In memory of Ben “bushing” Byer, who passed away on Monday, February 8th, 2016.

Difference between revisions of "4.2rev04"

From WiiBrew
Jump to navigation Jump to search
(→‎Changes: the thing that gets casted in IOCTL 2 is the register number)
(→‎Changes: concrete explanation of the SDI bug)
Line 37: Line 37:
 
** In Japan, IOS9, [[IOS57]], and [[IOS61]] were not updated, instead being updated in 4.3.
 
** In Japan, IOS9, [[IOS57]], and [[IOS61]] were not updated, instead being updated in 4.3.
 
** The function used to verify pointers in the kernel seems to have been updated to take the process ID as a parameter instead of determining it automatically from the current thread. The function that required this change is not known.
 
** The function used to verify pointers in the kernel seems to have been updated to take the process ID as a parameter instead of determining it automatically from the current thread. The function that required this change is not known.
** [[:/dev/sdio|SDI]]'s IOCTL 2 (read SD Host Controller register) was updated to cast the register number to a short. It is unclear how this would be a threat, since it does not allow memory to be rewritten, but a similar issue may have also been fixed in IOCTL 1 (write register).
+
** A bug was fixed in [[:/dev/sdio|SDI]] where the read and write IOCTLs used an int for the register index as opposed to a short. This allowed any memory accessible by SDI to be leaked to or rewritten by the [[Broadway]], and may have been used by the [[HackMii Installer]].
 
* Updated [[EULA]] in E and K regions.
 
* Updated [[EULA]] in E and K regions.
  
 
{{Navbox system menu versions}}
 
{{Navbox system menu versions}}

Revision as of 06:23, 18 May 2022

4.2rev04 update
WiiDrawing.png
Date history
Release dateUSA Flag.png June 22, 2010

JAP Flag.png June 22, 2010

EUR Flag.png June 22, 2010

KOR Flag.png June 22, 2010
System
New IOSIOS80
CDN-added IOSIOS58
CDN-updated IOSIOS9, IOS12, IOS13, IOS14, IOS15, IOS17, IOS21, IOS28, IOS31, IOS33, IOS34, IOS35, IOS36, IOS37, IOS38, IOS55, IOS56, IOS57, IOS61
Links
Wiimpersonator log (U)
Wiimpersonator log (E)
Wiimpersonator log (J)
Wiimpersonator log (K)
Version History
Preceded by4.2rev03
Major revision4.2
Succeeded by4.3


The 4.2rev04 update was a batch IOS update released shortly before 4.3, much like 3.4rev02. It provided various enhancements to IOSes in addition to blocking homebrew. IOSP, ES, and SDI were updated to versions built on March 1, 2010.

Changes

  • IOS9 now has a build tag
    • This version of IOS9 was released in Japan in 4.3
    • IOS21 still has this patch
  • Several IOSes have been replaced with copies of other IOSes
  • Added IOS80 to prepare for 4.3.
  • ES now creates /wfs on startup, although it is not used.
  • Homebrew fixes
    • Fixed HackMii Installer Userland+Syscall IOS exploit in all IOSes (including IOS58, which was previously not on NUS)
    • ES_AddTitleFinish now checks signatures
    • In Japan, IOS9, IOS57, and IOS61 were not updated, instead being updated in 4.3.
    • The function used to verify pointers in the kernel seems to have been updated to take the process ID as a parameter instead of determining it automatically from the current thread. The function that required this change is not known.
    • A bug was fixed in SDI where the read and write IOCTLs used an int for the register index as opposed to a short. This allowed any memory accessible by SDI to be leaked to or rewritten by the Broadway, and may have been used by the HackMii Installer.
  • Updated EULA in E and K regions.