397 lines
12 KiB
C
397 lines
12 KiB
C
|
/*
|
||
|
|
* This file is part of Luma3DS
|
||
|
|
* Copyright (C) 2016-2017 Aurora Wright, TuxSH
|
||
|
|
*
|
||
|
|
* This program is free software: you can redistribute it and/or modify
|
||
|
|
* it under the terms of the GNU General Public License as published by
|
||
|
|
* the Free Software Foundation, either version 3 of the License, or
|
||
|
|
* (at your option) any later version.
|
||
|
|
*
|
||
|
|
* This program is distributed in the hope that it will be useful,
|
||
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
|
|
* GNU General Public License for more details.
|
||
|
|
*
|
||
|
|
* You should have received a copy of the GNU General Public License
|
||
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||
|
|
*
|
||
|
|
* Additional Terms 7.b and 7.c of GPLv3 apply to this file:
|
||
|
|
* * Requiring preservation of specified reasonable legal notices or
|
||
|
|
* author attributions in that material or in the Appropriate Legal
|
||
|
|
* Notices displayed by works containing it.
|
||
|
|
* * Prohibiting misrepresentation of the origin of that material,
|
||
|
|
* or requiring that modified versions of such material be marked in
|
||
|
|
* reasonable ways as different from the original version.
|
||
|
|
*/
|
||
|
|
|
||
|
|
/* This file was entirely written by fincs */
|
||
|
|
|
||
|
|
#include <3ds.h>
|
||
|
|
#include "hbloader.h"
|
||
|
|
#include "3dsx.h"
|
||
|
|
#include "menu.h"
|
||
|
|
#include "csvc.h"
|
||
|
|
#include "memory.h"
|
||
|
|
#include "exheader.h"
|
||
|
|
|
||
|
|
#define MAP_BASE 0x10000000
|
||
|
|
|
||
|
|
static const char serviceList[32][8] =
|
||
|
|
{
|
||
|
|
"APT:U",
|
||
|
|
"ac:u",
|
||
|
|
"am:net",
|
||
|
|
"boss:P",
|
||
|
|
"cam:u",
|
||
|
|
"cfg:nor",
|
||
|
|
"cfg:u",
|
||
|
|
"csnd:SND",
|
||
|
|
"dsp::DSP",
|
||
|
|
"fs:USER",
|
||
|
|
"gsp::Lcd",
|
||
|
|
"gsp::Gpu",
|
||
|
|
"hid:USER",
|
||
|
|
"http:C",
|
||
|
|
"ir:USER",
|
||
|
|
"ir:rst",
|
||
|
|
"ir:u",
|
||
|
|
"ldr:ro",
|
||
|
|
"mic:u",
|
||
|
|
"ndm:u",
|
||
|
|
"news:s",
|
||
|
|
"nim:s",
|
||
|
|
"ns:s",
|
||
|
|
"nwm::UDS",
|
||
|
|
"nwm::EXT",
|
||
|
|
"ptm:u",
|
||
|
|
"ptm:sysm",
|
||
|
|
"pxi:dev",
|
||
|
|
"qtm:u",
|
||
|
|
"soc:U",
|
||
|
|
"ssl:C",
|
||
|
|
"y2r:u",
|
||
|
|
};
|
||
|
|
|
||
|
|
static const u64 dependencyList[] =
|
||
|
|
{
|
||
|
|
0x0004013000002402LL, //ac
|
||
|
|
0x0004013000001502LL, //am
|
||
|
|
0x0004013000003402LL, //boss
|
||
|
|
0x0004013000001602LL, //camera
|
||
|
|
0x0004013000001702LL, //cfg
|
||
|
|
0x0004013000001802LL, //codec
|
||
|
|
0x0004013000002702LL, //csnd
|
||
|
|
0x0004013000002802LL, //dlp
|
||
|
|
0x0004013000001A02LL, //dsp
|
||
|
|
0x0004013000001B02LL, //gpio
|
||
|
|
0x0004013000001C02LL, //gsp
|
||
|
|
0x0004013000001D02LL, //hid
|
||
|
|
0x0004013000002902LL, //http
|
||
|
|
0x0004013000001E02LL, //i2c
|
||
|
|
0x0004013000003302LL, //ir
|
||
|
|
0x0004013000001F02LL, //mcu
|
||
|
|
0x0004013000002002LL, //mic
|
||
|
|
0x0004013000002B02LL, //ndm
|
||
|
|
0x0004013000003502LL, //news
|
||
|
|
0x0004013000002C02LL, //nim
|
||
|
|
0x0004013000002D02LL, //nwm
|
||
|
|
0x0004013000002102LL, //pdn
|
||
|
|
0x0004013000003102LL, //ps
|
||
|
|
0x0004013000002202LL, //ptm
|
||
|
|
0x0004013000003702LL, //ro
|
||
|
|
0x0004013000002E02LL, //socket
|
||
|
|
0x0004013000002302LL, //spi
|
||
|
|
0x0004013000002F02LL, //ssl
|
||
|
|
};
|
||
|
|
|
||
|
|
static const u32 kernelCaps[] =
|
||
|
|
{
|
||
|
|
0xFC00022C, // Kernel release version: 8.0 (necessary for using the new linear mapping)
|
||
|
|
0xFF81FF50, // RW static mapping: 0x1FF50000
|
||
|
|
0xFF81FF58, // RW static mapping: 0x1FF58000
|
||
|
|
0xFF81FF70, // RW static mapping: 0x1FF70000
|
||
|
|
0xFF81FF78, // RW static mapping: 0x1FF78000
|
||
|
|
0xFF91F000, // RO static mapping: 0x1F000000
|
||
|
|
0xFF91F600, // RO static mapping: 0x1F600000
|
||
|
|
0xFF002101, // Exflags: APPLICATION memtype + "Allow debug" + "Access core2"
|
||
|
|
0xFE000200, // Handle table size: 0x200
|
||
|
|
};
|
||
|
|
|
||
|
|
static inline void assertSuccess(Result res)
|
||
|
|
{
|
||
|
|
if(R_FAILED(res))
|
||
|
|
svcBreak(USERBREAK_PANIC);
|
||
|
|
}
|
||
|
|
|
||
|
|
static MyThread hbldrThread;
|
||
|
|
static u8 ALIGN(8) hbldrThreadStack[THREAD_STACK_SIZE];
|
||
|
|
static u16 hbldrTarget[PATH_MAX+1];
|
||
|
|
|
||
|
|
MyThread *hbldrCreateThread(void)
|
||
|
|
{
|
||
|
|
assertSuccess(MyThread_Create(&hbldrThread, hbldrThreadMain, hbldrThreadStack, THREAD_STACK_SIZE, 0x18, CORE_SYSTEM));
|
||
|
|
return &hbldrThread;
|
||
|
|
}
|
||
|
|
|
||
|
|
static inline void error(u32* cmdbuf, Result rc)
|
||
|
|
{
|
||
|
|
cmdbuf[0] = IPC_MakeHeader(0, 1, 0);
|
||
|
|
cmdbuf[1] = rc;
|
||
|
|
}
|
||
|
|
|
||
|
|
static u16 *u16_strncpy(u16 *dest, const u16 *src, u32 size)
|
||
|
|
{
|
||
|
|
u32 i;
|
||
|
|
for (i = 0; i < size && src[i] != 0; i++)
|
||
|
|
dest[i] = src[i];
|
||
|
|
while (i < size)
|
||
|
|
dest[i++] = 0;
|
||
|
|
|
||
|
|
return dest;
|
||
|
|
}
|
||
|
|
|
||
|
|
static void HBLDR_HandleCommands(void)
|
||
|
|
{
|
||
|
|
Result res;
|
||
|
|
IFile file;
|
||
|
|
u32 *cmdbuf = getThreadCommandBuffer();
|
||
|
|
switch (cmdbuf[0] >> 16)
|
||
|
|
{
|
||
|
|
case 1:
|
||
|
|
{
|
||
|
|
if (cmdbuf[0] != IPC_MakeHeader(1, 6, 0))
|
||
|
|
{
|
||
|
|
error(cmdbuf, 0xD9001830);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
|
||
|
|
u32 baseAddr = cmdbuf[1];
|
||
|
|
u32 flags = cmdbuf[2] & 0xF00;
|
||
|
|
u64 tid = (u64)cmdbuf[3] | ((u64)cmdbuf[4]<<32);
|
||
|
|
char name[8];
|
||
|
|
memcpy(name, &cmdbuf[5], sizeof(name));
|
||
|
|
|
||
|
|
if (hbldrTarget[0] == 0)
|
||
|
|
{
|
||
|
|
u16_strncpy(hbldrTarget, u"/boot.3dsx", PATH_MAX);
|
||
|
|
ldrArgvBuf[0] = 1;
|
||
|
|
strncpy((char*)&ldrArgvBuf[1], "sdmc:/boot.3dsx", sizeof(ldrArgvBuf)-4);
|
||
|
|
}
|
||
|
|
|
||
|
|
res = IFile_Open(&file, ARCHIVE_SDMC, fsMakePath(PATH_EMPTY, ""), fsMakePath(PATH_UTF16, hbldrTarget), FS_OPEN_READ);
|
||
|
|
hbldrTarget[0] = 0;
|
||
|
|
if (R_FAILED(res))
|
||
|
|
{
|
||
|
|
error(cmdbuf, res);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
|
||
|
|
u32 totalSize = 0;
|
||
|
|
res = Ldr_Get3dsxSize(&totalSize, &file);
|
||
|
|
if (R_FAILED(res))
|
||
|
|
{
|
||
|
|
IFile_Close(&file);
|
||
|
|
error(cmdbuf, res);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
|
||
|
|
u32 tmp = 0;
|
||
|
|
res = svcControlMemoryEx(&tmp, MAP_BASE, 0, totalSize, MEMOP_ALLOC | flags, MEMPERM_READ | MEMPERM_WRITE, true);
|
||
|
|
if (R_FAILED(res))
|
||
|
|
{
|
||
|
|
IFile_Close(&file);
|
||
|
|
error(cmdbuf, res);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
|
||
|
|
Handle hCodeset = Ldr_CodesetFrom3dsx(name, (u32*)MAP_BASE, baseAddr, &file, tid);
|
||
|
|
IFile_Close(&file);
|
||
|
|
|
||
|
|
if (!hCodeset)
|
||
|
|
{
|
||
|
|
svcControlMemory(&tmp, MAP_BASE, 0, totalSize, MEMOP_FREE, 0);
|
||
|
|
error(cmdbuf, MAKERESULT(RL_PERMANENT, RS_INTERNAL, RM_LDR, RD_NOT_FOUND));
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
|
||
|
|
cmdbuf[0] = IPC_MakeHeader(1, 1, 2);
|
||
|
|
cmdbuf[1] = 0;
|
||
|
|
cmdbuf[2] = IPC_Desc_MoveHandles(1);
|
||
|
|
cmdbuf[3] = hCodeset;
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
case 2:
|
||
|
|
{
|
||
|
|
if (cmdbuf[0] != IPC_MakeHeader(2, 0, 2) || (cmdbuf[1] & 0x3FFF) != 0x0002)
|
||
|
|
{
|
||
|
|
error(cmdbuf, 0xD9001830);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
ssize_t units = utf8_to_utf16(hbldrTarget, (const uint8_t*)cmdbuf[2], PATH_MAX);
|
||
|
|
if (units < 0 || units > PATH_MAX)
|
||
|
|
{
|
||
|
|
hbldrTarget[0] = 0;
|
||
|
|
error(cmdbuf, 0xD9001830);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
|
||
|
|
hbldrTarget[units] = 0;
|
||
|
|
cmdbuf[0] = IPC_MakeHeader(2, 1, 0);
|
||
|
|
cmdbuf[1] = 0;
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
case 3:
|
||
|
|
{
|
||
|
|
if (cmdbuf[0] != IPC_MakeHeader(3, 0, 2) || (cmdbuf[1] & 0x3FFF) != (0x2 | (1<<10)))
|
||
|
|
{
|
||
|
|
error(cmdbuf, 0xD9001830);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
// No need to do anything - the kernel already copied the data to our buffer
