When analysing crash reports, I'm seeing a Non UI role that I have never seen before. I am trying to understand what state of the app it corresponds to. Hardware Model: iPhone7,2 Code Type: ARM-64...

I'm looking through the syscalls.master file here but it isn't at all documented. Does documentation for the syscalls exist? If not, why not? By documentation I mean an actual explanation of what ...

I am attempting to hand-write a Mach-O executable. There are three load commands: LC_SEGMENT_64 loading __PAGEZERO LC_SEGMENT_64 loading __TEXT, with a single __text section LC_UNIXTHREAD with an...

Throughout the CoreFoundation framework source, POSIX filesystem API calls (e.g. open(), stat(), et al…) are wrapped in an idiom wherein a descriptor on /dev/autofs_nowait is acquired – with open(…...

I'm debugging a driver that cause kernel dump on my mac. It shows long backtrace composed out of series of addresses: panic(cpu 6 caller 0xffffff8004dc9986): trying to interlock destroyed mutex ...

I'd like to figure out how does VMMAP process operates. After running this executable with dtrace, it seems that the method proc_regionfilename that extract the address space of each section in t...

The material available from web, mail-list, books like Mac OS X Internals, and even source code is quite limited. Now I know that xnu kernel raise an EXC_CRASH, which notify launched to start "Pro...

I want to port the xnu kernel to the ARM architecture, with the ultimate goal of being able to run a full kernel inside Qemu. While I do realise that this is a very difficult task, I still want to ...