DOS ain't dead

the DOS code segment hunt, results/questions (Miscellaneous)

posted by ecm  , Düsseldorf, Germany, 14.12.2009, 23:30

> 2: DOSDATA:90h. There are 15 far pointers who seem to point to
> DOSCODE always. I could use that, the infortune is I cannot find reference
> data about them. They don't seem to appear in Ralf's list. Geoff probably
> knows better, are you listening Geoff ?

Look for SHARE.EXE hooks; they're listed in the Int21.52 (DOS data) description. These hooks are either addressed with fixed offsets or by finding the first SFT container (segment must be the DOS data segment). The latter's offset is 0CCh, and just in front of it are the SHARE.EXE hooks.

Installing SHARE.EXE is legitimate under MS-DOS 7.00 and might work with a specially written FAT32 SHARE.EXE under MS-DOS 7.10+. (Microsoft simply omitted SHARE.EXE from MS-DOS 7.10 and never provided a FAT32 version.) Therefore, all of these pointers could be hooked by SHARE.EXE pointing to its segment instead of the DOS code segment.

> 3: WRING! see update below : DOS CS is kept near the start of IO.SYS
> data area @ 0070:0003. This location is apparently properly updated by DOS
> each time it moves its code during initialisation. It works also in DOS 8
> (CS=FFFF)
>
> [update] Is was too good to be true. I had yet to check DOS 7.0/Win 95
> A... Ooops! Method 3 fails there...
>
> OK, that leaves us with method 2. I have not seen a configuration of
> 95/95B/98SE where the fifteen FAR pointers starting @offset (90h) in DOS
> data segment did not point to the DOS CODE. Please speak up, whoever finds
> otherwise!

I'd say you should try working with method 3; MS-DOS 7.00 probably stores the code segment somewhere around there as did earlier and later versions. Method 2 might not be reliable especially with MS-DOS 7.00 due to SHARE.EXE being provided by Microsoft there.

---
l

Complete thread:

• new HACKWRAP fix for MS-DOS7+, aka smashing the bug - Ninho, 11.12.2009, 00:17 (Miscellaneous)
  • new HACKWRAP fix for MS-DOS7+, aka smashing the bug - ecm, 11.12.2009, 15:02
    • new *FIXWRAP* for MS-DOS7+, aka smashing the bug - Ninho, 12.12.2009, 01:12
  • FIXWRAP technical thread. News - Ninho, 12.12.2009, 16:05
    • CM's questions, answered - Ninho, 12.12.2009, 18:22
      • CM's questions, answered - ecm, 12.12.2009, 22:40
        • CM's questions, answered - Ninho, 13.12.2009, 00:10
          • CM's questions, answered - ecm, 13.12.2009, 00:51
            • CM's questions, answered - Ninho, 13.12.2009, 10:32
      • CM's questions, answered - geoffchappell, 14.12.2009, 10:42
        • CM's questions, answered - Ninho, 14.12.2009, 12:19
  • new HACKWRAP fix for MS-DOS7+, aka smashing the bug - geoffchappell, 14.12.2009, 10:41
    • new HACKWRAP fix for MS-DOS7+, aka smashing the bug - Ninho, 14.12.2009, 11:49
      • new HACKWRAP fix for MS-DOS7+, aka smashing the bug - geoffchappell, 15.12.2009, 16:55
        • new HACKWRAP fix for MS-DOS7+, aka smashing the bug - Ninho, 15.12.2009, 19:08
        • new HACKWRAP fix for MS-DOS7+, aka smashing the bug - Ninho, 17.12.2009, 16:35
  • the DOS code segment hunt, results/questions - Ninho, 14.12.2009, 20:37
    • the DOS code segment hunt, results/questions - ecm, 14.12.2009, 23:30
      • the DOS code segment hunt, results/questions - Ninho, 15.12.2009, 00:59
      • Aha! Share was a *red herring* ! Hunt over !!! - Ninho, 15.12.2009, 10:32
        • Aha! Share was a *red herring* ! Hunt over !!! - ecm, 15.12.2009, 21:13
          • Aha! Share was a *red herring* ! Hunt over !!! - Ninho, 15.12.2009, 22:32
            • Aha! Share was a *red herring* ! Hunt over !!! - ecm, 15.12.2009, 23:05
      • the DOS code segment hunt, results/questions - geoffchappell, 15.12.2009, 16:56
        • the DOS code segment hunt, results/questions - ecm, 15.12.2009, 21:19
          • the DOS code segment hunt, results/questions - Ninho, 15.12.2009, 22:38
            • the DOS code segment hunt, results/questions - ecm, 15.12.2009, 23:06
              • the DOS code segment hunt, results/questions - Ninho, 16.12.2009, 09:22
        • the DOS code segment hunt, results/questions - Ninho, 16.12.2009, 20:24
          • the DOS code segment hunt, results/questions - Ninho, 30.12.2009, 10:50
    • the algorithm, sketched for review. Nitpicks ? - Ninho, 16.12.2009, 19:51
      • the algorithm, sketched for review. Nitpicks ? - ecm, 17.12.2009, 16:19
        • the algorithm, sketched for review. Nitpicks ? - Ninho, 17.12.2009, 17:14
          • the algorithm, sketched for review. Nitpicks ? - ecm, 17.12.2009, 20:32
            • the algorithm, sketched for review. Nitpicks ? - Ninho, 17.12.2009, 21:05
              • the algorithm, sketched for review. Nitpicks ? - ecm, 17.12.2009, 21:13
                • the algorithm, sketched for review. Nitpicks ? - Ninho, 17.12.2009, 23:16
                • digression : MSDOS 7 and SHARE.EXE revisited - Ninho, 18.12.2009, 13:04
                  • digression : MSDOS 7 and SHARE.EXE revisited - ecm, 18.12.2009, 14:31
                    • digression : MSDOS 7 and SHARE.EXE revisited - Ninho, 18.12.2009, 17:19
                      • digression : MSDOS 7 and SHARE.EXE revisited - ecm, 18.12.2009, 18:19
                        • digression : MSDOS 7 and SHARE.EXE revisited - Ninho, 18.12.2009, 18:55
  • HACKWRAP.SYS news, testing - Ninho, 20.12.2009, 02:44
    • FIXWRAP.SYS 0.5 beta - released - please try it ! - Ninho, 23.12.2009, 00:07