Managing generated trace data for a virtual machine
    81.
    发明授权
    Managing generated trace data for a virtual machine 有权
    管理虚拟机的生成跟踪数据

    公开(公告)号:US09329884B2

    公开(公告)日:2016-05-03

    申请号:US14329192

    申请日:2014-07-11

    IPC分类号: G06F9/455

    摘要: A processing device with tracing functionality for a virtual machine is described. The processing device includes a tracing register to store a value indicative of whether tracing is enabled or disabled, a tracing module to generate trace data while tracing is enabled, and an internal buffer to store the trace data. When tracing is disabled, the processing device removes the trace data from the buffer. Mechanisms are described to ensure that the trace data is not corrupted during this process, despite the presence of page faults that may result from trace output writes.

    摘要翻译: 描述了具有用于虚拟机的跟踪功能的处理设备。 处理装置包括跟踪寄存器,用于存储指示跟踪是启用还是禁用的值,跟踪模块用于在跟踪被启用时生成跟踪数据,以及内部缓冲器来存储跟踪数据。 当禁用跟踪时,处理设备将从缓冲区中删除跟踪数据。 描述了机制,以确保在此过程中跟踪数据不会损坏,尽管存在可能由跟踪输出写入引起的页面错误。

    Invalidating translation lookaside buffer entries in a virtual machine (VM) system
    82.
    发明授权
    Invalidating translation lookaside buffer entries in a virtual machine (VM) system 有权
    使虚拟机(VM)系统中的翻译后备缓冲区条目无效

    公开(公告)号:US08543772B2

    公开(公告)日:2013-09-24

    申请号:US12959109

    申请日:2010-12-02

    IPC分类号: G06F12/08

    摘要: One embodiment of the present invention is a technique to invalidate entries in a translation lookaside buffer (TLB). A TLB in a processor has a plurality of TLB entries. Each TLB entry is associated with a virtual machine extension (VMX) tag word indicating if the associated TLB entry is invalidated according to a processor mode when an invalidation operation is performed. The processor mode is one of execution in a virtual machine (VM) and execution not in a virtual machine. The invalidation operation belongs to a non-empty set of invalidation operations composed of a union of (1) a possibly empty set of operations that invalidate a variable number of TLB entries, (2) a possibly empty set of operations that invalidate exactly one TLB entry, (3) a possibly empty set of operations that invalidate the plurality of TLB entries, (4) a possibly empty set of operations that enable and disable use of virtual memory, and (5) a possibly empty set of operations that configure physical address size, page size or other virtual memory system behavior in a manner that changes the manner in which a physical machine interprets the TLB entries.

    摘要翻译: 本发明的一个实施例是使翻译后备缓冲器(TLB)中的条目无效的技术。 处理器中的TLB具有多个TLB条目。 当执行无效操作时,每个TLB条目与虚拟机扩展(VMX)标签字相关联,指示相关联的TLB条目是否根据处理器模式而无效。 处理器模式是虚拟机(VM)中的执行之一,而不是虚拟机中的执行。 无效操作属于一个无效的无效操作集合,它由(1)可能为空的操作集合组合,使一组可变数量的TLB条目无效,(2)一组可能的空白操作,使一个TLB无效 条目,(3)使多个TLB条目无效的可能的一组操作,(4)启用和禁用虚拟存储器的使用的可能的一组可能的空操作,以及(5)配置物理的可能的一组操作 地址大小,页面大小或其他虚拟内存系统行为,以改变物理机器解释TLB条目的方式。

    SYSTEM, APPARATUS, AND METHOD FOR SEGMENT REGISTER READ AND WRITE REGARDLESS OF PRIVILEGE LEVEL
    84.
    发明申请
    SYSTEM, APPARATUS, AND METHOD FOR SEGMENT REGISTER READ AND WRITE REGARDLESS OF PRIVILEGE LEVEL 有权
    系统,设备和分段注册读取和写入权限的优先权级别

