mirror of
https://github.com/Lakr233/vphone-cli.git
synced 2026-09-02 02:34:29 +00:00
- hook_cred_label (sudo/setuid): resolve vfs_context_current generically; uthread offset drifted to 0x3F0 - proc_security_policy: anchor on PRIV_GLOBAL_PROC_INFO (0x3EA), not the drifted `cmp #0x21` switch literal - proc_pidinfo: match the unique guard+EINVAL+flavor-switch shape (now inlined into proc_info_internal) - task_conversion_eval: accept the kernel_task compare in either operand order - io_secure_bsd_root: anchor on the kIOReturnNotPrivileged deny-CSEL; drop the moved [x19,#0x11A] context - mac_mount: match the role-state ldrb + bit-6 test (Site 2 folded into one load on 26.5) - spawn_validate_persona: anchor on the dual sibling [#8]/[#0xc] cbz reject - vm_map_protect: handle both the 26.1/26.3 b.ne gate and the 26.5 W^X mask register (mov #5 -> #7) - kcall10: locate the sysent table structurally; drop the brittle _nosys tiny-stub heuristic - add tests/test_jb_kernel_patches.sh (make test_jb_patches[, QUICK=1]) over every supported cloudOS kernel Fixes #342. The 26.1-derived patchset silently skipped 9 hooks on 26.5 — the pipeline only fails a component when it emits zero patches total, so a half-patched kernel shipped as "success" and sudo broke with 'nosuid'. Verified across 26.1/26.3/26.4/26.5