So, I’ve already managed to “crash” the iPhone, but of course since it runs “OS X” with protected memory and all that fun stuff (and this wasn’t a kernel panic), the crash consisted of Safari closing and returning to the home screen, not completely freezing like my RAZR always did whenever I would try to enter text without putting a space between each letter. I would have to s e n d t e x t m e s s a g e s l i k e t h i s).

The next time I synced, iTunes prompted me for permission to submit a crash report to Apple, and also provided me with the location of the crash report:

/Library/Logs/CrashReporter/MobileDevice/iPhone name/

It looks pretty much like any standard Mac OS X crash report, with some basic OS info along with stack traces for each thread, which thread crashed, CPU register values, and binary image information.

Here’s what I’ve gotten out of it:

1. Apple is calling iPhone’s operating system “OS X 1.0″… no big surprise
2. iPhone’s Safari is called “MobileSafari”
3. The home screen is called “SpringBoard”
4. MobileSafari was process 98 (pretty much meaningless), while SpringBoard was process 15 (compared to Mac OS X’s equivalent, WindowServer, which is process 73 on my Mac).. this gives us an idea of how many processes are running
5. There a bunch of new frameworks we’ve never heard of (including Celestial, MobileBluetooth, IOMobileFramebuffer, CoreSurface, CoreTelephony, numerous others, and liblockdown which sounds rather ominous and intriguing…)
6. …as well as a bunch that we know and love (including Foundation, CoreAudio, CoreVideo, CoreGraphics, IOKit, WeKit, WebCore, JavaScriptCore, CFNetwork, and actually LayerKit which is now known as our friend CoreAnimation)
7. Noticeably absent is AppKit (no big surprise, since very few UI elements look like Cocoa’s), but in it’s place appears to be UIKit.
8. The filesystem structure looks similar to Mac OS X (/Applications, /System/Library/Frameworks, etc)
9. iPhone most definitely runs on an ARM processor, but we already knew that
10. It crashed in WebCore

Some of this makes me think that Apple simply isn’t ready to release an external Cocoa API to the public. Things like LayerKit would need to be changed to CoreAnimation, and UIKit would probably be given a different name, among others. And of course Apple would have to decide on a stable set of APIs before releasing it to 3rd party developers, wheras right now if they need to change something, they have complete control and can do whatever they like.

