{"id":105815,"date":"2022-12-03T15:36:44","date_gmt":"2022-12-03T13:36:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/okolo-21-novogo-kompiliruemogo-koda-v-android-13-napisano-na-yazyke-rust"},"modified":"2022-12-03T15:36:44","modified_gmt":"2022-12-03T13:36:46","slug":"okolo-21-novogo-kompiliruemogo-koda-v-android-13-napisano-na-yazyke-rust","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/okolo-21-novogo-kompiliruemogo-koda-v-android-13-napisano-na-yazyke-rust","title":{"rendered":"Umbes 21% Android 13-st kompileeritud uuest koodist on kirjutatud Rust keeles","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google'i insenerid on teinud esimesed j\u00e4reldused Rusti programmeerimiskeele toe rakendamise kohta Android platvormil. Android 13-s on umbes 21% uue kompileeritava koodi kogumahust kirjutatud Rustis ja 79% C\/C++-s. Android Open Source Projecti (AOSP) hoidlas, kus arendatakse Android platvormi l\u00e4htekode, on umbes 1,5 miljonit rida koodi Rustis, mis on seotud uute komponentidega nagu Keystore2 kr\u00fcptograafiliste v\u00f5tmete hoidla, UWB (Ultra-Wideband) kiipide protokolli, DNS-over-HTTP3 rakendamine, AVF (Android Virtualization Framework) virtualiseerimise raamistik ja eksperimentaalsed Bluetooth ja Wi-Fi protokollid.

\"Umbes<\/center> <\/p>\n

Vastavalt varasemalt vastu v\u00f5etud strateegiale, mis v\u00e4hendab m\u00e4luhalduse vigade t\u00f5ttu tekkida v\u00f5ivaid haavatavusi, kasutatakse Rusti seni peamiselt uue koodi arendamiseks ning k\u00f5ige haavatavamate ja kriitilisemate tarkvarakomponentide turvalisuse j\u00e4rkj\u00e4rguliseks tugevdamiseks. T\u00fc\u00fcbi muutmise \u00fcldine eesm\u00e4rk, et kogu platvorm \u00fcle viidaks Rusti, ei ole seatud ning vana kood j\u00e4\u00e4b C\/C++-sse, samas kui selle vigade k\u00f5rvaldamine toimub fuzzing-testeerimise, statsiaalse anal\u00fc\u00fcsi ja arendustehnikate, nagu MiraclePtr (raw-punktorite \u00fcmbritsemine, mis teostab t\u00e4iendavaid kontrollimisi vabastatud m\u00e4lu aladega tegelemisel), Scudo m\u00e4lu jaotuss\u00fcsteem (ohutu asendamine malloc\/free) ning m\u00e4lu haldamise vigade avastamise mehhanismide, nagu HWAsan (Hardware-assisted AddressSanitizer), GWP-ASAN ja KFENCE, abil. <\/p>\n

Mis on seoses Androidi platvormi haavatavuste statistika, siis on m\u00e4rgata, et uue koodi, mis ei toimi turvaliselt m\u00e4luga, v\u00e4henemisega on v\u00e4henenud ka m\u00e4luga seotud vigade p\u00f5hjustatud haavatavuste arv. N\u00e4iteks m\u00e4luprobleemide t\u00f5ttu tekkinud haavatavuste osakaal kahanes 2019. aastal 76% -lt 2022. aastal 35% -ni. Absoluutarvudes tuvastati 2019. aastal 223 m\u00e4luga seotud haavatavust, 2020. aastal 150, 2021. aastal 100 ning 2022. aastal 85 (k\u00f5ik m\u00e4rgitud haavatavused on C\/C++ koodis, Rusti koodis selliseid probleeme leidunud ei ole). Aasta 2022 oli esimene aasta, mil m\u00e4luga seotud haavatavused ei domineerinud enam.

\"Umbes<\/center> <\/p>\n

Kuna m\u00e4luga seotud haavatavused on tavaliselt k\u00f5ige ohtlikumad, siis \u00fcldiselt statistikast on ka m\u00e4rgata kriitiliste probleemide ning kaugelt ekspluateeritavate probleemide arvu v\u00e4henemist. Samuti on viimase nelja aasta jooksul seoses m\u00e4luga mitte seotud haavatavuste avastamise d\u00fcnaamika p\u00fcsivalt ligikaudu tasemel 20 haavatavust kuus. Ohtlike probleemide osakaal haavatavustes, mis on p\u00f5hjustatud m\u00e4lukasutuse vigadest, p\u00fcsib samuti (kuid kuna selliste haavatavuste arv v\u00e4heneb, v\u00e4heneb ka ohtlike probleemide arv).

\"Umbes<\/center> <\/p>\n

Statistikast selgub ka korrelatsioon uue koodi mahu, mis ei ole m\u00e4luga turvaliselt seotud, ja m\u00e4luga seotud haavatavuste arvu (puuduste \u00fclevool, juurdep\u00e4\u00e4s juba vabastatud m\u00e4lule jne.) vahel. See n\u00e4htus kinnitab oletust, et t\u00e4helepanu tuleks keskendada uue koodi rakendamisele, mitte olemasoleva \u00fcmberkirjutamisele, kuna enamik t\u00e4heldatud haavatavustest tuleneb uuest koodist.

\"Umbes<\/center>
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u043d\u0436\u0435\u043d\u0435\u0440\u044b \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u043f\u043e\u0434\u0432\u0435\u043b\u0438 \u043f\u0435\u0440\u0432\u044b\u0435 \u0438\u0442\u043e\u0433\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Android \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust. \u0412 Android 13 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 21% \u043e\u0442 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u043d\u0430 Rust, \u0430 79% \u043d\u0430 C\/C++. \u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 AOSP (Android Open Source Project), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u0442\u0435\u043a\u0441\u0442\u044b \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 1.5 \u043c\u043b\u043d \u0441\u0442\u0440\u043e\u043a \u043a\u043e\u0434\u0430 \u043d\u0430 Rust, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":105816,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105815","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Umbes 21% uuest kompileeritavast koodist Android 13-s on kirjutatud Rusti keeles | ProHoster","description":"Google'i insenerid on teinud esimesed kokkuv\u00f5tted Rusti keele toe juurutamisest Android platvormile. Android 13-s on umbes 21% juurde lisatud uuest kompileeritavast koodist kirjutatud Rustis ja 79% C\/C++-s.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/okolo-21-novogo-kompiliruemogo-koda-v-android-13-napisano-na-yazyke-rust","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043a\u043e\u043b\u043e 21% \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 Android 13 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust | ProHoster","og:description":"\u0418\u043d\u0436\u0435\u043d\u0435\u0440\u044b \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u043f\u043e\u0434\u0432\u0435\u043b\u0438 \u043f\u0435\u0440\u0432\u044b\u0435 \u0438\u0442\u043e\u0433\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Android \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust. \u0412 Android 13 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 21% \u043e\u0442 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u043d\u0430 Rust, \u0430 79% \u043d\u0430 C\/C++.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/okolo-21-novogo-kompiliruemogo-koda-v-android-13-napisano-na-yazyke-rust","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-03T13:36:46+00:00","article:modified_time":"2022-12-03T13:36:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105815","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=105815"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105815\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/105816"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=105815"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=105815"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=105815"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}