Tag: Data Privacy

Navigating Rust Functions and Crafting Elegant Code

In the realm of programming, functions serve as the backbone of well-structured and efficient codebases. They allow for the encapsulation of specific tasks, encourage reusability, and contribute to code readability. Rust, a contemporary system-level programming language, not only embraces traditional function concepts but also adheres to a set of principles that promote clean and intelligible code. In this article, we will delve into the world of Rust functions and their significance, while also exploring the art of crafting clean code through real-world examples.

The Main Function: Your Gateway to Execution

Every Rust binary file has a pivotal starting point – the main function. Functioning as the entry point for your program, the main function is the first to be executed when the binary is run. This function resides in the main file, which acts as the initial trigger for program execution. Visualize it as the ignition key for your Rust application.

Behold the main function in its glory:

fn main() {
    println!("I don't return anything!");
}

Take note that the main function doesn’t return anything. Unlike some other languages, Rust implicitly considers the last expression within a function as its return value. Yet, for the main function, this feature is dispensable as its primary role is program initiation.

Functions and the Return Dance

In Rust, crafting functions follows a pattern akin to the main function. Let’s unravel an example:

fn hello() -> u16 {
    println!("hello!");
    6
}

Within this snippet, the hello function not only prints “hello!” but also graciously offers the value 6 upon conclusion. Rust’s discrete return mechanism allows you to omit the return keyword, graciously gifting the honor to the final expression.

Here’s the twist: While the return statement can be called upon to exit a function prematurely, Rust’s convention favors structuring your code such that the last expression naturally embodies the desired return value. Seasoned Rust developers usually avoid using return solely for specifying a function’s return value.

Crafting Aesthetic Functions with Explicit Types

The Rust ecosystem places great importance on crafting clean and self-evident code, a virtue that extends to both function arguments and return types. By explicitly outlining data types, you infuse your code with an aura of clarity, making it accessible to both present and future developers.

Let’s conjure another example:

fn print_name(name: String) {
    println!("{}", name);
}

Behold the print_name function! It gracefully accepts a single argument christened name, elegantly of type String, then proceeds to perform its duty of bestowing the name upon the world through the magic of println!(). The type hint in the function signature provides an invaluable clue regarding the function’s purpose.

But wait, there’s more! Rust’s functions aren’t just about receiving; they also give back. Let’s unfurl another scenario:

fn to_ip_address(ip: String) -> IpAddr {
    // Here lies the secret recipe to transmute IP strings into IpAddrs
}

By designating IpAddr as the return type, the function’s essence blossoms forth. When coupled with poetic function names, this practice ensures that your code unfurls its intentions before the beholder.

In conclusion, functions stand as the keystones of Rust’s design philosophy, ushering developers into a realm of orderly, reusable, and exquisitely understandable code. By embracing Rust’s customs for function construction, return values, and type clarifications, you’re poised to compose code that not only stands as a testament to your craft but also communicates its purpose with elegant fluency. So, whether you’re a seasoned Rust explorer or an intrepid novice, remember that functions are your trusted companions on the voyage towards code that whispers eloquently to all who dare to listen.

What is Rust?

Introduction

Rust is a programming language created in 2015 by a small team of people, and later adopted by Mozilla.

It is a compiled low-level language, which aims to be as fast as C or C++, while incorporating some features from high-level languages such as Go, Python, or JavaScript.

Rust has three main goals:

  • Performance
  • Safety
  • Productivity

Performance

Rust aims to achieve performance similar to C or C++.

Rust is statically typed, which means the data type of a variable is known at compile time. This allows the compiler to optimize the code further than if we didn’t know the types.

Rust does not use garbage collection (despite being a low-level programming language). Garbage collection is where the program attempts to reclaim memory from objects no longer in use by the program.

Unlike languages like Python and JavaScript, Rust avoids these abstractions to minimize issues, making it a preferred choice for low-level programming.