Process: MobileSafari [98]<br /> Path: /Applications/MobileSafari.app/MobileSafari<br /> Version: N/A (N/A)<br /> Code Type: 0000000C (Native)<br /> Effective UID: 0<br /> Parent Process: SpringBoard [15]</p> <p>Date/Time: 2007-06-29 22:13:47.043 -0700<br /> OS Version: OS X 1.0 (1A543a)<br /> Report Version: 6</p> <p>Exception Type: EXC_BAD_ACCESS<br /> Exception Codes: KERN_PROTECTION_FAILURE at 0x00000004<br /> Crashed Thread: 2</p> <p>Thread 0:<br /> 0 libSystem.B.dylib 0x300053f4 0x30000000 + 21492<br /> 1 libSystem.B.dylib 0x30005373 0x30000000 + 21363<br /> 2 CoreFoundation 0x303fdaa7 0x303e7000 + 92839<br /> 3 CoreFoundation 0x303fd5fb 0x303e7000 + 91643<br /> 4 GraphicsServices 0x3098bb64 0x30988000 + 15204<br /> 5 UIKit 0x323b9928 0x323ab000 + 59688<br /> 6 UIKit 0x323b1f54 0x323ab000 + 28500<br /> 7 UIKit 0x323b75dc 0x323ab000 + 50652<br /> 8 MobileSafari 0x000051ec 0x1000 + 16876<br /> 9 MobileSafari 0x00004b98 0x1000 + 15256</p> <p>Thread 1:<br /> 0 libSystem.B.dylib 0x300053f4 0x30000000 + 21492<br /> 1 libSystem.B.dylib 0x30005373 0x30000000 + 21363<br /> 2 GraphicsServices 0x3098e258 0x30988000 + 25176<br /> 3 libSystem.B.dylib 0x300173db 0x30000000 + 95195</p> <p>Thread 2 Crashed:<br /> 0 CoreFoundation 0x303ea0a3 0x303e7000 + 12451<br /> 1 WebCore 0x313594fc 0x31351000 + 34044<br /> 2 WebCore 0x313546d8 0x31351000 + 14040<br /> 3 UIKit 0x3246b0dc 0x323ab000 + 786652<br /> 4 UIKit 0x3246b2ec 0x323ab000 + 787180<br /> 5 WebCore 0x315b1f74 0x31351000 + 2494324<br /> 6 WebCore 0x315b204c 0x31351000 + 2494540<br /> 7 CoreFoundation 0x303fd8a1 0x303e7000 + 92321<br /> 8 CoreFoundation 0x303fd5fb 0x303e7000 + 91643<br /> 9 WebCore 0x315b198c 0x31351000 + 2492812<br /> 10 libSystem.B.dylib 0x300173db 0x30000000 + 95195</p> <p>Thread 3:<br /> 0 libSystem.B.dylib 0x300053f4 0x30000000 + 21492<br /> 1 libSystem.B.dylib 0x30005373 0x30000000 + 21363<br /> 2 CoreFoundation 0x303fdaa7 0x303e7000 + 92839<br /> 3 CoreFoundation 0x303fd5fb 0x303e7000 + 91643<br /> 4 Foundation 0x308e9d3f 0x3085e000 + 572735<br /> 5 Foundation 0x308c5cd1 0x3085e000 + 425169<br /> 6 Foundation 0x308c5bd7 0x3085e000 + 424919<br /> 7 libSystem.B.dylib 0x300173db 0x30000000 + 95195</p> <p>Thread 4:<br /> 0 libSystem.B.dylib 0x30018fd8 0x30000000 + 102360<br /> 1 libSystem.B.dylib 0x3009aa64 0x30000000 + 633444<br /> 2 libSystem.B.dylib 0x300173db 0x30000000 + 95195</p> <p>Thread 5:<br /> 0 libSystem.B.dylib 0x3008b224 0x30000000 + 569892<br /> 1 libSystem.B.dylib 0x30046b78 0x30000000 + 289656<br /> 2 CoreFoundation 0x3040b0e1 0x303e7000 + 147681<br /> 3 libSystem.B.dylib 0x300173db 0x30000000 + 95195</p> <p>Thread 2 crashed with ARM Thread State:<br /> r0: 0x00000000 r1: 0x00000000 r2: 0x02914550 r3: 0x00000000<br /> r4: 0x03b5b750 r5: 0x00000000 r6: 0x001393b0 r7: 0x005528c0<br /> r8: 0x02914550 r9: 0x00815a00 r10: 0x029d7a20 r11: 0x00000000<br /> ip: 0x393513f4 sp: 0x005528b4 lr: 0x313594fc pc: 0x303ea0a2<br /> cpsr: 0x60000030 instr: 0x0a1b686b</p> <p>Binary Images:<br /> 0x1000 – 0x52fff +MobileSafari UUID (110027FB42FC416B85EC7EEBEABB4EC6) /Applications/MobileSafari.app/MobileSafari<br /> 0x2fe00000 – 0x2fe39fff dyld UUID (64B27A87A815459D953C3260809F811A) /usr/lib/dyld<br /> 0x30000000 – 0x300fdfff libSystem.B.dylib UUID (DBF276FD7536468A8EC31DC5889AAEC7) /usr/lib/libSystem.B.dylib<br /> 0x3015d000 – 0x3019efff libstdc++.6.dylib UUID (CD0A5DCC6A164C86B91C79E15C552E9E) /usr/lib/libstdc++.6.dylib<br /> 0x301c7000 – 0x301d4fff AddressBook UUID (7D1B2DA0EC1D4A1382D5FE0B91851ACA) /System/Library/Frameworks/AddressBook.framework/AddressBook<br /> 0x301de000 – 0x301e7fff AppSupport UUID (4D84C1C39C7C4DB9981FEBF8E48FF450) /System/Library/Frameworks/AppSupport.framework/AppSupport<br /> 0x301ef000 – 0x30236fff CFNetwork UUID (9C95278D4B12440EB624E498C039538B) /System/Library/Frameworks/CFNetwork.framework/CFNetwork<br /> 0x3026d000 – 0x3032cfff Celestial UUID (15045615F83249D49720253EBDF9132A) /System/Library/Frameworks/Celestial.framework/Celestial<br /> 0x3036b000 – 0x303bcfff CoreAudio UUID (D2155600AF2A4EA2A22CB018E094AF48) /System/Library/Frameworks/CoreAudio.framework/CoreAudio<br /> 0x303e7000 – 0x30460fff CoreFoundation UUID (DE3331E0CE4D43DFAFAD084E689DE12F) /System/Library/Frameworks/CoreFoundation.framework/CoreFoundation<br /> 0x30513000 – 0x307aafff CoreGraphics UUID (FDAFC52F5C724EB6BADC1176558E5304) /System/Library/Frameworks/CoreGraphics.framework/CoreGraphics<br /> 0x3081a000 – 0x30835fff CoreTelephony UUID (7B909435DABA409098995CC24EE26587) /System/Library/Frameworks/CoreTelephony.framework/CoreTelephony<br /> 0x3084b000 – 