Jump to content
16 posts in this topic

Recommended Posts

[Violation of DMCA]

 

enjoy

 

my 1111a osx gets rebooted instantly with this kernel.. in case that someone would like to test it :)

 

-rwxr-xr-x 1 root wheel 3944716 Dec 9 01:56 mach_kernel (10.4.3 not patched)

-rwxr-xr-x 1 root wheel 8361520 Jan 18 08:00 mach_kernel.orig (10.4.4)

 

I think that it might have some kernel extensions static-linked(TPM etc..)

 

I know it can be caused by extensions, so I'll test it with 10.4.4 ones.

Edited by other

how are you guys testing kernels?

 

I've been trying to do that for some time without any luck....

 

I'm hesitant to just create a backup of mach_kernel and replace it with a test kernel because I'm worried about not being able to revert back to my original mach_kernel if the test kernel fails.

 

Can I just boot back into single user mode if the kernel panics and restore the original kernel?

 

I've asked this question on mutliple threads and on the IRC channel too, so any help would be much appreciated.

I get it to work!

 

Huge improvements, no wait... aah its a step backwards.

 

After the spinning ball it says "Welcome to Windows XP"

 

<scnr> :D

 

But to be serious, very interesting!! And thanks for sharing it,

very much appreciated :)

Edited by xtraa
how are you guys testing kernels?

 

I've been trying to do that for some time without any luck....

 

I'm hesitant to just create a backup of mach_kernel and replace it with a test kernel because I'm worried about not being able to revert back to my original mach_kernel if the test kernel fails.

 

Can I just boot back into single user mode if the kernel panics and restore the original kernel?

 

I've asked this question on mutliple threads and on the IRC channel too, so any help would be much appreciated.

 

you put the kernel in /... something like /mach_kernel.1044 then boot with F8 and type the kernel name (without the '/') at the prompt. it will load that specific kernel for that specific session

you put the kernel in /... something like /mach_kernel.1044 then boot with F8 and type the kernel name (without the '/') at the prompt. it will load that specific kernel for that specific session

 

Well I tried that, and i thought it had worked, except when I got the same results in xBench I got suspicious.

 

So to test if it was really using the kernel i specified at boot, I plopped in an unpatched kernel which should have prompted all sorts of kernel panics and tpm reboots, but none of the above happened. Which leads me to believe that the kernel i was testing never loaded.

 

What I would really like to know is if i replace the original mach_kernel, I can still boot into single user mode to perform a restore if I need to.

Well I tried that, and i thought it had worked, except when I got the same results in xBench I got suspicious.

 

So to test if it was really using the kernel i specified at boot, I plopped in an unpatched kernel which should have prompted all sorts of kernel panics and tpm reboots, but none of the above happened. Which leads me to believe that the kernel i was testing never loaded.

 

What I would really like to know is if i replace the original mach_kernel, I can still boot into single user mode to perform a restore if I need to.

You'll never be able to do any operation without functional kernel.. rename your running kernel to mach_kernel.bak and rename 4.4 kernel to mach_kernel

I bet it won't boot. if this happens, push F8 before booting and you'll get darwin loader prompt..

write down "mach_kernel.bak" and it boots your old kernel.

here is diff searching string "EFI" in 10.4.3 unpatched and 10.4.4 - some diffs are visible..

 

mach_kernel.orig is 10.4.4 kernel

forcer@digital:/> strings -a mach_kernel | grep EFI
EFI region: type = %d/%d,  base = 0x%x,  top = 0x%x
Initializing EFI runtime services
alloc EFI runtime services map
EFI runtime region %d type %d virt 0x%x phys 0x%x size 0x%x
Total size of EFI area 0x%x
alloc EFI pages
Allocated 0x%x bytes for EFI at 0x%x
Setting EFI virtual address
Set EFI virtual address result is 0x%x
0x%x (UNDEFINED)
gPEEFIRuntimeServices = 0x%x

forcer@digital:/> strings -a mach_kernel.orig | grep EFI
EFI region: type = %d/%d,  base = 0x%x,  top = 0x%x
Bad EFI system table signature
Bad EFI system table checksum
Bad EFI runtime table signature
Bad EFI runtime table checksum
Initializing EFI runtime services
Reinitializing EFI runtime services
Done reinitializing EFI runtime services
CreateEFIDevicePath
0x%x (UNDEFINED)

Edited by forcer
×
×
  • Create New...