Targeting the iOS Kernel - Reverse Engineering Mac OS X
Targeting the iOS Kernel - Reverse Engineering Mac OS X
Targeting the iOS Kernel - Reverse Engineering Mac OS X
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
IOKit Driver Classes (II) - MetaClass<br />
• most <strong>i<strong>OS</strong></strong> IOKit classes come without symbols<br />
• however IOKit defines for almost all classes a so called MetaClass<br />
• MetaClass contains runtime information about <strong>the</strong> original object<br />
• constructors of MetaClass‘es leak name and parent objects<br />
Stefan Esser • <strong>Targeting</strong> <strong>the</strong> <strong>i<strong>OS</strong></strong> <strong>Kernel</strong> • April 2011 •<br />
R1 = Object Name<br />
R2 = Parent‘s MetaClass<br />
R3 = Methods of MetaClass<br />
24