-
-
[求助]0F34的问题
-
发表于: 2009-1-15 22:22
-
1. 机器码0F34进入了ring0级，是不是只能用winice才能跟进去？
2. ring0和ring3都听说过了，那ring2是什么？
3. 好像也有ring4吧，那是什么？还是本来就没有？
谢谢。
2. ring0和ring3都听说过了，那ring2是什么？
3. 好像也有ring4吧，那是什么？还是本来就没有？
谢谢。
|
|
|---|---|
|
|
|
|
|
3Q！
刚百度了一下…… ring0-3，我又犯傻了……3-0+1=4，有4层…… 但是ring1和ring2我还是不知道有什么用处……  谁知道呢？
|
|
|
|
|
|
思路为什么要卡在windows上呢？我想知道ring1和ring2的用处……为将来保留？？？
8086好复杂啊…… SS0:ESP0---SS3:ESP3到底是怎么回事？？
|
|
|
|
|
|
|
|
|
intel自己说0F34怪清楚的……
Executes a fast call to a level 0 system procedure or routine. SYSENTER is a companion instruction to SYSEXIT. The instruction is optimized to provide the maximum performance for system calls from user code running at privilege level 3 to operating system or executive procedures running at privilege level 0. Prior to executing the SYSENTER instruction, software must specify the privilege level 0 code segment and code entry point, and the privilege level 0 stack segment and stack pointer by writing values to the following MSRs: • IA32_SYSENTER_CS — Contains a 32-bit value, of which the lower 16 bits are the segment selector for the privilege level 0 code segment. This value is also used to compute the segment selector of the privilege level 0 stack segment. • IA32_SYSENTER_EIP — Contains the 32-bit offset into the privilege level 0 code segment to the first instruction of the selected operating procedure or routine. • IA32_SYSENTER_ESP — Contains the 32-bit stack pointer for the privilege level 0 stack. These MSRs can be read from and written to using RDMSR/WRMSR. Register addresses are listed in Table 4-6. The addresses are defined to remain fixed for future Intel 64 and IA-32 processors. 但是3卷里搜索只见到ring0，ring3和ring>0这三个字眼……………………………… access to the I/O address space is restricted to privilege levels 0 and 1 ring1只是在某个角落提了一下…… ring2没找到………………………… 还有，ring0到底除了ice，有没有其他的东东能跟0F34了？？？ |
|
|
是这样啊……
谢谢…… 但是0F34谁能跟踪哩？？
|
|
|
|
|
|
|
