Patent ID: 9626508
Date: 2017-04-18
CPC Classifications: G06F

Claim:
1. An apparatus comprising: a first storage to store an enable indicator for a control transfer termination (CTT) state machine and a state of the CTT state machine for a first privilege level; a second storage to store an enable indicator for the CTT state machine and a state of the CTT state machine for a second privilege level; the CTT state machine configured to operate in one of the first and second privilege levels, the CTT state machine to raise a fault when an indirect control transfer instruction of a process is not terminated by a CTT instruction, wherein a virtual machine monitor (VMM) is to selectively enable the CTT state machine for the process; and a binary translation engine to receive fault information associated with a fault raised by the CTT state machine, provide at least some of the fault information to a security agent associated with the process, and responsive to direction from the security agent, translate a code block of the process to a translated code block to insert a first CTT instruction associated with the indirect control transfer instruction, wherein when the translated code block including the indirect control transfer instruction and the first CTT instruction is to be executed, the CTT state machine will not raise a fault.