Abstract: A computer comprising processors and memory may implement an application execution engine to execute an application including both managed code and unmanaged code, the managed code providing memory safety for accesses to objects in memory and the unmanaged code providing no such safety. Responsive to a request from managed code, the application execution engine allocates memory for an object in a managed pool and the object is accessible to managed code in a managed state. Responsive to a requirement for unmanaged code to access the managed object, the application execution engine transforms the object to be accessible in an unmanaged state, the transformation including allocating memory for the object in an unmanaged pool, copying data from managed memory to unmanaged memory according to a predetermined unmanaged layout, releasing the managed memory and using an address of the unmanaged memory to access the object in the unmanaged state.

Abstract: A method for instrumenting an update to a software application may include determining, based on a source code file affected by the update to the software application, a first method affected by the update to the software application. A second method called by the first method and a third method called by the second method may also be identified as being affected by the update to the software application. A user interface file that includes a call to the first method, the second method, and/or the third method may be identified. The functional impact of the update may be determined by identifying one or more functional flows that match the user interface file. A recommendation identifying the one or more matching functional flows as candidates for testing may be generated. Related systems and computer program products are also provided.

Abstract: Devices, systems, and methods for providing software to aircraft using a distributed ledger are disclosed. A software delivery system includes aircraft having an engine control system configured to verify and install software utilized by components of the aircraft, an electronic distribution system coupled to the aircraft, an edge manager coupled to the electronic distribution system, and computing devices acting as nodes in a distributed ledger base maintaining a distributed ledger. The electronic distribution system verifies a request for software, requests software, and initiates an installation protocol with the engine control system. The edge manager maintains software. The distributed ledger base is coupled to the aircraft, the electronic distribution system, and the edge manager.

Abstract: Embodiments disclosed are directed to a system that performs steps to transmit, to a client device, a host application for storage on a browser of the client device. The host application is used to facilitate loading of a micro-frontend application onto the browser at runtime of the host application, for integration with and use in conjunction with the host application. The system also receives, from the host application, a request to load the micro-frontend application onto the browser. Based on receiving the request, a manifest file is accessed indicating a version of the micro-frontend application to be loaded onto the browser. The micro-frontend application is retrieved based on the version indicated in the manifest file and transmitted to the host application for loading onto the browser.

Abstract: A method for automatically providing library package recommendations is disclosed. The method includes aggregating, via a communication interface, sets of source code from a repository, each of the sets of source code including a code snippet that relates to a portion of source code for a software program; initiating, by using a model, code context analysis of the code snippet to identify an alternative library package and a replaceable library package; performing, by using the model, implemented library analysis of the code snippet to determine a complementary library package; generating recommendations for the code snippet, the recommendations including information that relates to the complementary library package, the alternative library package, and the replaceable library package; and associating, in the repository, the generated recommendations with the code snippet.

Abstract: A method, system, or apparatus to debug software that is reorganized in memory is presented. An interactive debugging session is established with an executable code component corresponding to a packed binary file includes machine code that corresponds to blocks of original source code. A randomly reorganized layout of the machine code is generated in memory based on a transformation defined in a function randomization library. An in-memory object file is created by using a debug data component corresponding to the packed binary file. The debug data component includes symbol table information to debug the blocks of the original source code generated prior to the randomly reorganized layout. The symbol table information is updated based on the randomly reorganized layout of the machine code, and the debugger program is instructed to load the in-memory object file with the updated symbol information to debug the blocks of the original source code.

Abstract: In an embodiment, a data processing method comprises accessing a computer memory comprising a shareable cell-based computation notebook comprising: notebook metadata specifying a kernel for execution, and a computational cell comprising cell metadata, a source code reference, and an output reference, wherein the cell metadata identifies a particular version of source code of a function that defines an input dataset, a transformation, and one or more variables that are to be associated with output data that is to be generated as a result of executing the particular version of the source code; updating the source code reference to identify a first storage location that is to contain the particular version of the source code of the function; and updating the output reference to identify a second storage location that is to contain the output data that is to be generated as a result of executing the particular version of the source code identified in the cell metadata using the kernel specified in the notebook me

Abstract: A system for providing features at launch to an application. The system may execute a user-space launcher application. To execute the launcher application, the computing system may: wrap a process creation function with a process creation wrapper function, preload a function library comprising the process creation function, launch an application specified to the launcher application, intercept a call to the process creation function of the launched application with the process creation wrapper function, create a process on behalf of the launched application using the process creation function, and provide a feature at launch to the process of the launched application based on a parameter specified to the launcher.

Abstract: An interactive library system comprised of a Processing Engine phase, a Presentation Engine phase, a Content Management phase, and a Content Editing/Reading pages phase, which work together in real time. The system, by providing a set of structures within an overarching database, provides the flexibility to build any data set (library) within an overarching data schema. The system proactively presents information to a user in real time as the system constantly scans to finds library matches to user text, saving the user from having to actively search and confirm information and greatly enhancing data handling capability. Further, each user has the flexibility to create a library most relevant to a user's particular position and needs, and select information for retrieval most useful to them.

Abstract: A foundation framework resource of a first service function is loaded in a software application. A service request for starting the first service function in the software application is received. A page resource required by the first service function is loaded. The first service function is implemented based on the foundation framework resource of the first service function and the page resource.

Abstract: The embodiments of the present disclosure relate to information processing technology and provide a method for data compilation capable of reducing data compilation time. The method can include traversing files to be compiled in a project to be complied to obtain all initial class files; importing all the initial class files into a specified number of intermediate class files, the specified number being smaller than a total number of the initial class files; and compiling the intermediate class files to obtain target data.

Abstract: Techniques performed by a data processing system for automatically managing feature flags in source code include automatically analyzing source code associated with a software program to identify a set of first feature flags; obtaining, from a configuration server associated with the software program, dynamic configuration information associated with a second set of feature flags, wherein the dynamic configuration information includes configuration information for configuring one or more operating parameters of the software program without redeploying the software program; correlating the set of first feature flags included in the source code with the set of second feature flags to match the dynamic configuration information with the feature flags of the set of first feature flags; generating feature flag reporting information; providing the feature flag reporting information to at least one consuming application; and causing the at least one consuming application to perform at least one action associated wit

Abstract: Example object storage systems, bookkeeping engines, and methods provide quota enforcement for control entities, such as accounts, users, and buckets. An object data store is configured to enable control entities to access data objects associated with each control entity. Quota thresholds associated with requesting control entities are determined. Object usage values corresponding to the quota thresholds are determined. Data object access requests are denied responsive to object usage values exceeding quota thresholds for the requesting control entities.

Abstract: A system, apparatuses and methods are provided to download and process data and other content streamed over a wide area network using one or more dynamically fetched, material specific, data handlers (e.g., download assistants). A download assistant fetches a data stream from a remote location and processes the streamed data iteratively using buffers and multi-threaded processes through the decoder (e.g., codec), allowing source material-specific processing of the data as it is streamed from one or more download sources as well as content-indifferent and platform-indifferent decoding. To minimize versioning issues, payload construction for secure delivery is simplified to packing and encrypting a directory tree containing any number of files or other digital media into an archive and, when needed, dividing a payload into multiple files or archives with a descriptor that lists the archives.

Abstract: A foundation framework resource of a first service function is loaded in a software application. A service request for starting the first service function in the software application is received. A page resource required by the first service function is loaded. The first service function is implemented based on the foundation framework resource of the first service function and the page resource.

Abstract: The present disclosure relates to a method for installing a program on an embedded system of process automation technology. The method includes steps of reading a first program code into a data memory of the embedded system via a data interface of the embedded system and reading additional information specific to the first program code into the data memory of the embedded system via the data interface. The method additionally includes a step of translating the first program code by means of the embedded system into a second program code executable by the embedded system. The program-specific additional information is used for the translation so that the second program code can be executed more efficiently by the embedded system than a third program code translated from the first program code without the program-specific additional information.

Abstract: A method and apparatus are disclosed for enhancing operable functionality of input source code files from a software program by identifying a first code snippet and a first library function which have similar execution flow similarity measures by evaluating a first contiguous sequence of n items extracted from the first code snippet against a second contiguous sequence of n items extracted from the first library function using an Ngram threshold that is calculated for the first library function and one or more literals from the first code snippet so that the developer is presented with a library function recommendation which includes the first code snippet, the first library function, and instructions for replacing the first code snippet with the first library function.

