Hewlett-packard Development Company, L.P.

Google Inc.

Caroline Tice

David Lowell

Xinliang David Li

Cary Allen Coutant

Geoffrey Roeder Pike

Úlfar Erlingsson

Sriraman Tallam

Lawrence Alan Crowl

Kenneth Buchanan

A system and method is disclosed for providing security in virtual function calling. During a build process a program code is analyzed to identify one or more call sites used to facilitate a call to a subroutine associated with a declared object type. One or more trusted vtable pointers to a respective subroutine is determined, and the program is configured, via the build process, to detect, at an execution time, an initiation of a virtual call at a call site, verify whether a vtable pointer used in connection with the call site is associated with at least one of the trusted vtable pointers, and, if verified, facilitate the virtual call using the call site. If the vtable pointer cannot be verified then the virtual call is aborted.

Detecting and handling vtable pointer corruption

A virtual machine monitor is interposed between computer hardware and an operating system at runtime. Hardware that is already virtualized can be devirtualized at runtime.

Interposing a virtual machine monitor and devirtualizing computer hardware at runtime

A computer includes hardware, a virtual machine monitor, and first and second operating system instances. The virtual machine monitor is used to expose a first operating system instance to a first hardware partition and prevent the first operating system instance from discovering a second hardware partition; and expose a second operating system instance to the second hardware partition and prevent the second operating system instance from discovering the first hardware partition. The virtual machine monitor is also used to share at least some of the hardware among the first and second operating system instances.

Resource allocation and protection in a multi-virtual environment

Growing community of inventors

Mountain View, CA, United States of America

Caroline Tice