Opened 15 years ago
Last modified 8 years ago
#3720 closed defect
Allows overrun of data segment — at Initial Version
Reported by: | Adrian | Owned by: | |
---|---|---|---|
Component: | VMM | Version: | VirtualBox 2.0.4 |
Keywords: | GP fault, GDT, segment overrun | Cc: | |
Guest type: | other | Host type: | Linux |
Description
Demo code at github.com/adrianmay/digilife master branch tag "vboxbug". Make it with 'make' and use zed.img as a boot floppy. On a real (single processor) PC this program reports a GP fault when main.c attempts to write to *0xffffffff although the data segment (GDT in bootsect.asm) is only 0xC0000 long. On VBox, the program sails on regardless. (There's no TSS and only a ring 0 task in this program.) I got similar effects with other peoples' OS tutorials. Code segments crash when expected.
Note:
See TracTickets
for help on using tickets.