Abstract: Disclosed are systems, methods, and non-transitory computer-readable storage media for managing projects in a content management system. For example, the content management system can create a project folder (e.g., shared folder) for managing data associated with a project. The project folder can be shared with content management system users (e.g., project members) who are contributors to the project. The content management system can store project data (e.g., content items, communications, comments, tasks, etc.) related to the project in the project folder. When the project folder is selected by a user, the content management system can generate a project folder view that presents the project data associated with the project folder and/or project in a convenient and easy to access graphical user interface. The content management system can aggregate project data from various content items associated with the project and present the project data in a single graphical user interface.

Abstract: A computer-implemented method characterizes and controls performance of a set of device nodes in a distributed heterogeneous computing and control system. The device nodes are in physically distinct locations, in communication with one another over a network. One or more of the device nodes require different application programming code due to differences in hardware configuration or software configuration. The method includes configuring, by a design computer, for introduction into each distinct one of the device nodes, a corresponding communication facility and a corresponding dashboard instance. After introduction of the communication facility and dashboard instance into each device node, the design computer includes a communication facility in communication with the corresponding communication facility of each device node.

Abstract: Systems and methods provide determination of a first user interface application associated with a first version of user interface code libraries, and reception of a request to analyze compatibility of the first user interface application with a second version of user interface code libraries. In response to the request the second version of user interface code libraries is retrieved, it is determined whether one or more user interface code libraries referenced in the first user interface application are not in the second version of user interface code libraries, and, if it is determined that one or more user interface code libraries referenced in the first user interface application are not in the second version of user interface code libraries, a message is presented indicating that one or more user interface code libraries referenced in the first user interface application are not in the second version of user interface code libraries.

Abstract: Provided are computer program product, system, and method for loading dependency library files from a shared library repository in an application runtime environment. A determination is made of a dependency tree of dependency library files for an application to load into an application runtime environment. A determination is made as to whether a shared library repository includes all the dependency library files in the dependency tree. The shared library repository is updated to include any dependency library files not in the dependency tree of the application. Access is provided to the dependency library files in the shared library repository in the dependency tree in the application runtime environment. The application is started in the application runtime environment in response to providing access to the dependency library files in the application runtime environment.

Abstract: A method of providing a task assistant to provide an interface to an application, the method comprising activating the task assistant, the activation having an associated visual display. The method in one embodiment includes receiving input from a user through multimodal input including a plurality of speech input, typing input, and touch input, interpreting the input, and providing a formatted query to the application, receiving data from the application in response to the query, and providing a response to the user through multimodal output including a plurality of: speech output, text output, non-speech audio output, haptic output, and visual non-text output, wherein the task assistant has a plurality of active states, each of the active states having an associated visual display.

Abstract: In an embodiment, a data processing method comprises creating and storing a plurality of analytical notebooks in digital computer storage, wherein each of the analytical notebooks comprises notebook metadata that specifies a kernel for execution, and one or more computational cells, wherein each of the cells comprises cell metadata, a source code reference and an output reference; receiving, in association with a first cell among the one or more cells, first input specifying computer program source code of a function, wherein the function defines an input dataset, a transformation, and one or more variables associated with output data; storing the first cell, excluding the output data, using a first digital data storage system and updating the source code reference to identify the first data storage system; using the kernel specified in the notebook metadata, executing an executable version of the source code to result in generating the output data; storing the output data using a second digital data storage

Abstract: Systems and methods for providing technology that enhances memory protection between different portions of the user space memory of a particular computing process. An example method may comprise: creating a computing process comprising a first executable code and a second executable code; loading the first and second executable code into user space memory of the computing process, wherein the second executable code comprises driver code of a device; updating a first and second page table structures, wherein the first page table structure comprises mapping data for the first and second executable code and wherein the second page table structure comprises mapping data to access the device; providing, by the processor, an instruction enabling the computing process to switch to the second page table structure; and enabling the first executable code to execute using the first page table structure and the second executable code to execute using the second page table structure to access the device.

Abstract: A method and apparatus are disclosed for upgrading libraries in a source code program by evaluating libraries in the source code program for predetermined selection criteria specifying library performance limitations to identify at least a first library which does not meet the plurality of predetermined selection criteria and then identifying a first alternative library that is suitable for substitution for the first library so that the source code program may be automatically modified to replace the first library with the first alternative library, thereby generating a modified source code program having an upgraded library functionality.

