Inferencium/website
1
0
Fork 0
Code Issues Activity

Switch from paragraph formatting to table formatting for arena counts

Browse Source
This commit is contained in:
inference 2024-01-29 20:38:26 +00:00
parent ee89fe5ef5
commit 2c58ce1908
Signed by: inference
SSH Key Fingerprint: SHA256:FtEVfx1CmTKMy40VwZvF4k+3TC+QhCWy+EmPRg50Nnc
1 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
documentation/hardened_malloc.xhtml
View File

@ -1,7 +1,7 @@
<!DOCTYPE html> <!DOCTYPE html>
<!-- Inferencium - Website - Documentation - hardened_malloc --> <!-- Inferencium - Website - Documentation - hardened_malloc -->
<!-- Version: 3.0.0-alpha.11 --> <!-- Version: 3.0.0-alpha.12 -->
<!-- Copyright 2023 Jake Winters --> <!-- Copyright 2023 Jake Winters -->
<!-- SPDX-License-Identifier: BSD-3-Clause --> <!-- SPDX-License-Identifier: BSD-3-Clause -->
@ -79,8 +79,18 @@
Note that having too many arenas may cause memory fragmentation and decrease Note that having too many arenas may cause memory fragmentation and decrease
system performance. The number of arenas has no impact on the security system performance. The number of arenas has no impact on the security
properties of hardened_malloc.</p> properties of hardened_malloc.</p>
<p><b>Minimum number of arenas:</b> 1</p> <table align="center">
<p><b>Maximum number of arenas:</b> 256</p> <tr>
<th id="arena-min">Minimum</th>
<th id="arena-max">Maximum</th>
<th id="arena-def">Default</th>
</tr>
<tr>
<td headers="arena-min">1</td>
<td headers="arena-max">256</td>
<td headers="arena-def">4</td>
</tr>
</table>
<p>For extra security, <code>CONFIG_SEAL_METADATA=true</code> can be used in <p>For extra security, <code>CONFIG_SEAL_METADATA=true</code> can be used in
order to control whether Memory Protection Keys are used to disable access to order to control whether Memory Protection Keys are used to disable access to
all writable allocator state outside of the memory allocator code. It's all writable allocator state outside of the memory allocator code. It's