2009-12-30 20:39:47 +01:00
|
|
|
/*
|
|
|
|
* Emulation of privileged instructions
|
|
|
|
*
|
|
|
|
* Copyright 1995 Alexandre Julliard
|
|
|
|
* Copyright 2005 Ivan Leo Puoti
|
|
|
|
* Copyright 2005 Laurent Pinchart
|
2015-06-19 03:58:41 +02:00
|
|
|
* Copyright 2014-2015 Sebastian Lackner
|
2009-12-30 20:39:47 +01:00
|
|
|
*
|
|
|
|
* This library is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
|
|
* License as published by the Free Software Foundation; either
|
|
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This library is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
|
|
* Lesser General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
|
|
* License along with this library; if not, write to the Free Software
|
|
|
|
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
|
|
|
|
*/
|
|
|
|
|
|
|
|
#include "config.h"
|
|
|
|
#include "wine/port.h"
|
|
|
|
|
|
|
|
#include <stdarg.h>
|
|
|
|
|
|
|
|
#include "windef.h"
|
|
|
|
#include "winbase.h"
|
|
|
|
#include "winternl.h"
|
2015-06-19 03:58:41 +02:00
|
|
|
#define WIN32_NO_STATUS
|
|
|
|
#include "ddk/wdm.h"
|
2009-12-30 20:39:47 +01:00
|
|
|
#include "excpt.h"
|
|
|
|
#include "wine/debug.h"
|
|
|
|
#include "wine/exception.h"
|
|
|
|
|
2015-06-19 03:58:41 +02:00
|
|
|
#ifdef __i386__
|
|
|
|
|
2009-12-30 20:39:47 +01:00
|
|
|
WINE_DEFAULT_DEBUG_CHANNEL(int);
|
|
|
|
|
|
|
|
#include "pshpack1.h"
|
|
|
|
struct idtr
|
|
|
|
{
|
|
|
|
WORD limit;
|
|
|
|
BYTE *base;
|
|
|
|
};
|
|
|
|
#include "poppack.h"
|
|
|
|
|
|
|
|
static LDT_ENTRY idt[256];
|
|
|
|
|
|
|
|
static inline struct idtr get_idtr(void)
|
|
|
|
{
|
|
|
|
struct idtr ret;
|
|
|
|
#ifdef __GNUC__
|
|
|
|
__asm__( "sidtl %0" : "=m" (ret) );
|
|
|
|
#else
|
|
|
|
ret.base = (BYTE *)idt;
|
|
|
|
ret.limit = sizeof(idt) - 1;
|
|
|
|
#endif
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* store an operand into a register */
|
2014-11-10 07:14:48 +01:00
|
|
|
static void store_reg_word( CONTEXT *context, BYTE regmodrm, const BYTE *addr, int long_op )
|
2009-12-30 20:39:47 +01:00
|
|
|
{
|
|
|
|
switch((regmodrm >> 3) & 7)
|
|
|
|
{
|
|
|
|
case 0:
|
|
|
|
if (long_op) context->Eax = *(const DWORD *)addr;
|
|
|
|
else context->Eax = (context->Eax & 0xffff0000) | *(const WORD *)addr;
|
|
|
|
break;
|
|
|
|
case 1:
|
|
|
|
if (long_op) context->Ecx = *(const DWORD *)addr;
|
|
|
|
else context->Ecx = (context->Ecx & 0xffff0000) | *(const WORD *)addr;
|
|
|
|
break;
|
|
|
|
case 2:
|
|
|
|
if (long_op) context->Edx = *(const DWORD *)addr;
|
|
|
|
else context->Edx = (context->Edx & 0xffff0000) | *(const WORD *)addr;
|
|
|
|
break;
|
|
|
|
case 3:
|
|
|
|
if (long_op) context->Ebx = *(const DWORD *)addr;
|
|
|
|
else context->Ebx = (context->Ebx & 0xffff0000) | *(const WORD *)addr;
|
|
|
|
break;
|
|
|
|
case 4:
|
|
|
|
if (long_op) context->Esp = *(const DWORD *)addr;
|
|
|
|
else context->Esp = (context->Esp & 0xffff0000) | *(const WORD *)addr;
|
|
|
|
break;
|
|
|
|
case 5:
|
|
|
|
if (long_op) context->Ebp = *(const DWORD *)addr;
|
|
|
|
else context->Ebp = (context->Ebp & 0xffff0000) | *(const WORD *)addr;
|
|
|
|
break;
|
|
|
|
case 6:
|
|
|
|
if (long_op) context->Esi = *(const DWORD *)addr;
|
|
|
|
else context->Esi = (context->Esi & 0xffff0000) | *(const WORD *)addr;
|
|
|
|
break;
|
|
|
|
case 7:
|
|
|
|
if (long_op) context->Edi = *(const DWORD *)addr;
|
|
|
|
else context->Edi = (context->Edi & 0xffff0000) | *(const WORD *)addr;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2014-11-10 07:14:48 +01:00
|
|
|
/* store an operand into a byte register */
|
|
|
|
static void store_reg_byte( CONTEXT *context, BYTE regmodrm, const BYTE *addr )
|
|
|
|
{
|
|
|
|
switch((regmodrm >> 3) & 7)
|
|
|
|
{
|
|
|
|
case 0: context->Eax = (context->Eax & 0xffffff00) | *addr; break;
|
|
|
|
case 1: context->Ecx = (context->Ecx & 0xffffff00) | *addr; break;
|
|
|
|
case 2: context->Edx = (context->Edx & 0xffffff00) | *addr; break;
|
|
|
|
case 3: context->Ebx = (context->Ebx & 0xffffff00) | *addr; break;
|
|
|
|
case 4: context->Eax = (context->Eax & 0xffff00ff) | (*addr << 8); break;
|
|
|
|
case 5: context->Ecx = (context->Ecx & 0xffff00ff) | (*addr << 8); break;
|
|
|
|
case 6: context->Edx = (context->Edx & 0xffff00ff) | (*addr << 8); break;
|
|
|
|
case 7: context->Ebx = (context->Ebx & 0xffff00ff) | (*addr << 8); break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2009-12-30 20:39:47 +01:00
|
|
|
/***********************************************************************
|
|
|
|
* INSTR_GetOperandAddr
|
|
|
|
*
|
|
|
|
* Return the address of an instruction operand (from the mod/rm byte).
