Skip to content

  • Projects
  • Groups
  • Snippets
  • Help
  • This project
    • Loading...
  • Sign in / Register
S
swiftshader
  • Project
    • Overview
    • Details
    • Activity
    • Cycle Analytics
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Charts
  • Issues 0
    • Issues 0
    • List
    • Board
    • Labels
    • Milestones
  • Merge Requests 0
    • Merge Requests 0
  • CI / CD
    • CI / CD
    • Pipelines
    • Jobs
    • Schedules
    • Charts
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Graph
  • Charts
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
  • Chen Yisong
  • swiftshader
  • Repository

Switch branch/tag
  • swiftshader
  • third_party
  • subzero
  • src
  • IceInstX8632.cpp
Find file
BlameHistoryPermalink
  • Nicolas Capens's avatar
    Eliminate Subzero sandboxing support · 9534228d
    Nicolas Capens authored Jul 06, 2021
    Subzero supported sandboxing for the PNaCl platform. Reactor does not
    support sandboxing at the JIT level, and we don't have a need for it
    since Chromium provides sandboxing as part of the "GPU process". Thus
    we can remove it and reduce code complexity.
    
    Note that Subzero's sandboxing implementation comes at a performance
    penalty. Project Bunker provides a better solution for SwiftShader,
    which is probably also more secure in light of speculative execution
    vulnerabilities.
    
    If we ever do need sandboxing support in Reactor itself (e.g. outside of
    SwiftShader, when process isolation is not feasible), it is best to
    use an actively developed JIT-compiler where security always takes
    priority over peformance, like Chromium's WebAssembly JIT.
    
    Bug: b/179832693
    Change-Id: I7364d22183e123c5145caae9f546d3855012d73e
    Reviewed-on: https://swiftshader-review.googlesource.com/c/SwiftShader/+/55488
    Kokoro-Result: kokoro <noreply+kokoro@google.com>
    Tested-by: 's avatarNicolas Capens <nicolascapens@google.com>
    Reviewed-by: 's avatarAlexis Hétu <sugoi@google.com>
    Commit-Queue: Nicolas Capens <nicolascapens@google.com>
    9534228d
IceInstX8632.cpp 10.7 KB
EditWeb IDE
×

Replace IceInstX8632.cpp

Attach a file by drag & drop or click to upload


Cancel
A new branch will be created in your fork and a new merge request will be started.