The company believes that memory-safe languages, like Rust, are the “most cost-effective means for preventing memory bugs” in the bootloader, fastboot, kernel, and other low-level parts of the OS. Unlike C and C++, where developers manage memory lifetime, Rust “provides memory safety guarantees by using a combination of compile-time checks to enforce object lifetime/ownership and runtime checks to ensure that memory accesses are valid.” Google has been working to add this support to AOSP for the past 18 months. Performance is equivalent to the existing languages, while increasing the effectiveness of current sandboxing and reducing the overall need for it. This allows for “new features that are both safer and lighter on resources.” Other improvements include data concurrency, a more expressive type system, and safer integer handling.
Read more of this story at Slashdot.