“you have to think hard to avoid UB via rust’s FFI mechanics.”
this is contrary to rust’s aims to make such bugs impossible, rather than just hard.
Hence their proposal for a DSL _in rust_, which makes those bugs impossible.
The authors are providing a solution to a clearly identified problem, with the goal of making rust better.
Despite the poor intro, the ideas in the paper are “let’s shrink the unsafe boundary”, not “let’s stick to writing what we know(C).”
“you have to think hard to avoid UB via rust’s FFI mechanics.”
this is contrary to rust’s aims to make such bugs impossible, rather than just hard.
Hence their proposal for a DSL _in rust_, which makes those bugs impossible.
The authors are providing a solution to a clearly identified problem, with the goal of making rust better.
Despite the poor intro, the ideas in the paper are “let’s shrink the unsafe boundary”, not “let’s stick to writing what we know(C).”