Red Hat, Inc.

Adam D Jackson

Peter M Jones

A method includes configuring one or more permissions for a first page of memory including a first section of a plurality of sections of an executable program code to enable execution of the first section. The method also includes configuring one or more permissions for a second page of the memory including a second section of the executable program code to disable execution of the second section. The method also includes identifying one or more annotations in the executable program code, wherein the one or more annotations indicate one or more allowed transitions and one or more disallowed transitions between the plurality of sections. The method also includes changing, in view of the one or more annotations, the one or more permissions of the second page to enable execution of the second section of the executable program code.

Labeled security for control flow inside executable program code

A method includes loading each section of an executable program code into a respective page of memory, configuring permissions for a first page including a first section of the executable program code to enable execution of the first section loaded into the first page. The first section associated with a first label. The method also includes configuring permissions for a second page of the memory including a second section of the executable program code to disable execution of the second section loaded into the second page. The second section associated with a second label. Responsive to a determination that a transition from the first section to the second section is allowed during execution of the executable program code, the method also includes changing the permissions of the second page to enable execution of the second section of the executable program code.

An example method of updating firmware includes receiving a memory map of a memory. The method also includes determining, based on the memory map, a set of memory regions storing a bundle of drivers in the memory, the bundle of drivers residing in firmware and being in an executable format. The method further includes for one or more drivers in the bundle of drivers (i) building, based on the memory map, a header that describes the respective driver, and (ii) creating an object file including the header and the respective driver, where the object file is in the executable format. The method also includes storing one or more of the object files in non-volatile memory.

Method and system for updating firmware

A processing device searches executing at least one of a boot loader or a kernel for the operating system searches for an extensible firmware interface (EFI) binary object. Responsive to finding a first EFI binary object, the processing device verifies that a first signature associated with the first EFI binary object is valid using a platform key. Responsive to verifying that the first signature for the first EFI binary object is valid, the processing device performs the following operations: identifying a first public key encapsulated in the first EFI binary object, wherein the first public key is associated with a non-EFI certificate authority; extracting the first public key from the first EFI binary object; and performing at least one of a) passing the first public key to a kernel of an operating system (OS) or b) exposing the first public key to a user space of the OS.

System wide root of trust chaining via signed applications

Embodiments relate to systems and methods for generating address information to translate the order in which memory locations are accessed in a video buffer, to maintain a desired orientation in a rotated display. A video buffer is filled with display data to drive a CRT, LCD, or other display screen, starting with the upper-left corner. When the user rotates the display screen, the display screen continues to scan from the same starting corner, resulting in a misaligned orientation. In embodiments, a correct orientation can be automatically generated by determining a scan direction for the rotated display. The physical location of the new logical starting pixel is determined, and the rows and columns of the display image are rendered in a revised logical order which compensates for the amount and direction of rotation.

Generating translated display image based on rotation of a display device

A method and system for optimizing network bandwidth usage in a remote desktop system. A client generates a stream of input events that contain position information of a cursor shown on a display of the client. The client estimates characteristics of a network that couples the client to a server. Based on estimation of the characteristics, the client adjusts the number of input events batched into a packet to be sent from the client to the server over the network.

Updating changes to caches

Graphics rendering in a virtual machine system is accelerated by utilizing host graphics hardware. In one embodiment, the virtual machine system includes a server that hosts a plurality of virtual machines. The server includes one or more graphics processing units. Each graphics processing unit can be allocated to multiple virtual machines to render images. A hypervisor that runs on the server is extended to include a redirection module, which receives a rendering request from a virtual machine and redirects the rendering request to a graphics driver. The graphics driver can commands an allocated portion of a graphics processing unit to render an image on the server.

Extension to a hypervisor that utilizes graphics hardware on a host

A measurement circuit measures a first power consumption value corresponding to a first configuration of a component of a computing device and a second power consumption value corresponding to a second configuration of the component. A user interface module provides a the first power consumption value for the first configuration and the second power consumption value for the second configuration. A user selection indicating one of the first configuration and the second configuration is received and a configuration module implements the configuration indicated by the user selection in the component.

Mechanism for adjusting system settings based on dynamic discovery of power usage

Embodiments of the present invention provide a seamless way to emulate legacy graphics processing on modern graphics hardware. In particular, in some embodiments, the present invention provides a way for modern GPUs to emulate the bitwise operations and rendering processes of previous generations of graphics hardware. The present invention utilizes a novel pixel shader program. The pixel shader program provides a texture lookup functionality that compensates for any missing bitwise functionality. When a bitwise operation is requested, the system will copy out the destination area to a temporary image. This temporary image is fed to the pixel shader program along with a precomputed texture. The texture is precomputed by the CPU for the various bitwise operations and acts as a lookup table for the requested operation. With the temporary image and precomputed texture, the shader program on the GPU can then emulate the legacy graphics operations seamlessly. Accordingly, all temporaries, and the emulation of the bitwise operations themselves are done using the three dimensional engine of the GPU.

Growing community of inventors

Sommerville, MA, United States of America

Adam D Jackson