possible ARM11 kernel hack on 10.5

Discussion in '3DS - Homebrew Development and Emulators' started by aliaspider, Mar 7, 2016.

  1. aliaspider
    OP

    aliaspider GBAtemp Fan

    Member
    334
    616
    Apr 14, 2015
    this is a sort of an updated version of memchunkhax2.

    I've only tested this successfully on a 10.5.30 emunand (using the 2.50-11 firm), while this is a very good sign, it is still not enough to confirm that the hack is valid.

    It would be great if others with a system on at least 10.4 sysnand and access to the homebrew launcher can test this.

    also, it probably won't work on a new 3DS, so this test is for o3DS only currently.
    making it work for the new 3DS should be trivial though if this test proves to be successful.

    Code:
    https://github.com/aliaspider/svchax


    it should either hang or print out "success", along with the firmware version.
    it might not work the first time, so just reboot and launch it again.

    Edit: thank you everyone for testing it, it was confirmed working on o3DS running 10.4 to 10.6, support for n3DS will be added soon.

    to get support for more firmware versions and for the n3ds, I would need some people with a cfw to install and run the attached svchax_pagedump.cia, it will output a file named tp_<NEW or OLD>_<FW version>.bin

    the output depends only on the firmware.bin used with the cfw, and only dumps on the 9.3 firmware and up are needed.

    status:
    o3DS: (DONE)
    2.48-3 : tp_OLD_0x02300300.bin (DONE)
    2.49-0 : tp_OLD_0x02310000.bin (DONE)
    2.50-1 : tp_OLD_0x02320100.bin (DONE)
    2.50-7 : tp_OLD_0x02320700.bin (DONE)
    2.50-9 : tp_OLD_0x02320900.bin (DONE)
    2.50-11 : tp_OLD_0x02320B00.bin (DONE)

    n3DS: (DONE)
    2.48-3 : tp_NEW_0x02300300.bin (DONE)
    2.49-0 : tp_NEW_0x02310000.bin (DONE)
    2.50-1 : tp_NEW_0x02320100.bin (DONE)
    2.50-7 : tp_NEW_0x02320700.bin (DONE)
    2.50-9 : tp_NEW_0x02320900.bin (DONE)
    2.50-11 : tp_NEW_0x02320B00.bin (DONE)

    Edit: updated the test file to include n3Ds offsets, hopefully it will work there.
    Edit: all dumps are done, thanks everyone for helping out, all firmwares should be supported now (untested).
     

    Attached Files:

    Last edited by aliaspider, Mar 15, 2016


  2. Phantom64

    Phantom64 Banned

    Banned
    581
    460
    Aug 18, 2015
    Saint Kitts and Nevis
    "Can i install CFW/games/CIAs with this?!!==!=!" Incoming.
    I didn't understand a word of what you said, but it looks great work!
     
  3. uribemaster

    uribemaster GBAtemp Fan

    Member
    305
    83
    Feb 9, 2010
    United States
    My o3ds is on 10.5 will try when i get home from work
     
  4. GalladeGuy

    GalladeGuy Freeze Kirby :3

    Member
    2,579
    2,569
    Oct 28, 2015
    United States
    @aliaspider Need any help? I know C. :)
    My 3DSs:

    New 3DS (JPN) [HACKED] 9.8
    New 3DS (USA) [HACKED] 10.1 Its my sister's, but I can still use it when she isn't looking. ;)
    New 3DS (USA) [CFW] sysNAND: downgraded 9.2/ReiNand emuNAND: 10.6
    3DS (USA) [HACKED] 10.5
    2DS (USA) [CFW] sysNAND: 6.0.0/RXtools emuNAND: 10.6
     
    Last edited by GalladeGuy, Mar 7, 2016
  5. Billy Acuña

    Billy Acuña GBAtemp Addict

    Member
    2,182
    1,282
    Oct 10, 2015
    Mexico
    Actually should work on 10.6 since native firm has not patched in there.
     
