Securely supporting a global view of system memory in a multi-processor system

    公开(公告)号:US10678909B2

    公开(公告)日:2020-06-09

    申请号:US15818783

    申请日:2017-11-21

    申请人: VMWARE, INC.

    IPC分类号: G06F21/53 G06F3/06 G06F9/455

    摘要: Techniques for securely supporting a global view of system memory in a physical/virtual computer system comprising a plurality of physical/virtual CPUs are provided. In one set of embodiments, the physical/virtual computer system can receive an interrupt indicating that a first physical/virtual CPU should enter a privileged CPU operating mode. The physical/virtual computer system can further determine that none of the plurality of physical/virtual CPUs are currently in the privileged CPU operating mode. In response to this determination, the physical/virtual computer system can modify the global view of system memory to include a special memory region comprising program code to be executed while in the privileged CPU operating mode; communicate, to the other physical/virtual CPUs, a signal to enter a stop state in which execution is halted but interrupts are accepted for entering the privileged CPU operating mode; and cause the first physical/virtual CPU to enter the privileged CPU operating mode.

    Hypervisor techniques for performing non-faulting reads in virtual machines

    公开(公告)号:US10120738B2

    公开(公告)日:2018-11-06

    申请号:US15192642

    申请日:2016-06-24

    申请人: VMware, Inc.

    摘要: Guest memory data structures are read by one or more read operations which are set up to handle page faults and general protection faults generated during the read in various ways. If such a fault occurs while performing the one or more read operations, the fault is handled and the one or more read operation is terminated. The fault is handled by either dropping the fault and reporting an error instead of the fault, by dropping the fault and invoking an error handler that is set up prior to performing the read operations, or by forwarding the fault to a fault handler that is setup prior to performing the read operations. If no fault occurs, the read operations complete successfully. Thus, under normal circumstances, no fault is incurred in a read operation on guest memory data structures.

    VIRTUAL MACHINE CONTENT PRESENTATION
    4.
    发明申请

    公开(公告)号:US20170351537A1

    公开(公告)日:2017-12-07

    申请号:US15172946

    申请日:2016-06-03

    申请人: VMware, Inc.

    摘要: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for changing virtual machine user interfaces. One of the methods includes receiving a first request from a first client device to initiate a first remote session, detecting, for the first remote session, a first display property of the first client device in response to receiving the first request, configuring, for the first remote session, a virtual display device for the virtual machine to be a display device having the first display property, receiving a second request from a second client device to initiate a second remote session, detecting, for the second remote session, a second display property of the second client device in response to receiving the second request, and configuring, for the second remote session, the virtual display device for the virtual machine to be a display device having the second display property.

    Tree structure for storing monitored memory page data

    公开(公告)号:US10592267B2

    公开(公告)日:2020-03-17

    申请号:US15402243

    申请日:2017-01-10

    申请人: VMWARE, INC.

    摘要: Mechanisms to protect the integrity of a data structure that is traversed to locate protected memory pages are provided. Leaf nodes of the data structure store mappings that indicate which memory pages are protected. Both the pages indicated by the mappings and the pages that store the data structure are monitored by a tracing service that sends a notification to the hypervisor when a write to a traced page occurs. When system software receives such a notification, the system software traverses the data structure to determine whether any of the memory pages of the data structure is the traced page that was written to. If so, the alert action for that page is performed. If not, the system software determines whether any of the mappings in the leaf nodes include such a page and, if so, the alert action for that page is performed.

    VIRTUAL MACHINE FAULT TOLERANCE
    9.
    发明申请
    VIRTUAL MACHINE FAULT TOLERANCE 审中-公开
    虚拟机故障容错

    公开(公告)号:US20170024291A1

    公开(公告)日:2017-01-26

    申请号:US15284465

    申请日:2016-10-03

    申请人: VMware, Inc.

    IPC分类号: G06F11/16 G06F9/48 G06F9/455

    摘要: In a computer system running at least a first virtual machine (VM) and a second VM on virtualization software, a computer implemented method for the second VM to provide quasi-lockstep fault tolerance for the first VM includes executing a workload on the first VM and the second VM that involves producing at least one externally visible output and comparing an externally visible output of the second VM with an externally visible output of the first VM to determine if there is an output match. In response to a determination that the externally visible output of the second VM does not match the externally visible output of the first VM, a resynchronization of the second VM is executed. The externally visible output of the first VM is kept from being output externally until completion of the resynchronization.

    摘要翻译: 在运行虚拟化软件上的至少第一虚拟机(VM)和第二VM的计算机系统中,用于第二VM为第一虚拟机提供准锁步骤容错的计算机实现方法包括执行第一虚拟机上的工作负载,以及 所述第二VM涉及产生至少一个外部可见的输出并将所述第二VM的外部可见的输出与所述第一VM的外部可见的输出进行比较,以确定是否存在输出匹配。 响应于确定第二VM的外部可见输出与第一VM的外部可见的输出不匹配,则执行第二VM的重新同步。 第一个VM的外部可见的输出保持不被外部输出,直到重新同步完成。