Hacking Sad, unfinished port of an ELF loader.

Onion_Knight · Feb 9, 2016

So the elfloader is working for me...however, the elfexample doesn't compile correctly...

josamilu · Feb 9, 2016

Onion_Knight said:
So the elfloader is working for me...however, the elfexample doesn't compile correctly...

Please try the Hello World example I compiled. The elfloader just quits if it can't find the payload so we don't know if it really works. http://josamilu.de/wiiu/boot.elf

SonyUSA · Feb 9, 2016

I can't get the loader to compile or I would try it P:

brienj · Feb 9, 2016

josamilu said:
Please try the Hello World example I compiled. The elfloader just quits if it can't find the payload so we don't know if it really works. http://josamilu.de/wiiu/boot.elf

I finally tested this, and I am using your elf file, but I was also getting the "leaddr fails" error. I've fixed that error, but now I get a "leaddr response 200". I'll have to look at this some more later.

bonx · Feb 9, 2016

brienj said:
I finally tested this, and I am using your elf file, but I was also getting the "leaddr fails" error. I've fixed that error, but now I get a "leaddr response 200". I'll have to look at this some more later.

Leaddr response 200 is in html everthing loaded successfull. Correct me if im wrong

brienj · Feb 9, 2016

bonx said:
Leaddr response 200 is in html everthing loaded successfull. Correct me if im wrong

That's what I thought, so either it did work, and the example elf I downloaded isn't compiled correctly, or something else is wrong, because nothing happened, except that message on the screen.

eliboa · Feb 9, 2016

MrRean said:
I committed a possible fix. Redownload the github branch and try again.

I tested it. No more errors from cURL lib but a beautiful freeze on white screen. it looks like the issue is beyond the downloading part.
I'll try to debug it later.

Onion_Knight · Feb 9, 2016

brienj said:
I finally tested this, and I am using your elf file, but I was also getting the "leaddr fails" error. I've fixed that error, but now I get a "leaddr response 200". I'll have to look at this some more later.

bonx said:
Leaddr response 200 is in html everthing loaded successfull. Correct me if im wrong

brienj said:
That's what I thought, so either it did work, and the example elf I downloaded isn't compiled correctly, or something else is wrong, because nothing happened, except that message on the screen.

If you read the source code, his message isn't clear there, Its actually an error on anything that ISN'T a HTTP 200 OK msg. I've gotten it to work and download the elf. if you really want to see whats occuring there, I suggest you do the following

Code:

  int resp = 404;
   curl_easy_getinfo(curl_handle, CURLINFO_RESPONSE_CODE, &resp);
   if(resp != 200){
     char msg[128];
     __os_snprintf(msg,128, "URL: %s\nResponse Code: %d", buf, resp);
     OSFatal(msg);
   }

Here's mine compiled into an mp4. Just save your boot.elf in the same directoy with the mp4 and the index.html and it will properly fetch your elf. There are some issues with example elf, it doesn't load so I don' t know if its the elf loader or the elf. I'll keep going through the code till I get it worked out and than I'll provide working source and a working example.

EDIT: As for what IS Occurring is here, its pretty clear. Your 90% likely getting a 404 File Not Found error. The best way to fix this, is figure out where its actually requesting the file. You can look at your apache logs, or what I usually do is watch the traffic with wireshark on my server. That way I can see the request itself come in. I've found that using the php script can have some issues with elf resolution if you don't know where to put your files. So if you aren't running apached or famliar with it, the mp4 will be easier for you. To test, I ran my tests with mp4 and that index.html and a boot.elf with pythons simple http server and it worked every time to find and download the file.

NWPlayer123 · Feb 9, 2016

Onion_Knight said:
If you read the source code, his message isn't clear there, Its actually an error on anything that ISN'T a HTTP 200 OK msg. I've gotten it to work and download the elf. if you really want to see whats occuring there, I suggest you do the following

Code:

char msg[64]; __os_sprintf(msg, 64, "Error: %s\nHTTP Response: %d", buf, resp); OSFatal(msg);

Here's mine compiled into an mp4. Just save your boot.elf in the same directoy with the mp4 and the index.html and it will properly fetch your elf. There are some issues with example elf, it doesn't load so I don' t know if its the elf loader or the elf. I'll keep going through the code till I get it worked out and than I'll provide working source and a working example.

EDIT: As for what IS Occurring is here, its pretty clear. Your 90% likely getting a 404 File Not Found error. The best way to fix this, is figure out where its actually requesting the file. You can look at your apache logs, or what I usually do is watch the traffic with wireshark on my server. That way I can see the request itself come in. I've found that using the php script can have some issues with elf resolution if you don't know where to put your files. So if you aren't running apached or famliar with it, the mp4 will be easier for you. To test, I ran my tests with mp4 and that index.html and a boot.elf with pythons simple http server and it worked every time to find and download the file.

It's probably the ELF loader, specifically the ROP, you'd need to refind the ROP address in memory from yellows8's stuff, I'll attempt that for 550 after I sleep, I rewrote everything up to ROP and it works perfectly so you just need to setup the last part, copying and executing. The ELF is self contained (IE all addresses are within the blob) and the load_elf_image or w/e copies the 4 defined hardcoded functions from coreinit (OSDynLoad_Acquire and FindExport, OSFatal, and __os_snprintf) to the last tiny section of MEM1 (that's what the 0xF5FFFFEC is) which the ELF then uses when it sets up, so it isn't a problem with the ELF.

