I don't think that prevents a caller from adversarially injecting - and then catching - faults into a callee in such a way that the caller can control which part of the callee runs and which part doesn't. The ability to catch the fault is what causes the security issues, since the caller can keep running even when the callee was forced to give up.
Being able to detect and act upon low memory conditions is helpful in other ways, but I don't think it prevents the bad scenario from happening. -Filip > On Sep 27, 2015, at 4:47 PM, Ron Waldon <[email protected]> wrote: > > Android has an older onLowMemory() callback and a newer onTrimMemory() > callback: > - > http://developer.android.com/reference/android/content/ComponentCallbacks.html#onLowMemory() > - > http://developer.android.com/reference/android/content/ComponentCallbacks2.html#onTrimMemory(int) > > iOS has something similar as well. > > Is making these available in ECMAScript proper or an annex a potential > solution to this class of problem? > _______________________________________________ > es-discuss mailing list > [email protected] > https://mail.mozilla.org/listinfo/es-discuss
_______________________________________________ es-discuss mailing list [email protected] https://mail.mozilla.org/listinfo/es-discuss
