How my minimal, memory-safe Go rsync steers clear of vulnerabilities

This blog post provides a deep dive into security vulnerabilities found in rsync and discusses how the author's minimal Go implementation of rsync, called gokrazy/rsync, addresses these issues. It examines multiple CVEs related to buffer overflows, information leaks, and other security flaws, highlighting the advantages of using Go's memory safety features and runtime checks over C. The author also compares gokrazy/rsync to OpenBSD's openrsync, noting the benefits of reduced complexity in mitigating vulnerabilities.