• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1# ArkCompiler Changelog
2
3## cl.arkcompiler.1 JIT Is Disabled by Default and Requires Permission Certificate and Approval to Enable
4
5**Access Level**
6
7Public API
8
9**Reason for Change**
10
11The Just In Time (JIT) compilation feature, which compiles code on-the-fly during execution, can pose risks of arbitrary code injection. To safeguard application security and uphold the integrity of the OpenHarmony ecosystem, the system now defaults to disabling the JIT functionality in the JSVM. Instead, it executes JS code through interpretation.
12
13**Impact of the Change**
14
15This change requires application adaptation.
16
17Before the change:
18JIT is enabled by default.
19
20After the change:
21JIT is disabled by default and can only be enabled after obtaining a permission certificate. Without JIT, wasm interfaces that rely on JIT fail to execute, and there may be performance differences between JIT and interpretation in specific scenarios.
22
23**Start API Level**
24
25API 11
26
27**Change Since**
28
29OpenHarmony SDK 5.1.0.51
30
31**Key API/Component Changes**
32
33| API                         | Impact                                                         |
34| ------------------------------- | --------------------------------------------------------------- |
35| OH\_JSVM\_CompileWasmModule   | Returns JIT\_MODE\_EXPECTED status code without JIT permission.                     |
36| OH\_JSVM\_CompileWasmFunction | Returns JIT\_MODE\_EXPECTED status code without JIT permission.                     |
37| OH\_JSVM\_CreateWasmCache     | Returns JIT\_MODE\_EXPECTED status code without JIT permission.                     |
38| OH\_JSVM\_RunScript           | Fails to execute scripts containing wasm without JIT permission and may exhibit performance differences in specific scenarios.|
39
40**Adaptation Guide**
41
42For new applications that wish to use JIT, you must submit an application for the **ohos.permission.kernel.ALLOW_EXECUTABLE_FORT_MEMORY** restricted ACL permission to the AppGallery Connect (AGC). In your application materials, specify the exact scenarios in which the JIT functionality of the JSVM engine will be used. Once the permission is approved, you can update your profile certificate from the AGC website and repackage your application for release. For details, see [Requesting Restricted Permissions](https://developer.huawei.com/consumer/en/doc/harmonyos-guides-V5/declare-permissions-in-acl-V5).
43
44Precautions
451. If restricted permissions are only declared in the configuration file without a permission profile, the application installation will fail.
462. If the error "The ohos.permission.kernel.ALLOW_EXECUTABLE_FORT_MEMORY permission under requestPermissions must be a value that is predefined within the SDK or a custom one that you have included under definePermissions." is displayed during the compilation process, update the OpenHarmony SDK to the latest version (5.0.2.125 or later).
47