{"id":110721,"date":"2023-10-10T15:10:19","date_gmt":"2023-10-10T13:10:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-perepisal-na-yazyke-rust-proshivku-pvmfm-ispolzuemuyu-v-android"},"modified":"2023-10-10T15:10:19","modified_gmt":"2023-10-10T13:10:19","slug":"google-perepisal-na-yazyke-rust-proshivku-pvmfm-ispolzuemuyu-v-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/google-perepisal-na-yazyke-rust-proshivku-pvmfm-ispolzuemuyu-v-android","title":{"rendered":"Google je prepisao firmware pvmfm, kori\u0161\u0107en u Androidu, na jeziku Rust","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V okviru dela na izbolj\u0161anju varnosti kriti\u010dnih programski komponent platforme Android je podjetje Google prek koda Rust prenovilo programsko opremo pvmfm, ki se uporablja za delovanje virtualnih strojev, ki jih za\u017eene hipervizor pVM v okviru Android Virtualization Framework. Prej je bila programska oprema napisana v jeziku C in je bila izvedena nad zaganjalnikom U-Boot, v katerem so \u017ee prej odkrili ranljivosti, povezane s te\u017eavami pri upravljanju z pomnilnikom. <\/p>\n

Prenovljena programska oprema v jeziku Rust je vklju\u010dena v Android 14, pravi\u010dne knji\u017enice, ustvarjene v procesu razvoja programske opreme, pa so oblikovane v obliki crate-paketov in prenesene skupnosti Rust. Na primer, objavljen je paket smccc za podporo ARM vmesnikom PSCI (Power State Coordination Interface) in klicem SMCCC (SMC Calling Convention), ter paket aarch64-paging za upravljanje s tabelami strani pomnilnika. Opravljena je bila tudi odprava napak in \u0161iritev funkcionalnosti obstoje\u010dega paketa virtio-drivers s realizacijo VirtIO gonilnikov. Poleg platforme Android so ti paketi vklju\u010deni tudi v projekt Oak, ki razvija komponente za prenos, shranjevanje in obdelavo podatkov v varnih okoljih (TEE, Trusted Execution Environment). <\/p>\n

Hipervizor pVM prevzame nadzor v zgodnji fazi zagona in zagotavlja popolno izolacijo pomnilnika virtualnih naprav<\/a> in gostiteljskega okolja, kar prepre\u010duje dostop gostiteljske sistem do za\u0161\u010ditenih virtualnih strojev, v katerih se obdelujejo zaupni podatki. Programska oprema pvmfm (Protected Virtual Machine Firmware) prevzame nadzor takoj po zagonu virtualnega stroja, izvede preverjanje oblikovanega okolja in odlo\u010di o nujni prekinitvi zagona v primeru odkritja te\u017eav z celovitostjo ali generira zagonski certifikat za gostujo\u010di sistem, \u010de se potrdi veriga zaupanja. <\/p>\n

Predelava v jeziku Rust omogo\u010da la\u017eje in varnej\u0161e upo\u0161tevanje «pravila dveh», ki ga uporablja Google za ohranjanje varnosti sistemskih komponent Androida. V skladu s tem pravilom mora vsak dodan koda izpolnjevati najve\u010d pogoje iz treh: delo z nepreverjenimi vhodnimi podatki, uporaba nevarnega programskega jezika (C\/C++) in izvajanje z vi\u0161jimi privilegiji. Iz tega pravila sledi, da mora biti koda za obdelavo zunanjih podatkov ali zmanj\u0161ana na minimalne privilegije (izolirana) ali napisana v varnem programskem jeziku. Po statistiki Googla pribli\u017eno 70 % vseh nevarnih ranljivosti, odkritih v Androidu, izhaja iz napak pri delu s pomnilnikom. <\/p>\n

Rust focuses on safe memory management and reduces the risk of vulnerabilities caused by issues such as accessing memory after it has been freed and buffer overflows. Safe memory work in Rust is ensured at compile time through reference checking, ownership tracking of objects, and consideration of object lifetimes (scope), as well as through access validation to memory during code execution. Rust also provides mechanisms to protect against integer overflows, requires mandatory initialization of variable values before use, better handles errors in the standard library, applies the concept of immutability (immutable) for references and variables by default, and offers strong static typing to minimize logical errors. <\/p>\n

