After reading Pike’s codes, I manually injected new Board-IDs and Broadwell CPUs data.
So now you can use ssdtPRGen.sh to create a custom CpuPm SSDT and make power management work properly.
(i.e. X86Platform.kext and X86PlatformShim.kext will be loaded; IOPPF: XCPM Mode can be found in Console.app.)
Layout changes due to new themes.
minimum DVMT pre-allocated memory changes to (>=) 64MB
Lenovo Thinkpad Carbon X1 3rd Gen:
Intel i7-5600U with Intel HD Graphics 5500 + 1080P internal display from jcsnider.
Dell XPS 13 Touch 2015:
Intel i7-5500U with Intel HD Graphics 5500 + 3200×1800 internal display (IOKit patch needed to unlock pixel clock frequency) from frizinko.
Dell inspiration 7548:
Intel i5-5200U with Intel HD Graphics 5500 + 1080P internal display from lisai9093.
Dell inspiration 7348/7352:
Intel i5-5200U/i7-5500U with Intel HD Graphics 5500 + 1080P internal display from Frankie.
Hmm, still no response from Intel HD Graphics 5300……
I manually extracted partial raw frame buffer data from Apple’s latest AppleIntelBDWGraphicsFramebuffer binary.
Some hardware ids are still unknown, as Intel only released a few CPU models.
I will try to post every frame buffer data if I have time.
0x0BD18086: Intel Broadwell HD Graphics HAS GT1 0x0BD28086: Intel Broadwell HD Graphics HAS GT2 0x0BD38086: Intel Broadwell HD Graphics HAS GT3 0x16028086: Intel HD Graphics 0x16068086: Intel HD Graphics 0x160B8086: No data 0x160A8086: No data 0x160D8086: No data 0x160E8086: No data 0x16128086: Intel HD Graphics 5600 0x16168086: Intel HD Graphics 5500 0x161B8086: No data 0x161A8086: No data 0x161D8086: No data 0x161E8086: Intel HD Graphics 5300 0x16228086: Intel Iris Pro Graphics 6200 0x16268086: Intel HD Graphics 6000 0x162B8086: Intel Iris Graphics 6100 0x162A8086: Intel Iris Pro Graphics 6300P 0x162D8086: Intel Iris Pro Graphics 6300P 0x162E8086: No data 0x16328086: No data 0x16368086: No data 0x163B8086: No data 0x163A8086: No data 0x163D8086: No data 0x163E8086: No data
(Reference: Pike R. Alpha’s blog, original post: https://pikeralpha.wordpress.com/2015/03/13/new-ionvmefamily-kext/)
0x01000000 = VGA connector
0x02000000 = LVDS connector
0x04000000 = eDP connector
0x00020000 = DVI connector
0x00040000 = DisplayPort connector
0x00080000 = HDMI connector
ig-platform-id = 0x161e0000 0000 1e16 0003 0303 0000 0001 0000 f000 // 16MB BIOS-allocated memory, 15MB frame buffer memory 0000 0040 9914 0000 9914 0000 0000 0000 // 1024MB VRAM 0000 0000 0000 0000|0000 0800 0200 0000 = LVDS connector 3002 0000|0105 0900 0400 0000 0400 0000|= eDP connector 0204 0900 0008 0000 8200 0000|ff00 0000 = HDMI connector 0100 0000 4000 0000 1607 0000 0000 0800 = Disabled / unused VGA connector 0000 0000 0500 0000 0000 0000 0400 0000
ig-platform-id = 0x161e0001 0100 1e16 0102 0202 0000 2002 0000 5001 // 34MB BIOS-allocated memory, 21MB frame buffer memory 0000 0060 6c05 0000 6c05 0000 0000 0000 // 1536MB VRAM 0000 0000 0000 0000|0000 0800 0200 0000 = LVDS connector 3002 0000|0105 0900 0004 0000 0710 0000|= DisplayPort connector ff00 0000 0100 0000 4000 0000|0000 0000 = Disabled / unused VGA connector 0000 0000 0000 0000 0204 0000 0000 0000 0200 0000 0300 0000 00ef 1c0d 0000 0000