|
|
|
|
*/
|
2010-10-20 15:33:58 +02:00
|
|
|
static BYTE *INSTR_GetOperandAddr( CONTEXT *context, BYTE *instr,
|
2009-12-30 20:39:47 +01:00
|
|
|
int long_addr, int segprefix, int *len )
|
|
|
|
{
|
2011-01-20 01:03:03 +01:00
|
|
|
int mod, rm, base = 0, index = 0, ss = 0, off;
|
2009-12-30 20:39:47 +01:00
|
|
|
|
|
|
|
#define GET_VAL(val,type) \
|
|
|
|
{ *val = *(type *)instr; instr += sizeof(type); *len += sizeof(type); }
|
|
|
|
|
|
|
|
*len = 0;
|
|
|
|
GET_VAL( &mod, BYTE );
|
|
|
|
rm = mod & 7;
|
|
|
|
mod >>= 6;
|
|
|
|
|
|
|
|
if (mod == 3)
|
|
|
|
{
|
|
|
|
switch(rm)
|
|
|
|
{
|
|
|
|
case 0: return (BYTE *)&context->Eax;
|
|
|
|
case 1: return (BYTE *)&context->Ecx;
|
|
|
|
case 2: return (BYTE *)&context->Edx;
|
|
|
|
case 3: return (BYTE *)&context->Ebx;
|
|
|
|
case 4: return (BYTE *)&context->Esp;
|
|
|
|
case 5: return (BYTE *)&context->Ebp;
|
|
|
|
case 6: return (BYTE *)&context->Esi;
|
|
|
|
case 7: return (BYTE *)&context->Edi;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if (long_addr)
|
|
|
|
{
|
|
|
|
if (rm == 4)
|
|
|
|
{
|
|
|
|
BYTE sib;
|
|
|
|
GET_VAL( &sib, BYTE );
|
|
|
|
rm = sib & 7;
|
|
|
|
ss = sib >> 6;
|
2014-11-07 05:19:33 +01:00
|
|
|
switch((sib >> 3) & 7)
|
2009-12-30 20:39:47 +01:00
|
|
|
{
|
|
|
|
case 0: index = context->Eax; break;
|
|
|
|
case 1: index = context->Ecx; break;
|
|
|
|
case 2: index = context->Edx; break;
|
|
|
|
case 3: index = context->Ebx; break;
|
|
|
|
case 4: index = 0; break;
|
|
|
|
case 5: index = context->Ebp; break;
|
|
|
|
case 6: index = context->Esi; break;
|
|
|
|
case 7: index = context->Edi; break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
switch(rm)
|
|
|
|
{
|
2011-01-20 01:03:03 +01:00
|
|
|
case 0: base = context->Eax; break;
|
|
|
|
case 1: base = context->Ecx; break;
|
|
|
|
case 2: base = context->Edx; break;
|
|
|
|
case 3: base = context->Ebx; break;
|
|
|
|
case 4: base = context->Esp; break;
|
|
|
|
case 5: base = context->Ebp; break;
|
|
|
|
case 6: base = context->Esi; break;
|
|
|
|
case 7: base = context->Edi; break;
|
2009-12-30 20:39:47 +01:00
|
|
|
}
|
|
|
|
switch (mod)
|
|
|
|
{
|
|
|
|
case 0:
|
|
|
|
if (rm == 5) /* special case: ds:(disp32) */
|
|
|
|
{
|
|
|
|
GET_VAL( &base, DWORD );
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
|
|
|
|
case 1: /* 8-bit disp */
|
|
|
|
GET_VAL( &off, BYTE );
|
|
|
|
base += (signed char)off;
|
|
|
|
break;
|
|
|
|
|
|
|
|
case 2: /* 32-bit disp */
|
|
|
|
GET_VAL( &off, DWORD );
|
|
|
|
base += (signed long)off;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
else /* short address */
|
|
|
|
{
|
|
|
|
switch(rm)
|
|
|
|
{
|
|
|
|
case 0: /* ds:(bx,si) */
|
|
|
|
base = LOWORD(context->Ebx) + LOWORD(context->Esi);
|
|
|
|
break;
|
|
|
|
case 1: /* ds:(bx,di) */
|
|
|
|
base = LOWORD(context->Ebx) + LOWORD(context->Edi);
|
|
|
|
break;
|
|
|
|
case 2: /* ss:(bp,si) */
|
|
|
|
base = LOWORD(context->Ebp) + LOWORD(context->Esi);
|
|
|
|
break;
|
|
|
|
case 3: /* ss:(bp,di) */
|
|
|
|
base = LOWORD(context->Ebp) + LOWORD(context->Edi);
|
|
|
|
break;
|
|
|
|
case 4: /* ds:(si) */
|
|
|
|
base = LOWORD(context->Esi);
|
|
|
|
break;
|
|
|
|
case 5: /* ds:(di) */
|
|
|
|
base = LOWORD(context->Edi);
|
|
|
|
break;
|
|
|
|
case 6: /* ss:(bp) */
|
|
|
|
base = LOWORD(context->Ebp);
|
|
|
|
break;
|
|
|
|
case 7: /* ds:(bx) */
|
|
|
|
base = LOWORD(context->Ebx);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
|
|
|
|
switch(mod)
|
|
|
|
{
|
|
|
|
case 0:
|
|
|
|
if (rm == 6) /* special case: ds:(disp16) */
|
|
|
|
{
|
|
|
|
GET_VAL( &base, WORD );
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
|
|
|
|
case 1: /* 8-bit disp */
|
|
|
|
GET_VAL( &off, BYTE );
|
|
|
|
base += (signed char)off;
|
|
|
|
break;
|
|
|
|
|
|
|
|
case 2: /* 16-bit disp */
|
|
|
|
GET_VAL( &off, WORD );
|
|
|
|
base += (signed short)off;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
