> As long as all modules in server are loaded in single process, the
> virtual address space is shared for them all. So any hidden AV in one
> place can cause absolutely strange and unpredictable results in
> another.
>
> Good memory dump, taken immediately at failure point, is much better
> than corrupted data.
>
> If you want the server to survive bugs (instead of fixing them) in
> external modules, run them as outside process(es) connected to the
> server with some communication facility and perform data validation
> on calls.

Ok, makes sense. I have spent to many years with Java, where AV is not
possible.

Roman