You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Mar 24, 2022. It is now read-only.
Context
This is part of a series of bugs that I spoke to @tyler@pchickey about. We are currently using Lucet to sandbox libraries in C++ applications. The idea behind this is that using a wasm sandboxed version of the library allows ensuring that a memory safety issue in the library does not automatically result in a memory safety vulnerability in the full application. One of the consumers of this work is the Firefox web browser.
Problem
lucet-module, which is part of the runtime pulls in all of cranelift-codegen. So, from code comments here, this is already on people's radar. I am just opening this bug to express that we have an interest in solving this.
Actions
Could you let me know if this is a change that is being planned anytime soon internally, or if it would be better if I work on a patch that can be accepted? (cc @froydnj)
Context
This is part of a series of bugs that I spoke to @tyler @pchickey about. We are currently using Lucet to sandbox libraries in C++ applications. The idea behind this is that using a wasm sandboxed version of the library allows ensuring that a memory safety issue in the library does not automatically result in a memory safety vulnerability in the full application. One of the consumers of this work is the Firefox web browser.
Problem
lucet-module, which is part of the runtime pulls in all of cranelift-codegen. So, from code comments here, this is already on people's radar. I am just opening this bug to express that we have an interest in solving this.
Actions
Could you let me know if this is a change that is being planned anytime soon internally, or if it would be better if I work on a patch that can be accepted? (cc @froydnj)