Virtualization hardware for device driver isolation
    1.
    发明授权
    Virtualization hardware for device driver isolation 有权
    用于设备驱动程序隔离的虚拟化硬件

    公开(公告)号:US08595487B2

    公开(公告)日:2013-11-26

    申请号:US11555679

    申请日:2006-11-01

    IPC分类号: H04L29/06 G06F9/46

    CPC分类号: G06F21/53

    摘要: Hardware virtualization support is used to isolate kernel extensions. A kernel and various kernel extensions are executed in a plurality of hardware protection domains. Each hardware protection domain defines computer resource privileges allowed to code executing in that hardware protection domain. Kernel extensions execute with appropriate computer resource privileges to complete tasks without comprising the stability of the computer system.

    摘要翻译: 硬件虚拟化支持用于隔离内核扩展。 内核和各种内核扩展在多个硬件保护域中执行。 每个硬件保护域定义允许在该硬件保护域中执行代码的计算机资源特权。 内核扩展以适当的计算机资源权限执行,以完成任务,而不包括计算机系统的稳定性。

    Virtualization Hardware For Device Driver Isolation
    2.
    发明申请
    Virtualization Hardware For Device Driver Isolation 有权
    用于设备驱动程序隔离的虚拟化硬件

    公开(公告)号:US20080148048A1

    公开(公告)日:2008-06-19

    申请号:US11555679

    申请日:2006-11-01

    IPC分类号: H04L9/00

    CPC分类号: G06F21/53

    摘要: Hardware virtualization support is used to isolate kernel extensions. A kernel and various kernel extensions are executed in a plurality of hardware protection domains. Each hardware protection domain defines computer resource privileges allowed to code executing in that hardware protection domain. Kernel extensions execute with appropriate computer resource privileges to complete tasks without comprising the stability of the computer system.

    摘要翻译: 硬件虚拟化支持用于隔离内核扩展。 内核和各种内核扩展在多个硬件保护域中执行。 每个硬件保护域定义允许在该硬件保护域中执行代码的计算机资源特权。 内核扩展以适当的计算机资源权限执行,以完成任务,而不包括计算机系统的稳定性。

    RUN TIME INCREMENTAL COMPILATION OF SCRIPT CODE
    3.
    发明申请
    RUN TIME INCREMENTAL COMPILATION OF SCRIPT CODE 有权
    脚本代码的运行时间增量编译

    公开(公告)号:US20130074052A1

    公开(公告)日:2013-03-21

    申请号:US13546893

    申请日:2012-07-11

    IPC分类号: G06F9/45

    摘要: Scripts are incrementally compiled at runtime to generate executable code. The incremental compilation generates executable code corresponding to a basic block of the script. The executable code for a basic block of script is generated for a set of types of variables of the basic block resulting from execution of the script in response to a request. The generated executable code is stored and executed for subsequent requests if these requests result in the same types of variables for the basic block. The incremental compilation of the script is performed in a lazy fashion, such that executable code is not generated for combinations of types of variables of the script code that are not obtained from requests received at runtime. The script may dynamically generate portions of a web page that is returned in response to a request for execution of the script.

    摘要翻译: 脚本在运行时增量编译以生成可执行代码。 增量编译生成与脚本的基本块相对应的可执行代码。 脚本的基本块的可执行代码是由响应于请求的脚本的执行导致的基本块的变量的一组类型而生成的。 如果这些请求导致基本块的相同类型的变量,则生成的可执行代码被存储并执行用于后续请求。 脚本的增量编译是以懒惰的方式执行的,这样就不会为脚本代码的变量类型的组合生成不能在运行时收到的请求中获取可执行代码。 脚本可以动态地生成响应于脚本的执行请求返回的网页的部分。

    Hardware assistance for shadow page table coherence with guest page mappings
    4.
    发明授权
    Hardware assistance for shadow page table coherence with guest page mappings 有权
    影子页表硬件辅助与访客页面映射的一致性

