Robert N Muth

US Patent:

8561183, Oct 15, 2013

Filed:

Nov 18, 2009

Appl. No.:

12/621286

Inventors:

Robert Muth - New York NY, US
Karl Schmipf - Santa Cruz CA, US
David C. Sehr - Cupertino CA, US
Clifford L. Biffle - Sunnyvale CA, US

Assignee:

Google Inc. - Mountain View CA

International Classification:

G06F 11/00

US Classification:

726 22, 726 23, 726 27, 717124, 717126, 717127, 717154

Abstract:

Some embodiments provide a system that executes a native code module. During operation, the system obtains the native code module. Next, the system loads the native code module into a secure runtime environment. Finally, the system safely executes the native code module in the secure runtime environment by using a set of software fault isolation (SFI) mechanisms that constrain store instructions in the native code module. The SFI mechanisms also maintain control flow integrity for the native code module by dividing a code region associated with the native code module into equally sized code blocks and data blocks and starting each of the data blocks with an illegal instruction.