1 Jan 16:22
Re: Unmapping fpages
R. Koot <r.koot <at> students.uu.nl>
2005-01-01 15:22:17 GMT
2005-01-01 15:22:17 GMT
Espen Skoglund wrote: >[R Koot] > > >>This is exectly what my first reply was, but the problem is that >>we're talking about the physmem server, and that memory would >>*always* be remapped into another adresses space soon after being >>unmapped (into creditcard_and_password_storage_serv for example). If >>the original server didn't do an l4_unmap it would now be able to >>read the memory of that other server. >> >> > >In which case the physmem server would unmap the memory from *all* >spaces before giving it out to creditcar_and_password_storage_serv. >Unmapping the memory from all servers is no problem. > > But this would at best have a high (and maybe unnecessary) performance penalty associated with it. The problem here isn't that it's can't be done the way it is now, it's just that there might be a better way (or maybe not, it would be necessary to investigate both the benefits and cost first). The main problem with the current implementation is that it creates interdependencies between servers (maybe I should be more careful in my wording and say "it's more/very/too difficult to design a system which there aren't any with the current L4_Unmap implementation, but I won't). Interdependencies make the system complex. more difficult to analize, cause performance and scalability problems, cause hidden bugs and, as Neal mentioned, open up the possibility of DoS attacks.(Continue reading)
RSS Feed