mirror of
https://github.com/Lakr233/vphone-cli.git
synced 2026-04-05 04:59:05 +08:00
5388e0c9c5
Prefix research patch comparison doc and normalize root markdown names Rename research root markdown files to scoped topic names
598 lines
17 KiB
JSON
598 lines
17 KiB
JSON
[
|
|
{
|
|
"method": "patch_amfi_cdhash_in_trustcache",
|
|
"desc": "mov x0,#1 [AMFIIsCDHashInTrustCache]",
|
|
"va": 18446741874827090704,
|
|
"va_hex": "0xFFFFFE0008645B10",
|
|
"foff_hex": "0x01641B10"
|
|
},
|
|
{
|
|
"method": "patch_amfi_cdhash_in_trustcache",
|
|
"desc": "cbz x2,+8 [AMFIIsCDHashInTrustCache]",
|
|
"va": 18446741874827090708,
|
|
"va_hex": "0xFFFFFE0008645B14",
|
|
"foff_hex": "0x01641B14"
|
|
},
|
|
{
|
|
"method": "patch_amfi_cdhash_in_trustcache",
|
|
"desc": "str x0,[x2] [AMFIIsCDHashInTrustCache]",
|
|
"va": 18446741874827090712,
|
|
"va_hex": "0xFFFFFE0008645B18",
|
|
"foff_hex": "0x01641B18"
|
|
},
|
|
{
|
|
"method": "patch_amfi_cdhash_in_trustcache",
|
|
"desc": "ret [AMFIIsCDHashInTrustCache]",
|
|
"va": 18446741874827090716,
|
|
"va_hex": "0xFFFFFE0008645B1C",
|
|
"foff_hex": "0x01641B1C"
|
|
},
|
|
{
|
|
"method": "patch_amfi_execve_kill_path",
|
|
"desc": "mov w0,#0 [AMFI kill return \u2192 allow]",
|
|
"va": 18446741874827125644,
|
|
"va_hex": "0xFFFFFE000864E38C",
|
|
"foff_hex": "0x0164A38C"
|
|
},
|
|
{
|
|
"method": "patch_bsd_init_auth",
|
|
"desc": "mov x0,#0 [_bsd_init auth]",
|
|
"va": 18446741874820188636,
|
|
"va_hex": "0xFFFFFE0007FB09DC",
|
|
"foff_hex": "0x00FAC9DC"
|
|
},
|
|
{
|
|
"method": "patch_convert_port_to_map",
|
|
"desc": "b 0xB0E154 [_convert_port_to_map skip panic]",
|
|
"va": 18446741874815344896,
|
|
"va_hex": "0xFFFFFE0007B12100",
|
|
"foff_hex": "0x00B0E100"
|
|
},
|
|
{
|
|
"method": "patch_cred_label_update_execve",
|
|
"desc": "mov x0,xzr [_cred_label_update_execve low-risk]",
|
|
"va": 18446741874827124480,
|
|
"va_hex": "0xFFFFFE000864DF00",
|
|
"foff_hex": "0x01649F00"
|
|
},
|
|
{
|
|
"method": "patch_cred_label_update_execve",
|
|
"desc": "retab [_cred_label_update_execve low-risk]",
|
|
"va": 18446741874827124484,
|
|
"va_hex": "0xFFFFFE000864DF04",
|
|
"foff_hex": "0x01649F04"
|
|
},
|
|
{
|
|
"method": "patch_dounmount",
|
|
"desc": "NOP [_dounmount MAC check]",
|
|
"va": 18446741874817070512,
|
|
"va_hex": "0xFFFFFE0007CB75B0",
|
|
"foff_hex": "0x00CB35B0"
|
|
},
|
|
{
|
|
"method": "patch_hook_cred_label_update_execve",
|
|
"desc": "mov x0,xzr [_hook_cred_label_update_execve low-risk]",
|
|
"va": 18446741874841300200,
|
|
"va_hex": "0xFFFFFE00093D2CE8",
|
|
"foff_hex": "0x023CECE8"
|
|
},
|
|
{
|
|
"method": "patch_hook_cred_label_update_execve",
|
|
"desc": "retab [_hook_cred_label_update_execve low-risk]",
|
|
"va": 18446741874841300204,
|
|
"va_hex": "0xFFFFFE00093D2CEC",
|
|
"foff_hex": "0x023CECEC"
|
|
},
|
|
{
|
|
"method": "patch_io_secure_bsd_root",
|
|
"desc": "b #0x1A4 [_IOSecureBSDRoot]",
|
|
"va": 18446741874824110576,
|
|
"va_hex": "0xFFFFFE000836E1F0",
|
|
"foff_hex": "0x0136A1F0"
|
|
},
|
|
{
|
|
"method": "patch_kcall10",
|
|
"desc": "sysent[439].sy_call = _nosys 0xF6F048 (auth rebase, div=0xBCAD, next=2) [kcall10 low-risk]",
