Re: Re: Technical Reason for Virus affecting both Linux and Windows

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi...

I think it is also a nice URL --> 
http://www.ews.uiuc.edu/~cjiang/reference/vc311.htm

> As explained in this article "sysenter" machine instruction is
> sometimes fater that "int 0x80" exception instruction and allows to
> enter the machine to kernel mode more quickly, I am just wondering,
> how does the CPU gets the base address of system_call function in
> kernel (top / first function in kernel to get executed when system
> call is done) after the sysenter instruction. In int 0x80 mechanisum
> 0x80 is the entry index in IDT and in this entry we have the virtual
> address of system_call() function stored, so its not a problem when
> we invoke the system call throuh int 0x80 mechanism.

well, in sysenter, that system_call() address is set at SYSENTER_EIP_MSR 
:)

regards,

Mulyadi

--
Kernelnewbies: Help each other learn about the Linux kernel.
Archive:       http://mail.nl.linux.org/kernelnewbies/
FAQ:           http://kernelnewbies.org/faq/


[Index of Archives]     [Newbies FAQ]     [Linux Kernel Mentors]     [Linux Kernel Development]     [IETF Annouce]     [Git]     [Networking]     [Security]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux SCSI]     [Linux ACPI]
  Powered by Linux