Lakr 4cfeca3a7e Fix A2: rewrite AMFI execve kill path patch to target shared epilogue ...

Old approach patched vnode-type assertion BLs (CBZ→panic). New approach
scans backward from function end for the shared MOV W0,#1 kill return
before the LDP x29,x30 epilogue and changes it to MOV W0,#0. Single
instruction converts all 5+ kill paths to success. Boot-tested OK.

2026-03-04 20:43:36 +08:00

..

kernel_patch_jb

Fix A2: rewrite AMFI execve kill path patch to target shared epilogue

2026-03-04 20:43:36 +08:00

devmode_xpc_protocol.md

Create txm_return_mechanism.md

2026-03-04 13:34:02 +08:00

firmware_manifest_and_origins.md

Create txm_return_mechanism.md

2026-03-04 13:34:02 +08:00

iboot_patches.md

refactor: split patchers into base/mixin modules and format scripts

2026-03-04 15:19:17 +08:00

kernel_fairplay_kexts.md

Create txm_return_mechanism.md

2026-03-04 13:34:02 +08:00

kernel_jb_patch_notes.md

Create txm_return_mechanism.md

2026-03-04 13:34:02 +08:00

kernel_patcher_verification.md

Create txm_return_mechanism.md

2026-03-04 13:34:02 +08:00

keyboard_event_pipeline.md

Create txm_return_mechanism.md

2026-03-04 13:34:02 +08:00

patch_comparison_all_variants.md

fix TXM selector24 bypass: return 0xA1 (PASS) instead of NOP/fail

2026-03-04 18:56:07 +08:00

txm_fullchain_analysis.md

fix TXM selector24 bypass: return 0xA1 (PASS) instead of NOP/fail

2026-03-04 18:56:07 +08:00

txm_jb_patches.md

Create txm_return_mechanism.md

2026-03-04 13:34:02 +08:00

txm_selector24_analysis.md

fix TXM selector24 bypass: return 0xA1 (PASS) instead of NOP/fail

2026-03-04 18:56:07 +08:00

txm_variant_diff.md

Create txm_return_mechanism.md

2026-03-04 13:34:02 +08:00