80386保护模式的运行

最新推荐文章于 2020-06-03 21:00:39 发布

ljhhh0123

最新推荐文章于 2020-06-03 21:00:39 发布

阅读量929

点赞数

文章标签： timer system descriptor initialization byte 2010

本文链接：https://blog.csdn.net/ljljlj/article/details/4630280

版权

linux 0.0.0 ------80386保护模式的运行
版权归原作者所有 ----ljhhh0123 2009-10-3
在www.oldlinux.org 网上赵炯博士做出的假想的linux 0.00操作系统,
功能就是两个不同的任务交替输出A和B两个字母.
我用最简单的工具-----nasm汇编器翻译之.能够在虚拟机qemu manage 6.0
下执行.这样才能深刻体会到i386 cpu的运行原理.下载地址为:
http://www.oldlinux.org/Linux.old/bochs/linux-0.00-041217.zip
原程序有三个文件boot.s head.s build.c,我用的是一个普通能上网的xp系统,
从www.nasm.us 下载的nasm-2.07 for windows. 我改了头两个文件,执行下面命

令生成软盘映像文件(image):
nasm boot.s
nasm head.s
type boot head > image
第三个文件在xp下没什么用,我以type命令代替.
发现nasm 在align时填充空间是用0x90,而不是0x00.
下面列出修改后的这两个文件:
; ; boot.s ; ; boot.s 被bios启动子程序装入绝对地址0x7c00 处,并将后来的17个扇区的内容 ; 装入绝对地址0x10000处,并跳到那里执行保护模式的代码.;; %define BOOTSEG 0x07c0 %define SYSSEG 0x1000 ; system loaded at 0x10000 (65536). %define SYSLEN 17 ; sectors occupied. bits 16 ; start: jmp BOOTSEG:go go: mov ax,cs mov ds,ax mov es,ax mov ss,ax mov sp,0x400 ; arbitrary value >>512 ; ok, we've written the message, now ; we want to load the system (at 0x10000) load_system: mov dx,0x0000 mov cx,0x0002 mov ax,SYSSEG mov es,ax mov bx,0x0000 mov ax,0x200+SYSLEN int 0x13 jnc ok_load mov dx,0x0000 mov ax,0x0000 int 0x13 jmp short load_system ok_load: ; now we want to move to protected mode ... cli ; no interrupts allowed ; ; then we load the segment descriptors mov ax,cs ; right, forgot this at first. didn't work :-) mov ds,ax lidt [idt_48] ; load idt with 0,0 lgdt [gdt_48] ; load gdt with whatever appropriate ; well, that went ok, I hope. Now we have to reprogram the interrupts :-( ; we put them right after the intel-reserved hardware interrupts, at ; int 0x20-0x2F. There they won't mess up anything. Sadly IBM really ; messed this up with the original PC, and they haven't been able to ; rectify it afterwards. Thus the bios puts interrupts at 0x08-0x0f, ; which is used for the internal hardware interrupts as well. We just ; have to reprogram the 8259's, and it isn't fun. mov al,0x11 ; initialization sequence out 0x20,al ; send it to 8259A-1 out 0xA0,al ; and to 8259A-2 mov al,0x20 ; start of hardware int's (0x20) out 0x21,al mov al,0x28 ; start of hardware int's 2 (0x28) out 0xA1,al mov al,0x04 ; 8259-1 is master out 0x21,al mov al,0x02 ; 8259-2 is slave out 0xA1,al mov al,0x01 ; 8086 mode for both out 0x21,al out 0xA1,al mov al,0xFF ; mask off all interrupts for now out 0x21,al out 0xA1,al ; well, that certainly wasn't fun :-(. Hopefully it works, and we don't ; need no steenking BIOS anyway (except for the initial loading :-). ; The BIOS-routine wants lots of unnecessary data, and it's less ; "interesting" anyway. This is how REAL programmers do it. ; ; Well, now's the time to actually move into protected mode. To make ; things as simple as possible, we do no register set-up or anything, ; we let the gnu-compiled 32-bit programs do that. We just jump to ; absolute address 0x00000, in 32-bit protected mode. mov bx,SYSSEG ; loaded place. mov ax,0x0001 ; protected mode (PE) bit lmsw ax ; This is it; jmp 8:0 ; jmp offset 0 of segment 8 (cs) gdt0: dw 0,0,0,0 ; dummy dw 0x07FF ; 8Mb - limit=2047 (2048*4096=8Mb) dw 0x0000 ; base address=0x10000 dw 0x9A01 ; code read/exec dw 0x00C0 ; granularity=4096, 386 dw 0x07FF ; 8Mb - limit=2047 (2048*4096=8Mb) dw 0x0000 ; base address=0x10000 dw 0x9201 ; data read/write dw 0x00C0 ; granularity=4096, 386 idt_48: dw 0 ; idt limit=0 dw 0,0 ; idt base=0L gdt_48: dw 0x7ff ; gdt limit=2048, 256 GDT entries dw 0x7c00+gdt0,0 ; gdt base = 07xxx msg1: db 13,10 msg2:db "Loading system ..." db 13,10,13,10 times (510-($-$$)) db 0 db 0x55 db 0xaa

;; head.s ; head.s contains the 32-bit startup code. ; Two L3 task multitasking. The code of tasks are in kernel area, ; just like the Linux. The kernel code is located at 0x10000. ;; %define KRN_BASE 0x10000 %define TSS0_SEL 0x20 %define LDT0_SEL 0x28 %define TSS1_SEL 0X30 %define LDT1_SEL 0x38 bits 32 startup_32: mov eax,0x10 mov ds,ax mov es,ax mov fs,ax mov gs,ax lss esp,[stack_ptr] ; setup base fields of descriptors. mov ebx, KRN_BASE mov ecx, gdt lea eax, [tss0] mov edi, TSS0_SEL call set_base lea eax, [ldt0] mov edi, LDT0_SEL call set_base lea eax, [tss1] mov edi, TSS1_SEL call set_base lea eax, [ldt1] mov edi, LDT1_SEL call set_base call setup_idt call setup_gdt mov eax,0x10 ; reload all the segment registers mov ds,ax ; after changing gdt. mov es,ax mov fs,ax mov gs,ax lss esp,[stack_ptr] ; setup up timer 8253 chip. mov al, 0x36 mov edx, 0x43 out dx, al mov eax, 11930 ; timer frequency 100 HZ mov edx, 0x40 out dx, al mov al, ah out dx, al ; setup timer & system call interrupt descriptors. mov eax, 0x00080000 mov ax, timer_interrupt mov dx, 0x8E00 mov ecx, 0x20 lea esi, [ecx*8+idt] mov [esi],eax mov [esi+4],edx mov ax, system_interrupt mov dx, 0xef00 mov ecx, 0x80 lea esi, [idt+ecx*8] mov [esi], eax mov [esi+4],edx ; unmask the timer interrupt. mov edx, 0x21 in al, dx and al, 0xfe out dx, al ; Move to user mode [task 0] pushf and dword [esp], 0xffffbfff popf mov eax, TSS0_SEL ltr ax mov eax, LDT0_SEL lldt ax mov dword [current], 0 sti push byte 0x17 push stack0_ptr pushf push byte 0x0f push task0 iret ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; setup_gdt: lgdt [lgdt_opcode] ret setup_idt: lea edx,[ignore_int] mov eax,0x00080000 mov ax,dx ;; selector 0x0008 cs ;; mov dx,0x8E00 ;; interrupt gate - dpl 0, present ;; lea edi,[idt] mov ecx,256 rp_sidt: mov [edi],eax mov [edi+4],edx add edi, byte 8 dec ecx jne rp_sidt lidt [lidt_opcode] ret ; in: eax - logic addr; ebx base addr ; ; ecx - table addr; edi - descriptors offset. set_base: add eax, ebx add edi, ecx mov [edi+2], ax ror eax, 16 mov [edi+4], al mov [edi+7], ah ror eax, 16 ret write_char: push gs push ebx push eax mov ebx, 0x18 mov gs, bx mov bx, [scr_loc] shl ebx,1 mov [gs:ebx], al shr ebx, 1 inc ebx cmp ebx, 2000 jb .1 mov ebx,0 .1: mov [scr_loc], ebx pop eax pop ebx pop gs ret ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ;; This is the default interrupt "handler" :- ;; align 4 ignore_int: push ds push eax mov eax, 0x10 mov ds, ax mov eax, 67 ;; print 'C' ;; call write_char pop eax pop ds iret ;; Timer interrupt handler ;; align 4 timer_interrupt: push ds push edx push ecx push ebx push eax mov eax, 0x10 mov ds, ax mov al, 0x20 out 0x20, al