{"id":110721,"date":"2023-10-10T15:10:19","date_gmt":"2023-10-10T13:10:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-perepisal-na-yazyke-rust-proshivku-pvmfm-ispolzuemuyu-v-android"},"modified":"2023-10-10T15:10:19","modified_gmt":"2023-10-10T13:10:19","slug":"google-perepisal-na-yazyke-rust-proshivku-pvmfm-ispolzuemuyu-v-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/google-perepisal-na-yazyke-rust-proshivku-pvmfm-ispolzuemuyu-v-android","title":{"rendered":"Google on Rust keeles \u00fcmber kirjutanud Androidis kasutatava pvmfm p\u00fcsivara.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google on tugevdada Androidi platvormi kriitiliselt oluliste tarkvarakomponentide turvalisust ja kirjutas PVMFW-i, mida kasutatakse virtuaalsete masinate haldamiseks, Rusti keeles \u00fcmber. Varasemalt oli see tarkvara kirjutatud C keeles ja teostatud U-Booti k\u00e4ivitaja peale, kus leiti eelnevalt haavatavusi, mis olid seotud m\u00e4luhalduse probleemidega. <\/p>\n

Rustis \u00fcmber kirjutatud tarkvara on osa Android 14-st, samas kui selle arendusega seotud universaalsed raamatukogud on pakendatud crate-pakettideks ja edastatud Rusti kogukonnale. N\u00e4iteks on avalikustatud smccc pakett ARM-i PSCI (Power State Coordination Interface) ja SMCCC (SMC Calling Convention) toetamiseks ning aarch64-paging pakett m\u00e4lulehtede tabelitega manipuleerimiseks. Samuti on tehtud t\u00f6\u00f6d vigade parandamiseks ja virtio-draiverite olemasoleva paketi funktsionaalsuse laiendamiseks. Lisaks Androidi platvormile kasutatakse neid pakette ka Oak projektis, mis arendab komponente andmete edastamiseks, salvestamiseks ja t\u00f6\u00f6tlemiseks usaldusv\u00e4\u00e4rsetes keskkondades (TEE, Trusted Execution Environment). <\/p>\n

pVM h\u00fcperviisor saab juhtimise varases laadimisj\u00e4rgus ja tagab t\u00e4ieliku m\u00e4lua isolatsiooni virtuaalmasinad<\/a> ja host-keskkonna vahel, takistades host-s\u00fcsteemil juurdep\u00e4\u00e4su kaitstud virtuaalsetele masinatele, kus t\u00f6\u00f6deldakse konfidentsiaalset teavet. PVMFW (Protected Virtual Machine Firmware) hakkab juhtima kohe p\u00e4rast virtuaalse masina k\u00e4ivitamist, kontrollib loodud keskkonda ja otsustab laadimise h\u00e4daolukorra katkestamise kasuks, kui tuvastatakse terviklikkusprobleem v\u00f5i genereerib laadimissertifikaadi k\u00fclalis\u00fcsteemile usalduspunktide ahela kinnitamisel. <\/p>\n

Rust'i keeles \u00fcmber kirjutamine v\u00f5imaldab lihtsamalt ja turvalisemalt j\u00e4rgida Google'i \"kahe reegli\" n\u00f5udeid, mis on suunatud Androidi s\u00fcsteemikomponentide ohutusele. Selle reegli kohaselt peab igasugune lisatud kood vastama mitte rohkem kui kahele kolmest tingimusest: t\u00f6\u00f6tama kinnitamata sisendiga, kasutama ebaturvalisi programmeerimiskeeli (C\/C++) ja olema k\u00f5rgendatud \u00f5igustega. Seet\u00f5ttu peab v\u00e4listest andmetest t\u00f6\u00f6tlemiseks m\u00f5eldud kood kas olema v\u00e4hendatud minimaalsetele \u00f5igustele (isoleeritud) v\u00f5i olema kirjutatud turvalises programmeerimiskeeles. Google'i statistika kohaselt p\u00f5hjustavad umbes 70% Androidis avastatud ohtlikest haavatavustest m\u00e4luhaldusvead. <\/p>\n

Rust keskendub ohutule m\u00e4luhaldusele ja aitab v\u00e4hendada haavatavuste tekkimise riski, mis on seotud probleemidega, nagu juurdep\u00e4\u00e4s m\u00e4llu p\u00e4rast selle vabastamist ja m\u00e4lupiiride \u00fcletamine. Rust tagab ohutu m\u00e4luhalduse kompileerimise ajal linkide kontrollimise, objektide omaduste j\u00e4lgimise ja eluea (vaatusala) arvessev\u00f5tmise kaudu, samuti m\u00e4lule juurdep\u00e4\u00e4su \u00f5iguse hindamise koodi t\u00e4itmise ajal. Rust pakub samuti meetmeid t\u00e4isarvude \u00fclet\u00e4itumiste kaitsmiseks, n\u00f5uab muutuja v\u00e4\u00e4rtuste kohustuslikku algset m\u00e4\u00e4ramist enne kasutamist, paremini k\u00e4sitleb vigu standardraamatukogus, rakendab immutamatuse (immutable) kontseptsiooni ja pakub tugevat staatilist t\u00fc\u00fcpimist loogiliste vigade minimeerimiseks. <\/p>\n

