Changeset 10382 in vbox for trunk/src

Timestamp:

Jul 8, 2008 6:00:58 PM (17 years ago)

Author:

vboxsync

Message:

Refuse huge (>= _4G) REP prefixed transfers.

File:

• trunk/src/VBox/VMM/VMMAll/IOMAllMMIO.cpp (modified) (4 diffs)

trunk/src/VBox/VMM/VMMAll/IOMAllMMIO.cpp

@@ -304 +304 @@
     if (pCpu->prefix & PREFIX_REP)
     {
+#ifndef IN_GC
+        if (    CPUMIsGuestIn64BitCode(pVM, pRegFrame)
+            &&  pRegFrame->rcx >= _4G)
+            return VINF_EM_RAW_EMULATE_INSTR;
+#endif
+
         cTransfers = pRegFrame->ecx;
         if (SELMGetCpuModeFromSelector(pVM, pRegFrame->eflags, pRegFrame->cs, &pRegFrame->csHid) == CPUMODE_16BIT)
@@ -545 +551 @@
     if (pCpu->prefix & PREFIX_REP)
     {
+#ifndef IN_GC
+        if (    CPUMIsGuestIn64BitCode(pVM, pRegFrame)
+            &&  pRegFrame->rcx >= _4G)
+            return VINF_EM_RAW_EMULATE_INSTR;
+#endif
+
         cTransfers = pRegFrame->ecx;
         if (SELMGetCpuModeFromSelector(pVM, pRegFrame->eflags, pRegFrame->cs, &pRegFrame->csHid) == CPUMODE_16BIT)
@@ -1321 +1333 @@
     if (uPrefix & PREFIX_REP)
     {
+#ifndef IN_GC
+        if (    CPUMIsGuestIn64BitCode(pVM, pRegFrame)
+            &&  pRegFrame->rcx >= _4G)
+            return VINF_EM_RAW_EMULATE_INSTR;
+#endif
         cTransfers = pRegFrame->ecx;
 
@@ -1477 +1494 @@
     if (uPrefix & PREFIX_REP)
     {
+#ifndef IN_GC
+        if (    CPUMIsGuestIn64BitCode(pVM, pRegFrame)
+            &&  pRegFrame->rcx >= _4G)
+            return VINF_EM_RAW_EMULATE_INSTR;
+#endif
         cTransfers = pRegFrame->ecx;
         if (SELMGetCpuModeFromSelector(pVM, pRegFrame->eflags, pRegFrame->cs, &pRegFrame->csHid) == CPUMODE_16BIT)