Among the challenges faced during the development of low-level components in Rust, such as drivers, is the necessity of working with raw pointers in unsafe mode, as Rust is designed with careful consideration of memory allocated in the program, and in code that operates without layers above the hardware, it is necessary to interact with shared memory and MMIO. Currently, Rust's capabilities to work with raw pointers leave much to be desired, but the situation is expected to improve after the stabilization of support for the offset_of, slice_ptr_get, and slice_ptr_len macros. <\/p>\n

Med pomanjkljivostmi je tudi treba omeniti potrebo po izbolj\u0161anem sintaksu za dostop do polj struktur in indeksov tabel prek golih kazalcev brez ustvarjanja referenc ter omejitve pri ustvarjanju varnih ovitkov nad nevarnimi operacijami, ki lahko povzro\u010dijo nedolo\u010deno vedenje in jih prevajalnik ne more preveriti. Na primer, tak\u0161nih ovitkov ni mogo\u010de ustvariti za operacije s spodnjimi tabelami pomnilnika, saj lahko preslikovanje strani v enem delu programa vpliva na druge dele. <\/p>\n

Kar zadeva obseg rezultantne kode, je stara razli\u010dica programske opreme pVM zasedla 220 kB, nova pa 460 kB, vendar so bili v prenovljeno razli\u010dico dodani nove mo\u017enosti, ki so omogo\u010dile odstranitev nekaterih drugih komponent, ki so se uporabljale pri zaganjanju. Kon\u010dni znesek vseh starih in novih zagonskih komponent se je izkazal za primerljivega. Opa\u017eeno je, da je, kadar je velikost pomembnej\u0161a od zmogljivosti, mogo\u010de dose\u010di primerljive rezultate s programskim jezikom C, \u010de v prevajalniku vklju\u010dimo dodatne na\u010dine optimizacije po velikosti, zavr\u017eemo odve\u010dne odvisnosti in ne uporabljamo sredstev za formatiranje nizov. <\/p>\n

Dodatno se omenja nadaljevanje dela na implementaciji mo\u017enosti zagona zanesljivih aplikacij, napisanih v jeziku Rust (Trusted Application), v operacijskem sistemu Trusty, ki nudi okolje TEE (Trusted Execution Environment) za Android in deluje vzporedno z Androidom na istem procesorju v lo\u010denem izoliranem okolju. Trusty se uporablja v napravah Pixel in \u017ee uporablja Rust v knji\u017enicah in sistemskih komponentah (jedro ostaja v C).
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 pvmfm, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0445 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u043e\u043c pVM \u0438\u0437 \u0441\u043e\u0441\u0442\u0430\u0432\u0430 Android Virtualization Framework. \u0420\u0430\u043d\u0435\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438 \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0432\u0435\u0440\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 U-Boot, \u0432 \u043a\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u043d\u0435\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043f\u0440\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110721","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google je prepisal programsko opremo pvmfm v jeziku Rust, ki se uporablja v Androidu | ProHoster","description":"V okviru prizadevanj za izbolj\u0161anje varnosti kriti\u010dnih programski komponent platforme Android je podjetje Google prepisalo programsko opremo pvmfm v jeziku Rust, ki se uporablja za organizacijo delovanja virtualnih strojev.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/google-perepisal-na-yazyke-rust-proshivku-pvmfm-ispolzuemuyu-v-android","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u0430\u043b \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 pvmfm, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0432 Android | ProHoster","og:description":"\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 pvmfm, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/google-perepisal-na-yazyke-rust-proshivku-pvmfm-ispolzuemuyu-v-android","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-10T13:10:19+00:00","article:modified_time":"2023-10-10T13:10:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"110721","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 17:11:16","updated":"2026-02-09 17:11:16","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/110721","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=110721"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/110721\/revisions"}],"predecessor-version":[{"id":159314,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/110721\/revisions\/159314"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=110721"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=110721"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=110721"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}