On: Hardening C/C++ Programs – Executable-Space Protec...

[MikeHolman]

You can do this with an out of process JIT. Basically the JIT process has the code mapped as read/write and maps it into the runtime process as read/execute. Then you can use OS capabilities to prevent the runtime process from creating its own executable pages (on Windows you can do this by enabling ACG).

[cwzwarich → MikeHolman]

An out-of-process JIT would be too slow for optimizations like inline caches.

[MikeHolman → cwzwarich]

I implemented an out-of-process JIT for Chakra (JavaScript), and we make heavy use of inline caches.

Why do you think inline caches would be an issue?

[cwzwarich → MikeHolman]

I was thinking of the latency of updating the caches. Presumedly you just batch the updates?