NSSpiral / Blackb0x

Apple TV 2/3 Jailbreak
508 stars 57 forks source link

No Kodi or any other signs of success after jailbreak #135

Open apbarratt opened 1 year ago

apbarratt commented 1 year ago

I'm beginning to wonder if this exploit has been killed off? I've used Blackb0x to jailbreak two Apple TVs I had lying around that I wasn't using anymore due to not having features I'd like (web browser or Disney+ for instance) so figured I'd give this a go.

The jailbreak appears to be successful on both devices (which I restored to factory before starting). I've had both of them up and running on TVs for about half an hour now and nothing is popping up at all. In fact, they appear as stock as can be.

I note that both are running "Apple TV Software 7.9 (8163) which appears to have been released in March 2022 and (though tvOS wikipedia entry is unhelpful here) I'd suppose an iOS version of 8.4.9

The model on both devices is A1469. One is plugged in using Ethernet and the other is over WiFi, though they are on the same LAN and the internet connection seems to be stable enough for everything else.

I note that I had to disconnect power after both jailbreaks to trigger a restart out of recovery mode.

Please do let me know if there's a trick to getting logs off the devices for me to assist :)

I've also found that I can't actually find any videos of folk successfully jailbreaking their devices with this software. By which I mean, I see many videos of lots of talking and showing the process, but none of them seem to then show a video or photo of their apple TV screen. I only mention this as i've been wondering if there's something I should be looking for. At first I wondered if Kodi would just pop up as a new interface, then I wondered if it would be a new app on the stock list. Any photo to confirm what the successful process should result in would be helpful in absolutely confirming to me that I'm not missing anything silly :)

apbarratt commented 1 year ago

Quick update that after plugging into the mac again with the tv now connected to my mac, it's confirming "tvOS 8.4.4" in Finder despite saying 7.9 on the official interface. Most odd, you'd think they'd have set them to be uniform.

apbarratt commented 1 year ago

Further, with the already running device plugged in and showing in Finder, I can no longer open Blackb0x, receiving the following crash report:

-------------------------------------
Translated Report (Full Report Below)
-------------------------------------

Process:               Blackb0x [24628]
Path:                  /Applications/Blackb0x.app/Contents/MacOS/Blackb0x
Identifier:            spiral.Blackb0x
Version:               1.0 (1)
Code Type:             X86-64 (Translated)
Parent Process:        launchd [1]
User ID:               501

Date/Time:             2022-10-23 15:53:47.2901 +0100
OS Version:            macOS 12.5.1 (21G83)
Report Version:        12
Anonymous UUID:        2C123C9D-8438-3E6F-8A53-EB8F66478EF8

Sleep/Wake UUID:       2EB2CF51-8AB0-4F47-A1B3-A7F7EF7D9825

Time Awake Since Boot: 1700000 seconds
Time Since Wake:       5985 seconds

System Integrity Protection: enabled

Crashed Thread:        2  Dispatch queue: com.apple.root.default-qos

Exception Type:        EXC_BAD_INSTRUCTION (SIGILL)
Exception Codes:       0x0000000000000001, 0x0000000000000000
Exception Note:        EXC_CORPSE_NOTIFY

Termination Reason:    Namespace SIGNAL, Code 4 Illegal instruction: 4
Terminating Process:   exc handler [24628]

