6,264
edits
Changes
Jump to navigation
Jump to search
Line 30:
Line 30: − In theory with modified/custom IR hardware it might(?) be possible to trigger a stack-smash with this, enough to overwrite the saved-LR. In theory it might be possible to start full ROP from this(what to do after getting ROP in this context is another matter however).+
→IR sysmodule
With the original IR hardware the value returned by these registers are always 0x0..0x40 according to the datasheet.
With the original IR hardware the value returned by these registers are always 0x0..0x40 according to the datasheet.
This fixed the vuln described [[3DS_System_Flaws|here]].
===JPN-only titles===
===JPN-only titles===