[LLVMdev] JIT and security
oleg77 at gmail.com
Sun Oct 18 15:46:44 CDT 2009
I'm writing JIT compiler that will run a third party code. My goal is
to build it with security layer that will allow me to prevent some
basic operation that possibly can harm JIT application host computer.
Maybe some of you can guide me on how to do following operations:
1) prevent system calls
2) memory allocation management (set some limits that can't be used
3) CPU power limiting
I have a guess on how to prevent system calls or some known function
calls by parsing IR and picking up functions calls that maybe
unwanted. Another way is to check list of functions in object model.
Maybe there is already implemented mechanism like that. So, anyone
could give me a clue.
About RAM and CPU management I have no idea how to do that.
Ideally my JIT compiler have to become a BlackBox, that hosting party
can configure to his needs.
I hope I can find some help here. That would be great!
Thank you for your time,
More information about the LLVMdev