Search results

Page title matches

• Physical Memory
  | <code>/dev/null</code> - memory that reads as zero and ignores writes. Used by [[SceMsif]]. | <code>/dev/null (E)</code> - memory that reads as zero and ignores writes. Not accessible by ARM NS.
  31 KB (4,305 words) - 19:50, 22 February 2024
• Memory Card
  Memory Card can be accessed with [[SceMsif]] module. It has the following [[Partit | 0x8 || exfat || 0x800000 || (mc size - 0x800000) || ux0 || Memory Card contents
  4 KB (742 words) - 08:27, 15 August 2023
• Virtual Memory
  For this memory map, these were the contents of the registers: | 0x407C404A (Random effective memory every time a process is started)
  37 KB (4,938 words) - 05:51, 2 September 2023
• Memory budget
  A memory budget is an area of memory reserved by the system for a specific usage. | physically continuous memory
  3 KB (294 words) - 10:45, 2 February 2023
• Memory System
  This page documents Kermit memory system internals. Any device connected to the memory system, such as ARM cores, DMA controllers, LPDDR2...
  9 KB (1,367 words) - 17:27, 25 November 2023

Page text matches

• Memory budget
  A memory budget is an area of memory reserved by the system for a specific usage. | physically continuous memory
  3 KB (294 words) - 10:45, 2 February 2023
• GPU
  === Memory context === ...it to the GPU with the same virtual address. However there are also other memory areas mapped to the GPU:
  1 KB (180 words) - 20:41, 28 October 2015
• Memory Card
  Memory Card can be accessed with [[SceMsif]] module. It has the following [[Partit | 0x8 || exfat || 0x800000 || (mc size - 0x800000) || ux0 || Memory Card contents
  4 KB (742 words) - 08:27, 15 August 2023
• Id.dat
  <code>ux0:id.dat</code> is the file that links a memory card to an account. ...gs (in the [[Registry]]), then the Vita will prompt the user to format the memory card or not use it. Even if the values of the PSN id in the system is faked
  1 KB (213 words) - 22:11, 1 May 2023
• SceVeneziaImage
  == VENEZIA memory model == Venezia works with memory by using physical addresses directly
  5 KB (845 words) - 21:40, 1 May 2023
• SceSblPcffBin
  ...b>P</b>SP <b>C</b>ompatibility <b>F</b>lash <b>F</b>iles i.e. PSPEmu Flash memory files.
  385 bytes (56 words) - 05:25, 18 January 2024
• SceDeci4pRDrfp
  This kernel module is responsible of providing access to the DevKit memory card to PC via FS Driver and Neighborhood.
  396 bytes (58 words) - 20:56, 1 May 2023
• First Loader
  For all First Loader dumped at [[Physical Memory|physical address]] 0x5C000, anything relevant is before the bss segment.
  507 bytes (84 words) - 21:15, 8 August 2023
• PSP Emulator
  == PSP Memory Layout == | Main Memory
  2 KB (281 words) - 10:04, 14 April 2020
• SceSdstor
  * [[Memory_Card|Memory card]] | mcd || 2 || memory card || Memory Card
  7 KB (914 words) - 11:43, 13 November 2023
• SceAudioin
  //! Not enough memory Writes value to memory.
  6 KB (709 words) - 20:44, 1 May 2023
• TrustZone
  ...10, kernel process exceptions invoke a TrustZone call to initiate a kernel memory snapshot and encrypt it for use in a coredump. ...cure World. However, once a Secure World memory dump is achieved through a memory leak exploit, one can see that the ARM secure kernel lacks most of the secu
  6 KB (860 words) - 00:18, 19 January 2024
• SceKernelBusError
  Get bus error log buffer from shared memory.
  848 bytes (93 words) - 00:19, 1 April 2024
• SceCodecEngineWrapper
  ...ng="C">int sceCodecEngineUnmapUserVAtoPAForDriver(SceUID pid, SceUIntVAddr memory, void **paddr);</source> ...elVAtoUserVAForDriver(SceUID pid, SceUIntVAddr kernelMemory, SceUIntVAddr *memory);</source>
  12 KB (1,176 words) - 10:07, 25 August 2023
• Kernel Boot Loader
  ...irtual Memory Addressing at this point. A couple of things are loaded into memory. <code>kprx_auth_sm.self</code> from the [[SLB2]] [[eMMC]] partition is loc ...R, MVBAR, TTBR0, TTBR1, and other configurations. It then turns on virtual memory and maps the defined regions for everything defined above. Other cores wait
  6 KB (918 words) - 04:43, 1 May 2023
• Ernie Firmware
  == Memory Space == ...id out into <code>0x800</code> sized blocks. The bottom X blocks are flash memory that can be programmed. Some blocks are not programmable on Ernie. Most key
  7 KB (1,051 words) - 21:22, 6 January 2024
• Secure Modules
  It has a memory pool allocated on stack. It is filled with structures for command handlers. ...valid (>= 0x40 and < 0x1000), copies command buffer into private [[CMeP]] memory and executes an appropriate command handler.