base &= 0xffff;
|
|
|
|
}
|
|
|
|
/* FIXME: we assume that all segments have a base of 0 */
|
|
|
|
return (BYTE *)(base + (index << ss));
|
|
|
|
#undef GET_VAL
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/***********************************************************************
|
|
|
|
* emulate_instruction
|
|
|
|
*
|
|
|
|
* Emulate a privileged instruction.
|
|
|
|
* Returns exception continuation status.
|
|
|
|
*/
|
2010-10-20 15:33:58 +02:00
|
|
|
static DWORD emulate_instruction( EXCEPTION_RECORD *rec, CONTEXT *context )
|
2009-12-30 20:39:47 +01:00
|
|
|
{
|
2010-05-02 21:20:53 +02:00
|
|
|
int prefix, segprefix, prefixlen, len, long_op, long_addr;
|
2009-12-30 20:39:47 +01:00
|
|
|
BYTE *instr;
|
|
|
|
|
|
|
|
long_op = long_addr = 1;
|
|
|
|
instr = (BYTE *)context->Eip;
|
|
|
|
if (!instr) return ExceptionContinueSearch;
|
|
|
|
|
|
|
|
/* First handle any possible prefix */
|
|
|
|
|
|
|
|
segprefix = -1; /* no prefix */
|
|
|
|
prefix = 1;
|
|
|
|
prefixlen = 0;
|
|
|
|
while(prefix)
|
|
|
|
{
|
|
|
|
switch(*instr)
|
|
|
|
{
|
|
|
|
case 0x2e:
|
|
|
|
segprefix = context->SegCs;
|
|
|
|
break;
|
|
|
|
case 0x36:
|
|
|
|
segprefix = context->SegSs;
|
|
|
|
break;
|
|
|
|
case 0x3e:
|
|
|
|
segprefix = context->SegDs;
|
|
|
|
break;
|
|
|
|
case 0x26:
|
|
|
|
segprefix = context->SegEs;
|
|
|
|
break;
|
|
|
|
case 0x64:
|
|
|
|
segprefix = context->SegFs;
|
|
|
|
break;
|
|
|
|
case 0x65:
|
|
|
|
segprefix = context->SegGs;
|
|
|
|
break;
|
|
|
|
case 0x66:
|
|
|
|
long_op = !long_op; /* opcode size prefix */
|
|
|
|
break;
|
|
|
|
case 0x67:
|
|
|
|
long_addr = !long_addr; /* addr size prefix */
|
|
|
|
break;
|
|
|
|
case 0xf0: /* lock */
|
|
|
|
break;
|
|
|
|
case 0xf2: /* repne */
|
|
|
|
break;
|
|
|
|
case 0xf3: /* repe */
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
prefix = 0; /* no more prefixes */
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
if (prefix)
|
|
|
|
{
|
|
|
|
instr++;
|
|
|
|
prefixlen++;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Now look at the actual instruction */
|
|
|
|
|
|
|
|
switch(*instr)
|
|
|
|
{
|
|
|
|
case 0x0f: /* extended instruction */
|
|
|
|
switch(instr[1])
|
|
|
|
{
|
|
|
|
case 0x22: /* mov eax, crX */
|
|
|
|
switch (instr[2])
|
|
|
|
{
|
|
|
|
case 0xc0:
|
|
|
|
TRACE("mov eax,cr0 at 0x%08x, EAX=0x%08x\n", context->Eip,context->Eax );
|
|
|
|
context->Eip += prefixlen+3;
|
|
|
|
return ExceptionContinueExecution;
|
2015-01-02 12:44:47 +01:00
|
|
|
case 0xe0:
|
|
|
|
TRACE("mov eax,cr4 at 0x%08x, EAX=0x%08x\n", context->Eip,context->Eax );
|
|
|
|
context->Eip += prefixlen+3;
|
|
|
|
return ExceptionContinueExecution;
|
2009-12-30 20:39:47 +01:00
|
|
|
default:
|
|
|
|
break; /*fallthrough to bad instruction handling */
|
|
|
|
}
|
2015-01-02 12:44:47 +01:00
|
|
|
ERR("Unsupported EAX -> CR register, eip+2 is %02x\n", instr[2]);
|
2009-12-30 20:39:47 +01:00
|
|
|
break; /*fallthrough to bad instruction handling */
|
|
|
|
case 0x20: /* mov crX, eax */
|
|
|
|
switch (instr[2])
|
|
|
|
{
|
|
|
|
case 0xe0: /* mov cr4, eax */
|
|
|
|
/* CR4 register . See linux/arch/i386/mm/init.c, X86_CR4_ defs
|
|
|
|
* bit 0: VME Virtual Mode Exception ?
|
|
|
|
* bit 1: PVI Protected mode Virtual Interrupt
|
|
|
|
* bit 2: TSD Timestamp disable
|
|
|
|
* bit 3: DE Debugging extensions
|
|
|
|
* bit 4: PSE Page size extensions
|
|
|
|
* bit 5: PAE Physical address extension
|
|
|
|
* bit 6: MCE Machine check enable
|
|
|
|
* bit 7: PGE Enable global pages
|
|
|
|
* bit 8: PCE Enable performance counters at IPL3
|
|
|
|
*/
|
|
|
|
TRACE("mov cr4,eax at 0x%08x\n",context->Eip);
|
|
|
|
context->Eax = 0;
|
|
|
|
context->Eip += prefixlen+3;
|
|
|
|
return ExceptionContinueExecution;
|
|
|
|
case 0xc0: /* mov cr0, eax */
|
|
|
|
TRACE("mov cr0,eax at 0x%08x\n",context->Eip);
|
|
|
|
context->Eax = 0x10; /* FIXME: set more bits ? */
|
|
|
|
