Kernel Patches

From The iPhone Wiki
Revision as of 13:10, 18 August 2013 by Http (talk | contribs) (iOS 5.1.1b - 9B208: changed b to r, as requested by Adaminsull (b is beta))
Jump to: navigation, search

For the patches applied together with a jailbreak, most groups rely on a list of patches generated by comex. See https://github.com/comex/datautils0/blob/master/make_kernel_patchfile.c

See also saurik's comment for a list of "the 'best practice' patches that jailbreaks install by default" on ycombinator.

Kernel Offsets

(Initial list copied from Unthredera1n source code.)

Offsets

iOS 4.3.4 - 8K2

Symbol k48ap n18ap n81ap n88ap n90ap
KERNEL_AMFI_BINARY_CACHE 0x80355394 0x80706394 0x80618394 0x80688394 0x80759394
KERNEL_CS_ENFORCEMENT_DISABLE 0x8027EB5C 0x8027EB5C 0x8027EB5C 0x8027EB5C 0x8027EB5C
KERNEL_DEBUG_ENABLED 0x802D427C 0x802D427C 0x802D427C 0x802D427C 0x802D427C
KERNEL_FLUSH_DCACHE 0x80063504 0x80063504 0x80063504 0x80063504 0x80063504
KERNEL_FLUSH_ICACHE 0x800636F4 0x800636F4 0x800636F4 0x800636F4 0x800636F4
KERNEL_IOLOG 0x801CBE65 0x801CBE65 0x801CBE65 0x801CBE65 0x801CBE65
KERNEL_NX_ENABLE 0x8027F304 0x8027F304 0x8027F304 0x8027F304 0x8027F304
KERNEL_PROC_ENFORCE 0x8029C1E4 0x8029C1E4 0x8029C1E4 0x8029C1E4 0x8029C1E4
KERNEL_SANDBOX 0x80366CA6 0x807EACA6 0x80939CA6 0x80809CA6 0x80966CA6
KERNEL_SYSCALL0 0x802926EC 0x802926EC 0x802926EC 0x802926EC 0x802926EC
KERNEL_SYSCALL0_VALUE 0x8018246D 0x8018246D 0x8018246D 0x8018246D 0x8018246D
KERNEL_TASK_FOR_PID 0x801A7DF6 0x801A7DF6 0x801A7DF6 0x801A7DF6 0x801A7DF6
KERNEL_VM_MAP_ENTER 0x80043FC8 0x80043FC8 0x80043FC8 0x80043FC8 0x80043FC8
KERNEL_VM_MAP_PROTECT 0x8004115E 0x8004115E 0x8004115E 0x8004115E 0x8004115E

iOS 4.3.5 - 8L1

Symbol k48ap n18ap n81ap n88ap n90ap
KERNEL_AMFI_BINARY_CACHE 0x80355394 0x80706394 0x80618394 0x80688394 0x80759394
KERNEL_CS_ENFORCEMENT_DISABLE 0x8027EB5C 0x8027EB5C 0x8027EB5C 0x8027EB5C 0x8027EB5C
KERNEL_DEBUG_ENABLED 0x802D427C 0x802D427C 0x802D427C 0x802D427C 0x802D427C
KERNEL_FLUSH_DCACHE 0x80063504 0x80063504 0x80063504 0x80063504 0x80063504
KERNEL_FLUSH_ICACHE 0x800636F4 0x800636F4 0x800636F4 0x800636F4 0x800636F4
KERNEL_IOLOG 0x801CBE65 0x801CBE65 0x801CBE65 0x801CBE65 0x801CBE65
KERNEL_NX_ENABLE 0x8027F304 0x8027F304 0x8027F304 0x8027F304 0x8027F304
KERNEL_PROC_ENFORCE 0x8029C1E4 0x8029C1E4 0x8029C1E4 0x8029C1E4 0x8029C1E4
KERNEL_SANDBOX 0x80366CA6 0x807EACA6 0x80939CA6 0x80809CA6 0x80966CA6
KERNEL_SYSCALL0 0x802926EC 0x802926EC 0x802926EC 0x802926EC 0x802926EC
KERNEL_SYSCALL0_VALUE 0x8018246D 0x8018246D 0x8018246D 0x8018246D 0x8018246D
KERNEL_TASK_FOR_PID 0x801A7DF6 0x801A7DF6 0x801A7DF6 0x801A7DF6 0x801A7DF6
KERNEL_VM_MAP_ENTER 0x80043FC8 0x80043FC8 0x80043FC8 0x80043FC8 0x80043FC8
KERNEL_VM_MAP_PROTECT 0x8004115E 0x8004115E 0x8004115E 0x8004115E 0x8004115E