Safety

Rust is designed to be completely memory safe. This means that memory-related exploits aren’t possible in Rust, unless you explicitly specify unsafe Rust code.

The Microsoft Security Response Centre reports that 70% of all CVEs assigned are memory safety issues. Microsoft states:

“This means that if that software had been written in Rust, 70% of these security issues would most likely have been eliminated. And we’re not the only company to have reported such findings.”

Rust provides tools to wrap unsafe actions, enabling static enforcement of unsafe code by the Rust compiler.

The memory safety is guaranteed by the concept of ownership, governed by these rules:

  • Each value has a variable, called an owner.
  • There can only be one owner at a time.
  • When the owner goes out of scope, the value will be dropped.

Values can be moved or borrowed between variables, but no value can have more than one owner.

Consider an example in Python:z

squares = (val * val for val in range(100))
print(min(squares))
print(max(squares))

What we want is:

0
9801

But what we get is:

>>> print(min(squares))
0
>>> print(max(squares))
Traceback (most recent call last):
  File "", line 1, in 
ValueError: max() arg is an empty sequence

This is because min alters the variable squares. It’s strange, because we just wanted the minimum — not to alter the whole variable!

In Rust, the same code is:

fn main()
   let squares = (0..100).map(|val| val * val);
   println!("{:?}", squares.min());
   println!("{:?}", squares.max());
}

When we try to compile this, Rust tells us:

error[E0382]: use of moved value: `squares`
 --> ownership.rs:4:21
  |
3 |    println!("{:?}", squares.min());
  |                     ------- value moved here
4 |    println!("{:?}", squares.max());
  |                     ^^^^^^^ value used here after move
  |
  = note: move occurs because `squares` has type `std::iter::Map<std::ops::Range, [closure@ownership.rs:2:31: 2:40]>`, which does not implement the `Copy` trait

The important part here is that Python allows functions to alter variables they do not own, whereas Rust doesn’t.

Productivity

Rust’s third major goal is productivity, and it provides a rich set of tools to support developers.

Note: The below list is read as:

  • Tool

Explanation of the above tool.

Some of these tools include:

  • Cargo

Rust’s version of NPM or PyPi. Download packages others have created.

  • Clippy

Microsoft Clippy, but re-imagined for Rust to aid with development.

  • RustFmt

Automatically formats Rust code.

  • Cargo Test

A built-in testing application created by the Rust developers.

  • Cargo docs

Automatically generates documentation for your code using documentation comments (written in Markdown). This documentation is then sent to docs.rs upon publishing to Cargo. Moreover, examples in documentation are automatically tested for you, eliminating untested documentation examples.

  • Rust-Analyzer

Rust Analyzer is like an intelligent IDE. It clearly labels what’s wrong with your code, explains why it’s wrong, points out the exact characters causing errors, and often provides an “auto-fix” function that rectifies errors automatically.

  • The Rust Book & Docs

Rust offers a comprehensive book called The Book, which covers everything you need to know about Rust. Neatly divided into chapters, it’s easily searchable and available for free. Additionally, due to Rust’s documentation comments, most libraries you use will have extensive documentation online.

With these tools at your disposal, compiling a Rust program and encountering bugs is incredibly rare. The tooling and language usually catch issues long before you hit the compile button.

Conclusion

If you are seeking exceptional speed, memory safety, and enhanced productivity, Rust is the language you’ve been looking for.

As Pentesters, part of our job is to provide solutions to developers. While suggesting a low-level language like Rust to Python developers might seem unconventional initially, Rust offers robust support, even allowing calls from functions written in other languages through foreign function interfacing.

We can leverage Rust to rewrite security or performance-critical code that seamlessly integrates with our existing codebase.

Here’s an example of calling C code:

extern "C" {
    fn abs(input: i32) -> i32;
}

fn main() {
    unsafe {
        println!("C believes that the absolute value of -3 is: {}", abs(-3));
    }
}