the DOS code segment hunt, results/questions (Miscellaneous)
> If you really wanted to, you could reliably find the code segment
> experimentally. DOS calls various interrupts, most notably int 2Fh,
> directly from its code wherever its code may be. So, hook int 2Fh and call
> a DOS function that you know will call a particular case of int 2Fh. When
> your hook sees this case, it can look up the return address and save it
> for you. When the DOS function returns, you can unhook. The first one that
> comes to mind is that int 21h function 0Dh always finishes by calling int
> 2Fh function 1120h - but there's surely a better one than that.
Nice and easily applied trick, thank you very much! Didn't you tell you had forgotten you DOS basics
However the principle of least work (or simple=pretty) makes me stick to my current method (pick the DOS CS from the pristine share hooks). Of course I'll switch to using your method IFF someone find a convincing case where mine is in fault - when looking for the kernel CS during drivers init phase, be it clearly stated. I agree your method is the better one to use in the general case.
---
Ninho
Complete thread:
- new HACKWRAP fix for MS-DOS7+, aka smashing the bug - Ninho, 11.12.2009, 00:17 (Miscellaneous)
- new HACKWRAP fix for MS-DOS7+, aka smashing the bug - ecm, 11.12.2009, 15:02
- new *FIXWRAP* for MS-DOS7+, aka smashing the bug - Ninho, 12.12.2009, 01:12
- FIXWRAP technical thread. News - Ninho, 12.12.2009, 16:05
- CM's questions, answered - Ninho, 12.12.2009, 18:22
- CM's questions, answered - ecm, 12.12.2009, 22:40
- CM's questions, answered - Ninho, 13.12.2009, 00:10
- CM's questions, answered - ecm, 13.12.2009, 00:51
- CM's questions, answered - Ninho, 13.12.2009, 10:32
- CM's questions, answered - ecm, 13.12.2009, 00:51
- CM's questions, answered - Ninho, 13.12.2009, 00:10
- CM's questions, answered - geoffchappell, 14.12.2009, 10:42
- CM's questions, answered - Ninho, 14.12.2009, 12:19
- CM's questions, answered - ecm, 12.12.2009, 22:40
- CM's questions, answered - Ninho, 12.12.2009, 18:22
- new HACKWRAP fix for MS-DOS7+, aka smashing the bug - geoffchappell, 14.12.2009, 10:41
- new HACKWRAP fix for MS-DOS7+, aka smashing the bug - Ninho, 14.12.2009, 11:49
- new HACKWRAP fix for MS-DOS7+, aka smashing the bug - geoffchappell, 15.12.2009, 16:55
- new HACKWRAP fix for MS-DOS7+, aka smashing the bug - Ninho, 15.12.2009, 19:08
- new HACKWRAP fix for MS-DOS7+, aka smashing the bug - Ninho, 17.12.2009, 16:35
- new HACKWRAP fix for MS-DOS7+, aka smashing the bug - geoffchappell, 15.12.2009, 16:55
- new HACKWRAP fix for MS-DOS7+, aka smashing the bug - Ninho, 14.12.2009, 11:49
- the DOS code segment hunt, results/questions - Ninho, 14.12.2009, 20:37
- the DOS code segment hunt, results/questions - ecm, 14.12.2009, 23:30
- the DOS code segment hunt, results/questions - Ninho, 15.12.2009, 00:59
- Aha! Share was a *red herring* ! Hunt over !!! - Ninho, 15.12.2009, 10:32
- Aha! Share was a *red herring* ! Hunt over !!! - ecm, 15.12.2009, 21:13
- Aha! Share was a *red herring* ! Hunt over !!! - Ninho, 15.12.2009, 22:32
- Aha! Share was a *red herring* ! Hunt over !!! - ecm, 15.12.2009, 23:05
- Aha! Share was a *red herring* ! Hunt over !!! - Ninho, 15.12.2009, 22:32
- Aha! Share was a *red herring* ! Hunt over !!! - ecm, 15.12.2009, 21:13
- the DOS code segment hunt, results/questions - geoffchappell, 15.12.2009, 16:56
- the DOS code segment hunt, results/questions - ecm, 15.12.2009, 21:19
- the DOS code segment hunt, results/questions - Ninho, 15.12.2009, 22:38
- the DOS code segment hunt, results/questions - ecm, 15.12.2009, 23:06
- the DOS code segment hunt, results/questions - Ninho, 16.12.2009, 09:22
- the DOS code segment hunt, results/questions - ecm, 15.12.2009, 23:06
- the DOS code segment hunt, results/questions - Ninho, 15.12.2009, 22:38
- the DOS code segment hunt, results/questions - Ninho, 16.12.2009, 20:24
- the DOS code segment hunt, results/questions - Ninho, 30.12.2009, 10:50
- the DOS code segment hunt, results/questions - ecm, 15.12.2009, 21:19
- the algorithm, sketched for review. Nitpicks ? - Ninho, 16.12.2009, 19:51
- the algorithm, sketched for review. Nitpicks ? - ecm, 17.12.2009, 16:19
- the algorithm, sketched for review. Nitpicks ? - Ninho, 17.12.2009, 17:14
- the algorithm, sketched for review. Nitpicks ? - ecm, 17.12.2009, 20:32
- the algorithm, sketched for review. Nitpicks ? - Ninho, 17.12.2009, 21:05
- the algorithm, sketched for review. Nitpicks ? - ecm, 17.12.2009, 21:13
- the algorithm, sketched for review. Nitpicks ? - Ninho, 17.12.2009, 23:16
- digression : MSDOS 7 and SHARE.EXE revisited - Ninho, 18.12.2009, 13:04
- digression : MSDOS 7 and SHARE.EXE revisited - ecm, 18.12.2009, 14:31
- digression : MSDOS 7 and SHARE.EXE revisited - Ninho, 18.12.2009, 17:19
- digression : MSDOS 7 and SHARE.EXE revisited - ecm, 18.12.2009, 18:19
- digression : MSDOS 7 and SHARE.EXE revisited - Ninho, 18.12.2009, 18:55
- digression : MSDOS 7 and SHARE.EXE revisited - ecm, 18.12.2009, 18:19
- digression : MSDOS 7 and SHARE.EXE revisited - Ninho, 18.12.2009, 17:19
- digression : MSDOS 7 and SHARE.EXE revisited - ecm, 18.12.2009, 14:31
- the algorithm, sketched for review. Nitpicks ? - ecm, 17.12.2009, 21:13
- the algorithm, sketched for review. Nitpicks ? - Ninho, 17.12.2009, 21:05
- the algorithm, sketched for review. Nitpicks ? - ecm, 17.12.2009, 20:32
- the algorithm, sketched for review. Nitpicks ? - Ninho, 17.12.2009, 17:14
- the algorithm, sketched for review. Nitpicks ? - ecm, 17.12.2009, 16:19
- the DOS code segment hunt, results/questions - ecm, 14.12.2009, 23:30
- HACKWRAP.SYS news, testing - Ninho, 20.12.2009, 02:44
- FIXWRAP.SYS 0.5 beta - released - please try it ! - Ninho, 23.12.2009, 00:07
- new HACKWRAP fix for MS-DOS7+, aka smashing the bug - ecm, 11.12.2009, 15:02