Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(152)

Side by Side Diff: mojo/nacl/README.md

Issue 1398213003: Refactored Non-SFI and SFI NaCl into separate directories. (Closed) Base URL: https://github.com/domokit/mojo.git@master
Patch Set: Created 5 years, 2 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « mojo/nacl/BUILD.gn ('k') | mojo/nacl/irt_mojo_nonsfi.h » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
(Empty)
1 About
2 =====
3
4 This is a prototype for plumbing Mojo into the NaCl sandbox. It is
5 currently insecure (see below), does not provide a stable ABI (IRT
6 support must be added), and does not support Mojo functions that
7 return pointers (for example, `MojoMapBuffer`).
8
9
10 Using
11 =====
12
13 To use this prototype run `mojo/tools/mojob.py gn --nacl` and then build
14 and test as usual.
15
16 Run `mojo/tools/mojob.py nacltest` for additional nacl-specific tests.
17
18
19 Notes
20 =====
21
22 `generator/interface.py` contains a programmatic description of the
23 stable Mojo interface. This will need to be updated as the interface
24 changes. Run `generator/generate_nacl_bindings.py` to generate the
25 bindings that plumb this interface into the NaCl sandbox.
26
27
28 Security TODO
29 =============
30
31 * Separate trusted and untrusted Mojo handles.
32 * Validate and copy option structures.
33 * Protect untrusted buffers passed into Mojo:
34 * `NaClVmIoWillStart/HasEnded`.
35 * volatile accesses to untrusted memory (untrusted code could race).
36 * Overflow checking in array bounds validation.
37
OLDNEW
« no previous file with comments | « mojo/nacl/BUILD.gn ('k') | mojo/nacl/irt_mojo_nonsfi.h » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698