thr3ads.net - Xen devel - [Xen-devel] Problem about rombios initializing network card''s PnP option ROM [Sep 2006]

If this information is useful, please help other people find it:
Share via:
hua kang
2006-Sep-19 14:28 UTC
[Xen-devel] Problem about rombios initializing network card''s PnP option ROM

HI:
I try to let guest os to DHA(directly hardware acceess) physical network card,
and also want to let rombios (which is not DHA) to initialize networks
card''s pnp option Rom(the pnp option rom is DHA).
however , I find the init program(offset by 3 from 55aa header signature) within
option rom can not run properly ---- it cause stact underflow  . and when retf
form option rom ,system crash because stack corruption.

I think maybe rombios has faultiness or some other bug, I am very confused :(

Who can give me a hand , please telling me why rombios can not init my network
card''s pnp option rom ,

PS :
I trace the initialization by opening the debug 1 exception flag (
eflage.TF=1),and step by step run untill  find a instruction (add sp, 0xeh)
,which cause stack underflow!
I modify the trap function in vm86.c and insert a breakpoint in scan_rom
function in rombios.c

trap(int trapno, int errno, struct regs *regs)
{
    /* emulate device interrupts */
    if (trapno >= NR_EXCEPTION_HANDLER) {
        int irq = trapno - NR_EXCEPTION_HANDLER;
        if (irq < 8)
            interrupt(regs, irq + 8);
        else
            interrupt(regs, 0x70 + (irq - 8));
        return;
    }

    switch (trapno) {
    case 0:
              regs->eflags|=eflags.TF
              regs->eip++;
    case 1: /* Debug */
        if (regs->eflags & EFLAGS_VM) {
            /* emulate any 8086 instructions  */
            if (mode != VM86_REAL_TO_PROTECTED)
                panic("not in real-to-protected mode");
            emulate(regs);
            regs->eflags|=eflags.TF;
            return;
        }
        goto invalid;

    case 13: /* GPF */
        if (regs->eflags & EFLAGS_VM) {
            /* emulate any 8086 instructions  */
            if (mode == VM86_PROTECTED)
                panic("unexpected protected mode");
            emulate(regs);
            return;
        }
        goto invalid;

    default:
    invalid:
        printf("Trap (0x%x) while in %s mode\n",
            trapno, regs->eflags & EFLAGS_VM ? "real" :
"protected");
        if (trapno == 14)
            printf("Page fault address 0x%x\n", get_cr2());
        dump_regs(regs);
        halt();
    }
}














 		
---------------------------------
 Mp3疯狂搜-新歌热歌高速下   
--0-1312187016-1158676101=:74815
Content-Type: text/html; charset=gb2312
Content-Transfer-Encoding: 8bit

HI:<br>I try to let guest os to DHA(directly hardware acceess) physical
network card, and also want to let rombios (which is not DHA) to initialize
networks card''s pnp option Rom(the pnp option rom is
DHA).<br>however , I find the init program(offset by 3 from 55aa header
signature) within option rom can not run properly ---- it cause stact
underflow&nbsp; . and when retf form option rom ,system crash because stack
corruption.<br><br>I think maybe rombios has faultiness or some
other bug, I am very confused :(<br><br>Who can give me a hand ,
please telling me why rombios can not init my network card''s pnp option
rom ,<br><br>PS :<br>I trace the initialization by opening the
debug 1 exception flag ( eflage.TF=1),and step by step run untill&nbsp; find
a instruction (add sp, 0xeh) ,which cause stack underflow! <br>I modify
the trap function in vm86.c and insert a breakpoint in scan_rom function in
rombios.c<br><br>trap(int trapno, int errno, struct regs
 *regs)<br>{<br>&nbsp;&nbsp;&nbsp; /* emulate device
interrupts */<br>&nbsp;&nbsp;&nbsp; if (trapno &gt;=
NR_EXCEPTION_HANDLER)
{<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
int irq = trapno -
NR_EXCEPTION_HANDLER;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
if (irq &lt;
8)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
interrupt(regs, irq +
8);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
else<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
interrupt(regs, 0x70 + (irq -
8));<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
return;<br>&nbsp;&nbsp;&nbsp;
}<br><br>&nbsp;&nbsp;&nbsp; switch (trapno)
{<br>&nbsp;&nbsp;&nbsp; case
0:<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
<span style="color: rgb(255, 0,
0);">regs-&gt;eflags|=eflags.TF</span><br
style="color: rgb(255, 0, 0);"><span style="color: rgb(255,
0,
0);">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
 regs-&gt;eip++;</span><br>&nbsp;&nbsp;&nbsp; case
1: /* Debug
*/<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
if (regs-&gt;eflags &amp; EFLAGS_VM)
{<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
/* emulate any 8086 instructions&nbsp;
*/<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
if (mode !=
VM86_REAL_TO_PROTECTED)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
panic("not in real-to-protected
mode");<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
emulate(regs);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span
style="color: rgb(255, 0, 0);">
regs-&gt;eflags|=eflags.TF;</span><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
return;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
}<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
goto invalid;<br><br>&nbsp;&nbsp;&nbsp; case 13: /* GPF
 */<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
if (regs-&gt;eflags &amp; EFLAGS_VM)
{<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
/* emulate any 8086 instructions&nbsp;
*/<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
if (mode ==
VM86_PROTECTED)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
panic("unexpected protected
mode");<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
emulate(regs);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
return;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
}<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
goto invalid;<br><br>&nbsp;&nbsp;&nbsp;
default:<br>&nbsp;&nbsp;&nbsp;
invalid:<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
printf("Trap (0x%x) while in %s
mode\n",<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
trapno, regs-&gt;eflags &amp; EFLAGS_VM ? "real" :
 "protected");<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
if (trapno ==
14)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
printf("Page fault address 0x%x\n",
get_cr2());<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
dump_regs(regs);<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
halt();<br>&nbsp;&nbsp;&nbsp;
}<br>}<br><br><br><br><br><br><br><br><br><br><br><br><br><br><p>&#32;
		<hr size=1><a
href="http://music.yahoo.com.cn/?source=mail_mailbox_footer"
target=blank>
Mp3疯狂搜-新歌热歌高速下 
</a>
 
 

--0-1312187016-1158676101=:74815--


--===============0353685852=Content-Type: text/plain;
charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xensource.com
http://lists.xensource.com/xen-devel

--===============0353685852==--
Maybe Matching Threads

Search for more maybe matching threads
Xen devel - Sep 2006 - Problem about rombios initializing network card''s PnP option ROM

[Xen-devel] Problem about rombios initializing network card''s PnP option ROM

Maybe Matching Threads

Wisdom of the Ancients
