Is it true that stack grows up from base+limit (in descriptor)
and ALWAYS have a size 0xFFFF (if flag B=0) or 0xFFFFFFFF (if flag B=1)[/b][/i]

the stack grows down... and it can be set to whatever you want.

You can also see limit 0xFFFF with B=1 under win9x or winme. It means (in theory) that the stack can grow down between maximal offset and limit (0xFFFFFFFF -> 0xFFFF)

then if b=0 it is BASE+LIMIT -----[stack gr. down]-------> BASE
if b=1 it is BASE+0xFFFFFFFF -----[stack gr. down] ----> 0xFFFFFFFF-LIMIT

?

oh, my mistake:

if b=1 it is BASE+0xFFFFFFFF -----[stack gr. down] -----> BASE+0xFFFFFFFF-LIMIT
?

Well, bit B (Big) has meaning only when ED=1. ED=1 (Expand Down) means you can access the area between maximal offset (0xFFFF if B=0, 0xFFFFFFFF if B=1) and limit, ED=0 means you can access area between 0x0 and limit.

So if ED=1 and B=1 then the stack grows down between BASE+0xFFFFFFFF -> BASE+limit.

For instance, under my winme is it between BASE+0xFFFFFFFF -> 0xFFFF. The area between 0x0 and 0xFFFF is forbidden probably because of trapping NULL-pointers.

which bit is DE?
can look here:
http://www.wasm.ru/article.php?article=pipm02

I don't know russian. On the picture is only segment descriptor in general, you can't see access right there.
The access rights are 8 bits, starting with bit 8 in high dword of segment descriptor. The format of the access rights vary between data, code and system decriptor. The bit ED is bit 2 in data segment access rights field.
You better read the Intel system programming manual.

thank you anyway