Method and system for providing hardware support for memory protection and virtual memory address translation for a virtual machine
View Patent ↗A method for providing hardware support for memory protection and virtual memory address translation for a virtual machine. The method includes executing a host machine application within a host machine context and executing a virtual machine application within a virtual machine context. A plurality of TLB (translation look aside buffer) entries for the virtual machine context and the host machine context are stored within a TLB. Memory protection bits for the plurality of TLB entries are logically combined to enforce memory protection on the virtual machine application.
1. A method comprising:
storing a plurality of TLB (translation look aside buffer) entries for a virtual machine context and a host machine context; and
using a logical operation to combine a plurality of memory protection bits for the plurality of TLB entries to enforce memory protection on the virtual machine context, wherein the memory protection bits include at least one bit stored in at least one of the TLB entries and at least one bit to be stored in at least one of the TLB entries.
2. The method of claim 1 , wherein the at least one bit stored in at least one of the TLB entries is a read/write bit or a dirty bit.
3. The method of claim 1 , wherein the at least one bit to be stored in at least one of the TLB entries is a dirty bit.
4. The method of claim 1 , wherein the logical operation is a logical AND operation.
5. The method of claim 1 , further comprising:
executing a host machine application within the host machine context; and
executing a virtual machine application within the virtual machine context.
6. The method of claim 5 , wherein the using a logical operation comprises:
enforcing memory protection on the virtual machine application.
7. The method of claim 5 , wherein the host machine application comprises a host machine operating system that executes within the host machine context, and wherein the virtual machine application comprises a virtual machine operating system that executes within the virtual machine context.
8. The method of claim 1 , wherein the TLB entries include at least one context identifier to enable the TLB entries to provide physical address translation for a plurality of virtual addresses received from the host machine context and the virtual machine context.
9. A system comprising:
a processor architecture including a CPU hardware unit and micro architecture code configured to execute on the CPU hardware unit; and
an address translation cache configured to implement a translation look aside buffer, wherein the micro architecture code comprises:
instructions to store a plurality of TLB (translation look aside buffer) entries for a virtual machine context and a host machine context, and
instructions to use a logical operation to combine a plurality of memory protection bits for the plurality of TLB entries to enforce memory protection on the virtual machine context, wherein the memory protection bits include at least one bit stored in at least one of the TLB entries and at least one bit to be stored in at least one of the TLB entries.
10. The system of claim 9 , wherein the at least one bit stored in at least one of the TLB entries is a read/write bit or a dirty bit.
11. The system of claim 9 , wherein the at least one bit to be stored in at least one of the TLB entries is a dirty bit.
12. The system of claim 9 , wherein the logical operation is a logical AND operation.
13. The system of claim 9 , wherein the TLB entries include at least one context identifier to enable the TLB entries to provide physical address translation for a plurality of virtual addresses received from the host machine context and the virtual machine context.
14. A storage device comprising computer-executable instructions stored therein, the computer-executable instructions comprising:
instructions to store a plurality of TLB (translation look aside buffer) entries for a virtual machine context and a host machine context; and
instructions to use a logical operation to combine a plurality of memory protection bits for the plurality of TLB entries to enforce memory protection on the virtual machine context, wherein the memory protection bits include at least one bit stored in at least one of the TLB entries and at least one bit to be stored in at least one of the TLB entries.
15. The storage device of claim 14 , wherein the at least one bit stored in at least one of the TLB entries is a read/write bit or a dirty bit.
16. The storage device of claim 14 , wherein the at least one bit to be stored in at least one of the TLB entries is a dirty bit.
17. The storage device of claim 14 , wherein the logical operation is a logical AND operation.
18. The storage device of claim 14 , wherein the TLB entries include at least one context identifier to enable the TLB entries to provide physical address translation for a plurality of virtual addresses received from the host machine context and the virtual machine context.
19. The storage device of claim 14 , wherein the computer-executable instructions further comprise:
instructions to execute a host machine application within the host machine context; and
instructions to execute a virtual machine application within the virtual machine context.
20. The storage device of claim 19 , wherein the instructions to use a logical operation comprise:
instructions to enforce memory protection on the virtual machine application.