4 ms·
CHERI a capability machine designed for C programs that runs FreeBSD.
by nickpsecurity 9y ago
CHERI a capability machine designed for C programs that runs FreeBSD.
- deepnotderp 9y agoMy point is more that it requires modifications to existing C code to use the full capabilities (no pun intended) of a capability machine.
- fao_ 9y agoI wonder if this could be done with an alternate stdlib. Editing the usual e.g. heap management functions et al. so it does stuff behind the scenes.