{"id":105815,"date":"2022-12-03T15:36:44","date_gmt":"2022-12-03T13:36:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/okolo-21-novogo-kompiliruemogo-koda-v-android-13-napisano-na-yazyke-rust"},"modified":"2022-12-03T15:36:44","modified_gmt":"2022-12-03T13:36:46","slug":"okolo-21-novogo-kompiliruemogo-koda-v-android-13-napisano-na-yazyke-rust","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/okolo-21-novogo-kompiliruemogo-koda-v-android-13-napisano-na-yazyke-rust","title":{"rendered":"Aproximativ 21% din noul cod compilabil \u00een Android 13 este scris \u00een limbajul Rust","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Inginerii de la Google au prezentat primele rezultate ale integr\u0103rii suportului pentru dezvoltarea \u00een limbajul Rust pe platforma Android. \u00cen Android 13, aproximativ 21% din noul cod compilabil ad\u0103ugat este scris \u00een Rust, iar 79% \u00een C\/C++. \u00cen depozitul AOSP (Android Open Source Project), care dezvolt\u0103 codul surs\u0103 al platformei Android, exist\u0103 aproximativ 1,5 milioane de linii de cod \u00een Rust, legate de noi componente precum stocarea cheilor criptografice Keystore2, stiva pentru cipurile UWB (Ultra-Wideband), implementarea protocolului DNS-over-HTTP3, cadrul de virtualizare AVF (Android Virtualization Framework) \u0219i stive experimentale pentru Bluetooth \u0219i Wi-Fi.

\"Aproximativ<\/center> <\/p>\n

\u00cen conformitate cu strategia anterior adoptat\u0103 de reducere a riscurilor de apari\u021bie a vulnerabilit\u0103\u021bilor cauzate de erori \u00een gestionarea memoriei, limbajul Rust este utilizat \u00een principal pentru dezvoltarea de nou cod \u0219i pentru \u00eent\u0103rirea treptat\u0103 a securit\u0103\u021bii celor mai vulnerabile \u0219i critice componente software. Nu exist\u0103 un obiectiv general de a migra \u00eentreaga platform\u0103 pe Rust, iar codul vechi r\u0103m\u00e2ne pe C\/C++, iar combaterea erorilor din acesta se face prin aplicarea de teste fuzzing, analize statice \u0219i tehnici de dezvoltare, precum utilizarea tipului MiraclePtr (o \u00eenv\u0103luire peste pointerii raw care efectueaz\u0103 verific\u0103ri suplimentare pentru acces\u0103rile zonelor de memorie eliberate), sistemului de distribu\u021bie a memoriei Scudo (o \u00eenlocuire sigur\u0103 pentru malloc\/free) \u0219i mecanismele de detectare a erorilor de gestionare a memoriei HWA-san (Hardware-assisted AddressSanitizer), GWP-ASAN \u0219i KFENCE. <\/p>\n

\u00cen ceea ce prive\u0219te statisticile privind natura vulnerabilit\u0103\u021bilor din platforma Android, se observ\u0103 c\u0103, pe m\u0103sur\u0103 ce noul cod care interac\u021bioneaz\u0103 nesigur cu memoria scade, se reduce \u0219i num\u0103rul vulnerabilit\u0103\u021bilor cauzate de erori \u00een gestionarea memoriei. De exemplu, ponderea vulnerabilit\u0103\u021bilor cauzate de probleme cu memoria a sc\u0103zut de la 76% \u00een 2019 la 35% \u00een 2022. \u00cen termeni absolu\u021bi, \u00een 2019 au fost identificate 223 de vulnerabilit\u0103\u021bi legate de gestionarea memoriei, 150 \u00een 2020, 100 \u00een 2021 \u0219i 85 \u00een 2022 (toate vulnerabilit\u0103\u021bile men\u021bionate sunt \u00een cod C\/C++, \u00een codul Rust nu au fost g\u0103site p\u00e2n\u0103 acum probleme similare). Anul 2022 a fost primul an \u00een care vulnerabilit\u0103\u021bile legate de memorie nu au mai fost dominante.

