The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "Sandbox"
(→Exploit's) |
(→Exploit's) |
||
Line 9: | Line 9: | ||
== Exploit's == |
== Exploit's == |
||
− | because of the dependancy on the CodeResources file it is |
+ | because of the dependancy on the CodeResources file it is venerable to the [[Incomplete Codesign Exploit]] |
Revision as of 00:16, 27 October 2010
this is apple's software based Hypervisor that was introduced in firmware 2.0
Problem's
- for app's to run they needed to have a folder called _Codesign in it was a file called CodeResources
- if a userland exploit was discovered in an App Store app the CodeResources would become invalid when a file was injected
- the checks are not as hard on app's in the firmware [[1]] (only version.plist is checked to prevent a soft_upgrade )
Exploit's
because of the dependancy on the CodeResources file it is venerable to the Incomplete Codesign Exploit