Kernel Analysis Vphone600
Use the local Research/KernelSymbols dataset as the first source of truth for symbol lookup.
Use Research/Reference/xnu as the source-level reference for semantics and structure.
Required Paths
Research/KernelSymbols/kernel_symbols.dbResearch/KernelSymbols/kernel_index.tsv(plain-textkernel_name → json_pathindex withjson_sha256)Research/KernelSymbols/json/— the recovered symbol datasets:kernelcache.release.vphone600.bin.symbols.jsonkernelcache.research.vphone600.bin.symbols.json
Research/Reference/xnu
The json_path column in both the database and kernel_index.tsv records the absolute path from symbolication
time and may not match this checkout; resolve the JSON files under Research/KernelSymbols/json/ instead.
If Research/Reference/xnu is missing, create it with a shallow clone:
bashmkdir -p Research/Reference git clone --depth 1 https://github.com/apple-oss-distributions/xnu.git Research/Reference/xnu
Workflow
- Confirm scope is
vphone600only. - Query
kernel_symbols.dbto selectreleaseorresearchdataset by name. - Load the linked JSON symbol file and perform symbol/address lookups.
- Cross-reference candidate code paths in
Research/Reference/xnu. - Report findings with explicit kernel name, symbol path, and address.
Output Rules
- Always include which kernel was used:
kernelcache.release.vphone600orkernelcache.research.vphone600. - Always include exact symbol name and address when available.
- Always distinguish fact from inference when mapping symbols to XNU behavior.
- Avoid claiming coverage outside vphone600 unless explicitly requested.
References
- Read
references/kernel-info-queries.mdfor reusable SQL and shell query snippets.