context->Eip += prefixlen+3;
|
|
|
|
return ExceptionContinueExecution;
|
|
|
|
default: /* fallthrough to illegal instruction */
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
/* fallthrough to illegal instruction */
|
|
|
|
break;
|
|
|
|
case 0x21: /* mov drX, eax */
|
|
|
|
switch (instr[2])
|
|
|
|
{
|
|
|
|
case 0xc8: /* mov dr1, eax */
|
|
|
|
TRACE("mov dr1,eax at 0x%08x\n",context->Eip);
|
|
|
|
context->Eax = context->Dr1;
|
|
|
|
context->Eip += prefixlen+3;
|
|
|
|
return ExceptionContinueExecution;
|
|
|
|
case 0xf8: /* mov dr7, eax */
|
|
|
|
TRACE("mov dr7,eax at 0x%08x\n",context->Eip);
|
|
|
|
context->Eax = 0x400;
|
|
|
|
context->Eip += prefixlen+3;
|
|
|
|
return ExceptionContinueExecution;
|
|
|
|
}
|
2014-09-07 20:22:33 +02:00
|
|
|
ERR("Unsupported DR register -> EAX, eip+2 is %02x\n", instr[2]);
|
2009-12-30 20:39:47 +01:00
|
|
|
/* fallthrough to illegal instruction */
|
|
|
|
break;
|
|
|
|
case 0x23: /* mov eax drX */
|
|
|
|
switch (instr[2])
|
|
|
|
{
|
2014-09-07 20:22:33 +02:00
|
|
|
case 0xc0: /* mov eax, dr0 */
|
|
|
|
context->Dr0 = context->Eax;
|
|
|
|
context->Eip += prefixlen+3;
|
|
|
|
return ExceptionContinueExecution;
|
2009-12-30 20:39:47 +01:00
|
|
|
case 0xc8: /* mov eax, dr1 */
|
|
|
|
context->Dr1 = context->Eax;
|
|
|
|
context->Eip += prefixlen+3;
|
|
|
|
return ExceptionContinueExecution;
|
2014-09-07 20:22:33 +02:00
|
|
|
case 0xd0: /* mov eax, dr2 */
|
|
|
|
context->Dr2 = context->Eax;
|
|
|
|
context->Eip += prefixlen+3;
|
|
|
|
return ExceptionContinueExecution;
|
|
|
|
case 0xd8: /* mov eax, dr3 */
|
|
|
|
context->Dr3 = context->Eax;
|
|
|
|
context->Eip += prefixlen+3;
|
|
|
|
return ExceptionContinueExecution;
|
|
|
|
case 0xf8: /* mov eax, dr7 */
|
|
|
|
context->Dr7 = context->Eax;
|
|
|
|
context->Eip += prefixlen+3;
|
|
|
|
return ExceptionContinueExecution;
|
2009-12-30 20:39:47 +01:00
|
|
|
}
|
2014-09-07 20:22:33 +02:00
|
|
|
ERR("Unsupported EAX -> DR register, eip+2 is %02x\n", instr[2]);
|
2009-12-30 20:39:47 +01:00
|
|
|
/* fallthrough to illegal instruction */
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
break; /* Unable to emulate it */
|
|
|
|
|
2014-11-10 07:14:48 +01:00
|
|
|
case 0x8a: /* mov Eb, Gb */
|
2009-12-30 20:39:47 +01:00
|
|
|
case 0x8b: /* mov Ev, Gv */
|
|
|
|
{
|
2014-11-10 07:14:48 +01:00
|
|
|
BYTE *data = INSTR_GetOperandAddr(context, instr + 1, long_addr,
|
2009-12-30 20:39:47 +01:00
|
|
|
segprefix, &len);
|
2014-11-10 07:14:48 +01:00
|
|
|
unsigned int data_size = (*instr == 0x8b) ? (long_op ? 4 : 2) : 1;
|
2009-12-30 20:39:47 +01:00
|
|
|
struct idtr idtr = get_idtr();
|
2014-11-10 07:14:48 +01:00
|
|
|
unsigned int offset = data - idtr.base;
|
2009-12-30 20:39:47 +01:00
|
|
|
|
2014-11-10 07:14:48 +01:00
|
|
|
if (offset <= idtr.limit + 1 - data_size)
|
2009-12-30 20:39:47 +01:00
|
|
|
{
|
|
|
|
idt[1].LimitLow = 0x100; /* FIXME */
|
|
|
|
idt[2].LimitLow = 0x11E; /* FIXME */
|
|
|
|
idt[3].LimitLow = 0x500; /* FIXME */
|
2014-11-10 07:14:48 +01:00
|
|
|
|
|
|
|
switch (*instr)
|
|
|
|
{
|
|
|
|
case 0x8a: store_reg_byte( context, instr[1], (BYTE *)idt + offset ); break;
|
|
|
|
case 0x8b: store_reg_word( context, instr[1], (BYTE *)idt + offset, long_op ); break;
|
|
|
|
}
|
2009-12-30 20:39:47 +01:00
|
|
|
context->Eip += prefixlen + len + 1;
|
|
|
|
return ExceptionContinueExecution;
|
|
|
|
}
|
|
|
|
break; /* Unable to emulate it */
|
|
|
|
}
|
|
|
|
|
|
|
|
case 0xfa: /* cli */
|
|
|
|
case 0xfb: /* sti */
|
|
|
|
context->Eip += prefixlen + 1;
|
|
|
|
return ExceptionContinueExecution;
|
|
|
|
}
|
|
|
|
return ExceptionContinueSearch; /* Unable to emulate it */
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/***********************************************************************
|
|
|
|
* vectored_handler
|
|
|
|
*
|
|
|
|
* Vectored exception handler used to emulate protected instructions
|
|
|
|
* from 32-bit code.