Abstract: A compiler and linker include multiple addressing mode resolvers that generate code to resolve a plurality of function calls that use different addressing modes. A first addressing mode is defined where a first address for first data is specified as an offset from a base pointer. A second, relative addressing mode is defined where a second address for second data is specified as an offset from an address of an instruction that references the second data. The generated code assures correct operation when functions with different addressing modes are included in the computer program. The generated code preserves a base pointer when executing a function that uses relative addressing, when needed. The compiler inserts one or more relocation markers that trigger certain functions in the linker. A linker resolves the relocation markers inserted by the compiler, and generates code, when needed, that handles a mismatch between addressing modes.

Abstract: A compiler and linker include multiple addressing mode resolvers that generate code to resolve a plurality of function calls that use different addressing modes. A first addressing mode is defined where a first address for first data is specified as an offset from a base pointer. A second, relative addressing mode is defined where a second address for second data is specified as an offset from an address of an instruction that references the second data. The generated code assures correct operation when functions with different addressing modes are included in the computer program. The generated code preserves a base pointer when executing a function that uses relative addressing, when needed. The compiler inserts one or more relocation markers that trigger certain functions in the linker. A linker resolves the relocation markers inserted by the compiler, and generates code, when needed, that handles a mismatch between addressing modes.

Abstract: Predicting a Table of Contents (TOC) pointer value responsive to branching to a subroutine. A subroutine is called from a calling module executing on a processor. Based on calling the subroutine, a value of a pointer to a reference data structure, such as a TOC, is predicted. The predicting is performed prior to executing a sequence of one or more instructions in the subroutine to compute the value. The value that is predicted is used to access the reference data structure to obtain a variable value for a variable of the subroutine.

Abstract: A method and apparatus are disclosed for enhancing operable functionality of input source code files from a software program by identifying a first code snippet and a first library function which have similar execution flow similarity measures by evaluating a first contiguous sequence of n items extracted from the first code snippet against a second contiguous sequence of n items extracted from the first library function using an Ngram threshold that is calculated for the first library function and one or more literals from the first code snippet so that the developer is presented with a library function recommendation which includes the first code snippet, the first library function, and instructions for replacing the first code snippet with the first library function.

Abstract: A pre-initialized value of contents of a memory location is identified. A load value of contents loaded from the memory location by execution of a first instruction that loads from the memory location is also identified. A comparison is made between the load value and the pre-initialized value. Based on the comparison, a determination is made that the load value and the pre-initialized value are the same. In response to this determination, it is indicated that the first instruction contains an uninitialized memory reference.

Abstract: A bridge module is generated to bridge standard modules in a module system and non-module code in a non-module system. The bridge module includes explicit dependencies associated with a namespace, such as a dependency path corresponding to the non-module code. The bridge module exposes packages of the non-module code at least to the standard modules. Operations are performed on a code base that uses standard modules, bridge modules, and non-module code.

Abstract: Described systems and methods allow protecting a host computer system from malicious software, such as return-oriented programming (ROP) and jump-oriented programming (JOP) exploits. In some embodiments, a processor of the host system is endowed with two counters storing a count of branch instructions and a count of inter-branch instructions, respectively, occurring within a sequence of instructions. Exemplary counted branch instructions include indirect JMP, indirect CALL, and RET on x86 platforms, while inter-branch instructions consist of instructions executed between two consecutive counted branch instructions. The processor may be further configured to generate a processor event, such as an exception, when a value stored in a counter exceeds a predetermined threshold, and/or when a branch instruction redirects execution to a critical OS function. Such events may be used as triggers for launching a malware analysis to determine whether the host system is subject to a code reuse attack.

Abstract: A computer-implemented method and a correspondingly adapted computer program product or software application for connecting business objects in a software application (SA), wherein the software application comprises a connector (K), wherein the connector comprises a code identifying an abstract business object class (ABO1 to ABOn), the software application identifies the abstract business object class specified in the connector at runtime in a hierarchy of abstract business object classes, and the software application, at runtime, proceeding from the identified abstract business object class, identifies at least one concrete business object class (KBO1 to KBOn), directly or indirectly derived therefrom, and establishes a connection (V) in at least one instance (I1 to In) of the at least one identified concrete business object class, via which connection the software application accesses attributes and methods of the instance of the concrete business object class.

Abstract: A system, a method, and a computer program product for deploying objects are disclosed. A file containing a plurality of artifacts for deploying during runtime of an application is defined. At least one dependency for at least one artifact in the plurality of artifacts is determined based on the defined file. A database object for implementation during runtime of the application is created based on the determined dependency. At least one change to the database object during runtime of the application is implemented. The artifact is deployed during runtime of the application based on the implemented change to the database object.

Abstract: Content management includes populating a library with modular objects and metadata associated with the modular objects. In response to a query, the library can be searched based in part on the metadata. The query can relate to implementation of an industrial process. One or more modular objects in the library can be identified as satisfying the query. A result of the query can be output and the output can include the identified modular objects and the respective metadata associated with the identified modular objects. The metadata can be anything known about the object that might not be accessible at runtime control.

Abstract: A method to manage a global feature library is provided herein. The method provides a global feature library with a plurality of features defined therein. The global feature library includes a feature switch for each of the plurality of features. The feature switch is useable with an application code. The feature switch is linked to an application code. The feature switch includes a feature value that turns a feature associated with the feature switch on and off based on a global value rule. The global rule is transmitted to a client device capable of storing the feature value in-memory.

Abstract: Methods, apparatus, systems and articles of manufacture are disclosed to optimize sparse matrix execution. An example disclosed apparatus includes a context former to identify a matrix function call from a matrix function library, the matrix function call associated with a sparse matrix, a pattern matcher to identify an operational pattern associated with the matrix function call, and a code generator to associate a function data structure with the matrix function call exhibiting the operational pattern, the function data structure stored external to the matrix function library, and facilitate a runtime link between the function data structure and the matrix function call.

Abstract: A mechanism for providing class loading for a JAVA application is disclosed. A method of the invention includes retrieving, by a processing device, a JAVA class file. The method also includes identifying, by the processing device, a class dependency for the JAVA class file. The method also includes determining, by the processing device, a probability that the JAVA class file is to be loaded into a cache based on the identified class dependency. The method further includes loading, by the processing device, the JAVA class file into the cache based on the probability determined for the JAVA class file.

Abstract: A kernel-level security agent is described herein. The kernel-level security agent is configured to observe events, filter the observed events using configurable filters, route the filtered events to one or more event consumers, and utilize the one or more event consumers to take action based at least on one of the filtered events. In some implementations, the kernel-level security agent detects a first action associated with malicious code, gathers data about the malicious code, and in response to detecting subsequent action(s) of the malicious code, performs a preventative action. The kernel-level security agent may also deceive an adversary associated with malicious code. Further, the kernel-level security agent may utilize a model representing chains of execution activities and may take action based on those chains of execution activities.

Abstract: A system manages human machine interface (HMI) applications for industrial control and automation. Software instructions stored on a tangible, non-transitory media and executable by a processor receive data indicative of a manufacturing/process control system being monitored and display a user interface indicative of a status of the manufacturing/process control system being monitored wherein the status is based on the received data.

Abstract: Embodiments of the present invention address deficiencies of the art in respect to software configuration management and provide a method, system and apparatus for producing audited builds based on separate class dependency records. In one embodiment, a software configuration management tool can be provided which can include build-audit logic programmed to produce separate configuration records for each target object in a build. Each configuration record can include a direct dependency reference for a corresponding target object. Moreover, each configuration record can include version information for a corresponding target object. Finally, the software configuration management tool can include a versioned object base storing different versions of source files and derived objects built from the source files.

Abstract: Systems and methods for providing security to the Linux kernel are described. Wrappers are provided around the kernel, thereby reducing the amount of testing needed since the new security code will be introduced only into the wrappers. This also provides flexibility in various layers. The filters may be customized per se to suit various security needs. Overhead incurred due to this is very low.

Abstract: Embodiments of the present invention address deficiencies of the art in respect to code instrumentation and provide a method, system and computer program product for dynamic discovery of data segments within instrumented code. In an embodiment of the invention, a method for dynamic data segment discovery for instrumented code can be provided. The method can include statically instrumenting program code, recording potential data segments during the instrumentation of the program code, executing the instrumented program code, determining whether or not each of the recorded potential data segments can be resolved, and noting resolved ones of the recorded potential data segments.

