|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "S5L8922"
Posixninja (talk | contribs) |
(→Exploits) |
||
| Line 7: | Line 7: | ||
=== [[S5L8922 (Bootrom)|Bootrom]] === |
=== [[S5L8922 (Bootrom)|Bootrom]] === |
||
| + | * Unreleased exploit (demonstrated by Geohot) |
||
| − | * None at this time. |
||
| + | |||
| + | === Userland === |
||
| + | * [[MobileBackup Copy Exploit]] - Works up to [[iOS]] 3.1.3 |
||
| + | * [[BPF STX Kernel Write Exploit]] - Works up to [[iOS]] 3.1.3 |
||
==Information== |
==Information== |
||
Revision as of 19:48, 24 June 2010
This is the processor used in the iPod Touch 3G.
Contents
Exploits
iBoot / Kernel
- usb_control_msg(0x21, 2) Exploit - 3.1.2 and below.
- Unreleased exploit (demonstrated by Geohot)
Bootrom
- Unreleased exploit (demonstrated by Geohot)
Userland
- MobileBackup Copy Exploit - Works up to iOS 3.1.3
- BPF STX Kernel Write Exploit - Works up to iOS 3.1.3
Information
The load address is at 0x41000000 (same as the S5l8920).
Boot Chain
Bootrom->LLB->iBoot->Kernel->System Software
The entire boot chain (except the bootrom) resides on the NAND flash (instead of part of it on NOR flash as in earlier devices).
