Re: Rust kernel policy

[Kees Cook]

On March 1, 2025 5:22:29 AM PST, Askar Safin <safinaskar@xxxxxxxxxxxx> wrote:
>Hi, Martin Uecker and Dan Carpenter.
>
>> No, this absolutely is useful.  This is what UBSan does now
>
>> BTW: Another option I am investigating it to have UBsan insert traps
>> into the code and then have the compiler emit a warning only when
>
>Clang sanitizers should not be enabled in production.
>See https://www.openwall.com/lists/oss-security/2016/02/17/9 for details

This is about ASan, in userspace, from almost a decade ago. Kernel UBSan and HW-KASan are used in production for a long time now. Take a look at Android and Chrome OS kernels since almost 5 years ago. Ubuntu and Fedora use the bounds sanitizer by default too. *Not* using the bounds sanitizer in production would be the mistake at this point. :)

-Kees

-- 
Kees Cook