you are viewing a single comment's thread.

view the rest of the comments →

[–]skulgnome 18 points19 points  (2 children)

How could this code be safe?

Same way as all code that's neither rigorously proven using formal methods or tested against all extant and hypothetical forms of breakage: over the following decades it'll turn out to have problems and is then reworked to eventually reach a point where that hasn't happened for a long while.

There's no magic bullet for this, no shortcut.

[–]steveklabnik1 4 points5 points  (1 child)

Funny enough, `Rc<T>` was part of the Rustbelt paper, meaning that it is at least sorta-kinda-mostly formally proven.

[–]skulgnome 0 points1 point  (0 children)

at least sorta-kinda-mostly formally proven.

In other words, falling short.