|
|
"va": 18446741874811397536,
|
|
"va_hex": "0xFFFFFE000774E5A0",
|
|
"foff_hex": "0x0074A5A0"
|
|
},
|
|
{
|
|
"method": "patch_kcall10",
|
|
"desc": "sysent[439].sy_return_type = 1 [kcall10 low-risk]",
|
|
"va": 18446741874811397552,
|
|
"va_hex": "0xFFFFFE000774E5B0",
|
|
"foff_hex": "0x0074A5B0"
|
|
},
|
|
{
|
|
"method": "patch_kcall10",
|
|
"desc": "sysent[439].sy_narg=0,sy_arg_bytes=0 [kcall10 low-risk]",
|
|
"va": 18446741874811397556,
|
|
"va_hex": "0xFFFFFE000774E5B4",
|
|
"foff_hex": "0x0074A5B4"
|
|
},
|
|
{
|
|
"method": "patch_load_dylinker",
|
|
"desc": "b #0x44 [_load_dylinker policy bypass]",
|
|
"va": 18446741874820906704,
|
|
"va_hex": "0xFFFFFE000805FED0",
|
|
"foff_hex": "0x0105BED0"
|
|
},
|
|
{
|
|
"method": "patch_mac_mount",
|
|
"desc": "NOP [___mac_mount deny branch]",
|
|
"va": 18446741874817057376,
|
|
"va_hex": "0xFFFFFE0007CB4260",
|
|
"foff_hex": "0x00CB0260"
|
|
},
|
|
{
|
|
"method": "patch_nvram_verify_permission",
|
|
"desc": "NOP [verifyPermission NVRAM]",
|
|
"va": 18446741874822876196,
|
|
"va_hex": "0xFFFFFE0008240C24",
|
|
"foff_hex": "0x0123CC24"
|
|
},
|
|
{
|
|
"method": "patch_post_validation_additional",
|
|
"desc": "cmp w0,w0 [postValidation additional fallback]",
|
|
"va": 18446741874827069280,
|
|
"va_hex": "0xFFFFFE0008640760",
|
|
"foff_hex": "0x0163C760"
|
|
},
|
|
{
|
|
"method": "patch_proc_pidinfo",
|
|
"desc": "NOP [_proc_pidinfo pid-0 guard A]",
|
|
"va": 18446741874820964152,
|
|
"va_hex": "0xFFFFFE000806DF38",
|
|
"foff_hex": "0x01069F38"
|
|
},
|
|
{
|
|
"method": "patch_proc_pidinfo",
|
|
"desc": "NOP [_proc_pidinfo pid-0 guard B]",
|
|
"va": 18446741874820964160,
|
|
"va_hex": "0xFFFFFE000806DF40",
|
|
"foff_hex": "0x01069F40"
|
|
},
|
|
{
|
|
"method": "patch_proc_security_policy",
|
|
"desc": "mov x0,#0 [_proc_security_policy]",
|
|
"va": 18446741874820974064,
|
|
"va_hex": "0xFFFFFE00080705F0",
|
|
"foff_hex": "0x0106C5F0"
|
|
},
|
|
{
|
|
"method": "patch_proc_security_policy",
|
|
"desc": "ret [_proc_security_policy]",
|
|
"va": 18446741874820974068,
|
|
"va_hex": "0xFFFFFE00080705F4",
|
|
"foff_hex": "0x0106C5F4"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_fsgetpath]",
|
|
"va": 18446741874841172760,
|
|
"va_hex": "0xFFFFFE00093B3B18",
|
|
"foff_hex": "0x023AFB18"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_fsgetpath]",
|
|
"va": 18446741874841172764,
|
|
"va_hex": "0xFFFFFE00093B3B1C",
|
|
"foff_hex": "0x023AFB1C"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_unlink]",
|
|
"va": 18446741874841178368,
|
|
"va_hex": "0xFFFFFE00093B5100",
|
|
"foff_hex": "0x023B1100"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_unlink]",
|
|
"va": 18446741874841178372,
|
|
"va_hex": "0xFFFFFE00093B5104",
|
|
"foff_hex": "0x023B1104"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_truncate]",
|
|
"va": 18446741874841179096,
|
|
"va_hex": "0xFFFFFE00093B53D8",
|
|
"foff_hex": "0x023B13D8"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_truncate]",
|
|
"va": 18446741874841179100,
|
|
"va_hex": "0xFFFFFE00093B53DC",
|
|
"foff_hex": "0x023B13DC"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_stat]",
