LukeZGD / Legacy-iOS-Kit

An all-in-one tool to restore/downgrade, save SHSH blobs, and jailbreak legacy iOS devices
GNU General Public License v3.0
1.3k stars 119 forks source link

Stuck at run_stoc_loop fd=4 #56

Closed jailhousej closed 4 years ago

jailhousej commented 4 years ago

iPhone 5 10.3.4 downgrading to 8.4.1

iOS-OTA-Downgrader Downgrader script by LukeZGD

[Log] Updating firmware... Already up to date. [Log] Updating ipwndfu... Already up to date. [Log] Finding device in normal mode...

Main Menu [Input] Select an option: 1) Downgrade device 4) (Re-)Install Dependencies 2) Save OTA blobs 5) (Any other key to exit) 3) Just put device in kDFU mode

? 1

[Input] Select iOS version: 1) iOS 8.4.1 3) (Any other key to exit) 2) Other

? 1

[Log] Option: Downgrade [Input] Jailbreak the selected iOS version? (y/N): y [Log] Saving 8.4.1 blobs with tsschecker... Version: b9d193aa6e6d24421094873c830692d02d8b32f5 - 304 libfragmentzip version: 0.59-542a470d7be248681dba71d0f04e7dc8c2718b73 [TSSC] manually specified ECID to use, parsed "468538166670" to dec:468538166670 hex:6d170d0d8e [TSSC] opening resources/manifests/BuildManifest_iPhone5,2_8.4.1.plist [WARNING] [TSSC] could not get id0 for installType=Erase. Using fallback installType=Update since user did not specify installType manually [TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2 [TSSR] Sending TSS request attempt 1... success [Error] [TSSR] Error: could not get id0 for installType=Erase Saved shsh blobs!

iOS 8.4.1 for device iPhone5,2 IS being signed! [Log] Successfully saved 8.4.1 blobs. [Log] Verifying IPSW... [Log] Extracting iBSS from IPSW... Archive: iPhone5,2_8.4.1_12H321_Restore.ipsw inflating: saved/iPhone5,2/iBSS.n42.RELEASE.dfu
[Log] Patching iBSS... waiting for connection [Log] Copying stuff to device via SSH...

LukeZGD commented 4 years ago

Not sure what's going on there.. what macOS version?

LukeZGD commented 4 years ago

Also please try again with latest commit

Not sure if it will help though

jailhousej commented 4 years ago

Catalina, this time it got a different error and now my device is without any firmware :( (have to restore + rejailbreak)

iOS-OTA-Downgrader Downgrader script by LukeZGD

[Log] Updating firmware... Already up to date. [Log] Updating ipwndfu... Already up to date. [Log] Finding device in normal mode...

Main Menu [Input] Select an option: 1) Downgrade device 4) (Re-)Install Dependencies 2) Save OTA blobs 5) (Any other key to exit) 3) Just put device in kDFU mode

? 1

[Input] Select iOS version: 1) iOS 8.4.1 3) (Any other key to exit) 2) Other

? 1

[Log] Option: Downgrade [Input] Jailbreak the selected iOS version? (y/N): y [Log] Saving 8.4.1 blobs with tsschecker... Version: b9d193aa6e6d24421094873c830692d02d8b32f5 - 304 libfragmentzip version: 0.59-542a470d7be248681dba71d0f04e7dc8c2718b73 [TSSC] manually specified ECID to use, parsed "468538166670" to dec:468538166670 hex:6d170d0d8e [TSSC] opening resources/manifests/BuildManifest_iPhone5,2_8.4.1.plist [WARNING] [TSSC] could not get id0 for installType=Erase. Using fallback installType=Update since user did not specify installType manually [TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2 [TSSR] Sending TSS request attempt 1... success [Error] [TSSR] Error: could not get id0 for installType=Erase Saved shsh blobs!

iOS 8.4.1 for device iPhone5,2 IS being signed! [Log] Successfully saved 8.4.1 blobs. [Log] Extracting iBSS from IPSW... Archive: iPhone5,2_8.4.1_12H321_Custom.ipsw inflating: saved/iPhone5,2/iBSS.n42.RELEASE.dfu
[Log] Patching iBSS... bind(): Address already in use Error creating socket: Address already in use [Log] Copying stuff to device via SSH...

SYSLOG: Sep 23 06:12:04 localhost kernel[0] : stallSetupRequest USB request: 80 06 0f00 0000 0005 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : IOReturn AppleUSBDeviceMux::setPropertiesGated(OSObject ) setting debug level to 7 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0x99baa840 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : stallSetupRequest USB request: 80 06 0f00 0000 0005 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa840 established 62078<-lo0->49153 62078<-usb->34562 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa688 established 62078<-lo0->49154 62078<-usb->34818 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::sendMuxSegment(struct BulkUSBMuxSession ) connection was closed (0x99baa840) SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa840 established 62078<-lo0->49155 62078<-usb->35074 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0x99baa840 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0x99baa688 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa688 established 62078<-lo0->49156 62078<-usb->35330 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa840 established 62078<-lo0->49157 62078<-usb->35586 recv(11, 4) failed: connection closed recv(12, 4) failed: connection closed recv(13, 4) failed: connection closed SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0x99baa840 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa840 established 62078<-lo0->49158 62078<-usb->35842 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0x99baa840 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa840 established 62078<-lo0->49159 62078<-usb->36098 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0x99baa840 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa840 established 62078<-lo0->49160 62078<-usb->36354 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0x99baa840 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa840 established 62078<-lo0->49161 62078<-usb->36610 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0x99baa840 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa840 established 62078<-lo0->49162 62078<-usb->36866 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0x99baa840 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa840 established 62078<-lo0->49163 62078<-usb->37122 unable to read message size: -1 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0x99baa840 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa840 established 62078<-lo0->49164 62078<-usb->37378 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0x99baa840 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa840 established 62078<-lo0->49165 62078<-usb->37634 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0x99baa840 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa840 established 62078<-lo0->49166 62078<-usb->37890 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0x99baa840 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa840 established 62078<-lo0->49167 62078<-usb->38146 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0x99baa840 unable to read message size: -1 unable to read message size: -1 recv(15, 4) failed: connection closed recv(16, 4) failed: connection closed recv(17, 4) failed: connection closed recv(18, 4) failed: connection closed recv(19, 4) failed: connection closed recv(20, 4) failed: connection closed recv(21, 4) failed: connection closed could not receive message recv(22, 4) failed: connection closed recv(23, 4) failed: connection closed recv(24, 4) failed: connection closed recv(25, 4) failed: connection closed could not receive message could not receive message unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa840 established 62078<-lo0->49168 62078<-usb->38402 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0x99baa840 could not receive message could not receive message could not receive message could not receive message could not receive message could not receive message could not receive message could not receive message could not receive message could not receive message could not receive message recv(11, 4) failed: connection closed unable to read message size: -1 could not receive message SYSLOG: Sep 23 06:12:07 localhost kernel[0] : [effaceable:INIT] found current generation, 457, in group 0 SYSLOG: Sep 23 06:12:07 localhost kernel[0] : [effaceable:INIT] started SYSLOG: Sep 23 06:12:07 localhost kernel[0] : [effaceable:INIT] started SYSLOG: Sep 23 06:12:08 localhost kernel[0] : AppleARMBacklight::start: No AAP function SYSLOG: Sep 23 06:12:08 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0x99baa840 established 62078<-lo0->49169 62078<-usb->38658 SYSLOG: Sep 23 06:12:08 localhost kernel[0] : void AppleUSBDeviceMux::handleConnectResult(struct BulkUSBMuxSession , errno_t) new session to port 1082 failed: 61 SYSLOG: Sep 23 06:12:10 localhost kernel[0] : void AppleUSBDeviceMux::handleConnectResult(struct BulkUSBMuxSession , errno_t) new session to port 1082 failed: 61 SYSLOG: Sep 23 06:12:12 localhost kernel[0] : void AppleUSBDeviceMux::handleConnectResult(struct BulkUSBMuxSession , errno_t) new session to port 1082 failed: 61 SYSLOG: Sep 23 06:12:14 localhost kernel[0] : void AppleUSBDeviceMux::handleConnectResult(struct BulkUSBMuxSession , errno_t) new session to port 1082 failed: 61 SYSLOG: Sep 23 06:12:16 localhost kernel[0] : void AppleUSBDeviceMux::handleConnectResult(struct BulkUSBMuxSession , errno_t) new session to port 1082 failed: 61 SYSLOG: Sep 23 06:12:18 localhost kernel[0] : void AppleUSBDeviceMux::handleConnectResult(struct BulkUSBMuxSession , errno_t) new session to port 1082 failed: 61 SYSLOG: Sep 23 06:12:20 localhost kernel[0] : void AppleUSBDeviceMux::handleConnectResult(struct BulkUSBMuxSession , errno_t) new session to port 1082 failed: 61 SYSLOG: Sep 23 06:12:22 localhost kernel[0] : void AppleUSBDeviceMux::handleConnectResult(struct BulkUSBMuxSession , errno_t) new session to port 1082 failed: 61 SYSLOG: Sep 23 06:12:24 localhost kernel[0] : void AppleUSBDeviceMux::handleConnectResult(struct BulkUSBMuxSession , errno_t) new session to port 1082 failed: 61 SYSLOG: Sep 23 06:12:26 localhost kernel[0] : void AppleUSBDeviceMux::handleConnectResult(struct BulkUSBMuxSession , errno_t) new session to port 1082 failed: 61 client protocol version 13 UUID 7952842F-0EDD-8613-1D9C-C816C84FF2B0 Restore options: UpdateBaseband => <CFBoolean 0x68aac0 [0x68a8c0]>{value = true} UUID => <CFString 0x17e1a1b0 [0x68a8c0]>{contents = "7952842F-0EDD-8613-1D9C-C816C84FF2B0"} MinimumSystemPartition => <CFNumber 0x17e19a00 [0x68a8c0]>{value = +2305, type = kCFNumberSInt64Type} SystemPartitionSize => <CFNumber 0x17e19a30 [0x68a8c0]>{value = +2305, type = kCFNumberSInt64Type} PersonalizedDuringPreflight => <CFBoolean 0x68aac0 [0x68a8c0]>{value = true} SystemPartitionPadding => <CFBasicHash 0x17e1a290 [0x68a8c0]>{type = mutable dict, count = 9, entries => 0 : <CFString 0x17e19c30 [0x68a8c0]>{contents = "512"} = <CFNumber 0x17e19c40 [0x68a8c0]>{value = +1280, type = kCFNumberSInt64Type} 2 : <CFString 0x17e1a0f0 [0x68a8c0]>{contents = "128"} = <CFNumber 0x17e1a010 [0x68a8c0]>{value = +1280, type = kCFNumberSInt64Type} 3 : <CFString 0x17e197e0 [0x68a8c0]>{contents = "16"} = <CFNumber 0x17e19710 [0x68a8c0]>{value = +260, type = kCFNumberSInt64Type} 4 : <CFString 0x17e195e0 [0x68a8c0]>{contents = "32"} = <CFNumber 0x17e19cc0 [0x68a8c0]>{value = +320, type = kCFNumberSInt64Type} 5 : <CFString 0x17e198d0 [0x68a8c0]>{contents = "768"} = <CFNumber 0x17e19590 [0x68a8c0]>{value = +1280, type = kCFNumberSInt64Type} 6 : <CFString 0x17e195a0 [0x68a8c0]>{contents = "8"} = <CFNumber 0x17e19b00 [0x68a8c0]>{value = +180, type = kCFNumberSInt64Type} 7 : <CFString 0x17e1a080 [0x68a8c0]>{contents = "1024"} = <CFNumber 0x17e1a160 [0x68a8c0]>{value = +1280, type = kCFNumberSInt64Type} 8 : <CFS... CreateFilesystemPartitions => <CFBoolean 0x68aac0 [0x68a8c0]>{value = true} entering bootstrap_hoover bootstrap_hoover: using customer firmware unable to open libdpfu.dylib. dlopen(/usr/local/lib/libdpfu.dylib, 261): image not found, skipping step entering load_sep_os device has no sep entering ramrod_ticket_update looking up root ticket hash device tree ticket-hash: <CFData 0x17e19ec0 [0x68a8c0]>{length = 20, capacity = 20, bytes = 0xc5ae81b887d141055a93ca1811f446427ae818d0} ticket_hash: C5AE81B887D141055A93CA1811F446427AE818D0 received valid ticket (2738 bytes) entering partition_nand_device device supports boot-from-NAND nand device is already partitioned entering wait_for_storage_device Searching for NAND service Found NAND service: IOFlashStoragePartition NAND initialized. Waiting for devnode. entering clear_remap_variable executing /usr/sbin/nvram entering ramrod_probe_media device partitioning scheme is GPT unexpected partition 'Apple iBoot Update partition' - skipping unexpected partition 'Apple HFS/HFS+' - skipping find_filesystem_partitions: storage=/dev/disk0s1 system=/dev/disk0s1s1 data=/dev/disk0s1s2 baseband data= log= executing /sbin/fsck_hfs /dev/rdisk0s1s1 Executing fsck_hfs (version hfs-286.30.1). Checking Journaled HFS Plus volume. Detected a case-sensitive volume. The volume name is Greensburg14G61.N41N42N48N49OS Checking extents overflow file. Checking catalog file. Checking multi-linked files. Checking catalog hierarchy. Checking extended attributes file. Checking volume bitmap. Checking volume information. Trimming unused blocks. The volume Greensburg14G61.N41N42N48N49OS appears to be OK. executing /sbin/mount_hfs mount_hfs: Could not create property for re-key environment check: No such file or directory /dev/disk0s1s1 mounted on /mnt1 AMSupportPlatformCreateBufferFromNativeFilePath: open failed: No such file or directory __getFDRSealingMap_block_invoke: Could not load sealing map from '/usr/lib/FDRSealingMap.plist' AMFDRSealingMapGetEntriesForDevice: Could not load sealing map restored_fdr_initialize returned false RestoredFDRCreate() returned 0 FDR is not supported on this device RestoredFDRSaveData: restoredFDR is NULL, not able to preserve FDR data. RestoredFDRSaveData success create_baseband_update_options: Got imeisv: 13 baseband updater options = <CFBasicHash 0x17d2c450 [0x68a8c0]>{type = mutable dict, count = 3, entries => 0 : <CFString 0xdf5ed8 [0x68a8c0]>{contents = "IMEISwVersion"} = <CFNumber 0x17d2c4a0 [0x68a8c0]>{value = +13, type = kCFNumberSInt32Type} 1 : <CFString 0xdf5f68 [0x68a8c0]>{contents = "autoSetupEnv"} = <CFBoolean 0x68aac8 [0x68a8c0]>{value = false} 2 : <CFString 0xdf5f78 [0x68a8c0]>{contents = "disablePing"} = <CFBoolean 0x68aac0 [0x68a8c0]>{value = true} }

