Device permissions table defining permissions information for a translated access request

A method comprising:

• in response to an advance address translation request issued by a requester device on behalf of a given software context and specifying a given virtual address, translating the given virtual address into a given physical address and providing the given physical address to the requester device to be associated with a subsequent translated access request issued by the requester device;
• and
• in response to a translated access request, issued by the requester device on behalf of the given software context and specifying a target physical address, translated access control circuitry performing steps of:
• looking up, based on the target physical address, corresponding permissions information indicative of corresponding access permissions defined in a device permissions table for a region of physical address space encompassing the target physical address, wherein the corresponding access permissions provide information for checking whether translated access requests from a plurality of software contexts are prohibited;
• determining, based on the corresponding permissions information, whether the given software context is prohibited from accessing a target memory location corresponding to the target physical address in response to translated access requests;
• and
• when it is determined that the given software context is prohibited from accessing the target memory location in response to translated access requests, triggering an error response.

A computer-readable medium to store computer-readable code for fabrication of an apparatus comprising:

• address translation circuitry configured to translate, in response to an advance address translation request issued by a requester device on behalf of a given software context and specifying a given virtual address, the given virtual address into a given physical address and to provide the given physical address to the requester device to be associated with a subsequent translated access request issued by the requester device;
• and
• translated access control circuitry responsive to a translated access request issued by the requester device on behalf of the given software context and specifying a target physical address, to:
• look up, based on the target physical address, corresponding permissions information indicative of corresponding access permissions defined in a device permission table for a region of physical address space encompassing the target physical address, wherein the corresponding access permissions provide information for checking whether translated access requests from a plurality of software contexts are prohibited;
• determine, based on the corresponding permissions information, whether the given software context is prohibited from accessing a target memory location corresponding to the target physical address in response to translated access requests;
• and
• when it is determined that the given software context is prohibited from accessing the target memory location in response to translated access requests, trigger an error response.