|
||
|
|
cmdbuf[0] = IPC_MakeHeader(3, 1, 0);
|
||
|
|
cmdbuf[1] = 0;
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
case 4:
|
||
|
|
{
|
||
|
|
if (cmdbuf[0] != IPC_MakeHeader(4, 0, 2) || cmdbuf[1] != IPC_Desc_Buffer(sizeof(exheader_header), IPC_BUFFER_RW))
|
||
|
|
{
|
||
|
|
error(cmdbuf, 0xD9001830);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
|
||
|
|
// Perform ExHeader patches
|
||
|
|
exheader_header* exh = (exheader_header*)cmdbuf[2];
|
||
|
|
u32 stacksize = 4096; // 3dsx/libctru don't require anymore than this
|
||
|
|
memcpy(exh->codesetinfo.name, "3dsx_app", 8);
|
||
|
|
memcpy(exh->codesetinfo.stacksize, &stacksize, 4);
|
||
|
|
memset(&exh->deplist, 0, sizeof(exh->deplist));
|
||
|
|
memcpy(exh->deplist.programid, dependencyList, sizeof(dependencyList));
|
||
|
|
|
||
|
|
exheader_arm11systemlocalcaps* localcaps0 = &exh->arm11systemlocalcaps;
|
||
|
|
exheader_arm11systemlocalcaps* localcaps1 = &exh->accessdesc.arm11systemlocalcaps;
|
||
|
|
localcaps0->flags[0] = 0x00;
|
||
|
|
localcaps1->flags[0] = 0x00;
|
||
|
|
localcaps0->flags[1] = 0x01;
|
||
|
|
localcaps1->flags[1] = 0x01;
|
||
|
|
localcaps0->flags[2] = 0x04;
|
||
|
|
localcaps1->flags[2] = 0x05;
|
||
|
|
localcaps0->priority = 0x30;
|
||
|
|
localcaps1->priority = 0;
|
||
|
|
memset(localcaps0->resourcelimitdescriptor, 0, 0x10);
|
||
|
|
memset(localcaps1->resourcelimitdescriptor, 0, 0x10);
|
||
|
|
memset(localcaps0->storageinfo.accessinfo, 0xFF, 7);
|
||
|
|
memset(localcaps1->storageinfo.accessinfo, 0xFF, 7);
|
||
|
|
memcpy(localcaps0->serviceaccesscontrol, serviceList, sizeof(serviceList));
|
||
|
|
memcpy(localcaps1->serviceaccesscontrol, serviceList, sizeof(serviceList));
|
||
|
|
memset(localcaps0->serviceaccesscontrol+0x20, 0, 2);
|
||
|
|
memset(localcaps1->serviceaccesscontrol+0x20, 0, 2);
|
||
|
|
localcaps0->resourcelimitcategory = 0;
|
||
|
|
localcaps1->resourcelimitcategory = 0;
|
||
|
|
|
||
|
|
exheader_arm11kernelcapabilities* kcaps0 = &exh->arm11kernelcaps;
|
||
|
|
exheader_arm11kernelcapabilities* kcaps1 = &exh->accessdesc.arm11kernelcaps;
|
||
|
|
memset(kcaps0->descriptors, 0xFF, sizeof(kcaps0->descriptors));
|
||
|
|
memset(kcaps1->descriptors, 0xFF, sizeof(kcaps1->descriptors));
|
||
|
|
memcpy(kcaps0->descriptors, kernelCaps, sizeof(kernelCaps));
|
||
|
|
memcpy(kcaps1->descriptors, kernelCaps, sizeof(kernelCaps));
|
||
|
|
|
||
|
|
u64 lastdep = sizeof(dependencyList)/8;
|
||
|
|
if (osGetFirmVersion() >= SYSTEM_VERSION(2,50,0)) // 9.6+ FIRM
|
||
|
|
{
|
||
|
|
exh->deplist.programid[lastdep++] = 0x0004013000004002ULL; // nfc
|
||
|
|
strncpy((char*)&localcaps0->serviceaccesscontrol[0x20], "nfc:u", 8);
|
||
