Difference between revisions of "Sandbox"

From The iPhone Wiki
Jump to: navigation, search
(REALLY LIAM?)
Line 1: Line 1:
 
this is apple's software based [[Wikipedia:Hypervisor|Hypervisor]] that was introduced in [[firmware]] 2.0
 
this is apple's software based [[Wikipedia:Hypervisor|Hypervisor]] that was introduced in [[firmware]] 2.0
   
== problem's ==
+
== Problem's ==
*this made all [[appstore]] app's need updating to work on the new [[ios]]
+
*this made all [[App Store]]'s apps need updating to work on the new [[iOS]]
   
 
*for app's to run they needed to have a folder called [[_Codesign]] in it was a file called [[CodeResources]]
 
*for app's to run they needed to have a folder called [[_Codesign]] in it was a file called [[CodeResources]]
*if a [[userland]] exploit was discovered in an [[appstore]] app the [[CodeResources]] would become invalid when a file was injected
+
*if a [[userland]] exploit was discovered in an [[App Store]] app the [[CodeResources]] would become invalid when a file was injected
*the checks are not as hard on app's in the [[firmware]] [[http://pastebin.com/6C55pTxf]] ( only version.plist is checked to prevent a [[soft_upgrade]] )
+
*the checks are not as hard on app's in the [[firmware]] [[http://pastebin.com/6C55pTxf]] (only version.plist is checked to prevent a [[soft_upgrade]] )
   
== exploit's ==
+
== Exploit's ==
 
because of the dependancy on the [[CodeResources]] file it is vonrable to the [[Incomplete_Codesign_Exploit]]
 
because of the dependancy on the [[CodeResources]] file it is vonrable to the [[Incomplete_Codesign_Exploit]]

Revision as of 00:11, 27 October 2010

this is apple's software based Hypervisor that was introduced in firmware 2.0

Problem's

  • this made all App Store's apps need updating to work on the new iOS

Exploit's

because of the dependancy on the CodeResources file it is vonrable to the Incomplete_Codesign_Exploit