Application Specific Information:
detected buffer overflow

Thread 0::  Dispatch queue: com.apple.main-thread
0   libsystem_platform.dylib            0x7ff80403d77c _platform_memmove$VARIANT$Rosetta + 140
1   libPng.dylib                        0x7ff810e9b06d png_combine_row + 307
2   libPng.dylib                        0x7ff810e91fe9 _cg_png_read_row + 956
3   ImageIO                             0x7ff80d54325f PNGReadPlugin::DecodeFrameStandard(IIOImageReadSession*, ReadPluginData const&, PNGPluginData const&, IIODecodeFrameParams&) + 1561
4   ImageIO                             0x7ff80d588ac1 PNGReadPlugin::DecodeUncomposedFrames(IIOImageRead*, GlobalPNGInfo*, ReadPluginData const&, PNGPluginData const&, std::__1::vector<IIODecodeFrameParams, std::__1::allocator<IIODecodeFrameParams> >&) + 87
5   ImageIO                             0x7ff80d55555e PNGReadPlugin::copyImageBlockSetStandard(InfoRec*, CGImageProvider*, CGRect, CGSize, __CFDictionary const*) + 1674
6   ImageIO                             0x7ff80d541aba PNGReadPlugin::copyImageBlockSet(InfoRec*, CGImageProvider*, CGRect, CGSize, __CFDictionary const*) + 54
7   ImageIO                             0x7ff80d53061e IIO_Reader::CopyImageBlockSetProc(void*, CGImageProvider*, CGRect, CGSize, __CFDictionary const*) + 166
8   ImageIO                             0x7ff80d54c515 IIOImageProviderInfo::copyImageBlockSetWithOptions(CGImageProvider*, CGRect, CGSize, __CFDictionary const*) + 665
9   ImageIO                             0x7ff80d530514 IIOImageProviderInfo::CopyImageBlockSetWithOptions(void*, CGImageProvider*, CGRect, CGSize, __CFDictionary const*) + 880
10  QuartzCore                          0x7ff80b62da25 CA::Render::copy_image(CGImage*, CGColorSpace*, unsigned int, double, double) + 2587
11  QuartzCore                          0x7ff80b62cfef CA::Render::prepare_image(CGImage*, CGColorSpace*, unsigned int, double) + 20
12  QuartzCore                          0x7ff80b62cd27 CA::Layer::prepare_commit(CA::Transaction*) + 553
13  QuartzCore                          0x7ff80b77f2b9 CA::Context::commit_transaction(CA::Transaction*, double, double*) + 655
14  QuartzCore                          0x7ff80b608e6d CA::Transaction::commit() + 777
15  AppKit                              0x7ff806bc61d1 __62+[CATransaction(NSCATransaction) NS_setFlushesWithDisplayLink]_block_invoke + 285
16  AppKit                              0x7ff80730df5c ___NSRunLoopObserverCreateWithHandler_block_invoke + 41
17  CoreFoundation                      0x7ff8040ea725 __CFRUNLOOP_IS_CALLING_OUT_TO_AN_OBSERVER_CALLBACK_FUNCTION__ + 23
18  CoreFoundation                      0x7ff8040ea5ba __CFRunLoopDoObservers + 543
19  CoreFoundation                      0x7ff8040e9a3c __CFRunLoopRun + 840
20  CoreFoundation                      0x7ff8040e9034 CFRunLoopRunSpecific + 562
21  HIToolbox                           0x7ff80d2055e6 RunCurrentEventLoopInMode + 292
22  HIToolbox                           0x7ff80d20534a ReceiveNextEventCommon + 594
23  HIToolbox                           0x7ff80d2050e5 _BlockUntilNextEventMatchingListInModeWithFilter + 70
24  AppKit                              0x7ff806a59fad _DPSNextEvent + 927
25  AppKit                              0x7ff806a5866a -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 1394
26  AppKit                              0x7ff806a4ad19 -[NSApplication run] + 586
27  AppKit                              0x7ff806a1ec97 NSApplicationMain + 817
28  dyld                                   0x20241352e start + 462

Thread 1:: com.apple.rosetta.exceptionserver
0   runtime                             0x7ff7ffe72944 0x7ff7ffe6e000 + 18756
1   runtime                             0x7ff7ffe803e0 0x7ff7ffe6e000 + 74720
2   runtime                             0x7ff7ffe81e58 0x7ff7ffe6e000 + 81496

Thread 2 Crashed::  Dispatch queue: com.apple.root.default-qos
0   libsystem_c.dylib                   0x7ff803f6f363 __chk_fail_overflow + 16
1   libsystem_c.dylib                   0x7ff803eff97c __strcpy_chk + 83
2   Blackb0x                               0x1023749a0 0x102361000 + 80288
3   libdispatch.dylib                   0x7ff803e6d0cc _dispatch_call_block_and_release + 12
4   libdispatch.dylib                   0x7ff803e6e317 _dispatch_client_callout + 8
5   libdispatch.dylib                   0x7ff803e709fc _dispatch_queue_override_invoke + 787
6   libdispatch.dylib                   0x7ff803e7dac2 _dispatch_root_queue_drain + 343
7   libdispatch.dylib                   0x7ff803e7e25c _dispatch_worker_thread2 + 160
8   libsystem_pthread.dylib             0x7ff804021f8a _pthread_wqthread + 256
9   libsystem_pthread.dylib             0x7ff804020f57 start_wqthread + 15