|
|
"va": 18446741874841179456,
|
|
"va_hex": "0xFFFFFE00093B5540",
|
|
"foff_hex": "0x023B1540"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_stat]",
|
|
"va": 18446741874841179460,
|
|
"va_hex": "0xFFFFFE00093B5544",
|
|
"foff_hex": "0x023B1544"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_setutimes]",
|
|
"va": 18446741874841179816,
|
|
"va_hex": "0xFFFFFE00093B56A8",
|
|
"foff_hex": "0x023B16A8"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_setutimes]",
|
|
"va": 18446741874841179820,
|
|
"va_hex": "0xFFFFFE00093B56AC",
|
|
"foff_hex": "0x023B16AC"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_setowner]",
|
|
"va": 18446741874841180160,
|
|
"va_hex": "0xFFFFFE00093B5800",
|
|
"foff_hex": "0x023B1800"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_setowner]",
|
|
"va": 18446741874841180164,
|
|
"va_hex": "0xFFFFFE00093B5804",
|
|
"foff_hex": "0x023B1804"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_setmode]",
|
|
"va": 18446741874841180504,
|
|
"va_hex": "0xFFFFFE00093B5958",
|
|
"foff_hex": "0x023B1958"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_setmode]",
|
|
"va": 18446741874841180508,
|
|
"va_hex": "0xFFFFFE00093B595C",
|
|
"foff_hex": "0x023B195C"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_setflags]",
|
|
"va": 18446741874841181164,
|
|
"va_hex": "0xFFFFFE00093B5BEC",
|
|
"foff_hex": "0x023B1BEC"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_setflags]",
|
|
"va": 18446741874841181168,
|
|
"va_hex": "0xFFFFFE00093B5BF0",
|
|
"foff_hex": "0x023B1BF0"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_setextattr]",
|
|
"va": 18446741874841181780,
|
|
"va_hex": "0xFFFFFE00093B5E54",
|
|
"foff_hex": "0x023B1E54"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_setextattr]",
|
|
"va": 18446741874841181784,
|
|
"va_hex": "0xFFFFFE00093B5E58",
|
|
"foff_hex": "0x023B1E58"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_setattrlist]",
|
|
"va": 18446741874841182168,
|
|
"va_hex": "0xFFFFFE00093B5FD8",
|
|
"foff_hex": "0x023B1FD8"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_setattrlist]",
|
|
"va": 18446741874841182172,
|
|
"va_hex": "0xFFFFFE00093B5FDC",
|
|
"foff_hex": "0x023B1FDC"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_readlink]",
|
|
"va": 18446741874841183544,
|
|
"va_hex": "0xFFFFFE00093B6538",
|
|
"foff_hex": "0x023B2538"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_readlink]",
|
|
"va": 18446741874841183548,
|
|
"va_hex": "0xFFFFFE00093B653C",
|
|
"foff_hex": "0x023B253C"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_open]",
|
|
"va": 18446741874841183888,
|
|
"va_hex": "0xFFFFFE00093B6690",
|
|
"foff_hex": "0x023B2690"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_open]",
|
|
"va": 18446741874841183892,
|
|
"va_hex": "0xFFFFFE00093B6694",
|
|
"foff_hex": "0x023B2694"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_listextattr]",
|
|
"va": 18446741874841184472,
|
|
"va_hex": "0xFFFFFE00093B68D8",
|
|
"foff_hex": "0x023B28D8"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_listextattr]",
|
|
"va": 18446741874841184476,
|
|
"va_hex": "0xFFFFFE00093B68DC",
