
First Rust compiler qualified for ISO26262
TUV SUD has issued the first ASIL D certificate of qualification for a Rust compiler under the ISO 26262 functional safety standard.
The qualification of the Gnat Pro for Rust compiler from AdaCore marks the 17th toolchain qualification completed successfully by the company. Qualifying a compiler to this level requires significant supporting documentation and follows a project with Ferrous Systems: AdaCore teams for safety-critical Rust toolchain
“This qualification of the Rust compiler marks the culmination of over two years of effort,” said Hristian Kirtchev, Technical Lead of GNAT Pro for Rust at AdaCore.
“This Rust compiler is based on version 1.68 of rustc, the Rust compiler developed by the upstream community. To achieve this qualification, we first identified a supported subset of the Rust programming language, then developed a rigorous specification of the supported language features, then traced upstream tests to the specification and developed additional tests when needed, and finally conducted formal testing of the compiler that targets the end-user’s platform using the end-user’s selected compiler switches. The result is the highest confidence that the compiler will generate correct code for the end-user’s certifiable applications.”
AdaCore plans to use the qualification to position Gnat Pro for Rust for certifiable safety- and security-critical applications.
“The use of a programming language in a certification context requires three things: a qualified toolchain, certified runtime libraries, and qualified support tools,” said Tony Aiello, Product Manager for Gnat Pro for Rust at AdaCore.
“Qualification of the toolchain is the first step towards covering customer certification needs. Gnat Pro for Rust will provide customers with a complete solution for certifiable use of Rust.”
- Rust hits the mainstream
- Infineon makes Rust available for its automotive MCU lines
- ARM joins the Rust foundation
- Rust available for real-time PikeOS .
Many of the Rust language features require support from the runtime libraries that have to be certified and the certification standards require many additional activities that necessitate the support of qualified tools to be conducted at scale, such as code coverage and demonstration of adherence to coding standards.
Gnat Pro for Rust builds on the lessons learned from this compiler qualification to offer customers a complete toolchain that can be qualified and delivered with certified runtime libraries and qualified support tools.