ig-platform-id = 0x16160000 0000 1616 0003 0303 0000 0001 0000 f000 // 16MB BIOS-allocated memory, 15MB frame buffer memory 0000 0040 9914 0000 9914 0000 0000 0000 // 1024MB VRAM 0000 0000 0000 0000|0000 0800 0200 0000 = LVDS connector 3002 0000|0105 0900 0400 0000 0400 0000|= eDP connector 0204 0900 0008 0000 8200 0000|ff00 0000 = HDMI connector 0100 0000 4000 0000 060b 0000 0000 0800 = Disabled / unused VGA connector 0000 0000 0500 0000 0000 0000 0400 0000
ig-platform-id = 0x16160002 0200 1616 0103 0303 0000 2002 0000 5001 // 34MB BIOS-allocated memory, 21MB frame buffer memory 0000 0060 6c05 0000 6c05 0000 0000 0000 // 1536MB VRAM 0000 0000 0000 0000 0000 0800 0200 0000 = LVDS connector 3002 0000 0105 0900 0004 0000 0705 0000 = DisplayPort connector 0204 0a00 0004 0000 0705 0000 ff00 0000 = DisplayPort connector 0100 0000 4000 0000 024b 0000 0505 0600 = Disabled / unused VGA connector 0200 0000 0400 0000 80df 1710 0000 0000
ig-platform-id = 0x16260004 0400 2616 0003 0303 0000 2002 0000 5001 // 34MB BIOS-allocated memory, 21MB frame buffer memory 0000 0060 9914 0000 9914 0000 0000 0000 // 1536MB VRAM 0000 0000 0000 0000 0000 0800 0200 0000 = LVDS connector 1100 0000 0105 0900 0004 0000 0705 0000 = DisplayPort connector 0204 0a00 0004 0000 0705 0000 ff00 0000 = DisplayPort connector 0100 0000 4000 0000 560b 0000 0505 0500 = Disabled / unused VGA connector 0000 0000 0500 0000 0000 0000 0400 0000
ig-platform-id = 0x16260005 0500 2616 0103 0303 0000 2002 0000 5001 // 34MB BIOS-allocated memory, 21MB frame buffer memory 0000 0060 d90a 0000 d90a 0000 0000 0000 // 1536MB VRAM 0000 0000 0000 0000 0000 0800 0200 0000 = LVDS connector 3000 0000 0105 0b00 0004 0000 0705 0000 = DisplayPort connector 0204 0b00 0004 0000 0705 0000 ff00 0000 = DisplayPort connector 0100 0000 4000 0000 0f0b 0000 0101 0500 = Disabled / unused VGA connector 0000 0000 0500 0000 0000 0000 0400 0000
ig-platform-id = 0x16260006 (MacBookAir7,2) 0600 2616 0103 0303 0000 2002 0000 5001 // 34MB BIOS-allocated memory, 21MB frame buffer memory 0000 0060 d90a 0000 d90a 0000 0000 0000 // 1536MB VRAM 0000 0000 0000 0000 0000 0800 0200 0000 = LVDS connector 3000 0000 0105 0b00 0004 0000 0705 0000 = DisplayPort connector 0204 0b00 0004 0000 0705 0000 ff00 0000 = DisplayPort connector 0100 0000 4000 0000 0f0b 0000 0101 0500 = Disabled / unused VGA connector 0000 0000 0500 0000 0000 0000 0400 0000
ig-platform-id = 0x16260002 0200 2616 0103 0303 0000 2002 0000 5001 // 34MB BIOS-allocated memory, 21MB frame buffer memory 0000 0060 6c05 0000 6c05 0000 0000 0000 // 1536MB VRAM 0000 0000 0000 0000 0000 0800 0200 0000 = LVDS connector 3002 0000 0105 0900 0004 0000 0705 0000 = DisplayPort connector 0204 0a00 0004 0000 0705 0000 ff00 0000 = DisplayPort connector 0100 0000 4000 0000 0a4b 0000 0505 0600 = Disabled / unused VGA connector 0200 0000 0400 0000 80df 1710 0000 0000
ig-platform-id = 0x16260000 0000 2616 0003 0303 0000 0001 0000 f000 // 16MB BIOS-allocated memory, 15MB frame buffer memory 0000 0040 9914 0000 9914 0000 0000 0000 // 1024MB VRAM 0000 0000 0000 0000 0000 0800 0200 0000 = LVDS connector 3002 0000 0105 0900 0400 0000 0400 0000 = eDP connector 0204 0900 0008 0000 8200 0000 ff00 0000 = HDMI connector 0100 0000 4000 0000 060b 0000 0000 0800 = Disabled / unused VGA connector 0000 0000 0500 0000 0000 0000 0400 0000
