| Index: native_client_sdk/doc_generated/reference/sandbox_internals/index.html
|
| diff --git a/native_client_sdk/doc_generated/reference/sandbox_internals/index.html b/native_client_sdk/doc_generated/reference/sandbox_internals/index.html
|
| index abacf742f24141e3215bceb41c3b657e341f054c..053f79f2f9f3872b2621f0686357dee62ebccd54 100644
|
| --- a/native_client_sdk/doc_generated/reference/sandbox_internals/index.html
|
| +++ b/native_client_sdk/doc_generated/reference/sandbox_internals/index.html
|
| @@ -7,12 +7,25 @@ Native Client sandboxing, which is also used by Portable Native
|
| Client. These details can be useful to reimplement a sandbox, or to
|
| write assembly code that follows sandboxing rules for Native Client
|
| (Portable Native Client does not allow platform-specific assembly code).</p>
|
| +<p>As an implementation detail, the Native Client sandboxes described here
|
| +are currently used by Portable Native Client to execute code on the
|
| +corresponding machines in a safe manner. The portable bitcode contained
|
| +in a <strong>pexe</strong> is translated to a machine-specific <strong>nexe</strong> before
|
| +execution. This may change at a point in time: Portable Native Client
|
| +doesn’t necessarily need these sandboxes to execute code on these
|
| +machines. Note that the Portable Native Client compiler itself is also
|
| +untrusted: it too runs in a Native Client sandbox described below.</p>
|
| <p>Native Client has sandboxes for:</p>
|
| <ul class="small-gap">
|
| <li><a class="reference internal" href="/native-client/reference/sandbox_internals/arm-32-bit-sandbox.html#arm-32-bit-sandbox"><em>ARM 32-bit</em></a>.</li>
|
| -<li>x86-32</li>
|
| -<li>x86-64</li>
|
| -<li>MIPS32</li>
|
| +<li>x86-32: the original design is described in <a class="reference external" href="http://research.google.com/pubs/archive/34913.pdf">Native Client: A Sandbox
|
| +for Portable, Untrusted x86 Native Code</a>, the current
|
| +design has changed slightly since then.</li>
|
| +<li>x86-64: the original design is described in <a class="reference external" href="http://research.google.com/pubs/archive/35649.pdf">Adapting Software Fault
|
| +Isolation to Contemporary CPU Architectures</a>, the current
|
| +design has changed slightly since then.</li>
|
| +<li>MIPS32, described in the <a class="reference external" href="https://code.google.com/p/nativeclient/issues/attachmentText?id=2275&aid=22750018000&name=native-client-mips-0.4.txt">overview of Native Client for MIPS</a>,
|
| +and <a class="reference external" href="https://code.google.com/p/nativeclient/issues/detail?id=2275">bug 2275</a>.</li>
|
| </ul>
|
| </section>
|
|
|
|
|