Re: Fwd: @RISK: Sun Java Floating-Point Value Denial of Service

Thomas Leonard wrote:

> I suspect that starting a new JVM for each client will introduce some
> DoS issues of its own.

I suppose that depends on the JVM implementation.

The Dalvik VM used with Android was designed to run multiple separate
instances on a relatively resource-constrained device.

Here's a paper on the Dalvik VM architecture that describes what they do
to reduce memory consumption:

http://davidehringer.com/software/android/The_Dalvik_Virtual_Machine.pdf

For example, they are able to share compiled class code across VM
instances.  And the register-based VM is more efficient overall. 

This is what makes it possible to run multiple apps on a phone that has
only 128Mbytes of physical memory.

Since you should be able to convert any .jar to .dex using their
conversion tool, it should be relatively easy to try out E-on-Java
with Dalvik.  You just need a VM compiled for x86, which has been
done, though I don't have a link for that this instant.

BR,

James Graves