-
公开(公告)号:US20240126593A1
公开(公告)日:2024-04-18
申请号:US18397184
申请日:2023-12-27
Applicant: HUAWEI TECHNOLOGIES CO., LTD.
IPC: G06F9/48
CPC classification number: G06F9/4818
Abstract: The present disclosure relates to user-mode interrupt request processing methods and apparatuses. In one example method, a central processing unit (CPU) in a kernel mode runs a second interrupt exception handler that does not include a kernel address to determine a user-mode interrupt handler corresponding to a user-mode interrupt request, switches to a user mode by using a first privilege level without context recovery, further runs the user-mode interrupt handler in the user mode, and then switches to the kernel mode by using a second privilege level without context storage.
-
公开(公告)号:US20180225446A1
公开(公告)日:2018-08-09
申请号:US15887468
申请日:2018-02-02
Applicant: Huawei Technologies Co., Ltd.
Inventor: Yutao LIU , Haibo CHEN , Peitao SHI , Xinran WANG
Abstract: A computer processing node is described that is configured to perform a control flow integrity (CFI) method on a protected process operating on the processing node. The CFI method includes intercepting a system call originating from execution of the protected process executing in the runtime environment. A fast path operating within a kernel of the computer system accesses, from a kernel memory, a processor trace packet corresponding to the system call. The fast path attempts to establish a match between the processor trace packet and a program control flow (edge) entry within a credit-labeled control flow graph (CFG) definition having an associated credit value. The credit value represents a degree to which the program control flow is credible. Thereafter, the method further includes invoking, after the matching, a slow path for further processing of the processor trace packet if the associated credit value does not meet a specified threshold, and otherwise provide an indication to permit execution of the system call.
-