> For the past 3 years, I have been working on compiling Rust to C. .. This is, by my count, the 14th attempt: cilly<p>Gotta respect the dedication to a niche interest.<p>> The primary goal of this is support for old/obscure hardware with no LLVM/GCC support.<p>I remember reading about the bootstrapping question, how it typically requires a Rust compiler to build the Rust compiler from source. <a href="https://bootstrapping.miraheze.org/wiki/Bootstrapping_Specific_Languages" rel="nofollow">https://bootstrapping.miraheze.org/wiki/Bootstrapping_Specif...</a><p>Oh, but I see there's a C++ implementation of the Rust compiler. <a href="https://github.com/thepowersgang/mrustc" rel="nofollow">https://github.com/thepowersgang/mrustc</a><p>Anyway, this part sounds useful too, that crustc can compile across network and devices.<p>> You build a small C server on your Blorbo OS, run rustc on some normal platform like Linux, and let cilly talk over the wire.
> The primary goal of this is support for old/obscure hardware with no LLVM/GCC support.<p>If you're going to go to all this effort for an old target though, wouldn't the effort be better spent on making it an LLVM target? Then you'd get Rust and a bunch of other languages for free.<p>But maybe there are required parts of the LLVM IR that make this undesirable for certain targets, maybe requiring specific hardware features, I don't know. I guess also WASM-as-IR is a possible way to go. (Is that a thing?)<p>Edit: sorry I see that this point was already raised in this thread by ivanjermakov. Ignore.
Guix uses mrustc for bootstrapping Rust, as required for compiler packages; it's a really impressive project and has worked well in that role for some time. This new project is interesting for other reasons though, because mrustc is targeted at the de fact "subset" of Rust in use by rustc at any given time. This looks like it could have broader applications, like compiling Rust programs for platforms not supported by LLVM. If it really targets ANSI C (C89 or so), that's potentially many more platforms than are possible with ordinary rustc<p>More on the Rust bootstrapping process (2018): <a href="https://guix.gnu.org/blog/2018/bootstrapping-rust/" rel="nofollow">https://guix.gnu.org/blog/2018/bootstrapping-rust/</a>
So the author made a Rust to C transpiler and immediately used it to transpile... the Rust compiler. I love it.
It makes sense as a porting tool, if you need to port the Rust compiler to some target that has a C compiler.<p>But it doesn't mean rustc generates code for that target, only that you can run it there. You'd still have to teach LLVM about the target. Although that might already have been done.<p>It's not that useful for retro computers because the Rust compiler needs too much memory for most machines of the 32-bit era.
Have you tried Diverse Double-Compiling (DDC) to test if the official rust compiler has a backdoor?<p>Use crustc to compile the rust source code, producing a new compiler. Then use this new compiler and the official rustc binary, both with deterministic flags, to compile the rust source code again. The two outputs should match bit for bit.
This was done with mrustc, which produced byte identical output.
Better than that, you can get a bootstrapped rust from the Guix project, which has bootstrapped its entire system from source code from only a tiny verifiable binary.
It's not diverse in that case - it's the same compiler source compiled to binaries twice - it's just that with one compiler you've gone via a C intermediate representation. For the purposes of diversity it's the same as compiling rustc with the cranelift/gcc backend.
From a "trusting trust" point of view, compiling rustc-translated-to-C with a C compiler (and comparing the result to normally-compiled rustc) is a valid demonstration, because we're again starting from code and can eliminate the possibility of a binary-resident compromise.<p>The actual issue here is that the translation was done using a rustc backend, and therefore an existing rustc binary which could be compromised and inject a "if (user=="wmanley") {...}" that isn't present in the original Rust code. If cilly was completely standalone (like mrustc), or if you had a rustc+cilly build you trusted, there would be no issue.
This reminds me of <a href="https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf" rel="nofollow">https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...</a>
I'm also a fan of <a href="https://www.teamten.com/lawrence/writings/coding-machines/" rel="nofollow">https://www.teamten.com/lawrence/writings/coding-machines/</a>
The sole and entire purpose of Diverse Double-Compiling is addressing Thompson's Trusting Trust: <a href="https://dwheeler.com/trusting-trust/" rel="nofollow">https://dwheeler.com/trusting-trust/</a>
Reflections on Trusting TRust.
Awesome idea!
