History

Samuel Groß 277fdd1de7 V8 Sandbox rebranding This CL renames a number of things related to the V8 sandbox. Mainly, what used to be under V8_HEAP_SANDBOX is now under V8_SANDBOXED_EXTERNAL_POINTERS, while the previous V8 VirtualMemoryCage is now simply the V8 Sandbox: V8_VIRTUAL_MEMORY_CAGE => V8_SANDBOX V8_HEAP_SANDBOX => V8_SANDBOXED_EXTERNAL_POINTERS V8_CAGED_POINTERS => V8_SANDBOXED_POINTERS V8VirtualMemoryCage => Sandbox CagedPointer => SandboxedPointer fake cage => partially reserved sandbox src/security => src/sandbox This naming scheme should simplify things: the sandbox is now the large region of virtual address space inside which V8 mainly operates and which should be considered untrusted. Mechanisms like sandboxed pointers are then used to attempt to prevent escapes from the sandbox (i.e. corruption of memory outside of it). Furthermore, the new naming scheme avoids the confusion with the various other "cages" in V8, in particular, the VirtualMemoryCage class, by dropping that name entirely. Future sandbox features are developed under their own V8_SANDBOX_X flag, and will, once final, be merged into V8_SANDBOX. Current future features are sandboxed external pointers (using the external pointer table), and sandboxed pointers (pointers guaranteed to point into the sandbox, e.g. because they are encoded as offsets). This CL then also introduces a new build flag, v8_enable_sandbox_future, which enables all future features. Bug: v8:10391 Change-Id: I5174ea8f5ab40fb96a04af10853da735ad775c96 Cq-Include-Trybots: luci.v8.try:v8_linux64_heap_sandbox_dbg_ng,v8_linux_arm64_sim_heap_sandbox_dbg_ng Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3322981 Reviewed-by: Hannes Payer <hpayer@chromium.org> Reviewed-by: Igor Sheludko <ishell@chromium.org> Reviewed-by: Michael Achenbach <machenbach@chromium.org> Reviewed-by: Toon Verwaest <verwaest@chromium.org> Commit-Queue: Samuel Groß <saelo@chromium.org> Cr-Commit-Position: refs/heads/main@{#78384}		2021-12-15 17:09:36 +00:00
..
BUILD.gn	Revert "Reland "[DEPS] Add abseil to deps""	2021-09-28 20:08:22 +00:00
compiler-types.cc	[v8windbg] Show bitset name of compiler type	2020-06-23 19:36:36 +00:00
debug-helper-internal.cc	Reland^2 "[ptr-cage] Rename IsolateRoot to PtrComprCageBase"	2021-04-06 01:55:28 +00:00
debug-helper-internal.h	[v8windbg] Display js function only for js frame	2020-09-21 07:50:14 +00:00
debug-helper.h	[v8windbg] Display js function only for js frame	2020-09-21 07:50:14 +00:00
debug-macro-shims.h	[torque] Begin porting ScopeInfo to Torque	2021-01-20 11:56:21 +00:00
DEPS	Reland "Add postmortem debugging helper library"	2019-07-31 14:30:19 +00:00
gen-heap-constants.py	[tools] Fix v8windbg behavior on Map's bit_field2	2020-03-09 17:36:27 +00:00
get-object-properties.cc	V8 Sandbox rebranding	2021-12-15 17:09:36 +00:00
heap-constants.cc	[tools] Fix v8windbg behavior on Map's bit_field2	2020-03-09 17:36:27 +00:00
heap-constants.h	[tools] Fix v8windbg behavior on Map's bit_field2	2020-03-09 17:36:27 +00:00
list-object-classes.cc	Reland "[torque] refactor: use -tq only in filenames derived from .tq files"	2020-09-25 15:04:18 +00:00
OWNERS	Add myself as an owner for debug-helper and v8windbg	2020-09-21 15:19:27 +00:00
README.md	Reland "Add postmortem debugging helper library"	2019-07-31 14:30:19 +00:00

README.md

V8 debug helper

This library is for debugging V8 itself, not debugging JavaScript running within V8. It is designed to be called from a debugger extension running within a native debugger such as WinDbg or LLDB. It can be used on live processes or crash dumps, and cannot assume that all memory is available in a dump.