Abaphenyi baseStanford University, lo University of California eSan diego y la Inyuvesi yaseTexas e-Austin Bathuthukile iqoqo lamathuluzi abalinike igama le- "RLBox", lokho ingasetshenziswa njengezinga elengeziwe lokufakwa ukuvimba ukuba sengozini kwemitapo yolwazi yokusebenza.
I-RLBox ihlose ukuxazulula inkinga yezokuphepha yemitapo yolwazi evela eceleni ezingathenjwa ezingalawulwa ngonjiniyela, kepha ukuba sengozini lapho iphrojekthi enkulu ingahle ibe sengcupheni.
IMozilla ihlela ukusebenzisa iRLBox kuFirefox 74 yakhela iLinux ne ukuhlanganiswa kwe- MacOS kuFirefox 75 ukwehlukanisa ukwenziwa komtapo wolwazi we-Graphite, elibhekele ukumela imithombo.
Ngasikhathi sinye, i-RLBox ayicaciswanga yiFirefox futhi ingasetshenziselwa ukuhlukanisa noma yimuphi umtapo wezincwadi kumaphrojekthi wokuphikisana.
Mayelana ne-RLBox
Indlela yokusebenza I-RLBox ibilisela phansi ekuhlanganiseni ikhodi ye-C / C ++ kusuka kumtapo wezincwadi ongayedwa ube yikhodi yeWebAssembly emaphakathi ileveli ephansi, ekhishwa njengemodyuli yeWebAssembly, egunya layo lisethelwe ukubopha kuphela le module (ngokwesibonelo, umtapo wolwazi wokucubungula izintambo awukwazi ukuvula isokhethi noma ifayela lenethiwekhi) C / C ++ ikhodi yokuguqulwa i-WebAssembly yenziwa kusetshenziswa i-wasi-sdk.
Ukwenza ngqo, imojuli yeWebAssembly ihlanganiswe ibe yikhodi yomshini kusetshenziswa i-Lucet compiler futhi isebenza nge "nanoprocess" ehlukile kuyo yonke imemori yohlelo lokusebenza. Umhlanganisi weLucet usekelwe kwikhodi efanayo nenjini yeCranelift JIT esetshenziswe kuFirefox ukusebenzisa i-WebAssembly.
Imodyuli ehlanganisiwe isebenza endaweni yememori ehlukile futhi ayinakho ukufinyelela kuyo yonke enye indawo yekheli. Endabeni yokuxhaphaza ukuba sengozini kumtapo wezincwadi, umhlaseli uzokhawulelwa futhi ngeke akwazi ukufinyelela ezindaweni zememori zenqubo eyinhloko noma adlulise ukulawula ngaphandle kwe-sandbox.
I-API esezingeni eliphakeme ihlinzekelwa abathuthukisi, ekuvumela ukuthi ushayele imisebenzi yelabhulali ngemodi yokuzihlukanisa.
I-Los Abalawuli beWebAssembly abadingi cishe izinsiza ezingeziwe futhi ukusebenzisana nabo akuhambi kancane kunokubiza imisebenzi ejwayelekile (imisebenzi yelabhulali yenziwa ngendlela yekhodi lendabuko, futhi ukulayishwa ngokweqile kwenzeka kuphela lapho kukopishwa futhi kubhekwa idatha kwinqubo yokusebenzisana ne-sandbox) .
Imisebenzi yelabhulali ehlukanisiwe ayinakunxenxwa ngqo, futhi ukuze ufinyelele kuyo, kufanele usebenzise ungqimba invoke_sandbox_function().
Ngokulandelayo, uma bedinga ukubiza imisebenzi yangaphandle evela kulabhulali, le misebenzi kufanele ichazwe ngokusobala kusetshenziswa indlela ye-registry_callback (ngokuzenzakalela, i-RLBox inikeza ukufinyelela kwemisebenzi ejwayelekile yomtapo wezincwadi).
Ukuqinisekisa ukusebenza kwememori ephephile, ukuhlukanisa ukusetshenziswa kwekhodi akwanele futhi futhi udinga ukunikeza ukuqinisekiswa kwemifudlana yedatha ebuyisiwe.
Amanani akhiqizwe endaweni engayodwa amakwa njengathembekile, anqunyelwe amathegi angcolile, futhi adinga ukuqinisekiswa nokukopishelwa kwimemori yohlelo lokusebenza ye- "cleanup."
Ngaphandle kokuhlanza, umzamo wokusebenzisa idatha engcolile kumongo odinga idatha ejwayelekile (futhi okuphambene nalokho) kuholela ekwakhiweni kwamaphutha esigabeni sokuhlanganiswa.
Izimpikiswano zomsebenzi omncane, amanani wokubuyisa, nezakhiwo kudluliselwa ngokukopisha phakathi kwememori yenqubo nememori ye-sandbox. Kumasethi wedatha amakhulu, inkumbulo inikezwa endaweni ecezile futhi isikhombisi esiqondile "se-sandbox reference" sibuyiselwa kwinqubo enkulu.
Intuthuko ye-RLBox isatshalaliswa ngaphansi kwelayisense ye-MIT. I-RLBox okwamanje isekela i-Linux ne-macOS futhi kulindeleke ukuthi isebenzisane neWindows ngokuhamba kwesikhathi.
Uma ufuna ukwazi kabanzi ngalobu buchwepheshe obusha iMozilla ehlela ukubusebenzisa kuFirefox, ungaxhumana nokuthuthuka kwayo futhi uvivinye i-API Kulesi sixhumanisi esilandelayo.