5.0.0-11: Difference between revisions

(One intermediate revision by one other user not shown)

Line 20:

NATIVE_FIRM and the whitelist were updated. NGWord and the NZone hotspots title were updated as well.

Multiple NATIVE_FIRM ~~code execution~~ vulnerabilities were fixed, this includes all known ~~NATIVE_FIRM~~ code execution vulns at the time when the update was released. The system does not delete/block 3DS savegame haxx at all with this update, however the code execution haxx used by this was fixed.

Multiple NATIVE_FIRM vulnerabilities were fixed, this includes all known Process9 PXI-service code execution vulns at the time when the update was released. These were vulns in [[FIRM|Process9]] PXI services, the ARM11-kernel flaws which were fixed do not allow ARM11 kernel-mode code-execution. The system does not delete/block 3DS savegame haxx at all with this update, however the code execution haxx used by this was fixed.

The system can now optionally load the [[NCCH#CXI|CXI]] logo from a cleartext region in the CXI instead of from ExeFS. NATIVE_FIRM versions prior to 5.0.0-11 can't access the logo data in applications built since 5.0.0-11. Therefore regardless of gamecard system-updates, applications built since 5.0.0-11 can only be run with the 5.0.0-11+ NATIVE_FIRM. Note that only home menu seems to use the NCCH logo data, system modules like [[NS]] don't use the logo data.

A new command was added for [[Application_Manager_Services_PXI|AMPXI]].

[[Category:Firmware Versions]]

@@ Line 20: / Line 20: @@
 NATIVE_FIRM and the whitelist were updated. NGWord and the NZone hotspots title were updated as well.
-Multiple NATIVE_FIRM code execution vulnerabilities were fixed, this includes all known NATIVE_FIRM code execution vulns at the time when the update was released. The system does not delete/block 3DS savegame haxx at all with this update, however the code execution haxx used by this was fixed.
+Multiple NATIVE_FIRM vulnerabilities were fixed, this includes all known Process9 PXI-service code execution vulns at the time when the update was released. These were vulns in [[FIRM|Process9]] PXI services, the ARM11-kernel flaws which were fixed do not allow ARM11 kernel-mode code-execution. The system does not delete/block 3DS savegame haxx at all with this update, however the code execution haxx used by this was fixed.
 The system can now optionally load the [[NCCH#CXI|CXI]] logo from a cleartext region in the CXI instead of from ExeFS. NATIVE_FIRM versions prior to 5.0.0-11 can't access the logo data in applications built since 5.0.0-11. Therefore regardless of gamecard system-updates, applications built since 5.0.0-11 can only be run with the 5.0.0-11+ NATIVE_FIRM. Note that only home menu seems to use the NCCH logo data, system modules like [[NS]] don't use the logo data.
 A new command was added for [[Application_Manager_Services_PXI|AMPXI]].
+[[Category:Firmware Versions]]