Injiniyoyin Google sun taƙaita sakamakon farko na gabatar da tallafi don ci gaba a cikin yaren Rust zuwa dandalin Android. A cikin Android 13, kusan kashi 21% na sabuwar lambar da aka haɗa ana rubuta su cikin Rust, kuma 79% a cikin C/C++. Ma'ajiya ta AOSP (Android Open Source Project), wacce ke haɓaka lambar tushe ta dandamalin Android, ta ƙunshi kusan layiyoyi miliyan 1.5 na lambar Rust ɗin da ke da alaƙa da irin waɗannan sabbin abubuwan kamar kantin maɓalli na maɓalli na Keyystore2, tarin guntuwar UWB (Ultra-Wideband) , Aiwatar da ka'idar DNS-over-HTTP3, tsarin AVF (Android Virtualization Framework) tsarin haɓakawa, tarin gwaji don Bluetooth da Wi-Fi.
Dangane da dabarun da aka yi amfani da su a baya na rage haɗarin rashin lahani da kurakurai ke haifarwa a cikin aiki tare da ƙwaƙwalwar ajiya, a halin yanzu ana amfani da harshen Rust musamman wajen haɓaka sabbin lambobin kuma a hankali don ƙarfafa tsaro na mafi rauni da mahimman abubuwan software. Babu wata manufa ta gaba ɗaya don canja wurin dukkan dandamali zuwa tsatsa kuma tsohuwar lambar ta kasance a cikin C / C ++, kuma ana yin yaƙi da kurakurai a cikin ta ta hanyar yin amfani da gwajin fuzzing, bincike na tsaye da kuma amfani da ci gaban dabaru irin su. ta yin amfani da nau'in MiraclePtr (daure kan masu nuni, yin ƙarin bincike don samun damar wuraren ƙwaƙwalwar ajiya), tsarin rarraba ƙwaƙwalwar ajiyar Scudo (madaidaicin malloc / kyauta) da hanyoyin gano kuskure lokacin aiki tare da ƙwaƙwalwar ajiya HWAsan (Adireshin Taimakon Hardware), GWP-ASAN dan KFENCE.
Dangane da kididdigar yanayin rashin ƙarfi a cikin dandamali na Android, an lura cewa yayin da sabon lambar da ke aiki mara aminci tare da ƙwaƙwalwar ajiya ta ragu, ana samun raguwar yawan raunin da kurakurai ke haifarwa yayin aiki tare da ƙwaƙwalwar ajiya. Misali, rabon raunin da ke haifar da matsalolin ƙwaƙwalwar ajiya ya ragu daga 76% a cikin 2019 zuwa 35% a cikin 2022. A cikin cikakkun lambobi, an gano raunin da ke da alaƙa da ƙwaƙwalwar ajiya a cikin 2019 a cikin 223, 2020 a cikin 150, 2021 a cikin 100, da 2022 a cikin 85 (duk abubuwan da aka lura sun kasance a cikin lambar C/C ++; a cikin lambar Rust, babu irin waɗannan matsalolin har yanzu ba a sami matsala ba. samu). 2022 ita ce shekarar farko da rashin lahani masu alaƙa da ƙwaƙwalwar ajiya suka daina mamayewa.
Tun da raunin da ke da alaƙa da ƙwaƙwalwar ajiya yawanci shine mafi haɗari, ƙididdiga gabaɗaya kuma suna nuna raguwar adadin batutuwa masu mahimmanci da batutuwan da za a iya amfani da su daga nesa. A lokaci guda kuma, haɓakar gano raunin da ba shi da alaƙa da aiki tare da ƙwaƙwalwar ajiya ya kasance a kusan matakin ɗaya na shekaru 4 na ƙarshe - raunin 20 a kowane wata. Rabon matsaloli masu haɗari tsakanin raunin da kurakurai ke haifarwa yayin aiki tare da ƙwaƙwalwar ajiya shima ya rage (amma tunda adadin irin wannan raunin ya ragu, adadin matsalolin haɗari shima yana raguwa).
Ƙididdiga kuma suna bin alaƙa tsakanin adadin sabon lambar da ke aiki mara aminci tare da ƙwaƙwalwar ajiya da adadin lahanin da ke da alaƙa da ƙwaƙwalwar ajiya (cikowar buffer, samun dama ga ƙwaƙwalwar ajiya da aka rigaya, da sauransu). Wannan abin lura yana tabbatar da tunanin cewa ya kamata a mai da hankali yayin aiwatar da amintattun dabarun shirye-shirye a kan cire sabon lamba maimakon sake rubuta lambar da ke akwai, tunda yawancin raunin da aka gano suna cikin sabon lamba.
source: budenet.ru