Another M6 gem: return addresses that remember where they came from (PAuth_LR). On M6, Apple's x1 slice signs each return address with the address of the instruction that signed it, not just the stack pointer. Is pacibsp reuse dead? Let's find out: almamatertech.com/notes/retu…

Introducing ipcdex. We built it to track how WebKit’s IPC changes between releases. It lists every CoreIPC message in a WebKit build, who sends it and who receives it, and compares two builds. It reads iOS and macOS releases and your own WebKit builds. Check it out: github.com/almamatertech/ipc…

Apple's M6 brings a new gem: checked pointer arithmetic (CPA). Let’s dig in: almamatertech.com/notes/chec…