Task State Segment

Task State Segment

The Task State Segment is a special x86 structure which holds information about a task. It is used by the operating system kernel for task management. Specifically, the following information is stored in the TSS:

* Processor register state
* I/O Port permissions
* Inner level stack pointers
* Previous TSS link

All this information should be stored at specific locations within the TSS as specified in the IA-32 manuals.

Location of the TSS

The TSS may reside anywhere in memory. A special segment register called the Task Register (TR) holds a segment selector that points to a valid TSS segment descriptor which resides in the GDT (a TSS descriptor may not reside in the LDT). Therefore, to use a TSS the following must be done by the operating system kernel:

# Create a TSS descriptor entry in the GDT
# Load the TR with a segment selector for that segment
# Add information to the TSS in memory as needed

The TSS should be placed in memory that is accessible only to the kernel for security purposes.

Task Register

The TR register is a 16-bit register which holds a segment selector for the TSS. It may be loaded through the LTR instruction. LTR is a privileged instruction and acts in a manner similar to other segment register loads. The task register has two parts: a portion visible and accessible by the programmer and an invisible one that is automatically loaded from the TSS descriptor

Register States

The TSS may contain saved values of all the x86 registers. This is used for task switching. The operating system may load the TSS with the values of the registers that the new task needs and after executing a hardware task switch (such as with an IRET instruction) the x86 CPU will load the saved values from the TSS into the appropriate registers. Note that some modern operating systems such as Windows and Linux do not use these fields in the TSS as they implement software task switching.

I/O Port Permissions

The TSS contains a 16-bit pointer to I/O port permissions bitmap for the current task. This bitmap, usually set up by the operating system when a task is started, specifies individual ports to which the program should have access. The I/O bitmap is a bit array of port access permissions; if the program has permission to access a port, a "0" is stored at the corresponding bit index, and if the program does not have permission, a "1" is stored there. The feature operates as follows: when a program issues an x86 I/O port instruction such as IN or OUT (see x86 instruction listings), the hardware will do an I/O privilege level (IOPL) check to see if the program has access to all I/O ports. If the CPL of the program is numerically greater than the IOPL (the program is less-privileged than what the IOPL specifies), the program does not have I/O port access to all ports. The hardware will then check the I/O permissions bitmap in the TSS to see if that program can access the specific port in the IN or OUT instruction. If the bit in the I/O port permissions bitmap is set, the program is allowed access to this port, and the instruction is allowed to execute. If the bit is clear, the program does not have access and the processor generates a General Protection Fault. This feature allows operating systems to grant selective port access to user programs.

Inner Level Stack Pointers

The TSS contains 6 fields for specifying the new stack pointer when a privilege level change happens. The field SS0 contains the stack segment selector for CPL=0, and the field ESP0/RSP0 contains the new ESP/RSP value for CPL=0. When an interrupt happens in protected (32-bit) mode, the x86 CPU will look in the TSS for SS0 and ESP0 and load their values into SS and ESP respectively. This allows for the kernel to use a different stack than the user program, and also have this stack be unique for each user program.

A new feature introduced in the AMD64 extensions is called the Interrupt Stack Table (IST). This also resides in the TSS and contains logical (segment+offset) stack pointers. An Interrupt descriptor table may specify an IST entry to use (there are 8). If that is the case, the processor will load the new stack from the IST instead. This allows known-good stacks to be used in case of serious errors (NMI or Double fault for example). Previously, to do this, the entry for the exception or interrupt in the IDT pointed to a task gate. This cause the processor to switch to the task that is pointed by the task gate. The original register values were saved in the TSS current at the time the interrupt or exception occurred, and the processor then set the registers, including SS:ESP, to a known value specified in the TSS and saved the selector to the previous TSS. The problem here is that hardware task switching is not supported on AMD64.

Previous TSS Link

This is a 16-bit selector which allows linking this TSS with the previous one. This is only used for hardware task switching. See the IA-32 manuals for details.

Use of TSS in Linux

Although a TSS could be created for each task running on the computer, Linux only creates one TSS for each CPU and uses them for all tasks. Linux only uses the I/O port permission bitmap and inner stack features of the TSS. The other features are only needed for hardware task switches which Linux does not use.

Exceptions related to the TSS

The x86 exception vector 10 is called the Invalid TSS exception (#TS). It is issued by the processor whenever something goes wrong with the TSS access. For example, if an interrupt happens in CPL=3 and is transferring control to CPL=0, the TSS is used to extract SS0 and ESP0/RSP0 for the stack switch. If the task register holds a bad TSS selector, a #TS fault will be generated. The Invalid TSS exception should never happen during normal operating system operation and is almost always related to kernel bugs.

For more details on the TSS layout and usage, see Volume 3a, Chapter 6 of the IA-32 manual.


Wikimedia Foundation. 2010.

Игры ⚽ Поможем написать курсовую

Look at other dictionaries:

  • Segment d'etat de tache — Segment d état de tâche Un segment d état de tâche ou Task state segment (TSS) est une structure spécifique aux processeurs de la famille x86 où est stockée tout le contexte d un processus. Son descripteur est placé dans la GDT (Table globale de… …   Wikipédia en Français

  • Segment d'état de tâche — Un segment d état de tâche ou Task state segment (TSS) est une structure spécifique aux processeurs de la famille x86 où est stockée tout le contexte d un processus. Son descripteur est placé dans la GDT (Table globale de descripteurs). En tant… …   Wikipédia en Français

  • Load Task Register — The LTR x86 instruction stands for Load Task Register and is used in operating systems that support multitasking. LTR is supported only in protected mode and long mode, not in real mode or virtual 8086 mode. It must be executed when the CPL is 0 …   Wikipedia

  • State Route 74 (New York–Vermont) — Infobox road highway name=NYS/VT Route 74 marker map notes=NY 74 and VT 74 highlighted in red route=74 maint=NYSDOT and VTrans length mi=34.70 length notes=New York: 20.44 mi Vermont: 13.26 mi length round=2 length ref= established=New York:… …   Wikipedia

  • state —    by Kenneth Surin   Deleuze and Guattari have a conception of the State that is indebted to the work of the anthropologist and anarchist Pierre Clastres. Clastres had argued against the conventional evolutionist account of the emergence of the… …   The Deleuze dictionary

  • state —    by Kenneth Surin   Deleuze and Guattari have a conception of the State that is indebted to the work of the anthropologist and anarchist Pierre Clastres. Clastres had argued against the conventional evolutionist account of the emergence of the… …   The Deleuze dictionary

  • State Highway 243 (Minnesota–Wisconsin) — State Trunk Highway 243 Route information Maintained by Mn/DOT and WisDOT …   Wikipedia

  • State of Palestine — This article is about the political entity proclaimed in 1988. For other uses, see Palestine (disambiguation). State of Palestine[1][i] دولة فلسطين …   Wikipedia

  • State Route 74 (New York — New York State Route 74 redirects here. For previous alignments of NY 74, see New York State Route 74 (disambiguation). NYS/VT Route 74 …   Wikipedia

  • State of Play (film) — Infobox Film name = State of Play image size = caption = director = Kevin Macdonald producer = Tim Bevan Eric Fellner Andrew Hauptman E. Bennett Walsh writer = Matthew Michael Carnahan Tony GilroyPeter Morgan Billy Ray Paul Abbott (series)… …   Wikipedia

Share the article and excerpts

Direct link
Do a right-click on the link above
and select “Copy Link”