Overflowing with Fear - Detecting and Mitigating Implicit Panics in Rust

Explore the critical safety challenges of implicit panics in Rust kernel development through this 30-minute conference talk from the Linux Plumbers Conference. Examine how Rust's safety guarantees can be undermined by hidden panic sites that occur during integer overflows and out-of-bounds array accesses, which are automatically inserted by the compiler without programmer awareness. Learn about the specific vulnerabilities these implicit panics create in kernel code, particularly when processing untrusted user-space data, and understand why identifying panic-free functions is crucial for critical system components. Discover the conditions under which these panic sites are introduced and review existing solutions from the user-space ecosystem, including tools like the no-panic crate. Analyze potential mitigation strategies for kernel development, including new tooling approaches, compiler support for flagging potential panic sites, and the establishment of stricter coding rules that mandate the use of checked variants for potentially panicking operations.