Difference between revisions of "Diags (iBoot command)"

From The iPhone Wiki
Jump to: navigation, search
(New page: This was an exploit in pre 2.0 versions of iBoot ==Credit== The dev team ==Exploit== The diags function can be passed a parameter. It jumps to that parameter, but not before trashing the...)
 
Line 2: Line 2:
   
 
==Credit==
 
==Credit==
The dev team
+
[[The dev team]]
   
 
==Exploit==
 
==Exploit==

Revision as of 22:03, 27 July 2008

This was an exploit in pre 2.0 versions of iBoot

Credit

The dev team

Exploit

The diags function can be passed a parameter. It jumps to that parameter, but not before trashing the I/O table. You can run unsigned code using this, but there's no guarantee about the state of the that processor

In 2.0 iBoots, they check the permission register.