Skip to content

Instantly share code, notes, and snippets.

@34306
Last active January 4, 2024 10:38
Show Gist options
  • Select an option

  • Save 34306/70b9a7546f69c4fbf36f514145b841dc to your computer and use it in GitHub Desktop.

Select an option

Save 34306/70b9a7546f69c4fbf36f514145b841dc to your computer and use it in GitHub Desktop.
iPhone X kfd
{
.kern_version = "Darwin Kernel Version 22.5.0: Mon Apr 24 21:10:12 PDT 2023; root:xnu-8796.122.4~1/RELEASE_ARM64_T8015",
.build_version = "20F66",
.device_id = "iPhone10,6",
.fileglob__fg_ops = 0x0028,
.fileglob__fg_data = 0x0038,
.fileops__fo_kqfilter = 0x0030,
// .fileproc__fp_iocount = 0x0000,
// .fileproc__fp_vflags = 0x0004,
// .fileproc__fp_flags = 0x0008,
// .fileproc__fp_guard_attrs = 0x000a,
// .fileproc__fp_glob = 0x0010,
// .fileproc__fp_guard = 0x0018,
// .fileproc__object_size = 0x0020,
.fileproc_guard__fpg_guard = 0x0008,
.kqworkloop__kqwl_state = 0x0010,
.kqworkloop__kqwl_p = 0x0018,
.kqworkloop__kqwl_owner = 0x00d0,
.kqworkloop__kqwl_dynamicid = 0x00e8,
.kqworkloop__object_size = 0x0108,
.pmap__tte = 0x0000,
.pmap__ttep = 0x0008,
.proc__p_list__le_next = 0x0000,
.proc__p_list__le_prev = 0x0008,
.proc__p_pid = 0x0060, //X 16.5 FFFFFFF0075CFF88, 14PM FFFFFFF0081ADEE4
.proc__p_fd__fd_ofiles = 0xf8, //X 16.5 FFFFFFF007348030, 14PM FFFFFFF007F13290
.proc__object_size = 0x730, //iPhone X, 16.5 FFFFFFF0075C9D9C, 14PM FFFFFFF0081A7860 (0x728)
.pseminfo__psem_usecount = 0x0004,
.pseminfo__psem_uid = 0x000c,
.pseminfo__psem_gid = 0x0010,
.pseminfo__psem_name = 0x0014,
.pseminfo__psem_semobject = 0x0038, //v
// .psemnode__pinfo = 0x0000,
// .psemnode__padding = 0x0008,
// .psemnode__object_size = 0x0010,
.semaphore__owner = 0x0028, //v
.specinfo__si_rdev = 0x0018, //vnode_specrdev
.task__map = 0x0028, //_get_task_map
.task__threads__next = 0x0058, //v X 16.5 FFFFFFF0072442E0, 14PM FFFFFFF007E06D48
.task__threads__prev = 0x0060, //v calculate task__threads__next + 8
.task__itk_space = 0x0300, //v X 16.5 ?, 14PM FFFFFFF007E245EC hopefully the same
.task__object_size = 0x0608, //v X 16.5 FFFFFFF00722EEB4, 14PM FFFFFFF007DF0578 (0x0640)
.thread__task_threads__next = 0x0340, //v X 16.5 FFFFFFF007235C0C, 14PM FFFFFFF007DF7B30
.thread__task_threads__prev = 0x0348, //v calculate thread__task_threads__next + 8
.thread__map = 0x358,//v, // X 16.5 FFFFFFF007240174, 14PM FFFFFFF007E02B20
.thread__thread_id = 0x3F0, //v, X 16.5 FFFFFFF0072332A8, 14PM FFFFFFF007DF4EDC
.thread__object_size = 0x498, //v //X 16.5 FFFFFFF007241A48, 14PM FFFFFFF007E04528
.uthread__object_size = 0x200, //v //X 16.5 FFFFFFF00724485C, 14PM FFFFFFF007E074A8
.vm_map_entry__links__prev = 0x0000, //v check start
.vm_map_entry__links__next = 0x0008,
.vm_map_entry__links__start = 0x0010,
.vm_map_entry__links__end = 0x0018,
.vm_map_entry__store__entry__rbe_left = 0x0020,
.vm_map_entry__store__entry__rbe_right = 0x0028,
.vm_map_entry__store__entry__rbe_parent = 0x0030, //v check end
.vnode__v_un__vu_specinfo = 0x0078, //vnode_specrdev
._vm_map__hdr__links__prev = 0x0010, //v check start
._vm_map__hdr__links__next = 0x0018,
._vm_map__hdr__links__start = 0x0020,
._vm_map__hdr__links__end = 0x0028, //v check end
._vm_map__hdr__nentries = 0x0030, //XXX
._vm_map__hdr__rb_head_store__rbh_root = 0x0038, //X 16.5 FFFFFFF0072DA4A4, 14PM 16.5 FFFFFFF007EA1978
._vm_map__pmap = 0x0040, //find _get_task_pmap
._vm_map__hint = 0x98, //vv X 16.5 FFFFFFF00729F808, 14PM FFFFFFF007E646A0
._vm_map__hole_hint = 0xA0, //vv X 16.5 FFFFFFF00729DA40, 14PM 16.5 FFFFFFF007E62750
._vm_map__holes_list = 0xA8, //vv X 16.5 FFFFFFF0072982AC, 14PM 16.5 FFFFFFF007E5CD8C
._vm_map__object_size = 0xC0, //X 16.5 FFFFFFF0072982EC, 14PM 16.5 FFFFFFF007E5CDD0
.kernelcache__kernel_base = 0xfffffff007004000,
//As always been there
.kernelcache__cdevsw = 0xFFFFFFF007855200, //done
.kernelcache__gPhysBase = 0xFFFFFFF007157EB8, //done
.kernelcache__gPhysSize = 0xFFFFFFF007157EC0, //done
.kernelcache__gVirtBase = 0xFFFFFFF0071560D0, //done
.kernelcache__perfmon_devices = 0xFFFFFFF0078935D0, //done
.kernelcache__perfmon_dev_open = 0xFFFFFFF007323130, //done
.kernelcache__ptov_table = 0xFFFFFFF00710A968, //done
.kernelcache__vm_first_phys_ppnum = 0xFFFFFFF007892B30, //done
.kernelcache__vm_pages = 0xFFFFFFF007107E90, //done
.kernelcache__vm_page_array_beginning_addr = 0xFFFFFFF0071098F8, //done
.kernelcache__vm_page_array_ending_addr = 0xFFFFFFF007892B28, //done
.kernelcache__vn_kqfilter = 0xFFFFFFF00736D03C, //done
},
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment