Homebrew Possible 3DS Discovery Found

[Voyambar]

Okay so I may have found something that could lead to a new exploit. I had my good friend @CallmeBerto try it out on his 3DS and this was his result (the same as mine):

Steps needed to reproduce:


THIS ONLY WORKS ON A NEW MODEL 3DS SYSTEM


#1: Open up your Web Browser and make sure "Request Mobile Sites" is checked
#2: Go to YouTube
#3: Search up any short video (30 seconds would be a good time)
#4: Open up the media player (happens when you visit the video page and press play)
#5: Turn on 3D (Red/Blue config) and turn on the slider up to full if its not already like that
#6: Turn on CC (Closed Captioning)
#7: Make the video loop
#8: Play the video
#9: Wait for the video to end and start replaying
#10: You have what I found

 

[arceus]

crashes cant make exploits iirc

 

[bobmcjr]

crashes cant make exploits iirc

This is a handled crash, so yeah, it's likely nothing.

 

[Voyambar]

This is a handled crash, so yeah, it's likely nothing.

crashes cant make exploits iirc

I said "possible" not that it is one. And also I challenge that "handled crash" because according to Jdbye who is another good friend of mine. He says svcBreak wasn't used so it was a handled crash but its hard to say because of the app trying to stop the crash but not well.

 

[Voyambar]

UPDATE #1

I have just confirmed that it works on the New Nintendo 2DS XL. To try it on a N2DS XL please follow these instructions:

#1: Open up your Web Browser and make sure "Request Mobile Sites" is checked
#2: Go to YouTube
#3: Search up any short video (30 seconds would be a good time)
#4: Open up the media player (happens when you visit the video page and press play)
#5: Turn on CC (Closed Captioning) [If it doesn't work do auto-generated]
#6: Make the video loop
#7: Play the video
#8: Wait for the video to end and start replaying
#9: You have what I found

 

[arceus]

UPDATE #1

I have just confirmed that it works on the New Nintendo 2DS XL. To try it on a N2DS XL please follow these instructions:

#1: Open up your Web Browser and make sure "Request Mobile Sites" is checked
#2: Go to YouTube
#3: Search up any short video (30 seconds would be a good time)
#4: Open up the media player (happens when you visit the video page and press play)
#5: Turn on CC (Closed Captioning) [If it doesn't work do auto-generated]
#6: Make the video loop
#7: Play the video
#8: Wait for the video to end and start replaying
#9: You have what I found

who wants to learn how to crash a 3ds lmfao

 

[Voyambar]

who wants to learn how to crash a 3ds lmfao

Lol I never said it was a vulnerability or an exploit just that it could possibly be one. I'm not like everybody else and jump to the conclusion that it is one.

 

[ghjfdtg]

FAR beeing 0 says everything already. Useless NULL pointer deref. I'm surprised this is trying to handle crashes in userland which is very unusual.

 

[Voyambar]

I'm surprised this is trying to handle crashes in userland which is very unusual.

Unusual indeed

 

[ThoD]

Not all crashes can be turned into exploits. Also, even assuming this is exploitable, it still wouldn't be any better or more reliable than the current exploits we have, making it all pretty pointless.

 

[Tony_93]

Not all crashes can be turned into exploits. Also, even assuming this is exploitable, it still wouldn't be any better or more reliable than the current exploits we have, making it all pretty pointless.

You know what's pointless? People who know nothing about exploits going around pretending they know jack shit about it...

 

[ThoD]

You know what's pointless? People who know nothing about exploits going around pretending they know jack shit about it...

Actually confused as to who you are talking about honestly

 

[Deleted-481927]

Okay so I may have found something that could lead to a new exploit. I had my good friend @CallmeBerto try it out on his 3DS and this was his result (the same as mine):

Steps needed to reproduce:


THIS ONLY WORKS ON A NEW MODEL 3DS SYSTEM


#1: Open up your Web Browser and make sure "Request Mobile Sites" is checked
#2: Go to YouTube
#3: Search up any short video (30 seconds would be a good time)
#4: Open up the media player (happens when you visit the video page and press play)
#5: Turn on 3D (Red/Blue config) and turn on the slider up to full if its not already like that
#6: Turn on CC (Closed Captioning)
#7: Make the video loop
#8: Play the video
#9: Wait for the video to end and start replaying
#10: You have what I found

im assuming this wouldnt work on 2ds etc

im a new 3ds owner but even if this could lead to an exploit the 3d would surely make it limited?

 

[GalladeGuy]

So this is the "big discovery" you claimed you found during the Smash Ultimate stream on Friday? What ever happened to not jumping to conclusions?

 

[Voyambar]

So this is the "big discovery" you claimed you found during the Smash Ultimate stream on Friday? What ever happened to not jumping to conclusions?

Eh it was just excitement but still didn't jump to conclusions. Its a possible discovery as the title states.

 

[Flopglop]

The interesting thing is that this seems to bypass the luma3ds crash handler

Edit: the Rosalina menu still shows up

 

[snobbysteven]

Regardless if this handled crash will turn into an exploit or not. Good job on the find!

 

[Voyambar]

The interesting thing is that this seems to bypass the luma3ds crash handler

Edit: the Rosalina menu still shows up

Well a HAL Panic as shown in the picture is what the 3DS calls a panic internally. Its also a safeguard that in this case appears to be bypassed. There is no known case of a HAL Panic on the 3DS nor is any info available online for it.

--------------------- MERGED ---------------------------

I kind of wish I could find out how to unhide that "work" directory that was revealed by this. It looks like the directory comes from the NAND.

im assuming this wouldnt work on 2ds etc

im a new 3ds owner but even if this could lead to an exploit the 3d would surely make it limited?

I did testing and actually it does work on the 2DS just with slightly modified steps. You can see it in the threadmarks.

 

[chaoskagami]

This is literally just an assertion failure that causes the program to abort. It's not even a crash.

 

[Flopglop]

im assuming this wouldnt work on 2ds etc

im a new 3ds owner but even if this could lead to an exploit the 3d would surely make it limited?

You don't really need the 3d on, as long as you have subtitles on when it loops it will crash