Changes

With the original IR hardware the value returned by these registers are always 0x0..0x40 according to the datasheet.

With the original IR hardware the value returned by these registers are always 0x0..0x40 according to the datasheet.

In theory with modified/custom IR hardware it might(?) be possible to trigger a stack-smash with this, enough to overwrite the saved-LR. In theory it might be possible to start full ROP from this(what to do after getting ROP in this context is another matter however).

This fixed the vuln described [[3DS_System_Flaws|here]].

===JPN-only titles===

===JPN-only titles===