Difference between revisions of "User talk:Pod2g"

From The iPhone Wiki
Jump to: navigation, search
(Undo revision 9376 by QWAZ (Talk))
(Undo revision 9378 by QWAZ (Talk))
Line 27: Line 27:
 
I just tested to make a payload with just a RET (MOV PC, LR) in it and it didn't crashed my ipod.
 
I just tested to make a payload with just a RET (MOV PC, LR) in it and it didn't crashed my ipod.
 
It means nothing but... I continue !
 
It means nothing but... I continue !
-----
+
----
  +
I wish we can talk by email. How can I send my email to you in a secure way ?
  +
  +
== contact ==
  +
  +
I hang out in #iphone-hax on irc.osx86.hu if you have that

Revision as of 01:14, 23 September 2010

Size

Hey, thanks for the input on arm7_go. I'll try i tout....but when you said before 0x00000048, what exactly did you mean? The thing is, anyway, when I assemble it with gas there is no opcode there that has 0x48 in it...or is this not what you mean?

Thanks, -chronic

PS: If this works I'll mirror it in the a7go page, I am just putting it here because people can see it in recent changes anyway, and because you will get a notification at the top of the screen next time you come here telling you that you have new messages.


Chronic,

Here is the script I use to compile with gas (I am not expert... it is my experiments) :

$ cat compile.sh arm-elf-as.exe -mcpu=arm7 -o test.o test.asm arm-elf-objcopy.exe -I elf32-little -O binary test.o test.payload


Then for the moment, I modify test.payload to add its size as a little endian double word manually (using WinHex) For your example : the size of your code is 72 => 0x48. So I add 48 00 00 00 just before the payload.

After that I upload the payload with your iRecovery -f Then arm7_go :)


I just tested to make a payload with just a RET (MOV PC, LR) in it and it didn't crashed my ipod. It means nothing but... I continue !


I wish we can talk by email. How can I send my email to you in a secure way ?

contact

I hang out in #iphone-hax on irc.osx86.hu if you have that