apple-data 1.0.414 → 1.0.418

Sign up to get free protection for your applications and to get access to all the features.
Files changed (41) hide show
  1. checksums.yaml +4 -4
  2. data/lib/apple_data/version.rb +1 -1
  3. data/share/4cc.yaml +297 -293
  4. data/share/apns.yaml +367 -364
  5. data/share/backup.yaml +46 -43
  6. data/share/baseband.yaml +4 -1
  7. data/share/bluetooth.yaml +75 -71
  8. data/share/boot_args.yaml +859 -855
  9. data/share/bridgeos.yaml +153 -110
  10. data/share/bundles.yaml +56 -60
  11. data/share/cores.yaml +3 -2
  12. data/share/defaults.yaml +4 -3
  13. data/share/dnssd.yaml +76 -72
  14. data/share/environment_variables.yaml +4 -1
  15. data/share/fdr.yaml +172 -169
  16. data/share/homekit.yaml +14 -14
  17. data/share/iboot.yaml +3 -0
  18. data/share/icloud.yaml +11 -8
  19. data/share/img4.yaml +455 -452
  20. data/share/ioreg.yaml +5645 -5642
  21. data/share/ipsw.yaml +5 -4
  22. data/share/kext.yaml +1721 -1718
  23. data/share/keys.yaml +3 -0
  24. data/share/lightning.yaml +4 -3
  25. data/share/lockdownd.yaml +79 -76
  26. data/share/mach_o.yaml +3 -0
  27. data/share/mobile_assets.yaml +4 -0
  28. data/share/mobile_gestalt.yaml +2447 -2444
  29. data/share/nvram.yaml +463 -460
  30. data/share/ota.yaml +4 -1
  31. data/share/pki.yaml +103 -99
  32. data/share/platforms.yaml +35 -31
  33. data/share/pmu.yaml +53 -24
  34. data/share/registers.yaml +4 -3
  35. data/share/resources.yaml +202 -198
  36. data/share/sep.yaml +210 -206
  37. data/share/services.yaml +641 -636
  38. data/share/sip.yaml +5 -2
  39. data/share/syscfg.yaml +4 -1
  40. data/share/vmapple.yaml +4 -1
  41. metadata +1 -1
data/share/apns.yaml CHANGED
@@ -6,381 +6,384 @@
6
6
  # 0x01 connected
7
7
  # 0x03 message received
8
8
  # 0x06 keep-alive response
9
+ metadata:
10
+ description:
11
+ credits:
12
+ apns_commands:
13
+ 0x07:
14
+ name: connect
15
+ label: Connect
16
+ direction: outgoing
17
+ items:
18
+ 0x01:
19
+ name: token
20
+ label: Token
21
+ 0x02:
22
+ name: state
23
+ label: State
24
+ 0x05:
25
+ # the bitfield is not decoded yet, and it doesn't seem easy,
26
+ # as there's several constant values.
27
+ name: flags
28
+ label: Flags
29
+ 0x06:
30
+ # 'interface' internally has values [0..4], but the number in this field
31
+ # is only 0/1 for cellular/WiFi
32
+ name: interface
33
+ label: Interface
34
+ type: FT_UINT8
35
+ base: BASE_DEC
36
+ strings: VALS(interface_string)
37
+ 0x07:
38
+ name: active_interval
39
+ label: Active Interval
40
+ 0x08:
41
+ name: carrier
42
+ label: Carrier
43
+ type: FT_STRING
44
+ 0x09:
45
+ name: software_version
46
+ label: Software Version
47
+ type: FT_STRING
48
+ 0x0a:
49
+ name: software_build
50
+ label: Software Build
51
+ type: FT_STRING
52
+ 0x0b:
53
+ name: hardware_version
54
+ label: Hardware Version
55
+ type: FT_STRING
56
+ 0x0c:
57
+ name: certificate
58
+ label: Certificate
59
+ 0x0d:
60
+ name: nonce
61
+ label: Nonce
62
+ 0x0e:
63
+ name: signature
64
+ label: Signature
65
+ 0x10:
66
+ # I *think* this is a protocol version. Values seen:
67
+ # macOS Sierra: 3
68
+ # iOS 12.4.8: 6
69
+ # iOS 13.7: 7
9
70
 
