Skip to content

Commit cb295aa

Browse files
tariqkurd-repoarichardson
authored andcommitted
add note about CL changing on sealed caps
1 parent b4dcdf5 commit cb295aa

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

src/cap-description.adoc

+2
Original file line numberDiff line numberDiff line change
@@ -308,6 +308,8 @@ around. The only way of clearing the type bit of a capability is by rebuilding
308308
it via a superset capability with <<CBLD>>. {cheri_base_ext_name} does not offer
309309
an unseal instruction.
310310

311+
NOTE: The <<section_cap_level>> field can be reduced even if the capability is sealed, see <<cap_level_load_summary>>.
312+
311313
For code capabilities, the sealing bit is used to implement immutable
312314
capabilities that describe function entry points, known as sealed entry (sentry) capabilities. Such capabilities can be leveraged
313315
to establish a form of control-flow integrity between mutually distrusting code. A program may jump to a

0 commit comments

Comments
 (0)