[malft]

Yes, that's the point. If you need to parse a JPEG, you spawn a VM to do so. It is allowed to use n seconds of CPU, k bytes of memory, and send a bitmap back to the caller.

(Sure, you could screw it up if the caller accepts a negative-size bitmap and corrupts its heap. Lets assume that process is written in a memory-safe language.)

[pjmlp]

Assumptions is how exploits get triggered.

[sealeck]

It would be unlikely to incorrectly assume that the language you are using is not in fact memory safe no?