Changes

|-

|-

| memchunkhax

| memchunkhax

| The kernel originally did not validate the data stored in the FCRAM kernel heap [[Memchunkhdrletsusestupidabbreviations|memchunk-headers]] for free-memory at all. Exploiting this requires raw R/W access to these memchunk-headers, like physical-memory access with gspwn.

| The kernel originally did not validate the data stored in the FCRAM kernel heap [[MemchunkhdrPleaseCategorizeAndNameMeProperly|memchunk-headers]] for free-memory at all. Exploiting this requires raw R/W access to these memchunk-headers, like physical-memory access with gspwn.

There are ''multiple'' ways to exploit this, but the end-result for most of these is the same: overwrite code in AXIWRAM via the 0xEFF00000/0xDFF00000 kernel virtual-memory mapping.

There are ''multiple'' ways to exploit this, but the end-result for most of these is the same: overwrite code in AXIWRAM via the 0xEFF00000/0xDFF00000 kernel virtual-memory mapping.