tfp0 is a blog about vulnerabilities in iOS and macOS: root causes, technical analysis, and patches.
The scope is not limited to the kernel. Articles may cover components such as IOSurface, XNU, or WebKit, and impacts such as local privilege escalation (LPE). Each writeup identifies the relevant platform, component, and impact when known.
The name comes from task_for_pid(0), the call that hands back a send right to the kernel task. The mark is that 0, with the segment in red standing for the right.
Built with Hugo. CVE Notes is a custom theme for tfp0.