Mozilla Yayamba Kukhazikitsa RLBox Library Isolation Technology

Ofufuza ochokera ku Stanford University, University of California ku San Diego ndi University of Texas ku Austin otukuka zida Zamgululi, yomwe ingagwiritsidwe ntchito ngati chowonjezera chodzipatula kuti aletse zovuta m'malaibulale ogwira ntchito. RLBox ikufuna kuthetsa vuto lachitetezo cha malaibulale osadalirika a chipani chachitatu omwe sali m'manja mwa opanga, koma omwe ali pachiwopsezo amatha kusokoneza ntchito yayikulu.

Kampani ya Mozilla mapulani gwiritsani ntchito RLBox mu Linux yomanga Firefox 74 ndi macOS builds a Firefox 75 kuti mulekanitse kuphedwa kwa library. Graphite, yomwe ili ndi udindo wopereka mafonti. Komabe, RLBox siinatchulidwe ku Firefox ndipo itha kugwiritsidwa ntchito kupatula malaibulale aliwonse pamapulojekiti osagwirizana. Zotukuka Zamgululi kufalitsa pansi pa MIT layisensi. RLBox pakadali pano imathandizira nsanja za Linux ndi macOS, ndi chithandizo cha Windows chomwe chikuyembekezeka mtsogolo.

Njira Ntchito ya RLBox imatsikira pakupanga kachidindo ka C/C++ ka laibulale yokhayokha kukhala code yotsika yapakatikati ya WebAssembly, yomwe imapangidwa ngati gawo la WebAssembly, zilolezo zomwe zimayikidwa molingana ndi gawoli (mwachitsanzo, laibulale). chifukwa zingwe zopangira sizitha kutsegula socket kapena fayilo) . Kutembenuza C/C++ code kukhala WebAssembly kumachitika pogwiritsa ntchito wasi-sdk.

Kuti aphedwe mwachindunji, gawo la WebAssembly limapangidwa kukhala makina amakina pogwiritsa ntchito compiler Icho chimawala ndikuyenda mu "nanoprocess" yosiyana ndi kukumbukira kwa pulogalamuyo. Lucet compiler idakhazikitsidwa pama code omwewo monga injini ya JIT Kulimbana, yogwiritsidwa ntchito mu Firefox kuchita WebAssembly.

Module yosonkhanitsidwa imagwira ntchito m'malo okumbukira osiyana ndipo ilibe mwayi wopeza malo ena onse adilesi. Ngati chiwopsezo mu laibulale chikugwiritsidwa ntchito, wowukirayo amakhala wocheperako ndipo sangathe kulowa m'malo okumbukira njira yayikulu kapena kusamutsa kuwongolera kunja kwa malo akutali.

Zambiri zapamwamba zimaperekedwa kwa opanga API, zomwe zimakupatsani mwayi woyitanitsa ntchito za library munjira yodzipatula. Ogwira ntchito pa WebAssembly amafuna pafupifupi palibe zowonjezera zowonjezera ndipo kuyanjana nawo sikuchedwa kwambiri kuposa kuyitanira ntchito wamba (ntchito za library zimachitidwa mwanjira ya code yachibadwidwe, ndipo ndalama zochulukirapo zimangobwera pokopera ndikuwunika deta mukakumana ndi malo akutali). Ntchito za library zodzipatula sizingatchulidwe mwachindunji ndipo ziyenera kupezeka pogwiritsa ntchito
wosanjikiza invoke_sandbox_function().

Komanso, ngati kuli kofunikira kuyimbira ntchito zakunja kuchokera ku laibulale, izi ziyenera kufotokozedwa momveka bwino pogwiritsa ntchito njira ya register_callback (mwachisawawa, RLBox imapereka mwayi wopeza ntchito. standard library). Kuti muwonetsetse chitetezo cham'makumbukiro, kudzipatula kwa code sikokwanira ndipo kumafunanso kuyang'ana mitsinje ya data yomwe yabwezedwa.

Makhalidwe opangidwa kumalo akutali amadziwika kuti ndi osadalirika komanso osagwiritsidwa ntchito mochepera zizindikiro zoipitsidwa ndi “kuyeretsa” amafunikira kutsimikizira ndikukopera ku memory application.
Popanda kuyeretsa, kuyesa kugwiritsa ntchito deta yodetsedwa muzochitika zomwe zimafuna deta yokhazikika (ndi mosemphanitsa) kumabweretsa zolakwika zomwe zimapangidwira panthawi yosonkhanitsa. Zotsutsana zazing'ono zantchito, zobwereranso, ndi zomangira zimadutsa pakukopera pakati pa memory memory ndi sandbox memory. Pamaseti akuluakulu a data, kukumbukira kumaperekedwa kumalo akutali ndipo cholozera cholozera cha sandbox mwachindunji chimabwezeretsedwa kunjira yayikulu.

Source: opennet.ru