公开(公告)号：US20190080082A1

公开(公告)日：2019-03-14

申请号：US15699646

申请日：2017-09-08

Applicant: QUALCOMM INCORPORATED

Inventor： MAMTA DESAI ,  ASHUTOSH SHRIVASTAVA ,  DHAMIM PACKER ALI

IPC: G06F21/52 ,  G06F21/80

CPC classification number: G06F21/52 ,  G06F7/582 ,  G06F21/575 ,  G06F21/80 ,  G06F2221/034

Abstract: Systems and methods are disclosed for providing stack overflow protection on a system on chip via a hardware write-once register. An exemplary embodiment of an system on chip comprises a hardware write-once register, a boot processor, and one or more processor subsystems. The boot processor is configured to execute a read only memory (ROM) image which initializes the hardware write-once register with a first numeric value in response to the system on chip being powered on. The one or more processor subsystems have an associated software image configured to use the first numeric value in the hardware write-once register as a stack canary value to combat stack overflow attacks.

公开(公告)号：US20180365425A1

公开(公告)日：2018-12-20

申请号：US15624612

申请日：2017-06-15

Applicant: QUALCOMM INCORPORATED

Inventor： DHAMIM PACKER ALI ,  JEFFREY SHABEL ,  YANRU LI ,  ASHUTOSH SHRIVASTAVA

IPC: G06F21/57 ,  G06F9/44

Abstract: Systems, methods, and computer programs are disclosed for securely booting a system on chip. One embodiment is a system comprising a system on chip (SoC) and a virtual collated internal memory pool (VCIMP). The SoC comprises a bootable processing device having a first internal memory, a read only memory (ROM), and one or more bootable processing subsystems each having a dedicated internal memory. The bootable processing device is configured to execute a bootloader in the ROM. The VCIMP provides time-shared control and access to the one or more bootable processing subsystems during execution of a boot sequence. The VCIMP comprises a contiguous logical-to-physical address mapping of the first internal memory residing on the bootable processing device and the dedicated internal memories residing on the corresponding one or more bootable processing subsystems.