{"id":99682,"date":"2021-04-07T16:22:45","date_gmt":"2021-04-07T14:22:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/rust-vklyuchyon-v-chislo-osnovnyh-yazykov-dlya-razrabotki-platformy-android"},"modified":"2021-04-07T16:22:45","modified_gmt":"2021-04-07T14:22:46","slug":"rust-vklyuchyon-v-chislo-osnovnyh-yazykov-dlya-razrabotki-platformy-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/rust-vklyuchyon-v-chislo-osnovnyh-yazykov-dlya-razrabotki-platformy-android","title":{"rendered":"Rust a fost inclus printre limbajele principale pentru dezvoltarea platformei Android.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Google a anun\u021bat includerea limbajului de programare Rust printre limbajele permise pentru dezvoltarea platformei Android. Compilatorul limbajului Rust a fost inclus \u00een arborele de cod surs\u0103 Android \u00eenc\u0103 din 2019, \u00eens\u0103 suportul pentru acest limbaj a r\u0103mas experimental. Printre primele componente Rust care vor fi livrate pe Android se num\u0103r\u0103 noile implement\u0103ri ale mecanismului de comunicare interproces Binder \u0219i a stivei Bluetooth. <\/p>\n

Implementarea Rust a fost realizat\u0103 \u00een cadrul unui proiect destinat consolid\u0103rii securit\u0103\u021bii, promov\u0103rii practicilor de programare sigur\u0103 \u0219i cre\u0219terii eficien\u021bei identific\u0103rii problemelor legate de memorie \u00een Android. Se men\u021bioneaz\u0103 c\u0103 aproximativ 70% din toate vulnerabilit\u0103\u021bile critice identificate \u00een Android sunt cauzate de erori \u00een gestionarea memoriei. Utilizarea limbajului Rust, care se concentreaz\u0103 pe gestionarea sigur\u0103 a memoriei \u0219i ofer\u0103 gestionare automat\u0103 a memoriei, va reduce riscul apari\u021biei vulnerabilit\u0103\u021bilor cauzate de erorile de memorie, cum ar fi accesarea unei zone de memorie dup\u0103 eliberare \u0219i dep\u0103\u0219irea limitelor unui buffer. <\/p>\n

Gestionarea sigur\u0103 a memoriei este asigurat\u0103 \u00een Rust \u00een timpul compil\u0103rii prin verificarea referin\u021belor, urm\u0103rirea propriet\u0103\u021bii obiectelor \u0219i gestionarea duratei de via\u021b\u0103 a obiectelor (scopul), precum \u0219i prin evaluarea corectitudinii accesului la memorie \u00een timpul execu\u021biei codului. Rust ofer\u0103 de asemenea instrumente pentru protec\u021bia \u00eempotriva dep\u0103\u0219irii capacit\u0103\u021bii \u00eentregilor, necesit\u0103 ini\u021bializarea obligatorie a valorilor variabilelor \u00eenainte de utilizare, gestioneaz\u0103 mai bine erorile \u00een biblioteca standard, aplic\u0103 conceptul de referin\u021be \u0219i variabile imuabile (immutable) prin default \u0219i ofer\u0103 o tipizare static\u0103 puternic\u0103 pentru a minimiza erorile logice. <\/p>\n

\u00cen Android, gestionarea sigur\u0103 a memoriei este asigurat\u0103 \u00een limbajele deja acceptate Kotlin \u0219i Java, dar acestea nu sunt potrivite pentru dezvoltarea componentelor de sistem din cauza unor costuri de suprasarcin\u0103 mari. Rust ofer\u0103 posibilitatea de a ob\u021bine performan\u021be apropiate de cele ale limbajelor C \u0219i C++, ceea ce \u00eel face utilizabil pentru dezvoltarea p\u0103r\u021bilor de baz\u0103 ale platformei \u0219i componentelor pentru interac\u021biunea cu hardware-ul. <\/p>\n

Pentru asigurarea securit\u0103\u021bii codului \u00een C \u0219i C++ pe Android se aplic\u0103 izolarea sandbox, analiza static\u0103 \u0219i testarea fuzzing. Capacit\u0103\u021bile de izolare sandbox sunt limitate \u0219i au atins limitele lor (o fragmentare suplimentar\u0103 \u00een procese nu este ra\u021bional\u0103 din punctul de vedere al consumului de resurse). Printre restric\u021biile aplic\u0103rii sandbox se num\u0103r\u0103 costurile mari asociate \u0219i cre\u0219terea consumului de memorie cauzate de necesitatea de a genera procese noi, precum \u0219i apari\u021bia \u00eent\u00e2rzierilor suplimentare legate de utilizarea IPC. <\/p>\n