iOS 5.0 - 9A334

Symbol k48ap n18ap n81ap n88ap n90ap n92ap
KERNEL_CS_ENFORCEMENT 0x80045738 0x80045738 0x80045738 0x80045738 0x80045738 0x80045738
KERNEL_FLUSH_DCACHE 0x800719C4 0x800719C4 0x800719C4 0x800719C4 0x800719C4 0x800719C4
KERNEL_FLUSH_ICACHE 0x80071AC4 0x80071AC4 0x80071AC4 0x80071AC4 0x80071AC4 0x80071AC4
KERNEL_IOLOG 0x80203EDD 0x80203EDD 0x80203EDD 0x80203EDD 0x80203EDD 0x80203EDD
KERNEL_NX_ENABLE 0x802BAB84 0x802BAB84 0x802BAB84 0x802BAB84 0x802BAB84 0x802BAB84
KERNEL_PE_DEBUGGER 0x80241704 0x80241700 0x80241704 0x80241700 0x80241704 0x80241704
KERNEL_SYSCALL0 0x802CCBB0 0x802CCBB0 0x802CCBB0 0x802CCBB0 0x802CCBB0 0x802CCBB0
KERNEL_SYSCALL0_VALUE 0x801B2F79 0x801B2F79 0x801B2F79 0x801B2F79 0x801B2F79 0x801B2F79
KERNEL_TASK_FOR_PID0 0x801DFAA4 0x801DFAA4 0x801DFAA4 0x801DFAA4 0x801DFAA4 0x801DFAA4
KERNEL_VM_ENTER 0x800497D4 0x800497D4 0x800497D4 0x800497D4 0x800497D4 0x800497D4

iOS 5.0.1 - 9A405

Symbol k48ap n18ap n81ap n88ap n90ap n92ap
KERNEL_CS_ENFORCEMENT 0x80045738 0x80045738 0x80045738 0x80045738 0x80045738 0x80045738
KERNEL_FLUSH_DCACHE 0x800719C4 0x800719C4 0x800719C4 0x800719C4 0x800719C4 0x800719C4
KERNEL_FLUSH_ICACHE 0x80071AC4 0x80071AC4 0x80071AC4 0x80071AC4 0x80071AC4 0x80071AC4
KERNEL_IOLOG 0x80203F7D 0x80203F7D 0x80203F7D 0x80203F7D 0x80203F7D 0x80203F7D
KERNEL_NX_ENABLE 0x802BAB84 0x802BAB84 0x802BAB84 0x802BAB84 0x802BAB84 0x802BAB84
KERNEL_PE_DEBUGGER 0x802417A4 0x802417A0 0x802417A4 0x802417A0 0x802417A4 0x802417A4
KERNEL_SYSCALL0 0x802CCBB0 0x802CCBB0 0x802CCBB0 0x802CCBB0 0x802CCBB0 0x802CCBB0
KERNEL_SYSCALL0_VALUE 0x801B3015 0x801B3015 0x801B3015 0x801B3015 0x801B3015 0x801B3015
KERNEL_TASK_FOR_PID0 0x801DFB40 0x801DFB40 0x801DFB40 0x801DFB40 0x801DFB40 0x801DFB40
KERNEL_VM_ENTER 0x800497D4 0x800497D4 0x800497D4 0x800497D4 0x800497D4 0x800497D4

