Live data from Hacker News

Bringing Rust to Safety-Critical Systems in Space

arxiv.org

21–23 of 23 posts

Re: Bringing Rust to Safety-Critical Systems in Space

#21
post #2

>>>However, due to its relatively short lifespan, industry adaption in safety-critical environments is still lacking. This work provides a set of recommendations for the development of safety-critical space systems in Rust. Why wouldn't they use Ada/SPARK2014? They have a published language standard, verification tools, and 25 years of applied use for mission-critical, high-integrity software. The current state of Ru…

>The current state of Rust is a moving target for such tools and design methods. Publish a formal language standard first. Would it be just easier to use something like OCaml? where it offers the memory safety and a mature language.

Garbage collection seems like a significant no-go for many safety critical systems. Other oddities like 31 and 63 bit numbers probably aren't a big deal but are still weird. "Mature" seems like a stretch when OCaml only got proper multi threading 1.5 years ago.

Re: Bringing Rust to Safety-Critical Systems in Space

#22

Earlier quoted context omitted.

Ferrocene notably doesn't support any safety critical CPUs in its current qualification, and those that are experimental only support bare metal. It's exciting, but not at quite the same level of maturity yet.

I'm pretty sure that there are safety critical ARM CPU's and Ferrocene does support ARM.

The R cores are not on the supported target list, they're on the experimental target list. See for yourself: https://public-docs.ferrocene.dev/main/user-manual/targets/i...

Re: Bringing Rust to Safety-Critical Systems in Space

#23

Earlier quoted context omitted.

I'm pretty sure that there are safety critical ARM CPU's and Ferrocene does support ARM.

The R cores are not on the supported target list, they're on the experimental target list. See for yourself: https://public-docs.ferrocene.dev/main/user-manual/targets/i...

I stand corrected. I spoke before I checked my info.

There's also HighTec's compiler that is also ISO 26262 qualified, targeting Infineo's Aurix TriCore:

https://www.infineon.com/cms/en/about-infineon/press/market-...

Not sure tho' what kind of qualification you have to look at in order to fly into space (DO... something?), this is targeting automotive ( and so is Ferrocene's). But a lot of the integrity mechanisms these MCU's have are surely similar between applications.

And... I'll be honest. I really am not convinced by the qualification itself that the quality is necessarily better. It's just that you need it for certain applications.

Post reply on HN