Difference between revisions of "Talk:Ultrasn0w"

From The iPhone Wiki
Jump to: navigation, search
Line 3: Line 3:
 
1. copy task_sim into memory
 
1. copy task_sim into memory
 
2. patch task_sim in the usual way(too bad i don't really understand the baseband at all)
 
2. patch task_sim in the usual way(too bad i don't really understand the baseband at all)
3. modify the nucleus task struct to use the in memory task_sim(although idk why theres no execute on the stack, hell P4s don't have that)
+
3. modify the nucleus task struct to use the in memory task_sim(although idk why theres no execute on the stack, this extend to the rest of memory?)
 
4. reset the sim card
 
4. reset the sim card
   
 
no real reversing required. i could've had this in july dammit :-P
 
no real reversing required. i could've had this in july dammit :-P
  +
 
i also think this approach might solve some peoples problems with it dying after 10 minutes
 
i also think this approach might solve some peoples problems with it dying after 10 minutes
  +
  +
~geohot

Revision as of 05:51, 2 January 2009

Thinking about this, I know how I could've done the unlock. I'm so lazy. This might be what yellowsn0w does already; theres a little object code in your source, so I don't know :-)

1. copy task_sim into memory
2. patch task_sim in the usual way(too bad i don't really understand the baseband at all)
3. modify the nucleus task struct to use the in memory task_sim(although idk why theres no execute on the stack, this extend to the rest of memory?)
4. reset the sim card

no real reversing required. i could've had this in july dammit :-P

i also think this approach might solve some peoples problems with it dying after 10 minutes

~geohot