10
- 0x07:
11
- name: connect
12
- label: Connect
13
- direction: outgoing
14
- items:
15
- 0x01:
16
- name: token
17
- label: Token
18
- 0x02:
19
- name: state
20
- label: State
21
- 0x05:
22
- # the bitfield is not decoded yet, and it doesn't seem easy,
23
- # as there's several constant values.
24
- name: flags
25
- label: Flags
26
- 0x06:
27
- # 'interface' internally has values [0..4], but the number in this field
28
- # is only 0/1 for cellular/WiFi
29
- name: interface
30
- label: Interface
31
- type: FT_UINT8
32
- base: BASE_DEC
33
- strings: VALS(interface_string)
34
- 0x07:
35
- name: active_interval
36
- label: Active Interval
37
- 0x08:
38
- name: carrier
39
- label: Carrier
40
- type: FT_STRING
41
- 0x09:
42
- name: software_version
43
- label: Software Version
44
- type: FT_STRING
45
- 0x0a:
46
- name: software_build
47
- label: Software Build
48
- type: FT_STRING
49
- 0x0b:
50
- name: hardware_version
51
- label: Hardware Version
52
- type: FT_STRING
53
- 0x0c:
54
- name: certificate
55
- label: Certificate
56
- 0x0d:
57
- name: nonce
58
- label: Nonce
59
- 0x0e:
60
- name: signature
61
- label: Signature
62
- 0x10:
63
- # I *think* this is a protocol version. Values seen:
64
- # macOS Sierra: 3
65
- # iOS 12.4.8: 6
66
- # iOS 13.7: 7
71
+ name: version
72
+ label: Protocol Version
73
+ type: FT_UINT16
74
+ base: BASE_DEC
75
+ 0x11:
76
+ name: redirect_count
77
+ label: Redirect Count
78
+ type: FT_UINT16
79
+ base: BASE_DEC
80
+ 0x13:
81
+ name: dns_time
82
+ label: DNS Resolve Time
83
+ 0x14:
84
+ name: tls_time
85
+ label: TLS Handshake Time
86
+ type: FT_RELATIVE_TIME
67
87
 
68
- name: version
69
- label: Protocol Version
70
- type: FT_UINT16
71
- base: BASE_DEC
72
- 0x11:
73
- name: redirect_count
74
- label: Redirect Count
75
- type: FT_UINT16
76
- base: BASE_DEC
77
- 0x13:
78
- name: dns_time
79
- label: DNS Resolve Time
80
- 0x14:
81
- name: tls_time
82
- label: TLS Handshake Time
83
- type: FT_RELATIVE_TIME
88
+ 0x08:
89
+ name: connected
90
+ label: Connected
91
+ direction: incoming
92
+ items:
93
+ 0x01:
94
+ name: connected_response
95
+ label: Response
96
+ type: FT_UINT8
97
+ base: BASE_HEX
98
+ 0x02:
99
+ name: server_metadata
100
+ label: Server Metadata
101
+ type: FT_STRING
102
+ 0x03:
103
+ name: token
104
+ label: Token
105
+ 0x04:
106
+ name: message_size
107
+ label: Message Size
108
+ type: FT_UINT16
109
+ base: BASE_DEC
110
+ 0x06:
111
+ name: capabilities
112
+ label: Capabilities
113
+ type: FT_UINT32
114
+ base: BASE_HEX
115
+ ## whole field: capabilities
116
+ ## bit0: dualChannelSupport
117
+ ## bit1: reportLastReversePushRTT
118
+ 0x07:
119
+ name: bad_nonce_time
120
+ label: Server Time For Bad Nonce
121
+ type: FT_UINT64
122
+ base: BASE_HEX
123
+ 0x08:
124
+ name: large_message_size
125
+ label: Large Message Size
126
+ type: FT_UINT16
127
+ base: BASE_DEC
128
+ 0x09:
129
+ name: redirect_reason
130
+ label: Redirect Reason
131
+ type: FT_STRING
132
+ 0x0a:
133
+ name: server_time
134
+ label: Server Time
135
+ type: FT_ABSOLUTE_TIME
136
+ base: ABSOLUTE_TIME_UTC
137
+ 0x0b:
138
+ name: geo_region
139
+ label: Geo Region
140
+ type: FT_STRING
141
+ # This is a timestamp but I don't know what it means
142
+ 0x0c:
143
+ name: unknown_ts
144
+ label: Unknown
145
+ type: FT_ABSOLUTE_TIME
146
+ base: ABSOLUTE_TIME_UTC
84
147
 