mov eax,1 cmp [current], eax je .12 mov [current], eax jmp TSS1_SEL:0 jmp short .22 .12: mov dword [current], 0 jmp TSS0_SEL:0 .22: pop eax pop ebx pop ecx pop edx pop ds iret ;; system call handler ;; align 4 system_interrupt: push ds push edx push ecx push ebx push eax mov edx, 0x10 mov ds, dx call write_char pop eax pop ebx pop ecx pop edx pop ds iret ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; current:dd 0 scr_loc:dd 0 align 4 dw 0 lidt_opcode: dw 256*8-1 ; idt contains 256 entries dd idt + KRN_BASE ; This will be rewrite by code. align 4 dw 0 lgdt_opcode: dw 0xffff ; so does gdt dd gdt + KRN_BASE ; This will be rewrite by code. align 8 idt: times 256 dq 0 ; idt is uninitialized gdt: dq 0x0000000000000000 ;; NULL descriptor ;; dq 0x00c09a01000007ff ;; 8Mb 0x08, base 0x10000 ;; dq 0x00c09201000007ff ;; 8Mb 0x10 ;; dq 0x00c0920b80000002 ;; screen 0x18 - for display ;; dq 0x0000e90100000068 ; TSS0 descr 0x20 dq 0x0000e20100000040 ; LDT0 descr 0x28 dq 0x0000e90100000068 ; TSS1 descr 0x30 dq 0x0000e20100000040 ; LDT1 descr 0x38 end_gdt: times 128 dd 0 stack_ptr: dd stack_ptr dw 0x10 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; align 8 ldt0: dq 0x0000000000000000 dq 0x00c0fa01000003ff ; 0x0f, base 0x10000 dq 0x00c0f201000003ff ; 0x17 tss0: dd 0 ;; back link ;; dd stack0_krn_ptr, 0x10 ;; esp0, ss0 ;; dd 0, 0 ;; esp1, ss1 ;; dd 0, 0 ;; esp2, ss2 ;; dd 0 ;; cr3 ;; dd task0 ;; eip ;; dd 0x200 ;; eflags ;; dd 0, 0, 0, 0 ;; eax, ecx, edx, ebx ;; dd stack0_ptr, 0, 0, 0 ;; esp, ebp, esi, edi ;; dd 0x17,0x0f,0x17,0x17,0x17,0x17 ;; es, cs, ss, ds, fs, gs ;; dd LDT0_SEL ;; ldt ;; dd 0x8000000 ;; trace bitmap ;; times 128 dd 0 stack0_krn_ptr: dd 0 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; align 8 ldt1: dq 0x0000000000000000 dq 0x00c0fa01000003ff ; 0x0f, base 0x10000 dq 0x00c0f201000003ff ; 0x17 tss1: dd 0 ;; back link ;; dd stack1_krn_ptr, 0x10 ;; esp0, ss0 ;; dd 0, 0 ;; esp1, ss1 ;; dd 0, 0 ;; esp2, ss2 ;; dd 0 ;; cr3 ;; dd task1 ;; eip ;; dd 0x200 ;; eflags ;; dd 0, 0, 0, 0 ;; eax, ecx, edx, ebx ;; dd stack1_ptr, 0, 0, 0 ;; esp, ebp, esi, edi ;; dd 0x17,0x0f,0x17,0x17,0x17,0x17 ;; es, cs, ss, ds, fs, gs ;; dd LDT1_SEL ;; ldt ;; dd 0x8000000 ;; trace bitmap ;; times 128 dd 0 stack1_krn_ptr: dd 0 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; task0: mov eax, 0x17 mov ds, ax mov eax, 65 ;; print 'A' ;; int 0x80 mov ecx, 0xfff .111: loop .111 jmp short task0 times 128 dd 0 stack0_ptr: dd 0 task1: mov eax, 0x17 mov ds, ax mov eax, 66 ;; print 'B' ;; int 0x80 mov ecx, 0xfff .10: loop .10 jmp short task1 times 128 dd 0 stack1_ptr: dd 0 times (8192-($-$$)) db 0 ;留点空间,如果太少,系统会很快退出. ;;;; end ;;;;