Posted by Zach C on Jun 30
Part 9 of Broken, Abandoned, and Forgotten Code is up! In this part,
we fill out the ambit firmware header enough to satisfy upnpd’s loose
validation and have it write the image to flash. Additionally, we have
to binary patch upnpd to get it to play nicely in QEMU, since there’s
no physical flash memory in the emulator.
Here’s the link to part 9:
http://shadow-file.blogspot.com/2015/06/abandoned-part-09.html
Here was a mid-term…