open-source/TrollStore
1
0
Fork 0
mirror of https://github.com/opa334/TrollStore.git synced 2026-07-02 03:00:39 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

1.0.5

Browse Source
This commit is contained in:
opa334
2022-09-04 15:37:49 +02:00
parent 5bb621c4fe
commit 06e4075a26
12 changed files with 108 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Installer/TrollInstaller/TrollInstaller/exploit/kernel_base.c
+17 -4
View File
@@ -10,6 +10,7 @@
#include <sys/socket.h>
#include <sys/syscall.h>
#include <sys/utsname.h>
#import <sys/sysctl.h>
extern void badLog(const char*, ...);
@@ -53,18 +54,30 @@ uint64_t kernel_base_from_holder(mach_port_t holder, uint64_t holder_addr)
struct utsname u;
uname(&u);
uint64_t off_task_bsd_info;
#if __arm64e__
if (strstr(u.machine, "iPhone14,"))
cpu_subtype_t cpuFamily = 0;
size_t cpuFamilySize = sizeof(cpuFamily);
sysctlbyname("hw.cpufamily", &cpuFamily, &cpuFamilySize, NULL, 0);
bool isA15OrNewer;
if (cpuFamily == CPUFAMILY_ARM_BLIZZARD_AVALANCHE) {
isA15OrNewer = true;
}
else {
isA15OrNewer = false;
}
if (isA15OrNewer)
{
off_task_bsd_info = 0x3c8; // ios15.1 a15 // proc_t::task_bsd_info
}
else
{
off_task_bsd_info = 0x3b8; //; iOS15.1 a12 // proc_t::task_bsd_info
off_task_bsd_info = 0x3b8; //; iOS15.1 a12-a14 // proc_t::task_bsd_info
}
#else
off_task_bsd_info = 0x3A0;
off_task_bsd_info = 0x3A0; // a9-a11
#endif
g_self_proc = xpaci(kread64(self_task + off_task_bsd_info));