    公开(公告)号:US20120166767A1

    公开(公告)日:2012-06-28

    申请号:US12976981

    申请日:2010-12-22

    IPC分类号: G06F9/312

    摘要: Embodiments of systems, apparatuses, and methods for performing privilege agnostic segment base register read or write instruction are described. An exemplary method may include fetching the privilege agnostic segment base register write instruction, wherein the privilege agnostic write instruction includes a 64-bit data source operand, decoding the fetched privilege agnostic segment base register write instruction, and executing the decoded privilege agnostic segment base register write instruction to write the 64-bit data of the source operand into the segment base register identified by the opcode of the privilege agnostic segment base register write instruction.

    摘要翻译: 描述用于执行特权不可知段段基址寄存器读或写指令的系统,装置和方法的实施例。 一种示例性方法可以包括获取特权不可知段基址寄存器写指令,其中特权不可知写指令包括64位数据源操作数,对获取的特权不可知段基址寄存器写指令进行解码,以及执行解码的特权不可知段基址寄存器 写指令将源操作数的64位数据写入由特权不可知段基址寄存器写指令的操作码标识的段基寄存器中。

    Fault processing for direct memory access address translation
    88.
    发明授权
    Fault processing for direct memory access address translation 有权
    直接存储器访问地址转换的故障处理

    公开(公告)号:US07340582B2

    公开(公告)日:2008-03-04

    申请号:US10956630

    申请日:2004-09-30

    IPC分类号: G06F12/00 G06F13/00

    摘要: An embodiment of the present invention is a technique to process faults in a direct memory access address translation. A register set stores global control or status information for fault processing of a fault generated by an input/output (I/O) transaction requested by an I/O device. An address translation structure translates a guest physical address to a host physical address. The guest physical address corresponds to the I/O transaction and is mapped to a domain. The address translation structure has at least an entry associated with the domain and domain-specific control information for the fault processing.

    摘要翻译: 本发明的一个实施例是一种在直接存储器访问地址转换中处理故障的技术。 寄存器组存储由I / O设备请求的输入/输出(I / O)事务产生的故障的故障处理的全局控制或状态信息。 地址转换结构将访客物理地址转换为主机物理地址。 访客物理地址对应于I / O事务,并映射到域。 地址转换结构至少具有与域相关联的条目和用于故障处理的特定于域的控制信息。

    Apparatus and method for unilaterally loading a secure operating system within a multiprocessor environment
    89.
    发明申请
    Apparatus and method for unilaterally loading a secure operating system within a multiprocessor environment 有权
    在多处理器环境中单方面加载安全操作系统的装置和方法

    公开(公告)号:US20070192577A1

    公开(公告)日:2007-08-16

    申请号:US11340181

    申请日:2006-01-24

    IPC分类号: G06F15/177

    CPC分类号: G06F21/57

    摘要: An apparatus and method for unilaterally loading a secure operating system within a multiprocessor environment are described. The method includes disregarding a received load secure region instruction when a currently active load secure region operation is detected. Otherwise, a memory protection element is directed, in response to the received load secure region instruction, to form a secure memory environment. Once directed, unauthorized read/write access to one or more protected memory regions are prohibited. Finally, a cryptographic hash value of the one or more protected memory regions is stored within a digest information repository as a secure software identification value. Once stored, outside agents may request access to a digitally signed software identification value to establish security verification of secure software within the secure memory environment.

    摘要翻译: 描述了在多处理器环境内单方面加载安全操作系统的装置和方法。 该方法包括当检测到当前活动的负载安全区域操作时忽略接收到的负载安全区域指令。 否则,响应于接收到的负载安全区域指令,引导存储器保护元件以形成安全存储器环境。 一旦定向,就禁止对一个或多个受保护的存储器区域进行未经授权的读/写访问。 最后,一个或多个受保护的存储器区域的加密散列值作为安全的软件识别值存储在摘要信息库中。 一旦存储,外部代理可以请求访问数字签名的软件标识值以建立安全存储器环境内的安全软件的安全验证。