_baseband_update_requires_filesystems_once: querying baseband to determine if it requires system filesystem bbupdater: cmdCopyRequirePartitionMount: supports flashless 1

bbupdater: cmdCopyRequirePartitionMount: supports REFS 0

bbupdater: cmdCopyRequirePartitionMount: need data partition for coredumps

_baseband_update_requires_filesystems_once: query returned <CFBasicHash 0x17d2c520 [0x68a8c0]>{type = mutable dict, count = 3, entries => 0 : <CFString 0xdf5c08 [0x68a8c0]>{contents = "requireSystemPartitionMount"} = <CFBoolean 0x68aac0 [0x68a8c0]>{value = true} 1 : <CFString 0xdf5c28 [0x68a8c0]>{contents = "requireUserPartitionMount"} = <CFBoolean 0x68aac0 [0x68a8c0]>{value = true} 2 : <CFString 0xdf5c38 [0x68a8c0]>{contents = "requestedBasebandFSPartitionMountSize"} = <CFNumber 0x17d1cc90 [0x68a8c0]>{value = +0, type = kCFNumberSInt32Type} }

bbupdater: cmdCopyBasebandMigrationData: copying migration data

entering check_for_restore_log restore log does not exist executing /sbin/fsck_hfs /dev/rdisk0s1s2 Executing fsck_hfs (version hfs-286.30.1). Checking Journaled HFS Plus volume. Detected a case-sensitive volume. The volume name is Data Checking extents overflow file. Checking catalog file. Checking multi-linked files. Checking catalog hierarchy. Checking extended attributes file. Checking volume bitmap. Checking volume information. Trimming unused blocks. The volume Data appears to be OK. executing /sbin/mount_hfs mount_hfs: Could not create property for re-key environment check: No such file or directory /dev/disk0s1s2 mounted on /mnt2 entering dump_panic_logs executing /System/Library/CoreServices/DumpPanic entering check_for_ota_logs_with_mount_point restore log does not exist skipping log submission, failed to read user settings from: /mnt2/mobile/Library/ConfigurationProfiles/EffectiveUserSettings.plist Diagnostic log submission disabled Searching /mnt2/mobile/Library/Logs/CrashReporter/ Found match. panic-2020-08-17-133735.ips to prefix panic len = 5 preserving log file. SYSLOG: Sep 23 06:13:04 localhost kernel[0] : AppleKeyStore::find_accelerator: AppleKeyStore: trying to find aes driver SYSLOG: Sep 23 06:13:04 localhost kernel[0] : AppleKeyStore::find_accelerator: aes driver found Preserved file : /mnt2//mobile/Library/Logs/CrashReporter/panic-2020-08-17-133735.ips (size: 2733 bytes) Found match. panic-2020-08-17-140325.ips to prefix panic len = 5 preserving log file. Preserved file : /mnt2//mobile/Library/Logs/CrashReporter/panic-2020-08-17-140325.ips (size: 2733 bytes) Found match. panic-2020-09-23-143042.ips to prefix panic len = 5 preserving log file. Preserved file : /mnt2//mobile/Library/Logs/CrashReporter/panic-2020-09-23-143042.ips (size: 2733 bytes) Found match. panic-2020-09-23-143152.ips to prefix panic len = 5 preserving log file. Preserved file : /mnt2//mobile/Library/Logs/CrashReporter/panic-2020-09-23-143152.ips (size: 2733 bytes) Found match. panic-2020-09-23-152254.ips to prefix panic len = 5 preserving log file. Preserved file : /mnt2//mobile/Library/Logs/CrashReporter/panic-2020-09-23-152254.ips (size: 2733 bytes) Found match. panic-2020-09-23-152509.ips to prefix panic len = 5 preserving log file. Preserved file : /mnt2//mobile/Library/Logs/CrashReporter/panic-2020-09-23-152509.ips (size: 2733 bytes) Found match. panic-2020-09-23-153731.ips to prefix panic len = 5 preserving log file. Preserved file : /mnt2//mobile/Library/Logs/CrashReporter/panic-2020-09-23-153731.ips (size: 2733 bytes) Found match. panic-2020-09-23-153834.ips to prefix panic len = 5 preserving log file. Preserved file : /mnt2//mobile/Library/Logs/CrashReporter/panic-2020-09-23-153834.ips (size: 2733 bytes) check_for_ota_logs_with_mount_point complete Successfully checked for OTA logs entering unmount_filesystems entering clean_NAND NAND format complete entering ramrod_probe_media find_filesystem_partitions: storage=/dev/disk0 system= data= baseband data= log= entering format_effaceable_storage effaceable storage is formatted, clearing it effaceable storaged cleared entering format_storage_for_LwVM entering ramrod_probe_media device partitioning scheme is GPT unexpected partition 'LwVM' - skipping find_filesystem_partitions: storage=/dev/disk0s1 system= data= baseband data= log= entering create_filesystem_partitions User specified system partition size, skipping firmware extras size. system partition padding size is: 671088640 bytes unable to open : No such file or directory creating 2 partitions creating encrypted data partition entering ramrod_probe_media device partitioning scheme is GPT find_filesystem_partitions: storage=/dev/disk0s1 system=/dev/disk0s1s1 data=/dev/disk0s1s2 baseband data= log= wipe entire partition: 1 (old = 0 new = 2945) block size for /dev/disk0s1s1: 4096 /sbin/newfs_hfs -s -v System -J /dev/disk0s1s1 executing /sbin/newfs_hfs -s -v System -J /dev/disk0s1s1 Initialized /dev/rdisk0s1s1 as a 3 GB case-sensitive HFS Plus volume with a 8192k journal block size for /dev/disk0s1s2: 4096 /sbin/newfs_hfs -s -v Data -J -P /dev/disk0s1s2 executing /sbin/newfs_hfs -s -v Data -J -P /dev/disk0s1s2 Initialized /dev/rdisk0s1s2 as a 56 GB case-sensitive HFS Plus volume with a 8192k journal entering ramrod_probe_media device partitioning scheme is GPT find_filesystem_partitions: storage=/dev/disk0s1 system=/dev/disk0s1s1 data=/dev/disk0s1s2 baseband data= log= entering mount_filesystems executing /sbin/fsck_hfs /dev/rdisk0s1s1 Executing fsck_hfs (version hfs-286.30.1). Checking Journaled HFS Plus volume. Detected a case-sensitive volume. The volume name is System Checking extents overflow file. Checking catalog file. Checking multi-linked files. Checking catalog hierarchy. Checking extended attributes file. Checking volume bitmap. Checking volume information. Trimming unused blocks. The volume System appears to be OK. executing /sbin/mount_hfs mount_hfs: Could not create property for re-key environment check: No such file or directory /dev/disk0s1s1 mounted on /mnt1 executing /sbin/fsck_hfs /dev/rdisk0s1s2 Executing fsck_hfs (version hfs-286.30.1). Checking Journaled HFS Plus volume. Detected a case-sensitive volume. The volume name is Data Checking extents overflow file. Checking catalog file. Checking multi-linked files. Checking catalog hierarchy. Checking extended attributes file. Checking volume bitmap. Checking volume information. Trimming unused blocks. The volume Data appears to be OK. executing /sbin/mount_hfs mount_hfs: Could not create property for re-key environment check: No such file or directory /dev/disk0s1s2 mounted on /mnt2 entering resize_system_partition_to_options entering unmount_filesystems entering restore_images Successfully marked device node /dev/rdisk0s1s1 as static data executing /usr/sbin/asr -sourceSYSLOG: Sep 23 06:13:27 localhost kernel[0] : void AppleUSBDeviceMux::handleConnectResult(struct BulkUSBMuxSession *, errno_t) new session to port 12345 failed: 61 asr://localhost:12345 -target /dev/disk0s1s1 -erase -noprompt --chunkchecksum --puppetstrings SYSLOG: Sep 23 06:13:28 localhost asr[23] : bootstrap_look_up2 failed with 0x44e ASR: asr: Unable to disable idle sleep - -536870199 ASR STATUS: start 242.6 multicast-client ASR: Waiting for connection attempt from server SYSLOG: Sep 23 06:13:28 localhost asr[23] : __net_helper_get_connection_block_invoke_3 could not connect to networkd SYSLOG: Sep 23 06:13:29 localhost kernel[0] : AppleUSBDeviceMux::handleConnectResult new session 0xa1ce7d68 established 12345<-lo0->49181 12345<-usb->41730 ASR STATUS: setup ASR: Validating target...done ASR STATUS: metadata ASR: Validating source... ASR: done ASR: Retrieving scan information... ASR: done ASR: Validating sizes... ASR: done ASR STATUS: restore ASR RESTORE PROGRESS: 2% ASR RESTORE PROGRESS: 4% ASR RESTORE PROGRESS: 6% ASR RESTORE PROGRESS: 8% ASR RESTORE PROGRESS: 10% ASR RESTORE PROGRESS: 12% ASR RESTORE PROGRESS: 14% ASR RESTORE PROGRESS: 16% ASR RESTORE PROGRESS: 18% ASR RESTORE PROGRESS: 20% ASR RESTORE PROGRESS: 22% ASR RESTORE PROGRESS: 24% ASR RESTORE PROGRESS: 26% ASR RESTORE PROGRESS: 28% ASR RESTORE PROGRESS: 30% ASR RESTORE PROGRESS: 32% ASR RESTORE PROGRESS: 34% ASR RESTORE PROGRESS: 36% ASR RESTORE PROGRESS: 38% ASR RESTORE PROGRESS: 40% ASR RESTORE PROGRESS: 42% ASR RESTORE PROGRESS: 44% ASR RESTORE PROGRESS: 46% ASR RESTORE PROGRESS: 48% ASR RESTORE PROGRESS: 50% ASR RESTORE PROGRESS: 52% ASR RESTORE PROGRESS: 54% ASR RESTORE PROGRESS: 56% ASR RESTORE PROGRESS: 58% ASR RESTORE PROGRESS: 60% ASR RESTORE PROGRESS: 62% ASR RESTORE PROGRESS: 64% ASR RESTORE PROGRESS: 66% ASR RESTORE PROGRESS: 68% ASR RESTORE PROGRESS: 70% ASR RESTORE PROGRESS: 72% ASR RESTORE PROGRESS: 74% ASR RESTORE PROGRESS: 76% ASR RESTORE PROGRESS: 78% ASR RESTORE PROGRESS: 80% ASR RESTORE PROGRESS: 82% ASR RESTORE PROGRESS: 84% ASR RESTORE PROGRESS: 86% ASR RESTORE PROGRESS: 88% ASR RESTORE PROGRESS: 90% ASR RESTORE PROGRESS: 92% ASR RESTORE PROGRESS: 94% ASR RESTORE PROGRESS: 96% ASR RESTORE PROGRESS: 98% SYSLOG: Sep 23 06:14:27 localhost kernel[0] : void AppleUSBDeviceMux::handleMuxTCPInput(mbuf_t) received reset, closing 0xa1ce7d68 ASR RESTORE PROGRESS: 100% ASR: Copied 2183136256 bytes in 56.09 seconds, 38012.38 KiB/s ASR STATUS: verify ASR VERIFY PROGRESS: 2% ASR VERIFY PROGRESS: 4% ASR VERIFY PROGRESS: 6% ASR VERIFY PROGRESS: 8% ASR VERIFY PROGRESS: 10% ASR VERIFY PROGRESS: 12% ASR VERIFY PROGRESS: 14% ASR VERIFY PROGRESS: 16% ASR VERIFY PROGRESS: 18% ASR VERIFY PROGRESS: 20% ASR VERIFY PROGRESS: 22% ASR VERIFY PROGRESS: 24% ASR VERIFY PROGRESS: 26% ASR VERIFY PROGRESS: 28% ASR VERIFY PROGRESS: 30% ASR VERIFY PROGRESS: 32% ASR VERIFY PROGRESS: 34% ASR VERIFY PROGRESS: 36% ASR VERIFY PROGRESS: 38% ASR VERIFY PROGRESS: 40% ASR VERIFY PROGRESS: 42% ASR VERIFY PROGRESS: 44% ASR VERIFY PROGRESS: 46% ASR VERIFY PROGRESS: 48% ASR VERIFY PROGRESS: 50% ASR VERIFY PROGRESS: 52% ASR VERIFY PROGRESS: 54% ASR VERIFY PROGRESS: 56% ASR VERIFY PROGRESS: 58% ASR VERIFY PROGRESS: 60% ASR VERIFY PROGRESS: 62% ASR VERIFY PROGRESS: 64% ASR VERIFY PROGRESS: 66% ASR VERIFY PROGRESS: 68% ASR VERIFY PROGRESS: 70% ASR VERIFY PROGRESS: 72% ASR