arti 3cd03cdc19 fix crash: 0x23CC50 is the RDP pointer, not a CSR0 shadow ...

The restore wrote 0x0042 into 0x23CC50, overwriting the driver's RDP pointer
(0x05800000); the next CSR access then targeted 0x0042 and the terminal died
with an illegal opcode. The TX kick does move @0x23CC50,a3 / move *a3,a5 --
it reads the live CSR0 and ORs TDMD, there is no shadow cell.

Report: section 10 corrected, section 62 added with the disassembly and the
consequence.

2026-10-30 15:56:08 +02:00

..

build

fix crash: 0x23CC50 is the RDP pointer, not a CSR0 shadow

2026-10-30 15:56:08 +02:00

.gitignore

networking RE report + LANCE payload variants

2026-10-30 01:25:21 +02:00

build-lance.sh

networking RE report + LANCE payload variants

2026-10-30 01:25:21 +02:00

build-tcp.sh

networking RE report + LANCE payload variants

2026-10-30 01:25:21 +02:00

build.sh

networking RE report + LANCE payload variants

2026-10-30 01:25:21 +02:00

entry.asm

networking RE report + LANCE payload variants

2026-10-30 01:25:21 +02:00

lance_bare.c

networking RE report + LANCE payload variants

2026-10-30 01:25:21 +02:00

lance_fixlen.c

fix crash: 0x23CC50 is the RDP pointer, not a CSR0 shadow

2026-10-30 15:56:08 +02:00

lance_idonclear.c

networking RE report + LANCE payload variants

2026-10-30 01:25:21 +02:00

lance_init2.c

networking RE report + LANCE payload variants

2026-10-30 01:25:21 +02:00

lance_longwait.c

networking RE report + LANCE payload variants

2026-10-30 01:25:21 +02:00

lance_stopinit.c

networking RE report + LANCE payload variants

2026-10-30 01:25:21 +02:00

lance.c

fix crash: 0x23CC50 is the RDP pointer, not a CSR0 shadow

2026-10-30 15:56:08 +02:00

romapi.h

networking RE report + LANCE payload variants

2026-10-30 01:25:21 +02:00

send.py

networking RE report + LANCE payload variants

2026-10-30 01:25:21 +02:00

tcpstream.c

networking RE report + LANCE payload variants

2026-10-30 01:25:21 +02:00

udpstream.c

networking RE report + LANCE payload variants

2026-10-30 01:25:21 +02:00