I see a lot of interesting techniques here. I couldn't figure out is how writes ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

pnp on Feb 6, 2011 | parent | context | favorite | on: Clever ARM instruction validation for Chrome Nativ...

I see a lot of interesting techniques here. I couldn't figure out is how writes are prevented to code areas in the sandbox. I'd guess they mark pages with code-bundles as read-only but I don't see any specific mention of it.

(The article does mention that the guard pages are set to no read/write/execute)

pjscott on Feb 6, 2011 [–]

The trampolines are located in a segment of the address space which is marked as read-only, presumably by the MMU.

jbri on Feb 6, 2011 | [–]

The validator also needs to prevent modifications to the program's own code, otherwise it could, say, remove the breakpoint instruction from the start of a data bundle.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact