diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2022-09-30 18:08:20 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2022-09-30 18:08:20 -0400 |
| commit | e1eff0ce551a88b576d0f8b93574fc8990692526 (patch) | |
| tree | 816f01b97a827c17db35a9cd02c0f627a5e8d7ab | |
| parent | 0dc276c06db289ead5acd852ac99a3baac2e1d89 (diff) | |
expand information on AOT / JIT changes
| -rw-r--r-- | static/features.html | 14 |
1 files changed, 12 insertions, 2 deletions
diff --git a/static/features.html b/static/features.html index 7eaca1f4..494c8c41 100644 --- a/static/features.html +++ b/static/features.html @@ -337,8 +337,18 @@ project again).</li> </ul> </li> - <li>Prevention of dynamic native code execution in-memory or via the filesystem - for the base OS without going via the package manager, etc.</li> + <li>Android Runtime Just-In-Time (JIT) compilation/profiling is fully + disabled and replaced with full ahead-of-time (AOT) compilation. The + only JIT compilation in the base OS is the v8 JavaScript JIT which is + disabled by default for the Vanadium browser with per-site exception + support.</li> + <li>Prevention of dynamic native code execution via either memory or + storage for the base OS including nearly all the base OS apps. For the + OS itself, only the processes involved in the OS package management + system can write data to storage that can be executed and only the + media DRM sandbox can do in-memory dynamic native code execution. The + Vanadium browser and WebView are excluded in order to support the JS + JIT compiler.</li> <li>Filesystem access hardening</li> </ul> </section> |