Rust-i madala taseme komponentide, n\u00e4iteks draiverite, arendamisel esinevate raskuste hulka kuulub vajadus t\u00f6\u00f6tada toore pointeritega unsafe-re\u017eiimis, kuna Rust on loodud programmi jooksul eraldatud m\u00e4lu kasutamiseks ning kode, mis t\u00f6\u00f6tab otse riistvara kohal ilma kihita, peab ligip\u00e4\u00e4sema jagatud m\u00e4lule ja MMIO-le. Praegu j\u00e4tavad Rusti toorpointerite k\u00e4sitlemise v\u00f5imalused soovida, kuid olukord peaks muutuma p\u00e4rast makroskoopide offset_of, slice_ptr_get ja slice_ptr_len stabiliseerimist. <\/p>\n

Ka murekohtade hulka kuulub vajadus t\u00e4iustatud s\u00fcntaksi j\u00e4rele struktuuride v\u00e4ljade ja massiivide indeksite ligip\u00e4\u00e4suks toore pointerite kaudu ilma viidete loomise vajaduseta, samuti piirangud ohutute m\u00e4histe loomisel unsafe-operatsioonide \u00fcle, mis v\u00f5ivad p\u00f5hjustada m\u00e4\u00e4ramata k\u00e4itumist ja mida ei saa kompilaatoriga kontrollida. N\u00e4iteks selliseid m\u00e4hiseid pole v\u00f5imalik luua m\u00e4lulehe tabelite operatsioonide jaoks, kuna lehtede kaardistamine \u00fcks osa programmist v\u00f5ib m\u00f5jutada teisi osi. <\/p>\n

Mis puudutab genereeritud koodi suurust, siis vana pVMi p\u00fcsivaramu versioon oli 220 kB, uue versiooni suurus aga 460 kB, kuid \u00fcmberkirjutatud versioon sisaldab uusi funktsioone, mis v\u00f5imaldasid vabaneda m\u00f5nest muust laadimise ajal kasutatavast komponendist. L\u00f5ppkokkuv\u00f5ttes on k\u00f5igi vanade ja uute laadimiskomponentide kogumaht sarnane. T\u00f5detakse, et kui suurus on olulisem kui j\u00f5udlus, on sarnaseid tulemusi, nagu C-keele korral, v\u00f5imalik saavutada, l\u00fclitades kompilaatori sisse t\u00e4iendavad suuruse optimeerimisre\u017eiimid, eemaldades \u00fcleliigsed s\u00f5ltuvused ja mitte kasutades stringivormindamise vahendeid. <\/p>\n

Lisaks mainitakse, et j\u00e4tkatakse t\u00f6\u00f6dega Rusti keeles kirjutatud usaldusv\u00e4\u00e4rsete rakenduste (Trusted Application) k\u00e4ivitamise v\u00f5imaluse rakendamise nimel Trusty operatsioonis\u00fcsteemis, mis pakub TEE-keskkonda (Trusted Execution Environment) Androidile ja t\u00f6\u00f6tab paralleelselt Androidiga samal protsessoril eraldi isoleeritud keskkonnas. Trusty on kasutusel Pixel-seadmetes ning kasutab juba Rusti raamatukogudes ja s\u00fcsteemikomponentides (tuum j\u00e4\u00e4b C-keeles).
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 pvmfm, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0445 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u043e\u043c pVM \u0438\u0437 \u0441\u043e\u0441\u0442\u0430\u0432\u0430 Android Virtualization Framework. \u0420\u0430\u043d\u0435\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438 \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0432\u0435\u0440\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 U-Boot, \u0432 \u043a\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u043d\u0435\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043f\u0440\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110721","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google on \u00fcmber kirjutanud pvmfm p\u00fcsivara Rusti keeles, mida kasutatakse Androidis | ProHoster","description":"Androidi kriitiliselt oluliste tarkvarakomponentide turvalisuse t\u00f5hustamise raames on Google \u00fcmber kirjutanud pvmfm p\u00fcsivara Rusti keeles, mida kasutatakse virtuaalsete masinate haldamiseks, mida h\u00fcperviisor pVM k\u00e4ivitab Android Virtualization Framework'i osana. Varem oli p\u00fcsivara kirjutatud C-keeles ja see oli ellu viidud U-Boot laadija peal, mille koodis on varem leitud haavatavusi, mis on p\u00f5hjustatud probleemidest.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/google-perepisal-na-yazyke-rust-proshivku-pvmfm-ispolzuemuyu-v-android","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u0430\u043b \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 pvmfm, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0432 Android | ProHoster","og:description":"\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 pvmfm, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0445 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u043e\u043c pVM \u0438\u0437 \u0441\u043e\u0441\u0442\u0430\u0432\u0430 Android Virtualization Framework. \u0420\u0430\u043d\u0435\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438 \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0432\u0435\u0440\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 U-Boot, \u0432 \u043a\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u043d\u0435\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043f\u0440\u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/google-perepisal-na-yazyke-rust-proshivku-pvmfm-ispolzuemuyu-v-android","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-10T13:10:19+00:00","article:modified_time":"2023-10-10T13:10:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"110721","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 17:11:16","updated":"2026-02-09 17:11:16","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/110721","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=110721"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/110721\/revisions"}],"predecessor-version":[{"id":159314,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/110721\/revisions\/159314"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=110721"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=110721"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=110721"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}