3DS System Flaws: Difference between revisions
m fixup link |
|||
| Line 326: | Line 326: | ||
|- | |- | ||
| memchunkhax | | memchunkhax | ||
| The kernel originally did not validate the data stored in the FCRAM kernel heap [[ | | The kernel originally did not validate the data stored in the FCRAM kernel heap [[Memchunkhdr|memchunk-headers]] for free-memory at all. Exploiting this requires raw R/W access to these memchunk-headers, like physical-memory access with gspwn. | ||
There are ''multiple'' ways to exploit this, but the end-result for most of these is the same: overwrite code in AXIWRAM via the 0xEFF00000/0xDFF00000 kernel virtual-memory mapping. | There are ''multiple'' ways to exploit this, but the end-result for most of these is the same: overwrite code in AXIWRAM via the 0xEFF00000/0xDFF00000 kernel virtual-memory mapping. | ||