\"Aproximativ<\/center> <\/p>\n

Av\u00e2nd \u00een vedere c\u0103 vulnerabilit\u0103\u021bile legate de gestionarea memoriei sunt de obicei cele mai periculoase, statisticile generale arat\u0103 de asemenea o sc\u0103dere a num\u0103rului de probleme critice \u0219i a problemelor care pot fi exploatate de la distan\u021b\u0103. \u00cen acela\u0219i timp, dinamica identific\u0103rii vulnerabilit\u0103\u021bilor care nu sunt legate de gestionarea memoriei a r\u0103mas constant\u0103 \u00een ultimii 4 ani \u2014 aproximativ 20 de vulnerabilit\u0103\u021bi pe lun\u0103. De asemenea, ponderea problemelor grave din r\u00e2ndul vulnerabilit\u0103\u021bilor cauzate de erori \u00een gestionarea memoriei se men\u021bine (dar pe m\u0103sur\u0103 ce num\u0103rul acestor vulnerabilit\u0103\u021bi scade, scade \u0219i num\u0103rul problemelor periculoase).

\"Aproximativ<\/center> <\/p>\n

Statisticile urm\u0103resc, de asemenea, o corela\u021bie \u00eentre volumul de nou cod nesigur care lucreaz\u0103 cu memoria \u0219i num\u0103rul vulnerabilit\u0103\u021bilor legate de memorie (supra\u00eenc\u0103rc\u0103ri de buffer, accesarea memoriei deja eliberate etc.). Aceast\u0103 observa\u021bie confirm\u0103 presupunerea c\u0103 principala aten\u021bie \u00een implementarea tehnicilor de programare sigur\u0103 ar trebui s\u0103 se concentreze pe noul cod \u0219i nu pe rescrierea celui existent, deoarece cea mai mare parte a vulnerabilit\u0103\u021bilor identificate provine din codul nou.

\"Aproximativ<\/center>
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u043d\u0436\u0435\u043d\u0435\u0440\u044b \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u043f\u043e\u0434\u0432\u0435\u043b\u0438 \u043f\u0435\u0440\u0432\u044b\u0435 \u0438\u0442\u043e\u0433\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Android \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust. \u0412 Android 13 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 21% \u043e\u0442 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u043d\u0430 Rust, \u0430 79% \u043d\u0430 C\/C++. \u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 AOSP (Android Open Source Project), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u0442\u0435\u043a\u0441\u0442\u044b \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 1.5 \u043c\u043b\u043d \u0441\u0442\u0440\u043e\u043a \u043a\u043e\u0434\u0430 \u043d\u0430 Rust, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":105816,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105815","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Aproximativ 21% din noul cod compilabil \u00een Android 13 este scris \u00een limbajul Rust | ProHoster","description":"Inginerii de la Google au f\u0103cut primele evalu\u0103ri ale implement\u0103rii suportului pentru dezvoltarea \u00een limbajul Rust pe platforma Android. \u00cen Android 13, aproximativ 21% din noul cod compilabil ad\u0103ugat este scris \u00een Rust, iar 79% \u00een C\/C++.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/okolo-21-novogo-kompiliruemogo-koda-v-android-13-napisano-na-yazyke-rust","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043a\u043e\u043b\u043e 21% \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 Android 13 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust | ProHoster","og:description":"\u0418\u043d\u0436\u0435\u043d\u0435\u0440\u044b \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google \u043f\u043e\u0434\u0432\u0435\u043b\u0438 \u043f\u0435\u0440\u0432\u044b\u0435 \u0438\u0442\u043e\u0433\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Android \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust. \u0412 Android 13 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 21% \u043e\u0442 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u043d\u0430 Rust, \u0430 79% \u043d\u0430 C\/C++.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/okolo-21-novogo-kompiliruemogo-koda-v-android-13-napisano-na-yazyke-rust","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-03T13:36:46+00:00","article:modified_time":"2022-12-03T13:36:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105815","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=105815"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105815\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/105816"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=105815"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=105815"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=105815"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}