|
|
"foff_hex": "0x023B28DC"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_link]",
|
|
"va": 18446741874841184860,
|
|
"va_hex": "0xFFFFFE00093B6A5C",
|
|
"foff_hex": "0x023B2A5C"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_link]",
|
|
"va": 18446741874841184864,
|
|
"va_hex": "0xFFFFFE00093B6A60",
|
|
"foff_hex": "0x023B2A60"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_ioctl]",
|
|
"va": 18446741874841186588,
|
|
"va_hex": "0xFFFFFE00093B711C",
|
|
"foff_hex": "0x023B311C"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_ioctl]",
|
|
"va": 18446741874841186592,
|
|
"va_hex": "0xFFFFFE00093B7120",
|
|
"foff_hex": "0x023B3120"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_getextattr]",
|
|
"va": 18446741874841187332,
|
|
"va_hex": "0xFFFFFE00093B7404",
|
|
"foff_hex": "0x023B3404"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_getextattr]",
|
|
"va": 18446741874841187336,
|
|
"va_hex": "0xFFFFFE00093B7408",
|
|
"foff_hex": "0x023B3408"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_getattrlist]",
|
|
"va": 18446741874841187680,
|
|
"va_hex": "0xFFFFFE00093B7560",
|
|
"foff_hex": "0x023B3560"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_getattrlist]",
|
|
"va": 18446741874841187684,
|
|
"va_hex": "0xFFFFFE00093B7564",
|
|
"foff_hex": "0x023B3564"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_exchangedata]",
|
|
"va": 18446741874841188128,
|
|
"va_hex": "0xFFFFFE00093B7720",
|
|
"foff_hex": "0x023B3720"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_exchangedata]",
|
|
"va": 18446741874841188132,
|
|
"va_hex": "0xFFFFFE00093B7724",
|
|
"foff_hex": "0x023B3724"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_deleteextattr]",
|
|
"va": 18446741874841189028,
|
|
"va_hex": "0xFFFFFE00093B7AA4",
|
|
"foff_hex": "0x023B3AA4"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_deleteextattr]",
|
|
"va": 18446741874841189032,
|
|
"va_hex": "0xFFFFFE00093B7AA8",
|
|
"foff_hex": "0x023B3AA8"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_create]",
|
|
"va": 18446741874841189416,
|
|
"va_hex": "0xFFFFFE00093B7C28",
|
|
"foff_hex": "0x023B3C28"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_create]",
|
|
"va": 18446741874841189420,
|
|
"va_hex": "0xFFFFFE00093B7C2C",
|
|
"foff_hex": "0x023B3C2C"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_chroot]",
|
|
"va": 18446741874841190132,
|
|
"va_hex": "0xFFFFFE00093B7EF4",
|
|
"foff_hex": "0x023B3EF4"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_chroot]",
|
|
"va": 18446741874841190136,
|
|
"va_hex": "0xFFFFFE00093B7EF8",
|
|
"foff_hex": "0x023B3EF8"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_proc_check_set_cs_info2]",
|
|
"va": 18446741874841190476,
|
|
"va_hex": "0xFFFFFE00093B804C",
|
|
"foff_hex": "0x023B404C"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_proc_check_set_cs_info2]",
|
|
"va": 18446741874841190480,
|
|
"va_hex": "0xFFFFFE00093B8050",
|
|
"foff_hex": "0x023B4050"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_proc_check_set_cs_info]",
|
|
"va": 18446741874841191576,
|
|
"va_hex": "0xFFFFFE00093B8498",
|
