Difference between revisions of "11.8.0-41"

From 3dbrew
Jump to navigation Jump to search
(document where exportticketwrapped is used)
(6 intermediate revisions by 4 users not shown)
Line 10: Line 10:
 
<fill this in (manually) later>
 
<fill this in (manually) later>
  
=== Process9 ===
+
===NATIVE_FIRM===
 +
==== Process9 ====
 
Actual code changed in Process9.
 
Actual code changed in Process9.
  
pxi:am9 command 0x6d0184 was added: [[AMPXI:ExportTicketWrapped]]
+
pxi:am9 command 0x6d0184 was added, see [[AMPXI:ExportTicketWrapped]]
 +
 
 +
The anti-downgrade list was updated (versions bumped and new titles were added, such as TWL_FIRM).
 +
 
 +
====Kernel11====
 +
3 functions were updated, besides the descriptor parsing func (which had the version value updated):
 +
 
 +
* [[SVC|svcControlProcessMemory]]: At the start, this was added: <code>if (Addr0==NULL || ((Type==MEMOP_MAP || Type==MEMOP_UNMAP) && Addr1==NULL)) return 0xD8E007F6;</code>
 +
* [[SVC|svcConnectToPort]]: The string comparison func was removed and is now inlined.
 +
* The SlabHeap object allocator func will now panic if the ptr it would have returned is NULL.
 +
 
 +
====KIPs====
 +
No changes.
  
 
=== AM ===
 
=== AM ===
New am:net command 0x8290184 was added, this just calls the new pxi:am9 command. This is used by nim.
+
New am:net command 0x8290184 was added, see [[AMNet:ExportTicketWrapped]]. This is used by nim.
  
 
=== Friends ===
 
=== Friends ===
Line 24: Line 37:
 
Added 2 new strings in the codebin: "X-Authentication-Key" and "X-Authentication-Data".
 
Added 2 new strings in the codebin: "X-Authentication-Key" and "X-Authentication-Data".
  
Now uses new am:net command 0x8290184 during code related to downloading contents(?) (function at 0x143B9C; its caller at 0x123ABC uses amnet:Begin/ResumeImportContent)
+
Now uses [[AMNet:ExportTicketWrapped]] during code related to downloading contents(?) (function at 0x143B9C; its caller at 0x123ABC uses amnet:Begin/ResumeImportContent)
  
 
If ExportTicketWrapped succeeded, then the new http headers are passed: "X-Authentication-Key" set to base64(wrapped_aes_key) and "X-Authentication-Data" set to base64(crypted_ticket).
 
If ExportTicketWrapped succeeded, then the new http headers are passed: "X-Authentication-Key" set to base64(wrapped_aes_key) and "X-Authentication-Data" set to base64(crypted_ticket).
  
This (when activated server-side) would prevent downloading crypted contents entirely without a valid ticket.
+
==Server-side changes==
 +
When 11.8.0-41 launched, the X-Authentication headers were not required; however, if they were indeed "voluntarily" sent, unsigned tickets would still have resulted in the download being blocked.
 +
 
 +
On 2018-8-9, at approximately the later half of 13h GMT, ticket-less downloads (of [[NCCH|contents]] as well as [[TMD]]s) started being blocked for a small number of titles, mainly 1st and 2nd party (but not their entirety: [https://gbatemp.net/threads/z.514370/page-12#post-8210076 list as of 2018-8-11])
 +
 
 +
The selection of affected titles appears to be manually maintained, and it is speculated (but not readily provable) that contractual limitations may influence Nintendo's ability to implement this change without consent of the original developers, hence the still very limited number of affected titles.
 +
 
 +
At a similiar time on 2018-8-22, this restriction started being enforced for all 3DS commercial applications (titleID 00040000-*).
  
 
==See Also==
 
==See Also==

Revision as of 20:57, 21 December 2020

The Old3DS+New3DS 11.8.0-41 system update was released on July 30, 2018. This Old3DS+New3DS update was released for the following regions: USA, EUR, JPN, CHN, KOR, and TWN.

Security flaws fixed: <fill this in manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>.

Change-log

Official USA change-log:

  • Further improvements to overall system stability and other minor adjustments have been made to enhance the user experience

System Titles

<fill this in (manually) later>

NATIVE_FIRM

Process9

Actual code changed in Process9.

pxi:am9 command 0x6d0184 was added, see AMPXI:ExportTicketWrapped

The anti-downgrade list was updated (versions bumped and new titles were added, such as TWL_FIRM).

Kernel11

3 functions were updated, besides the descriptor parsing func (which had the version value updated):

  • svcControlProcessMemory: At the start, this was added: if (Addr0==NULL || ((Type==MEMOP_MAP || Type==MEMOP_UNMAP) && Addr1==NULL)) return 0xD8E007F6;
  • svcConnectToPort: The string comparison func was removed and is now inlined.
  • The SlabHeap object allocator func will now panic if the ptr it would have returned is NULL.

KIPs

No changes.

AM

New am:net command 0x8290184 was added, see AMNet:ExportTicketWrapped. This is used by nim.

Friends

fpdver version string bumped to 0xC

nim

Added 2 new strings in the codebin: "X-Authentication-Key" and "X-Authentication-Data".

Now uses AMNet:ExportTicketWrapped during code related to downloading contents(?) (function at 0x143B9C; its caller at 0x123ABC uses amnet:Begin/ResumeImportContent)

If ExportTicketWrapped succeeded, then the new http headers are passed: "X-Authentication-Key" set to base64(wrapped_aes_key) and "X-Authentication-Data" set to base64(crypted_ticket).

Server-side changes

When 11.8.0-41 launched, the X-Authentication headers were not required; however, if they were indeed "voluntarily" sent, unsigned tickets would still have resulted in the download being blocked.

On 2018-8-9, at approximately the later half of 13h GMT, ticket-less downloads (of contents as well as TMDs) started being blocked for a small number of titles, mainly 1st and 2nd party (but not their entirety: list as of 2018-8-11)

The selection of affected titles appears to be manually maintained, and it is speculated (but not readily provable) that contractual limitations may influence Nintendo's ability to implement this change without consent of the original developers, hence the still very limited number of affected titles.

At a similiar time on 2018-8-22, this restriction started being enforced for all 3DS commercial applications (titleID 00040000-*).

See Also

System update report(s):