5,579
edits
Changes
Jump to navigation
Jump to search
→Signature patch: details on what the patch changes
Line 10:
Line 10:
== Signature patch ==
== Signature patch ==
−The signature patch nulls out a single instruction that jumps to the hash checking code.
+The signature patch patches the IOSC signature checking function to return 0 instead of 7 when the hash comparison fails, by changing a <code>mov r0, #0x7</code> to <code>mov r0, #0x0</code>. The code checks for either 0x23a2 (<code>mov r3, #0xa2</code>, found in IOSes vulnerable to the signing bug) or 0x4b0b (<code>ldr r3, =0xa1c</code>, found in fixed IOSes).
== Drivechip patch ==
== Drivechip patch ==