Google Adds Rust-Based DNS Parser into Pixel 10 Modem to Enhance Security

Google integrates a Rust-based DNS parser into Pixel 10 modem firmware to enhance security by reducing memory-safety vulnerabilities.

• •The new Rust-based DNS parser mitigates an entire class of vulnerabilities in the modem, significantly reducing security risk
• •Pixel 10 becomes the first Pixel device to integrate a memory-safe language into its modem firmware
• •DNS protocol was chosen for Rust implementation because it underpins cellular communications and vulnerabilities can cause memory-unsafe attacks like buffer overflows
• •The implementation uses hickory-proto crate for DNS client/server/resolver functionality, modified for bare metal environments, with cargo-gnaw tool managing 30+ dependencies
• •Google declared the DNS response parsing API in C and implemented it in Rust, with Rust functions returning error codes and using existing C functions for data structure updates