4.0.0 - Revision history

Yls8bot at 00:55, 6 August 2026

2026-08-05T22:55:14Z

← Older revision		Revision as of 02:55, 6 August 2026
Line 42:		Line 42:

	* [[Flog]] was stubbed: official code for launching it was removed from [[qlaunch\|the home menu]], and all code was overwritten with garbage. Thus, even attempts to launch it manually will result in [[Loader services\|loader]] returning error 0xA09.		* [[Flog]] was stubbed: official code for launching it was removed from [[qlaunch\|the home menu]], and all code was overwritten with garbage. Thus, even attempts to launch it manually will result in [[Loader services\|loader]] returning error 0xA09.

			[[NPDM]] changes (besides usual version-bump):
			* usb: Service access: removed spl:. SVC access: added WaitForAddress, SignalToAddress.
			* htc.stub: SVC access: added WaitForAddress, SignalToAddress.
			* boot2.ProdBoot: SVC access: added WaitForAddress, SignalToAddress.
			* settings: SVC access: added WaitForAddress, SignalToAddress.
			* Bus: SVC access: added WaitForAddress, SignalToAddress.
			* bluetooth: SVC access: added WaitForAddress, SignalToAddress.
			* bcat: Service access: removed omm. SVC access: added WaitForAddress, SignalToAddress.
			* friends: SVC access: added WaitForAddress, SignalToAddress.
			* nifm: SVC access: added WaitForAddress, SignalToAddress.
			* ptm: SVC access: added WaitForAddress, SignalToAddress.
			* bsdsocket: SVC access: added WaitForAddress, SignalToAddress.
			* hid: Service access: added erpt:c. SVC access: added WaitForAddress, SignalToAddress.
			* audio: Service access: removed spl:. SVC access: added WaitForAddress, SignalToAddress.
			* LogManager.Prod: SVC access: added WaitForAddress, SignalToAddress.
			* wlan: SVC access: added WaitForAddress, SignalToAddress.
			* ldn: Service access: added set:sys, spl:mig, removed spl:. SVC access: added WaitForAddress, SignalToAddress.
			* nvservices: SVC access: added WaitForAddress, SignalToAddress.
			* pcv: SVC access: added WaitForAddress, SignalToAddress, CreateSharedMemory, MapTransferMemory, UnmapTransferMemory, MapDeviceAddressSpaceByForce, MapDeviceAddressSpaceAligned. Interrupt access: removed 0x02B, 0x061, 0x063, 0x069, 0x06A, 0x0BD, 0x0BE.
			* capmtp: SVC access: added WaitForAddress, SignalToAddress.
			* nvnflinger: KernelCap HandleTableSize: updated HandleTableSize = 0x40 -> 0x50. SVC access: added WaitForAddress, SignalToAddress.
			* pcie: SVC access: added WaitForAddress, SignalToAddress.
			* account: SVC access: added WaitForAddress, SignalToAddress.
			* ns: Service access: added pdm:ntfy. SVC access: added WaitForAddress, SignalToAddress.
			* nfc: Service access: added spl:mig, removed spl:. SVC access: added WaitForAddress, SignalToAddress.
			* psc: SVC access: added WaitForAddress, SignalToAddress.
			* capsrv: Fac.FsAccessFlag updated: set bitmask 0x0000000000000008 (SystemSaveData). Service access: added caps:dc, spl:mig. SVC access: added WaitForAddress, SignalToAddress.
			* am: Service access: added grc:c. SVC access: added WaitForAddress, SignalToAddress.
			* ssl: Service access: added spl:ssl, removed spl:. SVC access: added WaitForAddress, SignalToAddress.
			* nim: SVC access: added WaitForAddress, SignalToAddress.
			* lbl: SVC access: added WaitForAddress, SignalToAddress.
			* btm: SVC access: added WaitForAddress, SignalToAddress.
			* erpt: Service access: added set, csrng. SVC access: added WaitForAddress, SignalToAddress.
			* vi: SVC access: added WaitForAddress, SignalToAddress.
			* pctl: SVC access: added WaitForAddress, SignalToAddress.
			* npns: SVC access: added WaitForAddress, SignalToAddress.
			* eupld: SVC access: added WaitForAddress, SignalToAddress.
			* glue: SVC access: added WaitForAddress, SignalToAddress.
			* eclct: Service access: added vi:m. SVC access: added WaitForAddress, SignalToAddress.
			* es: Acid.Flags updated: 0x1 -> 0x5. Service access: added spl:es, removed spl:. SVC access: added WaitForAddress, SignalToAddress.
			* fatal: SVC access: added WaitForAddress, SignalToAddress.
			* creport: SVC access: added WaitForAddress, SignalToAddress.
			* ro: SVC access: added WaitForAddress, SignalToAddress.
			* sdb: SVC access: added WaitForAddress, SignalToAddress.
			* qlaunch: Fac.SaveDataOwnerInfo added 0100000000001009 (miiEdit) access 0x3 (RW). Service access: added ldn:s, mig:usr. SVC access: added WaitForAddress, SignalToAddress.
			* auth: SVC access: added WaitForAddress, SignalToAddress.
			* cabinet: SVC access: added WaitForAddress, SignalToAddress.
			* controller: SVC access: added WaitForAddress, SignalToAddress.
			* dataErase: Service access: added caps:a. SVC access: added WaitForAddress, SignalToAddress.
			* error: SVC access: added WaitForAddress, SignalToAddress.
			* netConnect: SVC access: added WaitForAddress, SignalToAddress.
			* playerSelect: SVC access: added WaitForAddress, SignalToAddress.
			* swkbd: SVC access: added WaitForAddress, SignalToAddress.
			* miiEdit: SVC access: added WaitForAddress, SignalToAddress.
			* LibAppletWeb: SVC access: added WaitForAddress, SignalToAddress.
			* LibAppletShop: SVC access: added WaitForAddress, SignalToAddress.
			* overlayDisp: SVC access: added WaitForAddress, SignalToAddress.
			* photoViewer: Service access: added mm:u. SVC access: added WaitForAddress, SignalToAddress.
			* LibAppletOff: SVC access: added WaitForAddress, SignalToAddress.
			* LibAppletLns: SVC access: added WaitForAddress, SignalToAddress.
			* LibAppletAuth: SVC access: added WaitForAddress, SignalToAddress.
			* "starter" application: Service access: added nsd:a. SVC access: added WaitForAddress, SignalToAddress.
			* myPage: SVC access: added WaitForAddress, SignalToAddress.
			* maintenance: SVC access: added WaitForAddress, SignalToAddress.

	==Kernel==		==Kernel==

SciresM: /* Kernel */ >

2020-08-25T06:47:44Z

Kernel: >

← Older revision		Revision as of 10:47, 25 August 2020
Line 59:		Line 59:
	** This is used by some services to make sure we can't connect to them from outside a privileged module.		** This is used by some services to make sure we can't connect to them from outside a privileged module.
	* svcReadWriteRegister was updated, now always goes through TZ for both PMC and MC. Whitelist for MC remains the same.		* svcReadWriteRegister was updated, now always goes through TZ for both PMC and MC. Whitelist for MC remains the same.
			* Support was added for loading non-KIP processes into the Secure pool via a flag in SvcCreateProcess.
			** This is used by only for es, to prevent attackers from using GPU DMA to take over the es sysmodule to pirate games.
			** Correspondingly, the KHeapArrange calculation of the secure pool size now has an extra 0x13A000 factored in (to ensure there is enough space for es).

	===FIRM===		===FIRM===

Qlutoo at 20:56, 23 October 2018

2018-10-23T18:56:35Z

← Older revision		Revision as of 22:56, 23 October 2018
Line 52:		Line 52:
	** New MemoryType bit for "JIT allowed".		** New MemoryType bit for "JIT allowed".
	** New MemoryTypes for JitWritable and JitReadOnly.		** New MemoryTypes for JitWritable and JitReadOnly.
	* New synchronization syscalls 0x34, 0x35 added.		* New synchronization syscalls 0x34, 0x35 added: These ones allow implementation of synchronization primitives without a mutex+condvar pair. This is more efficient because when a thread wakes up from a condvar, the mutex is held and needs to perform a syscall to unlock it. If you have N threads blocking on a condvar, you need N-1 syscalls to wake all the threads. With the new syscalls, you can wake up all N with a single syscall.

	* Added new syscall svcDumpInfoNew, but it's stubbed.		* Added new syscall svcDumpInfoNew, but it's stubbed.
	* The linked-list node for KAutoObjects was added to the struct itself instead of being a separate allocation.		* The linked-list node for KAutoObjects was added to the struct itself instead of being a separate allocation.

Hexkyz: /* FIRM */

2018-04-13T17:22:35Z

FIRM

← Older revision		Revision as of 21:22, 13 April 2018
Line 63:		Line 63:

	The package1 entrypoint address specified by BCT was increased by 0x20-bytes, since there's now an additional 0x20-bytes at the start of package1. The additional data is identical to the 0x20-byte block before it.		The package1 entrypoint address specified by BCT was increased by 0x20-bytes, since there's now an additional 0x20-bytes at the start of package1. The additional data is identical to the 0x20-byte block before it.

			In SafeMode Firmware the [[Bus_services\|Bus]], [[PCV_services\|PCV]] and [[PSC_services\|psc]] sysmodules are now bundled with the kernel.

	Sysmodules:		Sysmodules:
Line 71:		Line 73:
	** spl:es was added, supporting crypto commands used by the es sysmodule.		** spl:es was added, supporting crypto commands used by the es sysmodule.
	** spl:fs was added, supporting crypto commands used by the [[Filesystem services\|fs]] FIRM sysmodule.		** spl:fs was added, supporting crypto commands used by the [[Filesystem services\|fs]] FIRM sysmodule.


	====Package1====		====Package1====

Qlutoo: /* Kernel */

2018-01-15T19:53:43Z

Kernel

← Older revision		Revision as of 22:53, 15 January 2018
Line 57:		Line 57:
	* svcGetInfo now exposes the first and last process id for built-in modules.		* svcGetInfo now exposes the first and last process id for built-in modules.
	** This is used by some services to make sure we can't connect to them from outside a privileged module.		** This is used by some services to make sure we can't connect to them from outside a privileged module.
	* svcReadWriteRegister was updated.		* svcReadWriteRegister was updated, now always goes through TZ for both PMC and MC. Whitelist for MC remains the same.

	===FIRM===		===FIRM===

Yellows8: /* Kernel */

2018-01-15T19:31:19Z

Kernel

← Older revision		Revision as of 22:31, 15 January 2018
Line 44:		Line 44:

	==Kernel==		==Kernel==
			* Kernel startup code was updated:
			** A new (unused?) function was added, this is roughly the same as the code which originally directly read a MC register (0x70019050) for [[Memory_layout\|getting]] the DRAM size, except [[SMC]] ReadWriteRegister is used for the read instead.
			** The code which originally read the above register directly was replaced with an inlined version of the above function.

	* All RTTI symbols were removed, can no longer know official name of kernel objects. :(		* All RTTI symbols were removed, can no longer know official name of kernel objects. :(
	* JIT syscalls were added.		* JIT syscalls were added.
Line 53:		Line 57:
	* svcGetInfo now exposes the first and last process id for built-in modules.		* svcGetInfo now exposes the first and last process id for built-in modules.
	** This is used by some services to make sure we can't connect to them from outside a privileged module.		** This is used by some services to make sure we can't connect to them from outside a privileged module.
			* svcReadWriteRegister was updated.

	===FIRM===		===FIRM===

Qlutoo: /* Kernel */

2017-12-24T01:55:01Z

Kernel

← Older revision		Revision as of 04:55, 24 December 2017
Line 51:		Line 51:
	* Added new syscall svcDumpInfoNew, but it's stubbed.		* Added new syscall svcDumpInfoNew, but it's stubbed.
	* The linked-list node for KAutoObjects was added to the struct itself instead of being a separate allocation.		* The linked-list node for KAutoObjects was added to the struct itself instead of being a separate allocation.
			* svcGetInfo now exposes the first and last process id for built-in modules.
			** This is used by some services to make sure we can't connect to them from outside a privileged module.

	===FIRM===		===FIRM===

SciresM: RIP Flog

2017-12-24T01:05:15Z

RIP Flog

← Older revision		Revision as of 04:05, 24 December 2017
Line 40:		Line 40:
	* Every single system title was updated, except for: 0100000000000805("Chinese and Korean dictionaries"), 0100000000000808("European, English and Japanese dictionaries"), and 010000000000080C("EULA").		* Every single system title was updated, except for: 0100000000000805("Chinese and Korean dictionaries"), 0100000000000808("European, English and Japanese dictionaries"), and 010000000000080C("EULA").
	* 4 new sysmodules were added, and new FIRM-package title 010000000000081C was added.		* 4 new sysmodules were added, and new FIRM-package title 010000000000081C was added.

			* [[Flog]] was stubbed: official code for launching it was removed from [[qlaunch\|the home menu]], and all code was overwritten with garbage. Thus, even attempts to launch it manually will result in [[Loader services\|loader]] returning error 0xA09.

	==Kernel==		==Kernel==

SciresM: RIP spl

2017-12-24T00:51:24Z

RIP spl

← Older revision		Revision as of 03:51, 24 December 2017
Line 54:		Line 54:

	The package1 entrypoint address specified by BCT was increased by 0x20-bytes, since there's now an additional 0x20-bytes at the start of package1. The additional data is identical to the 0x20-byte block before it.		The package1 entrypoint address specified by BCT was increased by 0x20-bytes, since there's now an additional 0x20-bytes at the start of package1. The additional data is identical to the 0x20-byte block before it.

			Sysmodules:
			* spl was updated to split the [[SPL services#spl:\|IGeneralService]] ("spl:") into many usage-case specific services.
			** spl: no longer contains commands for doing AES/RSA cryptographic operations
			** spl:mig was added, supporting crypto commands used by the new migration sysmodule.
			** spl:ssl was added, supporting crypto commands used by the [[SSL services\|ssl]] sysmodule
			** spl:es was added, supporting crypto commands used by the es sysmodule.
			** spl:fs was added, supporting crypto commands used by the [[Filesystem services\|fs]] FIRM sysmodule.


	====Package1====		====Package1====

Qlutoo at 01:14, 24 December 2017

2017-12-24T00:14:18Z

← Older revision		Revision as of 03:14, 24 December 2017
Line 40:		Line 40:
	* Every single system title was updated, except for: 0100000000000805("Chinese and Korean dictionaries"), 0100000000000808("European, English and Japanese dictionaries"), and 010000000000080C("EULA").		* Every single system title was updated, except for: 0100000000000805("Chinese and Korean dictionaries"), 0100000000000808("European, English and Japanese dictionaries"), and 010000000000080C("EULA").
	* 4 new sysmodules were added, and new FIRM-package title 010000000000081C was added.		* 4 new sysmodules were added, and new FIRM-package title 010000000000081C was added.

			==Kernel==
			* All RTTI symbols were removed, can no longer know official name of kernel objects. :(
			* JIT syscalls were added.
			** New MemoryType bit for "JIT allowed".
			** New MemoryTypes for JitWritable and JitReadOnly.
			* New synchronization syscalls 0x34, 0x35 added.
			* Added new syscall svcDumpInfoNew, but it's stubbed.
			* The linked-list node for KAutoObjects was added to the struct itself instead of being a separate allocation.

	===FIRM===		===FIRM===