A new Rust-based Untrusted Data API is being developed for the Linux kernel to explicitly mark and validate data received from user-space before it is used internally. Led by developer Benno Lossin, the API introduces a wrapper type for untrusted data and a validate trait with associated functions. The initial consumer of this API is the I/O vector (IOV) code. Greg Kroah-Hartman has queued the patches into a dedicated 'untrusted' branch of driver-core.git, with potential inclusion in the Linux v7.2 merge window.
247 Impressions