vphone
  • English

      • JB kernel patch notes

      Research library · Patch comparison · Document framework

      These notes explain the source anchors, binary matches and validation evidence for individual JB kernel patches. The Swift implementations live under Sources/FirmwarePatcher/Kernel/JailbreakPatches/; the notes are research records, not commands to apply a patch by hand.

      AreaPatch notes
      Boot, root and mountBSD init auth, IO secure BSD root, dounmount, mac mount, load dylinker
      AMFI, credentials and policyCDHash in trust cache, execve kill path, credential label update, credential hook, proc security policy, persona validation, sandbox hooks, NVRAM permission
      Tasks, ports and threadsconvert port to map, task conversion, task for PID, thread set state, thread crash gate
      VM and shared regionsVM fault, immutable map delete, VM map protect, shared region map, shared region size
      Process and syscall pathsproc PID info, syscall mask, kcall10, fork inherits invalid code
      Follow-up evidence26.5 hook fixes, post-validation additions, runtime verification archive

      For the supported firmware flow, use vphone-cli fw patch or vphone-cli vm create; see the user guide.