0x30855fff CoreVideo UUID (0CC5832A160D4508B4B678703F3FFD6C) /System/Library/Frameworks/CoreVideo.framework/CoreVideo<br /> 0x3085e000 – 0x30909fff Foundation UUID (8360F6E9E0044FDBB24A233E6A43EB14) /System/Library/Frameworks/Foundation.framework/Foundation<br /> 0x30988000 – 0x30990fff GraphicsServices UUID (1C4876C189F34562ACF6B7D44770FF97) /System/Library/Frameworks/GraphicsServices.framework/GraphicsServices<br /> 0x30998000 – 0x30a20fff IOKit UUID (03E5752F94E3424589F1C596ED08815D) /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit<br /> 0x30a3c000 – 0x30a9bfff JavaScriptCore UUID (4479A3420C764FA395933A371D148D6D) /System/Library/Frameworks/JavaScriptCore.framework/JavaScriptCore<br /> 0x30ac7000 – 0x30b17fff LayerKit UUID (B9468BD4F4F041C3ADA50B830305E7A2) /System/Library/Frameworks/LayerKit.framework/LayerKit<br /> 0x30b37000 – 0x30b3ffff MBX2D UUID (1583F2C2C78B4058BD8C1DF338738C05) /System/Library/Frameworks/MBX2D.framework/MBX2D<br /> 0x30b43000 – 0x30be9fff Message UUID (27857D95241E4AFCB70B016C3AA5C8C6) /System/Library/Frameworks/Message.framework/Message<br /> 0x30ca8000 – 0x30d5efff libcrypto.0.9.7.dylib UUID (632A0B6896CD450582B63F63BC561999) /usr/lib/libcrypto.0.9.7.dylib<br /> 0x30d97000 – 0x30e7ffff libiconv.2.dylib UUID (BFF8FECDB7AF4996AA7E47BA4E9D7A97) /usr/lib/libiconv.2.dylib<br /> 0x30e8a000 – 0x30e99fff libobjc.A.dylib UUID (1DF02759041D49AF9938563D172FC491) /usr/lib/libobjc.A.dylib<br /> 0x30ea3000 – 0x30f76fff libicucore.A.dylib UUID (C7BEFA4022D2414DBD2EF88A0285AC8E) /usr/lib/libicucore.A.dylib<br /> 0x3101c000 – 0x31047fff libsqlite3.0.dylib UUID (2F122880FFAC48318A753E1D788E7409) /usr/lib/libsqlite3.0.dylib<br /> 0x31065000 – 0x3108bfff libssl.0.9.7.dylib UUID (57F8FB4B1D104F8083173EBE067B613E) /usr/lib/libssl.0.9.7.dylib<br /> 0x31097000 – 0x31127fff libxml2.2.dylib UUID (EB77B5D5553B41659DA3EABDFF5E990E) /usr/lib/libxml2.2.dylib<br /> 0x31206000 – 0x312d2fff MeCCA UUID (5031D4A8F03B4605A6233D351EF790E0) /System/Library/Frameworks/MeCCA.framework/MeCCA<br /> 0x3131a000 – 0x31341fff Security UUID (7596924807BF47BA9F50D5748042107A) /System/Library/Frameworks/Security.framework/Security<br /> 0x31351000 – 0x31641fff WebCore UUID (F352EB10A6EB4A53963DC586589CDEFD) /System/Library/Frameworks/WebCore.framework/WebCore<br /> 0x31782000 – 0x317d6fff WebKit UUID (1AF51C0F747D47709E1ABBB0A117FC91) /System/Library/Frameworks/WebKit.framework/WebKit<br /> 0x31813000 – 0x3183cfff SystemConfiguration UUID (7FCD389840814C6EB34074C7787862D1) /System/Library/Frameworks/SystemConfiguration.framework/SystemConfiguration<br /> 0x318d1000 – 0x318dffff libz.1.dylib UUID (019DB9B198DA46E98600C1417D98E6E9) /usr/lib/libz.1.dylib<br /> 0x3190e000 – 0x31910fff CoreSurface UUID (7280076DC074497CB145741A15FCE472) /System/Library/Frameworks/CoreSurface.framework/CoreSurface<br /> 0x3196a000 – 0x31973fff libIOAudio2User.dylib UUID (BB1533CF70F645FBAF6BB767A6A531A7) /usr/lib/libIOAudio2User.dylib<br /> 0x3197a000 – 0x31ab7fff AudioToolbox UUID (3049B1E982804982B3AE837C9367769D) /System/Library/Frameworks/AudioToolbox.framework/AudioToolbox<br /> 0x31baf000 – 0x31bb1fff MBXConnect UUID (B5E73A95A84E4706A922D56674D4809D) /System/Library/Frameworks/MBXConnect.framework/MBXConnect<br /> 0x31bb4000 – 0x31be5fff OpenGLES UUID (3405A88B732E4DF3A127E182483D9E69) /System/Library/Frameworks/OpenGLES.framework/OpenGLES<br /> 0x31bf8000 – 0x31bf9fff IOMobileFramebuffer UUID (AE80733EB6514BB88A6287971C7E09C9) /System/Library/Frameworks/IOMobileFramebuffer.framework/IOMobileFramebuffer<br /> 0x31c38000 – 0x31c3ffff libgcc_s_v6.1.dylib UUID (C3CE0B41C9CA490EAEADA6D7EB997082) /usr/lib/libgcc_s_v6.1.dylib<br /> 0x31db9000 – 0x31dbcfff liblockdown.dylib UUID (30A0EB0C05724FA487617B860E360B88) /usr/lib/liblockdown.dylib<br /> 0x3225d000 – 0x32269fff MobileBluetooth UUID (5F13101DF17B442D8DE5CD0BDB50D7AB) /System/Library/Frameworks/MobileBluetooth.framework/MobileBluetooth<br /> 0x32363000 – 0x32366fff ITSync UUID (B02A31E7730A46BCA6B336F097D542C4) /System/Library/Frameworks/ITSync.framework/ITSync<br /> 0x3236b000 – 0x3236dfff URLify UUID (54B6437BCD3A452F9CC7493CB9E010FF) /System/Library/Frameworks/URLify.framework/URLify<br /> 0x323ab000 – 0x324f3fff UIKit UUID (8A129F9979114365B637E144A3C67868) /System/Library/Frameworks/UIKit.framework/UIKit<br /> 0x32595000 – 0x325d4fff AddressBookUI UUID (0E6FBEAA0D9C411FB1F0794F35D2CFBA) /System/Library/Frameworks/AddressBookUI.framework/AddressBookUI<br /> 0x325f6000 – 0x3261dfff MessageUI UUID (ED6F6EA00B1346BEB98F00733C936922) /System/Library/Frameworks/MessageUI.framework/MessageUI<br />

