System Titles

The following titles were updated: Sysmodules: hid, npns, migration. SystemData (non-sysver): BrowserDll, Help, NgWord, BootImagePackage, BootImagePackageSafe, BootImagePackageExFat, NgWord2, BootImagePackageExFatSafe. Applets: qlaunch, playerSelect, LibAppletWeb, LibAppletShop, LibAppletOff, LibAppletLns, LibAppletAuth, "starter" application, myPage. NPDM changes (besides usual version-bump):

LibAppletWeb: Service access: removed htcs. LibAppletShop: Service access: removed htcs. LibAppletOff: Service access: removed htcs. LibAppletLns: Service access: removed htcs. LibAppletAuth: Service access: removed htcs. myPage: Service access: added htcs:sys, removed htcs. RomFs changes:

BrowserDll: "/buildinfo/buildinfo.dat" updated "/nro/netfront/": Various data updated. Help: "/legallines.htdocs/index.html" updated Copyright years were updated. The license for FlatBuffers was added. NgWord: "/0.txt" updated, "/9.txt" updated, "/version.dat" updated SystemVersion: All files updated. NgWord2: "/ac_0_not_b_nx" updated, "/ac_9_b1_nx" updated, "/ac_9_b2_nx" updated, "/ac_9_not_b_nx" updated, "/version.dat" updated RebootlessSystemUpdateVersion: All files updated. qlaunch applet: "/lyt/": Various data updated. "/message/": Various data updated. "/sound/qlaunch_action.bksnd" updated playerSelect applet: "/message/TWzh/playerSelect.msbt.szs" updated LibAppletWeb/LibAppletShop/LibAppletOff/LibAppletLns/LibAppletAuth: All files updated. "starter" application: "/message/": Various data updated. myPage applet: "/lyt/": Various data updated. "/message/": Various data updated. "/sound/myPage_action.bksnd" updated

IPC Interface Changes

No changes.

BootImagePackages RomFs changes:

"/nx/package2" updated

hid

The only changes were updating an instruction in function L_6235c, and updating the GNU build-id. This just updated the instruction at 0x62440 to update the load-addr for an u8 field.

This corrects the offset from where the "nn::hidtypes::DesignVariation" value was being loaded in the "nn::hid::server::NpadDeviceManager::CreateNotifyControllerInfo" function.

migration

The following was updated:

L_23cac (prev ver @ L_23cac) This is eventually called from mig:usr cmd1100 and cmd1110. The code calling L_109950 in prev ver was replaced with a call to memmove. L_23e14 (prev ver @ L_23e20) nn::migration::savedata::IServer cmd1 This originally copied data from an array into {output ptr}. This was simplified, and now just copies an u64 to {output ptr} depending on state. This fixed a vuln. L_23e80 (prev ver @ L_23fa0) nn::migration::savedata::IServer cmd3 This was simplified, and now uses memmove for the data-copy. L_2416c (prev ver @ L_2439c) Minor changes. L_2473c (prev ver @ L_2496c) 0x24830: The ((u32)inx0) check was replaced with calls to L_109598 and L_109790. L_2fa30 (prev ver @ L_2fc30) Impl func for mig:usr cmd1101. The value used for input validation was updated (increased by 0x4000). L_109b40 is now called following the call to L_101324. L_109b40 New func, only called by L_2fa30. Various IPC-related func changes.