    Exavold likes this.
  6. Rinnegatamante

    Rinnegatamante GBAtemp Psycho!

    Member
    3,127
    3,263
    Nov 24, 2014
    Italy
    Bologna
    How many times you had to re-try it to get the hack triggered on your emuNand?
     
  7. GalladeGuy

    GalladeGuy Freeze Kirby :3

    Member
    2,579
    2,569
    Oct 28, 2015
    United States
    I'm testing on 10.6 now.
     
    Filo97 likes this.
  8. Teton

    Teton GBAtemp Regular

    Member
    115
    18
    Feb 13, 2010
    United States
    Paris, France
    jesus christ your code is illisible
     
  9. aliaspider
    OP

    aliaspider GBAtemp Fan

    Member
    334
    616
    Apr 14, 2015
    in theory yes, but the test might not without some modifications.
    I said "at least 10.4" so this includes 10.6 too
    it generally works right away, but sometimes I need to reboot once or twice.
     
  10. aliaspider
    OP

    aliaspider GBAtemp Fan

    Member
    334
    616
    Apr 14, 2015
    yes :D
     
  11. Filo97

    Filo97 Zelda's totally my sister! Not lying!

    Member
    3,637
    1,210
    Oct 8, 2015
    Italy
    Hyrule Castle
    SOON(tm)
     
    Luglige, Argentlan and ArturDat3DS like this.
  12. Rinnegatamante

    Rinnegatamante GBAtemp Psycho!

    Member
    3,127
    3,263
    Nov 24, 2014
    Italy
    Bologna
    Yes since it gives access to svcBackdoor (so it can be basically adapted to memchunkhax/memchunkhax2 PID patching process).
     
  13. Filo97

    Filo97 Zelda's totally my sister! Not lying!

    Member
    3,637
    1,210
    Oct 8, 2015
    Italy
    Hyrule Castle
    when this will be confirmed to work for legit cias, you should implement it into NASA.
     
  14. Rinnegatamante

    Rinnegatamante GBAtemp Psycho!

    Member
    3,127
    3,263
    Nov 24, 2014
    Italy
    Bologna
    Access to svcBackdoor means possibility to install legit cias. sysUpdater is just a legit CIA installer <.<
     
    gnmmarechal and Filo97 like this.
  15. Billy Acuña

    Billy Acuña GBAtemp Addict

    Member
    2,182
    1,282
    Oct 10, 2015
    Mexico
    That's means that a new update of NASA is coming?

    PD. My girlfriend and I love Mirari Nikki :wub:
     
  16. Rinnegatamante

    Rinnegatamante GBAtemp Psycho!

    Member
    3,127
    3,263
    Nov 24, 2014
    Italy
    Bologna
    Anyway @aliaspider : Don't know if the flaw relays on Nintendo patch for memchunkhax2 but i've tried it on a 4.5 sysNand and it always hang the system (tried a couple of times, like 8-9 times).
     
  17. Timthegangsta

    Timthegangsta Advanced Member

    Newcomer
    89
    57
    Sep 19, 2015
    United States
    Testing on 10.6 emunand worked
     
    iAqua likes this.
  18. Xenon Hacks

    Xenon Hacks GBAtemp Guru

    Member
    7,056
    3,371
    Nov 13, 2014
    United States
    damn gbatemp back at it again with the memchunkhax2
     
    Emulator, s0r00t, Tony_93 and 19 others like this.
  19. GalladeGuy

    GalladeGuy Freeze Kirby :3

    Member
    2,579
    2,569
    Oct 28, 2015
    United States
    @aliaspider How does this work? I thought you can't call svcBackdoor without special permissions.
     
  20. Filo97

    Filo97 Zelda's totally my sister! Not lying!

    Member
    3,637
    1,210
    Oct 8, 2015
    Italy
    Hyrule Castle
    memchunkhax3!