An optimizing object code translation system and method perform dynamic compilation and translation of a target object code on a source operating system while performing optimization. Compilation and optimization of the target code is dynamically executed in real time. A compiler performs analysis and optimizations that improve emulation relative to template-based translation and interpretation such that a host processor which processes larger order instructions, such as 32-bit instructions, may emulate a target processor which processes smaller order instructions, such as 16-bit and 8-bit instructions. The optimizing object code translator does not require knowledge of a static program flow graph or memory locations of target instructions prior to run time. In addition, the optimizing object code translator does not require knowledge of the location of all join points into the target object code prior to execution. During program execution, a translator records branch operations. The logging of information identifies instructions and instruction join points. When a number of times a branch operation is executed exceeds a threshold, the destination of the branch becomes a seed for compilation and code portions between seeds are defined as segments. A segment may be incomplete allowing for modification or replacement to account for a new flow of program control during real time program execution.

Dynamic optimizing object code translator for architecture emulation and dynamic optimizing object code translation method

A system and method for transforming a procedural program having procedural language code into an object-oriented program, comprises scanning the procedural language code and creating a map based on the scanned procedural language code, storing the scanned procedural language code as intermediate code, processing at least a segment of the procedural language code using the map, creating a first data structure using the processed segment, modifying the intermediate code based on the first data structure and generating an object-oriented program having an object class based on the modified intermediate code.

Method and system for transforming legacy software applications into modern object-oriented systems

Hijacking of an application is prevented by securing execution of a computer program on a computing system. Prior to execution of the computer program, the computer program is analyzed to identify permitted targets of all indirect transfers. An application-specific policy based on the permitted targets is created. When the program is executed on the computing system, the application-specific policy is enforced such that the program is prohibited from executing indirect transfer instructions that do not target one of the permitted targets.

Secure execution of a computer program

A constraint is inserted into a program to address a vulnerability of the program to attacks. The constraint includes a segment of code that determines when the program has been asked to execute a “corner case” which does not occur in normal operations. The constraint code can access a library of detector and remediator functions to detect various attacks and remediate against them. Optionally, the detector can be employed without the remediator for analysis. The context of the program can be saved and restored if necessary to continue operating after remediation is performed. The constraints can include descriptors, along with machine instructions or byte code, which indicate how the constraints are to be used.

Constraint injection system for immunizing software programs against vulnerabilities and attacks

Hijacking of an application is prevented by monitoring control flow transfers during program execution in order to enforce a security policy. At least three basic techniques are used. The first technique, Restricted Code Origins (RCO), can restrict execution privileges on the basis of the origins of instruction executed. This distinction can ensure that malicious code masquerading as data is never executed, thwarting a large class of security attacks. The second technique, Restricted Control Transfers (RCT), can restrict control transfers based on instruction type, source, and target. The third technique, Un-Circumventable Sandboxing (UCS), guarantees that sandboxing checks around any program operation will never be bypassed.

Secure execution of a computer program using a code cache

The inventive mechanism allows an application to switch modes during its operation, between a compatibility or legacy mode for a previous architecture, and a native mode for a current architecture. The mechanism includes an official function descriptor which describes information for accessing a function which resides in one module. The OFD has a legacy portion is useable by a legacy module and a native portion is useable by a native module. The mechanism also includes a linkage table that resides in a second module which references the function in the first module. The portion of the OFD which corresponds to the mode of the linkage table module is copied into the linkage table. Each portion contains one entry that corresponds to an address location of the function, and another entry that is a value for a register which refers to the data segment corresponding to the load module containing the function. The information in the OFD depends on whether the function is a legacy function or a native function.

Method and apparatus for the inter-operation of differing architectural and run time conventions

An apparatus for translating a multiple user program into a native machine code to run on a native computer hardware having memory and an operating system that is capable of detecting whether the program has an instruction set architecture different from a native instruction set architecture The memory has a source file including the program to be translated At least one source code module is defined as including a plurality of blocks of code mapped to the memory by the operating system The blocks have one or more source instructions, with each block beginning with one of the source instructions and ending with a branch or a target of the branch A virtual instruction pointer points to one of the source instructions to be executed One or more source instructions are dynamically translated and executed, and a profile data is produced A shared translation file is ultimately created for the source code module using the profile data The shared translation file is periodically offered to at least one of the users

Client/server system for fast, user transparent and memory efficient computer language translation

A method of executing a program compiled for a base instruction set architecture different than a native instruction set architecture, on a native machine by organizing a runtime system module into at least a low level domain, a medium level domain, and a high level domain. A memory buffer referred to as a backing store is created to correspond to a register stack and have a one-to-one mapping with the register stack. The invention initializes a beginning of the backing store to contain user-visible register values which constitute base instruction set architecture register values, and sets a virtual instruction pointer to a current instruction which is to be executed. The method of the present invention executes a start routine for forcing a reload of the user-visible register values from the backing store to the register stack and returns to the low level domain to perform a lookup operation in a translation lookaside buffer. The present invention also calls the medium level domain from the low level domain to perform a lookup operation in an address map if the lookup operation in the translation lookaside buffer fails. It further calls the medium level domain if a translated block performs a system call. The method also spills user-visible register values from the register stack to the backing store when it switches from the medium level domain to the high level domain only if a translated block for the current instruction to execute does not exist or a system call is performed which needs to access a base instruction set register state. It also returns from the high level domain to the low level domain if the translated block exists in memory for the current instruction to execute.

Anthony Fitzgerald Istvan

Papers

Method and apparatus for the inter-operation of differing architectural and run time conventions

Client/server system for fast, user transparent and memory efficient computer language translation

Instruction set interpreter which uses a register stack to efficiently map an application register state