ISO C became unusable for operating systems development

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

Our great sponsors
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • WorkOS - The modern identity platform for B2B SaaS
  • SaaSHub - Software Alternatives and Reviews
  • dafny

    Dafny is a verification-aware programming language

    You're right that you can't define a safe subset of C without making it practical. MISRA C defines a C subset intended to help avoid C's footguns, but it still isn't actually a safe language. There are alternative approaches though:

    1. Compile a safe language to C (whether a new language or an existing one)

    2. Formal analysis of C, or of some practical subset of C, to prove the absence of undefined behaviour

    Work has been done on both approaches.

    ZZ compiles to C. [0] Dafny can compile to C++, but it seems that's not its primary target. [1][2]

    There are several projects on formal analysis of C. [3][4][5][6]

    [0] https://github.com/zetzit/zz

    [1] https://github.com/dafny-lang/dafny

    [2] https://dafny-lang.github.io/dafny/

    [3] https://frama-c.com/

    [4] https://www.microsoft.com/en-us/research/project/vcc-a-verif...

    [5] https://www.eschertech.com/products/ecv.php

    [6] https://trust-in-soft.com/

  • usbarmory

    USB armory - The open source compact secure computer

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  • unsafe-code-guidelines

    Forum for discussion about what unsafe code can and can't do

  • linux

    Linux kernel source tree (by ClangBuiltLinux)

    Linux builds on clang after a decade of dedicated effort to make it happen, and that is with clang overall being comparatively similar to gcc (e.g clang implements many gcc extensions): https://github.com/ClangBuiltLinux/linux/wiki/Project-histor...

  • tamago

    TamaGo - ARM/RISC-V bare metal Go

    > just proves your lack of knowledge

    Tone is not needed.

    For TamaGo, it seems to allow developers run their application, not build an OS on the hardware. But I have not played with it, you are right.

    > TamaGo is a framework that enables compilation and execution of unencumbered Go applications on bare metal

    The environment does not seem to allow building a generic operating system [1]. F-Secure ported the runtime itself to boot natively. But please correct me.

    > There is no thread support

    The environment you run in is specifically curated for Go applications, such as the memory layout. I'd call this an "appliance" rather than enabling Go to be used for full-fledged generic operating system implementations.

    [1] https://github.com/f-secure-foundry/tamago/wiki/Internals

  • checkedc

    Checked C is an extension to C that lets programmers write C code that is guaranteed by the compiler to be type-safe. The goal is to let people easily make their existing C code type-safe and eliminate entire classes of errors. Checked C does not address use-after-free errors. This repo has a wiki for Checked C, sample code, the specification, and test code.

  • zz

    Discontinued 🍺🐙 ZetZ a zymbolic verifier and tranzpiler to bare metal C

    You're right that you can't define a safe subset of C without making it practical. MISRA C defines a C subset intended to help avoid C's footguns, but it still isn't actually a safe language. There are alternative approaches though:

    1. Compile a safe language to C (whether a new language or an existing one)

    2. Formal analysis of C, or of some practical subset of C, to prove the absence of undefined behaviour

    Work has been done on both approaches.

    ZZ compiles to C. [0] Dafny can compile to C++, but it seems that's not its primary target. [1][2]

    There are several projects on formal analysis of C. [3][4][5][6]

    [0] https://github.com/zetzit/zz

    [1] https://github.com/dafny-lang/dafny

    [2] https://dafny-lang.github.io/dafny/

    [3] https://frama-c.com/

    [4] https://www.microsoft.com/en-us/research/project/vcc-a-verif...

    [5] https://www.eschertech.com/products/ecv.php

    [6] https://trust-in-soft.com/

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts