Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(1042)

Unified Diff: mojo/nacl/sfi/README.md

Issue 2051163002: Nuke NaCl SFI, part 1. (Closed) Base URL: https://github.com/domokit/mojo.git@master
Patch Set: Created 4 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « mojo/nacl/sfi/BUILD.gn ('k') | mojo/nacl/sfi/monacl_shell.cc » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: mojo/nacl/sfi/README.md
diff --git a/mojo/nacl/sfi/README.md b/mojo/nacl/sfi/README.md
deleted file mode 100644
index 7c108c935ea1c99ea280543ca6d458e965820b15..0000000000000000000000000000000000000000
--- a/mojo/nacl/sfi/README.md
+++ /dev/null
@@ -1,41 +0,0 @@
-About
-=====
-
-This is a prototype for plumbing Mojo into the NaCl sandbox. It is currently
-insecure (see below), and does not support Mojo functions that return pointers
-(for example, `MojoMapBuffer`).
-
-Currently, SFI NaCl support is not being actively developed, in favor of
-non-SFI NaCl support.
-
-Using
-=====
-
-The SFI NaCl and accompanying tests should be built by default for Linux.
-The boolean indicating if they are built is "mojo_use_nacl", defined inside
-the BUILD files.
-
-This should create a "monacl_shell" executable, capable of running standalone
-SFI nexes.
-
-Additionally, it will create a content handler for SFI nexes -- any Nexe
-with the line "#!mojo mojo:nacl_content_handler" prepended to it will be
-redirected to the SFI content handler when run with the "mojo_shell".
-
-
-Notes
-=====
-
-`nacl_bindings_generator/interface.py` contains a programmatic description of
-the stable Mojo interface. This will need to be updated as the interface
-changes. Run `nacl_bindings_generator/generate_nacl_bindings.py` to generate
-the bindings that plumb this interface into the NaCl sandbox.
-
-Security TODO
-=============
-
-* Validate and copy option structures.
-* Protect untrusted buffers passed into Mojo:
- * `NaClVmIoWillStart/HasEnded`.
- * volatile accesses to untrusted memory (untrusted code could race).
-* Overflow checking in array bounds validation.
« no previous file with comments | « mojo/nacl/sfi/BUILD.gn ('k') | mojo/nacl/sfi/monacl_shell.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698