Masu bincike daga Jami'ar Stanford, Jami'ar California a San Diego da Jami'ar Texas a Austin kayan aiki , wanda za'a iya amfani dashi azaman ƙarin keɓewa don toshe lahani a cikin ɗakunan karatu na aiki. RLBox yana da nufin magance matsalar tsaro na ɗakunan karatu na ɓangare na uku waɗanda ba sa ƙarƙashin ikon masu haɓakawa, amma waɗanda raunin su zai iya lalata babban aikin.
Kamfanin Mozilla Yi amfani da RLBox a cikin Linux yana gina Firefox 74 da macOS yana gina Firefox 75 don ware kisa na ɗakin karatu. , alhakin samar da haruffa. Koyaya, RLBox bai keɓance ga Firefox ba kuma ana iya amfani dashi don ware kowane ɗakin karatu a cikin ayyukan sabani. RLBox ƙarƙashin lasisin MIT. RLBox a halin yanzu yana goyan bayan dandamali na Linux da macOS, tare da tallafin Windows ana tsammanin daga baya.
Ayyukan RLBox sun sauko don tattara lambar C/C++ na ɗakin karatu mai keɓe cikin ƙananan matsakaiciyar lambar WebAssembly, wanda aka tsara a matsayin tsarin WebAssembly, an saita izinin izini dangane da wannan tsarin kawai (misali, ɗakin karatu). don sarrafa igiyoyi ba za su iya buɗe soket na cibiyar sadarwa ko fayil ba) . Ana canza lambar C/C++ zuwa WebAssembly ta amfani da shi .
Don aiwatar da aiwatar da kai tsaye, an haɗa tsarin WebAssembly cikin lambar injin ta amfani da mai tarawa kuma yana gudana a cikin wani “nanoprocess” dabam dabam daga sauran ƙwaƙwalwar aikace-aikacen. Lucet mai tarawa ya dogara ne akan lamba ɗaya da injin JIT , ana amfani da shi a Firefox don aiwatar da WebAssembly.
Tsarin da aka haɗa yana aiki a cikin keɓan wurin ƙwaƙwalwar ajiya kuma baya da damar zuwa sauran sararin adireshin. Idan an yi amfani da rauni a cikin ɗakin karatu, maharin za a iyakance shi kuma ba zai iya samun dama ga wuraren ƙwaƙwalwar ajiya na babban tsari ko canja wurin sarrafawa a waje da keɓaɓɓen yanayi.
Ana ba da bayanai masu girma ga masu haɓakawa , wanda ke ba ka damar kiran ayyukan ɗakin karatu a yanayin keɓe. Masu gudanar da gidan yanar gizo suna buƙatar kusan babu ƙarin albarkatu kuma hulɗa tare da su ba ta da hankali fiye da kiran ayyukan yau da kullun (ana aiwatar da ayyukan ɗakin karatu a cikin nau'in lambar asali, kuma farashi mai ƙima yana tasowa ne kawai lokacin kwafi da bincika bayanai yayin hulɗa tare da keɓaɓɓen yanayi). Ba za a iya kiran ayyukan ɗakin karatu ba kai tsaye kuma dole ne a sami dama ta amfani da shi
Layer invoke_sandbox_function().
Bi da bi, idan ya zama dole don kiran ayyuka na waje daga ɗakin karatu, dole ne a bayyana waɗannan ayyuka a sarari ta amfani da hanyar rejista_callback (ta tsohuwa, RLBox yana ba da damar yin amfani da ayyuka. ). Don tabbatar da amincin ƙwaƙwalwar ajiya, keɓancewar aiwatar da lambar bai isa ba kuma yana buƙatar duba rafukan bayanan da aka dawo.
Ƙimar da aka ƙirƙira a cikin keɓantaccen yanayi ana yiwa alama mara amana da iyakance amfani kuma don "tsaftacewa" suna buƙatar da kwafi zuwa ƙwaƙwalwar ajiyar aikace-aikacen.
Ba tare da tsaftacewa ba, ƙoƙarin yin amfani da gurbatattun bayanai a cikin mahallin da ke buƙatar bayanai na yau da kullum (kuma akasin haka) yana haifar da kurakurai a lokacin tattarawa. Ana wuce ƙananan gardamar ayyuka, ƙimar dawowa, da sifofi ta hanyar kwafi tsakanin ƙwaƙwalwar aiki da ƙwaƙwalwar ajiyar akwatin yashi. Don manyan saitin bayanai, ana keɓance ƙwaƙwalwar ajiya a cikin keɓantaccen yanayi kuma ana mayar da ma'anar nunin sandbox kai tsaye zuwa babban tsari.
source: budenet.ru