Handling calls to native code in a managed code environment

• US 8,683,462 B2
• Filed: 10/22/2010
• Issued: 03/25/2014
• Est. Priority Date: 10/22/2010
• Status: Active Grant

• Current Assignee: Adobe Inc.
• Original Assignee: Adobe Systems Incorporated (Adobe Inc.)
• Inventors: Goldman, Oliver
• Primary Examiner(s): Kang, Insun
• Application Number:
  US12/910,776
• Publication Number:
  US 20120102483A1
• Time in Patent Office: 1,250 Days
• Field of Search: None
• US Class Current: 717/174
• CPC Class Codes: G06F 8/36 Software reuse
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57

Abstract

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, provide a technique for handling calls to native code in a managed code environment. In one aspect, a method includes the actions of: loading, in a managed code environment operating on one or more data processing apparatus, code of an application and code of an extension, wherein the loading includes loading the code of the extension into a first domain and loading the code of the application into a second domain, the first domain being different than the second domain; receiving, through an application program interface (API) of the managed code environment, a call to a function of native program code corresponding to an identified computing platform; allowing the call when the call arises from the first domain; and disallowing the call when the call arises from the second domain.

Claims

1. A method comprising:

determining, via a managed code environment executing on a computing device, an extension that corresponds with a hardware platform of the computing device;

loading, via the managed code environment, code of the extension that corresponds with the hardware platform into a first domain, the extension configured to expose hardware-based services of the hardware platform;

loading, via the managed code environment operating on the computing device, code of an application into a second domain, the first domain being different than the second domain;

receiving, from the application and through an application program interface (API) of the managed code environment, a call to a function of native program code corresponding to the hardware platform, the API accessible from both the first domain and the second domain;

determining whether the call from the application is received via the first domain or via the second domain; and

allowing the call through the API if the call is received from the application via the first domain effective to allow the application to access one of the hardware-based services of the hardware platform;

or

disallowing the call through the API if the call is received from the application via the second domain effective to prevent the application from accessing the hardware-based services of the hardware platform.

2. The method of claim 1, wherein the application uses the extension to access the native program code via the first domain.

3. The method of claim 2, further comprising performing, via the extension and in the managed code environment, validation of one or more parameters passed to the function of the native program code by the application.

4. The method of claim 1, further comprising loading code of the API into the managed code environment, and wherein the code of the extension is loaded after the code of the API and the code of the application is loaded after the code of the extension.

5. The method of claim 4, wherein the managed code environment comprises a software development kit or a cross-platform runtime comprising the API.

6. The method of claim 1, wherein the extension comprises the native program code and the code of the extension, the code of the extension written in runtime code that is independent of multiple different hardware platforms supported by the extension.

7. One or more non-transitory computer-readable storage devices comprising processor-executable instructions that, responsive to execution by one or more processors, cause the one or more processors to implement operations comprising:

determining, via a managed code environment, an extension that corresponds with a hardware platform;

loading, via the managed code environment, code of an extension that corresponds with the hardware platform into a first domain, the extension configured to expose services of the hardware platform not exposed by an application programming interface (API) of the managed code environment;

loading, via the managed code environment, code of an application into a second domain, the first domain being different than the second domain;

receiving, from the application and through the API of the managed code environment, a call to a function of native program code corresponding to the hardware platform, the API accessible from both the first domain and the second domain;

determining whether the call from the application is received via the first domain or via the second domain; and

allowing the call through the API if the call is received from the application via the first domain effective to allow the application to access one of the services of the hardware platform;

or

disallowing the call through the API if the call is received from the application via the second domain effective to prevent the application from accessing the services of the hardware platform.

8. The one or more non-transitory computer-readable storage devices of claim 7, wherein the application uses the extension to access the native program code via the first domain.

9. The one or more non-transitory computer-readable storage devices of claim 8, wherein the operations further comprise performing, via the extension and in the managed code environment, validation of one or more parameters passed to the function of the native program code by the application.

10. The one or more non-transitory computer-readable storage devices of claim 7, wherein the operations further comprise loading code of the API into the managed code environment, the code of the extension is loaded after the code of the API, and the code of the application is loaded after the code of the extension.

11. The one or more non-transitory computer-readable storage devices of claim 10, wherein the managed code environment comprises a software development kit or a cross-platform runtime comprising the API.

12. The one or more non-transitory computer-readable storage devices of claim 11, wherein the extension comprises the native program code and the code of the extension, the code of the extension written in runtime code that is independent of multiple different hardware platforms supported by the extension.

13. A system comprising:

one or more processor; and

a memory coupled to the one or more processors and including instructions that are executable by the one or more processors to implement a managed code environment to;

identify a hardware platform of the system;

load code of an extension that corresponds with the identified hardware platform into a first domain, the extension configured to expose hardware-based services of the identified hardware platform not exposed by an application programming interface (API) of the managed code environment;

load code of an application into a second domain, the first domain being different than the second domain;

receive, through the API of the managed code environment, a call to a function of native program code corresponding to the identified hardware platform, the API being accessible from both the first domain and the second domain;

determine whether the call from the application is received via the first domain or via the second domain; and

allow the call through the API if the call is received from the application via first domain effective to allow the application access to one of the hardware-based services of the identified hardware platform;

or

disallow the call through the API if the call is received from the application via second domain effective to prevent the application from accessing the hardware-based services of the identified hardware platform.

14. The system of claim 13, wherein the cross-platform managed code environment is further implemented to load code of the API into the cross-platform managed code environment, the code of the extension is loaded after the code of the API, and the code of the application is loaded after the code of the extension.

15. The system of claim 14, wherein the application uses the extension to access the native program code via the first domain.

16. The system of claim 15, wherein the managed code environment is further implemented to perform, via the extension and in the managed code environment, validation of one or more parameters passed to the function of the native program code by the application.

17. The system of claim 15, wherein the managed code environment comprises a software development kit or a cross-platform runtime comprising the API.

18. The system of claim 17, wherein the extension comprises the native program code and the code of the extension, the code of the extension written in runtime code that is independent of multiple different hardware platforms supported by the extension.