Escaping Shirley World Prison's Dirty Secret: The Special Management Unit

Local operations include: interrupt acknowledge, read system registers, transfer descriptor, and write segment status register... The interrupt acknowledge operation is

Interrupt occurs; handler stores Interrupt occurs; handler stores data; signals device driver. data; signals

When an open succeeds the object manager creates a file object to When an open succeeds the object manager creates a file object to represent the open instance of the device and

Use Winobj to view driver objects in the \Device directory Use Winobj to view driver objects in the \Device directory.5. Lab: Device Name Mappings Lab: Device

Hardware support for paging consists of a page table Hardware support for paging consists of a page table Logical addresses consist of page number and offset Logical addresses

Another thread could have faulted same page: collided page fault Another thread could have faulted same page: collided page fault Page could have been deleted (remapped) from

code is brought into physical memory (from .EXEs and .DLLs) via page faults code is brought into physical memory (from .EXEs and .DLLs) via page faults the file system cache reads

“ “Private Bytes” = private virtual Private Bytes” = private virtual space (same as “VM Size” from space (same as “VM Size” from Task Manager Processes list) Task