85
- 0x08:
86
- name: connected
87
- label: Connected
88
- direction: incoming
89
- items:
90
- 0x01:
91
- name: connected_response
92
- label: Response
93
- type: FT_UINT8
94
- base: BASE_HEX
95
- 0x02:
96
- name: server_metadata
97
- label: Server Metadata
98
- type: FT_STRING
99
- 0x03:
100
- name: token
101
- label: Token
102
- 0x04:
103
- name: message_size
104
- label: Message Size
105
- type: FT_UINT16
106
- base: BASE_DEC
107
- 0x06:
108
- name: capabilities
109
- label: Capabilities
110
- type: FT_UINT32
111
- base: BASE_HEX
112
- ## whole field: capabilities
113
- ## bit0: dualChannelSupport
114
- ## bit1: reportLastReversePushRTT
115
- 0x07:
116
- name: bad_nonce_time
117
- label: Server Time For Bad Nonce
118
- type: FT_UINT64
119
- base: BASE_HEX
120
- 0x08:
121
- name: large_message_size
122
- label: Large Message Size
123
- type: FT_UINT16
124
- base: BASE_DEC
125
- 0x09:
126
- name: redirect_reason
127
- label: Redirect Reason
128
- type: FT_STRING
129
- 0x0a:
130
- name: server_time
131
- label: Server Time
132
- type: FT_ABSOLUTE_TIME
133
- base: ABSOLUTE_TIME_UTC
134
- 0x0b:
135
- name: geo_region
136
- label: Geo Region
137
- type: FT_STRING
138
- # This is a timestamp but I don't know what it means
139
- 0x0c:
140
- name: unknown_ts
141
- label: Unknown
142
- type: FT_ABSOLUTE_TIME
143
- base: ABSOLUTE_TIME_UTC
148
+ 0x09:
149
+ name: filter
150
+ label: Filter
151
+ direction: outgoing
152
+ items:
153
+ 0x01:
154
+ name: token
155
+ label: Token
156
+ 0x02:
157
+ name: enabled_hash
158
+ label: Enabled Topic Hash
159
+ 0x03:
160
+ name: ignored_hash
161
+ label: Ignored Topic Hash
162
+ 0x04:
163
+ name: opportunistic_hash
164
+ label: Opportunistic Topic Hash
165
+ 0x05:
166
+ name: paused_hash
167
+ label: Paused Topic Hash
144
168
 
