The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Jul. 12, 2022
Filed:
Apr. 29, 2019
Applicant:
Vmware, Inc., Palo Alto, CA (US);
Inventor:
Prasad Dabak, Pune, IN;
Assignee:
VMWARE, INC., Palo Alto, CA (US);
Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 9/455 (2018.01); G06F 9/54 (2006.01); G06F 9/30 (2018.01); G06F 8/41 (2018.01); G06F 8/53 (2018.01);
U.S. Cl.
CPC ...
G06F 9/45554 (2013.01); G06F 8/427 (2013.01); G06F 8/53 (2013.01); G06F 9/30043 (2013.01); G06F 9/30101 (2013.01); G06F 9/45545 (2013.01); G06F 9/545 (2013.01);
Abstract
A method is provided for a hypervisor to dynamically discover internal address information of a guest kernel on a virtual machine. The method includes locating a kernel exported system call or function in an image of the guest kernel in guest memory of the virtual machine, disassembling machine code of the kernel exported system call or function in the image into assembly code, detecting a pattern from memory references in the assembly code, and, after detecting the pattern, determining the internal address information of the guest kernel from the assembly code.