NSO0 - Revision history

Hexkyz: /* Flags */

2026-03-26T00:26:46Z

Flags

← Older revision		Revision as of 03:26, 26 March 2026
Line 163:		Line 163:
	\|-		\|-
	\| 7		\| 7
	\| [22.0.0+] ~~UseNewCompression~~ (use zstd-based compression instead of LZ4)		\| [22.0.0+] UseZbicCompression (use zstd-based compression instead of LZ4)
	\|}		\|}

2026-03-20T00:50:38Z

Flags

← Older revision		Revision as of 03:50, 20 March 2026
Line 161:		Line 161:
	\| 6		\| 6
	\| [20.0.0+] ExecuteOnlyMemory		\| [20.0.0+] ExecuteOnlyMemory
			\|-
			\| 7
			\| [22.0.0+] UseNewCompression (use zstd-based compression instead of LZ4)
	\|}		\|}

2025-12-19T06:25:07Z

Ootulp moved page NSO to NSO0

← Older revision		Revision as of 09:25, 19 December 2025
(No difference)

2025-11-13T20:06:21Z

Flags

2025-10-29T20:19:33Z

Flags

← Older revision		Revision as of 23:19, 29 October 2025
Line 158:		Line 158:
	\| 5		\| 5
	\| DataHash (.data hash must be checked when loading)		\| DataHash (.data hash must be checked when loading)
			\|-
			\| 6
			\| [20.0.0+] PreventCodeReads
	\|}		\|}

2024-09-25T19:29:51Z

2024-06-12T00:17:54Z

@@ Line 216: / Line 216: @@
 The MOD structure is designed such that it can be placed at image base and point to itself.
 The 2 fields preceding the magic field get copied around with the structure, even if it is relocated to somewhere besides the image base. If MOD is not located at image base, the value at offset 4 must still point to the MOD magic. In the case of .text being at image base, this implies that the first instruction can only be an unconditional branch over the offset literal.
 = Arguments =

2020-02-22T17:19:28Z

← Older revision		Revision as of 20:19, 22 February 2020
Line 84:		Line 84:
	\| 0xA0		\| 0xA0
	\| 0x20		\| 0x20
	\| TextHash (~~SHA256~~ hash over the decompressed .text section using the above size)		\| TextHash (SHA-256 hash over the decompressed .text section using the above size)
	\|-		\|-
	\| 0xC0		\| 0xC0
	\| 0x20		\| 0x20
	\| RoHash (~~SHA256~~ hash over the decompressed .rodata section using the above size)		\| RoHash (SHA-256 hash over the decompressed .rodata section using the above size)
	\|-		\|-
	\| 0xE0		\| 0xE0
	\| 0x20		\| 0x20
	\| DataHash (~~SHA256~~ hash over the decompressed .data section using the above size)		\| DataHash (SHA-256 hash over the decompressed .data section using the above size)
	\|-		\|-
	\| 0x100		\| 0x100

2020-02-22T17:04:55Z

2018-11-11T18:20:26Z

surprised the page didn't already mention that compression is LZ4

← Older revision		Revision as of 21:20, 11 November 2018
Line 2:		Line 2:
	NSO is the main executable format.		NSO is the main executable format.

	It starts with the "NSO" header and mainly describes .text, .rodata, and .data segments (like a short-form of ELF program headers):		It starts with the "NSO" header and mainly describes .text, .rodata, and .data segments (like a short-form of ELF program headers). If the segments are compressed, they are compressed using LZ4.

	= NSO Header =		= NSO Header =