Very cool. At first, I thought it was yet another LLM-generated demo, but no: original work of art. Super cool. Transpiling into C does seem easier than LLVM IR, and letting GCC optimize seems like this might actually work.<p>Excited to see the compiler implementation when it's out -- a lot to learn from.
> I put my left hand in a blender. The blender won. (Still have all my fingers, just some stitches). I will not elaborate further.<p>What a shame. I would've read an article about this.
Nobody who would code this up would be entirely sane. But I can't help thinking "these are my people" when I read this...
But did it Blender open the source?
I mean I get confused every time I use blender too but not to the point of losing fingers...
I desperately want to know more.
Wait, I thought LLVM had a C backend which could be used for the purpose of transpiling Rust to C? Turns out not for a long time, but now maybe again: <a href="https://discourse.llvm.org/t/re-ann-llvm-c-backend-still-able-to-generate-c-code-from-c/90055" rel="nofollow">https://discourse.llvm.org/t/re-ann-llvm-c-backend-still-abl...</a>
This approach is harder than you might imagine. LLVM can do a lot of things that don't map to C language constructs. You cannot generally roundtrip arbitrary LLVM IR through some C representation. You can emulate most things, but you won't necessarily get the same LLVM IR in the other end.
FWIW, Rust can <i>also</i> do a lot of things that do not easily map to C (at least standard C) constructs. For example:<p>- You can compare any two pointers, while in C they must point to the same allocation. This is possible to solve by converting to integers first.<p>- Signed integer overflow is UB in C, defined to wrap/panic in Rust.<p>- Type-based alias analysis is a big one, does not exist in Rust.
> You can compare any two pointers, while in C they must point to the same allocation. This is possible to solve by converting to integers first.<p>Indeed specifically Rust defines that pointer comparisons are done by address, whereas C doesn't specify what the rules are exactly. This gets sticky if the pointer was invalidated (e.g. you free'd the memory it was pointing at). Rust says - as you might expect - that you can still compare this invalid pointer to another pointer (which may or may not still be valid and indeed might be a <i>valid</i> pointer to the same address!) because we're only comparing the address - but C++ says you mustn't do that and I believe C has the same rule (I feel like Martin Uecker will correct me here if I'm wrong, but other people feel free to jump in).<p>> Signed integer overflow is UB in C, defined to wrap/panic in Rust.<p>This doesn't feel like an interesting difference. C made a weird choice, which was maybe convenient for the usual Worse Is Better reasons 50+ years ago. LLVM doesn't care about that choice, LLVM can cheerfully simulate this behaviour in C if you want that.<p>> Type-based alias analysis is a big one, does not exist in Rust.<p>This also doesn't feel relevant but I guess I'm interested in why you think it would make "a big" difference?
> The primary goal of this is support for old/obscure hardware with no LLVM/GCC support. There are still some systems out there that don't support Rust but support C.<p>The landing page mentions Plan 9 as one of the systems.
Finally we can rewrite all the Rust in C. ;)
Rewrite in C is the new Rewrite in Rust.
> The primary goal of this is support for old/obscure hardware with no LLVM/GCC support<p>Wouldn't it be easier to add old hardware support to LLVM/GCC instead? I adore the project scale and determination, but for this goal extending existing projects seems more logical than building a language translator.
> Wouldn't it be easier to add old hardware support to LLVM/GCC instead?<p>No, in fact it's much, much harded. You have no idea of the scope. I have no idea of the scope. Nobody does. There are obscure machines we've never heard about and there are C compilers for them. Targeting and supporting them from modern toolchains is a fool's errand.
rust to c supports infinite platforms that already have a c compiler by implementing a single rust to c program<p>on the other hand, porting llvm to an infinite number of platforms requires an infinite amount of work<p>so, it is less work this way
Some architecture lacks documentation, if you have a working C compiler, it's easier to use it than working on a compiler to target it.
Presumably you still need a C++ compiler for LLVM itself though. Or... a C++ to C translator.<p>Edit: On second thought, that's only needed if you want to run rustc itself on the old hardware, which is probably not super useful given the main reason you would need to do this is if LLVM can't target that hardware.<p>For building code written in Rust for such old hardware, this would be sufficient.
As an ex C++ compiler developer, I heartily approve of this project. Kudos.
I wonder if this could be used in PPC Mac OS X, where LLVM isn't supported and most graphical applications need to use GCC 4 with Apple's SDK.
