2026-05-15 02:33 UTC
Huh, macOS 15.7.7 removes MACH_VOUCHER_ATTR_KEY_TEST from the kernel.
https://github.com/apple-oss-distributions/xnu/blob/5c306bec31e314fa4d8bbdafb2f6f5a6b7e7b291/osfmk/ipc/ipc_voucher.c#L2761
According to the comments, iOS already removed the whole voucher subsystem, anyways, so it’s not interesting - but I wonder why they had something named _TEST compiled into a production kernel…
Replies (1)
-
@nicolas17@social.treehouse.systems 2026-05-15 07:17
@zhuowei@notnow.dev has anyone documented what vouchers are and what they do in the happy path, rather than just "how to use them for exploits"?