Update: John Gruber, Martin Gordon, and an empegbbs.com forum member have also posted crash logs, from [MobileMail](http://daringfireball.net/misc/2007/06/MobileMail-2007-06-29-204206.crash), [Preferences](http://www.martingordon.org/public/Preferences-2007-06-29-202724.crash), and [MobilePhone](http://empegbbs.com/ubbthreads/showflat.php?Cat=0&Board=offtopic&Number=301021) respectively. They appear to be similar to my crash log, but below I have aggregated and sorted all the referenced Frameworks:

Applications:

* Preferences
* MobileMail
* MobilePhone
* MobileSafari

Libraries (existing):

* AddressBook
* AppSupport
* AudioToolbox
* CFNetwork
* CoreAudio
* CoreFoundation
* CoreGraphics
* CoreVideo
* Foundation
* IOKit
* JavaScriptCore
* LayerKit – now known as CoreAnimation
* SystemConfiguration
* WebCore
* WebKit
* dyld – dynamic link editor
* libSystem.B.dylib
* libcrypto.0.9.7.dylib
* libgcc_s_v6.1.dylib
* libiconv.2.dylib
* libicucore.A.dylib
* libobjc.A.dylib
* libsqlite3.0.dylib
* libssl.0.9.7.dylib
* libstdc++.6.dylib
* libxml2.2.dylib
* libz.1.dylib

Libraries (new):

* AddressBookUI
* AirPortSettings (Preferences only)
* BluetoothManager (only when Bluetooth is enabled?)
* Calendar (Preferences only)
* Celestial
* CoreSurface
* CoreTelephony
* GraphicsServices
* IAP (Preferences only)
* IOMobileFramebuffer
* ITSync
* MBX2D
* MBXConnect
* MeCCA
* Message
* MessageUI
* MobileBluetooth
* MobileMailSettings (Preferences only)
* MobileMusicPlayer (Preferences only)
* MusicLibrary (Preferences only)
* OpenGLES (Preferences only)
* Security
* TelephonyUI (MobilePhone and Preferences only)
* UIKit
* URLify
* libIOAudio2User.dylib
* liblockdown.dylib

