Patent ID: 7444624

Claim:
A method, comprising: providing at least one shared interpreter library and a prototype stub executable in an electronic device; loading an interpreted program in said electronic device; forming a stub executable using said prototype stub executable in said electronic device, said stub executable being an application executed within an operating system in said electronic device; associating said stub executable with said interpreted program in said electronic device; assigning at least one second capability to said stub executable; executing said stub executable in said electronic device in a separate process context; indicating, by said stub executable, to said at least one shared interpreter library said interpreted program; invoking, by said stub executable, at least one function in said at least one shared interpreter library to interpret said interpreted program; checking whether an external interpreted program code section is referred by the interpreted program; loading said external interpreted program code section in said electronic device; inferring at least one first capability for said external interpreted program code section; and disallowing the execution of said external interpreted program code section if said at least one second capability is not a subset of said at least one first capability.