Joonie lance Linux sur DECR-1000A sous FW 3.15

Playstation 3 / 4

Le développeur Joonie de la Team Rebug vient de faire un grand pas en avant avec son kit de développement DECR-1000A. Dans le firmware 3.15, Joonie vient de trouver des options cachées qui vous permettre de charger et d'installer Linux.

Les PS3 qui disposent d'un firmware 3.21 ou les DREE-1000A ne disposent pas de cette option. Joonie ne fait pas les choses à moitié, il a réussi a exécuter la compilation ""Linux Red Ribbon LXDE sur sa DECR-1000A avec quelques modifications du menu VSH et sysconf_plugin".

Cette option est nativement caché dans le firmware 3.15 DEH MFW, donc les utilisateurs qui dispose de ce firmware peuvent déverrouiller Linux.

Joonie fourni le PUP du 3.15 pour ceux qui souhaiteraient s'y essayer sur leur kit de développement.

1. LV2 kernel patches (Taken from 4.XX MFW)

PATCHED – LV2: Peek and Poke support

(LV2 Syscall 6 and 7)

PATCHED – LV2: Peek and Poke support for LV1

(LV2 Syscall 8 and 9)

PATCHED – LV2: LV1 CALL System call

(LV2 Syscall 10)

2. Hypervisor patches (SS patches taken from Glevand's OOS 3.55 MFW)

-----------------

1: mmap (Undocumented function 114) Allow mapping of any memory area

0xF50B8:3920000038600000 4BFFFC4538000000 7C7E1B787C010164 6000000060000000

0xF50B8:3920000138600000 4BFFFC4538000000 7C7E1B787C010164 6000000060000000

2: HTAB Mapping With Write Protection (Enable protected HTAB mapping)

0xF5540:41DA0054E97F00A8 39400000E92B0078 E80900487C00E214 F81B0000E80100B0

0xF5540:60000000E97F00A8 39400000E92B0078 E80900487C00E214 F81B0000E80100B0

3: Full Access for Repo Nodes in Any LPAR (Allow creating/modifying/deleting of repository nodes in any LPAR)

0xFCDC0:FBE100C8E81E0018 E95E0020E91E0028 E8FE0030EBEB0050 F8010070F9410078

0xFCDC0:FBE100C8E81E0020 E95E0028E91E0030 E8FE0038EBFE0018 F8010070F9410078

0xFD048:E81E0018E93E0020 E95E0028E91E0030 E8FE0038E8DE0040 EBEB005090A10070

0xFD048:E81E0020E93E0028 E95E0030E91E0038 E8FE0040E8DE0048 EBFE001890A10070

0xFD4E8:FBE100E8E81E0018 E93E0020E95E0028 E91E0030E8FE0038 E8DE0040EBEB0050

0xFD4E8:FBE100E8E81E0020 E93E0028E95E0030 E91E0038E8FE0040 E8DE0048EBFE0018

4. LV1 Peek/Poke Support (Patch unused LV1 syscalls 182 and 183)

0x1221C0:6400FFFF6000FFEC F80300C04E800020 380000006400FFFF 6000FFECF80300C0

0x1221C0:E8830018E8840000 F88300C84E800020 38000000E8A30020 E8830018F8A40000

5. Unknown patch 1.

0x222DC0:7D2953787C004B78 F81F01B0897C0130 881C0131796BC1C6 893C0132780083C6

0x222DC0:7D2953783800001B F81F01B0897C0130 881C0131796BC1C6 893C0132780083C6

6. System Manager Ability Mask of GameOS (Allow access to all system manager services)

0x2230A0:6400003BF93F01C8 6000F7EEF81F01C0 E8010090EBE10078 382100807C0803A6

0x2230A0:6400FFFFF93F01C8 6000FFFFF81F01C0 E8010090EBE10078 382100807C0803A6

7. Unknown patch 2.

0x225340:F901009848015421 480000347C6407B4 E86295A84801A94D 3860000438800003

0x225340:F901009860000000 480000347C6407B4 E86295A84801A94D 3860000438800003

8. Extract all PKG Types (Allow Update Manager to extract all PKG types)

0x2D5788:F81B0000419D00A8 7BFD00207F44D378 7FA5EB787FC6F378 7EA3AB78409A0090

0x2D5788:F81B000060000000 7BFD00207F44D378 7FA5EB787FC6F378 7EA3AB78409A0090

9. Update Manager EEPROM Write Access (Enable Product mode)

0x2D8510:480000C888010173 7FC3F37838800001 E8A28C0078060620 980100704802BCC5

0x2D8510:480000C8380000FF 7FC3F37838800001 E8A28C0078060620 980100704802BCC5

0x2D8578:880101677FC3F378 38800001E8A28C18 7806062098010070 4802BC6189210070

0x2D8578:380000FF7FC3F378 38800001E8A28C18 7806062098010070 4802BC6189210070

10. Storage Manager ENCDEC Keys Access (Allow Storage Manager to clear ENCDEC keys.)

0x2ED0A0:419D004C480005CD 388100782F830000 7C601B782F030009 38A100F838610070

0x2ED0A0:60000000480005CD 388100782F830000 7C601B782F030009 38A100F838610070

-----------------

3. VSH / sysconf_plugin (Reversed by zecoxao's good friend)

PATCHED – VSH: Allow Installation of OtherOS

4. Nas_plugin

PATCHED - NAS: Allow installation of Retail PKGs and Pseudo Retail pkgs