Data in shared memory provided by VMM is untrusted so from a security perspective the data shall be consumed after being copied into private memory.
Private shadow for SharedMemory is provided to add a more easy and functional safe mechanism to use the untrusted data. It is 1:1 allocated for a shared memory request, and users can use the data with copy_to_private_shadow directly to get a private copy with additional memory allocation/free operations.
Data in shared memory provided by VMM is untrusted so from a security perspective the data shall be consumed after being copied into private memory.
Private shadow for
SharedMemory
is provided to add a more easy and functional safe mechanism to use the untrusted data. It is 1:1 allocated for a shared memory request, and users can use the data withcopy_to_private_shadow
directly to get a private copy with additional memory allocation/free operations.