iOS 5.1 - 9B176

Symbol k48ap n18ap n81ap n88ap n90ap n92ap
KERNEL_AMFI 0x805D6718
KERNEL_AMFI_KILL 0x805D62F2
KERNEL_CS_ENFORCEMENT 0x80045874 0x80045874 0x80045874 0x80045874 0x80045874 0x80045874
KERNEL_FLUSH_DCACHE 0x80072204 0x80072204 0x80072204 0x80072204 0x80072204 0x80072204
KERNEL_FLUSH_ICACHE 0x80072304 0x80072304 0x80072304 0x80072304 0x80072304 0x80072304
KERNEL_IOLOG 0x802049DD 0x802049DD 0x802049DD 0x802049DD 0x802049DD 0x802049DD
KERNEL_NX_ENABLE 0x802BAB84 0x802BAB84 0x802BAB84 0x802BAB84 0x802BAB84 0x802BAB84
KERNEL_PE_DEBUGGER 0x8024220C 0x80242208 0x8024220C 0x80242208 0x8024220C 0x8024220C
KERNEL_SANDBOX 0x805EE61E
KERNEL_SYSCALL0 0x802CCBB0 0x802CCBB0 0x802CCBB0 0x802CCBB0 0x802CCBB0 0x802CCBB0
KERNEL_SYSCALL0_VALUE 0x801B3AA5 0x801B3AA5 0x801B3AA5 0x801B3AA5 0x801B3AA5 0x801B3AA5
KERNEL_TASK_FOR_PID0 0x801E05B4 0x801E05B4 0x801E05B4 0x801E05B4 0x801E05B4 0x801E05B4
KERNEL_VM_ENTER 0x8004992C 0x8004992C 0x8004992C 0x8004992C 0x8004992C 0x8004992C

iOS 5.1.1 - 9B206

Symbol k48ap n18ap n81ap n88ap n90ap n92ap
KERNEL_CS_ENFORCEMENT 0x80045874 0x80045874 0x80045874 0x80045874 0x80045874 0x80045874
KERNEL_FLUSH_DCACHE 0x80072204 0x80072204 0x80072204 0x80072204 0x80072204 0x80072204
KERNEL_FLUSH_ICACHE 0x80072304 0x80072304 0x80072304 0x80072304 0x80072304 0x80072304
KERNEL_IOLOG 0x802049DD 0x802049DD 0x802049DD 0x802049DD 0x802049DD 0x802049DD
KERNEL_NX_ENABLE 0x802BBB84 0x802BBB84 0x802BBB84 0x802BBB84 0x802BBB84 0x802BBB84
KERNEL_PE_DEBUGGER 0x8024220C 0x80242208 0x8024220C 0x80242208 0x8024220C 0x8024220C
KERNEL_SYSCALL0 0x802CDBB0 0x802CDBB0 0x802CDBB0 0x802CDBB0 0x802CDBB0 0x802CDBB0
KERNEL_SYSCALL0_VALUE 0x801B3AA5 0x801B3AA5 0x801B3AA5 0x801B3AA5 0x801B3AA5 0x801B3AA5
KERNEL_TASK_FOR_PID0 0x801E05B4 0x801E05B4 0x801E05B4 0x801E05B4 0x801E05B4 0x801E05B4
KERNEL_VM_ENTER 0x8004992C 0x8004992C 0x8004992C 0x8004992C 0x8004992C 0x8004992C

iOS 5.1.1r - 9B208

Symbol n90ap
KERNEL_CS_ENFORCEMENT 0x80045874
KERNEL_FLUSH_DCACHE 0x80072204
KERNEL_FLUSH_ICACHE 0x80072304
KERNEL_IOLOG 0x802049DD
KERNEL_NX_ENABLE 0x802BBB84
KERNEL_PE_DEBUGGER 0x8024220C
KERNEL_SYSCALL0 0x802CDBB0
KERNEL_SYSCALL0_VALUE 0x801B3AA5
KERNEL_TASK_FOR_PID0 0x801E05B4
KERNEL_VM_ENTER 0x8004992C

References