The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "User talk:Pod2g"
Line 27: | Line 27: | ||
I just tested to make a payload with just a RET (MOV PC, LR) in it and it didn't crashed my ipod. |
I just tested to make a payload with just a RET (MOV PC, LR) in it and it didn't crashed my ipod. |
||
It means nothing but... I continue ! |
It means nothing but... I continue ! |
||
− | + | ---- |
|
+ | I wish we can talk by email. How can I send my email to you in a secure way ? |
||
+ | |||
+ | == contact == |
||
+ | |||
+ | I hang out in #iphone-hax on irc.osx86.hu if you have that |
Revision as of 01:14, 23 September 2010
Size
Hey, thanks for the input on arm7_go. I'll try i tout....but when you said before 0x00000048, what exactly did you mean? The thing is, anyway, when I assemble it with gas there is no opcode there that has 0x48 in it...or is this not what you mean?
Thanks, -chronic
PS: If this works I'll mirror it in the a7go page, I am just putting it here because people can see it in recent changes anyway, and because you will get a notification at the top of the screen next time you come here telling you that you have new messages.
Chronic,
Here is the script I use to compile with gas (I am not expert... it is my experiments) :
$ cat compile.sh arm-elf-as.exe -mcpu=arm7 -o test.o test.asm arm-elf-objcopy.exe -I elf32-little -O binary test.o test.payload
Then for the moment, I modify test.payload to add its size as a little endian double word manually (using WinHex) For your example : the size of your code is 72 => 0x48. So I add 48 00 00 00 just before the payload.
After that I upload the payload with your iRecovery -f Then arm7_go :)
I just tested to make a payload with just a RET (MOV PC, LR) in it and it didn't crashed my ipod. It means nothing but... I continue !
I wish we can talk by email. How can I send my email to you in a secure way ?
contact
I hang out in #iphone-hax on irc.osx86.hu if you have that