Support NeoGAF

[Wario64]

First Homebrew Code ran on PSP v2.00, exploit to come?! Posted By:hey69



A small team has been working on finding an exploit for v2.00 based on the fact that $ony uses part of the "libtiff" code for its Image Viewer in v2.00, which has a known bug. Apparently they've managed to exploit this bug as it appears this "proof of concept" has already been confirmed (by dppodge and many other v2.00 owners) as a working exploit for the 2.00 PSP firmware... so basically it's just a matter of time until some more useful code using this exploit is released. The related files are available HERE, and to quote from K3nt's post in THIS Forum thread:
Quote:
First Homebrew Code on 2.00

1. Set wallpaper to frame_buffer.png (without overflow.tif present in the PHOTO directory, or it will crash).

2. Add overflow.tif to the PHOTO directory, and open into the photo viewer. Custom code to paint the screen! Or to write a homebrew app! Not to run illegal games.

How It Works?

1. The PNG contains a small amount of code in a known, fixed place (the VRAM). If to look closely at the wallpaper, sees small coloured pixels in the right down. The pixels are Allegrex opcodes, with the highest byte all zero for the ALPHA. These pixels do:

syscall 0x20C7 ; sceKernelDcacheWritebackInvalidateAll
slt a0, zero, sp ; put 1 into a0
sll a0, a0, 6 ; put 64 into a0
addiu a0, sp, a0 ; get screen painter address over SP
jr a0 ; jump to the screen painter
nop ; branch delay slot

2. The TIFF contains also some code and a buffer to trigger the known BitsPerSample overflow in libtiff in the photo viewer. The buffer makes a jump to the VRAM which has the PNG colours by overwriting the safed ra (return address) on the stack. The VRAM code uses SP and calculates the address of the buffer then runs it. Then it jumps there. The screen is yellow as the colour was 0x12345678 in Hex.

PSP Users:

We didn't do this so you could steal from $ony and game companies. We believe in OSS. There are plenty of amazing programs that have been written for the PSP. Use this as a gift and not as an excuse to steal.

$ony:

If you wanted to find us i know you could. This release wasn't intended as a way to run pirated software on the PSP. We believe that everyone should be able to compile their own code and run it. Nothing is kept secret forever and i'm sure you know this. In the end, if it wasn't us. It would be some one else. Fighting it would be like skating up a hill. You did create the PSP and did an amazing job.

Toc2rta:

To the people of the Toc2rta development network. You're our phone a friend. With out your friendship this would never of happened. I hope this brings you as much happiness as it brings us. Join us on irc.toc2rta.com.

Most importantly... Have fun!"












OHHH SHITTT

 

[Robobandit]

We all knew it would happen.. didn't take as long as I thought it would, though

 

[TheOMan]

OH SNAP

This is just sooo good. Makes me feel all warm and fuzzy. Also means I don't have to pick up a third PSP.

HACKER NERDS ARE AWESOME

 

[Mejilan]

Man, I hope this works out. Been itching to upgrade.

 

[Starfire]

Yeah, I was starting to feel left out, not being able to use the browser and all, plus I have a new 1gb pro duo, and it begs me for AVC encoded movies.

Thank you hacker type ppl.

 

[Robobandit]

yeah, if this works it may be time for an upgrade.

 

[TheOMan]

Yeah, I was starting to feel left out, not being able to use the browser and all, plus I have a new 1gb pro duo, and it begs me for AVC encoded movies.

Thank you hacker type ppl.

What are AVC encoded movies?

 

[Mihail]

This sounds motherfreakin' creative. If only the vast powers of individual Internet users could be harnessed and focused towards some goal, like erasing all credit history (ala Fight Club, but with less bombing) or generally overthrowing establishment.

 

[Suikoguy]

What are AVC encoded movies?

Basically higher quality encoding that the 2.0 firmware supports.
Far closer to the UMD quality

 

[truffleshuffle83]

so did you try this wario?? is any of the hombrew stuff working on this, like the 1.5 emus??

 

[truffleshuffle83]

i wish this woulda came out after GTA:LCS and socom though because those are the only games i forsee in the near future getting and i bet sony will patch this before those hit shelves

 

[kaching]

That sounds worse than swaploit

 

[TheOMan]

i wish this woulda came out after GTA:LCS and socom though because those are the only games i forsee in the near future getting and i bet sony will patch this before those hit shelves

Well, you could...I dunno, buy them?

 

[radioheadrule83]

So how long before this is incorporated into new releases/loaders?

Or can I start doing something right away?

 

[Starfire]

What are AVC encoded movies?

Movies encoded in the PSPs native h.264 format used in UMD movies, basically, just better compressed .mp4s.

AVC encoded mpeg4 gives you the same quality video as normal at half the bitrate (ie half the size.) The only downside is I don't think full res AVC movies are supported (someone correct me if I'm wrong on any of this).

 

[TheOMan]

Basically higher quality encoding that the 2.0 firmware supports.
Far closer to the UMD quality

Oh, that is too sweet. As you probably guessed I haven't been keeping up on the 2.0 firmware features as I haven't upgraded and I didn't want to be tempted to do so.

Thanks Suikoguy and Starfire

 

[Skin]

Well, you could...I dunno, buy them?

He's talking about how Sony will fix this bug by putting patches for it in GTA:LCS and SOCOM. Therefore he won't be able to buy 'm because he can't play homebrew anymore.

 

[TheOMan]

He's talking about how Sony will fix this bug by putting patches for it in GTA:LCS. Therefore he won't be able to buy 'm because he can't play homebrew anymore.

Oooh, mea culpa. Sorry man, didn't think of that :/

Me = burned.

 

[Zeo]

2.0 is a nice upgrade. I don't regret upgrading. It was only a matter of time before there was an exploit, but of course this will probably be patched in GTA or whatever.

And to those not buying the best PSP games coming out because you don't want to update, give me a break. New good games > roms.

 

[shoplifter]

And to those not buying the best PSP games coming out because you don't want to update, give me a break. New good games > roms.

That's arguable, but I can respect your viewpoint.

 

[truffleshuffle83]

Well, you could...I dunno, buy them?

i want to buy them, but its not worth losing my 1.5 firmware. what i was saying is that if they hack 2.0 firmware then sony will release these games and force a 2.1 upgrade or something like that

and no, new psp games are not worth more than a $250 portable emulation station. ill shell out another 250 for a psp before i upgrade. im only hoping they release the white psp in the states soon, one with transparant buttons

 

[dark10x]

2.0 is a nice upgrade. I don't regret upgrading. It was only a matter of time before there was an exploit, but of course this will probably be patched in GTA or whatever.

And to those not buying the best PSP games coming out because you don't want to update, give me a break. New good games > roms.

Err, 1.50 PSPs can run virtually every PSP game on the market without an update. There are more things to do than use roms too...

For one thing, it allows us to actually play the games properly. Overclocking for better framerates (60 fps in Wipeout is something I won't give up!!!) and loading from the memstick for *MUCH* faster loading (3 seconds instead of 30? Yes please!).

 

[TheOMan]

i want to buy them, but its not worth losing my 1.5 firmware. what i was saying is that if they hack 2.0 firmware then sony will release these games and force a 2.1 upgrade or something like that

and no, new psp games are not worth more than a $250 portable emulation station. ill shell out another 250 for a psp before i upgrade. im only hoping they release the white psp in the states soon, one with transparant buttons

Yeah, sorry, my bad :/. Didn't realize that was what you were talking about. I'll see if I can find an electronic cookie to send you to make up for it.

There you go:

 

[Zeo]

Err, 1.50 PSPs can run virtually every PSP game on the market without an update. There are more things to do than use roms too...

For one thing, it allows us to actually play the games properly. Overclocking for better framerates (60 fps in Wipeout is something I won't give up!!!) and loading from the memstick for *MUCH* faster loading (3 seconds instead of 30? Yes please!).

Play the games "properly"? Pure isn't meant to run at 60 fps on PSP. Just because you can overclock for better framerates doesn't make it the "proper" way to play. I'm sure that's great and yeah, better, but it's the best handheld racer ever and looks/plays great at 30 fps.

Okay.. Virtually every PSP game on the market. Except there aren't that many worth owning. But what about all the future good releases that require you to update to the newest version each time?

 

[dark10x]

Play the games "properly"? Pure isn't meant to run at 60 fps on PSP. Just because you can overclock for better framerates doesn't make it the "proper" way to play. I'm sure that's great and yeah, better, but it's the best handheld racer ever and looks/plays great at 30 fps.

Okay.. Virtually every PSP game on the market. Except there aren't that many worth owning. But what about all the future good releases that require you to update to the newest version each time?

Fine, if that's not the proper method, then I'll enjoy my superior experience. Faster framerates and an almost complete lack of loading are a BIG DEAL. Loading is like THE number one complaint with PSP right now...and I'm not going to trade away my ability to remove it. When I hear reviews whining about lengthy loadtimes or slowdown, I know that, when I play it, I won't have to deal with them.

Whether or not that matters to you isn't important, which is why it's up to the individual to decide.

The current UMD emulator is fantastic, however, and I fully believe that Humma will be able to retain full compatibility. It currently loads every game on the system, but a few of them have a couple glitches. 99% compatibility is great, though. About the same as a dedicated modchip on a console...

If there is a new game that I can't play, well, we'll cross that bridge when we come to it. Thus far, however, there have been ZERO problems for me (no matter what update a game may require).

 

[Raistlin]

Play the games "properly"? Pure isn't meant to run at 60 fps on PSP. Just because you can overclock for better framerates doesn't make it the "proper" way to play. I'm sure that's great and yeah, better, but it's the best handheld racer ever and looks/plays great at 30 fps.

Actually, it IS the way games were intended.

The original traget spec given to developers for the CPU was 333MHz, and that is what Sony delivered.

However, the battery gets chewed up too fast, so Sony decided to limit the CPU frequency so people wouldn't bitch about 2 hour playing times. This limit (to my knowledge) isn't actually hardwired, the frequency is switchable in software - Sony just mandates the 'slow' mode. There is talk that once a better battery comes out, Sony may lift the ban.

Regardless, setting the CPU to 333MHz isn't overclocking, since that is the frequency the CPU was actually meant to run at.

 

[Wario64]

once you play Wipeout Pure in 60 FPS, you can never go back. it actually makes the game EASIER with the smoothness in 333 mhz. so smooth....

 

[..pakbeka..]

so, GTA: LCS will require the 2.1 upgrade?

 

[EGM92]

This is sweet now asses selling their 1.50v PSP's have no justification for the high prices they want!

 

[The Abominable Snowman]

This + the firmware loader thing makes me a very happy people-eater. Now, I don't care if they upgrade to 2.1, as I can still enjoy the best of both worlds, although it may take a bit of added effort to play games beyond 2.0

 

[Bigfonzie]

Id bet it could be too late for sony to make a new patch for this, before gta releases


im so happy!

 

[Matlock]

Err, 1.50 PSPs can run virtually every PSP game on the market without an update. There are more things to do than use roms too...

...like...

loading from the memstick for *MUCH* faster loading (3 seconds instead of 30? Yes please!).

Oh, so illegally obtained software either way! Gotcha!

 

[HomerSimpson-Man]

...like...



Oh, so illegally obtained software either way! Gotcha!

If you own the game in the first place, does it matter?

 

[dark10x]

The f*ck?

Someone else mentioned emulators, but I use it for playing my own games that I purchased.

Here's a pic from back in August (I've since added on, but don't have my camera handy)...

 

[truffleshuffle83]

according to the DMCA yes, it is illegal to circumvent copyright protection for any use even if it is personal, but fuck that bull shit im not carring all of my nintendo games and my game axe with me to school to get a little nes action

 

[Flo_Evans]

I smell a 2.1 update comming soon........ :lol

 

[Sho Nuff]

Bum bum ba dum dum dum

AVC videos here I cum

 

[Gek54]

How does Sony find out about exploits, anyway? Do you think they look around for the stuff?

I've always wondered how it gets back to them so quickly.

DS fanboys rat them out.

 

[Ford Prefect]

With my little brother's 2.0 PSP, basically the only non-flash site I can't access is GAF.

WTF? If I didn't know any better, I'd say some anti-Sony mod/amin. altered the code/html/whatever on purpose just for a laugh. Then again, I don't think such a mod/admin. exists :lol

Seriously, though: WTF?

 

[rod]

With my little brother's 2.0 PSP, basically the only non-flash site I can't access is GAF.

WTF? If I didn't know any better, I'd say some anti-Sony mod/amin. altered the code/html/whatever on purpose just for a laugh. Then again, I don't think such a mod/admin. exists :lol

Seriously, though: WTF?

how come GAF dont work with 2.0?

 

[radioheadrule83]

"Communication with the server failed.
(80431064)"

 

[neptunes]

How does Sony find out about exploits, anyway? Do you think they look around for the stuff?

I've always wondered how it gets back to them so quickly.

Sony tried to shut down pspupdates once.

 

[Matlock]

If you own the game in the first place, does it matter?

The f*ck?

Someone else mentioned emulators, but I use it for playing my own games that I purchased.

My point is, you're still getting illegal rips of UMDs.

 

[dark10x]

I'm not 'getting' anything, I'm making them myself from the UMDs I purchased for my use and my use alone.

There are games I wouldn't buy without this ability simply because I deem them unplayable from UMD.

 

[Troidal]

[Final Fantasy fanfare] yeay! [/Final Fantasy fanfare]

 

[Hitokage]

"Communication with the server failed.
(80431064)"

Does the PSP support gzip webpage loading?

 

[Matlock]

I'm not 'getting' anything, I'm making them myself from the UMDs I purchased for my use and my use alone.

There are games I wouldn't buy without this ability simply because I deem them unplayable from UMD.

Wait, there's a readily available UMD to executable disk image encoder?

 

[Diablos]

Can someone explain what this means?

 

[Matlock]

Can someone explain what this means?

All in all it means you can be a software pirate pirate^H^H^H^H^H^HOMEBREW ENTHUSIAST on your fully updated and more-functional-than-before PSP.

 

[Wario64]

Wait, there's a readily available UMD to executable disk image encoder?

yep, there's been one available for months

copying a umd game to memory stick is as illegal as copying a ps2 game disc to the hard drive