Hacker News Reader

Which is why it's reasonable to have configurable limits for both processing space and time in anything handling untrusted data.

View on HN

Unixes give us that. You have to fork the computation to have it contained in its own process, whose run-time, virtual memory limit, and stack depth you can control.

Doing it all in your VM/runtime, so you can bail the computation with an exception, is more challenging.

> Unixes give us that. You have to fork the computation to have it contained in its own process

Is forking a new process on each call to a recursive function practical?

Reply on news.ycombinator.com