Jump to content

KASLR in no-caches boot?


  • Please log in to reply
1 reply to this topic

#1
Download-Fritz

Download-Fritz

    ygolohcysp desreveR

  • Developers
  • 777 posts
  • Gender:Not Telling

Hey guys,

 

Does someone happen to know if boot.efi uses KASLR even in no-cache mode (-f), for the versions of OS X that even support it? I don't have the setup to test (only El Capitan, which no longer supports -f), so would be cool if somebody knew. :)

 

Regards,

DF.



#2
Download-Fritz

Download-Fritz

    ygolohcysp desreveR

  • Developers
  • 777 posts
  • Gender:Not Telling

I threw a Mountain Lion boot.efi into IDA and it seems like KASLR is used with no-cache boot.

It's used when:

 

1) prelinkedkernel header (if booting with caches) has a prelinkVersion >=1 AND the kernel's mach_header's flags has MH_PIE set.

2) You are not booting in safe mode.

3) It has not been disabled via the according hotkey.







0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

© 2017 InsanelyMac  |   News  |   Forum  |   Downloads  |   OSx86 Wiki  |   Designed by Ed Gain  |   Logo by irfan  |   Privacy Policy