Dynamically generated code process sandboxing using authenticated pointers

A processing device, comprising:

• a memory device;
• a processing circuit coupled to the memory device, the processing circuit configured to:
• ascertain when dynamically generated code is to be executed;
• restrict the dynamically generated code to use a first memory region within an unprotected memory space of the memory device, where the first memory region is distinct from other memory regions used by other processes executed by the processing circuit;
• maintain a first processing stack, separate from a general processing stack used by other processes executed by the processing circuit, for the dynamically generated code within the first memory region, wherein a stack pointer is switched to the first processing stack when the dynamically generated code is executed and the stack pointer is switched to the general processing stack when the dynamically generated code ends;
• and
• enforce all memory access and transfer of control from the first memory region to other memory regions to occur through authenticated pointers, ignoring/disabling all other pointer authentication related instructions.

A non-transitory processor-readable storage medium having one or more instructions that, when executed by at least one processing circuit, cause the at least one processing circuit to:

• ascertain when dynamically generated code is to be executed;
• restrict the dynamically generated code to use a first memory region within an unprotected memory space, where the first memory region is distinct from other memory regions used by other processes executed by the processing circuit;
• maintain a first processing stack, separate from a general processing stack used by other processes executed by the processing circuit, for the dynamically generated code within the first memory region, wherein a stack pointer is switched to the first processing stack when the dynamically generated code is executed and the stack pointer is switched to the general processing stack when the dynamically generated code ends;
• and
• enforce all memory access and transfer of control from the first memory region to other memory regions to occur through authenticated pointers, ignoring/disabling all other pointer authentication related instructions.