|
|
strncpy((char*)&localcaps1->serviceaccesscontrol[0x20], "nfc:u", 8);
|
||
|
|
s64 dummy = 0;
|
||
|
|
bool isN3DS = svcGetSystemInfo(&dummy, 0x10001, 0) == 0;
|
||
|
|
if (isN3DS)
|
||
|
|
{
|
||
|
|
exh->deplist.programid[lastdep++] = 0x0004013020004102ULL; // mvd
|
||
|
|
strncpy((char*)&localcaps0->serviceaccesscontrol[0x21], "mvd:STD", 8);
|
||
|
|
strncpy((char*)&localcaps1->serviceaccesscontrol[0x21], "mvd:STD", 8);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
cmdbuf[0] = IPC_MakeHeader(4, 1, 2);
|
||
|
|
cmdbuf[1] = 0;
|
||
|
|
cmdbuf[2] = IPC_Desc_Buffer(sizeof(exheader_header), IPC_BUFFER_RW);
|
||
|
|
cmdbuf[3] = (u32)exh;
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
default:
|
||
|
|
{
|
||
|
|
error(cmdbuf, 0xD900182F);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
void hbldrThreadMain(void)
|
||
|
|
{
|
||
|
|
Handle handles[2];
|
||
|
|
Handle serverHandle, clientHandle, sessionHandle = 0;
|
||
|
|
|
||
|
|
u32 replyTarget = 0;
|
||
|
|
s32 index;
|
||
|
|
|
||
|
|
char ipcBuf[PATH_MAX+1];
|
||
|
|
u32* bufPtrs = getThreadStaticBuffers();
|
||
|
|
memset(bufPtrs, 0, 16*2*4);
|
||
|
|
bufPtrs[0] = IPC_Desc_StaticBuffer(sizeof(ipcBuf), 0);
|
||
|
|
bufPtrs[1] = (u32)ipcBuf;
|
||
|
|
bufPtrs[2] = IPC_Desc_StaticBuffer(sizeof(ldrArgvBuf), 1);
|
||
|
|
bufPtrs[3] = (u32)ldrArgvBuf;
|
||
|
|
|
||
|
|
Result res;
|
||
|
|
u32 *cmdbuf = getThreadCommandBuffer();
|
||
|
|
|
||
|
|
assertSuccess(svcCreatePort(&serverHandle, &clientHandle, "hb:ldr", 1));
|
||
|
|
|
||
|
|
do
|
||
|
|
{
|
||
|
|
handles[0] = serverHandle;
|
||
|
|
handles[1] = sessionHandle;
|
||
|
|
|
||
|
|
if(replyTarget == 0) // k11
|
||
|
|
cmdbuf[0] = 0xFFFF0000;
|
||
|
|
res = svcReplyAndReceive(&index, handles, sessionHandle == 0 ? 1 : 2, replyTarget);
|
||
|
|
|
||
|
|
if(R_FAILED(res))
|
||
|
|
{
|
||
|
|
if((u32)res == 0xC920181A) // session closed by remote
|
||
|
|
{
|
||
|
|
svcCloseHandle(sessionHandle);
|
||
|
|
sessionHandle = 0;
|
||
|
|
replyTarget = 0;
|
||
|
|
}
|
||
|
|
|
||
|
|
else
|
||
|
|
svcBreak(USERBREAK_PANIC);
|
||
|
|
}
|
||
|
|
|
||
|
|
else
|
||
|
|
{
|
||
|
|
if(index == 0)
|
||
|
|
{
|
||
|
|
Handle session;
|
||
|
|
assertSuccess(svcAcceptSession(&session, serverHandle));
|
||
|
|
|
||
|
|
if(sessionHandle == 0)
|
||
|
|
sessionHandle = session;
|
||
|
|
else
|
||
|
|
svcCloseHandle(session);
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
HBLDR_HandleCommands();
|
||
|
|
replyTarget = sessionHandle;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
while(!terminationRequest);
|
||
|
|
|
||
|
|
svcCloseHandle(sessionHandle);
|
||
|
|
svcCloseHandle(clientHandle);
|
||
|
|
svcCloseHandle(serverHandle);
|
||
|
|
}
|