You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
0xFFFFFFF00756E000, // KSYMBOL_CPU_DATA_ENTRIES // 0x6000 in to the data segment
193
+
0xFFFFFFF00708818C, // KSYMBOL_VALID_LINK_REGISTER // look for reference to FAR_EL1 (Fault Address Register (EL1))
194
+
0xFFFFFFF007088164, // KSYMBOL_X21_JOP_GADGET // look for references to FPCR (Floating-point Control Register)
195
+
0xFFFFFFF007088434, // KSYMBOL_EXCEPTION_RETURN // look for references to Set PSTATE.DAIF [--IF]
196
+
0xFFFFFFF0070883E4, // KSYMBOL_THREAD_EXCEPTION_RETURN // a bit before exception_return
197
+
0xFFFFFFF00719CF44, // KSYMBOL_SET_MDSCR_EL1_GADGET // look for references to MDSCR_EL1
198
+
0xFFFFFFF0073F6094, // KSYMBOL_WRITE_SYSCALL_ENTRYPOINT // look for references to enosys to find the syscall table (this is actually 1 instruction in to the entrypoint)
199
+
0xFFFFFFF007198EC0, // KSYMBOL_EL1_HW_BP_INFINITE_LOOP // look for xrefs to "ESR (0x%x) for instruction trapped" and find switch case 49
200
+
0xfffffff0071998BC, // KSYMBOL_SLEH_SYNC_EPILOG // look for xrefs to "Unsupported Class %u event code."
201
+
};
202
+
181
203
uint64_tksym(enumksymbolsym) {
182
204
if (kernel_base==0) {
183
205
if (!have_kmem_read()) {
@@ -253,6 +275,10 @@ void offsets_init() {
253
275
printf("this is iPhone 6P, should work!\n");
254
276
symbols=ksymbol_iphone_6p_15b202;
255
277
have_syms=1;
278
+
} elseif (strstr(u.machine, "iPad4,4")) {
279
+
printf("this is iPad Mini 2 WiFi, should work!\n");
280
+
symbols=ksymbols_ipad_mini_2_wifi_15b202;
281
+
have_syms=1;
256
282
} else {
257
283
printf("no symbols for this device yet\n");
258
284
printf("tfp0 should still work, but the kernel debugger PoC won't\n");
0 commit comments