Skip to content

Library based Compartmentalisation

Dapeng Gao edited this page Jul 27, 2023 · 8 revisions

The library-based compartmentalisation (c18n) prototype is included in CheriBSD since release 22.12. On the Morello platform, the manual can be accessed with man compartmentalization or man c18n. It is also available online. This page only includes additional information not mentioned in the manual.

Limitations

setjmp/longjmp

  1. The generation counter-based safety mechanism is currently unused because it relies on Top-Byte Ignore (TBI), a feature unsupported by CheriBSD yet.
  2. Proper error handling for malformed longjmp calls has not been implemented yet.