|
|
|
|
*/
|
|
|
|
LONG CALLBACK vectored_handler( EXCEPTION_POINTERS *ptrs )
|
|
|
|
{
|
|
|
|
EXCEPTION_RECORD *record = ptrs->ExceptionRecord;
|
2010-10-20 15:33:58 +02:00
|
|
|
CONTEXT *context = ptrs->ContextRecord;
|
2009-12-30 20:39:47 +01:00
|
|
|
|
|
|
|
if ((record->ExceptionCode == EXCEPTION_ACCESS_VIOLATION ||
|
|
|
|
record->ExceptionCode == EXCEPTION_PRIV_INSTRUCTION))
|
|
|
|
{
|
|
|
|
if (emulate_instruction( record, context ) == ExceptionContinueExecution)
|
|
|
|
return EXCEPTION_CONTINUE_EXECUTION;
|
|
|
|
}
|
|
|
|
return EXCEPTION_CONTINUE_SEARCH;
|
|
|
|
}
|
|
|
|
|
2015-06-19 03:58:41 +02:00
|
|
|
#elif defined(__x86_64__) /* __i386__ */
|
|
|
|
|
|
|
|
WINE_DEFAULT_DEBUG_CHANNEL(int);
|
|
|
|
|
|
|
|
#define REX_B 1
|
|
|
|
#define REX_X 2
|
|
|
|
#define REX_R 4
|
|
|
|
#define REX_W 8
|
|
|
|
|
|
|
|
#define REGMODRM_MOD( regmodrm, rex ) ((regmodrm) >> 6)
|
|
|
|
#define REGMODRM_REG( regmodrm, rex ) (((regmodrm) >> 3) & 7) | (((rex) & REX_R) ? 8 : 0)
|
|
|
|
#define REGMODRM_RM( regmodrm, rex ) (((regmodrm) & 7) | (((rex) & REX_B) ? 8 : 0))
|
|
|
|
|
|
|
|
#define SIB_SS( sib, rex ) ((sib) >> 6)
|
|
|
|
#define SIB_INDEX( sib, rex ) (((sib) >> 3) & 7) | (((rex) & REX_R) ? 8 : 0)
|
|
|
|
#define SIB_BASE( sib, rex ) (((sib) & 7) | (((rex) & REX_B) ? 8 : 0))
|
|
|
|
|
|
|
|
/* keep in sync with dlls/ntdll/thread.c:thread_init */
|
|
|
|
static const BYTE *wine_user_shared_data = (BYTE *)0x7ffe0000;
|
|
|
|
static const BYTE *user_shared_data = (BYTE *)0xfffff78000000000;
|
|
|
|
|
|
|
|
static inline DWORD64 *get_int_reg( CONTEXT *context, int index )
|
|
|
|
{
|
|
|
|
return &context->Rax + index; /* index should be in range 0 .. 15 */
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline int get_op_size( int long_op, int rex )
|
|
|
|
{
|
|
|
|
if (rex & REX_W)
|
|
|
|
return sizeof(DWORD64);
|
|
|
|
else if (long_op)
|
|
|
|
return sizeof(DWORD);
|
|
|
|
else
|
|
|
|
return sizeof(WORD);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* store an operand into a register */
|
|
|
|
static void store_reg_word( CONTEXT *context, BYTE regmodrm, const BYTE *addr, int long_op, int rex )
|
|
|
|
{
|
|
|
|
int index = REGMODRM_REG( regmodrm, rex );
|
|
|
|
BYTE *reg = (BYTE *)get_int_reg( context, index );
|
|
|
|
memcpy( reg, addr, get_op_size( long_op, rex ) );
|
|
|
|
}
|
|
|
|
|
|
|
|
/* store an operand into a byte register */
|
|
|
|
static void store_reg_byte( CONTEXT *context, BYTE regmodrm, const BYTE *addr, int rex )
