31.12.2012 Views

Targeting the iOS Kernel - Reverse Engineering Mac OS X

Targeting the iOS Kernel - Reverse Engineering Mac OS X

Targeting the iOS Kernel - Reverse Engineering Mac OS X

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Finding Vulnerabilities in <strong>the</strong> <strong>i<strong>OS</strong></strong> <strong>Kernel</strong> (II)<br />

• because <strong>i<strong>OS</strong></strong> is also XNU based <strong>the</strong> public source is partly useable<br />

• however <strong>the</strong> kernel of <strong>OS</strong> X and <strong>i<strong>OS</strong></strong> are very out of sync<br />

• kernel vulnerabilities that are only interesting for <strong>i<strong>OS</strong></strong> are not fixed in <strong>OS</strong> X<br />

• auditing XNU will reveal a bunch of vulnerabilities already fixed in <strong>i<strong>OS</strong></strong><br />

• interesting parts like <strong>the</strong> ASLR are not yet in any public XNU release<br />

Stefan Esser • <strong>Targeting</strong> <strong>the</strong> <strong>i<strong>OS</strong></strong> <strong>Kernel</strong> • April 2011 •<br />

7

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!