Thread 3:
0   runtime                             0x7ff7ffe90814 0x7ff7ffe6e000 + 141332

Thread 4:
0   runtime                             0x7ff7ffe90814 0x7ff7ffe6e000 + 141332

Thread 5:
0   runtime                             0x7ff7ffe90814 0x7ff7ffe6e000 + 141332

Thread 6:
0   ???                                 0x7ff8944ba940 ???
1   libsystem_kernel.dylib              0x7ff803fe897a mach_msg_trap + 10
2   libsystem_kernel.dylib              0x7ff803fe8ce8 mach_msg + 56
3   CoreFoundation                      0x7ff8040eb560 __CFRunLoopServiceMachPort + 319
4   CoreFoundation                      0x7ff8040e9bf0 __CFRunLoopRun + 1276
5   CoreFoundation                      0x7ff8040e9034 CFRunLoopRunSpecific + 562
6   CoreFoundation                      0x7ff804170567 CFRunLoopRun + 40
7   libirecovery.3.dylib                   0x10aa6d711 _irecv_event_handler + 353
8   libsystem_pthread.dylib             0x7ff8040254e1 _pthread_start + 125
9   libsystem_pthread.dylib             0x7ff804020f6b thread_start + 15

Thread 7:
0   ???                                 0x7ff8944ba940 ???
1   libsystem_kernel.dylib              0x7ff803ff0d5a __select + 10
2   libusbmuxd.dylib                       0x10aaf0515 socket_check_fd + 189
3   libusbmuxd.dylib                       0x10aaf0711 socket_receive_timeout + 36
4   libusbmuxd.dylib                       0x10aaee07f receive_packet + 51
5   libusbmuxd.dylib                       0x10aaecf66 device_monitor + 154
6   libsystem_pthread.dylib             0x7ff8040254e1 _pthread_start + 125
7   libsystem_pthread.dylib             0x7ff804020f6b thread_start + 15

Thread 8:
0   runtime                             0x7ff7ffe90814 0x7ff7ffe6e000 + 141332

Thread 9:
0   runtime                             0x7ff7ffe90814 0x7ff7ffe6e000 + 141332

Thread 10:
0   runtime                             0x7ff7ffe90814 0x7ff7ffe6e000 + 141332

Thread 11:: com.apple.NSEventThread
0   ???                                 0x7ff8944ba940 ???
1   libsystem_kernel.dylib              0x7ff803fe897a mach_msg_trap + 10
2   libsystem_kernel.dylib              0x7ff803fe8ce8 mach_msg + 56
3   CoreFoundation                      0x7ff8040eb560 __CFRunLoopServiceMachPort + 319
4   CoreFoundation                      0x7ff8040e9bf0 __CFRunLoopRun + 1276
5   CoreFoundation                      0x7ff8040e9034 CFRunLoopRunSpecific + 562
6   AppKit                              0x7ff806bc79ce _NSEventThread + 132
7   libsystem_pthread.dylib             0x7ff8040254e1 _pthread_start + 125
8   libsystem_pthread.dylib             0x7ff804020f6b thread_start + 15

Thread 2 crashed with X86 Thread State (64-bit):
  rax: 0x0000000000000000  rbx: 0x0000600000015380  rcx: 0x0000000000000000  rdx: 0x0000000000000000
  rdi: 0x0000000000000000  rsi: 0x000000001f08000c  rbp: 0x00000003088abe30  rsp: 0x00000003088abe30
   r8: 0x0000000000000000   r9: 0x0000000000000000  r10: 0x0000000000000032  r11: 0x00000003088abc51
  r12: 0x0000000000000000  r13: 0x0000000000000114  r14: 0x0000600001b70d51  r15: 0x0000000000000027
  rip: <unavailable>       rfl: 0x0000000000000202
 tmp0: 0x00007ff803f6f363 tmp1: 0x0000000000000215 tmp2: 0x00007ff8947911b4

