Limiting execution of software programs

Patent metadata

Field	Value
Publication number	US-8949803-B2
Application number	US-201113036440-A
Country	US
Kind code	B2
Filing date	Feb 28, 2011
Priority date	Feb 28, 2011
Publication date	Feb 3, 2015
Grant date	Feb 3, 2015

Abstract

Techniques are disclosed for limiting execution of software programs. For example, a method comprises the following steps. A first set of program code is extracted from a second set of program code. The extracted first set of program code is parsed to generate a parsed structure. The parsed structure generated from the first set of program code is examined for one or more expressions predetermined to be unsafe for execution. The one or more expressions predetermined to be unsafe for execution that are contained in the first set of program code are detected. In one example, the first set of program code may be a script generated with the JavaScript™ scripting language and the second set of program code may be a business process.

First claim

What is claimed is:

1. A method comprising:
generating a configuration file comprising one or more constructs predetermined to be unsafe for execution as identified by a user;
extracting a first set of program code from a second set of program code;
parsing the extracted first set of program code to generate a parsed structure;
examining the parsed structure generated from the first set of program code for one or more expressions that use at least one of the one or more constructs predetermined to be unsafe for execution, wherein the examining step further comprises providing a looping guard to verify if the entire first set of program code has been examined;
detecting the one or more expressions that use at least one of the one or more constructs predetermined to be unsafe for execution that are contained in the first set of program code, wherein the detecting step further comprises flagging each of the one or more expressions that use at least one of the one or more constructs predetermined to be unsafe for execution that are contained in the first set of program code; and
generating an unsafe-expression flagged version of the first set of program code for editing by a user;
wherein the extracting, parsing, examining, detecting and generating steps are performed in accordance with a processor device.

2. The method of claim 1 , further comprising displaying the one or more expressions that use at least one of the one or more constructs predetermined to be unsafe for execution that are contained in the first set of program code.

3. The method of claim 1 , further comprising preventing execution of the one or more expressions that use at least one of the one or more constructs predetermined to be unsafe for execution that are contained in the first set of program code while allowing execution of at least one of: any remaining portion of the first program code without the one or more expressions; and the second program code, to execute.

4. The method of claim 1 , further comprising preventing execution of the second set of program code when at least one of the one or more expressions that use at least one of the one or more constructs predetermined to be unsafe for execution are detected in the first set of program code.

5. The method of claim 1 , wherein the parsed structure comprises a parsed tree structure.

6. The method of claim 1 , wherein the second set of program code comprises a business process.

7. The method of claim 1 , wherein the second set of program code comprises a web page.

8. The method of claim 1 , wherein the first set of program code comprises a segment of code generated using a scripting language.

9. The method of claim 1 , wherein the one or more expressions that use at least one of the one or more constructs predetermined to be unsafe for execution comprise one or more of: a function call expression; a function definition construct; a goto construct; a while construct; a for construct; a property read construct; a property write construct; and a prototype assignment construct.

10. The method of claim 1 , wherein the second set of program code is deployable in a shared computing environment.

11. The method of claim 1 , wherein editing by a user comprises at least one of removing the one or more expressions that uses at least one of the one or more constructs predetermined to be unsafe for execution and replacing the one or more expressions with one or more alternative expressions.

12. The method of claim 5 , wherein the parsed tree structure comprises one or more nodes.

13. The method of claim 12 , further comprising traversing the parsed tree structure and checking each of the one or more nodes for the one or more expressions predetermined to be unsafe for execution that are contained in the first set of program code.

Assignees

• Duftler Matthew Jason
• Lovell Douglas Charles
• IBM

Inventors

• Duftler Matthew Jason
• Lovell Douglas Charles

Classifications

• G06F21/52 Primary

  during program execution, e.g. stack integrity {; Preventing unwanted data erasure; Buffer overflow} · CPC title