ig-platform-id = 0x162b0002 ;; MacBookPro12,1 0200 2b16 0103 0303 0000 2002 0000 5001 // 34MB BIOS-allocated memory, 21MB frame buffer memory 0000 0060 6c05 0000 6c05 0000 0000 0000 // 1536MB VRAM 0000 0000 0000 0000|0000 0800 0200 0000 = LVDS connector 3002 0000|0105 0900 0004 0000 0705 0000|= DisplayPort connector 0204 0a00 0004 0000 0705 0000|ff00 0000 = DisplayPort connector 0100 0000 4000 0000 0a4b 0000 0505 0600 = Disabled / unused VGA connector 0200 0000 0400 0000 80df 1710 0000 0000
ig-platform-id = 0x162b0000 0000 2b16 0003 0303 0000 0001 0000 f000 // 16MB BIOS-allocated memory, 15MB frame buffer memory 0000 0040 9914 0000 9914 0000 0000 0000 // 1536MB VRAM 0000 0000 0000 0000 0000 0800 0200 0000 = LVDS connector 3002 0000 0105 0900 0400 0000 0400 0000 = eDP connector 0204 0900 0008 0000 8200 0000 ff00 0000 = HDMI connector 0100 0000 4000 0000 060b 0000 0000 0800 = Disabled / unused VGA connector 0000 0000 0500 0000 0000 0000 0400 0000
ig-platform-id = 0x162b0004 0400 2b16 0003 0303 0000 2002 0000 5001 // 34MB BIOS-allocated memory, 21MB frame buffer memory 0000 0060 9914 0000 9914 0000 0000 0000 // 1536MB VRAM 0000 0000 0000 0000 0000 0800 0200 0000 = LVDS connector 1100 0000 0105 0900 0004 0000 0705 0000 = DisplayPort connector 0204 0a00 0004 0000 0705 0000 ff00 0000 = DisplayPort connector 0100 0000 4000 0000 560b 0000 0505 0500 = Disabled / unused VGA connector 0000 0000 0500 0000 0000 0000 0400 0000
ig-platform-id = 0x16220000 0000 2216 0003 0303 0000 0001 0000 f000 // 16MB BIOS-allocated memory, 15MB frame buffer memory 0000 0040 9914 0000 9914 0000 0000 0000 // 1024MB VRAM 0000 0000 0000 0000 0000 0800 0200 0000 = LVDS connector 3002 0000 0105 0900 0400 0000 0400 0000 = eDP connector 0204 0900 0008 0000 8200 0000 ff00 0000 = HDMI connector 0100 0000 4000 0000 0e11 0000 0000 0800 = Disabled / unused VGA connector 0000 0000 0500 0000 0000 0000 0400 0000
ig-platform-id = 0x16220002 0200 2216 0103 0303 0000 2002 0000 5001 // 34MB BIOS-allocated memory, 21MB frame buffer memory 0000 0060 6c05 0000 6c05 0000 0000 0000 // 1536MB VRAM 0000 0000 0000 0000 0000 0800 0200 0000 = LVDS connector 3002 0000 0105 0900 0004 0000 0705 0000 = Displayport connector 0204 0a00 0004 0000 0705 0000 ff00 0000 = Displayport connector 0100 0000 4000 0000 0a4b 0000 0505 0600 = Disabled / unused VGA connector 0200 0000 0400 0000 80df 1710 0000 0000
Update @ 2015.04.10
First of all, thanks for following this post.
Well, to be honest, I need some help now, cuz I am not familiar with reverse engineering. I also plan to start a topic on insanelymac or/and tonymacx86 forum (seek for help.).
According to the kernel panic log, it is “assertion failed minStolenSize <= fStolenMemorySize” that caused kernel panic.
So basically if we can pass this assertion, kernel panic will not happen and in theory framebuffer drivers will be loaded and our graphics cards will be happy. And actually it do work in this way.
