Re: [RFC PATCH 0/5] Rust block device driver API and null block driver

From: Conor Dooley
Date: Thu Mar 14 2024 - 13:16:58 EST


Just a passer-by here, but I noticed the link to Laurent's talk..

On Thu, Mar 14, 2024 at 10:03:28AM -0700, Bart Van Assche wrote:
> On 3/14/24 05:14, Philipp Stanner wrote:
>
> > The Kernel's C already has more memory safety than standardized C:
> > There's devres, and since last year there's the __cleanup attribute.
> > – but the thing is, you can just ignore it and do it the old way.
>
> devres is controversial - see also Laurent Pinchart, "Why is
> devm_kzalloc() harmful and what can we do about it", LPC, 2022
> (https://lpc.events/event/16/contributions/1227/).

I don't think that's a great thing to cite, that talk prompted a series
of others with (AFAIK*) the most recent being from Bart at LPC this year:
https://lpc.events/event/17/contributions/16f
The TL;DR is that it's not actually problem caused by devres.

* I think Wolfram also talked about it at an automotive conference, but
that seemed like a bit of a pitch for funding from the safety
conscious

Attachment: signature.asc
Description: PGP signature