145
- 0x09:
146
- name: filter
147
- label: Filter
148
- direction: outgoing
149
- items:
150
- 0x01:
151
- name: token
152
- label: Token
153
- 0x02:
154
- name: enabled_hash
155
- label: Enabled Topic Hash
156
- 0x03:
157
- name: ignored_hash
158
- label: Ignored Topic Hash
159
- 0x04:
160
- name: opportunistic_hash
161
- label: Opportunistic Topic Hash
162
- 0x05:
163
- name: paused_hash
164
- label: Paused Topic Hash
169
+ 0x0a:
170
+ name: message
171
+ label: Message
172
+ direction: both
173
+ items:
174
+ # outgoing, 1 is topic hash, 2 is token
175
+ # incoming, 1 is token, 2 is topic hash
176
+ 0x1:
177
+ name: topic_hash
178
+ label: Topic Hash
179
+ 0x2:
180
+ name: token
181
+ label: Token
182
+ 0x3:
183
+ name: payload
184
+ label: Payload
185
+ 0x4:
186
+ name: message_id
187
+ label: Message ID
188
+ type: FT_UINT32
189
+ base: BASE_HEX
190
+ 0x5:
191
+ name: expiry
192
+ label: Message Expiry Time
193
+ type: FT_ABSOLUTE_TIME
194
+ base: ABSOLUTE_TIME_UTC
195
+ 0x6:
196
+ # this is nanoseconds since Unix epoch,
197
+ # but Wireshark doesn't yet support that
198
+ name: timestamp
199
+ label: Message Timestamp
200
+ type: FT_UINT64
201
+ base: BASE_HEX
202
+ 0x9:
203
+ name: storage_flags
204
+ label: Storage Fiags
205
+ type: FT_UINT8
206
+ base: BASE_HEX
207
+ 0xd:
208
+ name: priority
209
+ label: Priority
210
+ type: FT_UINT8
211
+ base: BASE_HEX
212
+ 0xf:
213
+ name: base_token
214
+ label: Base Token
215
+ 0x15:
216
+ name: tracing_uuid
217
+ label: Message Tracing UUID
218
+ 0x18:
219
+ name: correlation_id
220
+ label: Correlation Identifier
221
+ type: FT_STRING
222
+ 0x1a:
223
+ name: apn_flags
224
+ label: APN Flags
225
+ type: FT_UINT32
226
+ base: BASE_HEX
227
+ 0x1c:
228
+ name: push_type
229
+ label: Push Type
230
+ type: FT_UINT16
231
+ base: BASE_DEC
232
+ strings: VALS(push_type_string)
233
+ 0x19:
234
+ name: lastRTT
235
+ label: Last RTT
236
+ type: FT_UINT16
237
+ base: BASE_DEC
165
238
 
166
- 0x0a:
167
- name: message
168
- label: Message
169
- direction: both
170
- items:
171
- # outgoing, 1 is topic hash, 2 is token
172
- # incoming, 1 is token, 2 is topic hash
173
- 0x1:
174
- name: topic_hash
175
- label: Topic Hash
176
- 0x2:
177
- name: token
178
- label: Token
179
- 0x3:
180
- name: payload
181
- label: Payload
182
- 0x4:
183
- name: message_id
184
- label: Message ID
185
- type: FT_UINT32
186
- base: BASE_HEX
187
- 0x5:
188
- name: expiry
189
- label: Message Expiry Time
190
- type: FT_ABSOLUTE_TIME
191
- base: ABSOLUTE_TIME_UTC
192
- 0x6:
193
- # this is nanoseconds since Unix epoch,
194
- # but Wireshark doesn't yet support that
195
- name: timestamp
196
- label: Message Timestamp
197
- type: FT_UINT64
198
- base: BASE_HEX
199
- 0x9:
200
- name: storage_flags
201
- label: Storage Fiags
202
- type: FT_UINT8
203
- base: BASE_HEX
204
- 0xd:
205
- name: priority
206
- label: Priority
207
- type: FT_UINT8
208
- base: BASE_HEX
209
- 0xf:
210
- name: base_token
211
- label: Base Token
212
- 0x15:
213
- name: tracing_uuid
214
- label: Message Tracing UUID
215
- 0x18:
216
- name: correlation_id
217
- label: Correlation Identifier
218
- type: FT_STRING
219
- 0x1a:
220
- name: apn_flags
221
- label: APN Flags
222
- type: FT_UINT32
223
- base: BASE_HEX
224
- 0x1c:
225
- name: push_type
226
- label: Push Type
227
- type: FT_UINT16
228
- base: BASE_DEC
229
- strings: VALS(push_type_string)
230
- 0x19:
231
- name: lastRTT
232
- label: Last RTT
233
- type: FT_UINT16
234
- base: BASE_DEC
239
+ 0x0b:
240
+ name: ack
241
+ label: Acknowledge Message
242
+ direction: both
243
+ items:
244
+ 0x1:
245
+ name: token
246
+ label: Token
247
+ 0x4:
248
+ name: message_id
249
+ label: Message ID
250
+ type: FT_UINT32
251
+ base: BASE_HEX
252
+ 0x8:
253
+ name: response
254
+ label: Response
255
+ type: FT_UINT8
256
+ base: BASE_HEX
235
257
 