On Wednesday midnight, I read the disassemble code of AppleIntelBDWGraphicsFramebuffer binary and tried to patch it to pass the assertion.
And to my surprise, it worked. lisai9093 used my patched drivers and successfully pass the assertion. (i.e. no more kernel panic)
However, the screen just shows nothing but a mouse pointer. According to lisai9093, the movement of mouse is very smooth. The screen resolution is correct and there is no distortion.
We tried to change ig-platform-id, checked the pixel clock frequency, even changed the port, but still “black screen”.
On Thursday, I started to doubt whether I patched the binary in a right way, and the answer is definitely “NO, I WAS WRONG.”
Indeed, my patch passed the assertion, but in a wrong way. To be more specific, it seems that I accidentally changed the stolenMemory constant to 0. (not sure) (I should modify the function part to let the assertion always return true but not change the constant.)
So that’s why lisai9093’s screen showed nothing, because there is no stolen memory for the integrated graphics card to show something.
But according to his latest ioreg, we can make sure that the graphics card really works, as the framebuffer driver was loaded properly; screen resolution is correct; the internal screen was recognized correctly, the graphics card was recognized successfully (We used FakeID, hence the model in ioreg below shows Intel Iris Graphics 6100) And the verbose boot logs also prove this. [IGPU] xxxxxx showing below. (Graphics Accelerator is running and working fine.)
Again, I am not familiar with disassemble and reverse engineering. (This is way beyond my current knowledge.)
So we need someone who is familiar with disassemble code and figure out which part of code is corresponding to the FBMemory assertion.
Here is a quicklook of partial disassemble code of AppleIntelBDWGraphicsFramebuffer binary.
And I guess offset 0x01a02c 0x01a02e OR 0x01a081 0x01a087 may be related to the FBMemory assertion.
Last but not least, I added a new post about the framebuffer data from AppleIntelBDWGraphicsFramebuffer binary on my blog.
If you are interested in that, please have a look. 🙂
https://www.firewolf.science/2015/04/framebuffer-data-extracted-from-appleintelbdwgraphicsframebuffer-binary/
Recently, I worked with @lisai9093 on his new Dell Inspiron 7548 laptop with Intel’s Broadwell processor. The detailed hardware configurations are as follows.
So far, the sound card, wireless card and battery percentage are working fine. Broadwell’s i5-5200U cannot be recognized properly (Showing Unknown in About This Mac) before injecting CPU Type by Clover. ACPI_SMC_PlatformPlugin.kext will be loaded and CPU power management cannot work properly before creating a custom CpuPm SSDT. Intel’s new integrated graphics card is problematic. Kernel panic will happen once AppleIntelBDWGraphicsFramebuffer.kext is loaded. (i.e. ig-platform-id is injected.)
For the installation part, we first used 10.10.2 (14C109) installer with enabling Haswell-E patch (KernelHaswellE) in Clover to skip the kernel check, then upgraded to 10.10.3 Beta 5, 6, 7. By injecting CPUType = 0x0606 in Clover, i5-5200U can be recognized as “Intel Core i5” with correct frequency in “About This Mac”.
After reading Pike’s ssdtPRGen.sh (v15.6), I generated a custom CpuPm SSDT by injecting new Board-IDs and information of Broadwell CPUs in his code. Now X86PlatformPlugin.kext and X86PlatformShim.kext can be loaded properly and “IOPPF: XCPM Mode” apprears in the console. However, “XCPM: P-state tables mismatch” also appears in the console due to the inappropriate SMBios(?)(not sure).
Previous: (Before placing custom SSDT.aml)
For the graphics card, just panic if ig-platform-id is injected. We still keep trying.
Intel HD Graphics 5300: 0x8086161E
Intel HD Graphics 5500: 0x80861616
Intel HD Graphics 6000: 0x80861626 (MacBook Air ig-platform-id = 0x16260006)
Intel Iris Graphics 6100: 0x8086162b (MacBook Pro ig-platform-id = 0x162b0002)
Intel Iris Pro Graphics 6200: 0x80861622???
Well, this is just a quick note. As Apple released two betas this week, I guess b7 will be the final one.
Special thanks to Pike R Alpha for his amazing ssdtPRGen script.