7 ms·
The V8 sandbox doesn't just protect against JIT issues, it also protects against logical issues in the runtime and object model.
by Leszek 1y ago
The V8 sandbox doesn't just protect against JIT issues, it also protects against logical issues in the runtime and object model.
- mike_hearn 1y agoNot exactly. It's the nature of a sandbox that it doesn't remove bugs, it only reduces their blast radius. The Truffle architecture actually removes bugs by changing how you write the language VM to begin with.
- Leszek 1y agoI said it "protects" against bugs, not that it "removes" them. The Truffle architecture removes mismatches between JIT and interpreted code (when it doesn't have bugs itself, which is not guaranteed either), but it doesn't remove runtime or object model logic errors that affect both.
- funcDropShadow 1y agoBecause, Truffle is reused in multiple language VMs their overall attack surface is smaller than it would be with classical language VM architectures.