Async Rust is not safe with io_uring

1. frr

   1 25 3,501 10.0 C

   The FRRouting Protocol Suite

   

   I don't think it's possible to get away with fundamentally no cancellation support, there are enough edge cases that need it even if most applications don't have such edge cases.

   FWIW, this was also painful to do in our C event loop, but there was no way around the fact that we needed it (cf. https://github.com/FRRouting/frr/blob/56d994aecab08b9462f2c8... )

2. SaaSHub

   www.saashub.com featured

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

3. containerd

   2 143 17,834 9.9 Go

   An open and reliable container runtime

   

   Notably, io_uring syscall has been a significant source of vulnerabilities. Last year, Google security team decided to disable it in their products (ChromeOS, Android, GKE) and production servers [1].

   Containerd maintainers soon followed Google recommendations and updated seccomp profile to disallow io_uring calls [2].

   io_uring was called out specifically for exposing increased attack surface by kernel security team as well long before G report was released [3].

   Seems like less of a rust issue and more of a bug(s) in io_uring? I suppose user space apps can provide bandaid fix but ultimately needs to be handled at kernel.

   [1] https://security.googleblog.com/2023/06/learnings-from-kctf-...

   [2] https://github.com/containerd/containerd/pull/9320

   [3] https://lwn.net/Articles/902466/

4. ringbahn

   3 1 611 - Rust

   safe bindings to io-uring

   

   This is nothing to do with async Rust; monoio (and possibly other io-uring libraries) are just exposing a flawed API. My ringbahn library written in 2019 correctly handled this case by having a dropped accept future register a cancellation callback when the accept completes.

   https://github.com/ringbahn/ringbahn

5. io-uring-is-not-cancellation-safe

   4 1 3 2.5 Rust

   

   the ideal scenario is like cancellable io provide by monoio, I write an example of this in the blog: https://github.com/ethe/io-uring-is-not-cancellation-safe/bl... . However, it has lots of limitation, and do not have a perfect way to do this at the moment.

6. book

   5 14 1,142 5.5

   Documentation on how to use the Rust Programming Language to develop firmware for bare metal (microcontroller) devices (by rust-embedded)

   

   I guess that would be the book: https://docs.rust-embedded.org/book/

Suggest a related project