Moving Memory Around

Containers
Used to transfer memory
Versioned
Version incremented after most operations
Permits servers to determine if data was compromised

container_create (num pages) => handle
container_create_from (array of <handle id, offset, length>) => handle
container_deallocate (handle) => version

Places a number of physical pages into a container
Sets version id to 0

container_grant_access (handle, time, task) => version
container_revoke_access (handle, task) => version

Gives access of a container to another task
Specifies the maximum locking time
Returns the new version