zd1200/binary_patch_catalog.json at main · dbro/zd1200 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
{
  "catalog_version": 1,
  "artifacts": [
    {
      "artifact_id": "ap_11n_scorpion_wlan_ko",
      "description": "ap-11n-scorpion firmware ELF32 big-endian MIPS wlan.ko",
      "handler": "raw"
    },
    {
      "artifact_id": "zd1200_kernel_elf",
      "description": "decompressed ZD1200 ELF32 little-endian x86 kernel",
      "handler": "zd1200_bzimage_gzip_elf"
    }
  ],
  "patches": [
    {
      "artifact_id": "ap_11n_scorpion_wlan_ko",
      "name": "ap_11n_scorpion_mesh_vlan_rx",
      "signature_hex": "90 42 00 0c 90 63 00 0d 00 02 12 00 00 62 18 25 34 02 81 00 54 62 ?? ?? 8e a2 01 08 8e a5 01 08 3c 02 ?? ?? 24 06 00 10 24 42 ?? ?? 00 40 f8 09 24 a4 00 02 24 05 00 02 02 00 f8 09 02 a0 20 21",
      "patch_offset": 20,
      "expected_hex": "54 62 ?? ??",
      "replacement_hex": "10 00 ?? ??",
      "description": "bypass destructive VLAN inner-EtherType removal"
    },
    {
      "artifact_id": "zd1200_kernel_elf",
      "name": "kernel_halt",
      "signature_hex": "b80200000083ec04e8????????e8????????c70424????????e8????????83c404e9????????",
      "patch_offset": 0,
      "expected_hex": "b8",
      "replacement_hex": "c3",
      "description": "kernel_halt(): ignore unsafe halt requests from appliance LED/watchdog probes; reboot uses machine_restart()"
    },
    {
      "artifact_id": "zd1200_kernel_elf",
      "name": "rks_pkt_trace_init",
      "signature_hex": "83ec08e8????????85c0741fc7442404????????c70424????????e8????????e8????????31c083c408c3",
      "patch_offset": 0,
      "expected_hex": "83ec08",
      "replacement_hex": "31c0c3",
      "description": "rks_pkt_trace_init(): skip tif0 path"
    },
    {
      "artifact_id": "zd1200_kernel_elf",
      "name": "nar5520_wdt_init",
      "signature_hex": "55 57 56 53 83 ec 14 e8 ?? ?? ?? ?? 83 f8 01 89 c5 0f 84 ?? ?? ?? ?? 83 f8 03 0f 84 ?? ?? ?? ?? ba ?? ?? ?? ?? b8 ?? ?? ?? ?? c7 05 ?? ?? ?? ?? 00 00 00 00 e8 ?? ?? ?? ??",
      "patch_offset": 0,
      "expected_hex": "55 57 56",
      "replacement_hex": "31 c0 c3",
      "description": "skip physical NAR5520 watchdog initialization"
    },
    {
      "artifact_id": "zd1200_kernel_elf",
      "name": "nar5520_wdt_thread",
      "signature_hex": "57 56 89 c6 53 b8 01 00 00 00 83 ec 18 64 8b 1d ?? ?? ?? ?? 87 03 0f b6 16 89 d0 c0 e8 07 01 d0 d0 f8",
      "patch_offset": 0,
      "expected_hex": "57 56 89",
      "replacement_hex": "c3 ?? ??",
      "description": "skip NAR5520 watchdog worker"
    },
    {
      "artifact_id": "zd1200_kernel_elf",
      "name": "machine_restart_qemu",
      "signature_hex": "?? ec 04 c7 04 24 ?? ?? ?? ?? e8 ?? ?? ?? ?? 8b 0d ?? ?? ?? ?? 85 c9 75 06 ff 15 ?? ?? ?? ?? c7 05 ?? ?? ?? ?? 00 00 00 00 ff 15 ?? ?? ?? ?? 83 c4 04 c3",
      "patch_offset": 0,
      "expected_hex": "?? ec 04 c7 04 24 ??",
      "replacement_hex": "b0 fe e6 64 f4 eb fd",
      "description": "machine_restart(): preserve guest reboot by requesting a QEMU i8042 system reset"
    },
    {
      "artifact_id": "zd1200_kernel_elf",
      "name": "elf_section_name_tuning",
      "signature_hex": "00 2e 73 68 73 74 72 74 61 62 00 2e 72 65 6c 2e 74 65 78 74 00 2e 6e 6f 74 65 73 00",
      "patch_offset": 1,
      "expected_hex": "2e 73 68 73 74 72 74 61 62",
      "replacement_hex": "00 00 00 00 00 00 00 00 00",
      "description": "non-allocated ELF section-name bytes preserve fixed bzImage gzip capacity"
    },
    {
      "artifact_id": "zd1200_kernel_elf",
      "name": "board_data_retry",
      "signature_hex": "31c083c4185b5e5fc3c70424????????e8????????b801000000e8????????b8????????e8????????e9????????",
      "patch_offset": 9,
      "expected_hex": "c70424????",
      "replacement_hex": "e9????????",
      "description": "skip physical board-data retry/recovery path",
      "rel32_exit": 41
    }
  ]
}