|
|
|
|
{
|
|
|
|
int index = REGMODRM_REG( regmodrm, rex );
|
|
|
|
BYTE *reg = (BYTE *)get_int_reg( context, index );
|
|
|
|
if (!rex && index >= 4 && index < 8) reg -= (4 * sizeof(DWORD64) - 1); /* special case: ah, ch, dh, bh */
|
|
|
|
*reg = *addr;
|
|
|
|
}
|
|
|
|
|
|
|
|
/***********************************************************************
|
|
|
|
* INSTR_GetOperandAddr
|
|
|
|
*
|
|
|
|
* Return the address of an instruction operand (from the mod/rm byte).
|
|
|
|
*/
|
|
|
|
static BYTE *INSTR_GetOperandAddr( CONTEXT *context, BYTE *instr,
|
|
|
|
int long_addr, int rex, int segprefix, int *len )
|
|
|
|
{
|
|
|
|
int mod, rm, ss = 0, off, have_sib = 0;
|
|
|
|
DWORD64 base = 0, index = 0;
|
|
|
|
|
|
|
|
#define GET_VAL( val, type ) \
|
|
|
|
{ *val = *(type *)instr; instr += sizeof(type); *len += sizeof(type); }
|
|
|
|
|
|
|
|
*len = 0;
|
|
|
|
GET_VAL( &mod, BYTE );
|
|
|
|
rm = REGMODRM_RM( mod, rex );
|
|
|
|
mod = REGMODRM_MOD( mod, rex );
|
|
|
|
|
|
|
|
if (mod == 3)
|
|
|
|
return (BYTE *)get_int_reg( context, rm );
|
|
|
|
|
|
|
|
if ((rm & 7) == 4)
|
|
|
|
{
|
|
|
|
BYTE sib;
|
|
|
|
int id;
|
|
|
|
|
|
|
|
GET_VAL( &sib, BYTE );
|
|
|
|
rm = SIB_BASE( sib, rex );
|
|
|
|
id = SIB_INDEX( sib, rex );
|
|
|
|
ss = SIB_SS( sib, rex );
|
|
|
|
|
|
|
|
index = (id != 4) ? *get_int_reg( context, id ) : 0;
|
|
|
|
if (!long_addr) index &= 0xffffffff;
|
|
|
|
have_sib = 1;
|
|
|
|
}
|
|
|
|
|
|
|
|
base = *get_int_reg( context, rm );
|
|
|
|
if (!long_addr) base &= 0xffffffff;
|
|
|
|
|
|
|
|
switch (mod)
|
|
|
|
{
|
|
|
|
case 0:
|
|
|
|
if (rm == 5) /* special case */
|
|
|
|
{
|
|
|
|
base = have_sib ? 0 : context->Rip;
|
|
|
|
if (!long_addr) base &= 0xffffffff;
|
|
|
|
GET_VAL( &off, DWORD );
|
|
|
|
base += (signed long)off;
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
|
|
|
|
case 1: /* 8-bit disp */
|
|
|
|
GET_VAL( &off, BYTE );
|
|
|
|
base += (signed char)off;
|
|
|
|
break;
|
|
|
|
|
|
|
|
case 2: /* 32-bit disp */
|
|
|
|
GET_VAL( &off, DWORD );
|
|
|
|
base += (signed long)off;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* FIXME: we assume that all segments have a base of 0 */
|
|
|
|
return (BYTE *)(base + (index << ss));
|
|
|
|
#undef GET_VAL
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/***********************************************************************
|
|
|
|
* emulate_instruction
|
|
|
|
*
|
|
|
|
* Emulate a privileged instruction.
