Method for validating an untrusted native code module

1. A method comprising:

in a computing device, performing operations of:

receiving a native code module of instructions, wherein the instructions are expressed using an instruction set architecture associated with the computing device, and wherein the instructions include control flow instructions, the control flow instructions each having a respective target;

loading the instructions into a memory of the computing device; and

performing static binary analysis on the native code module in a secure runtime environment to validate that the instructions that are loaded into the memory will execute safely within the memory, including:

determining that the instructions (i) do not include restricted instructions and (ii) do not access restricted features of the computing device;

determining that the instructions are laid out in a region of the memory that includes a plurality of byte boundaries so that for each byte boundary in the plurality of byte boundaries that satisfies an alignment granularity condition within the region of the memory, an instruction is aligned along the byte boundary; and

determining that the respective target of each control flow instruction that is loaded into the memory is an instruction that is aligned along one of the byte boundaries in the plurality of byte boundaries that satisfies the alignment granularity condition within the region of the memory.

2. The method of claim 1 , wherein the instruction set architecture is the x86 instruction set architecture.

3. The method of claim 1 , wherein receiving the native code module of instructions includes receiving the native code module within a web browser.

4. The method of claim 3 , wherein the native code module is operating-system neutral, and can support applications across multiple operating systems that can run on the instruction set architecture of the computing device.

5. The method of claim 1 , further comprising:

in the computing device, performing the operation of generating the native code module using a compilation process that ensures that the native code module can be successfully validated.

6. The method of claim 5 , wherein at least one of compiling or performing static binary analysis to validate the native code module further involves one or more of the following:

changing an unsafe instruction into a safe instruction; and

determining whether a byte sequence in the native code module is supported for a given hardware implementation of the instruction set architecture and disallowing an unsupported byte sequence in the native code module.

7. A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform operations comprising:

receiving a native code module of instructions, wherein the instructions are expressed using an instruction set architecture associated with the computer, and wherein the instructions include control flow instructions, the control flow instructions each having a respective target;

loading the instructions into a memory of the computer; and

performing static binary analysis on the native code module in a secure runtime environment to validate that the instructions that are loaded into the memory will execute safely within the memory, including:

determining that the instructions (i) do not include restricted instructions and (ii) do not access restricted features of the computer;

determining that the instructions are laid out in a region of the memory that includes a plurality of byte boundaries so that for each byte boundary in the plurality of byte boundaries that satisfies an alignment granularity condition within the region of the memory, an instruction is aligned along the byte boundary; and

determining that the respective target of each control flow instruction that is loaded into the memory is an instruction that is aligned along one of the byte boundaries in the plurality of byte boundaries that satisfies the alignment granularity condition within the region of the memory.

8. The non-transitory computer-readable storage medium of claim 7 , wherein the instruction set architecture is the x86 instruction set architecture.

9. The non-transitory computer-readable storage medium of claim 7 , wherein receiving the native code module of instructions includes receiving the native code module within a web browser.

10. The non-transitory computer-readable storage medium of claim 7 , wherein the native code module is operating-system neutral, and can support applications across multiple operating systems that can run on the instruction set architecture of the computing device.

11. The non-transitory computer-readable storage medium of claim 7 , wherein performing static binary analysis on the native code module in a secure runtime environment to validate that the instructions that are loaded into the memory will execute safely within the memory further includes one or more of the following:

changing an unsafe instruction into a safe instruction; and

determining whether a byte sequence in the native code module is supported for a given hardware implementation of the instruction set architecture, and disallowing an unsupported byte sequence in the native code module.

12. The method of claim 1 , wherein a target of one of the control flow instructions that is loaded into the memory is computed at runtime.

13. The non-transitory computer-readable storage medium of claim 7 , wherein a target of one of the control flow instructions that is loaded into the memory is computed at runtime.

14. The method of claim 1 , wherein the alignment granularity condition specifies that each of the bye boundaries in the plurality of byte boundaries is a power-of-2 byte boundary.

15. The non-transitory computer-readable medium of claim 7 , wherein the alignment granularity condition specifies that each of the byte boundaries in the plurality of byte boundaries is a power-of-2 byte boundary.