Hardening Rust Post

content/blog/bugs-rust-wont-catch/index.md

@@ -10,6 +10,7 @@ resources = [
     "[An update on rust-coreutils](https://discourse.ubuntu.com/t/an-update-on-rust-coreutils/80773): Canonical's announcement of the audit results",
     "[Patterns for Defensive Programming in Rust](/blog/defensive-programming/): companion post on writing more robust Rust code",
     "[Pitfalls of Safe Rust](/blog/pitfalls-of-safe-rust/): common mistakes even safe Rust code can make",
+    "[Hardening Rust Code For Production](/blog/hardening-rust/): runtime failure modes and production hardening",
     "[Sharp Edges In The Rust Standard Library](/blog/sharp-edges-in-rust-std/): surprising behaviors in `std`",
     "[Rust Prevents Data Races, Not Race Conditions](/blog/rust-prevents-data-races-not-race-conditions/): where Rust's concurrency safety ends",
     "[uutils/coreutils on GitHub](https://github.com/uutils/coreutils): the Rust reimplementation of GNU coreutils",
@@ -200,7 +201,7 @@ UTF-8 is a great default for application strings, but it's absolutely, positivel
 
 ## Treat Every `panic!` as a Denial of Service
 
-In a CLI, every `unwrap`, every `expect`, every slice index, every unchecked arithmetic operation, every [`from_utf8`](https://doc.rust-lang.org/std/str/fn.from_utf8.html) is a potential denial of service if an attacker can shape the input.
+In a CLI, every `unwrap`, every `expect`, every slice index, every unchecked arithmetic operation, every [`from_utf8`](https://doc.rust-lang.org/std/str/fn.from_utf8.html) is a potential denial of service if an attacker can control the input.
 That's because a `panic!` unwinds the stack and aborts the process. If your tool is running in a cron job, a CI pipeline, or a shell script, that means the whole thing just stops working. Even worse, you could find yourself in a crash loop that paralyzes the entire system.
 
 A canonical case from the audit was `sort --files0-from` ([CVE-2026-35348](https://ubuntu.com/security/CVE-2026-35348)). The flag reads a NUL-separated list of filenames from a file, but the parser called `expect()` on a UTF-8 conversion of each name:

content/blog/defensive-programming/index.md

@@ -12,6 +12,7 @@ reviews = [
 resources = [
     "[Making illegal states unrepresentable](/blog/illegal-state/)",
     "[Compile-time invariants in Rust](/blog/compile-time-invariants/)",
+    "[Hardening Rust Code For Production](/blog/hardening-rust/) -- what can still go wrong at runtime and how to prepare for it",
 ]
 +++