|
|
|
|
* Returns exception continuation status.
|
|
|
|
*/
|
|
|
|
static DWORD emulate_instruction( EXCEPTION_RECORD *rec, CONTEXT *context )
|
|
|
|
{
|
|
|
|
int prefix, segprefix, prefixlen, len, long_op, long_addr, rex;
|
|
|
|
BYTE *instr;
|
|
|
|
|
|
|
|
long_op = long_addr = 1;
|
|
|
|
instr = (BYTE *)context->Rip;
|
|
|
|
if (!instr) return ExceptionContinueSearch;
|
|
|
|
|
|
|
|
/* First handle any possible prefix */
|
|
|
|
|
|
|
|
segprefix = -1; /* no seg prefix */
|
|
|
|
rex = 0; /* no rex prefix */
|
|
|
|
prefix = 1;
|
|
|
|
prefixlen = 0;
|
|
|
|
while(prefix)
|
|
|
|
{
|
|
|
|
switch(*instr)
|
|
|
|
{
|
|
|
|
case 0x2e:
|
|
|
|
segprefix = context->SegCs;
|
|
|
|
break;
|
|
|
|
case 0x36:
|
|
|
|
segprefix = context->SegSs;
|
|
|
|
break;
|
|
|
|
case 0x3e:
|
|
|
|
segprefix = context->SegDs;
|
|
|
|
break;
|
|
|
|
case 0x26:
|
|
|
|
segprefix = context->SegEs;
|
|
|
|
break;
|
|
|
|
case 0x64:
|
|
|
|
segprefix = context->SegFs;
|
|
|
|
break;
|
|
|
|
case 0x65:
|
|
|
|
segprefix = context->SegGs;
|
|
|
|
break;
|
|
|
|
case 0x66:
|
|
|
|
long_op = !long_op; /* opcode size prefix */
|
|
|
|
break;
|
|
|
|
case 0x67:
|
|
|
|
long_addr = !long_addr; /* addr size prefix */
|
|
|
|
break;
|
|
|
|
case 0xf0: /* lock */
|
|
|
|
break;
|
|
|
|
case 0xf2: /* repne */
|
|
|
|
break;
|
|
|
|
case 0xf3: /* repe */
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
prefix = 0; /* no more prefixes */
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
if (*instr >= 0x40 && *instr < 0x50) /* rex */
|
|
|
|
{
|
|
|
|
rex = *instr;
|
|
|
|
prefix = TRUE;
|
|
|
|
}
|
|
|
|
if (prefix)
|
|
|
|
{
|
|
|
|
instr++;
|
|
|
|
prefixlen++;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Now look at the actual instruction */
|
|
|
|
|
|
|
|
switch(*instr)
|
|
|
|
{
|
2015-06-19 04:07:58 +02:00
|
|
|
case 0x0f: /* extended instruction */
|
|
|
|
switch(instr[1])
|
|
|
|
{
|
|
|
|
case 0xb6: /* movzx Eb, Gv */
|
|
|
|
case 0xb7: /* movzx Ew, Gv */
|
|
|
|
{
|
|
|
|
BYTE *data = INSTR_GetOperandAddr( context, instr + 2, long_addr,
|
|
|
|
rex, segprefix, &len );
|
|
|
|
unsigned int data_size = (instr[1] == 0xb7) ? 2 : 1;
|
2015-06-24 01:54:40 +02:00
|
|
|
SIZE_T offset = data - user_shared_data;
|
2015-06-19 04:07:58 +02:00
|
|
|
|
|
|
|
if (offset <= sizeof(KSHARED_USER_DATA) - data_size)
|
|
|
|
{
|
|
|
|
ULONGLONG temp = 0;
|
|
|
|
memcpy( &temp, wine_user_shared_data + offset, data_size );
|
|
|
|
store_reg_word( context, instr[2], (BYTE *)&temp, long_op, rex );
|
|
|
|
context->Rip += prefixlen + len + 2;
|
|
|
|
return ExceptionContinueExecution;
|
|
|
|
}
|
|
|
|
break; /* Unable to emulate it */
|
|
|
|
}
|
|
|
|
}
|
|
|
|
break; /* Unable to emulate it */
|
|
|
|
|
2015-06-19 03:58:41 +02:00
|
|
|
case 0x8a: /* mov Eb, Gb */
|
|
|
|
case 0x8b: /* mov Ev, Gv */
|
|
|
|
{
|
|
|
|
BYTE *data = INSTR_GetOperandAddr( context, instr + 1, long_addr,
|
|
|
|
rex, segprefix, &len );
|
|
|
|