236
- 0x0b:
237
- name: ack
238
- label: Acknowledge Message
239
- direction: both
240
- items:
241
- 0x1:
242
- name: token
243
- label: Token
244
- 0x4:
245
- name: message_id
246
- label: Message ID
247
- type: FT_UINT32
248
- base: BASE_HEX
249
- 0x8:
250
- name: response
251
- label: Response
252
- type: FT_UINT8
253
- base: BASE_HEX
258
+ 0x0c:
259
+ name: keepalive
260
+ label: Keep-Alive
261
+ direction: outgoing
262
+ items:
263
+ 0x01:
264
+ name: carrier
265
+ label: Carrier
266
+ type: FT_STRING
267
+ 0x02:
268
+ name: software_version
269
+ label: Software Version
270
+ type: FT_STRING
271
+ 0x03:
272
+ name: software_build
273
+ label: Software Build
274
+ type: FT_STRING
275
+ 0x04:
276
+ name: hardware_version
277
+ label: Hardware Version
278
+ type: FT_STRING
279
+ 0x05:
280
+ name: interval
281
+ label: Keepalive Interval
282
+ type: FT_STRING
283
+ 0x06:
284
+ name: delayed_interval
285
+ label: Delayed Response Interval
286
+ type: FT_STRING
254
287
 
255
- 0x0c:
256
- name: keepalive
257
- label: Keep-Alive
258
- direction: outgoing
259
- items:
260
- 0x01:
261
- name: carrier
262
- label: Carrier
263
- type: FT_STRING
264
- 0x02:
265
- name: software_version
266
- label: Software Version
267
- type: FT_STRING
268
- 0x03:
269
- name: software_build
270
- label: Software Build
271
- type: FT_STRING
272
- 0x04:
273
- name: hardware_version
274
- label: Hardware Version
275
- type: FT_STRING
276
- 0x05:
277
- name: interval
278
- label: Keepalive Interval
279
- type: FT_STRING
280
- 0x06:
281
- name: delayed_interval
282
- label: Delayed Response Interval
283
- type: FT_STRING
288
+ 0x0d:
289
+ name: keepalive_response
290
+ label: Keep-Alive Response
291
+ direction: incoming
292
+ items:
293
+ 0x1:
294
+ name: response
295
+ label: Response
296
+ type: FT_UINT8
297
+ base: BASE_HEX
284
298
 
285
- 0x0d:
286
- name: keepalive_response
287
- label: Keep-Alive Response
288
- direction: incoming
289
- items:
290
- 0x1:
291
- name: response
292
- label: Response
293
- type: FT_UINT8
294
- base: BASE_HEX
299
+ 0x0f:
300
+ name: flush
301
+ label: Flush
302
+ direction: incoming
303
+ items:
304
+ 0x1:
305
+ name: want_padding
306
+ label: Want Padding
307
+ type: FT_UINT16
308
+ base: BASE_HEX
295
309
 
296
- 0x0f:
297
- name: flush
298
- label: Flush
299
- direction: incoming
300
- items:
301
- 0x1:
302
- name: want_padding
303
- label: Want Padding
304
- type: FT_UINT16
305
- base: BASE_HEX
310
+ 0x10:
311
+ name: flush_response
312
+ label: Flush Response
313
+ direction: incoming
306
314
 
