa kolimi lokugqwala, lokho igxila ekuphathweni kwememori ephephile futhi inikeza ukuphathwa kwememori okuzenzakalelayo, kuzonciphisa ubungozi bokuba sengozini okubangelwa amaphutha ngesikhathi sokuphathwa kwememori, njengokufinyelela endaweni yememori ngemuva kokukhululwa nokugcwala kwemingcele ye-buffer.

Ukuphathwa kwememori ephephile kuqinisekiswa kuRust ngesikhathi sokwakha ngokubheka izinkomba, ukulandelela ubunikazi bento nempilo yento (ubukhulu), kanye nokuhlola ukulunga kokufinyelela kwimemori ngesikhathi sokusebenza.

Rust futhi inikeza izindlela zokuvikela ekuchichimeni inani eliphelele, lidinga ukuqaliswa okuphoqelekile kwamanani aguqukayo ngaphambi kokusetshenziswa, liphatha kangcono amaphutha kumtapo wezincwadi ojwayelekile, lamukela umqondo wezinkomba nokuguquguquka okungaguquguquki ngokuzenzakalela, futhi linikeze ukubhala okuqinile okuqinile ukunciphisa amaphutha anengqondo.

Ku-Android, ukuphathwa kwememori okuphephile kunikezwa ngezilimi zaseKotlin nezeJava isivele isekiwe, kepha ayifanele ukwakha izinto zohlelo ngenxa yobuningi obunzima.

Ukugqwala kuvumela ukufeza ukusebenza okusondele kuzilimi ze-C no-C ++, ukuyivumela ukuthi isetshenziselwe ukuthuthukisa izingxenye ezisezingeni eliphansi zepulatifomu nezinto zokuxhuma ne-hardware.

Ukuqinisekisa ukuphepha kwekhodi ye-C ne-C ++, i-Android isebenzisa ukuhlukaniswa kwe-sandbox, ukuhlaziywa kwe-static, nokuhlolwa okungahambi kahle. Amandla okuhlukaniswa kwe-Sandbox anqunyelwe futhi afinyelele umkhawulo wamakhono awo (ukwahlukaniswa okuqhubekayo ezinkambisweni akusebenzi ngokubuka kokusetshenziswa kwemithombo).

Phakathi kokulinganiselwa kokusebenzisa i-sandbox, basho ukusetshenziswa okuphezulu okuphezulu nokusetshenziswa kwememori okubangelwa isidingo sokwenza izinqubo ezintsha, kanye ne-latency eyengeziwe ehambisana nokusetshenziswa kwe-IPC.

Ngasikhathi sinye, i-sandbox ayikususi ukuba sengozini kwekhodi, kepha inciphisa kuphela ubungozi futhi yenze kube nzima ukuhlaselwa, ngoba ukuxhashazwa kudinga ukukhonjwa hhayi okukodwa, kepha ukuba sengozini okuningana.

Izindlela zokuhlola amakhodi zikhawulelwe ngoba, ukuze uthole amaphutha, udinga ukudala izimo zokubonakala kwenkinga. Akunakwenzeka ukumboza zonke izinketho ezinokwenzeka, amaphutha amaningi anganakwa.

Okwezinqubo zesistimu ku-Android, I-Google inamathela 'kumthetho wababili'ngokusho noma iyiphi ikhodi eyengeziwe okungafanele ihlangabezane nayo ngaphezu kwezimo ezimbili kwezintathu- Sebenza ngemininingwane yokufaka engaqinisekisiwe, sebenzisa ulimi lohlelo olungaphephile (C / C ++), bese usebenza ngaphandle kokuhlukaniswa kwe-sandbox kanzima (ngamalungelo aphakeme).

Kulandela lo mthetho ukuthi ikhodi ukucubungula idatha yangaphandle kufanele yehliswe ibe nelungelo elincane (elihlukanisiwe) noma ibhalwe ngolimi lohlelo oluvikelekile.

I-Google ayihlosile ukubhala kabusha ikhodi I-C / C ++ ekhona ku-Rust, kepha uhlela ukusebenzisa lolu limi ukwenza ikhodi entsha.

Kunengqondo ukusebenzisa iRust yekhodi entsha, ngoba ngokwezibalo amaphutha amaningi avela kukhodi entsha noma esanda kuguqulwa. Ikakhulu, cishe amaphesenti angama-50% amaphutha enkumbulo atholakele ku-Android atholakalayo ngekhodi ebhalwe ngaphansi konyaka odlule.

Umthombo: https://security.googleblog.com