11.8.0-41

The Old3DS+New3DS 11.8.0-41 system update was released on July 30, 2018. This Old3DS+New3DS update was released for the following regions: USA, EUR, JPN, CHN, KOR, and TWN.

Security flaws fixed: <fill this in manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>.

Change-log

Official USA change-log:

Further improvements to overall system stability and other minor adjustments have been made to enhance the user experience

System Titles

NATIVE_FIRM

Process9

Actual code changed in Process9.

pxi:am9 command 0x6d0184 was added, see AMPXI:ExportTicketWrapped

The anti-downgrade list was updated (versions bumped and new titles were added, such as TWL_FIRM).

Kernel11

3 functions were updated, besides the descriptor parsing func (which had the version value updated):

svcControlProcessMemory: At the start, this was added: if (Addr0==NULL || ((Type==MEMOP_MAP || Type==MEMOP_UNMAP) && Addr1==NULL)) return 0xD8E007F6;
svcConnectToPort: The string comparison func was removed and is now inlined.
The SlabHeap object allocator func will now panic if the ptr it would have returned is NULL.

KIPs

No changes.

AM

New am:net command 0x8290184 was added, see AMNet:ExportTicketWrapped. This is used by nim.

Friends

fpdver version string bumped to 0xC

nim

Added 2 new strings in the codebin: "X-Authentication-Key" and "X-Authentication-Data".

Now uses AMNet:ExportTicketWrapped during code related to downloading contents(?) (function at 0x143B9C; its caller at 0x123ABC uses amnet:Begin/ResumeImportContent)

If ExportTicketWrapped succeeded, then the new http headers are passed: "X-Authentication-Key" set to base64(wrapped_aes_key) and "X-Authentication-Data" set to base64(crypted_ticket).

Server-side changes

When 11.8.0-41 launched, the X-Authentication headers were not required; however, if they were indeed "voluntarily" sent, unsigned tickets would still have resulted in the download being blocked.

On 2018-8-9, at approximately the later half of 13h GMT, ticket-less downloads (of contents as well as TMDs) started being blocked for a small number of titles, mainly 1st and 2nd party (but not their entirety: list as of 2018-8-11)

The selection of affected titles appears to be manually maintained, and it is speculated (but not readily provable) that contractual limitations may influence Nintendo's ability to implement this change without consent of the original developers, hence the still very limited number of affected titles.

At a similiar time on 2018-8-22, this restriction started being enforced for all 3DS commercial applications (titleID 00040000-*).

11.8.0-41

Contents