Ticket #3720 (new defect) — at Initial Version

Opened 10 years ago

Last modified 3 years ago

Allows overrun of data segment

Reported by: adrianmay Owned by:
Component: VMM Version: VirtualBox 2.0.4
Keywords: GP fault, GDT, segment overrun Cc:
Guest type: other Host type: Linux


Demo code at master branch tag "vboxbug". Make it with 'make' and use zed.img as a boot floppy. On a real (single processor) PC this program reports a GP fault when main.c attempts to write to *0xffffffff although the data segment (GDT in bootsect.asm) is only 0xC0000 long. On VBox, the program sails on regardless. (There's no TSS and only a ring 0 task in this program.) I got similar effects with other peoples' OS tutorials. Code segments crash when expected.

Note: See TracTickets for help on using tickets.
ContactPrivacy policyTerms of Use