Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Firefox is safe from this because their CSS handling was the first thing they rewrote in Rust.


I mean, even if it was written in c or c++, its unlikely two separate code bases would have the exact same use after feee vuln.


It's unlikely, but it does actually happen. I've seen more than one complete rewrite of something important that had exactly the same bug. And I'm very sure that those sources were not related somehow.


Does the Rust implementation not use any unsafe and does not use libraries using unsafe?


No. What would be the point of that?


Not Firefox, but Servo has quite a lot of unsafe, even though some of the results are false positives.

https://grep.app/search?f.repo=servo%2Fservo&f.repo.pattern=...

So Servo at the very least cannot be said to be 'safe'. And I believe the Rust code in Firefox is similar.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: