Software remediation using parallel code fragments
OwnerMatthew MILLER, David STRONG +1inventors
InventorsMatthew MILLER, David STRONG, Anthony MATYOK
Life of this patent
Estimating the term…
Abstract
In various examples, an executable object including parallel code fragments that allow compromised code within the executable object to be remediated. For example, when a selection mask is enabled, instructions encoded in the executable object are translated for execution by the one or more processors. Continuing this example, the executable object includes the parallel code fragment that allow vulnerable operations to be bypassed. Furthermore, once enabled and the compromised code is bypassed, a remediation is applied to the executable code.
Claims20
A method comprising:
- determining a first segment of executable code of an executable object is compromised, the executable object including a parallel code fragment;
- in response to determining the first segment of executable code of the executable object is compromised, obtaining a selection mask including metadata for identifying the parallel code fragment;
- and
- in response to detecting the selection mask in the executable object, enabling execution of the parallel code fragment to bypass the first segment of executable code of the executable object by at least:
- causing a second segment of executable code to be obtained;
- updating a pointer included in the parallel code fragment to point to the second segment of executable code;
- and
- causing the second segment of executable code to be executed as a result of executing the parallel code fragment.
One or more computer storage media having executable instructions embodied thereon, that, as a result of being executed by a processing device, cause the processing device to perform operations comprising:
- executing an application based on an executable object including a plurality of code segments and a parallel code fragment containing an operation that, as a result of being executed by the processing device, causes the processing device to bypasses a first code segment of the plurality of code segments;
- in response determining a vulnerability in the first code segment, enabling the parallel code fragment based on a selection mask;
- obtaining a second code segment to perform a function of the first code segment;
- updating a pointer associated with the parallel code fragment to correspond to the second code segment;
- and
- bypassing the first code segment by at least executing the parallel code fragment.
A system comprising:
- a processor;
- and
- a memory coupled to the processor storing instructions that, as a result of being executed by the processor, cause the processor to:
- execute a set of operations encoded in a first executable object including a parallel code fragment, where the parallel code fragment includes a pointer to a first memory location;
- generate a determination that a first operation of the set of operations is compromised;
- in response to the determination, enable the parallel code fragment within the first executable object;
- obtain a second operation encoded in a second executable object, where the first operation and the second operation, as a result of being executed, causes the processor to perform a function;
- update the pointer to indicate a second memory location associated with the second executable object;
- and
- bypass the first operation by at least executing the parallel code fragment and causing the processor to execute the second operation based on the pointer indicating the second memory location.
Dependencies are inferred from the claim text.