HIGH EFFICIENCY COMPILATION FRAMEWORK
    1.
    发明申请
    HIGH EFFICIENCY COMPILATION FRAMEWORK 失效
    高效率的编译框架

    公开(公告)号:US20100125835A1

    公开(公告)日:2010-05-20

    申请号:US12272401

    申请日:2008-11-17

    IPC分类号: G06F9/45

    CPC分类号: G06F8/4441

    摘要: A method and system for reducing processing overhead during execution of a code block in a high efficiency compilation framework. The method identifies second code blocks within the code block and separates them out from the first code block during compilation. Further, during compilation, the system converts the second code blocks to kernel program modules, in a form recognizable by the system kernel. The compilation is followed by execution of the first code block, with the compiled object code of the first code block being executed in user mode and the kernel program modules being executed in kernel mode.

    摘要翻译: 一种用于在高效编译框架中执行代码块期间减少处理开销的方法和系统。 该方法识别代码块中的第二个代码块,并在编译期间将它们从第一个代码块中分离出来。 此外,在编译期间,系统以系统内核可识别的形式将第二代码块转换为内核程序模块。 编译之后执行第一个代码块,第一个代码块的编译对象代码以用户模式执行,内核程序模块以内核模式执行。

    High efficiency compilation framework for streamlining the execution of compiled code
    2.
    发明授权
    High efficiency compilation framework for streamlining the execution of compiled code 失效
    高效编译框架,用于简化编译代码的执行

    公开(公告)号:US08250552B2

    公开(公告)日:2012-08-21

    申请号:US12272401

    申请日:2008-11-17

    IPC分类号: G06F9/45

    CPC分类号: G06F8/4441

    摘要: A method and system for reducing processing overhead during execution of a code block in a high efficiency compilation framework. The method identifies second code blocks within the code block and separates them out from the first code block during compilation. Further, during compilation, the system converts the second code blocks to kernel program modules, in a form recognizable by the system kernel. The compilation is followed by execution of the first code block, with the compiled object code of the first code block being executed in user mode and the kernel program modules being executed in kernel mode.

    摘要翻译: 一种用于在高效编译框架中执行代码块期间减少处理开销的方法和系统。 该方法识别代码块中的第二个代码块,并在编译期间将它们从第一个代码块中分离出来。 此外,在编译期间,系统以系统内核可识别的形式将第二代码块转换为内核程序模块。 编译之后执行第一个代码块,第一个代码块的编译对象代码以用户模式执行,内核程序模块以内核模式执行。

    Providing programming support to debuggers
    3.
    发明授权
    Providing programming support to debuggers 有权
    为调试器提供编程支持

    公开(公告)号:US08826244B2

    公开(公告)日:2014-09-02

    申请号:US13431391

    申请日:2012-03-27

    CPC分类号: G06F11/3644

    摘要: Method for providing programming support to a debugger are disclosed. The method includes defining at least one debugger programming statement, and instructing the debugger to execute the at least one debugger programming statement which modifies a least a portion of the computer program during execution of the computer program without recompiling the computer program. The debugger may be instructed to execute the at least one debugger programming statement at a specified position of the computer program. The at least one debugger programming statement may include a delete instruction that instructs the debugger to prevent one or more programming statements at a specified position in the computer program from being executed. The debugger may be instructed to execute the at least one debugger programming statement instead of one or more programming statements at a specified position in the computer program without recompiling the computer program.

    摘要翻译: 公开了一种向调试器提供编程支持的方法。 该方法包括定义至少一个调试器编程语句,并且指示调试器执行至少一个调试器编程语句,其在执行计算机程序期间修改计算机程序的至少一部分而不重新编译计算机程序。 可以指示调试器在计算机程序的指定位置执行至少一个调试器编程语句。 所述至少一个调试器编程语句可以包括指令调试器防止在计算机程序中的指定位置处的一个或多个编程语句被执行的删除指令。 可以指示调试器在计算机程序中的指定位置执行至少一个调试器编程语句而不是一个或多个编程语句,而不重新编译计算机程序。

    DOMAIN BASED USER MAPPING OF OBJECTS
    4.
    发明申请
    DOMAIN BASED USER MAPPING OF OBJECTS 审中-公开
    基于域的用户映射对象

    公开(公告)号:US20130046720A1

    公开(公告)日:2013-02-21

    申请号:US13212024

    申请日:2011-08-17

    IPC分类号: G06N5/02

    CPC分类号: G06N5/02

    摘要: According to one aspect of the present disclosure, a method and technique for domain based user mapping of objects is disclosed. The method includes: responsive to determining that an operation is being attempted on an object identified with an object identifier, determining a domain identifier associated with a user attempting the operation; determining whether the operation can proceed on the object based on domain isolation rules, the domain isolation rules indicating rules for allowing or disallowing operations to proceed on objects based on object identifiers and domain identifiers; responsive to determining that the operation on the object can proceed based on the domain isolation rules, accessing user mapping rules that map specified users allowed to perform a specified operation to a specified object; and determining whether the operation can proceed on the object by the user based on the user mapping rules.

