From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S264389AbTDWTWn (ORCPT ); Wed, 23 Apr 2003 15:22:43 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S264459AbTDWTWm (ORCPT ); Wed, 23 Apr 2003 15:22:42 -0400 Received: from chaos.analogic.com ([204.178.40.224]:29064 "EHLO chaos.analogic.com") by vger.kernel.org with ESMTP id S264274AbTDWTWQ (ORCPT ); Wed, 23 Apr 2003 15:22:16 -0400 Date: Wed, 23 Apr 2003 15:37:09 -0400 (EDT) From: "Richard B. Johnson" X-X-Sender: root@chaos Reply-To: root@chaos.analogic.com To: Andrew Kirilenko cc: linux-kernel@vger.kernel.org Subject: Re: Searching for string problems In-Reply-To: <200304232200.20028.icedank@gmx.net> Message-ID: References: <200304231958.43235.icedank@gmx.net> <200304232125.22270.icedank@gmx.net> <200304232200.20028.icedank@gmx.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org On Wed, 23 Apr 2003, Andrew Kirilenko wrote: > Hello! > > > > > > I've written something similar to this before - and it wont' work, so > > > > > I've reimplemented it. The problem is, that I don't know how to set > > > > > ES properly. I only know, that BIOS data (and code) is located in > > > > > 0xe000..0xf000 (real address). > > > > > > > > Yeah. So. I set ES and DS to be exactly where CS is. This means that > > > > if your &!)(^$&_ code executes it will work. So, instead of trying > > > > it, you just blindly ignore it and state that it won't work. > > > > > > > > Bullshit. I do this for a living and I gave you some valuable time > > > > which you rejected out-of-hand. Have fun. > > > > > > Of course, I've tried your code as well - the same result! Sorry, if you > > > haven't understand me. > > > > > > The problem is, that I don't know where this BIOS code is relative to > > > current code segment (CS). I only know (hope), that it should be in > > > 0x0:0xe000...0x0:0xf000. I have tried to set ES to 0 (xor %ax, %ax; mov > > > %ax, %es) - no luck as well. BTW, `strings /dev/mem | grep "REQUESTED > > > STRING"` founds it perfectly... > > > > > > Best regards, > > > Andrew. > > > - > > > > The bios is in segment 0xf000. You set ES to that area. ES:DI will > > start at 0 if bx=0 in the code shown. The BIOS is only 64k. > > This means that where bx is being incremented (it should be incw, not > > incb). It would generate an assembly error with incb which is why > > I knew you didn't even try it. -- you just jnz back to 1b, without > > any additional test. > > 1. How to set ES to this area? "movw $0xf000, %ax ; movw %ax, %es" will be > enough? Yes. > 2. Is the are really starts from 0xf000? Or 0xe000? The stuff used to boot, usually the relocated and shadowed BIOS ROM, always exists at absolute address 0x000f0000. Since a 'segment' is a 16-byte thing, the appropriate segment is 0xf000. The code must be there because the 'reset-vector' is (must be) 16 bytes from the end of this segment. That's the code that first gets control during the startup sequence. The BIOS setup menus and other stuff is (typically) put down at 0xe000. However many new BIOS uncompress some stuff from NVRAM and put it anywhere they want because they 'own' all the RAM in the system until an attempted boot. > 3. I'm smart enough to correct "incb %bx" to "incw %bx" ;) > > Best regards, > Andrew. If you use the string search primative I show, it will work. Cheers, Dick Johnson Penguin : Linux version 2.4.20 on an i686 machine (797.90 BogoMips). Why is the government concerned about the lunatic fringe? Think about it.