System and method for supporting JIT in a secure system with randomly allocated memory ranges

摘要

14 4 I ILI .l Disclosed herein are systems, methods, and non-transitory computer-readable storage media for processing just-in-time code at a device that enforces a code signing requirement. The disclosure includes receiving computer code, where a portion of the code includes executable just-in-time code, at a device that enforces a code signing requirement; identifying the unsigned just-in-time executable portion of code; allocating a randomly selected memory region on the device for at least some of the unsigned just-in time executable portion; and executing the unsigned just-in-time executable portion of code in the randomly selected memory region as if the unsigned just-in-time executable portion of code was signed computer code. ( G( START RECEIVING COMPUTER CODE AT A DEVICE THAT 510 ENFORCES A CODE SIGNING REQUIREMENT IDENTIFYING AN UNSIGNED JUST-IN-TIME EXECUTABLE 512 PORTION OF THE COMPUTER CODE ALLOCATING A RANDOMLY SELECTED MEMORY REGION ON THE DEVICE FOR AT LEAST SOME OF THE UNSIGNED 514 JUST-IN-TIME EXECUTABLE PORTION --- -- -- --I ------------ 1 EXEMPTING THE RANDOMLY SELECTED MEMORY REGION 516 FROM THE CODE SIGNING REQUIREMENT L------------------------------ J EXECUTING THE UNSIGNED JUST-IN-TIME EXECUTABLE PORTION OF THE COMPUTER CODE IN THE RANDOMLY - 518 SELECTED MEMORY REGION