AnyPS5/docs/dev/debt/libSceNetCtl.md

libSceNetCtl technical debt

Functional

• sceNetCtlGetNatInfo - NAT discovery is not implemented and throws after native initialization and argument checks. NAT information is 16 bytes with a 32-bit size prefix; the remaining fields are unresolved.

Unknown function info

• sceNetCtlScanIpcInt (libSceNetCtl) - argument registers and IPC transfer directions are recovered for the info, connection, scan, NAT, bandwidth and Wi-Fi queries. The connection configuration is 1464 bytes, scan options 88, BSSID output 96, scan info 112, IPv6 info 256, internal NAT info 196, bandwidth info 32, bandwidth-estimation info 28 and Wi-Fi info 48. Their field semantics still require the receiving service; incomplete declarations preserve this gap. Scan queries transfer a six-byte BSSID and use a 64-bit in/out buffer size.

• sceNetCtlGetInfo (libSceNetCtl) - answers from the host interface with an IPv4 address, preferring the default-route one: its address, netmask, gateway, MTU and first two IPv4 DNS servers. The device is always reported as wired, the link as connected, the IP configuration as DHCP and the HTTP proxy as off, and the Ethernet address is the one from sceNetGetMacAddress. A missing gateway or DNS server is 0.0.0.0; the console value is unknown. The DHCP host name (12), PPPoE user name (13), HTTP proxy server (20) and Wi-Fi BSSID and SSID (5, 6) are empty strings and the other Wi-Fi codes (7-10) and the proxy port (21) are 0, as that configuration sets none of them; this follows KytyPS5 and is not measured on hardware. One title (PPSA02225) calls code 12 at 0x1056f0f, 0xa0387f and 0xa26de5 and code 14 at 0x1056fa1; the meaning of the flag byte it checks is not shown.

• sceNetCtlGetInfoV6 (libSceNetCtl, NID Jy1EO5GdlcM) - imported by PPSA08587. (int code, SceNetCtlInfoV6* info) with codes 1-5 (IP address, link-local address, default route, primary and secondary DNS) comes only from SharpProspero, whose source is unknown; shadPS4 and fpPS4 only stub it. A null info answers INVALID_ADDR, a code outside 1-5 INVALID_CODE, and a host without an IPv6 address NOT_CONNECTED, as sceNetCtlGetStateV6 reports it. The layout of each answer is unverified, so every code throws on a host with an IPv6 address

• sceNetCtlGetResult (libSceNetCtl) - (int eventType, int* errorCode) reports no error: event types 1-3 (disconnected to IP obtained, the numbering sceNetCtlCheckCallback delivers) write 0 to errorCode, as sceNetCtlGetResultV6 does. The error code a console reports for each event, a disconnection's cause in particular, is unconfirmed. Callers found: PPSA20052 (Worms Armageddon: Anniversary Edition 01.003.000) calls it 2 s into boot, and PPSA24191 (Monster Hunter Wilds) without a network, with event 1 (disconnected) as its first call. A null errorCode answers INVALID_ADDR and other event types throw, as their error code on a console is unknown

• sceNetCtlGetResultV6 (libSceNetCtl, NID H5yARg37U5g) - (int eventType, int* errorCode) comes only from SharpProspero, whose source is unknown; shadPS4 only stubs it. Callbacks registered with sceNetCtlRegisterCallbackV6 receive no event, so event types 1-3 write 0 to errorCode; what a console writes before the first event is unmeasured. A null errorCode answers INVALID_ADDR, as sceNetCtlGetResult does, and other event types throw, as their error code on a console is unknown

• sceNetCtlRegisterCallbackForNpToolkit, sceNetCtlUnregisterCallbackForNpToolkit, sceNetCtlCheckCallbackForNpToolkit (libSceNetCtl) - a table of eight callbacks apart from the IPv4 and IPv6 ones, with the (int eventType, void* arg) callback, follows shadPS4, whose NpToolkit check delivers the same events to that table. The three share the register, unregister and dispatch of sceNetCtlRegisterCallback, sceNetCtlUnregisterCallback and sceNetCtlCheckCallback, so they return the same initialization, address, slot-limit and ID errors, and the check reports the state sceNetCtlCheckCallback does. Whether the console keeps this table apart, and what sceNetCtlCheckCallback does with it, is unverified on hardware

• sceNetCtlGetStateIpcInt, sceNetCtlGetStateV6IpcInt, sceNetCtlGetResultIpcInt, sceNetCtlGetResultV6IpcInt, sceNetCtlGetInfoIpcInt, sceNetCtlGetInfoV6IpcInt, sceNetCtlRegisterCallbackIpcInt, sceNetCtlUnregisterCallbackIpcInt, sceNetCtlRegisterCallbackV6IpcInt and sceNetCtlUnregisterCallbackV6IpcInt (libSceNetCtl) - answer as their public twins, whose recovered argument registers they share: the getters return and write what sceNetCtlGetState, GetStateV6, GetResult, GetResultV6, GetInfo and GetInfoV6 do, throws included, and the callback forms use the IPv4 and IPv6 tables, as no IpcInt check is exported to deliver a table of their own. This rests on the matching call shapes, not on a measurement; whether the internal client answers a null pointer or a bad code before its service does is unknown

• ApRp exports are constant-success functions in the supplied native module and consume no arguments. No callers were found in the supplied system-library decompilations, so unused callback, output and configuration argument types remain unresolved. Protected stub bodies are unchanged.

Functional

• sceNetCtlCheckCallback - host address changes stand in for the native service event queues. IPv4 callbacks receive connected/disconnected transitions and an initial event; intermediate connection states and errors are not represented. Native CheckCallback drains both IPv4 and IPv6 queues, but the host backend never delivers IPv6 events. Dispatch copies slots before invoking callbacks, so unregistering concurrently may leave one callback in flight; native dispatch holds its registration lock. Slot limits, invalid/deleted IDs and the no-op Term follow the supplied module.
• libSceNetCtl initialization (libSceNetCtl) - the library starts initialized, as titles find it: it is the internal sysmodule 0x80000009, and PPSA11386, PPSA20049, PPSA02530, PPSA14632 and PPSA15878 register and check NetCtl callbacks without importing sceNetCtlInit. PPSA11386 executes int 0x42 at start-up unless sceNetCtlRegisterCallback returns 0. So the supplied module's SCE_NET_CTL_ERROR_NOT_INITIALIZED answers are unreachable, since Term is a no-op. Whether the console's process start or the module's start sets that state is not measured.
• sceNetCtlGetInfo (libSceNetCtl) finds the host's default route in /proc/net/route on Linux and, on macOS, in the routing table read with sysctl(NET_RT_FLAGS, RTF_GATEWAY), where an interface-scoped default route ranks after the unscoped one
• sceNetCtlGetIfStat (libSceNetCtl) throws on macOS: an unprivileged process reads the interface byte counters (getifaddrs and sysctl(NET_RT_IFLIST2) alike) reduced to their low 32 bits, so a total would wrap every 4 GiB
• Host interface cache (libSceNetCtl) - on Windows, sceNetCtlGetState, sceNetCtlGetStateV6, sceNetCtlCheckCallback, sceNetCtlGetIfStat and sceNetCtlGetInfo reuse the last host interface query until NotifyUnicastIpAddressChange, NotifyIpInterfaceChange or NotifyRouteChange2 reports a change, instead of calling GetAdaptersAddresses on every call. A DNS server change with no address, interface or route change is seen only at the next such change. If the notifications cannot be registered, every call queries the host as before.