InvisiCaps: The Fil-C Capability Model
39 points by kwas
39 points by kwas
Saw the presentation on this at Software Should Work conf last week. It is neat! The capabilities are stored in memory adjacent to the pointers or structures they describe. So it seems like an attacker could modify the capabilities and thus modify what memory the capabilities allow them to access. But attackers are prevented from doing that because the capabilities ensure that would be detected as an out-of-bounds memory access and thus cause a crash. A nice recursive property!