5 ms·
I mean I get the sentiment but Rust won't save you against division by zero, it'll just panic at runtime like every other language.
by Spivak 20d ago
I mean I get the sentiment but Rust won't save you against division by zero, it'll just panic at runtime like every other language.
- Gigachad 20d agoFrom a security perspective, panic at runtime is not that bad for security. Much better than continuing to run with undefined behavior. If someone sends a malformed video in and it crashes the ffmpeg process you can just log it and restart it. Vs potentially exploiting the system.
- Sharlin 20d agoThe Rust standard library has `NonZero<T>`, which, if used, at least forces you to consider what you initialize it with. Doing let foo = NonZero::new(unvalidated_input).unwrap(); is at the very least a big red sign that stands out in the code and should fail code review.