\u00cen acest context, sandboxul nu elimin\u0103 vulnerabilit\u0103\u021bile din cod, ci doar reduce riscurile \u0219i complic\u0103 execu\u021bia unui atac, deoarece pentru exploatare este necesar\u0103 identificarea nu a unei singure, ci a mai multor vulnerabilit\u0103\u021bi. Metodele bazate pe testarea codului sunt limitate de faptul c\u0103 pentru a descoperi erorile este necesar\u0103 crearea unor condi\u021bii care s\u0103 manifeste problema. Acoperirea tuturor posibilelor variante nu este fezabil\u0103, a\u0219a c\u0103 multe erori r\u0103m\u00e2n neobservate. <\/p>\n

Pentru procesele sistemului din Android, compania Google respect\u0103 «regula celor dou\u0103», conform c\u0103reia orice cod ad\u0103ugat trebuie s\u0103 se \u00eencadreze \u00een maxim dou\u0103 dintre cele trei condi\u021bii: lucrul cu date de intrare nesecurizate, utilizarea unui limbaj de programare nesigur (C\/C++) \u0219i executarea f\u0103r\u0103 o izolare rigid\u0103 a sandbox-ului (av\u00e2nd privilegii ridicate). Din aceast\u0103 regul\u0103 reiese c\u0103 codul pentru procesarea datelor externe trebuie fie s\u0103 fie restric\u021bionat la privilegii minime (izolat), fie s\u0103 fie scris \u00eentr-un limbaj de programare sigur. <\/p>\n

Google nu \u00ee\u0219i propune s\u0103 rescrie codul existent C\/C++ \u00een Rust, ci inten\u021bioneaz\u0103 s\u0103 utilizeze acest limbaj pentru dezvoltarea de nou cod. Utilizarea Rust pentru nou cod este justificat\u0103, deoarece statisticile arat\u0103 c\u0103 majoritatea erorilor apar \u00een codul nou sau recent modificat. \u00cen special, aproximativ 50% din erorile de gestionare a memoriei \u00een Android sunt identificate \u00een codul scris \u00een ultimul an.

\"Rust<\/center>
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u044f\u0437\u044b\u043a\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Rust \u0432 \u0447\u0438\u0441\u043b\u043e \u044f\u0437\u044b\u043a\u043e\u0432, \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0445 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android. \u041a\u043e\u043c\u043f\u0438\u043b\u044f\u0442\u043e\u0440 \u044f\u0437\u044b\u043a\u0430 Rust \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 \u0434\u0435\u0440\u0435\u0432\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 Android \u0435\u0449\u0451 \u0432 2019 \u0433\u043e\u0434\u0443, \u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u044f\u0437\u044b\u043a\u0430 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439. \u041e\u0434\u043d\u0438\u043c\u0438 \u0438\u0437 \u043f\u0435\u0440\u0432\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 Rust, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0432 Android, \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043d\u043e\u0432\u044b\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u043e\u0433\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f Binder \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":99683,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99682","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Rust a fost inclus \u00een lista limbajelor principale pentru dezvoltarea platformei Android | ProHoster","description":"Compania Google a anun\u021bat integrarea limbajului de programare Rust \u00een lista limbajelor permise pentru dezvoltarea platformei Android.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/rust-vklyuchyon-v-chislo-osnovnyh-yazykov-dlya-razrabotki-platformy-android","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Rust \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 \u0447\u0438\u0441\u043b\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u044f\u0437\u044b\u043a\u043e\u0432 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u044f\u0437\u044b\u043a\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Rust \u0432 \u0447\u0438\u0441\u043b\u043e \u044f\u0437\u044b\u043a\u043e\u0432, \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0445 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/rust-vklyuchyon-v-chislo-osnovnyh-yazykov-dlya-razrabotki-platformy-android","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-04-07T14:22:46+00:00","article:modified_time":"2021-04-07T14:22:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99682","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-04-07 15:21:42","updated":"2022-10-08 03:45:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/99682","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=99682"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/99682\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/99683"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=99682"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=99682"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=99682"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}