3DS Userland Flaws: Difference between revisions
EvilFlight (talk | contribs) |
EvilFlight (talk | contribs) |
||
| Line 82: | Line 82: | ||
| slackerSnail, 12Me12, incvoid | | slackerSnail, 12Me12, incvoid | ||
Exploited by MrNbaYoh and [[User:Plutooo|plutoo]]. | Exploited by MrNbaYoh and [[User:Plutooo|plutoo]]. | ||
|- | |||
| SmileBASIC 3.x | |||
| Subscripted TIME$/DATE$ allow write access to DATA/BSS | |||
| Utf-16 characters can be assigned to subscripted TIME$/DATE$ interpreter sysvars which results in write-only access to all of DATA and some BSS in userland. | |||
TIME$[0]/DATE$[0] actually point to somewhere in rodata, and an overly large subscript can be used to write well past it and into the aforementioned areas. | |||
| App: 3.6.2 (3.6.0 latest for US/EU, JP appvers. can be downgraded) | |||
| System: [[11.13.0-45]]. | |||
| April 2020 | |||
| February 2020 | |||
| bug publicly documented [https://translate.google.com/translate?sl=auto&tl=en&u=http%3A%2F%2Fsmilebasic.com%2Fdebug%2Farchive%2F here] | |||
Exploited by Zoogie | |||
|- | |- | ||
| The Legend of Zelda: Tri Force Heroes | | The Legend of Zelda: Tri Force Heroes | ||