Skip to content

Conversation

@ikelos
Copy link
Member

@ikelos ikelos commented Jan 8, 2026

This slightly expands the range of likely addresses for DTBs (we've found some that start lower than 0x650000) and they also seem to have a dummy DTB with only a couple of entries, which are hit and accepted before the actual DTB is tested. This patch ignores any potential DTBs that have very few entries (less than 96 changed bytes across the entire page).

Both these values may require tuning (lowering the false positive detector, or increasing the lower limit that likely DTBs live at). Without a correct DTB, scanning for the kernel will likely always fail the sanity tests, which is why our backup plans weren't finding the kernel, they were working on a broken translation layer.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants