Trail of Bits has published a new Rust chapter in their Testing Handbook covering security testing tools and techniques. Topics include Rust's security guarantees and their limits (unwind safety, nondeterminism, arithmetic errors), dynamic analysis with Miri for undefined behavior detection, property testing with proptest, mutation testing, and Clippy lints. The chapter also includes a gotchas checklist for manual code reviews, memory zeroization patterns for secrets, model checking with Kani, and supply chain vetting. Additionally, Trail of Bits released rust-review, a Claude Code plugin co-built with Aptos Labs that automates Rust security reviews across a dozen bug classes including memory safety, concurrency hazards, FFI pitfalls, and async cancellation issues.
