conv.

All stories
TechActive today · day 5

Google Uses AI to Rewrite C Code to Rust, Targeting Memory Vulnerabilities

Google's security team deployed Gemini to translate legacy C dependencies into memory-safe Rust, starting with the giflib image library.

newest coverage 4h agosummary written 15h ago8 pieces17 likes & upvotes2 comments Hacker NewsNewswiresGoogle NewsMastodon

What to know

  • Google deployed Gemini to automatically translate legacy C code into memory-safe Rust, starting with giflib (a 3,000-line image library handling untrusted input).
  • The method paired AI translation with differential fuzzing to ensure compatibility and maintain runtime performance while eliminating memory vulnerabilities.
  • Google found that AI-generated translations require ongoing human oversight, establishing a validation model for systematic legacy-code replacement.
  • This approach offers a scalable pathway for addressing memory vulnerabilities across critical infrastructure dependencies.

“Google's security team developed a method to replace legacy C code in the giflib image-processing library with Rust, targeting inherent memory vulnerabilities.”

InfoQ · InfoQ ↗ · Sep 26

Google Security Team Project initiator and executorGemini AI translation engine

Google Uses AI to Rewrite C Code to Rust, Targeting Memory Vulnerabilities
InfoQ

How it unfolded 1 development · click the chart to see its coverage articlesposts

Peak 2 pieces in two hours at Yesterday, 9 AM; 8 pieces over 5 days (2 articles · 6 posts) Sep 24, 1 AM — 1 piece · 1 post — Hacker News 1Sep 24, 3 AM — quietSep 24, 5 AM — quietSep 24, 7 AM — quietSep 24, 9 AM — quietSep 24, 11 AM — quietSep 24, 1 PM — quietSep 24, 3 PM — quietSep 24, 5 PM — quietSep 24, 7 PM — quietSep 24, 9 PM — quietSep 24, 11 PM — quietSep 25, 1 AM — quietSep 25, 3 AM — quietSep 25, 5 AM — quietSep 25, 7 AM — quietSep 25, 9 AM — quietSep 25, 11 AM — quietSep 25, 1 PM — quietSep 25, 3 PM — quietSep 25, 5 PM — quietSep 25, 7 PM — quietSep 25, 9 PM — quietSep 25, 11 PM — quietSep 26, 1 AM — quietSep 26, 3 AM — quietSep 26, 5 AM — quietSep 26, 7 AM — quietSep 26, 9 AM — quietSep 26, 11 AM — quietSep 26, 1 PM — quietSep 26, 3 PM — 1 piece · 1 post — Hacker News 1Sep 26, 5 PM — quietSep 26, 7 PM — quietSep 26, 9 PM — quietSep 26, 11 PM — quietYesterday, 1 AM — quietYesterday, 3 AM — quietYesterday, 5 AM — quietYesterday, 7 AM — quietYesterday, 9 AM — 2 pieces · 2 articles — Google News 1, Newswires 1Yesterday, 11 AM — quietYesterday, 1 PM — quietYesterday, 3 PM — quietYesterday, 5 PM — quietYesterday, 7 PM — quietYesterday, 9 PM — quietYesterday, 11 PM — quietToday, 1 AM — quietToday, 3 AM — 1 piece · 1 post — Hacker News 1Today, 5 AM — quietToday, 7 AM — quietToday, 9 AM — quietToday, 11 AM — quietToday, 1 PM — 1 piece · 1 post — Hacker News 1Today, 3 PM — 2 pieces · 2 posts — Hacker News 1, Mastodon 1Today, 5 PM — quietToday, 7 PM — quiet 1
Sep 25Sep 26yesterdaynow · 9:31 PM ET
  1. background

    Google publishes details on AI-assisted rewrites with differential fuzzing — Google announced the completed project, detailing how they used AI translations alongside differential fuzzing to ensure compatibility and maintain runtime performance while mitigating zero-day vulnerability risks.

  2. 1

    Google security team develops AI-assisted C-to-Rust translation method

    Google's security team validated a method to eliminate legacy memory vulnerabilities by leveraging Gemini to translate C codebases into memory-safe Rust equivalents. The initiative focused on giflib, an image-processing library with about 3,000 lines of code that often decodes untrusted data.

Also covered reported alongside — the timeline has no entry for these yet

  1. 2 outlets Google Rewrites Critical C Dependencies to Rust Using AI and Differential Fuzzing

    first by infoq.com, 1d ago · also InfoQ