    摘要翻译: 根据本公开的一个方面,公开了一种用于对象的基于域的用户映射的方法和技术。 该方法包括:响应于确定对由对象标识符标识的对象正在尝试操作,确定与尝试该操作的用户相关联的域标识符; 确定操作是否可以基于域隔离规则对对象进行,域隔离规则指示允许或不允许基于对象标识符和域标识符对对象进行操作的规则; 响应于基于域隔离规则确定对对象的操作可以进行,访问允许对指定对象执行指定操作的指定用户的用户映射规则; 以及基于所述用户映射规则确定所述操作是否可以由所述用户对所述对象进行。

    Managing Memory
    5.
    发明申请
    Managing Memory 失效
    管理记忆

    公开(公告)号:US20110125812A1

    公开(公告)日:2011-05-26

    申请号:US12623738

    申请日:2009-11-23

    IPC分类号: G06F12/02 G06F12/00

    CPC分类号: G06F12/0284 G06F9/45537

    摘要: Methods, systems, and products for managing memory. In one general embodiment, the method includes assigning an isolated virtual heap in a global kernel heap of a global operating system environment to each of a plurality of isolated virtual operating system environments operating in a global operating system environment; and in response to an invocation of kernel heap memory allocation from one of the isolated virtual operating system environments, dynamically allocating memory to the invoking isolated virtual operating system environment from the virtual kernel heap assigned to the invoking isolated virtual operating system environment. The method may also include running the plurality of isolated virtual operating system environments in the global operating system environment. The plurality of isolated virtual operating system environments may share a single common kernel. The isolated virtual operating system environments may run under the same operating system image.

    摘要翻译: 用于管理内存的方法,系统和产品。 在一个一般实施例中,该方法包括将全局操作系统环境的全局内核堆中的隔离的虚拟堆分配给在全局操作系统环境中操作的多个孤立的虚拟操作系统环境中的每一个; 并且响应于从隔离的虚拟操作系统环境之一调用内核堆内存分配,从分配给调用的隔离虚拟操作系统环境的虚拟内核堆中动态地将内存分配给调用的隔离虚拟操作系统环境。 该方法还可以包括在全局操作系统环境中运行多个隔离的虚拟操作系统环境。 多个隔离的虚拟操作系统环境可以共享单个公共内核。 隔离的虚拟操作系统环境可以在相同的操作系统映像下运行。

    Providing Programming Support to Debuggers
    6.
    发明申请
    Providing Programming Support to Debuggers 有权
    为调试器提供编程支持

    公开(公告)号:US20120198424A1

    公开(公告)日:2012-08-02

    申请号:US13431391

    申请日:2012-03-27

    IPC分类号: G06F9/44

    CPC分类号: G06F11/3644

    摘要: Method for providing programming support to a debugger are disclosed. The method includes defining at least one debugger programming statement, and instructing the debugger to execute the at least one debugger programming statement which modifies a least a portion of the computer program during execution of the computer program without recompiling the computer program. The debugger may be instructed to execute the at least one debugger programming statement at a specified position of the computer program. The at least one debugger programming statement may include a delete instruction that instructs the debugger to prevent one or more programming statements at a specified position in the computer program from being executed. The debugger may be instructed to execute the at least one debugger programming statement instead of one or more programming statements at a specified position in the computer program without recompiling the computer program.

    摘要翻译: 公开了一种向调试器提供编程支持的方法。 该方法包括定义至少一个调试器编程语句,并且指示调试器执行至少一个调试器编程语句,其在执行计算机程序期间修改计算机程序的至少一部分而不重新编译计算机程序。 可以指示调试器在计算机程序的指定位置执行至少一个调试器编程语句。 所述至少一个调试器编程语句可以包括指令调试器防止在计算机程序中的指定位置处的一个或多个编程语句被执行的删除指令。 可以指示调试器在计算机程序中的指定位置执行至少一个调试器编程语句而不是一个或多个编程语句,而不重新编译计算机程序。

    Providing Programming Support to Debuggers
    7.
    发明申请
    Providing Programming Support to Debuggers 失效
    为调试器提供编程支持

    公开(公告)号:US20110126176A1

    公开(公告)日:2011-05-26

    申请号:US12625840

    申请日:2009-11-25

    IPC分类号: G06F9/44

    CPC分类号: G06F11/3644

    摘要: Method, system, and computer program product for providing programming support to a debugger are disclosed. The method includes defining at least one debugger programming statement, and instructing the debugger to execute the at least one debugger programming statement which modifies a least a portion of the computer program during execution of the computer program without recompiling the computer program. The debugger may be instructed to execute the at least one debugger programming statement at a specified position of the computer program. The at least one debugger programming statement may include a delete instruction that instructs the debugger to prevent one or more programming statements at a specified position in the computer program from being executed. The debugger may be instructed to execute the at least one debugger programming statement instead of one or more programming statements at a specified position in the computer program without recompiling the computer program.

