|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "Bootrom 240.4"
m (moved IBoot-240.4 to Bootrom 240.4: as discussed) |
(Merged in content from "S5L8720 (Bootrom).") |
||
| Line 1: | Line 1: | ||
| + | This is an [[S5L8720]] [[bootrom]] revision for [[N72ap|iPod touch 2G]] devices sold between September 2008 and September 2009. It is located at 0x0 and uses SDRAM @ 0x22000000 for global variables. It patches the [[Pwnage]] exploit, as the bootrom now properly checks [[LLB]]'s signature. This bootrom is, however, vulnerable to the [[0x24000 Segment Overflow]] and the [[usb_control_msg(0xA1, 1) Exploit]]. |
||
| − | {{lowercase}} |
||
| + | == MMU == |
||
| − | '''iBoot version 240.4''' is an [[S5L8720]] [[bootrom]] revision for [[N72ap|iPod touch 2G]] devices sold between September 2008 and September 2009 (MC). It patches the [[Pwnage]] exploit, as the bootrom now properly checks [[LLB]]'s signature. This bootrom is, however, vulnerable to the [[0x24000 Segment Overflow]] and the [[usb_control_msg(0xA1, 1) Exploit]]. |
||
| + | * '''0x0 - 0x40000000''': mapped as uncacheable and unbufferable |
||
| + | * '''0x0 - 0x100000 (ROM)''': remapped as cacheable and bufferable |
||
| + | * '''0x20000000 - 0x20100000 (ROM)''': remapped as cacheable and bufferable |
||
| + | * '''0x22000000 - 0x22100000 (SDRAM)''': remapped as cacheable and bufferable |
||
[[Category:Bootrom]] |
[[Category:Bootrom]] |
||
Revision as of 18:29, 12 March 2012
This is an S5L8720 bootrom revision for iPod touch 2G devices sold between September 2008 and September 2009. It is located at 0x0 and uses SDRAM @ 0x22000000 for global variables. It patches the Pwnage exploit, as the bootrom now properly checks LLB's signature. This bootrom is, however, vulnerable to the 0x24000 Segment Overflow and the usb_control_msg(0xA1, 1) Exploit.
MMU
- 0x0 - 0x40000000: mapped as uncacheable and unbufferable
- 0x0 - 0x100000 (ROM): remapped as cacheable and bufferable
- 0x20000000 - 0x20100000 (ROM): remapped as cacheable and bufferable
- 0x22000000 - 0x22100000 (SDRAM): remapped as cacheable and bufferable