  3 KB (398 words) - 19:17, 20 September 2023
• EMMC
  == memory mapping for Samsung's eMMC == ...00H: 0x3A3C00000 bytes (16GB: 4GB as internal storage and 12GB as emulated memory card)
  6 KB (793 words) - 01:13, 23 February 2024
• Molecule
  ...loit and tools were completed on 01/09/2013 and for the first time, kernel memory was revealed. After a week of dumping the large kernel codebase (there were ...://www.youtube.com/watch?v=w1GICNXTOhM&list=UUNIviKniCqbDShbAvldEOtA First memory dump]</ref> [[UVLoader]] was developed and in a couple of weeks, the first
  5 KB (815 words) - 23:37, 16 July 2023
• Cmep
  See [[Physical_Memory#Cmep registers]] and [[Cmep registers]] for physical memory mapping. ...eems to be used to ask Cmep to remove all allocated resources (like shared memory address, loaded Secure Module, etc), and probably power off or reset it.
  7 KB (1,020 words) - 23:43, 16 July 2023
• Memory System
  This page documents Kermit memory system internals. Any device connected to the memory system, such as ARM cores, DMA controllers, LPDDR2...
  9 KB (1,367 words) - 17:27, 25 November 2023
• Partitions
  | Internal Flash / Memory Card | [[Memory Card]]
  5 KB (746 words) - 11:49, 1 August 2023
• SceVideoExport
  Embedded Memory with Playback and Recording (EMPR) is the name of a system that supports co ...nt Manager Assistant]] program on PC that allows to transfer videos to the Memory Card or internal storage.
  5 KB (599 words) - 21:40, 1 May 2023
• Kernel
  === Memory Domains === ...SMAP" that crashes the kernel when kernel stack pointer points to usermode memory. Additionally all non-code pages are marked as "execute never" (XN) in both
  14 KB (1,710 words) - 17:03, 27 July 2023
• SceSblApplierForKernel
  ...y (decrypt extract and parse) a Certified File (usually a SELF or SPRX) to memory.
  2 KB (143 words) - 21:27, 1 May 2023
• Venezia
  = Memory Map = | Private/Protected Memory. Standard Physical Memory Region.
  7 KB (930 words) - 15:16, 10 November 2023
• I2C Registers
  | SceHdmi ADV7533 Packet Memory I2C Map Address
  1 KB (181 words) - 21:03, 10 January 2024
• Psp2kerndmp
  ...kernel_exception collects some fault information and writes them to shared memory.
  1 KB (230 words) - 22:13, 1 May 2023
• ReadAs
  It can be used to read/write data anywhere on the mapped memory. It is suspected to be a DMAC4 interface. ...currently reverse-engineered code and is not referenced in any accessible memory map.
  3 KB (537 words) - 21:58, 1 May 2023
• SceSDbgSdio
  Frees memory blocks.
  2 KB (229 words) - 21:26, 1 May 2023
• Syscalls
  ...the slot number to a buffer in the module information structure in kernel memory and increments the top pointer. ...This is done at the time the user library starts, not when it is loaded to memory).
  4 KB (680 words) - 04:12, 1 May 2023
• Caches
  ...10 r3p1-50rel0] L2 cache (Cache ID Register = 0x410000C7) is is [[Physical Memory|mapped]] to <code>0x1A002000</code>.