Abstract: Embodiments relate to a global entry point and a local entry point for a callee function. An aspect includes executing, by a processor, a function call from a calling function to the callee function. Another aspect includes, based on the function call being a direct and external function call, entering the callee function at the global entry point and executing prologue code in the callee function that calculates and stores a table of contents (TOC) value for the callee function in a TOC register. Another aspect includes, based on the function call being a direct and local function call, entering the callee function at the local entry point, wherein entering the callee function at the local entry point skips the prologue code. Another aspect includes, based on the function call being an indirect function call, entering the callee function at the global entry point and executing the prologue code.

Abstract: Techniques for automatically identifying input files used to generate output files in a software build process are provided. In one embodiment, a computer system can execute one or more build commands for generating output files for a software product, where the software product is associated with a build tree comprising various input files. The computer system can further intercept system calls invoked during the execution of the one or more build commands and can collect information pertaining to at least a portion of the intercepted system calls. The computer system can then create a dependency graph based on the collected information, where the dependency graph identifies a subset of input files in the build tree that are actually used by the one or more build commands to generate the output files.

Abstract: A method, executed by one or more processors, for optimizing placement of a logic network, includes partitioning a logic network into a set of logic partitions, launching a set of placement optimization threads that correspond to the logic partitions, and allocating memory that is accessible to the placement optimization threads to provide a globally accessible placement memory for reserving placement locations on the integrated circuit. Each placement optimization thread may be configured to conduct the operations of determining a desired location for a logic element, reserving a set of potential locations for the logic element, determining a best location from the set of potential locations, and placing the logic element to the best location. Each placement optimization thread may also be configured to release each of the potential locations that are not the best location. A corresponding computer program product and computer system are also disclosed herein.

Abstract: A method, executed by one or more processors, for optimizing placement of a logic network, includes partitioning a logic network into a set of logic partitions, launching a set of placement optimization threads that correspond to the logic partitions, and allocating memory that is accessible to the placement optimization threads to provide a globally accessible placement memory for reserving placement locations on the integrated circuit. Each placement optimization thread may be configured to conduct the operations of determining a desired location for a logic element, reserving a set of potential locations for the logic element, determining a best location from the set of potential locations, and placing the logic element to the best location. Each placement optimization thread may also be configured to release each of the potential locations that are not the best location. A corresponding computer program product and computer system are also disclosed herein.

Abstract: A multi-level list detection engine. The multi-level list detection engine detects text obtained from a fixed format document that is formatted as a static multi-level list and creates a dynamic multi-level list object in a flow format document. The resulting dynamic multi-level list object automatically updates as the end user edits the multi-level list in the flow format document. The multi-level list detection engine identifies list elements in the fixed format text based on the presence of a list identifier. The list elements are grouped into lists based on the properties of each list element relative to other list elements. List elements are then assigned to a list level based on the relative properties of the list elements within a list. Finally, level list assignments are verified and corrected, the levels are merged, as necessary, and the lists are consistently formatted as appropriate to create a final well-formed dynamic multi-level list object.

Abstract: Content management includes populating a library with modular objects and metadata associated with the modular objects. In response to a query, the library can be searched based in part on the metadata. The query can relate to implementation of an industrial process. One or more modular objects in the library can be identified as satisfying the query. A result of the query can be output and the output can include the identified modular objects and the respective metadata associated with the identified modular objects. The metadata can be anything known about the object that might not be accessible at runtime control.

Abstract: A method, and a corresponding system, for dynamically updating software while the software is running by automatically dividing a patch into a plurality of micro-updates using compiler analysis. The method includes providing the patch which includes updates to several variable units of the software, including functions, type definitions, and data stores. Next, an interference graph of the patch is generated by creating a node corresponding to each variable unit of the patch and creating connected components by adding edges connecting variable units having an impact expression with a non-zero intersection. The patch is divided into the micro-updates, where each micro-update corresponds to a connected component. The micro-updates are then applied to the software when the variable units of the micro-update are at a safepoint, and at least two of the micro-updates are applied at different times while the software is running.