Index: /trunk/src/VBox/ValidationKit/bootsectors/Makefile.kmk
===================================================================
--- /trunk/src/VBox/ValidationKit/bootsectors/Makefile.kmk	(revision 59313)
+++ /trunk/src/VBox/ValidationKit/bootsectors/Makefile.kmk	(revision 59314)
@@ -126,4 +126,12 @@
 bootsector2-cpu-basic-1_TEMPLATE = VBoxBsTestImg
 bootsector2-cpu-basic-1_SOURCES = bootsector2-cpu-basic-1.asm
+
+MISCBINS += bootsector2-cpu-ac-loop
+bootsector2-cpu-ac-loop_TEMPLATE = VBoxBsTestImg
+bootsector2-cpu-ac-loop_SOURCES = bootsector2-cpu-ac-loop.asm
+
+MISCBINS += bootsector2-cpu-db-loop
+bootsector2-cpu-db-loop_TEMPLATE = VBoxBsTestImg
+bootsector2-cpu-db-loop_SOURCES = bootsector2-cpu-db-loop.asm
 
 MISCBINS += bootsector2-boot-registers-1
Index: /trunk/src/VBox/ValidationKit/bootsectors/bootsector2-cpu-ac-loop.asm
===================================================================
--- /trunk/src/VBox/ValidationKit/bootsectors/bootsector2-cpu-ac-loop.asm	(revision 59314)
+++ /trunk/src/VBox/ValidationKit/bootsectors/bootsector2-cpu-ac-loop.asm	(revision 59314)
@@ -0,0 +1,115 @@
+; $Id$
+;; @file
+; Bootsector test for debug exceptions.
+;
+; Recommended (but not necessary):
+;   VBoxManage setextradata bs-cpu-xcpt-2 VBoxInternal/Devices/VMMDev/0/Config/TestingEnabled  1
+;
+
+;
+; Copyright (C) 2007-2015 Oracle Corporation
+;
+; This file is part of VirtualBox Open Source Edition (OSE), as
+; available from http://www.virtualbox.org. This file is free software;
+; you can redistribute it and/or modify it under the terms of the GNU
+; General Public License (GPL) as published by the Free Software
+; Foundation, in version 2 as it comes in the "COPYING" file of the
+; VirtualBox OSE distribution. VirtualBox OSE is distributed in the
+; hope that it will be useful, but WITHOUT ANY WARRANTY of any kind.
+;
+; The contents of this file may alternatively be used under the terms
+; of the Common Development and Distribution License Version 1.0
+; (CDDL) only, as it comes in the "COPYING.CDDL" file of the
+; VirtualBox OSE distribution, in which case the provisions of the
+; CDDL are applicable instead of those of the GPL.
+;
+; You may elect to license modified versions of this file under the
+; terms and conditions of either the GPL or the CDDL or both.
+;
+
+
+;*******************************************************************************
+;*      Header Files                                                           *
+;*******************************************************************************
+%include "iprt/asmdefs.mac"
+%include "iprt/x86.mac"
+%include "VBox/VMMDevTesting.mac"
+
+
+;
+; Include and execute the init code.
+;
+        %define BS2_INIT_PE32
+        %define BS2_WITH_TRAPS
+        %define BS2_WITH_TRAPRECS
+        %define BS2_INC_PE32
+        %define BS2_INC_RM ; for SetCpuModeGlobals_rm
+        %include "bootsector2-common-init-code.mac"
+
+
+;
+; The main() function.
+;
+BEGINPROC main
+        BITS 32
+        ;
+        ; Test prologue.
+        ;
+        mov     ax, .s_szTstName
+        call    TestInit_p32
+        call    Bs2EnableA20_p32
+        cli                             ; raw-mode hack
+
+        ;
+        ; Execute the tests
+        ;
+        sub     esp, 20h
+
+        ; Get the address of the #AC IDT entry.
+        sidt    [esp]
+        mov     eax, [esp + 2]
+        add     eax, 8 * X86_XCPT_AC
+
+        ; Make it execute in ring-3.
+        mov     word [eax + 2], BS2_SEL_R3_CS32 ; u16Sel
+        or      byte [eax + 5], 3 << 5          ; u2Dpl = 3
+
+        ; Enable AC.
+        mov     eax, cr0
+        or      eax, X86_CR0_AM
+        mov     cr0, eax
+
+        ; Switch to ring-3
+        call    Bs2ToRing3_p32
+
+        ; Enable AC.
+        pushfd
+        or      dword [esp], X86_EFL_AC
+        popfd
+
+        ;; Test it. - won't work as the handle touches CR2, which traps in ring-3.
+        ;BS2_TRAP_INSTR X86_XCPT_AC, 0, mov dword [esp + 3], 0
+
+        ; Misalign the stack and use it.
+        or      esp, 3
+        push    esp                     ; this will loop forever on real intel hardware.
+        and     esp, ~3h
+
+        add     esp, 20h
+
+        ;
+        ; We're done.
+        ;
+        call    TestTerm_p32
+        ret
+
+.s_szTstName:
+        db      'tstCpuAcLoop', 0
+ENDPROC   main
+
+
+;
+; End sections and image.
