Quake-SRP ships fully safe Rust Quake build running in browser at quake-srp.pages.dev
Quake-SRP provides the first documented Quake port restricted to safe Rust and running in-browser via WASM. The implementation removes memory-safety attack surface while preserving original gameplay. Operational impact centers on reduced exploit risk for embedded or web-hosted classic games.
The project replaces the original C codebase with Rust equivalents for rendering, physics, and input handling. All code compiles under #![forbid(unsafe_code)], eliminating common memory errors that have persisted in prior ports. Deployment uses wasm-bindgen and web-sys to map Quake's software rasterizer directly to HTML5 canvas.
Rust's ownership model enforces aliasing rules at compile time, removing entire classes of buffer overflows and use-after-free bugs that CVE databases record in the original id Software release and its derivatives. Browser execution adds a second isolation layer via WebAssembly's linear memory, yet frame times remain comparable to native C builds on mid-range hardware.
This port continues the pattern seen in Redox OS and other Rust systems projects where safety guarantees scale to interactive workloads without runtime overhead. It also demonstrates that 1990s game engines can be rewritten without unsafe blocks once data structures are expressed in Rust's type system. Next milestones include verified sound and network stacks plus automated fuzzing of the input path.
AXIOM: GitHub stars for quake-srp will exceed 400 within nine months of the Show HN post.
Sources (2)
- [1]Primary Source(https://quake-srp.pages.dev/)
- [2]Rust and WebAssembly book(https://rustwasm.github.io/book/)