Skip to content

Commit 6da8560

Browse files
committed
[GR-58699] Improve documentation for the sandbox.UseLowMemoryTrigger option.
PullRequest: graal/18971
2 parents 5559305 + 1ed98a7 commit 6da8560

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

docs/security/polyglot-sandbox.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -349,7 +349,7 @@ The allocated bytes are checked by a separate high-priority thread that will be
349349
There is one such thread for each memory-limited context (one with `sandbox.MaxHeapMemory` set).
350350
The retained bytes computation is done by yet another high-priority thread that is started from the allocated bytes checking thread as needed.
351351
The retained bytes computation thread also cancels the context if the heap memory limit is exceeded.
352-
Additionally, when the low memory trigger is invoked, all contexts on engines with at least one memory-limited context are paused together with their allocation checkers.
352+
Additionally, when the low memory trigger is invoked, all memory-limited contexts are paused together with their allocation checkers.
353353
All individual retained size computations are canceled.
354354
Retained bytes in the heap for each memory-limited context are computed by a single high-priority thread.
355355

@@ -390,7 +390,7 @@ The described low memory trigger can be disabled by the `sandbox.UseLowMemoryTri
390390
By default it is enabled ("true"). If disabled ("false"), retained size checking for the execution context can be triggered only by the allocated bytes checker.
391391
All contexts using the `sandbox.MaxHeapMemory` option must use the same value for `sandbox.UseLowMemoryTrigger`.
392392

393-
The `sandbox.UseLowMemoryTrigger` option is not supported for the ISOLATED and UNTRUSTED sandbox policies. The option defaults to disabled (`false`) wherever it is not supported.
393+
The `sandbox.UseLowMemoryTrigger` option is not supported for the ISOLATED and UNTRUSTED sandbox policies as the polyglot engine runs in a `native-image` isolate for those policies. It is also not supported on a `native-image` host regardless of the policy. The option defaults to disabled (`false`) wherever it is not supported.
394394

395395
### Limiting the Amount of Data Written to Standard Output and Error Streams
396396

0 commit comments

Comments
 (0)