307
- 0x10:
308
- name: flush_response
309
- label: Flush Response
310
- direction: incoming
315
+ 0x11:
316
+ name: apptoken
317
+ label: App Token Generate Request
318
+ direction: outgoing
319
+ items:
320
+ 0x01:
321
+ name: base_token
322
+ label: Base Token
323
+ 0x02:
324
+ name: topic_hash
325
+ label: Topic Hash
326
+ 0x03:
327
+ name: appid
328
+ label: App ID
329
+ type: FT_UINT16
330
+ base: BASE_HEX
311
331
 
312
- 0x11:
313
- name: apptoken
314
- label: App Token Generate Request
315
- direction: outgoing
316
- items:
317
- 0x01:
318
- name: base_token
319
- label: Base Token
320
- 0x02:
321
- name: topic_hash
322
- label: Topic Hash
323
- 0x03:
324
- name: appid
325
- label: App ID
326
- type: FT_UINT16
327
- base: BASE_HEX
332
+ 0x12:
333
+ name: apptoken_response
334
+ label: App Token Generate Response
335
+ direction: incoming
336
+ items:
337
+ 0x01:
338
+ name: response
339
+ label: Response
340
+ type: FT_UINT8
341
+ base: BASE_HEX
342
+ 0x02:
343
+ name: token
344
+ label: Token
345
+ 0x03:
346
+ name: topic_hash
347
+ label: Topic Hash
348
+ 0x04:
349
+ name: appid
350
+ label: App ID
351
+ type: FT_UINT16
352
+ base: BASE_HEX
328
353
 
329
- 0x12:
330
- name: apptoken_response
331
- label: App Token Generate Response
332
- direction: incoming
333
- items:
334
- 0x01:
335
- name: response
336
- label: Response
337
- type: FT_UINT8
338
- base: BASE_HEX
339
- 0x02:
340
- name: token
341
- label: Token
342
- 0x03:
343
- name: topic_hash
344
- label: Topic Hash
345
- 0x04:
346
- name: appid
347
- label: App ID
348
- type: FT_UINT16
349
- base: BASE_HEX
354
+ 0x14:
355
+ name: setstate
356
+ label: Set Active State
357
+ direction: outgoing
358
+ items:
359
+ 0x01:
360
+ name: state
361
+ label: State
362
+ type: FT_UINT8
363
+ base: BASE_DEC
364
+ strings: VALS(active_state_string)
365
+ # this is hardcoded to 0x258 ??
366
+ 0x02:
367
+ name: interval
368
+ label: Interval
369
+ type: FT_UINT32
370
+ base: BASE_HEX
350
371
 
351
- 0x14:
352
- name: setstate
353
- label: Set Active State
354
- direction: outgoing
355
- items:
356
- 0x01:
357
- name: state
358
- label: State
359
- type: FT_UINT8
360
- base: BASE_DEC
361
- strings: VALS(active_state_string)
362
- # this is hardcoded to 0x258 ??
363
- 0x02:
364
- name: interval
365
- label: Interval
366
- type: FT_UINT32
367
- base: BASE_HEX
372
+ 0x16:
373
+ name: keepalive_ack
374
+ label: Keep-Alive Ack
375
+ direction: incoming
368
376
 
369
- 0x16:
370
- name: keepalive_ack
371
- label: Keep-Alive Ack
372
- direction: incoming
373
-
374
- 0x17:
375
- name: redirect
376
- label: Redirect # ??
377
- direction: incoming
378
- items:
379
- 0x02:
380
- name: server_metadata
381
- label: Server Metadata
382
- type: FT_STRING
383
- 0x09:
384
- name: redirect_reason
385
- label: Redirect Reason
386
- type: FT_STRING
377
+ 0x17:
378
+ name: redirect
379
+ label: Redirect # ??
380
+ direction: incoming
381
+ items:
382
+ 0x02:
383
+ name: server_metadata
384
+ label: Server Metadata
385
+ type: FT_STRING
386
+ 0x09:
387
+ name: redirect_reason
388
+ label: Redirect Reason
389
+ type: FT_STRING