Difference between revisions of "IOS254"

From WiiBrew
Jump to navigation Jump to search
(Titles using this IOS)
(sekret versions?)
Line 13: Line 13:
 
* [[3.4]] and [[3.5]] included a copy of [[IOS9]] as IOS254 to overwrite PatchMii, as that was the last place (besides [[IOS16]]) the [[signing bug]] could be exploited. Each IOS9 update was then copied to this IOS.
 
* [[3.4]] and [[3.5]] included a copy of [[IOS9]] as IOS254 to overwrite PatchMii, as that was the last place (besides [[IOS16]]) the [[signing bug]] could be exploited. Each IOS9 update was then copied to this IOS.
 
* The [[4.3]] update included a [[Stub IOS]] in this slot, in an attempt to overwrite BootMii/IOS, which succeeded for BootMii versions earlier than 1.4. Versions 1.4 and above use version 65281 to prevent this.
 
* The [[4.3]] update included a [[Stub IOS]] in this slot, in an attempt to overwrite BootMii/IOS, which succeeded for BootMii versions earlier than 1.4. Versions 1.4 and above use version 65281 to prevent this.
 +
 +
[[Revolution OS]] contains code that cancels the [[error 001]] checks if the current IOS is below IOS30, or is IOS254 or higher. Both of these checks existed in late 2007 (seen in the [[IOS21]] [[NAND Boot Program]]), before BootMii/PatchMii was released, which may mean there is also a real IOS254 used internally (possibly v0/v1).
  
 
== Titles using this IOS ==
 
== Titles using this IOS ==

Revision as of 05:02, 18 January 2022

IOS254
WiiDrawing.png
Release
System Update3.4
Technical info
TypeAnti-cIOS Stub IOS
StatusMothballed
Stub variantUnique


IOS254 is commonly used for various purposes:

  • BootMii as an IOS, is installed to this slot.
  • PatchMii installs to this slot.
  • 3.4 and 3.5 included a copy of IOS9 as IOS254 to overwrite PatchMii, as that was the last place (besides IOS16) the signing bug could be exploited. Each IOS9 update was then copied to this IOS.
  • The 4.3 update included a Stub IOS in this slot, in an attempt to overwrite BootMii/IOS, which succeeded for BootMii versions earlier than 1.4. Versions 1.4 and above use version 65281 to prevent this.

Revolution OS contains code that cancels the error 001 checks if the current IOS is below IOS30, or is IOS254 or higher. Both of these checks existed in late 2007 (seen in the IOS21 NAND Boot Program), before BootMii/PatchMii was released, which may mean there is also a real IOS254 used internally (possibly v0/v1).

Titles using this IOS

Nothing uses IOS254.

Version history

Version Signing bug? /dev/flash access? ES_Identify? STM Release Exploit? STM IOCTL overflow? SDI register index bug? Notes
v2 No No No Yes Yes Yes Included in 3.4 and 3.5 updates to block PatchMii (copy of IOS9v520).
v3 No No No No Yes Yes Included in 4.0 update. Copy of IOS9v521
v260 No No No No Yes Yes Included in 4.2 update. Copy of IOS9v778
v65280 N/A N/A N/A N/A N/A N/A Stub IOS in 4.3 update to wipe out BootMii/IOS and remove this IOS branch. Also included on RVL-CPU-20 consoles