forked from arti/vt1200
The firmware's tftp_open hangs in its resolver from the rdebug process, so the payload speaks RFC 783 over the firmware socket API: socket(2,2,0), sendto(RRQ), recvfrom(DATA)/ACK into a malloc'd buffer, close. Verified live: 600 B fetched from 192.168.99.1 into the malloc buffer, server RRQ logged, and rdebug peek matches probe.bin byte-for-byte. Notes: dwt/notes/TCPIP.md (function table, ABI, limits) and the loader/transport hand-off in dwt/notes/LOADER_CROSS.md.
8 lines
137 B
Plaintext
8 lines
137 B
Plaintext
# SDK scratch (GSPA/GSPLNK tools and intermediate files)
|
|
work/
|
|
__pycache__/
|
|
|
|
# MAME runtime state, recreated per run
|
|
run/cfg/
|
|
run/nvram/
|