Hacker News Reader

"Isolation" of driver code that can talk to on-SoC hardware is just not very meaningful. You can only have real driver isolation if it's enforced on the hardware side via some IOMMU mechanism (or by keeping the hardware isolated on the USB bus, etc.), otherwise you're just adding pointless overhead for no real benefit.

View on HN

Here you go:

https://blog.quarkslab.com/playing-around-with-the-fuchsia-o...

I didn't get it. Don't we want, for example, wifi driver not to be able to access and corrupt (due to some bug) GPU driver's memory?

It's desirable, but typically hardware devices have DMA-capable buses that can read / write to arbitrary physical memory. So a buggy or malicious WiFi driver may be able to use the WiFi DMA hardware to write into the GPU driver's memory, and no pure software mechanism can stop it from doing so.

IOMMUs solve this problem by giving hardware devices their own virtual address spaces.

Does this actually happen?

I’m sure it does when used to exploit devices.

Reply on news.ycombinator.com