Kernel Analysis Vphone600

Use the local research/kernel_info dataset as the first source of truth for symbol lookup. Use research/reference/xnu as the source-level reference for semantics and structure.

Required Paths

• research/kernelinfo/kernelsymbols.db
• research/kernelinfo/kernelindex.tsv
• research/kernel_info/json/kernelcache.release.vphone600.bin.symbols.json
• research/kernel_info/json/kernelcache.research.vphone600.bin.symbols.json
• research/reference/xnu

If research/reference/xnu is missing, create it with a shallow clone:

mkdir -p research/reference
git clone --depth 1 https://github.com/apple-oss-distributions/xnu.git research/reference/xnu

Workflow

1. Confirm scope is vphone600 only.
2. Query kernel_symbols.db to select release or research dataset by name.
3. Load the linked JSON symbol file and perform symbol/address lookups.
4. Cross-reference candidate code paths in research/reference/xnu.
5. Report findings with explicit kernel name, symbol path, and address.

Standard Queries

• List known kernels:

- sqlite3 research/kernelinfo/kernelsymbols.db "select kernelname, jsonpath from kernelsymbols order by kernelname;"

• Find one kernel by name:

- sqlite3 research/kernelinfo/kernelsymbols.db "select * from kernelsymbols where kernelname='kernelcache.release.vphone600';"

• Search symbol by substring in release JSON:

- rg -n 'symbolnamefragment' research/kernel_info/json/kernelcache.release.vphone600.bin.symbols.json

• Search symbol by address in research JSON:

- rg -n '0xfffffe00...' research/kernel_info/json/kernelcache.research.vphone600.bin.symbols.json

Output Rules

• Always include which kernel was used: kernelcache.release.vphone600 or kernelcache.research.vphone600.
• Always include exact symbol name and address when available.
• Always distinguish fact from inference when mapping symbols to XNU behavior.
• Avoid claiming coverage outside vphone600 unless explicitly requested.

References

• Read references/kernel-info-queries.md for reusable SQL and shell query snippets.