System and method to enhance memory protection for programs in a virtual machine environment
AssigneeVMware, Inc.
InventorsXiaoxin CHEN, Pratap SUBRAHMANYAM
Life of this patent
Estimating the term…
Loading patent…
AssigneeVMware, Inc.
InventorsXiaoxin CHEN, Pratap SUBRAHMANYAM
Estimating the term…
In a computer system supporting execution of virtualization software and at least one instance of virtual system hardware, an interface is provided into the virtualization software to allow a program to directly define the access characteristics of its program data stored in physical memory. The technique includes providing data identifying memory pages and their access characteristics to the virtualization software which then derives the memory access characteristics from the specified data. Optionally, the program may also specify a pre-defined function to be performed upon the occurrence of a fault associated with access to an identified memory page. In this manner, programs operating both internal and external to the virtualization software can protect his memory pages, without intermediation by the operating system software.
A computer program product embodied on a tangible computer readable storage medium for execution in a computer system comprising physical system hardware having a processor operatively coupled to a plurality of physical memory locations and virtualization software executing on the physical system hardware and supporting at least one virtual machine (VM) and at least one instance of virtual system hardware, the computer program product comprising:
A computer program product embodied on a tangible computer readable storage medium for execution in a computer system having physical system hardware supporting execution of at least one virtual machine (VM), the virtual machine further supporting execution of a guest program under the control of a guest operating system on virtual system hardware, the computer program product performing a method for defining memory access characteristics of guest program data stored at one or more physical addresses in physical memory in the system hardware, the method comprising:
A computer program product embodied on a tangible computer readable storage medium for execution in a computer system having physical system hardware supporting execution of virtualization software and at least one instance of virtual system hardware, the computer program product performing a method for defining memory access characteristics of program data stored at one or more addresses in physical memory, the method comprising:
Dependencies are inferred from the claim text.