&gt; There&#39;s one thing to add, though: By running device drivers in dedicated<br>

&gt; 
user-level processes, a crashing driver in the common case only takes<br>

&gt; 
down its own process, but the rest of the system continues to run.<br>

&gt; 
That&#39;s a major advantage, because you can have a monitoring process that<br>

&gt; 
then restarts the driver [1] this way.<br>
<br>

&gt; 
However, even a user space driver can still crash the system if it goes<br>

&gt; 
rampant by misprogramming the DMA engine and you don&#39;t use an IOMMU.<br>
<br><div>

&gt; 
Bjoern<br></div><div><br></div><div>Are there plans to provide IOMMU support in Fiasco.OC?</div>

<br>