|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "S5L8920"
(→Bootrom) |
m (remove broken link to THUMB-2, casing, self-link, real arrows) |
||
| Line 1: | Line 1: | ||
This is the processor used in the [[iPhone 3GS]]. |
This is the processor used in the [[iPhone 3GS]]. |
||
| − | S5L8920 using |
+ | [[S5L8920]] using THUMB-2 instruction set as well as ARM and THUMB ones. Binaries included in iOS are compiled for only [[ARMv7]] and are not compatible with older CPUs. |
== Exploits == |
== Exploits == |
||
| − | === [[iBoot]] === |
||
| − | * [[iBoot Environment Variable Overflow]] - Works up to [[iOS]] 3.1 beta 3 |
||
| − | * [[usb_control_msg(0x21, 2) Exploit]] - Works up to [[iOS]] 3.1.2 |
||
| − | |||
=== [[S5L8920 (Bootrom)|Bootrom]] === |
=== [[S5L8920 (Bootrom)|Bootrom]] === |
||
* [[0x24000 Segment Overflow]] - only in [[iBoot-359.3]] |
* [[0x24000 Segment Overflow]] - only in [[iBoot-359.3]] |
||
* [[Limera1n Exploit]] |
* [[Limera1n Exploit]] |
||
| + | |||
| + | == Related iOS Exploits == |
||
| + | === [[iBoot]] === |
||
| + | * [[iBoot Environment Variable Overflow]] - Works up to [[iOS]] 3.1 beta 3 |
||
| + | * [[usb_control_msg(0x21, 2) Exploit]] - Works up to [[iOS]] 3.1.2 |
||
=== [[Kernel]] === |
=== [[Kernel]] === |
||
| Line 23: | Line 24: | ||
== Boot Chain == |
== Boot Chain == |
||
| − | [[S5L8920 (Bootrom)|Bootrom]] |
+ | [[S5L8920 (Bootrom)|Bootrom]]→[[LLB]]→[[iBoot]]→[[Kernel]]→[[Firmware|System Software]] |
== See also == |
== See also == |
||
Revision as of 20:08, 9 March 2012
This is the processor used in the iPhone 3GS.
S5L8920 using THUMB-2 instruction set as well as ARM and THUMB ones. Binaries included in iOS are compiled for only ARMv7 and are not compatible with older CPUs.
Contents
Exploits
Bootrom
Related iOS Exploits
iBoot
- iBoot Environment Variable Overflow - Works up to iOS 3.1 beta 3
- usb_control_msg(0x21, 2) Exploit - Works up to iOS 3.1.2
Kernel
- BPF STX Kernel Write Exploit - Works up to iOS 3.1.3
- IOSurface Kernel Exploit - Works up to iOS 4.0.1
- Packet Filter Kernel Exploit - Works up to iOS 4.1
- HFS Legacy Volume Name Stack Buffer Overflow - Works up to iOS 4.2.1
Userland
- MobileBackup Copy Exploit - Works up to iOS 3.1.3
- Malformed CFF Vulnerability - Works up to iOS 4.0.1
Boot Chain
Bootrom→LLB→iBoot→Kernel→System Software
