3dbrew

10.6.0-31: Difference between revisions

← Older editNewer edit →
Line 30: Line 30:
With the original IR hardware the value returned by these registers are always 0x0..0x40 according to the datasheet.
With the original IR hardware the value returned by these registers are always 0x0..0x40 according to the datasheet.


In theory with modified/custom IR hardware it might(?) be possible to trigger a stack-smash with this, enough to overwrite the saved-LR. In theory it might be possible to start full ROP from this(what to do after getting ROP in this context is another matter however).
This fixed the vuln described [[3DS_System_Flaws|here]].


===JPN-only titles===
===JPN-only titles===
Retrieved from "https://www.3dbrew.org/wiki/10.6.0-31"