Skip to content

Instantly share code, notes, and snippets.

@Artoria2e5
Last active August 29, 2015 14:01
Show Gist options
  • Save Artoria2e5/9d63788302560118de09 to your computer and use it in GitHub Desktop.
Save Artoria2e5/9d63788302560118de09 to your computer and use it in GitHub Desktop.
Longterm timer threshold: 1000 ms
Darwin Kernel Version 13.1.0: Thu Jan 16 19:40:37 PST 2014; root:xnu-2422.90.20~2/RELEASE_X86_64
vm_page_bootstrap: 864671 free pages and 110177 wired pages
kext submap [0xffffff7f807a6000 - 0xffffff8000000000], kernel text [0xffffff8000200000 - 0xffffff80007a6000]
zone leak detection enabled
"vm_compressor_mode" is 4
standard timeslicing quantum is 10000 us
standard background quantum is 2500 us
mig_table_max_displ = 74
AppleACPICPU: ProcessorId=0 LocalApicId=0 Enabled
AppleACPICPU: ProcessorId=1 LocalApicId=1 Enabled
calling mpo_policy_init for TMSafetyNet
Security policy loaded: Safety net for Time Machine (TMSafetyNet)
calling mpo_policy_init for Sandbox
Security policy loaded: Seatbelt sandbox policy (Sandbox)
calling mpo_policy_init for Quarantine
Security policy loaded: Quarantine policy (Quarantine)
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California. All rights reserved.
MAC Framework successfully initialized
using 16384 buffer headers and 10240 cluster IO buffer headers
AppleKeyStore starting (BUILT: Sep 19 2013 22:20:34)
IOAPIC: Version 0x11 Vectors 64:87
ACPI: sleep states S3 S4 S5
AppleIntelCPUPowerManagement: (built 19:46:50 Jan 16 2014) initialization complete
pci (build 20:00:24 Jan 16 2014), flags 0x63008, pfm64 (36 cpu) 0xf80000000, 0x80000000
[ PCI configuration begin ]
console relocated to 0xf80010000
[ PCI configuration end, bridges 6, devices 19 ]
NVEthernet::start - Built Sep 19 2013 22:20:06
FireWire (OHCI) Lucent ID 5901 built-in now active, GUID 0026b0fffef033d2; max speed s800.
USBMSC Identifier (non-unique): 000000009833 0x5ac 0x8403 0x9833, 2
mcache: 2 CPU(s), 64 bytes CPU cache line size
mbinit: done [64 MB total pool size, (42/21) split]
Pthread support ABORTS when sync kernel primitives misused
rooting via boot-uuid from /chosen: 14275686-2877-3C5C-A6EF-80A49AE647FF
Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</key><string ID="2">boot-uuid-media</string></dict>
com.apple.AppleFSCompressionTypeZlib kmod start
com.apple.AppleFSCompressionTypeDataless kmod start
com.apple.AppleFSCompressionTypeZlib load succeeded
com.apple.AppleFSCompressionTypeDataless load succeeded
AppleIntelCPUPowerManagementClient: ready
BTCOEXIST off
BRCM tunables:
pullmode[1] txringsize[ 256] txsendqsize[1024] reapmin[ 32] reapcount[ 128]
Got boot device = IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/SATA@B/AppleMCP79AHCI/PRT0@0/IOAHCIDevice@0/AppleAHCIDiskDriver/IOAHCIBlockStorageDevice/IOBlockStorageDriver/Hitachi HTS727575A9E364 Media/IOGUIDPartitionScheme/\M-f\M^\\M-*\M-e\M^Q\M-=\M-e\M^P\M^M@2
BSD root: disk0s2, major 1, minor 2
hfs: mounted Macintosh HD on device root_device
IO80211Controller::dataLinkLayerAttachComplete(): adding AppleEFINVRAM notification
IO80211Interface::efiNVRAMPublished():
fsevents: watcher com.freemacsoft. (pid: 68) - Using /dev/fsevents directly is unsupported. Migrate to FSEventsFramework
Waiting for DSMOS...
VM Swap Subsystem is ON
NVDAStartup: Official
NVDANV50HAL loaded and registered
AGC: 3.4.35, HW version=1.8.8, flags:0, features:4
SMC::smcReadKeyAction ERROR: smcReadData8 failed for key LsNM (kSMCKeyNotFound)
SMC::smcReadKeyAction ERROR LsNM kSMCKeyNotFound(0x84) fKeyHashTable=0x0
SMC::smcGetLightshowVers ERROR: smcReadKey LsNM failed (kSMCKeyNotFound)
SMC::smcPublishLightshowVersion ERROR: smcGetLightshowVers failed (kSMCKeyNotFound)
SMC::smcInitHelper ERROR: smcPublishLightshowVersion failed (kSMCKeyNotFound)
init
probe
start
[IOBluetoothHCIController][start] -- completed
Previous Shutdown Cause: 5
SMC::smcInitHelper ERROR: MMIO regMap == NULL - fall back to old SMC mode
00000000 00000020 NVEthernet::setLinkStatus - not Active
AirPort: Link Down on en1. Reason 8 (Disassociated because station leaving).
DSMOS has arrived
createVirtIf(): ifRole = 1
in func createVirtualInterface ifRole = 1
AirPort_Brcm4331_P2PInterface::init name <p2p0> role 1
AirPort_Brcm4331_P2PInterface::init() <p2p> role 1
Created virtif 0xffffff801f2cf800 p2p0
flow_divert_kctl_disconnect (0): disconnecting group 1
en1: 802.11d country code set to 'CN'.
en1: Supported channels 1 2 3 4 5 6 7 8 9 10 11 12 13 149 153 157 161 165
NVDAStartup: Official
NVDANV50HAL loaded and registered
SMC::smcReadKeyAction ERROR: smcReadData8 failed for key MOTP (kSMCKeyNotFound)
SMC::smcReadKeyAction ERROR: smcReadData8 failed for key BEMB (kSMCKeyNotFound)
MacAuthEvent en1 Auth result for: 74:ea:3a:2e:e8:ea MAC AUTH succeeded
wlEvent: en1 en1 Link UP virtIf = 0
AirPort: Link Up on en1
en1: BSSID changed to 74:ea:3a:2e:e8:ea
AirPort: RSN handshake complete on en1
flow_divert_kctl_disconnect (0): disconnecting group 1
ast_pending=0xffffff80132cb270
cpu_interrupt=0xffffff80132e34f0
vboxdrv: fAsync=0 offMin=0x85c offMax=0xb2c
VBoxDrv: version 4.3.2 r90405; IOCtl version 0x1a0005; IDC version 0x10000; dev major=34
VBoxDrv: vmx_resume=ffffff80132efeb0 vmx_suspend=ffffff80132efe70 vmx_use_count=ffffff80138d8848 (0) cr4=0x660
TUFS: starting (version 2011.4.23, built Apr 24 2011, 12:19:19)
AppleKeyStore:Sending lock change 0
VBoxFltDrv: version 4.3.2 r90405
0 [Level 5] [Facility messagetracer] [com.apple.message.domain com.apple.kernel.cs.mismatch] [com.apple.message.signature 1000] [com.apple.message.signature2 53a18aae61685cc356b171ce37cc504048ed45a1] [com.apple.message.signature3 b928c695e1e1a867d5fc392eb8f09e460f3139af] [com.apple.message.summarize YES]
0 [Level 5] [Facility messagetracer] [com.apple.message.domain com.apple.kernel.cs.invalidate] [com.apple.message.signature invalidate] [com.apple.message.signature4 787] [com.apple.message.signature3 GoogleSoftwareUp] [com.apple.message.summarize YES]
CODE SIGNING: cs_invalid_page(0x1000): p=787[GoogleSoftwareUp] final status 0x0, allowing (remove VALID) page
VBoxAdpDrv: version 4.3.2 r90405
0 [Level 5] [Facility messagetracer] [com.apple.message.domain com.apple.kernel.cs.mismatch] [com.apple.message.signature 1000] [com.apple.message.signature2 3345639bd98273913ff25086fe0151f45fea0fa3] [com.apple.message.signature3 38872323d4adae2cb310de88ceeeae695630ffd7] [com.apple.message.summarize YES]
0 [Level 5] [Facility messagetracer] [com.apple.message.domain com.apple.kernel.cs.invalidate] [com.apple.message.signature invalidate] [com.apple.message.signature4 807] [com.apple.message.signature3 ksadmin] [com.apple.message.summarize YES]
CODE SIGNING: cs_invalid_page(0x1000): p=807[ksadmin] final status 0x0, allowing (remove VALID) page
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny mach-lookup com.apple.ocspd
Sandbox: appleeventsd(57) deny mach-lookup com.apple.ocspd
Sandbox: appleeventsd(57) deny mach-lookup com.apple.ocspd
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny file-read-metadata /Library
Sandbox: appleeventsd(57) deny mach-lookup com.apple.ocspd
Sandbox: appleeventsd(57) deny mach-lookup com.apple.ocspd
Sandbox: appleeventsd(57) deny mach-lookup com.apple.ocspd
**** [IOBluetoothHCIController][SearchForTransportEventTimeOutHandler] -- Missing Bluetooth Controller Transport!
process qcn_7.36_x86_64-[887] caught causing excessive wakeups. Observed wakeups rate (per sec): 6871; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 47087
flow_divert_kctl_disconnect (0): disconnecting group 1
firefox (map: 0xffffff8020a1dd20) triggered DYLD shared region unnest for map: 0xffffff8020a1dd20, region 0x7fff85e00000->0x7fff86000000. While not abnormal for debuggers, this increases system memory footprint until the target exits.
http://reverse.put.as/2013/11/23/breaking-os-x-signed-kernel-extensions-with-a-nop/
http://www.insanelymac.com/forum/topic/293359-tool-to-remove-apple-code-signatures-from-binaries/
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment