|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "Talk:Ultrasn0w"
| Line 3: | Line 3: | ||
1. copy task_sim into memory |
1. copy task_sim into memory |
||
2. patch task_sim in the usual way(too bad i don't really understand the baseband at all) |
2. patch task_sim in the usual way(too bad i don't really understand the baseband at all) |
||
| − | 3. modify the nucleus task struct to use the in memory task_sim(although idk why theres no execute on the stack, |
+ | 3. modify the nucleus task struct to use the in memory task_sim(although idk why theres no execute on the stack, this extend to the rest of memory?) |
4. reset the sim card |
4. reset the sim card |
||
no real reversing required. i could've had this in july dammit :-P |
no real reversing required. i could've had this in july dammit :-P |
||
| + | |||
i also think this approach might solve some peoples problems with it dying after 10 minutes |
i also think this approach might solve some peoples problems with it dying after 10 minutes |
||
| + | |||
| + | ~geohot |
||
Revision as of 05:51, 2 January 2009
Thinking about this, I know how I could've done the unlock. I'm so lazy. This might be what yellowsn0w does already; theres a little object code in your source, so I don't know :-)
1. copy task_sim into memory 2. patch task_sim in the usual way(too bad i don't really understand the baseband at all) 3. modify the nucleus task struct to use the in memory task_sim(although idk why theres no execute on the stack, this extend to the rest of memory?) 4. reset the sim card
no real reversing required. i could've had this in july dammit :-P
i also think this approach might solve some peoples problems with it dying after 10 minutes
~geohot
