Skip to content

Instantly share code, notes, and snippets.

@b1n4r1b01
b1n4r1b01 / AppleH10CamInUserClient.md
Last active May 27, 2024 06:40
Some dumb bugs in AppleH10CamInUserClient

NULL Deref

AppleH10CamIn::ISP_RegisterFirmwareWorkProcessor_gated(AppleH10CamIn *this, uint64_t *inStr, io_user_reference_t *asyncRef, uint64_t this2){
	...
		if ( some_os_array->getCount() ){
			while ( true ){
				unk_object = *(uint64_t*)(some_os_array->getObject());
				idk = unk_object->unk_0xD8();