2.8 Tiff Exploit - Downgrader? ~RUMOR~

bug fond!

NOPx86 wrote:
Hey guys, iv been messing around with libtiff for a couple of weeks now
and I found something interesting, Im still doing debugging on it and
whatnot, but it crash's the psp and most image viewers, it may be the
begging of homebrew on 2.71 and 2.80 it may not, im not going to release
the source for it just yet, probably in a couple of days once i do
proper debugging to release a full disclosure. i will however post a
link to the image, iv made a small tiff reader program that does the
most ****tiest error checking you have ever seen but i will print a
quick backtrace

Program received signal SIGSEGV, Segmentation fault.
0xb7eae46b in TIFFFindFieldInfo () from /usr/lib/libtiff.so.3
(gdb) bt
#0 0xb7eae46b in TIFFFindFieldInfo () from /usr/lib/libtiff.so.3
#1 0xb7eace97 in _TIFFsetDoubleArray () from /usr/lib/libtiff.so.3
#2 0xb7eacf3e in TIFFVSetField () from /usr/lib/libtiff.so.3
#3 0xb7eacf27 in TIFFSetField () from /usr/lib/libtiff.so.3
#4 0xb7eafd80 in TIFFReadDirectory () from /usr/lib/libtiff.so.3
#5 0x04004000 in ?? ()
#6 0x04004000 in ?? ()

the 0x4004000 was put in by me, iv noticed it hasnt actually overwritten
the instruction pointer and crashed at that address per say, but im sure
i could maybe get something working, if not I then with help this may
become something. Im asking for volunteers, I would prefer someone from
the hitmen or ps2dev crew or SonyXTeam to help, I have recently been
banned from Toc2rta for not releasing any information and whatnot, I
would however like to come back if at all possible and there are no hard
feelings whatsoever. If anyone would like to help or is even the slight
bit interested then get up with me on yahoo my instant messenger name is
hymn_of_a_needle_freak. I am going to jump ahead of myself at the moment
and go ahead and take some inspiration for the old 2.0 exploit and do my
own variation of the framebuffer png(credit goes to skylark on the idea
and niacin for dumping the data on the original version). Im going to go
ahead and work on setting the rest of it up before i concentrate on more
work with the main part of this. Get up with me if your interested.

greetings to the whole psp homebrew team, mainly ps2dev and
sonyXteam(coldbird and the rest of the gang on their irc server) for
taking the time to listen, also groepaz and skylark for putting up with
my hours of retardedness and questions, harleyg and wakawooki for 2.80
testing(your right, the modchip is the **** ) . I would also like to
thank LC for donating me a psp. I dont know to much about the psp at the
moment as i only have 2.71 so if anyone has pointers then please feel
free to share.

thank you

links:

ColdBird| http://fragment.lan.st/nop/proof.tif
x3sphere| http://www.tritoch.net/nop/proof.tif

tested on 2.71 en even before i whanted to open it causing a crash (with restarting psp works back) now hope this can be exploited

edit: after leting the psp crach its even shutsdown about 40sec looks like it culd be exploited like the tiff downgrader for 2.5/2.6 gonna test that
edit2: don't work but i got hopes :p (not good at hacking so i can't do this :s )

i saw a vid of a 2.8 fault with the batery symbol thingo and it was chukin a skitz so sony does make mistakes i hope this is true... but i dont realy care i have 1.5 already hehe

[crait]

i saw a vid of a 2.8 fault with the batery symbol thingo and it was chukin a skitz so sony does make mistakes i hope this is true... but i dont realy care i have 1.5 already hehe

of course everyone makes mistakes

lol. Im going to stick with 1.5 myself. but if someone get exploit this or something you know, Good job.
Keep it up. lol
I rather stick with homebrew myself

Im still waiting for 2.8 emulation for devhook, thats all I want right now, and the new release of Capcom's Test PS1 Emulator.

yes im glaad to say i now to have 1.50

To clear some things up for some of you, this new exploit or glitch (whichever it turns out to be) uses a different TIFF overflow image than if you use the 2.0 downgrader's one. Someone recompiled it and this is what it does so far. This really does sound interesting, so I suggest you guys read up in the forums on QJ. I just hope this doesn't turn out to be as useless or abandoned as the 2.5 TIFF "glitch".

sounds pretty cool keep it up homies (lol)

Hmm, to over ride the original tiff would be fairly impossible for 2.8.
This seems impossible to me but thats my opinion.

your guys are so da*m lucky because you have a 1.50. look at my signature.

,!,,(-_-),!,, to sony for making me update.

[crait]

sony -made- you update?
i dont think so