  1 KB (194 words) - 07:38, 13 January 2024
• SceMsif
  Certainly means Memory stick interface. // execute READ_ATRB memory access command 0x24
  11 KB (1,442 words) - 22:22, 8 June 2023
• Main Processor
  | p15, #0, r0, c0, c1, #4 || ID_MMFR0 || N/A || Memory Model Feature Register 0 | p15, #0, r0, c0, c1, #5 || ID_MMFR1 || N/A || Memory Model Feature Register 1
  14 KB (1,837 words) - 07:18, 13 January 2024
• Suspend
  ...built and the physical address of the context buffer is written to Syscon memory at offset <code>0xC</code> i.e it calls [[SceSyscon#sceSysconWriteForDriver The physical address of the context buffer is read from Syscon memory at offset <code>0xC</code> i.e second_loader calls <code>sceSysconRead(0xC,
  12 KB (1,871 words) - 04:36, 19 June 2022
• Linux Driver Status
  | Memory Card | [[Memory Card]] [https://github.com/xerpi/vita-libbaremetal/blob/master/libbaremetal
  5 KB (626 words) - 13:45, 8 January 2022
• PSM
  Inside this module is the only documented case of executable memory being allocated by a user process.
  3 KB (349 words) - 15:27, 23 September 2017
• Security
  ...bootrom (First Loader). This is where root keys are seeded and wiped from memory. second_loader.enp is loaded from the eMMC (SLB2 partition) or SD Card (if [[Secure Kernel]] has ability to freely access cmep and ARM memory, so a hack would allow dumping SMs i.e keys. It so has complete control ove
  6 KB (1,004 words) - 08:27, 4 August 2023
• Cmep Key Ring Base
  0x200-0x203: AES decryption-only keys (for memory buffers). 0x210-0x217: General purpose keys (for memory buffers).
  15 KB (2,128 words) - 09:51, 18 March 2024
• ARM Debugger Interface
  ...documentation/ddi0461/b/Programmers-Model/Register-summary CoreSight Trace Memory Controller]
  3 KB (470 words) - 12:00, 10 January 2024
• SceSblFwLoader
  ...contained in [[SceSblPcbcBin]] (PSP Compatibility Boot Code), PSPEmu Flash memory files contained in [[SceSblPcffBin]] (PSP Compatibility Flash Files) as wel
  3 KB (340 words) - 22:18, 17 January 2024
• SceShellSvc
  ...ever it can also be accessed directly with [[SceShellSvc]] functions. This memory can be accesed from any part of the system and is managed by [[SceShell]].
  10 KB (1,131 words) - 21:31, 1 May 2023
• Kermit
  * The DevKit carries 1 GiB of LPDDR2 DRAM (usually referred to as the "main memory"). The retail unit and TestKit carry 512 MiB of LPDDR2 DRAM. == LPDDR2 DRAM (main memory) ==
  20 KB (2,948 words) - 00:25, 1 February 2024
• File Management
  ...o takes place at this level. All user-facing devices including [[eMMC]], [[Memory Card]], and [[Game Card]] are encrypted at the block level. Partitions are
  3 KB (454 words) - 06:33, 15 November 2023
• SCECAF
  ...at PA 0x58000000 on retail and 0x60000000 on DevKit (maybe only in DevKit Memory Size mode)
  3 KB (428 words) - 22:13, 1 May 2023
• SceHdmi
  | 0.940-3.740.011 || 0x854EEB78 || Gets VIC and Audio Config and setups memory.
  4 KB (486 words) - 21:03, 1 May 2023
• Title Updates
  * allocate memory (which could fail).
  4 KB (586 words) - 19:27, 3 April 2018
• Dbgp protocol
  Read from the memory of a process. Write to the memory of a process.
  11 KB (1,472 words) - 21:59, 1 November 2023
• SceKernelDmacMgr
  Direct memory access control Manager
  6 KB (680 words) - 08:18, 15 August 2023
• DMAC
  The DMA controllers can be used to perform memory copy operations in the background without CPU overhead. To this end, a DMA tag list may be written to memory first then sent to the DMAC which will execute all the tags in the list one
  17 KB (2,399 words) - 14:48, 29 September 2023
• Ernie Secure
  ...Communication Session Key''' the same way as cMeP and registers it in its memory. Ernie provides raw storage in its Data Flash memory, named NVS (Non-Volatile Storage) by SCE. The PS Vita OS partitions some of
  9 KB (1,287 words) - 21:59, 10 January 2024
• SceSysmem Types
  /** @name Memory types that can be specified with sceKernelAllocMemBlock * @brief User readable / writable LPDDR2 memory
  68 KB (8,827 words) - 19:22, 13 February 2024
• NSKBL
  ...<code>0x51000000</code>-<code>0x51FFFFFF</code> where NSKBL resides. This memory range is mapped as RWX and seems to be the only RWX mapping in the Non-Secu ...ng (which is 16KiB-sized) is turned into a "heap" as part of this process. Memory allocation needs are serviced from this space using <code>sceKernelSysrootA
  25 KB (3,006 words) - 17:42, 30 March 2024
• Cmep registers
  20 (0x0010 0000): Clearable | Master keyring can target memory. ...0000): Clearable | ?WriteByBigmacAllowed?. ?Locked keyring can target Cmep memory.?
  18 KB (2,382 words) - 02:14, 27 October 2023
• Grover
  ...nce the MMU is turned on, most of the RAM is identity-mapped as RWX Device memory in Domain 1, with the following exceptions: * DRAM is identity mapped as Device memory, but also mapped as cacheable memory at vaddress 0xC0000000
  12 KB (1,872 words) - 18:32, 8 January 2024
• SceExcpmgr
  ...interrupts masked and DACR set to 0xFFFF0000 (to prevent access to certain memory domains). Any other syscall numbers are invalid. ...MONCALL_SET_SHARED_MEMORY</code> - Sets the physical address of the shared memory area for Secure kernel
  39 KB (5,033 words) - 19:23, 25 March 2024
• Pervasive
  | Memory Stick InterFace. See [[MSIF Registers]]. | Scratch Pad Memory 32KiB
  27 KB (3,223 words) - 00:05, 1 February 2024
• Bugs
  SceKernelLibraryInfo.libname is a pointer to kernel memory. See [[SceKernelModulemgr#Types]]. ...nter always has bit 0 as 1, so if the entry point is the last 4-bytes of a memory page, then the next check fails and returns 0x80020006.
  23 KB (3,419 words) - 11:41, 8 February 2024
• System Software
  ...m will refuse to accept a memory card locked to another account unless the memory card is reformatted.<ref>http://i.imgur.com/4nsEl.jpg</ref> * Video support within the [Browser] has been added (a memory card is required; some videos are not supported).
  36 KB (5,184 words) - 10:38, 14 January 2024
• KBL Param
  ...RAM size (0x20000000 on retail and testkit, 0x40000000 on DevKit in DevKit Memory Size mode) As you can see this way is not convenient to know in memory on which byte corresponds which bit flag, so instead we can use a formula t
  33 KB (4,849 words) - 19:57, 30 March 2024
• Virtual Memory
  For this memory map, these were the contents of the registers: | 0x407C404A (Random effective memory every time a process is started)
  37 KB (4,938 words) - 05:51, 2 September 2023
• Physical Memory
  | <code>/dev/null</code> - memory that reads as zero and ignores writes. Used by [[SceMsif]]. | <code>/dev/null (E)</code> - memory that reads as zero and ignores writes. Not accessible by ARM NS.
  31 KB (4,305 words) - 19:50, 22 February 2024
• SceSdif
  ...(internal storage), gamecard MMC, SD/micro SD card, Wlan/Bt SDIO devices. Memory Card is handled by [[SceMsif]] instead as it uses an authentication securit During initialization step Sdif driver allocates couple of memory blocks. This happens when 'module_start' function is called, inside 'init'
  27 KB (3,838 words) - 17:14, 20 January 2024
• SceFios2Kernel
  Close dir fd and free param memory.
  14 KB (1,447 words) - 08:59, 25 May 2023
• Vulnerabilities
  ...s/detail?id=63866</ref> using type confusion to treat a double as a string memory address and length. The other is a type confusion exploit CVE-2010-1807 on ...ritten outside the "m_storage->m_vector[]" buffer, which leads to the heap memory corruption.
  59 KB (8,666 words) - 18:39, 13 October 2023
• PRX
  ...ped modules, SceModuleInfo structure is located in ".sceModuleInfo.rodata" memory block. ...|| SCE_MODULE_ATTR_CANT_STOP || Resident module i.e. module that stays in memory til poweroff. Such a module cannot be unloaded.
  38 KB (5,257 words) - 14:21, 25 December 2023
• Applications
  ...However, there is no way to mount actual partitions like <code>ux0</code> (memory card).
  6 KB (969 words) - 16:52, 10 October 2022
• SceSblPostSsMgr
  // If read_from_nvs is false, it reads expire_date from SceSblPostSsMgr memory, else it reads NVS and queries act_sm. Returns true if a1 and a2 are identical to some values in memory.
  26 KB (2,666 words) - 23:28, 16 July 2023
• Secure Modules Functions
  ...sed when passing large buffers of data to [[CMeP]]. The reason is that the memory manager in kernel could allocate contiguous virtual addresses that correspo ...[SLB2]] partition. The raw (encrypted) SELF is stored in ARM [[TrustZone]] memory. It is placed there by an early bootloader.
  53 KB (7,975 words) - 21:55, 10 January 2024
• SceProcessmgr
  void* KPLS_slots[0x20]; // Pointer to memory allocated for KPLS slots of this process - [3] is "display_info" (size mayb Cleans process memory in range with pseudo random values. Both address and length must be aligned
  55 KB (6,358 words) - 05:12, 13 February 2024
• SceCompat
  ...r 1 (black screen) or 2 (suspend Pervasive, slow down CPU, wipe act.dat in memory)
  16 KB (1,841 words) - 22:26, 16 July 2023
• Secure Kernel
  ...s to a small stub at 0x008000E0. This small stub clears everything in cMeP memory in the region 0x00800100-0x8080FF0. Unknown why last 0x10 bytes are not cle ...cePervasiveResetReg +0x190 to enable re-writing the mask for the protected memory (keyring)
  34 KB (5,112 words) - 18:25, 17 September 2023
• Updater
  ...tem partitions. The flags argument found in R1 (second argument) as a user memory pointer offset 0x10.
  12 KB (1,734 words) - 06:42, 22 January 2023
• SceKernelModulemgr
  ...he SELF decryption process. SceKernelModulemgr loads the ELF programs into memory along with linking with NIDs and relocation of ELF in position independent void *vaddr; //!< address in memory
  91 KB (11,099 words) - 06:25, 11 November 2023
• SceLowio
  Copies buf to memory. Sets a2 and a3 in memory.
  56 KB (6,898 words) - 22:15, 5 February 2024
• Boot Sequence
  Upon suspension, context is written to memory and a syscon command is issued to save the context pointer as well as other
  12 KB (1,757 words) - 08:24, 9 August 2023
• Second Loader
  If resume, ARM exception vectors are copied from TZ memory at 0x40000000 to 0x1F000000 (0x0 alias on ARM). If coldboot, kernel_boot_lo
  15 KB (2,034 words) - 09:37, 14 January 2022
• Ernie
  * A) configstorage data is read from SceSyscon memory * A) configstorage data is read from SceSyscon memory
  40 KB (5,023 words) - 22:21, 5 January 2024
• SceLibKernel
  Reads 4 bytes from thread memory. Each thread owns a private 2048bytes memory region with specific data (?TLS?). The end of this region is pointed by the
  54 KB (5,657 words) - 20:43, 2 April 2024
• SceSysStateMgr
  Same as [[SceSysStateMgr#load|load]], but module is loaded in TOOL memory instead. Requires DIP switch 210.
  23 KB (3,187 words) - 21:33, 1 May 2023
• SceKernelThreadMgr
  * The lightweight mutex work area must be reserved in the user memory space. ...eKernelLwMutexWork structure must be arranged with 8-byte alignment on the memory.
  209 KB (25,319 words) - 15:45, 1 April 2024
• SceKernelIntrMgr
  * @retval (>0) UID of the syscall table memory block
  30 KB (3,151 words) - 05:56, 13 October 2023
• SceAppMgr
  SceAppMgrEvent *firstCustomEvent; // 0x290 - heap memory address of size 0x14 (the 5 following events on FW 0.990) ...et || one of "big", "game", "sys", "shell", "small", "mini" || App budget (memory allocation size)
  105 KB (12,624 words) - 05:03, 6 December 2023
• SceSyscon
  Executes programming, i.e writes segments to Syscon Flash memory. Sets AffirmativeRertyMode flag in kernel memory. During SceSyscon initialization, AffirmativeRertyMode is enabled by defaul
  110 KB (12,775 words) - 21:59, 4 April 2024
• SceSysmem
  ...es. See [[Virtual Memory]] and [[Physical Memory]] for more details on the memory subsystem. Grows physical memory partition with pbase.
  348 KB (38,144 words) - 05:11, 14 March 2024
• SceSblSsMgr
  ...ine to initialize the Crepo key ring. The Crepo key ring is then cached in memory from the result of decrypt with portability.
  51 KB (5,969 words) - 08:22, 15 August 2023
• SceIofilemgr
  io_scheduler* unk_58; // Removable media (memory card)
  71 KB (8,747 words) - 13:51, 13 November 2023