    公开(公告)号:US08060722B2

    公开(公告)日:2011-11-15

    申请号:US12413426

    申请日:2009-03-27

    IPC分类号: G06F12/06

    摘要: Some embodiments of the present invention include an execution unit of a processor and a memory management unit interposed between the execution unit and an interface to memory suitable for storage of both guest page tables maintained by a guest operating system and shadow page tables maintained generally in correspondence with the guest page tables by virtualization software. The memory management unit is configured to walk in-memory data structures that encode the shadow page tables, to access entries of the shadow page tables and, based thereon or on a cached representation of page mappings therein, to perform virtual-to-physical address translations relative to memory targets of instructions executed by the execution unit. The memory management unit is responsive to a shadowed write indication coded in association with either an entry of the shadow page tables or a cached representation of a page mapping therein used to perform the virtual-to-physical address translation for a write-type one of the instructions that targets an entry of one of the guest page tables. The memory management unit is configured to complete the memory access of the write-type instruction that targets the guest page table entry and to store in a buffer, information sufficient to allow the virtualization software to later update an entry of the shadow page tables in correspondence therewith.

    摘要翻译: 本发明的一些实施例包括处理器的执行单元和插入在执行单元和适于存储由客户操作系统维护的两个访客页表的存储器的存储器的存储器管理单元和通常维护在一起的对应页面表 与虚拟化软件的客户页面表。 存储器管理单元被配置为步行编码阴影页表的存储器内数据结构,以访问影子页表的条目,并且基于或基于其中的缓存的页面映射表示来执行虚拟到物理地址 相对于由执行单元执行的指令的存储器目标的转换。 存储器管理单元响应于与阴影页表的条目或其中映射的页面的高速缓存表示相关联地编码的阴影写入指示,其中用于执行虚拟到物理地址转换的写入类型之一 指定一个访客页表的条目的指令。 存储器管理单元被配置为完成针对访客页表条目的写入型指令的存储器访问并且存储在缓冲器中,足以允许虚拟化软件随后更新对应的影子页表的条目的信息 随之而来。

    Intercepting subroutine return in unmodified binaries
    5.
    发明授权
    Intercepting subroutine return in unmodified binaries 有权
    截取子程序返回未修改的二进制文件

    公开(公告)号:US09129062B1

    公开(公告)日:2015-09-08

    申请号:US12784315

    申请日:2010-05-20

    IPC分类号: G06F9/44 G06F11/36

    摘要: Systems and methods for instrumenting code are disclosed. The entry to a subroutine is trapped and the subroutine's return address is mutated to create an invalid instruction pointer. The mutated return address is stored in the architecture reserved space for the return address. An exception handler is executed that has been instrumented to handle the fault caused by the mutated return address such that the exit from the subroutine is instrumented.

    摘要翻译: 公开了用于测试代码的系统和方法。 子程序的入口被捕获,并且子程序的返回地址被突变以创建无效的指令指针。 突变的返回地址存储在返回地址的架构保留空间中。 执行一个异常处理程序,该异常处理程序已被检测到处理由突变返回地址引起的故障,以便子程序的退出被检测。

    Virtualization system using hardware assistance for shadow page table coherence
    6.
    发明授权
    Virtualization system using hardware assistance for shadow page table coherence 有权
    虚拟化系统使用硬件帮助影子页表一致性

    公开(公告)号:US08443156B2

    公开(公告)日:2013-05-14

    申请号:US12413379

    申请日:2009-03-27

    IPC分类号: G06F12/00

    摘要: One embodiment of the present invention includes a method for maintaining a shadow page table in at least partial correspondence with guest page mappings of a guest computation. The method marking with a traced write indication at least those entries of the shadow page table that map physical memory locations which themselves encode the guest page mappings, the marking identifying, for a hardware facility, a subset of memory access targets for which updates are to be recorded in a guest write buffer accessible to the virtualization system. Responsive to a coherency-inducing operation of the guest computation, the method reads from the guest write buffer and introduces corresponding updates into the shadow page table.

    摘要翻译: 本发明的一个实施例包括一种用于维护与来宾计算的访客页面映射至少部分对应的影子页表的方法。 具有跟踪的写入指示的方法标记至少是阴影页表的那些条目,其映射其自身编码访客页面映射的物理存储器位置,标记为硬件设施标识用于更新的存储器访问目标的子集 记录在虚拟化系统可访问的访客写入缓冲区中。 响应于客人计算的一致性诱导操作,该方法从访客写缓冲器读取并将相应的更新引入到影子页表中。

    Reverse Hybrid Automobile
    8.
    发明申请
    Reverse Hybrid Automobile 审中-公开
    反向混合动力汽车

