Line 114:
Line 114:
| IOS_CreateMessageQueue does not verify the address {{Anchor|ios-mqaddr}}
| IOS_CreateMessageQueue does not verify the address {{Anchor|ios-mqaddr}}
| The IOS_CreateMessageQueue syscall does not call the verifyRange function that many syscalls call, despite taking a pointer and causing data to be written to it. Because data can be written there with IOS_SendMessage, this allows for arbitrary writes.
| The IOS_CreateMessageQueue syscall does not call the verifyRange function that many syscalls call, despite taking a pointer and causing data to be written to it. Because data can be written there with IOS_SendMessage, this allows for arbitrary writes.
β
| Arbitrary writes to IOS memory (possibly used in [[HackMii Installer]] 0.7-1.0)
+
| Arbitrary writes to IOS memory (possibly used in [[HackMii Installer]] 0.5-0.6)
| 4.3
| 4.3
| {{SortableMonth}}
| {{SortableMonth}}