VERIFY PROGRESS: 74% ASR VERIFY PROGRESS: 76% ASR VERIFY PROGRESS: 78% ASR VERIFY PROGRESS: 80% ASR VERIFY PROGRESS: 82% ASR VERIFY PROGRESS: 84% ASR VERIFY PROGRESS: 86% ASR VERIFY PROGRESS: 88% ASR VERIFY PROGRESS: 90% ASR VERIFY PROGRESS: 92% ASR VERIFY PROGRESS: 94% ASR VERIFY PROGRESS: 96% ASR VERIFY PROGRESS: 98% ASR VERIFY PROGRESS: 100% ASR: Verified SHA-1 checksum 2183136256 bytes in 11.69 seconds, 182375.70 KiB/s ASR STATUS: finish entering ramrod_probe_media device partitioning scheme is GPT find_filesystem_partitions: storage=/dev/disk0s1 system=/dev/disk0s1s1 data=/dev/disk0s1s2 baseband data= log= entering mount_filesystems executing /sbin/fsck_hfs /dev/rdisk0s1s1 Executing fsck_hfs (version hfs-286.30.1). Checking Journaled HFS Plus volume. Detected a case-sensitive volume. The volume name is Donner12H321.N42OS Checking extents overflow file. Checking catalog file. Checking multi-linked files. Checking catalog hierarchy. Checking extended attributes file. Checking volume bitmap. Checking volume information. Trimming unused blocks. The volume Donner12H321.N42OS appears to be OK. executing /sbin/mount_hfs mount_hfs: Could not create property for re-key environment check: No such file or directory /dev/disk0s1s1 mounted on /mnt1 executing /sbin/fsck_hfs /dev/rdisk0s1s2 Executing fsck_hfs (version hfs-286.30.1). Checking Journaled HFS Plus volume. Detected a case-sensitive volume. The volume name is Data Checking extents overflow file. Checking catalog file. Checking multi-linked files. Checking catalog hierarchy. Checking extended attributes file. Checking volume bitmap. Checking volume information. Trimming unused blocks. The volume Data appears to be OK. executing /sbin/mount_hfs mount_hfs: Could not create property for re-key environment check: No such file or directory /dev/disk0s1s2 mounted on /mnt2 RestoredFDRRestoreSavedData success entering install_kernel_cache writing kernelcache to /mnt1/System/Library/Caches/com.apple.kernelcaches/kernelcache entering install_secure_vault_daemon entering get_hardware_platform platform-name = s5l8950x linking /mnt1/usr/sbin/securekeyvaultd to /mnt1/usr/sbin/securekeyvaultd.s5l8950x no securekeyvaultd for s5l8950x entering ramrod_ticket_write writing ticket to /mnt1/System/Library/Caches/apticket.der entering RestoredFDRRecover entering update_device_firmware entering add_baseband_partition_options entering ramrod_update_device_firmware entering update_iBoot found 'AppleImage3NORAccess' object in IORegistry entering update_iBoot_image3_NOR_access write_image3_data: flashing illb data (length = 0x25a1a) SYSLOG: Sep 23 06:15:02 localhost kernel[0] : AppleImage3NORAccess::_getSuperBlock imageVersion: 3 SYSLOG: Sep 23 06:15:02 localhost kernel[0] : AppleImage3NORAccess::_getSuperBlock imageVersion: 3 write_image3_data: flashing SCAB data (length = 0xb00) ticket updated write_image3_data: flashing ibot data (length = 0x4618c) write_image3_data: flashing dtre data (length = 0x159cc) write_image3_data: flashing logo data (length = 0x1a8c) write_image3_data: flashing chg0 data (length = 0x260c) write_image3_data: flashing chg1 data (length = 0x88cc) write_image3_data: flashing batF data (length = 0x1484c) write_image3_data: flashing bat0 data (length = 0xaa4c) write_image3_data: flashing bat1 data (length = 0x80c) write_image3_data: flashing glyP data (length = 0xf8c) write_image3_data: flashing recm data (length = 0x1214c) SYSLOG: Sep 23 06:15:02 localhost kernel[0] : [nand_part_core:INF@2289] first 2 pages of boot blocks written with copies of partition table SYSLOG: Sep 23 06:15:07 localhost kernel[0] : [nand_part_core:INF@3169] next 101 pages of boot blocks written with LLB image of size 154176 bytes SYSLOG: Sep 23 06:15:07 localhost kernel[0] : [nand_part_core:INF@3172] final 153 pages of boot blocks written with random data in full page format entering update_gas_gauge entering update_ir_mcu looking for mcu nub...no entry from path! TiSerialFlasher not supported on this platform. Exiting. entering update_baseband update_baseband: registering for progress notifications create_baseband_update_options: Got imeisv: 13 baseband updater options = <CFBasicHash 0x17d30bd0 [0x68a8c0]>{type = mutable dict, count = 7, entries => 0 : <CFString 0xdf5e58 [0x68a8c0]>{contents = "SystemRoot"} = <CFString 0x17e1b1f0 [0x68a8c0]>{contents = "/mnt1"} 5 : <CFString 0xdf5de8 [0x68a8c0]>{contents = "DisallowFusiing"} = <CFBoolean 0x68aac0 [0x68a8c0]>{value = true} 6 : <CFString 0xdf5f68 [0x68a8c0]>{contents = "autoSetupEnv"} = <CFBoolean 0x68aac8 [0x68a8c0]>{value = false} 7 : <CFString 0xdf5e68 [0x68a8c0]>{contents = "DataRoot"} = <CFString 0x17e1b200 [0x68a8c0]>{contents = "/mnt2"} 8 : <CFString 0xdf5db8 [0x68a8c0]>{contents = "forceUpdate"} = <CFBoolean 0x68aac0 [0x68a8c0]>{value = true} 9 : <CFString 0xdf5f78 [0x68a8c0]>{contents = "disablePing"} = <CFBoolean 0x68aac0 [0x68a8c0]>{value = true} 10 : <CFString 0xdf5ed8 [0x68a8c0]>{contents = "IMEISwVersion"} = <CFNumber 0x17d30ba0 [0x68a8c0]>{value = +13, type = kCFNumberSInt32Type} }

