3DS System Flaws: Difference between revisions
SSLoth →Standalone Sysmodules |
m PXIAM:ImportCertificates flaw →Process9 |
||
Line 578: | Line 578: | ||
| [[User:Plutooo|plutoo]]/[[User:Yellows8|Yellows8]]/maybe others(?) | | [[User:Plutooo|plutoo]]/[[User:Yellows8|Yellows8]]/maybe others(?) | ||
|- | |- | ||
| [[Application_Manager_Services_PXI|PXIAM]] | | [[Application_Manager_Services_PXI|PXIAM]]:ImportCertificates (See also [[Application_Manager_Services|this]]) | ||
| When handling this command, Process9 allocates a 0x2800-byte heap buffer, then copies the 4 FCRAM input buffers to this heap buffer without checking the sizes at all(only the buffers with non-zero sizes are copied). Starting with [[5.0.0-11|5.0.0-X]], the total combined size of the input data must be <=0x2800. | | When handling this command, Process9 allocates a 0x2800-byte heap buffer, then copies the 4 FCRAM input buffers to this heap buffer without checking the sizes at all(only the buffers with non-zero sizes are copied). Starting with [[5.0.0-11|5.0.0-X]], the total combined size of the input data must be <=0x2800. | ||
| ARM9 code execution | | ARM9 code execution |