← Back to context

Comment by egorfine

20 hours ago

The reason for existence of uutils is ideological, not technical. Thus code quality is of no use for the objective.

> The reason for existence of uutils is ideological, not technical.

which ideology? Are people saying that there's an ideology of pushing rust for things without concern for quality? Sincere question, because I'm seeing that on this thread and I wasn't aware that that was a thing beyond the "re-write it in Rust" meme.

I’m a huge proponent of Rust and generally lean a lot closer to the RIIR mentality than most, but this effort seems to be such a waste of effort and resources.

There have been a dozen CVEs reported against all of coreutils in the past twenty years. The most recent audit of uutils-coreutils turned up forty-four CVEs.

By all appearances they’re replacing battle-tested and fundamental tooling which hasn’t been a problem with extremely amateurish Rust. The threading highlighted in the linked post above seems pretty egregious.

  • I think this is more about the licence, the Rust rewrite just makes it easier to swallow/gain contributors.

  • Same here. Love Rust. Hate rust rewrites.

    • Can vouch for the sentiment, hence why regardless of the ranting, I am quite supportive of whatever helps to improve C and C++ security story.

      Also for Rust based rewrites, they could start by bootstraping Rust compiler itself, dependent on C++ to start it.

      They don't do it, because even though LLVM and GCC are written in C++, a pure Rust compiler would not scale to the same level of contributions, and existing capabilities.