Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Kernelcache does not contain LINKINFO.__ #66

Closed
turnerrocks1 opened this issue Dec 29, 2021 · 3 comments
Closed

Kernelcache does not contain LINKINFO.__ #66

turnerrocks1 opened this issue Dec 29, 2021 · 3 comments

Comments

@turnerrocks1
Copy link

This is an old-style A9 kernelcache (Darwin Kernel Version 18.2.0: Wed Dec 19 20:28:52 PST 2018; root:xnu-4903.242.2~1/RELEASE_ARM64_S8000)
Screen Shot 2021-12-29 at 4 30 08 PM

Straight from the "/System/Library/caches/com.apple.kernelcaches"

This is what the segment names are when decompiled

@turnerrocks1
Copy link
Author

oops forgot the command line : "
bootywarrior@Bootys-MacBook-Air Desktop % /Users/bootywarrior/Downloads/ipsw_3.1.32_macOS_arm64/ipsw kernel symbolsets kernel.decrypted
⨯ kernelcache does NOT contain __LINKINFO.__symbolsets
"

@blacktop
Copy link
Owner

blacktop commented Dec 29, 2021

So I'm not even sure what symbolsets ARE. They just showed up I think in iOS14 so I thought I'd parse them in case anyone cared? 🤷 So that older kernelcache might have a __LINKINFO segment but NOT a __symbolsets section in that segment.

@blacktop
Copy link
Owner

FYI, you can also get the kernel's segments by running:

> ipsw macho info /System/Library/caches/com.apple.kernelcaches/kernelcache_arm64e

@blacktop blacktop closed this as completed Feb 1, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants