Post Syndicated from ris original http://lwn.net/Articles/694274/rss
Dave Herman reports
that with Firefox 48, Mozilla will ship its first Rust component to all
desktop platforms. “One of the first groups at Mozilla to make use
of Rust was the Media Playback team. Now, it’s certainly easy to see that
media is at the heart of the modern Web experience. What may be less
obvious to the non-paranoid is that every time a browser plays a seemingly
innocuous video (say, a chameleon popping
bubbles), it’s reading data delivered in a complex format and created
by someone you don’t know and don’t trust. And as it turns out, media
formats are known to have been used to trick decoders into exposing nasty security vulnerabilities that exploit memory management bugs in Web browsers’ implementation code.
This makes a memory-safe programming language like Rust a compelling addition to Mozilla’s tool-chest for protecting against potentially malicious media content on the Web.”