Changeset 1799 in vbox

Timestamp:

Mar 29, 2007 1:53:50 PM (18 years ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

19979

Message:

Refuse to patch a handler whose idt cs selector isn't wide open.

File:

• trunk/src/VBox/VMM/PATM/CSAM.cpp (modified) (2 diffs)

trunk/src/VBox/VMM/PATM/CSAM.cpp

@@ -2243 +2243 @@
             PCSAMPAGE pPage = NULL;
             X86EFLAGS fakeflags;
+            SELMSELINFO selInfo;
 
             /* we're not in v86 mode here */
@@ -2249 +2250 @@
             pHandler = (pGuestIdte->Gen.u16OffsetHigh << 16) | pGuestIdte->Gen.u16OffsetLow;
             pHandler = SELMToFlat(pVM, fakeflags, pGuestIdte->Gen.u16SegSel, 0, pHandler);
+
+            rc = SELMR3GetSelectorInfo(pVM, pGuestIdte->Gen.u16SegSel, &selInfo);
+            if (    VBOX_FAILURE(rc)
+                ||  selInfo.GCPtrBase != 0
+                ||  selInfo.cbLimit != ~0U
+               )
+            {
+                /* Refuse to patch a handler whose idt cs selector isn't wide open. */
+                Log(("CSAMCheckGates: check gate %d failed due to rc %Vrc GCPtrBase=%VGv limit=%x\n", rc, selInfo.GCPtrBase, selInfo.cbLimit));
+                continue;
+            }
+            
 
             if (pGuestIdte->Gen.u5Type2 == VBOX_IDTE_TYPE2_TRAP_32)