{"id":105815,"date":"2022-12-03T15:36:44","date_gmt":"2022-12-03T13:36:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/okolo-21-novogo-kompiliruemogo-koda-v-android-13-napisano-na-yazyke-rust"},"modified":"2022-12-03T15:36:44","modified_gmt":"2022-12-03T13:36:46","slug":"okolo-21-novogo-kompiliruemogo-koda-v-android-13-napisano-na-yazyke-rust","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/okolo-21-novogo-kompiliruemogo-koda-v-android-13-napisano-na-yazyke-rust","title":{"rendered":"P\u0159ibli\u017en\u011b 21 % nov\u00e9ho kompilovan\u00e9ho k\u00f3du v Androidu 13 je naps\u00e1no v jazyce Rust","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

In\u017een\u00fd\u0159i spole\u010dnosti Google shrnuli prvn\u00ed v\u00fdsledky implementace podpory v\u00fdvoje v jazyce Rust na platform\u011b Android. V Androidu 13 je p\u0159ibli\u017en\u011b 21 % nov\u00e9ho kompilovan\u00e9ho k\u00f3du naps\u00e1no v Rustu a 79 % v C\/C++. V repozit\u00e1\u0159i AOSP (Android Open Source Project), kde se vyv\u00edjej\u00ed zdrojov\u00e9 k\u00f3dy platformy Android, je p\u0159ibli\u017en\u011b 1,5 milionu \u0159\u00e1dk\u016f k\u00f3du v Rustu, kter\u00e9 se t\u00fdkaj\u00ed takov\u00fdch nov\u00fdch komponent, jako jsou \u00falo\u017ei\u0161t\u011b kryptografick\u00fdch kl\u00ed\u010d\u016f Keystore2, z\u00e1sobn\u00edk pro UWB \u010dipy (Ultra-Wideband), implementace protokolu DNS-over-HTTP3, r\u00e1mec virtualizace AVF (Android Virtualization Framework) a experiment\u00e1ln\u00ed z\u00e1sobn\u00edky pro Bluetooth a Wi-Fi.

\"P\u0159ibli\u017en\u011b<\/center> <\/p>\n

V souladu s d\u0159\u00edve p\u0159ijatou strategi\u00ed sni\u017eov\u00e1n\u00ed rizika vzniku zranitelnost\u00ed zp\u016fsoben\u00fdch chybami p\u0159i pr\u00e1ci s pam\u011bt\u00ed se jazyk Rust prozat\u00edm pou\u017e\u00edv\u00e1 p\u0159ev\u00e1\u017en\u011b p\u0159i v\u00fdvoji nov\u00e9ho k\u00f3du a pro postupn\u00e9 pos\u00edlen\u00ed bezpe\u010dnosti nejm\u00e9n\u011b chr\u00e1n\u011bn\u00fdch a \u017eivotn\u011b d\u016fle\u017eit\u00fdch softwarov\u00fdch komponent. Celkov\u00fd c\u00edl p\u0159evodu cel\u00e9 platformy na Rust nen\u00ed stanoven a star\u00fd k\u00f3d z\u016fst\u00e1v\u00e1 v C\/C++, p\u0159i\u010dem\u017e se pot\u00ed\u017ee v n\u011bm \u0159e\u0161\u00ed prost\u0159ednictv\u00edm aplikace fuzzingov\u00e9ho testov\u00e1n\u00ed, statick\u00e9 anal\u00fdzy a pou\u017eit\u00ed technik p\u0159i v\u00fdvoji, jako je zaveden\u00ed typu MiraclePtr (obal nad raw ukazateli, kter\u00fd prov\u00e1d\u00ed dal\u0161\u00ed kontroly p\u0159\u00edstupu do uvoln\u011bn\u00fdch oblast\u00ed pam\u011bti), syst\u00e9m distribuce pam\u011bti Scudo (bezpe\u010dn\u00e1 n\u00e1hrada malloc\/free) a mechanismy odhalov\u00e1n\u00ed chyb p\u0159i pr\u00e1ci s pam\u011bt\u00ed HWAsan (Hardware-assisted AddressSanitizer), GWP-ASAN a KFENCE. <\/p>\n

Pokud jde o statistiku zranitelnost\u00ed na platform\u011b Android, je z\u0159ejm\u00e9, \u017ee jak se sni\u017euje objem nov\u00e9ho k\u00f3du, kter\u00fd nebezpe\u010dn\u011b manipuluje s pam\u011bt\u00ed, kles\u00e1 tak\u00e9 po\u010det zranitelnost\u00ed zp\u016fsoben\u00fdch chybami v pam\u011bti. Nap\u0159\u00edklad pod\u00edl zranitelnost\u00ed vypl\u00fdvaj\u00edc\u00edch z probl\u00e9m\u016f s pam\u011bt\u00ed klesl ze 76 % v roce 2019 na 35 % v roce 2022. V absolutn\u00edch \u010d\u00edslech bylo v roce 2019 identifikov\u00e1no 223 zranitelnost\u00ed spojen\u00fdch s manipulac\u00ed s pam\u011bt\u00ed, v roce 2020 - 150, v roce 2021 - 100 a v roce 2022 - 85 (v\u0161echny zmi\u0148ovan\u00e9 zranitelnosti se nach\u00e1zej\u00ed v k\u00f3du C\/C++, v k\u00f3du Rust zat\u00edm nebyly podobn\u00e9 probl\u00e9my nalezeny). Rok 2022 se stal prvn\u00edm rokem, kdy u\u017e zranitelnosti spojen\u00e9 s pam\u011bt\u00ed p\u0159estaly dominovat.

