| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
tests: Add Frida encoder/version-gate tests - ARM64Encoder round-trips (TBZ/TBNZ bit retarget, movz flag clear) and the cloudOS 26.4 version-gate compare. - Reveal procedures and static/runtime validation for both kernel patches; patch-comparison table rows JB-23b / JB-25c and the opt-in note. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> | 27 天前 | |
vphone-cli: Add VPHONE_ROOT env variable to override user data root | 21 天前 | |
Fix dropbear host keys on writable Data | 2 个月前 | |
test: firmware_patches: Add full-pipeline cross-version firmware patch gate test_jb_kernel_patches.sh only exercises the `kernel-jb` component, so it can't see drift in the boot chain (iBSS/iBEC/LLB), the base KernelPatcher, TXM, or DeviceTree — where real 26.x builds silently skipped sub-patches. Add test_firmware_patches.sh (`make test_fw_patches`): runs the full patch-firmware pipeline for the jb and exp variants over each locally-prepared cloudOS firmware (assembled into a disposable VM dir; ipsws/ is never mutated) and fails on any component that emits a `[-]` line. Because patchAll() only throws on a zero-patch component, a partial skip never changes the exit code — so the gate scans stdout for `[-]`. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> | 2 个月前 | |
[kernel-jb] retarget hooks broken by cloudOS 26.5 kernel drift - hook_cred_label (sudo/setuid): resolve vfs_context_current generically; uthread offset drifted to 0x3F0 - proc_security_policy: anchor on PRIV_GLOBAL_PROC_INFO (0x3EA), not the drifted `cmp #0x21` switch literal - proc_pidinfo: match the unique guard+EINVAL+flavor-switch shape (now inlined into proc_info_internal) - task_conversion_eval: accept the kernel_task compare in either operand order - io_secure_bsd_root: anchor on the kIOReturnNotPrivileged deny-CSEL; drop the moved [x19,#0x11A] context - mac_mount: match the role-state ldrb + bit-6 test (Site 2 folded into one load on 26.5) - spawn_validate_persona: anchor on the dual sibling [#8]/[#0xc] cbz reject - vm_map_protect: handle both the 26.1/26.3 b.ne gate and the 26.5 W^X mask register (mov #5 -> #7) - kcall10: locate the sysent table structurally; drop the brittle _nosys tiny-stub heuristic - add tests/test_jb_kernel_patches.sh (make test_jb_patches[, QUICK=1]) over every supported cloudOS kernel Fixes #342. The 26.1-derived patchset silently skipped 9 hooks on 26.5 — the pipeline only fails a component when it emits zero patches total, so a half-patched kernel shipped as "success" and sudo broke with 'nosuid'. Verified across 26.1/26.3/26.4/26.5 | 2 个月前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 27 天前 | ||
| 21 天前 | ||
| 2 个月前 | ||
| 2 个月前 | ||
| 2 个月前 |