MemoryBlockHeader

MemoryBlockHeader

This is the header stored at the beginning of unused blocks of FCRAM memory. The kernel maintains these structures to keep a list of free blocks and their sizes.

By overwriting the pointers in instances of this struct (e.g. using an attack like gspwn) and then (de)allocating memory, one can achieve a controlled ARM11 kernel-mode write on system versions up to 9.2 ( memchunkhax).

Size : 0xC bytes

OffsetTypeDescription
0x0u32Size in pages
0x4MemoryBlockHeader*Next
0x8MemoryBlockHeader*Prev