|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Diags (iBoot command)
This was an exploit in pre 2.0 versions of iBoot
Credit
Exploit
This is a very simple exploit. In earlier iBoots, if a parameter was given to the 'diags' command, then it would jump to whatever address argv[1] specified, but not before trashing the I/O table. You can run unsigned code using this, but there's no guarantee about the state of the processor.
In 2.0 iBoots, they check the permission register for this command, so the exploit doesn't work.