|
"foff_hex": "0x023B4498"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_proc_check_set_cs_info]",
|
|
"va": 18446741874841191580,
|
|
"va_hex": "0xFFFFFE00093B849C",
|
|
"foff_hex": "0x023B449C"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_proc_check_get_cs_info]",
|
|
"va": 18446741874841192124,
|
|
"va_hex": "0xFFFFFE00093B86BC",
|
|
"foff_hex": "0x023B46BC"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_proc_check_get_cs_info]",
|
|
"va": 18446741874841192128,
|
|
"va_hex": "0xFFFFFE00093B86C0",
|
|
"foff_hex": "0x023B46C0"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_getattr]",
|
|
"va": 18446741874841194768,
|
|
"va_hex": "0xFFFFFE00093B9110",
|
|
"foff_hex": "0x023B5110"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_getattr]",
|
|
"va": 18446741874841194772,
|
|
"va_hex": "0xFFFFFE00093B9114",
|
|
"foff_hex": "0x023B5114"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "mov x0,#0 [_hook_vnode_check_exec]",
|
|
"va": 18446741874841293164,
|
|
"va_hex": "0xFFFFFE00093D116C",
|
|
"foff_hex": "0x023CD16C"
|
|
},
|
|
{
|
|
"method": "patch_sandbox_hooks_extended",
|
|
"desc": "ret [_hook_vnode_check_exec]",
|
|
"va": 18446741874841293168,
|
|
"va_hex": "0xFFFFFE00093D1170",
|
|
"foff_hex": "0x023CD170"
|
|
},
|
|
{
|
|
"method": "patch_shared_region_map",
|
|
"desc": "cmp x0,x0 [_shared_region_map_and_slide_setup]",
|
|
"va": 18446741874821037596,
|
|
"va_hex": "0xFFFFFE000807FE1C",
|
|
"foff_hex": "0x0107BE1C"
|
|
},
|
|
{
|
|
"method": "patch_spawn_validate_persona",
|
|
"desc": "b #0x130 [_spawn_validate_persona gate]",
|
|
"va": 18446741874820204720,
|
|
"va_hex": "0xFFFFFE0007FB48B0",
|
|
"foff_hex": "0x00FB08B0"
|
|
},
|
|
{
|
|
"method": "patch_syscallmask_apply_to_proc",
|
|
"desc": "mov x0,xzr [_syscallmask_apply_to_proc low-risk]",
|
|
"va": 18446741874841151204,
|
|
"va_hex": "0xFFFFFE00093AE6E4",
|
|
"foff_hex": "0x023AA6E4"
|
|
},
|
|
{
|
|
"method": "patch_syscallmask_apply_to_proc",
|
|
"desc": "retab [_syscallmask_apply_to_proc low-risk]",
|
|
"va": 18446741874841151208,
|
|
"va_hex": "0xFFFFFE00093AE6E8",
|
|
"foff_hex": "0x023AA6E8"
|
|
},
|
|
{
|
|
"method": "patch_task_conversion_eval_internal",
|
|
"desc": "cmp xzr,xzr [_task_conversion_eval_internal]",
|
|
"va": 18446741874815337472,
|
|
"va_hex": "0xFFFFFE0007B10400",
|
|
"foff_hex": "0x00B0C400"
|
|
},
|
|
{
|
|
"method": "patch_task_for_pid",
|
|
"desc": "NOP [_task_for_pid proc_ro copy]",
|
|
"va": 18446741874820567328,
|
|
"va_hex": "0xFFFFFE000800D120",
|
|
"foff_hex": "0x01009120"
|
|
},
|
|
{
|
|
"method": "patch_thid_should_crash",
|
|
"desc": "zero [_thid_should_crash]",
|
|
"va": 18446741874810612552,
|
|
"va_hex": "0xFFFFFE000768EB48",
|
|
"foff_hex": "0x0068AB48"
|
|
},
|
|
{
|
|
"method": "patch_vm_fault_enter_prepare",
|
|
"desc": "NOP [_vm_fault_enter_prepare]",
|
|
"va": 18446741874816027020,
|
|
"va_hex": "0xFFFFFE0007BB898C",
|
|
"foff_hex": "0x00BB498C"
|
|
},
|
|
{
|
|
"method": "patch_vm_map_protect",
|
|
"desc": "b #0x48C [_vm_map_protect]",
|
|
"va": 18446741874816125352,
|
|
"va_hex": "0xFFFFFE0007BD09A8",
|
|
"foff_hex": "0x00BCC9A8"
|
|
}
|
|
]
|