Controlling ill-behaved computer add-on device through a virtual execution mode

• US 5,881,282 A
• Filed: 12/10/1996
• Issued: 03/09/1999
• Est. Priority Date: 12/10/1996
• Status: Expired due to Term

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Shipman, Mark S.
• Primary Examiner(s): AUVE, GLENN ALLEN
• Application Number:
  US08/762,585
• Time in Patent Office: 819 Days
• Field of Search: 395/183.12, 395/183.2, 395/184.01, 395/284, 395/651, 395/652, 395/830, 395/591
• US Class Current: 713/2
• CPC Class Codes: G06F 11/0793 Remedial or corrective actions recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40

Abstract

A computer system is programmed with basic input/output services (BIOS), including an initialization service, and an associated virtual mode execution monitor. The initialization service scans for option ROMs of add-on devices at power on/reset. For each detected option ROM, the initialization service creates the runtime definition of its initialization task, setting up the initialization task to be executed in a virtual mode, redirecting all interrupts and exceptions arisen during execution of the initialization task to the virtual mode execution monitor. For each redirected interrupt/exception, the virtual mode execution monitor either allows the triggering attempted operation to be performed, or substitutes an impermissible triggering attempted operation with one or more fail safe recovery operations, or simply terminates the "ill-behaving" initialization task.

Claims

1. An apparatus comprising a storage medium having stored therein an initialization service of a set of basic input/output services (BIOS), the initialization service including operating logic for locating initialization tasks of devices added on to the apparatus, and for creating execution context of the initialization tasks, wherein the apparatus is equipped with system protection features that can be selectively employed or not employed, and the operating logic creates the context in a manner such that the initialization tasks are executed with the employment of the system protection features and with interrupts and exceptions arisen during execution of the initialization tasks redirected to a predetermined execution monitor.

2. The apparatus as set forth in claim 1, wherein the operating logic for creating the execution context of a initialization task includes operating logic for setting an execution mode to a virtual mode, under which the system protection features are employed during execution, but appear to be not employed to the initialization task.

3. The apparatus as set forth in claim 1, wherein the operating logic for creating the execution context of an initialization task includes operating logic for setting a pointer to an interrupt/exception handler map to a starting address of the execution monitor.

4. The apparatus as set forth in claim 1, wherein the apparatus includes the predetermined execution monitor.

5. The apparatus as set forth in claim 1, wherein the execution monitor includes operating logic for determining if an interrupt/exception triggering operation attempted by a initialization task is permissible.

6. The apparatus as set forth in claim 5, wherein the execution monitor further includes operating logic for restarting the interrupt/exception triggering operation, if the interrupt/exception triggering operation is determined to be permissible.

7. The apparatus as set forth in claim 5, wherein the execution monitor further includes operating logic for determining if interrupt/exception triggering operation is recoverable, if the interrupt/exception triggering operation is determined to be impermissible.

8. The apparatus as set forth in claim 7, wherein the execution monitor further includes operating logic for retargeting the interrupt/exception triggering operation, if the interrupt/exception triggering operation is determined to be impermissible, but retargetable.

9. The apparatus as set forth in claim 7, wherein the execution monitor further includes operating logic for returning a harmless virtualized result of the interrupt/exception triggering operation, if the interrupt/exception triggering operation is determined to be impermissible, but eligible for virtualization.

10. The apparatus as set forth in claim 1, wherein the apparatus is a motherboard for forming a computer system.

11. The apparatus as set forth in claim 1, wherein the apparatus is a computer system.

12. A method for controlling ill-behaved add on devices of computer systems equipped with system protection features that can be selectively employed or not employed, the method comprising the steps of:

(a) locating initialization tasks of the add on devices;

(b) creating execution context of the initialization tasks in a manner such that the initialization tasks are executed with the employment of system protection features; and

(c) further setting up the execution context of the initialization tasks such that interrupts and exceptions arisen during execution of the initialization tasks are redirected to a predetermined execution monitor.

13. The method as set forth in claim 12, wherein step (b) comprises setting an execution mode to a virtual mode, under which the system protection features are employed during execution, but appear to be not employed to the initialization task.

14. The method as set forth in claim 12, wherein step (c) comprises setting a pointer to an interrupt/exception handler map to a starting address of the execution monitor.

15. The method as set forth in claim 12, wherein the method further includes step (d) determining if an interrupt/exception triggering operation attempted by a initialization task is permissible.

16. The method as set forth in claim 15, wherein the method further comprises step (e) restarting the interrupt/exception triggering operation, if the interrupt/exception triggering operation is determined to be permissible.

17. The method as set forth in claim 15, wherein the method further comprises step (e) determining if interrupt/exception triggering operation is recoverable, if the interrupt/exception triggering operation is determined to be impermissible.

18. The method as set forth in claim 17, wherein the method further comprises step (f) retargeting the interrupt/exception triggering operation, if the interrupt/exception triggering operation is determined to be impermissible, but retargetable.

19. The method as set forth in claim 17, wherein the method further comprises step (f) returning a harmless fake result of the interrupt/exception triggering operation, if the interrupt/exception triggering operation is determined to be impermissible, but eligible for virtualization.