Dont allow SetSelectorBase to change into an kernel region

[Uwe Bonnes]

Hallo,

galep3 crashes with following sequence:
096c7b38:Call KERNEL.189: SETSELECTORLIMIT(0x0d87,0x0000045f) ret=02e7:6fb5 ds=099f
096c7b38:Ret  KERNEL.189: SETSELECTORLIMIT() retval=0x0d87 ret=02e7:6fb5 ds=099f
096c7b38:Call KERNEL.187: SETSELECTORBASE(0x0d87,0xc02924e0) ret=02e7:6fc1 ds=099f
096c7b38:Ret  KERNEL.187: SETSELECTORBASE() retval=0x0d87 ret=02e7:6fc1 ds=099f
...
Unhandled exception: page fault on read access to 0xc0292545

Obviously the application trys to reach some kernel memory.

If I only allow to set the selector base when (selector base + selector
limit) is smaller than 0x8000000, the application goes on and lets me read
an eprom plugged into the Galep3 Programmer. Is the appended fix a right
acceptable?  

Index: wine/memory/selector.c
===================================================================
RCS file: /home/wine/wine/memory/selector.c,v
retrieving revision 1.39
diff -u -r1.39 selector.c
--- wine/memory/selector.c	19 Jul 2001 00:39:10 -0000	1.39
+++ wine/memory/selector.c	1 Aug 2001 17:30:48 -0000
@@ -327,7 +327,12 @@
     LDT_ENTRY entry;
     wine_ldt_get_entry( sel, &entry );
     wine_ldt_set_base( &entry, DOSMEM_MapDosToLinear(base) );
-    wine_ldt_set_entry( sel, &entry );
+    if ((base +  wine_ldt_copy.limit[sel >> __AHSHIFT]) > 0x8000000) 
+      {
+	FIXME("Illegal region base %lx limit %lx\n", base,wine_ldt_copy.limit[sel >> __AHSHIFT]);
+      }
+    else
+      wine_ldt_set_entry( sel, &entry );
     return sel;
 }
 

Bye

-- 
Uwe Bonnes                bon at elektron.ikp.physik.tu-darmstadt.de

Institut fuer Kernphysik  Schlossgartenstrasse 9  64289 Darmstadt
--------- Tel. 06151 162516 -------- Fax. 06151 164321 ----------