3DS System Flaws: Difference between revisions
Line 44: | Line 44: | ||
| The ARM11 kernel-mode 0xEFF00000 virtual-mem(size 0x100000) is mapped to phys-mem 0x1FF00000(entire DSP-mem + entire AXIWRAM), with permissions RW-. This is used during ARM11 kernel startup, this never seems to be used after that however. | | The ARM11 kernel-mode 0xEFF00000 virtual-mem(size 0x100000) is mapped to phys-mem 0x1FF00000(entire DSP-mem + entire AXIWRAM), with permissions RW-. This is used during ARM11 kernel startup, this never seems to be used after that however. | ||
| None | | None | ||
|- | |||
| [[SVC|svcStartInterProcessDma]] | |||
| Originally the ARM11-kernel read the input DmaConfig structure directly in kernel-mode(ldr(b/h) instructions), without checking whether the DmaConfig address is readable under userland. This was fixed by copying that structure to the SVC-mode stack, using the ldrbt instruction. | |||
| [[6.0.0-11]] | |||
|- | |- | ||
| [[SVC|svcControlMemory]] Parameter checks | | [[SVC|svcControlMemory]] Parameter checks |