unsigned int data_size = (*instr == 0x8b) ? get_op_size( long_op, rex ) : 1;
|
2015-06-24 01:54:40 +02:00
|
|
|
SIZE_T offset = data - user_shared_data;
|
2015-06-19 03:58:41 +02:00
|
|
|
|
|
|
|
if (offset <= sizeof(KSHARED_USER_DATA) - data_size)
|
|
|
|
{
|
|
|
|
switch (*instr)
|
|
|
|
{
|
|
|
|
case 0x8a: store_reg_byte( context, instr[1], wine_user_shared_data + offset, rex ); break;
|
|
|
|
case 0x8b: store_reg_word( context, instr[1], wine_user_shared_data + offset, long_op, rex ); break;
|
|
|
|
}
|
|
|
|
context->Rip += prefixlen + len + 1;
|
|
|
|
return ExceptionContinueExecution;
|
|
|
|
}
|
|
|
|
break; /* Unable to emulate it */
|
|
|
|
}
|
2015-06-19 04:07:08 +02:00
|
|
|
|
|
|
|
case 0xa0: /* mov Ob, AL */
|
|
|
|
case 0xa1: /* mov Ovqp, rAX */
|
|
|
|
{
|
|
|
|
BYTE *data = (BYTE *)(long_addr ? *(DWORD64 *)(instr + 1) : *(DWORD *)(instr + 1));
|
|
|
|
unsigned int data_size = (*instr == 0xa1) ? get_op_size( long_op, rex ) : 1;
|
2015-06-24 01:54:40 +02:00
|
|
|
SIZE_T offset = data - user_shared_data;
|
2015-06-19 04:07:08 +02:00
|
|
|
len = long_addr ? sizeof(DWORD64) : sizeof(DWORD);
|
|
|
|
|
|
|
|
if (offset <= sizeof(KSHARED_USER_DATA) - data_size)
|
|
|
|
{
|
|
|
|
memcpy( &context->Rax, wine_user_shared_data + offset, data_size );
|
|
|
|
context->Rip += prefixlen + len + 1;
|
|
|
|
return ExceptionContinueExecution;
|
|
|
|
}
|
|
|
|
break; /* Unable to emulate it */
|
|
|
|
}
|
2015-06-19 03:58:41 +02:00
|
|
|
}
|
|
|
|
return ExceptionContinueSearch; /* Unable to emulate it */
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/***********************************************************************
|
|
|
|
* vectored_handler
|
|
|
|
*
|
|
|
|
* Vectored exception handler used to emulate protected instructions
|
|
|
|
* from 64-bit code.
|
|
|
|
*/
|
|
|
|
LONG CALLBACK vectored_handler( EXCEPTION_POINTERS *ptrs )
|
|
|
|
{
|
|
|
|
EXCEPTION_RECORD *record = ptrs->ExceptionRecord;
|
|
|
|
CONTEXT *context = ptrs->ContextRecord;
|
|
|
|
|
|
|
|
if (record->ExceptionCode == EXCEPTION_ACCESS_VIOLATION &&
|
|
|
|
record->ExceptionInformation[0] == EXCEPTION_READ_FAULT)
|
|
|
|
{
|
|
|
|
if (emulate_instruction( record, context ) == ExceptionContinueExecution)
|
|
|
|
{
|
|
|
|
TRACE( "next instruction rip=%lx\n", context->Rip );
|
|
|
|
TRACE( " rax=%016lx rbx=%016lx rcx=%016lx rdx=%016lx\n",
|
|
|
|
context->Rax, context->Rbx, context->Rcx, context->Rdx );
|
|
|
|
TRACE( " rsi=%016lx rdi=%016lx rbp=%016lx rsp=%016lx\n",
|
|
|
|
context->Rsi, context->Rdi, context->Rbp, context->Rsp );
|
|
|
|
TRACE( " r8=%016lx r9=%016lx r10=%016lx r11=%016lx\n",
|
|
|
|
context->R8, context->R9, context->R10, context->R11 );
|
|
|
|
TRACE( " r12=%016lx r13=%016lx r14=%016lx r15=%016lx\n",
|
|
|
|
context->R12, context->R13, context->R14, context->R15 );
|
|
|
|
|
|
|
|
return EXCEPTION_CONTINUE_EXECUTION;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return EXCEPTION_CONTINUE_SEARCH;
|
|
|
|
}
|
|
|
|
|
|
|
|
#endif /* __x86_64__ */
|