    摘要翻译: 公开了一种用于向调试器提供编程支持的方法,系统和计算机程序产品。 该方法包括定义至少一个调试器编程语句,并且指示调试器执行至少一个调试器编程语句,其在执行计算机程序期间修改计算机程序的至少一部分而不重新编译计算机程序。 可以指示调试器在计算机程序的指定位置执行至少一个调试器编程语句。 所述至少一个调试器编程语句可以包括指令调试器防止在计算机程序中的指定位置处的一个或多个编程语句被执行的删除指令。 可以指示调试器在计算机程序中的指定位置执行至少一个调试器编程语句而不是一个或多个编程语句,而不重新编译计算机程序。

    Extensible Access Control List Framework
    8.
    发明申请
    Extensible Access Control List Framework 有权
    可扩展访问控制列表框架

    公开(公告)号:US20110125799A1

    公开(公告)日:2011-05-26

    申请号:US12625826

    申请日:2009-11-25

    IPC分类号: G06F12/14 G06F17/30

    CPC分类号: G06F21/6218 G06F2221/2141

    摘要: Methods, systems, and products for governing access to objects on a filesystem. In one general embodiment, the method includes providing a framework in an operating system environment for support of a plurality of access control list (ACL) types, thereby enabling governing of access to objects on a filesystem according to an associated definition of an ACL type; and accepting definitions of ACL types. The associated definition may comprise a kernel extension.

    摘要翻译: 用于管理对文件系统上对象的访问的方法,系统和产品。 在一个一般实施例中,该方法包括在操作系统环境中提供用于支持多个访问控制列表(ACL)类型的框架,从而根据ACL类型的相关定义使得能够管理对文件系统上的对象的访问; 并接受ACL类型的定义。 相关联的定义可以包括内核扩展。

    Locking access to data storage shared by a plurality of compute nodes
    9.
    发明授权
    Locking access to data storage shared by a plurality of compute nodes 有权
    锁定对由多个计算节点共享的数据存储的访问

    公开(公告)号:US08949566B2

    公开(公告)日:2015-02-03

    申请号:US12958891

    申请日:2010-12-02

    摘要: Methods, apparatuses, and computer program products are provided for locking access to data storage shared by a plurality of compute nodes. Embodiments include maintaining, by a compute node, a queue of requests from requesting compute nodes of the plurality of compute nodes for access to the data storage, wherein possession of the queue represents possession of a mutual-exclusion lock on the data storage, the mutual-exclusion lock indicating exclusive permission for access to the data storage; and conveying, based on the order of requests in the queue, possession of the queue from the compute node to a next requesting compute node when the compute node no longer requires exclusive access to the data storage.

    摘要翻译: 提供了用于锁定对由多个计算节点共享的数据存储的访问的方法,装置和计算机程序产品。 实施例包括由计算节点维护来自多个计算节点的请求计算节点的用于访问数据存储器的请求队列,其中拥有队列表示在数据存储器上拥有互斥锁,相互 指示访问数据存储器的独占权限; 以及当所述计算节点不再需要对所述数据存储器的独占访问时,基于所述队列中的请求的顺序传送所述队列从所述计算节点到下一个请求计算节点。

    VIRTUALIZATION OF FILE SYSTEM ENCRYPTION
    10.
    发明申请
    VIRTUALIZATION OF FILE SYSTEM ENCRYPTION 有权
    文件系统加密的虚拟化

    公开(公告)号:US20080165957A1

    公开(公告)日:2008-07-10

    申请号:US11621800

    申请日:2007-01-10

    IPC分类号: H04L9/00 G06F12/14

    CPC分类号: G06F21/6218 G06F2221/2107

    摘要: A computer implemented method, apparatus, and computer program product for using a virtual file system to encrypt files. The process registers a plurality of file systems on a data processing system with the virtual file system. The virtual file system is enabled to encrypt files without intervention from any file system in the plurality of file systems. The virtual file system identifies whether a file on a given file system is an encrypted file using a map file associated with the given file system. In response to identifying the file as an encrypted file, the virtual file system encrypts all data written to the file in accordance with encryption specifications in the map file.

    摘要翻译: 一种用于使用虚拟文件系统加密文件的计算机实现的方法,装置和计算机程序产品。 该过程使用虚拟文件系统在数据处理系统上注册多个文件系统。 启用虚拟文件系统来加密文件,而不需要在多个文件系统中的任何文件系统的干预。 虚拟文件系统识别给定文件系统上的文件是否是使用与给定文件系统相关联的映射文件的加密文件。 响应于将文件识别为加密文件,虚拟文件​​系统根据地图文件中的加密规范加密写入文件的所有数据。