Diags

From The iPhone Wiki
Revision as of 22:01, 27 July 2008 by Geohot (talk | contribs) (New page: This was an exploit in pre 2.0 versions of iBoot ==Credit== The dev team ==Exploit== The diags function can be passed a parameter. It jumps to that parameter, but not before trashing the...)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

This was an exploit in pre 2.0 versions of iBoot

Credit

The dev team

Exploit

The diags function can be passed a parameter. It jumps to that parameter, but not before trashing the I/O table. You can run unsigned code using this, but there's no guarantee about the state of the that processor

In 2.0 iBoots, they check the permission register.