Technologies for object-oriented memory management with extended segmentation
Technologies for memory management with memory protection extension include a computing device having a processor with one or more protection extensions. The processor may load a logical address including a segment base, effective limit, and effective address and generate a linear address as a function of the logical address with the effective limit as a mask. The processor may switch to a new task described by a task state segment extension. The task state extension may specify a low-latency segmentation mode. The processor may prohibit access to a descriptor in a local descriptor table with a descriptor privilege level lower than the current privilege level of the processor. The computing device may load a secure enclave using secure enclave support of the processor. The secure enclave may load an unsandbox and a sandboxed application in a user privilege level of the processor. Other embodiments are described and claimed.
1. An apparatus comprising:
processor circuitry coupled to a memory, the processor circuitry to:
execute a call operation, wherein the call operation is indicative of a target code destination;
push a call gate on a control stack in response to execution of the call operation, wherein the call gate is indicative of a return point associated with the call operation, and wherein the control stack is included in a control stack segment of the memory of the apparatus;
execute a return operation in response to execution of the call operation; determine whether a return address of a legacy stack matches an address of a top call gate of the control stack in response to execution of the return operation; and
generate a control stack mismatch exception in response to a determination that the return address of the legacy stack does not match the address of the top call gate of the control stack.
2. The apparatus of claim 1 , wherein the processor circuitry is further to:
execute a call operation to the new protection domain; and
execute the return operation comprises to execute a return operation to the current protection domain.
3. The apparatus of claim 1 , wherein the processor circuitry comprises one or more of an application processor or a graphics processor.
4. A method comprising:
executing, by a processor of a computing device, a call operation, wherein the call operation is indicative of a target code destination;
pushing, by the processor, a call gate on a control stack in response to execution of the call operation, wherein the call gate is indicative of a return point associated with the call operation, and wherein the control stack is included in a control stack segment of the memory of the computing device;
executing, by the processor, a return operation in response to execution of the call operation; determine whether a return address of a legacy stack matches an address of a top call gate of the control stack in response to execution of the return operation; and
generating, by the processor, a control stack mismatch exception in response to a determination that the return address of the legacy stack does not match the address of the top call gate of the control stack.
5. The method of claim 4 , further comprising:
executing, by the processor, a call operation to the new protection domain; and
executing, by the processor, the return operation comprises executing the return operation to the current protection domain.
6. The method of claim 4 , wherein the processor comprises one or more of an application processor or a graphics processor.
7. At least one non-transitory computer-readable medium having stored thereon instructions which, when executed, cause a computing device to perform operations comprising:
executing a call operation, wherein the call operation is indicative of a target code destination;
pushing a call gate on a control stack in response to execution of the call operation, wherein the call gate is indicative of a return point associated with the call operation, and wherein the control stack is included in a control stack segment of the memory of the computing device;
executing a return operation in response to execution of the call operation; determine whether a return address of a legacy stack matches an address of a top call gate of the control stack in response to execution of the return operation; and
generating a control stack mismatch exception in response to a determination that the return address of the legacy stack does not match the address of the top call gate of the control stack.
8. The non-transitory computer-readable medium of claim 7 , wherein the operations further comprise:
executing a call operation to the new protection domain; and
executing the return operation comprises executing the return operation to the current protection domain.
9. The non-transitory computer-readable medium of claim 7 , wherein the processor comprises one or more of an application processor or a graphics processor.
10. A data processing system comprising:
one or more processors;
a memory coupled to the one or more processors, the one or more processors to:
execute a call operation, wherein the call operation is indicative of a target code destination;
push a call gate on a control stack in response to execution of the call operation, wherein the call gate is indicative of a return point associated with the call operation, and wherein the control stack is included in a control stack segment of the memory of the data processing system;
execute a return operation in response to execution of the call operation; determine whether a return address of a legacy stack matches an address of a top call gate of the control stack in response to execution of the return operation; and
generate a control stack mismatch exception in response to a determination that the return address of the legacy stack does not match the address of the top call gate of the control stack.
11. The data processing system of claim 10 , wherein the one or more processors are further to:
execute a call operation to the new protection domain; and
execute the return operation comprises to execute a return operation to the current protection domain.
12. The data processing system of claim 10 , wherein the processor comprises one or more of an application processor or a graphics processor.