\"P\u0159ibli\u017en\u011b<\/center> <\/p>\n

Proto\u017ee zranitelnosti spojen\u00e9 s manipulac\u00ed s pam\u011bt\u00ed b\u00fdvaj\u00ed obvykle nejnebezpe\u010dn\u011bj\u0161\u00ed, ukazuj\u00ed celkov\u00e9 statistiky tak\u00e9 pokles po\u010dtu kritick\u00fdch probl\u00e9m\u016f a probl\u00e9m\u016f, kter\u00e9 mohou b\u00fdt exploatov\u00e1ny vzd\u00e1len\u011b. P\u0159itom dynamika identifikace zranitelnost\u00ed, kter\u00e9 nejsou spojeny s pam\u011bt\u00ed, z\u016fst\u00e1v\u00e1 v posledn\u00edch 4 letech p\u0159ibli\u017en\u011b na stejn\u00e9 \u00farovni - 20 zranitelnost\u00ed m\u011bs\u00ed\u010dn\u011b. Pod\u00edl nebezpe\u010dn\u00fdch probl\u00e9m\u016f mezi zranitelnostmi zp\u016fsoben\u00fdmi chybami v manipulaci s pam\u011bt\u00ed v\u0161ak z\u016fst\u00e1v\u00e1 tak\u00e9 stejn\u00fd (ale jeliko\u017e se sni\u017euje po\u010det takov\u00fdch zranitelnost\u00ed, kles\u00e1 i po\u010det nebezpe\u010dn\u00fdch probl\u00e9m\u016f).

\"P\u0159ibli\u017en\u011b<\/center> <\/p>\n

Ve statistik\u00e1ch se tak\u00e9 sleduje korelace mezi objemem nov\u00e9ho k\u00f3du, kter\u00fd nebezpe\u010dn\u011b pracuje s pam\u011bt\u00ed, a po\u010dtem zranitelnost\u00ed spojen\u00fdch s pam\u011bt\u00ed (p\u0159ete\u010den\u00ed bufferu, p\u0159\u00edstup k ji\u017e uvoln\u011bn\u00e9 pam\u011bti atd.). Toto pozorov\u00e1n\u00ed potvrzuje domn\u011bnku, \u017ee hlavn\u00ed pozornost p\u0159i zav\u00e1d\u011bn\u00ed technik bezpe\u010dn\u00e9ho programov\u00e1n\u00ed by se m\u011bla v\u011bnovat nov\u00e9mu k\u00f3du, nikoli p\u0159episov\u00e1n\u00ed existuj\u00edc\u00edho, proto\u017ee v\u011bt\u0161ina odhalen\u00fdch zranitelnost\u00ed se t\u00fdk\u00e1 nov\u00e9ho k\u00f3du.

\"P\u0159ibli\u017en\u011b<\/center>
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u043d\u0436\u0435\u043d\u0435\u0440\u044b \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u043f\u043e\u0434\u0432\u0435\u043b\u0438 \u043f\u0435\u0440\u0432\u044b\u0435 \u0438\u0442\u043e\u0433\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Android \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust. \u0412 Android 13 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 21% \u043e\u0442 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u043d\u0430 Rust, \u0430 79% \u043d\u0430 C\/C++. \u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 AOSP (Android Open Source Project), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u0442\u0435\u043a\u0441\u0442\u044b \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 1.5 \u043c\u043b\u043d \u0441\u0442\u0440\u043e\u043a \u043a\u043e\u0434\u0430 \u043d\u0430 Rust, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":105816,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105815","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u0159ibli\u017en\u011b 21 % nov\u00e9ho kompilovateln\u00e9ho k\u00f3du v Androidu 13 je naps\u00e1no v jazyce Rust | ProHoster","description":"In\u017een\u00fd\u0159i spole\u010dnosti Google shrnuli prvn\u00ed v\u00fdsledky zaveden\u00ed podpory v\u00fdvoje v jazyce Rust do platformy Android. V Androidu 13 bylo p\u0159ibli\u017en\u011b 21 % nov\u011b p\u0159idan\u00e9ho kompilovateln\u00e9ho k\u00f3du naps\u00e1no v Rustu a 79 % v C\/C++.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/okolo-21-novogo-kompiliruemogo-koda-v-android-13-napisano-na-yazyke-rust","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043a\u043e\u043b\u043e 21% \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 Android 13 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust | ProHoster","og:description":"\u0418\u043d\u0436\u0435\u043d\u0435\u0440\u044b \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u043f\u043e\u0434\u0432\u0435\u043b\u0438 \u043f\u0435\u0440\u0432\u044b\u0435 \u0438\u0442\u043e\u0433\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Android \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust. \u0412 Android 13 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 21% \u043e\u0442 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u043d\u0430 Rust, \u0430 79% \u043d\u0430 C\/C++.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/okolo-21-novogo-kompiliruemogo-koda-v-android-13-napisano-na-yazyke-rust","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-03T13:36:46+00:00","article:modified_time":"2022-12-03T13:36:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/105815","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=105815"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/105815\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/105816"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=105815"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=105815"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=105815"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}