|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "S5L8922"
m (→Boot Chain) |
m (→Userland) |
||
| Line 9: | Line 9: | ||
* Unreleased exploit (demonstrated by Geohot) |
* Unreleased exploit (demonstrated by Geohot) |
||
| − | === [[ |
+ | === [[Firmware|Userland]] === |
* [[MobileBackup Copy Exploit]] - Works up to [[iOS]] 3.1.3 |
* [[MobileBackup Copy Exploit]] - Works up to [[iOS]] 3.1.3 |
||
* [[BPF STX Kernel Write Exploit]] - Works up to [[iOS]] 3.1.3 |
* [[BPF STX Kernel Write Exploit]] - Works up to [[iOS]] 3.1.3 |
||
Revision as of 23:50, 29 July 2010
This is the processor used in the iPod Touch 3G.
Contents
Exploits
iBoot / Kernel
- usb_control_msg(0x21, 2) Exploit - 3.1.2 and below.
- Unreleased exploit (demonstrated by Geohot)
Bootrom
- Unreleased exploit (demonstrated by Geohot)
Userland
- MobileBackup Copy Exploit - Works up to iOS 3.1.3
- BPF STX Kernel Write Exploit - Works up to iOS 3.1.3
Information
The load address is at 0x41000000 (same as the S5l8920).
Boot Chain
Bootrom->LLB->iBoot->Kernel->System Software
The entire boot chain (except the bootrom) resides on the NAND flash (instead of part of it on NOR flash as in earlier devices).
