> problem ended up being that I'd have to rework a lot of the slab
> allocator, or do checks on every memory allocation, and I didn't want
> to do that. More detailed info for those who care:

could you use plan 9 terminology? 

> 
> Lemma: In order to avoid overcommitting, we must impose limits on how
> much memory may, in fact, be allocated. To make the implementation
> provable, you must be able to assert that memory always comes from the
> same spot, and you thus have a single path to follow into allocation.

"from the same spot" could mean from the same point in the code or
from the same physical address.  either way, i don't buy this assertion.
counter example: ssd drive remapping algorithms.

- erik

Reply via email to