Skip to content

Commit 28a9a6d

Browse files
add note about CL changing on sealed caps
1 parent 02148bd commit 28a9a6d

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

src/cap-description.adoc

+2
Original file line numberDiff line numberDiff line change
@@ -308,6 +308,8 @@ around. The only way of clearing the type bit of a capability is by rebuilding
308308
it via a superset capability with <<CBLD>>. {cheri_base_ext_name} does not offer
309309
an unseal instruction.
310310

311+
NOTE: The <<section_cap_level>> field can be reduced even if the capability is sealed, see <<cap_level_load_summary>>.
312+
311313
For code capabilities, the sealing bit is used to implement immutable
312314
capabilities that describe function entry points, known as sealed entry (sentry) capabilities. Such capabilities can be leveraged
313315
to establish a form of control-flow integrity between mutually distrusting code. A program may jump to a

0 commit comments

Comments
 (0)