You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/security/polyglot-sandbox.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -349,7 +349,7 @@ The allocated bytes are checked by a separate high-priority thread that will be
349
349
There is one such thread for each memory-limited context (one with `sandbox.MaxHeapMemory` set).
350
350
The retained bytes computation is done by yet another high-priority thread that is started from the allocated bytes checking thread as needed.
351
351
The retained bytes computation thread also cancels the context if the heap memory limit is exceeded.
352
-
Additionally, when the low memory trigger is invoked, all contexts on engines with at least one memory-limited context are paused together with their allocation checkers.
352
+
Additionally, when the low memory trigger is invoked, all memory-limited contexts are paused together with their allocation checkers.
353
353
All individual retained size computations are canceled.
354
354
Retained bytes in the heap for each memory-limited context are computed by a single high-priority thread.
355
355
@@ -390,7 +390,7 @@ The described low memory trigger can be disabled by the `sandbox.UseLowMemoryTri
390
390
By default it is enabled ("true"). If disabled ("false"), retained size checking for the execution context can be triggered only by the allocated bytes checker.
391
391
All contexts using the `sandbox.MaxHeapMemory` option must use the same value for `sandbox.UseLowMemoryTrigger`.
392
392
393
-
The `sandbox.UseLowMemoryTrigger` option is not supported for the ISOLATED and UNTRUSTED sandbox policies. The option defaults to disabled (`false`) wherever it is not supported.
393
+
The `sandbox.UseLowMemoryTrigger` option is not supported for the ISOLATED and UNTRUSTED sandbox policies as the polyglot engine runs in a `native-image` isolate for those policies. It is also not supported on a `native-image` host regardless of the policy. The option defaults to disabled (`false`) wherever it is not supported.
394
394
395
395
### Limiting the Amount of Data Written to Standard Output and Error Streams
0 commit comments