update_baseband: querying baseband info bbupdater: BEGIN: Querying info at stage first bbupdater: BEGIN: Preparing first stage bbupdater: Requested boot mode: kBBUBootModeNone bbupdater: Creating transport, attempts remaining 5...bbupdater: OK bbupdater: END: Preparing first stage bbupdater: Connecting to Loader...bbupdater: OK bbupdater: Getting Version...bbupdater: OK bbupdater: Loader version: PBL-DloadVER2.0 bbupdater: Fusing disallowed, will treat as fused bbupdater: END: Querying info at stage first update_baseband: query returned <CFBasicHash 0x17d30d30 [0x68a8c0]>{type = mutable dict, count = 6, entries => 0 : <CFString 0xdf5ff8 [0x68a8c0]>{contents = "CertHash"} = <CFData 0x17d334e0 [0x68a8c0]>{length = 32, capacity = 32, bytes = 0xc20b8a40ea0c16cac22ed32b82ed9830 ... 6bd60b21db759f2d} 2 : <CFString 0xdf6178 [0x68a8c0]>{contents = "VendorID"} = <CFNumber 0x17d2b770 [0x68a8c0]>{value = +3, type = kCFNumberSInt32Type} 3 : <CFString 0xdf5fc8 [0x68a8c0]>{contents = "ChipID"} = <CFNumber 0x17d32870 [0x68a8c0]>{value = +7278817, type = kCFNumberSInt64Type} 4 : <CFString 0xdf61c8 [0x68a8c0]>{contents = "FusingStatus"} = <CFNumber 0x17d2b770 [0x68a8c0]>{value = +3, type = kCFNumberSInt32Type} 5 : <CFString 0xdf6168 [0x68a8c0]>{contents = "CertID"} = <CFNumber 0x17d32880 [0x68a8c0]>{value = +3255536192, type = kCFNumberSInt64Type} 6 : <CFString 0xdf5fb8 [0x68a8c0]>{contents = "ChipSerialNo"} = <CFData 0x17e1bc80 [0x68a8c0]>{length = 4, capacity = 4, bytes = 0x05f366e6} }

