|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "S5L8920"
m |
(→Exploits) |
||
| Line 4: | Line 4: | ||
== Exploits == |
== Exploits == |
||
| − | === [[iBoot |
+ | === [[iBoot]] === |
| − | * [[iBoot Environment Variable Overflow]] - |
+ | * [[iBoot Environment Variable Overflow]] - Works up to [[iOS]] 3.1 beta 3 |
| − | * [[usb_control_msg(0x21, 2) Exploit]] - 3.1.2 |
+ | * [[usb_control_msg(0x21, 2) Exploit]] - Works up to [[iOS]] 3.1.2 |
=== [[S5L8920 (Bootrom)|Bootrom]] === |
=== [[S5L8920 (Bootrom)|Bootrom]] === |
||
| − | * [[0x24000 Segment Overflow]] |
+ | * [[0x24000 Segment Overflow]] - only in [[iBoot-359.3]] |
| − | ===[[ |
+ | === [[Kernel]] === |
| − | * [[ |
+ | * [[BPF STX Kernel Write Exploit]] - Works up to [[iOS]] 3.1.3 |
| − | * [[ |
+ | * [[IOSurface Kernel Exploit]] - Works up to [[iOS]] 4.0.1 |
| + | |||
| + | === [[Userland]] === |
||
| + | * [[MobileBackup Copy Exploit]] - Works up to [[iOS]] 3.1.3 |
||
| + | * [[PDF CFF Font Stack Overflow]] - Works up to [[iOS]] 4.0.1 |
||
== Boot Chain == |
== Boot Chain == |
||
Revision as of 00:55, 23 September 2010
This is the processor used in the iPhone 3GS.
S5L8920 using THUMB-2 instruction set as well as ARM and THUMB ones. Binaries included in iOS are compiled for only Armv7 and are not compatible with older CPUs.
Contents
Exploits
iBoot
- iBoot Environment Variable Overflow - Works up to iOS 3.1 beta 3
- usb_control_msg(0x21, 2) Exploit - Works up to iOS 3.1.2
Bootrom
- 0x24000 Segment Overflow - only in iBoot-359.3
Kernel
- BPF STX Kernel Write Exploit - Works up to iOS 3.1.3
- IOSurface Kernel Exploit - Works up to iOS 4.0.1
Userland
- MobileBackup Copy Exploit - Works up to iOS 3.1.3
- PDF CFF Font Stack Overflow - Works up to iOS 4.0.1
Boot Chain
Bootrom->LLB->iBoot->Kernel->System Software
