Comment by egorfine

18 hours ago

The reason for existence of uutils is ideological, not technical. Thus code quality is of no use for the objective.

8 comments

egorfine

Reply
stouset  17 hours ago

I’m a huge proponent of Rust and generally lean a lot closer to the RIIR mentality than most, but this effort seems to be such a waste of effort and resources.

There have been a dozen CVEs reported against all of coreutils in the past twenty years. The most recent audit of uutils-coreutils turned up forty-four CVEs.

By all appearances they’re replacing battle-tested and fundamental tooling which hasn’t been a problem with extremely amateurish Rust. The threading highlighted in the linked post above seems pretty egregious.

  • pantalaimon  1 hour ago

    I think this is more about the licence, the Rust rewrite just makes it easier to swallow/gain contributors.

  • egorfine  17 hours ago

    Same here. Love Rust. Hate rust rewrites.

    • pjmlp  2 hours ago

      Can vouch for the sentiment, hence why regardless of the ranting, I am quite supportive of whatever helps to improve C and C++ security story.

      Also for Rust based rewrites, they could start by bootstraping Rust compiler itself, dependent on C++ to start it.

      They don't do it, because even though LLVM and GCC are written in C++, a pure Rust compiler would not scale to the same level of contributions, and existing capabilities.