update_baseband: requesting baseband firmware data update_baseband: received data from host (135037 bytes) update_baseband: performing next update stage bbupdater: BEGIN: Perform stage at first bbupdater: Loading... bbupdater: 0x2a008400 of 0x2a0229bc (23 percent) bbupdater: 0x2a010800 of 0x2a0229bc (47 percent) bbupdater: 0x2a018c00 of 0x2a0229bc (71 percent) bbupdater: 0x2a021000 of 0x2a0229bc (95 percent) bbupdater: 0x2a0229bc of 0x2a0229bc (100 percent) bbupdater: bbupdater: Launching...bbupdater: OK bbupdater: END: Perform stage at first send_bbupdate_status: sending baseband update status to host update_baseband: querying baseband info bbupdater: BEGIN: Querying info at stage second bbupdater: BEGIN: Preparing Second stage bbupdater: Re-configure transport for second stage. bbupdater: END: Preparing Second stage bbupdater: BEGIN: Gathering Personalization parameters... bbupdater: Waiting for Hello...bbupdater: FAILED(kBBUReturnIOError) bbupdater: END(kBBUReturnNAKHello): Gathering Personalization parameters... bbupdater: END(kBBUReturnNAKHello): Querying info at stage second bbupdater: core dump collection disabled send_bbupdate_status: sending baseband update status to host update_baseband: calling CFNotificationCenterRemoveEveryObserver update_baseband: bbupdater error: The operation couldn\U2019t be completed. (BBUpdater error 47 - Failed gatherPersonalizationParameters in second stage) Update[Baseband] error - The operation couldn\U2019t be completed. (RamrodErrorDomain error 1004 - update_baseband: failed querying baseband info) Update[Baseband] failed - 0 retries remaining... 0: RamrodErrorDomain/3ec: update_baseband: failed querying baseband info 1: BBUpdater/2f: Failed gatherPersonalizationParameters in second stage unable to convert ramrod error 1004

ERROR: Unable to restore device

LukeZGD commented 4 years ago

That's an error I haven't seen before

You may want to delete the custom IPSW and start over

Also I updated the included idevicerestore for macOS so hopefully that helps as well

jailhousej commented 4 years ago

Followed your advice and still same error

LukeZGD commented 4 years ago

Not sure what's going wrong then, I just tested on iPhone5,2 and Mojave and worked fine for me Screen Shot 2020-09-24 at 11 22 35 AM

jailhousej commented 4 years ago

Alright, I got it working. For those on Catalina, navigate to the resources folder in the root directory of this program, and open and allow every single executable through gatekeeper!

UInt2048 commented 4 years ago

@jailhousej More precisely, all the executables are in the tools subdirectory of resources.

P.S. If it doesn't work after a re-spring, try a restart!