PetrTesarik

My Info

Name: Petr Tesařík

Email: <hat -at- tesarici -dot- cz>

Primary obsession: Localization, Making Wine more useful to myself

Right now I've got a few different projects:

  • Finishing my studies ;)


There is something weird about the handling of EFLAGS in Windows. There are at least two issues on that:

* The TF flag: it seems that Windows clears TF in CONTEXT before calling an exception handler. * The RF flag: it seems that Windows clears RF before passing control to the program from both an exception handler and a ContinueDebugEvent()

I'm quite sure that the RF handling is OK in the processor: push flags, CS and the address of the instruction where the HW breakpoint is set, and do an IRET. The breakpoint is missed, so it must be that Windows either deliberately, or unintentionally clears RF when returning from the interrupt trap. I guess this has something to do with the way exceptions are risen in Windows, but need more info. :((


CategoryHomepage

PetrTesarik (last edited 2006-04-11 13:55:35 by PetrTesarik)