EMBEDDED PATCH MANAGEMENT

1 . A method, comprising:

receiving a call to a code module;

checking a guardian stack for indications of authorization, the guardian stack separate from an execution stack;

passing the call to an internal code module; and

executing the code module.

2 . The method of claim 1 , further comprising:

validating the call to the code module based on the indications of authorization.

3 . The method of claim 1 , further comprising:

blocking a call to a code module based on incorrect indications of authorization.

4 . The method of claim 1 , further comprising:

returning a result of executing the code module.

5 . The method of claim 4 , further comprising:

returning an internal result from the internal code module; and

providing the internal result as the result.

6 . The method of claim 1 , further comprising:

checking arguments to the code module.

7 . The method of claim 1 , further comprising:

marking a mark queue responsive to a mark instruction of the internal code module.

8 . The method of claim 7 , further comprising:

checking the mark queue for marks based on expected mark instructions.

9 . The method of claim 8 , further comprising:

signaling an error responsive to an incorrect entry in the mark queue.

10 . The method of claim 8 , further comprising:

checking the mark queue responsive to a timer.

11 . The method of claim 8 , wherein:

the expected mark instructions are stored as a graph.

12 . A machine-readable medium, embodying instructions, the instructions, when executed, causing a processor to perform a method, the method comprising:

receiving a call to a code module;

checking a guardian stack for indications of authorization, the guardian stack separate from an execution stack;

passing the call to an internal code module; and

executing the code module.

13 . The machine-readable medium of claim 12 , wherein:

the machine-readable medium embodies a patch to a software system, the patch including the instructions which execute the method.

14 . The machine-readable medium of claim 13 , wherein:

the patch may be distributed to receiving devices for incorporation into a software system of the receiving devices.

15 . The machine-readable medium of claim 12 , wherein the method further comprises:

checking arguments to the code module;

validating the call to the code module based on the indications of authorization;

returning an internal result from the internal code module;

providing the internal result as a result of executing the code module; and

returning the result of executing the code module.

16 . The machine-readable medium of claim 12 , wherein the method further comprises:

marking a mark queue responsive to a mark instruction of the internal code module; and

checking the mark queue for marks based on expected mark instructions.

17 . A system, comprising:

a processor;

a memory coupled to the processor;

a user interface coupled to the processor;

a network interface coupled to the processor;

wherein the processor is to:

receive a call to a code module;

check a guardian stack for indications of authorization, the guardian stack separate from an execution stack;

pass the call to an internal code module; and

execute the internal code module.

18 . The system of claim 17 , wherein the processor is further to:

check arguments to the code module;

validate the call to the code module based on the indications of authorization;

return an internal result from the internal code module;

provide the internal result as a result of executing the code module; and

return the result of executing the code module.

19 . The system of claim 17 , wherein the processor is further to:

mark a mark queue responsive to a mark instruction of the internal code module; and

check the mark queue for marks based on expected mark instructions.

20 . The system of claim 17 , further comprising:

means for storing data in a non-volatile manner.