<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 15px; ">Check out professor Saman Amarasinghe's work. It was being commercialized by a company called Determina (which has since been acquired by VMWare).</span><div><font class="Apple-style-span" face="Arial, Helvetica, sans-serif" size="3"><span class="Apple-style-span" style="font-size: 13px; line-height: 15px;"><br></span></font></div><div><font class="Apple-style-span" face="Arial, Helvetica, sans-serif" size="3"><span class="Apple-style-span" style="font-size: 13px; line-height: 15px;">Evan</span></font></div><div><font class="Apple-style-span" face="Arial, Helvetica, sans-serif" size="3"><span class="Apple-style-span" style="font-size: 13px; line-height: 15px;"><br></span></font><div><div><div>On Oct 18, 2009, at 1:46 PM, Oleg Knut wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div>Hello,<br><br>I'm writing JIT compiler that will run a third party code. My goal is <br>to build it with security layer that will allow me to prevent some <br>basic operation that possibly can harm JIT application host computer.<br><br>Maybe some of you can guide me on how to do following operations:<br> 1) prevent system calls<br> 2) memory allocation management (set some limits that can't be used <br>by JIT)<br> 3) CPU power limiting<br><br>I have a guess on how to prevent system calls or some known function <br>calls by parsing IR and picking up functions calls that maybe <br>unwanted. Another way is to check list of functions in object model. <br>Maybe there is already implemented mechanism like that. So, anyone <br>could give me a clue.<br><br>About RAM and CPU management I have no idea how to do that.<br><br>Ideally my JIT compiler have to become a BlackBox, that hosting party <br>can configure to his needs.<br><br>I hope I can find some help here. That would be great!<br><br>Thank you for your time,<br>Oleg.<br>_______________________________________________<br>LLVM Developers mailing list<br><a href="mailto:LLVMdev@cs.uiuc.edu">LLVMdev@cs.uiuc.edu</a> <a href="http://llvm.cs.uiuc.edu">http://llvm.cs.uiuc.edu</a><br><a href="http://lists.cs.uiuc.edu/mailman/listinfo/llvmdev">http://lists.cs.uiuc.edu/mailman/listinfo/llvmdev</a><br></div></blockquote></div><br></div></div></body></html>