Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

CHERI plays fine with virtual memory, it's omitted in some of these minimized cores because it's not necessary for security and the target cores didn't have virtual memory to begin with.

It's still useful for making swapping work efficiently, but that's not relevant on a tiny embedded device.



What happens if you do a shared memory mapping and place capabilities into it?

Fil-C just says that shared memory mappings are integer-only, so trying to place a capability there instantly traps. That’s both sound and adequate even for sophisticated uses of shared memory.

My understanding is that this is a conundrum for CHERI, but maybe my understanding is wrong.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: