KaKaroToKS 大大今天成功 dump 了 PS3 LV1 的系统呼叫函式, 并且计划放出能够 dump PS3 LV1 的韧体让其他开发者也能够 dump LV1, LV1的系统呼叫一般被用来呼叫需要管理者权限的函式, 它也是系统最底层的函式用来直接存取硬体, 而作业系统都是执行在LV1之上, 而作业系统提供的函式称为 LV2, (目前改机都是修改 LV2 的系统呼叫) 像是常见的执行游戏用的 GameOS, 和让使用者可以安装 linux 的 OtherOS, 都是使用相同 LV1 系统呼叫, 目前的 payload 只能够 dump LV1 还无法存取或是修改 LV1, 但是对於 PS3 的了解还相当有帮助的 关系示意图: --------------------------- 游戏或自制程式| Linux 程式 --------------------------- GameOS(LV2) | OtherOS --------------------------- LV1 --------------------------- 硬体 --------------------------- ============================ 原文连结 : http://0rz.tw/2Rff4 Today Dertyp at PSX-Scene (linked above) reports that KaKaroToKS has dumped the PS3 LV1 syscalls, and plans to update his payload soon to allow other developers to dump the calls. To quote: For Those Of You Who Are Asking What This Is: level-1 syscalls are used to call hypervisor functions. On a PS3 the hypervisor is known as as 「lv1〞 (level1) since it is the lowest level that runs directly on top of the hardware. The operating system is executed on top of this and is known as 「lv2〞 (level2). The two common operating systems are GameOS which PS3 games run on, and OtherOS which is usually used to run linux. Since both OSes run on top of the same lv1 hypervisor, they use the same set of hypercalls which has been partially documented here. KaKaRoToKS Recent Tweets: FINALLY able to dump (over eth) all lv1 calls!! Will push it soon! To everyone misunderstanding: no lv1 access, all I did was be able to dump the "call trace" of lv1 hypercalls. same as payload_dump_syscalls And Finally What Does These All Mean To Us Right Now! This is work-in-progress, once KaKaRoToKS has finished his poking around the dumps, and detailing the info on his GIT, I will update this thread, even after he is done, it will take some time for various PS3 developers to study all this new information, before it will help out the "end-user" but it is another big step forward in the daily forever-changing and growing-fast PS3 Scene World! --

※ 发信站: 批踢踢实业坊(ptt.cc) ◆ From: 114.32.118.136