Demystifying Compiler Unstable Feature Usage and Impacts in the Rust Ecosystem

TL;DR

This paper systematically analyzes the usage and impact of Rust unstable features in the ecosystem, revealing their widespread use, potential for large-scale failures, and proposing a recovery tool to mitigate these issues.

Contribution

It introduces novel techniques for precise extraction of Rust unstable features, analyzes their ecosystem-wide impact, and presents a tool to recover from related compilation failures.

Findings

44% of package versions are affected by RUF

Up to 12% of packages experience compilation failures due to RUF

The recovery tool can fix up to 90% of RUF-related failures

Abstract

Rust programming language is gaining popularity rapidly in building reliable and secure systems due to its security guarantees and outstanding performance. To provide extra functionalities, the Rust compiler introduces Rust unstable features (RUF) to extend compiler functionality, syntax, and standard library support. However, these features are unstable and may get removed, introducing compilation failures to dependent packages. Even worse, their impacts propagate through transitive dependencies, causing large-scale failures in the whole ecosystem. Although RUF is widely used in Rust, previous research has primarily concentrated on Rust code safety, with the usage and impacts of RUF from the Rust compiler remaining unexplored. Therefore, we aim to bridge this gap by systematically analyzing the RUF usage and impacts in the Rust ecosystem. We propose novel techniques for extracting RUF precisely, and to assess its impact on the entire ecosystem quantitatively, we accurately resolve package dependencies. We have analyzed the whole Rust ecosystem with 590K package versions and 140M transitive dependencies. Our study shows that the Rust ecosystem uses 1000 different RUF, and at most 44% of package versions are affected by RUF, causing compiling failures for at most 12%. To mitigate wide RUF impacts, we further design and implement a RUF-compilation-failure recovery tool that can recover up to 90% of the failure. We believe our techniques, findings, and tools can help to stabilize the Rust compiler, ultimately enhancing the security and reliability of the Rust ecosystem.