JBJF 09a02858f6 SPTM/MIE deep dive: sptm.t8160 820.22 -> 820.40.24 (+64 KiB) ...

- docs/SPTM-MIE-27.2.md: separate SPTM firmware changed (kernel __DATA_SPTM
  is not the monitor); new DART GAPF race, GMMU TLBI verification, iommu
  refcount, Dekker locks, hibernation handoff/latch checks; TXM build-only;
  Exclave +229 KB; MIE SK tag-page check unchanged (210 insns, relocated)
- candidate directions: DART unganged-GAPF race, hibernation handoff page
  count, SK tag-page aliasing, dangling tag storage; no working bypass
- correct the earlier claim that SPTM was unchanged
- tools: fw_diff, string_xref, func_string_diff

2026-10-31 17:14:56 +08:00

..

IOS27.2-CVE-LIST.md

docs: complete iOS 27.2 advisory list (162 CVEs, 67 components) with binary candidates

2026-10-31 17:10:21 +08:00

IOS27.2-KERNEL-DIFF.md

SPTM/MIE deep dive: sptm.t8160 820.22 -> 820.40.24 (+64 KiB)

2026-10-31 17:14:56 +08:00

KERNEL-RW-ASSESSMENT.md

iOS 27.2 kernel differential + NTL fix-boundary sweep

2026-10-31 17:09:48 +08:00

SPTM-MIE-27.2.md

SPTM/MIE deep dive: sptm.t8160 820.22 -> 820.40.24 (+64 KiB)

2026-10-31 17:14:56 +08:00