3 ms·
You'd still need access to the capability interface to perform that checking at the unsafe/safe boundary
by connicpu 5y ago
You'd still need access to the capability interface to perform that checking at the unsafe/safe boundary
- saagarjha 5y agoCorrect, but once you've done that you can strip the capability information and pass the raw address around to the safe code because the compiler runs validation.