And finally, what we know about the filesystem:

/Applications/MobileMail.app/MobileMail
/Applications/MobilePhone.app/MobilePhone
/Applications/MobileSafari.app/MobileSafari
/Applications/Preferences.app/Preferences
/System/Library/Frameworks/AddressBook.framework/AddressBook
/System/Library/Frameworks/AddressBookUI.framework/AddressBookUI
/System/Library/Frameworks/AppSupport.framework/AppSupport
/System/Library/Frameworks/AudioToolbox.framework/AudioToolbox
/System/Library/Frameworks/BluetoothManager.framework/BluetoothManager
/System/Library/Frameworks/CFNetwork.framework/CFNetwork
/System/Library/Frameworks/Calendar.framework/Calendar
/System/Library/Frameworks/Celestial.framework/Celestial
/System/Library/Frameworks/CoreAudio.framework/CoreAudio
/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation
/System/Library/Frameworks/CoreGraphics.framework/CoreGraphics
/System/Library/Frameworks/CoreSurface.framework/CoreSurface
/System/Library/Frameworks/CoreTelephony.framework/CoreTelephony
/System/Library/Frameworks/CoreVideo.framework/CoreVideo
/System/Library/Frameworks/Foundation.framework/Foundation
/System/Library/Frameworks/GraphicsServices.framework/GraphicsServices
/System/Library/Frameworks/IAP.framework/IAP
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
/System/Library/Frameworks/IOMobileFramebuffer.framework/IOMobileFramebuffer
/System/Library/Frameworks/ITSync.framework/ITSync
/System/Library/Frameworks/JavaScriptCore.framework/JavaScriptCore
/System/Library/Frameworks/LayerKit.framework/LayerKit
/System/Library/Frameworks/MBX2D.framework/MBX2D
/System/Library/Frameworks/MBXConnect.framework/MBXConnect
/System/Library/Frameworks/MeCCA.framework/MeCCA
/System/Library/Frameworks/Message.framework/Message
/System/Library/Frameworks/MessageUI.framework/MessageUI
/System/Library/Frameworks/MobileBluetooth.framework/MobileBluetooth
/System/Library/Frameworks/MobileMusicPlayer.framework/MobileMusicPlayer
/System/Library/Frameworks/MusicLibrary.framework/MusicLibrary
/System/Library/Frameworks/OpenGLES.framework/OpenGLES
/System/Library/Frameworks/Preferences.framework/Preferences
/System/Library/Frameworks/Security.framework/Security
/System/Library/Frameworks/SystemConfiguration.framework/SystemConfiguration
/System/Library/Frameworks/TelephonyUI.framework/TelephonyUI
/System/Library/Frameworks/UIKit.framework/UIKit
/System/Library/Frameworks/URLify.framework/URLify
/System/Library/Frameworks/WebCore.framework/WebCore
/System/Library/Frameworks/WebKit.framework/WebKit
/System/Library/PreferenceBundles/AirPortSettings.bundle/AirPortSettings
/System/Library/PreferenceBundles/MobileMailSettings.bundle/MobileMailSettings
/usr/lib/dyld
/usr/lib/libIOAudio2User.dylib
/usr/lib/libSystem.B.dylib
/usr/lib/libcrypto.0.9.7.dylib
/usr/lib/libgcc_s_v6.1.dylib
/usr/lib/libiconv.2.dylib
/usr/lib/libicucore.A.dylib
/usr/lib/liblockdown.dylib
/usr/lib/libobjc.A.dylib
/usr/lib/libsqlite3.0.dylib
/usr/lib/libssl.0.9.7.dylib
/usr/lib/libstdc++.6.dylib
/usr/lib/libxml2.2.dylib
/usr/lib/libz.1.dylib

Anyone care to guess what some of these do?

Update #2: Well, [this pretty blows away](http://iphone.fiveforty.net/wiki/index.php?title=SystemFileAndDirectoryList) everything mentioned in this post. It’s a complete listing of all the files on the iPhone’s filesystem. These guys have already figured out how to activate (and deactivate) the iPhone, and appear to be getting pretty close to completely hacking the iPhone to run arbitrary code and possibly unlock it. Exciting stuff.