Files
AnyPS5/docs/dev/debt/libSceNetCtl.md
T
hugodearaujo 25b7991c6a fix(netctl): start the library initialized, as titles find it
Titles register and check NetCtl callbacks without importing
sceNetCtlInit: libSceNetCtl is an internal sysmodule the system has
started before the title runs. 007 First Light traps at start-up when
sceNetCtlRegisterCallback answers NOT_INITIALIZED.
2026-10-21 18:56:52 -03:00

5.3 KiB

libSceNetCtl technical debt

Functional

  • sceNetCtlGetNatInfo and sceNetCtlGetResult - NAT discovery and service event results are not implemented and throw after native initialization and argument checks. NAT information is 16 bytes with a 32-bit size prefix; the remaining fields are unresolved.

Unknown function info

  • sceNetCtlScanIpcInt (libSceNetCtl) - argument registers and IPC transfer directions are recovered for the info, connection, scan, NAT, bandwidth and Wi-Fi queries. The connection configuration is 1464 bytes, scan options 88, BSSID output 96, scan info 112, IPv6 info 256, internal NAT info 196, bandwidth info 32, bandwidth-estimation info 28 and Wi-Fi info 48. Their field semantics still require the receiving service; incomplete declarations preserve this gap. Scan queries transfer a six-byte BSSID and use a 64-bit in/out buffer size.

  • sceNetCtlGetInfo (libSceNetCtl) - answers from the host interface that holds an IPv4 address, preferring the one that carries the default route: its address, netmask, gateway, MTU and first two IPv4 DNS servers. The device is reported as wired, the link as connected, the IP configuration as DHCP and the HTTP proxy as off, whatever the host uses, and the Ethernet address is the one sceNetGetMacAddress reports. A gateway or DNS server the interface does not have is reported as 0.0.0.0; what a console reports then is unknown. The DHCP host name (12), the PPPoE user name (13), the HTTP proxy server (20) and the Wi-Fi BSSID and SSID (5, 6) are empty strings, as that configuration sets none of them; the remaining Wi-Fi codes (7-10) and the HTTP proxy port (21) report 0; this follows KytyPS5 and is not measured on hardware

  • sceNetCtlGetInfoV6 (libSceNetCtl, NID Jy1EO5GdlcM) - imported by PPSA08587. (int code, SceNetCtlInfoV6* info) with codes 1-5 (IP address, link-local address, default route, primary and secondary DNS) comes only from SharpProspero, whose source is unknown; shadPS4 and fpPS4 only stub it. A null info answers INVALID_ADDR, a code outside 1-5 INVALID_CODE, and a host without an IPv6 address NOT_CONNECTED, as sceNetCtlGetStateV6 reports it. The layout of each answer is unverified, so every code throws on a host with an IPv6 address

  • sceNetCtlGetResultV6 (libSceNetCtl, NID H5yARg37U5g) - (int eventType, int* errorCode) comes only from SharpProspero, whose source is unknown; shadPS4 only stubs it. Callbacks registered with sceNetCtlRegisterCallbackV6 receive no event, so event types 1-3 write 0 to errorCode; what a console writes before the first event is unmeasured. A null errorCode answers INVALID_ADDR, as sceNetCtlGetResult does, and other event types throw, as their error code on a console is unknown

  • ApRp exports are constant-success functions in the supplied native module and consume no arguments. No callers were found in the supplied system-library decompilations, so unused callback, output and configuration argument types remain unresolved. Protected stub bodies are unchanged.

Functional

  • sceNetCtlCheckCallback - host address changes stand in for the native service event queues. IPv4 callbacks receive connected/disconnected transitions and an initial event; intermediate connection states and errors are not represented. Native CheckCallback drains both IPv4 and IPv6 queues, but the host backend never delivers IPv6 events. Dispatch copies slots before invoking callbacks, so unregistering concurrently may leave one callback in flight; native dispatch holds its registration lock. Slot limits, invalid/deleted IDs and the no-op Term follow the supplied module.
  • libSceNetCtl initialization (libSceNetCtl) - the library starts initialized, as titles find it: it is the internal sysmodule 0x80000009, and PPSA11386, PPSA20049, PPSA02530, PPSA14632 and PPSA15878 register and check NetCtl callbacks without importing sceNetCtlInit. PPSA11386 executes int 0x42 at start-up unless sceNetCtlRegisterCallback returns 0. So the supplied module's SCE_NET_CTL_ERROR_NOT_INITIALIZED answers are unreachable, since Term is a no-op. Whether the console's process start or the module's start sets that state is not measured.
  • sceNetCtlGetInfo (libSceNetCtl) finds the host's default route in /proc/net/route on Linux and, on macOS, in the routing table read with sysctl(NET_RT_FLAGS, RTF_GATEWAY), where an interface-scoped default route ranks after the unscoped one
  • sceNetCtlGetIfStat (libSceNetCtl) throws on macOS: an unprivileged process reads the interface byte counters (getifaddrs and sysctl(NET_RT_IFLIST2) alike) reduced to their low 32 bits, so a total would wrap every 4 GiB