    公开(公告)号:US20050011691A1

    公开(公告)日:2005-01-20

    申请号:US10604421

    申请日:2003-07-18

    申请人: Keith Adams

    发明人: Keith Adams

    IPC分类号: B60K6/46 B60K1/00

    CPC分类号: B60K6/46 Y02T10/6217

    摘要: An automobile that consist of a chassis constructed of lightweight steel tubing and the body consist of fiberglass/plastic composite. The vehicle should weigh between 2,000 and 2,500 lbs. This vehicle is propelled by two DC electric motors that are derive their power from an electric generating unit that runs on unleaded gasoline, propane, natural gas or an alcohol based fuel. This car can get over 100 miles per gallon, carry five passengers and have a max speed of 80 mph. This vehicle will have the same appearance and size as standard sedans that are gas powered.

    摘要翻译: 由轻质钢管构成的底盘和由玻璃纤维/塑料复合材料组成的车身组成的汽车。 车辆重量应在2,000和2,500磅之间。 该车辆由两台直流电动机驱动,这些直流电动机是从无铅汽油,丙烷,天然气或酒精燃料运行的发电机组获得电力的。 这辆车每加仑可以超过100英里,乘坐五名乘客,最高速度为80英里/小时。 该车辆将具有与标准轿车相同的外观和尺寸。

    Efficient virtualization of input/output completions for a virtual device
    9.
    发明授权
    Efficient virtualization of input/output completions for a virtual device 有权
    虚拟设备的输入/输出完成的高效虚拟化

    公开(公告)号:US08533745B2

    公开(公告)日:2013-09-10

    申请号:US12968039

    申请日:2010-12-14

    IPC分类号: G06F9/44 G06F9/46

    摘要: Completion interrupts corresponding to I/O requests issued by a virtual machine guest, which runs on a host platform, are virtualized in such a way that I/O completion interrupts to the requesting guest are delivered no faster than it can stably handle them, but, when possible, faster than the nominal speed of a virtual device to which a virtual machine addresses the I/O request. In general, completion events received from the host platform in response to guest I/O requests are examined with respect to time. If enough time has passed that the virtual device would normally have completed the I/O request, then the completion interrupt is delivered to the guest. If the nominal time has not elapsed, however, the invention enqueues and time-stamps the event and delivers it at the earliest of a) the normal maturity time, or b) at a safepoint.

    摘要翻译: 在主机平台上运行的虚拟机访客发出的I / O请求相应的完成中断被虚拟化,使得对请求的客户端的I / O完成中断的传送速度不会比可以稳定地处理它们的速度更快,而是 在可能的情况下,虚拟机对于I / O请求所对应的虚拟设备的标称速度更快。 一般来说,根据客户端I / O请求从主机平台接收到的完成事件将相对于时间进行检查。 如果虚拟设备通常已经完成了I / O请求的足够的时间,则完成中断将传递给客户端。 然而,如果没有经过标称时间,本发明会在a)正常到期时间的最早时间排队和时间戳,并且b)在一个安全点。

    Hardware assistance for shadow page table coherence with guest page mappings
    10.
    发明授权
    Hardware assistance for shadow page table coherence with guest page mappings 有权
    影子页表硬件辅助与访客页面映射的一致性

    公开(公告)号:US08219779B2

    公开(公告)日:2012-07-10

    申请号:US13297114

    申请日:2011-11-15

    IPC分类号: G06F12/06

    摘要: Some embodiments of the present invention include a memory management unit (MMU) configured to, in response to a write access targeting a guest page mapping of a guest virtual page number (GVPN) to a guest physical page number (GPPN) within a guest page table, identify a shadow page mapping that associates the GVPN with a physical page number (PPN). The MMU is also configured to determine whether a traced write indication is associated with the shadow page mapping and, if so, record update information identifying the targeted guest page mapping. The update information is used to reestablish coherence between the guest page mapping and the shadow page mapping. The MMU is further configured to perform the write access.

    摘要翻译: 本发明的一些实施例包括存储器管理单元(MMU),其被配置为响应于将来宾虚拟页码(GVPN)的访客页面映射定向到访客页面内的访客物理页码(GPPN)的写入访问 表,标识将GVPN与物理页码(PPN)相关联的影子页面映射。 MMU还被配置为确定跟踪的写入指示是否与阴影页面映射相关联,并且如果是,则记录标识目标访客页面映射的更新信息。 更新信息用于重新建立访客页面映射和阴影页面映射之间的一致性。 MMU还被配置为执行写访问。