3 ms·

I don't get how that's ever possible, regardless of soundness issues. Can you not simply use unsafe in a capsule, and violate this constraint? The only way isol

I don't get how that's ever possible, regardless of soundness issues. Can you not simply use unsafe in a capsule, and violate this constraint? The only way isolates in V8 manage to provide any isolation is because the runtime/ language forbid such things entirely. I suspect it is not so simple as "Rust's safety ensures malicious rust code can't access data".

__s 7y ago
Capsules aren't allowed to use unsafe. The target of tock is not generally going to be out of order, so spectre things shouldn't occur
- staticassertion 7y ago
  Is there a doc about that? Can they also not use external crates? Very curious.
  - __s 7y ago
    There's a blog post https://www.tockos.org/blog/2017/crates-are-not-safe https://www.tockos.org/blog/2017/crates-are-not-safe Lots of example code https://github.com/tock/tock/tree/master/capsules https://github.com/tock/tock/tree/master/capsules
    - staticassertion 7y ago
      Thank you.