Index: native_client_sdk/src/doc/reference/sandbox_internals/index.rst |
diff --git a/native_client_sdk/src/doc/reference/sandbox_internals/index.rst b/native_client_sdk/src/doc/reference/sandbox_internals/index.rst |
index 3e6e9ed9eee462a2b3d89c5ae681b8d31fc87809..044da58fd1a4e0a89c57d3856dacb7adb69bacfd 100644 |
--- a/native_client_sdk/src/doc/reference/sandbox_internals/index.rst |
+++ b/native_client_sdk/src/doc/reference/sandbox_internals/index.rst |
@@ -10,9 +10,27 @@ Client. These details can be useful to reimplement a sandbox, or to |
write assembly code that follows sandboxing rules for Native Client |
(Portable Native Client does not allow platform-specific assembly code). |
+As an implementation detail, the Native Client sandboxes described here |
+are currently used by Portable Native Client to execute code on the |
+corresponding machines in a safe manner. The portable bitcode contained |
+in a **pexe** is translated to a machine-specific **nexe** before |
+execution. This may change at a point in time: Portable Native Client |
+doesn't necessarily need these sandboxes to execute code on these |
+machines. Note that the Portable Native Client compiler itself is also |
+untrusted: it too runs in a Native Client sandbox described below. |
+ |
Native Client has sandboxes for: |
-* :ref:`ARM 32-bit<arm-32-bit-sandbox>`. |
-* x86-32 |
-* x86-64 |
-* MIPS32 |
+* :ref:`ARM 32-bit <arm-32-bit-sandbox>`. |
+* x86-32: the original design is described in `Native Client: A Sandbox |
+ for Portable, Untrusted x86 Native Code |
+ <http://research.google.com/pubs/archive/34913.pdf>`_, the current |
+ design has changed slightly since then. |
+* x86-64: the original design is described in `Adapting Software Fault |
+ Isolation to Contemporary CPU Architectures |
+ <http://research.google.com/pubs/archive/35649.pdf>`_, the current |
+ design has changed slightly since then. |
+* MIPS32, described in the `overview of Native Client for MIPS |
+ <https://code.google.com/p/nativeclient/issues/attachmentText?id=2275&aid=22750018000&name=native-client-mips-0.4.txt>`_, |
+ and `bug 2275 |
+ <https://code.google.com/p/nativeclient/issues/detail?id=2275>`_. |