| Available(normally not accessible due to SVC-access-control).
| Available(normally not accessible due to SVC-access-control).
| No
| No
−
| Backdoor(unsigned int CodeAddress) This calls the specified code in SVC-mode. This is used/accessible by [[FIRM|Process9]].
+
| Backdoor(unsigned int CodeAddress) This is used/accessible by [[FIRM|Process9]].
|-
|-
| 0x7C
| 0x7C
Line 882:
Line 882:
u32 hmm?[2];
u32 hmm?[2];
}
}
+
+
= SVC7B Backdoor =
+
This saves SVC-mode SP+LR on the user-mode stack, then sets the SVC-mode SP to the user-mode SP. This then calls the specified code in SVC-mode. Once the called code returns, this pops the saved SP+LR off the stack for restoring the SVC-mode SP, then returns from the svc7b handler. Note that this svc7b handler does not disable IRQs, if any IRQs/context-switches occur while the SVC-mode SP is set to the user-mode one here, the ARM11-kernel will crash(which hangs the whole ARM11-side system).