There are discussions of round-trip between Rust and C;<p>Would this be useful for this too?<p>From <a href="https://news.ycombinator.com/item?id=46265855">https://news.ycombinator.com/item?id=46265855</a> :<p>> <i>To better port C to Rust: 3C (Checked C), c2rust, Crown ownership analysis, RustMap, c2saferrust (LLM), Laertes</i><p>C -> Checked C -> Rust<p>Because Checked C will annotate the raw and other C pointers first.
I'll wait for rustcrustc
We should port it to Rust.
I wonder how the performance looks like, because this can be interesting even for non-porting reasons ;)
This could be used within <a href="https://bootstrappable.org/projects.html" rel="nofollow">https://bootstrappable.org/projects.html</a> to make bootstrappability of rust incredibly much easier other than the previous route of OCaml and other things.<p>I know some folks within the bootstrappable OS projects community are on Hackernews and I hope that they could take a look at this. I feel as if this project could drastically shrink down the efforts needed to get a working rust compiler in a bootstrappable manner.
mrustc (a handwritten Rust compiler in C++) is already used for that in Guix and likely other distros: <a href="https://guix.gnu.org/blog/2018/bootstrapping-rust/" rel="nofollow">https://guix.gnu.org/blog/2018/bootstrapping-rust/</a> This would have other benefits though, as it's both a second bootstrapping path and could potentially compile Rust programs for platforms not supported by LLVM
Not really. This C code is more like a binary and compiler artifact than a source code. So it won't match the standards of bootstrap.
Depending on what your goal is. If it is eliminating trusting trust attacks, yes this is no enough. But more commonly you only want to compile rustc for a platform it was never compiled on, and for that this project is definitely enough.
Rust is finally memory safe enough to become C
this is really cool but it seems very unlikely that someone targeting an exotic system not supported by rust (mostly embedded and ancient mainframe targets) would be willing to trust a beta transpiler to not inject any bugs or leaks in the process of turning rust to c. nevertheless, very cool.
Let Rust vs C battle commence with renewed haste!
Kudos.
Quite an interesting project, lol. I like the name `crustc` :)
Not to be confused with crust [1] the dialect of rust B [2][3] is written in.<p>[1] <a href="https://github.com/tsoding/crust" rel="nofollow">https://github.com/tsoding/crust</a>
[2] <a href="https://github.com/bext-lang/b" rel="nofollow">https://github.com/bext-lang/b</a>
[3] <a href="https://www.nokia.com/bell-labs/about/dennis-m-ritchie/kbman.html" rel="nofollow">https://www.nokia.com/bell-labs/about/dennis-m-ritchie/kbman...</a>
[dead]
[dead]
[dead]
The most interesting part of this to me is not “Rust to C” by itself, but the fact that it widens the pool of people who can help debug portability problems.<p>There are relatively few people who understand Rust’s compiler internals, LLVM backends, and obscure target support deeply. But there are many engineers who understand C compilers, ABIs, linkers, makefiles, cross-compilation, old operating systems, and weird platform-specific compiler behavior.<p>If Rust can be lowered into target-specific C, then some problems stop being exclusively “Rust compiler problems” and also become C toolchain problems. That means more people can inspect the generated C, build failures, linker errors, ABI mismatches, and compiler-specific behavior.<p>C is obviously not a magic portability layer. ABI details, integer widths, alignment, TLS, aliasing, and undefined behavior still matter. But as an ecosystem boundary, C gives many more engineers a way to participate in debugging and porting work.<p>I think that social/maintenance aspect may be more important than the language translation itself.
Guideline:<p>> Don't post generated text or AI-edited text. HN is for conversation between humans.
I saw the reply, and it's not GenAI text. It's just that in the process of translation, people usually use machine translation or LLM translation. The problem is the vocabulary we East Asians use. I experience this issue too.<p>Probably because in East Asia, we tend to emphasize things with things like "xx" a lot.
I thought that may be the case. I shared the guideline so they'd know the likely reason all their comments die immediately.<p>However, their comments are consistently long, so it may be GenAI after all. Their last comment in particular...<p><a href="https://news.ycombinator.com/item?id=48771339">https://news.ycombinator.com/item?id=48771339</a>
I think you're probably using DeepL or some other AI translation. When you use DeepL, most sentences become flat and end up being judged as GenAI. I also used DeepL to communicate on Hacker News in the early days.I had a similar problem
[flagged]
i believe the author is confused<p>this is the wrong direction<p>(jk i read the readme)