+;
+%include "bootsector2-common-end.mac"
+
Index: /trunk/src/VBox/ValidationKit/bootsectors/bootsector2-cpu-db-loop.asm
===================================================================
--- /trunk/src/VBox/ValidationKit/bootsectors/bootsector2-cpu-db-loop.asm	(revision 59314)
+++ /trunk/src/VBox/ValidationKit/bootsectors/bootsector2-cpu-db-loop.asm	(revision 59314)
@@ -0,0 +1,151 @@
+; $Id$
+;; @file
+; Bootsector test for debug exception loop.
+;
+; Recommended (but not necessary):
+;   VBoxManage setextradata bs-cpu-db-loop VBoxInternal/Devices/VMMDev/0/Config/TestingEnabled  1
+;
+
+;
+; Copyright (C) 2007-2015 Oracle Corporation
+;
+; This file is part of VirtualBox Open Source Edition (OSE), as
+; available from http://www.virtualbox.org. This file is free software;
+; you can redistribute it and/or modify it under the terms of the GNU
+; General Public License (GPL) as published by the Free Software
+; Foundation, in version 2 as it comes in the "COPYING" file of the
+; VirtualBox OSE distribution. VirtualBox OSE is distributed in the
+; hope that it will be useful, but WITHOUT ANY WARRANTY of any kind.
+;
+; The contents of this file may alternatively be used under the terms
+; of the Common Development and Distribution License Version 1.0
+; (CDDL) only, as it comes in the "COPYING.CDDL" file of the
+; VirtualBox OSE distribution, in which case the provisions of the
+; CDDL are applicable instead of those of the GPL.
+;
+; You may elect to license modified versions of this file under the
+; terms and conditions of either the GPL or the CDDL or both.
+;
+
+
+;*******************************************************************************
+;*      Header Files                                                           *
+;*******************************************************************************
+%include "iprt/asmdefs.mac"
+%include "iprt/x86.mac"
+%include "VBox/VMMDevTesting.mac"
+
+
+;
+; Include and execute the init code.
+;
+        %define BS2_INIT_PE32
+        %define BS2_WITH_TRAPS
+        %define BS2_WITH_XCPT_DB_CLEARING_TF
+        %define BS2_INC_PE16
+        %define BS2_INC_PE32
+        %define BS2_INC_RM ; for SetCpuModeGlobals_rm
+        %include "bootsector2-common-init-code.mac"
+
+
+;
+; The main() function.
+;
+BEGINPROC main
+        BITS 32
+        ;
+        ; Test prologue.
+        ;
+        mov     ax, .s_szTstName
+        call    TestInit_p32
+        call    Bs2EnableA20_p32
+        cli                             ; raw-mode hack
+        sub     esp, 20h
+
+        call    Bs2Thunk_p32_p16
+        BITS 16
+
+        ;
+        ; We require a stack that can wrap around here.  The default stack
+        ; doesn't allow us to do this, so we'll configure a custom one
+        ; where the page tables usually are.
+        ;
+        mov     eax, [bs2Gdt + BS2_SEL_SS16]
+        mov     ebx, [bs2Gdt + BS2_SEL_SS16 + 4]
+
+        and     eax, 0xffff
+        or      eax, BS2_PXX_BASE << 16
+        and     ebx, 0x00ffff00
+        or      ebx, BS2_PXX_BASE & 0xff000000
+        or      ebx, (BS2_PXX_BASE & 0x00ff0000) >> 16
+        mov     [bs2GdtSpare0], eax
+        mov     [bs2GdtSpare0 + 4], ebx
+
+
+        ;
+        ; Switch the stack.
+        ;
+        mov     ax, ss
+        mov     es, ax                  ; saved ss
+        mov     edi, esp                ; saved esp
+
+        mov     ax, BS2_SEL_SPARE0
+        mov     ss, ax
+        mov     esp, 0xfff0
+
+
+        ;
+        ; Arm the breakpoint.
+        ;
+        and     dword [esp + 2], 0
+        sidt    [esp]
+        mov     eax, [esp + 2]
+        add     eax, 8
+        mov     dr0, eax
+        mov     eax, X86_DR7_RA1_MASK | X86_DR7_GE \
+                   | X86_DR7_L0 | X86_DR7_G0 | X86_DR7_RW(0, X86_DR7_RW_RW) | X86_DR7_LEN(0, X86_DR7_LEN_DWORD)
+        mov     dr7, eax
+
+        ;
+        ; Trigger a single step exception.
+        ;
+        pushf
+        or      word [xSP], X86_EFL_TF
+        popf
+        xchg    eax, ebx
+        xchg    edx, ecx                ; should get a #DB here.
+        xchg    eax, ebx
+        xchg    edx, ecx
+
+        ;
+        ; If we get thus far, we've failed.
+        ;
+        mov     ax, es                  ; restore ss
+        mov     ss, ax
+        mov     esp, edi                ; restore esp
+
+        call    Bs2Thunk_p16_p32
+        BITS 32
+
+        mov     eax, .s_szFailed
+        call    TestFailed_p32
+
+        ;
+        ; We're done.
+        ;
+        call    TestTerm_p32
+        add     esp, 20h
+        ret
+
+.s_szTstName:
+        db      'tstCpuDbLoop', 0
+.s_szFailed:
+        db      'no #DB loop detected',0
+ENDPROC   main
+
+
+;
+; End sections and image.
+;
+%include "bootsector2-common-end.mac"
+
