A process that checks that a memory-address range is in user-mode address space and that the range can be read or written in the context of the current process.