diff --git a/AGENTS.md b/AGENTS.md index 553a18c..1041bb7 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -29,11 +29,13 @@ For any changes applying new patches, also update research/0_binary_patch_compar ## Firmware Variants -| Variant | Boot Chain | CFW | Make Targets | -| ------------------- | :---------: | :-------: | ---------------------------------- | -| **Regular** | 51 patches | 10 phases | `fw_patch` + `cfw_install` | -| **Development** | 64 patches | 12 phases | `fw_patch_dev` + `cfw_install_dev` | -| **Jailbreak** | 126 patches | 14 phases | `fw_patch_jb` + `cfw_install_jb` | +| Variant | Boot Chain | CFW | Make Targets | +| --------------- | :---------: | :-------: | ------------------------------------------------------------ | +| **Regular** | 51 patches | 10 phases | `fw_patch` + `cfw_install` | +| **Development** | 64 patches | 12 phases | `fw_patch_dev` + `cfw_install_dev` | +| **Jailbreak** | 126 patches | 14 phases | `fw_patch_jb` + `cfw_install_jb` + `cfw_install_jb_finalize` | + +> `cfw_install_jb_finalize` requires booting into the full system, not the ramdisk. See `research/` for detailed firmware pipeline, component origins, patch breakdowns, and boot flow documentation. diff --git a/README.md b/README.md index da7c276..b9408aa 100644 --- a/README.md +++ b/README.md @@ -18,13 +18,13 @@ Boot a virtual iPhone (iOS 26) via Apple's Virtualization.framework using PCC re Three patch variants are available with increasing levels of security bypass: -| Variant | Boot Chain | CFW | Make Targets | -| ------------------- | :-------------: | :-------: | ---------------------------------- | -| **Regular** | 41 patches | 10 phases | `fw_patch` + `cfw_install` | -| **Development** | 52 patches | 12 phases | `fw_patch_dev` + `cfw_install_dev` | -| **Jailbreak** | 66 / 78 patches | 14 phases | `fw_patch_jb` + `cfw_install_jb` | +| Variant | Boot Chain | CFW | Make Targets | +| --------------- | :-------------: | :-------: | ------------------------------------------------------------ | +| **Regular** | 41 patches | 10 phases | `fw_patch` + `cfw_install` | +| **Development** | 52 patches | 12 phases | `fw_patch_dev` + `cfw_install_dev` | +| **Jailbreak** | 66 / 78 patches | 14 phases | `fw_patch_jb` + `cfw_install_jb` + `cfw_install_jb_finalize` | -`66` = default JB kernel method plan; `78` = default + optional kernel methods (`VPHONE_JB_ENABLE_OPTIONAL=1`). +> `cfw_install_jb_finalize` requires booting into the full system, not the ramdisk. See [research/0_binary_patch_comparison.md](./research/0_binary_patch_comparison.md) for the detailed per-component breakdown. diff --git a/docs/README_ja.md b/docs/README_ja.md index dd38e6e..5e7275d 100644 --- a/docs/README_ja.md +++ b/docs/README_ja.md @@ -18,13 +18,13 @@ Apple の Virtualization.framework と PCC の研究用 VM インフラを使用 セキュリティバイパスのレベルが異なる3つのパッチバリアントが利用可能です： -| バリアント | ブートチェーン | CFW | Make ターゲット | -| ----------------- | :------------: | :---------: | ---------------------------------- | -| **通常版** | 41 パッチ | 10 フェーズ | `fw_patch` + `cfw_install` | -| **開発版** | 52 パッチ | 12 フェーズ | `fw_patch_dev` + `cfw_install_dev` | -| **脱獄版** | 66 / 78 パッチ | 14 フェーズ | `fw_patch_jb` + `cfw_install_jb` | +| バリアント | ブートチェーン | CFW | Make ターゲット | +| ---------- | :------------: | :---------: | ------------------------------------------------------------ | +| **通常版** | 41 パッチ | 10 フェーズ | `fw_patch` + `cfw_install` | +| **開発版** | 52 パッチ | 12 フェーズ | `fw_patch_dev` + `cfw_install_dev` | +| **脱獄版** | 66 / 78 パッチ | 14 フェーズ | `fw_patch_jb` + `cfw_install_jb` + `cfw_install_jb_finalize` | -`66` は JB のデフォルトカーネルパッチ計画、`78` はデフォルト + オプションカーネルパッチ（`VPHONE_JB_ENABLE_OPTIONAL=1`）です。 +> `cfw_install_jb_finalize` はRAMディスクではなく、完全なシステムへの起動が必要です。 詳細なコンポーネントごとの内訳については [research/0_binary_patch_comparison.md](../research/0_binary_patch_comparison.md) を参照してください。 diff --git a/docs/README_ko.md b/docs/README_ko.md index 4432920..74fd4c1 100644 --- a/docs/README_ko.md +++ b/docs/README_ko.md @@ -18,13 +18,13 @@ PCC 리서치 VM 인프라와 Apple의 Virtualization.framework를 사용하여 보안 우회 수준이 다른 3가지 패치 변형을 사용할 수 있습니다: -| 변형 | 부트 체인 | CFW | Make 타겟 | -| -------------- | :----------: | :-------: | ---------------------------------- | -| **일반** | 41 패치 | 10 페이즈 | `fw_patch` + `cfw_install` | -| **개발** | 52 패치 | 12 페이즈 | `fw_patch_dev` + `cfw_install_dev` | -| **탈옥** | 66 / 78 패치 | 14 페이즈 | `fw_patch_jb` + `cfw_install_jb` | +| 변형 | 부트 체인 | CFW | Make 타겟 | +| -------- | :----------: | :-------: | ------------------------------------------------------------ | +| **일반** | 41 패치 | 10 페이즈 | `fw_patch` + `cfw_install` | +| **개발** | 52 패치 | 12 페이즈 | `fw_patch_dev` + `cfw_install_dev` | +| **탈옥** | 66 / 78 패치 | 14 페이즈 | `fw_patch_jb` + `cfw_install_jb` + `cfw_install_jb_finalize` | -`66`은 JB 기본 커널 패치 플랜, `78`은 기본 + 선택 커널 패치(`VPHONE_JB_ENABLE_OPTIONAL=1`)입니다. +> `cfw_install_jb_finalize`는 RAM 디스크가 아닌 전체 시스템으로 부팅해야 합니다. 컴포넌트별 상세 분류는 [research/0_binary_patch_comparison.md](../research/0_binary_patch_comparison.md)를 참조하세요. diff --git a/docs/README_zh.md b/docs/README_zh.md index f1c8174..a123e05 100644 --- a/docs/README_zh.md +++ b/docs/README_zh.md @@ -18,13 +18,13 @@ 提供三种补丁变体，安全绕过级别逐步递增： -| 变体 | 启动链 | 自定义固件 | Make 目标 | -| ----------------- | :------------: | :--------: | ---------------------------------- | -| **常规版** | 41 个补丁 | 10 个阶段 | `fw_patch` + `cfw_install` | -| **开发版** | 52 个补丁 | 12 个阶段 | `fw_patch_dev` + `cfw_install_dev` | -| **越狱版** | 66 / 78 个补丁 | 14 个阶段 | `fw_patch_jb` + `cfw_install_jb` | +| 变体 | 启动链 | 自定义固件 | Make 目标 | +| ---------- | :------------: | :--------: | ------------------------------------------------------------ | +| **常规版** | 41 个补丁 | 10 个阶段 | `fw_patch` + `cfw_install` | +| **开发版** | 52 个补丁 | 12 个阶段 | `fw_patch_dev` + `cfw_install_dev` | +| **越狱版** | 66 / 78 个补丁 | 14 个阶段 | `fw_patch_jb` + `cfw_install_jb` + `cfw_install_jb_finalize` | -`66` 表示 JB 默认内核补丁计划；`78` 表示默认 + 可选内核补丁（`VPHONE_JB_ENABLE_OPTIONAL=1`）。 +> `cfw_install_jb_finalize` 需要启动到完整系统，而非 ramdisk。 详见 [research/0_binary_patch_comparison.md](../research/0_binary_patch_comparison.md) 了解各组件的详细分项对比。