Onion_Knight · Feb 9, 2016

NWPlayer123 said:
It's probably the ELF loader, specifically the ROP, you'd need to refind the ROP address in memory from yellows8's stuff, I'll attempt that for 550 after I sleep, I rewrote everything up to ROP and it works perfectly so you just need to setup the last part, copying and executing. The ELF is self contained (IE all addresses are within the blob) and the load_elf_image or w/e copies the 4 defined hardcoded functions from coreinit (OSDynLoad_Acquire and FindExport, OSFatal, and __os_snprintf) to the last tiny section of MEM1 (that's what the 0xF5FFFFEC is) which the ELF then uses when it sets up, so it isn't a problem with the ELF.

Yeah, I confirmed that last night when I verified the handle coreinit. once that was verified, all the other offsets were good. I'm also up to the at this point, but I'm off to work in few minutes. So either way, someone will have it done soon.

brienj · Feb 9, 2016

Onion_Knight said:
If you read the source code, his message isn't clear there, Its actually an error on anything that ISN'T a HTTP 200 OK msg. I've gotten it to work and download the elf. if you really want to see whats occuring there, I suggest you do the following

Code:

int resp = 404; curl_easy_getinfo(curl_handle, CURLINFO_RESPONSE_CODE, &resp); if(resp != 200){ char msg[128]; __os_snprintf(msg,128, "URL: %s\nResponse Code: %d", buf, resp); OSFatal(msg); }

Here's mine compiled into an mp4. Just save your boot.elf in the same directoy with the mp4 and the index.html and it will properly fetch your elf. There are some issues with example elf, it doesn't load so I don' t know if its the elf loader or the elf. I'll keep going through the code till I get it worked out and than I'll provide working source and a working example.

EDIT: As for what IS Occurring is here, its pretty clear. Your 90% likely getting a 404 File Not Found error. The best way to fix this, is figure out where its actually requesting the file. You can look at your apache logs, or what I usually do is watch the traffic with wireshark on my server. That way I can see the request itself come in. I've found that using the php script can have some issues with elf resolution if you don't know where to put your files. So if you aren't running apached or famliar with it, the mp4 will be easier for you. To test, I ran my tests with mp4 and that index.html and a boot.elf with pythons simple http server and it worked every time to find and download the file.

Edit: After further testing and adding the code to display the actual error message, it was indeed a file not found error. I found out I did not have an elf file MIME type configured in my web server, I'm a DERP. But now, it seems to load the boot.elf file, but then the screen is just white, like the elf didn't load correctly. No errors, since it was finding the elf file now, it just hangs after loading it. At this point, I don't know if it is the loader or the elf file. I used the elf file that josamilu provided. As long as that is definitely a good elf file for 5.5 firmware, then the loader is not loading it at the correct address, or so I assume. I guess I will try to compile another elf file, and if that doesn't work, I'll wait until someone can confirm that josamilu's elf file is indeed a good elf file or not. Then I will know where the problem is.

SonyUSA · Feb 10, 2016

Bump! Anyone got this working yet? :3

emuman100 · Feb 10, 2016

This is what I love to see! Thank you to the OP, Onion Knight, and others for contributing!

Onion_Knight · Feb 10, 2016

SonyUSA said:
Bump! Anyone got this working yet? :3

Didn't do any coding yesterday. Hopefully I get a chance to work on it today.

Micael · Feb 10, 2016

If it elf loader works, we would run loadiine too in 5.5?

tomman321 · Feb 10, 2016

Micael said:
If it elf loader works, we would run loadiine too in 5.5?

I asked NWPlayer123 about that, and she said that Loadiine on 5.5.1 won't work until the IOSU exploit is released.

drewl · Feb 10, 2016

tomman321 said:
I asked NWPlayer123 about that, and she said that Loadiine on 5.5.1 won't work until the IOSU exploit is released.

nonsense, nothing to do with iosu, the devs don't want make loadiine at 55+. Why? many reasons: the promised iosu, other possible hacks, laziness)) I'm sure is possible make loadiine for 55+ a couple of hours, just need good dev.

DeslotlCL · Feb 10, 2016

so basically the elf loader is a way to load homebrew from the sd instead of using the web browser? (though you still need to use the browser)

josamilu · Feb 10, 2016

I will be back tomorrow and will then look further into the elf loader. Also I don't think that there is a problem with the elf file, but I will compile it again and see if there are any differences.

DespyCL said:
so basically the elf loader is a way to load homebrew from the sd instead of using the web browser? (through you still need to use the browser)

Atm the elf loader loads the payload from a Webserver, but it i'm sure that it can also be loaded from SD with a bit of rewriting.

The Real Jdbye · Feb 10, 2016

drewl said:
nonsense, nothing to do with iosu, the devs don't want make loadiine at 55+. Why? many reasons: the promised iosu, other possible hacks, laziness)) I'm sure is possible make loadiine for 55+ a couple of hours, just need good dev.

Um. There is no public kernel exploit for 5.5. Loadiine can't happen without a kernel exploit.
IOSU is a (superior) alternative to that which will give more access so proper USB loaders will be possible.
So yes, it has a lot to do with IOSU.

Hacking Sad, unfinished port of an ELF loader.

Well-Known Member

Well-Known Member

We're all mad here

Trying to avoid getting cancer

Member

Trying to avoid getting cancer

Well-Known Member

Well-Known Member

Attachments

Well-Known Member

Attachments

Well-Known Member

Trying to avoid getting cancer

We're all mad here

Well-Known Member

Well-Known Member

Member

Well-Known Member

Member

GBAtemp's scalie trash

Well-Known Member

*is birb*

Similar threads

Popular threads in this forum

is birb