|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "S5L8922"
m (→Userland) |
|||
| Line 8: | Line 8: | ||
=== [[S5L8922 (Bootrom)|Bootrom]] === |
=== [[S5L8922 (Bootrom)|Bootrom]] === |
||
* Unreleased exploit (demonstrated by Geohot) |
* Unreleased exploit (demonstrated by Geohot) |
||
| + | * Unreleased exploit (pod2g) |
||
=== [[Firmware|Userland]] === |
=== [[Firmware|Userland]] === |
||
Revision as of 19:36, 9 September 2010
This is the processor used in the iPod Touch 3G.
Contents
Exploits
iBoot / Kernel
- usb_control_msg(0x21, 2) Exploit - 3.1.2 and below.
- Unreleased exploit (demonstrated by Geohot)
Bootrom
- Unreleased exploit (demonstrated by Geohot)
- Unreleased exploit (pod2g)
Userland
- MobileBackup Copy Exploit - Works up to iOS 3.1.3
- BPF STX Kernel Write Exploit - Works up to iOS 3.1.3
Information
The load address is at 0x41000000 (same as the S5l8920).
Boot Chain
Bootrom->LLB->iBoot->Kernel->System Software
The entire boot chain (except the bootrom) resides on the NAND flash (instead of part of it on NOR flash as in earlier devices).
