Virtualizing processor memory protection with “L1 iterate and L2 drop/repopulate”
    2.
    发明授权
    Virtualizing processor memory protection with “L1 iterate and L2 drop/repopulate” 有权
    虚拟化处理器内存保护与“L1迭代和L2丢弃/重新填充”

    公开(公告)号:US09251102B2

    公开(公告)日:2016-02-02

    申请号:US14462364

    申请日:2014-08-18

    Applicant: VMware, Inc.

    CPC classification number: G06F12/1483 G06F12/1009 G06F12/145 G06F2212/151

    Abstract: A computing system includes a guest domain access control register (DACR), and guest first and second level page tables, the page tables containing domain identifiers used to obtain domain access information and access permission information, and the domain access information and the access permission information providing an effective guest access permission. The computing system provides a shadow page table, in which domain identifiers are used to identify domain access information in a processor DACR that are mapped from domain access information in the guest DACR, and in which access permissions are mapped from effective access permission information in the guest page tables and guest DACR. A memory management unit in the processor traverses the shadow page table, accesses the processor DACR, and combines the mapped domain access information in the processor with the mapped access permission in the shadow page table to reflect the guest intended effective access permissions.

    Abstract translation: 计算系统包括访客域访问控制寄存器(DACR)和访客第一和第二级页表,包含用于获取域访问信息和访问许可信息的域标识符的页表,以及域访问信息和访问许可信息 提供有效的访客权限。 计算系统提供了一个影子页表,其中使用域标识符来识别处理器DACR中的域访问信息,该处理器DACR是从客户机DACR中的域访问信息映射的,并且访问权限被映射到 访客页表和客人DACR。 处理器中的存储器管理单元遍历影子页表,访问处理器DACR,并将处理器中映射的域访问信息与影子页表中的映射的访问权限组合,以反映客户预期的有效访问权限。

Patent Agency Ranking