diff --git a/README.md b/README.md new file mode 100644 index 0000000..f671f95 --- /dev/null +++ b/README.md @@ -0,0 +1,8 @@ +# Aroma plugin that fixes the RCE bugs on WiiU games + +- Mario Kart 8 (All regions, v64) + - [ENLBufferPwn](https://github.com/PabloMK7/ENLBufferPwn) fix + - Identification token parsing RCE fix (exploit found by Kinnay) + +- Splatoon (All regions, v272) + - [ENLBufferPwn](https://github.com/PabloMK7/ENLBufferPwn) fix \ No newline at end of file diff --git a/source/patches.cpp b/source/patches.cpp index 930a21c..3066fc1 100644 --- a/source/patches.cpp +++ b/source/patches.cpp @@ -97,20 +97,6 @@ void SPLATOON_ApplyPatch(EPatchType type) return; } - if (type == PATCH_ENL_ID_TOKEN_RCE) - { - // Address of 'enl::PiaUtil::ParseIdentificationToken' - uint32_t addr_func = gambit_rpx->textAddr + 0xB32C08; - function_replacement_data_t repl = REPLACE_FUNCTION_VIA_ADDRESS_FOR_PROCESS( - enl_ParseIdentificationToken, - OSEffectiveToPhysical(addr_func), - addr_func, - FP_TARGET_PROCESS_GAME_AND_MENU); - FunctionPatcherPatchFunction(&repl, nullptr); - - WHBLogPrintf("rce_patches: Patched Splatoon (PATCH_ENL_ID_TOKEN_RCE)"); - } - if (type == PATCH_ENL_BUFFER_RCE) { real_enl_TransportManager_getContentTransporter = (enl_ContentTransporter * (*)(void *, unsigned char &))(gambit_rpx->textAddr + 0xB4108C); diff --git a/source/patches.h b/source/patches.h index ff054b3..bfabdf7 100644 --- a/source/patches.h +++ b/source/patches.h @@ -87,7 +87,7 @@ void MARIO_KART_8_ApplyPatch(EPatchType type); #define SPLATOON_TID_E 0x0005000010176A00 #define SPLATOON_TID SPLATOON_TID_J, SPLATOON_TID_U, SPLATOON_TID_E -#define SPLATOON_PATCHES PATCH_ENL_BUFFER_RCE, PATCH_ENL_ID_TOKEN_RCE +#define SPLATOON_PATCHES PATCH_ENL_BUFFER_RCE void SPLATOON_ApplyPatch(EPatchType type);