Re: Rust kernel policy

From: Kent Overstreet
Date: Sat Feb 22 2025 - 10:31:00 EST


On Thu, Feb 20, 2025 at 03:09:21PM +0100, Martin Uecker wrote:
> We added checked arhithmetic to C23, we could add saturating
> math to C2Y if this is needed. (although I admit I do not fully
> understand the use case of saturating math, a saturated value
> still seems to be an error? Statistics, where it does not matter?)

Saturating is mainly for refcounts. If the refcount overflows, you want
it to saturate and _stay there_, because you no longer know what the
value should be so never freeing the object is the safest option.