Hacking What was patched in 5.4.0 exactly?

[Deleted User]

So, I've been looking at the libwiiu source code (the stuff which you can compile to get the payload, which then runs on the Wii U), and I was wondering what parts of that code were patched? Can someone give me a technical rundown?

 

[Deleted User]

The kernel exploit itself wasn't patched until 5.5, all 5.4 did was update the browser's webkit version to a newer one which blocked the userspace browser exploit we were using. If you want to know how the kernel exploit was blocked look in 5.5.

No silly! What I mean is the proper code and OSFatals and OSDrivers and buffer overflows and all that shit.

 

[FaTaL_ErRoR]

Nintendo didn't patch anything. the update in webkit from 536.288 to 536.30 made all the repairs. https://www.mail-archive.com/[email protected]/msg51726.html
Specifically the read after free portion. Nothing real specific on exclusively patching anything at all. Just a simple update, that is why the webkit being used is so far behind. It enables the nintendo people to simply update things to get rid of them.

 

[Deleted User]

Okay, I think this question is more targeted at devs imo.

I'll go ahead and just rephrase the question. "What did Nintendo exactly patch in the webkit?"

 

[FaTaL_ErRoR]

You don't need a "dev" to answer.
https://bugs.webkit.org/show_bug.cgi?id=106244
+
Nintendo didn't patch anything at all. They just updated the version of webkit they were using.
Specifically what was patched in the webkit is in that changelog.
I think all the source for the exploit is on wiiubrew. Or on mario's github.
What are you looking for?
New exploit running the old exploit? It's not gonna happen that entire area is patched.
Good place to hunt for exploits in need of a little work to use...https://www.exploit-db.com/

 

[Deleted User]

You don't need a "dev" to answer.
https://bugs.webkit.org/show_bug.cgi?id=106244
+
Nintendo didn't patch anything at all. They just updated the version of webkit they were using.
Specifically what was patched in the webkit is in that changelog.
I think all the source for the exploit is on wiiubrew. Or on mario's github.
What are you looking for?
New exploit running the old exploit? It's not gonna happen that entire area is patched.
Good place to hunt for exploits in need of a little work to use...https://www.exploit-db.com/

Thanks for the info. I just wanted to see how the new webkit handled the old code.