verifast
checkedc
verifast | checkedc | |
---|---|---|
2 | 21 | |
341 | 3,183 | |
2.9% | 0.0% | |
9.2 | 0.0 | |
2 days ago | over 1 year ago | |
Rust | C | |
GNU General Public License v3.0 or later | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
verifast
- VeriFast
-
Refactoring the FreeBSD Kernel with Checked C [pdf]
Checked c is interesting, but I think a more fruitful avenue would be verifast[0]. Verifast is completely compatible with existing c codebases (so you can keep using your existing c compiler), and is able to verify more interesting behaviour than checked c. [1] finds that it would have prevented 5 of 50 recent CVEs in FreeBSD, whose causes include unlocked memory accesses, fd leaks, and bad use of reference counts.
0. https://github.com/verifast/verifast
1. https://metasepi.org/en/posts/2020-10-14-avoid-freebsd-secur...
checkedc
- The NSA list of memory-safe programming languages has been updated
-
The Fil-C Manifesto: Garbage In, Memory Safety Out
https://github.com/microsoft/checkedc
Also, one can combine subsets of C with FOSS, static analyzers that can handle those subsets. Then, compose only in ways that the tools can handle. Then, combinatorial and fuzz testing of the interface composition.
I know you’re doing the project for fun while exploring specific ways to achieve your goals. So, these are just some links and concepts that might help on your journey. Lots of folks don’t know about prior work in this area. So, I keep passing it on.
-
My Bad Habit of Hoarding Information
- [Checked C](https://github.com/microsoft/checkedc) - extensions to make C safer #cpp
- Checked C
- Is it possible to have a superset of the C programming languages standard that is as safe as Rust?
- Checked C by Microsoft Research
-
Azure CTO: “It's time to halt starting any new projects in C/C++ ”
Yes. Microsoft Research is working on "Checked C": https://www.microsoft.com/en-us/research/project/checked-c/
As a test, someone ported FreeBSD's networking stack to Checked C. It was easy and there was no overhead to performance and binary size.
-
I want to learn csharp man
Haha. I think they did ultimately agree. Thus a later research project is: Checked-C
What are some alternatives?
checkedc-clang - This is the primary development repository for 3C, a tool for automatically converting legacy C code to the Checked C extension of C, which aims to enforce spatial memory safety. This repository is a fork of Checked C's.
koka - Koka language compiler and interpreter
ctl - My variant of the C Template Library
rust.ko - A minimal Linux kernel module written in rust.
manyclangs - Repository hosting unofficial binary pack files for many commits of LLVM
c2rust - Migrate C code to Rust
linux - Linux kernel source tree
dafny - Dafny is a verification-aware programming language
zig - General-purpose programming language and toolchain for maintaining robust, optimal, and reusable software.
wuffs - Wrangling Untrusted File Formats Safely
rust - Empowering everyone to build reliable and efficient software.
The-C-Programming-Language - Answers to exercises in K&R's The C Programming Language (second Edition).