Integrated development environment with network-based compilation and sandboxed native machine-language capabilities

• US 8,281,288 B1
• Filed: 10/20/2011
• Issued: 10/02/2012
• Est. Priority Date: 10/20/2011
• Status: Expired due to Fees

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Spencer, Greg
• Primary Examiner(s): Zhen, Wei
• Assistant Examiner(s): Chen, Qing
• Application Number:
  US13/278,011
• Time in Patent Office: 348 Days
• Field of Search: 717106-113, 717124-161, 709201-203
• US Class Current: 717/140
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 8/20 Software design
• CPC Class Codes: G06F 8/30 Creation or generation of source code
• CPC Class Codes: G06F 8/41 Compilation

Abstract

An IDE is provided by a web browser on a client machine, the IDE having a document editor that allows a user to generate source code. The source code is transmitted from the client machine to one or more servers via a network connection to be compiled into compiled native machine instructions. The compiled native machine instructions are received from the one or more servers by the client machine. The compiled native machine instructions are executed in a sandboxed environment on the client machine, such that system calls originating from the compiled native machine instructions that present a security risk are blocked using the sandboxed environment and system calls originating from the compiled native machine instructions that do not present a security risk are allowed in the sandboxed environment.

Claims

1. A computer-implemented method for providing an integrated development environment (IDE) on a client machine with network-based compilation and sandboxed execution, comprising:

providing an IDE by a web browser on a client machine, the IDE having a document editor that allows a user to generate source code;

transmitting the source code from the client machine to one or more server machines via a network connection to be compiled into compiled native machine instructions;

receiving the compiled native machine instructions from the one or more server machines by the client machine for execution in a sandboxed environment; and

executing the compiled native machine instructions in the sandboxed environment, the sandboxed environment executing on the client machine, wherein execution of system calls originating from the compiled native machine instructions that present a security risk are blocked using the sandboxed environment and execution of system calls originating from the compiled native machine instructions that do not present a security risk are allowed in the sandboxed environment.

2. The computer-implemented method of claim 1, further comprising:

allowing execution of blocked system calls that are selected by the user.

3. The computer-implemented method of claim 1, further comprising:

distributing, by the client machine, compilation of the source code into compiled machine language instructions across multiple server machines, and wherein receiving comprises receiving the compiled native machine instructions and consolidating them to be executed.

4. The computer-implemented method of claim 1, further comprising:

transmitting the source code to the one or more server machines to be compiled in real-time as the user generates the source code.

5. A computer-implemented method for using one or more server machines to compile source code for an integrated development environment (IDE) provided by a web browser at a client machine with sandboxing capabilities, comprising:

receiving the source code from the IDE provided by the web browser on the client machine by the one or more server machines;

compiling the source code by the one or more server machines into compiled native machine instructions; and

transmitting the compiled native machine instructions from the one or more server machines to the client machine for execution in a sandboxed environment, the sandboxed environment executing the compiled native machine instructions, the sandboxed environment executing on the client machine, the sandboxed environment blocking execution of system calls originating from the compiled native machine instructions that present a security risk and the sandboxed environment allowing execution of system calls originating from the compiled native machine instructions that do not present a security risk in the sandboxed environment.

6. The computer-implemented method of claim 5, further comprising:

distributing compilation of the source code into compiled machine language instructions across multiple server machines, and wherein transmitting comprises consolidating the compiled native machine instructions to be executed at the client machine.

7. The computer-implemented method of claim 5, further comprising:

compiling the source code in real-time as a user generates the source code.

8. A system for providing an integrated development environment (IDE) on a client machine with network-based compilation and sandboxed execution, comprising:

a processor;

a web browser on a client machine configured to use the processor to provide an IDE, the IDE having a document editor that allows a user to generate source code;

a user code transmission module configured to use the processor to transmit the source code from the client machine to one or more server machines via a network connection to be compiled into compiled native machine instructions;

a receiving module configured to use the processor to receive the compiled native machine instructions from the one or more server machines by the client machine for execution in a sandboxed environment; and

an execution module configured to use the processor to execute the compiled native machine instructions in the sandboxed environment, the sandboxed environment executing on the client machine, wherein execution of system calls originating from the compiled native machine instructions that present a security risk are blocked using the sandboxed environment and execution of system calls originating from the compiled native machine instructions that do not present a security risk are allowed in the sandboxed environment.

9. The system of claim 8, wherein the execution module is further configured to use the processor to allow execution of blocked system calls that are selected by the user.

10. The system of claim 8, wherein the user code transmission module is further configured to use the processor to distribute the source code across the one or more server machines to be compiled into machine instructions and the receiving module is further configured to use the processor to receive the compiled native machine instructions from the one or more server machines and consolidate them for execution by the client machine.

11. The system of claim 8, wherein the user code transmission module is further configured to use the processor to transmit the source code to the one or more server machines to be compiled in real-time as the user generates the source code.

12. A computer readable storage device having instructions stored thereon, that, when executed by a processor, cause the processor to perform operations for providing an integrated development environment (IDE) on a client machine with network-based compilation and sandboxed execution, the operations comprising:

providing an IDE by a web browser on a client machine, the IDE having a document editor that allows a user to generate source code;

transmitting the source code from the client machine to one or more server machines via a network connection to be compiled into compiled native machine instructions;

receiving the compiled native machine instructions from the one or more server machines by the client machine for execution in a sandboxed environment; and

executing the compiled native machine instructions in the sandboxed environment, the sandboxed environment executing on the client machine, wherein execution of system calls originating from the compiled native machine instructions that present a security risk are blocked using the sandboxed environment and execution of system calls originating from the compiled native machine instructions that do not present a security risk are allowed in the sandboxed environment.

13. The computer readable storage device of claim 12, the operations further comprising:

allowing execution of blocked system calls that are selected by the user.

14. The computer readable storage device of claim 12, the operations further comprising:

distributing, by the client machine, compilation of the source code into compiled machine language instructions across multiple server machines, and wherein receiving comprises receiving the compiled native machine instructions and consolidating them to be executed.

15. The computer readable storage device of claim 12, the operations further comprising:

transmitting the source code to the one or more server machines to be compiled in real-time as the user generates the source code.