Changes

|-

|-

| 4

| 4

| ?

| IRQ error flag

|-

|-

| 5

| 5

| Enable

| Enable

|}

|}

=== REG_CAMDATA ===

=== REG_CAMDATA ===

|}

|}

For retrieving camera video data, [[NDMA]] with arm9 startup mode 11(camera) is used with this src register. Transfer lengths used are 0x18000 and 0x96000. The former is 256x192(actual camera resolution to final video data resolution conversion is handled by DSP) and the latter is 640x480.

For retrieving camera video data, [[NDMA]] with arm9 startup mode 11(camera) is used with this src register. The NDMA frame transfer is started when the cameras [[Interrupts|IRQ]] was thrown. Supported DSP final resolutions are 256x192 and 640x480, the corresponding frame transfer lengths are 0x18000 and 0x96000.(The 256x192 final resolution is converted by the DSP from the camera resolution)

The DSP fw binary still seems to be loaded after cameras were used in the exploited title, as reading this register(with cameras reinitialized prior to that) results in changing data rather than fixed data. The DSP is a proprietary CEVA DSP, since this ISA is proprietary fw binaries can't be compiled for it. Thus homebrew could potentially only use cameras when the exploited title can use cameras and cameras were used in the title prior to running hax.

The DSP fw binary still seems to be loaded after cameras were used in the exploited title, as reading this register(with cameras reinitialized prior to that) results in changing data rather than fixed data. The DSP is a proprietary CEVA DSP, since this ISA is proprietary fw binaries can't be compiled for it. Thus homebrew could potentially only use cameras when the exploited title can use cameras and cameras were used in the title prior to running hax.