The author of the web framework written in Rust deleted after facing criticism for 'misusing' the Rust language. The actix-web framework, which has been downloaded over 800,000 times, allows for integrating HTTP server and client functionality into applications written in Rust, focusing on achieving maximum performance and in many web framework tests.
Shortly before the incident, it was reported in GitHub issues about undefined behavior in the code of the actix-web server, occurring in a block executed in (allows unsafe operations with pointers). The author of actix-web did not remove the unsafe block but modified the call to that block to avoid undefined behavior from occurring. Suggestions to remove unsafe were rejected by the author, citing potential performance loss and stating that he does not use unsafe without necessity and is confident in the safety of the blocks running in this mode.
A member of the RustSec team who identified the undefined behavior disagreed and suggested that the use of many unsafe blocks in actix-web is unjustified. Following this, he published
on the inadmissibility of using unsafe, which mentioned, among other things, that the pointer manipulation technique used in actix-web (multiple mutable pointers to the same data) could potentially create use-after-free vulnerabilities and does not align with Rust's development paradigm.
After the article on , in GitHub issues a barrage of criticism deleted the repository and Mozilla is laying off 70 people and undergoing reorganization
Source: opennet.ru
