kpwn / yalu102

incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Offset missing on 6s plus, 10.0

judge2020 opened this issue · comments

I read the issue posting guidelines. This is an issue regarding the actual Yalu process.

Device model: iPhone 8,2
Device info: iPhone 6s Plus on iOS 10.0
Method of install: Both impactor and manual build
Certificate: Paid developer account personal team

Issue:

When opening yalu I see a strange message detailing that the app is not compatible with 64-bit devices. Strange because the app was exclusively built for 64-bit devices.

When dismissing the notification and then clicking "go" it then hangs there. I can still go to app switcher and close Yalu, however, the jailbreak does not complete.

Looks like the offset is missing for the 6s plus 10.0. Is there a way I could find an offset myself or should I wait for someone else to contribute it?

sysname: Darwin
nodename: huntes-iPhone
release: 16.0.0
version: Darwin Kernel Version 16.0.0: Wed Jul 27 19:44:34 PDT 2016; root:xnu-3789.1.4.2.1~2/RELEASE_ARM64_S8000
machine: iPhone8,2
--> missing offset, prob crashing

Thanks for any help.

Strange because the app was exclusively built for 64-bit devices.

no the project was build for armv7

all offsets are there why would anyone use ios beta ..

Oh ok, I recently received this phone from a relative so I wasn't aware it was on beta 4. Which offset is the 6s plus 10.0 I should try to see if it works on beta 4?

I'll find the correct offsets right now.

Sorry it's taking so long; in school right now.

No that's completely fine. Take your time.

But, I have opened a decompressed iOS 10 beta 4 kernelcache in Hopper, so I should be done soon. :)

Let me know if this works. :)

2017-02-13 17:43:22.113904 yalu102[813:199138] found corruption 38103

or 38203

btw, i put that into offsets.c, not exploit.c. this is off of the main branch.

Did it work? ; you edited your comment.

Any time while trying the offsets the debug log is "corruption found 19103"

commented

It means the offsets are incorrect. Send me the kernel and I'll give the correct offsets. Also, this issue should be closed because its not an issue with yalu itself.

commented

Nevermind, your offsets were correct.

This issue should be closed then, especially because the OP is using a beta.

@jtv7 Could this be an issue with hard-coded offsets, though?

commented

@OothecaPickleGNUrmsTUXFSF I doubt it, especially because it works on such a large range of iOS versions. The OP might be building something incorrectly.

Alright, thanks. :)

sorry for this then. thanks for all the help.

Sorry this is such an old issue, I made a screen cap of trying to do this https://youtu.be/8l6y5QDGwYQ.

@judge2020 is this device still on iOS 10 beta 4? if so i have something for you to try. :)

Darn @OothecaPickle, sorry. Updated to 11.0.

@judge2020 oh, never mind then :(