reswitched / pegaswitch

PegaSwitch is an exploit toolkit for the Nintendo Switch
https://reswitched.team
ISC License
933 stars 108 forks source link

my 3.0.0 switch disconnects (error code 2168-0002) when i'm trying to load a .NRO file "help wanted" #74

Open TheGreekBoy opened 6 years ago

TheGreekBoy commented 6 years ago

hi when i'm trying to run a .NRO file on my 3.0.0 switch my switch gives me a black screen error code 2168-0002 and tell me to shutdown the console

Here is the log file :

Starting. Building stuff. Building stuff. Found addresses! b3a8460 3b b3a2780 3b b3a2740 3b Building stuff. Building stuff. Inside o... Success? Cleaning up Loading and running main Loaded Exploit triggered. Beginning breakage. Disabling watchdog timer... VM: 0x0000003b0b23d000 WD: 0x0000003b0b19e160 Pwning sdb module... Starting sdbcore... Pwning sdb... Author ID: 2,9,109,192,80,231,66,8,160,154,214,94,144,160,136,145 mii handle is 0x39003b wipe miis ... reloading sdb, this might take a while ... new sdb pid: 0x7e new sdb pid: 0x7f sdb pid is 0x7f this.sdb_base at 0x0000005e62200000 ** good base *** this.pdm_base at 0x0000005e62350ec0 writePdm ... trigger ... cleanup ... entering pluhax ... trigger ... pluSP at 0x00000004ec9b4770 ... write ... read read value: 0x1122334429910baf ... call call: 0x1122aabbf00d1234 Setting up RO hax... Opening SM handle 0x0000000000000000 SM handle: e8018 0x0000000000000000 0 80000008 20 f0019 Port handle: f0019 IPC message:

PID: 0x0000000000000078 Moved handles 0x3e8039 ldr:ro is PID 0x78 IPC message: IPC message: Data data+0x0 | 80 00 00 00 00 00 00 00 | ........ | Pwned sdb... Pegaswitch loaded! UA: Mozilla/5.0 (Nintendo Switch; WifiWebAuthApplet) AppleWebKit/601.6 (KHTML, like Gecko) NF/4.0.0.6.9 NintendoBrowser/5.1.0.14936 Handle 0 ready Accepted new pipe 10001a Handle 1 ready Got incoming message on 10001a Writing handle replyandreceive Copying data Done? Attempting to respond replyandreceive 0x000000000000ea01 Done? Handle 1 ready Got incoming message on 10001a Writing handle replyandreceive Copying data Done? Attempting to respond replyandreceive 0x000000000000ea01 Done? Connected to PC... Handle 1 ready Got incoming message on 10001a Writing handle replyandreceive Copying data Done? Attempting to respond replyandreceive 0x000000000000ea01 Done? Handle 1 ready Got incoming message on 10001a Writing handle replyandreceive Copying data Pipe closed. Removing. dynamic offset: 0xf1a0 IPC message: NRO loaded at 0x0000002a7f083000 closing sm and jumping... Here is a pic :

pegaswitch

i don't know what to do can anyone help me??

"help wanted"

va1erian commented 6 years ago

I also have this issue, every test NRO that ships with libtransistor would give me this error. However I was able to launch the ACE Loader NRO (it's in libtransistor/projects/ace_loader, you need to build it first) and use the push feature to run the hello world and the video test NRO. Others would also fail with the same error like SDL one. Let me know if I can provide more useful debug info.

Cybernatus commented 6 years ago

I am also facing this problem without atm, the crash occurs when running any NRO and at the same log line "closing and jumping..." . On the contrary of va1erian's workoaround, building my own ACE Loader from projects folder do not fix the issue.

va1erian commented 6 years ago

FYI I tried to run the ACE Loader again and it kept failing with the same error until I deleted the content of the gadgetcaches directory. Not sure if this is simply a coincidence.

lubosz commented 6 years ago

I am also experiencing this. I even sometimes get 2168-0002 during init (https://github.com/reswitched/pegaswitch/issues/85).

I noticed that I can run certain nros using the fs branch of libtransistor. I can run helloworld and even sdl. But ace still crashes at libtransistor_set_close_browser() with 2168-0002 from that branch. I tried to running the last commit of libtransitor where the fs branch forked off (https://github.com/reswitched/libtransistor/commit/09fdeccaa8116f5076c8d9b774a012b4eab079a4), but unfortunately that did not work very well. SDL always crashes, and hello world most of the time.

If I didn't have the init problem I could bisect this in libtransitor more easily.

pplatoon commented 6 years ago

identic error on my switch 3.0.0, any solution??