Tag
Miri, a Rust tool, stores all environment variables in the target directory, which when cached in GitHub Actions can leak secrets to pull requests. The Rust team has implemented a fix to only preserve specific variables and advises users to check their CI setups for vulnerabilities.
Nia Deckers presented a new scheme at RustWeek to implement FFI execution for Miri using ptrace and SIGSEGV. The method involves forking a process, setting memory protection, and disassembling instructions to determine memory access details, and uses mutex locks to resolve race conditions. This approach allows Miri to track any external function call at the cost of '8000 segfaults per second', and unexpectedly provides debugger functionality.
Bun's Rust rewrite fails basic Miri checks, allowing undefined behavior in safe Rust, raising serious safety concerns.