Binary Images:
    0x7ff804037000 -     0x7ff804040fff libsystem_platform.dylib (*) <bd2bd848-f9c9-35ff-9795-32d31977523d> /usr/lib/system/libsystem_platform.dylib
    0x7ff810e87000 -     0x7ff810ea7fff libPng.dylib (*) <e9f85a3e-0a29-31e0-a6b2-0c69c62098b6> /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
    0x7ff80d514000 -     0x7ff80d75afff com.apple.ImageIO (3.3.0) <7449c64c-4a64-3d6e-b2d2-d5c3973e0c5b> /System/Library/Frameworks/ImageIO.framework/Versions/A/ImageIO
    0x7ff80b606000 -     0x7ff80b918fff com.apple.QuartzCore (1.11) <e3b63002-28fd-32aa-adf5-ce5691c3a954> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
    0x7ff806a1b000 -     0x7ff8078aafff com.apple.AppKit (6.9) <bcb46e9b-acd5-3b26-878f-a3988bc5df7e> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
    0x7ff80406c000 -     0x7ff80456cfff com.apple.CoreFoundation (6.9) <32d2d187-4e52-376e-bc07-245a48c37e2b> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
    0x7ff80d1d7000 -     0x7ff80d4cafff com.apple.HIToolbox (2.1.1) <95eab511-8fc1-353a-ac8a-26aa19032e2e> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
       0x20240e000 -        0x202479fff dyld (*) <f71fb3ca-5fcc-3577-9457-b047888a46d1> /usr/lib/dyld
    0x7ff7ffe6e000 -     0x7ff7ffe9dfff runtime (*) <ef33add1-6b70-3cc9-8bbc-c8544b609d2b> /usr/libexec/rosetta/runtime
    0x7ff803eef000 -     0x7ff803f77fff libsystem_c.dylib (*) <e8499aa8-6800-372f-bd48-82846d88c6cb> /usr/lib/system/libsystem_c.dylib
       0x102361000 -        0x10239bfff spiral.Blackb0x (1.0) <cb03e3b2-652e-3944-b162-68820779405f> /Applications/Blackb0x.app/Contents/MacOS/Blackb0x
    0x7ff803e6b000 -     0x7ff803eb1fff libdispatch.dylib (*) <5115c8ef-bc57-32db-91c6-71b61a79966e> /usr/lib/system/libdispatch.dylib
    0x7ff80401f000 -     0x7ff80402afff libsystem_pthread.dylib (*) <f32b6d06-b156-3da0-b086-a31cf011362b> /usr/lib/system/libsystem_pthread.dylib
               0x0 - 0xffffffffffffffff ??? (*) <00000000-0000-0000-0000-000000000000> ???
    0x7ff803fe7000 -     0x7ff80401efff libsystem_kernel.dylib (*) <792406fe-2224-3c14-ba9f-f076fd7839d2> /usr/lib/system/libsystem_kernel.dylib
       0x10aa6b000 -        0x10aa72fff libirecovery.3.dylib (*) <ca5d9945-5f05-3afa-8262-1c210c9786f6> /Applications/Blackb0x.app/Contents/Frameworks/libirecovery.3.dylib
       0x10aaeb000 -        0x10aaf1fff libusbmuxd.dylib (*) <c64b8859-b814-391d-b5df-40098b9eefea> /Applications/Blackb0x.app/Contents/Frameworks/libusbmuxd.dylib

External Modification Summary:
  Calls made by other processes targeting this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
  Calls made by this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
  Calls made by all processes on this machine:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0

VM Region Summary:
ReadOnly portion of Libraries: Total=939.8M resident=0K(0%) swapped_out_or_unallocated=939.8M(100%)
Writable regions: Total=1.8G written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=1.8G(100%)

                                VIRTUAL   REGION 
REGION TYPE                        SIZE    COUNT (non-coalesced) 
===========                     =======  ======= 
Accelerate framework               256K        2 
Activity Tracing                   256K        1 
CG backing stores                 2560K        4 
CG image                           104K        8 
ColorSync                          216K       25 
CoreAnimation                     20.6M       26 
CoreGraphics                        12K        2 
CoreUI image data                 1736K       14 
Foundation                          16K        1 
Image IO                         340.7M        1 
Kernel Alloc Once                    8K        1 
MALLOC                           260.2M       43 
MALLOC guard page                  192K        9 
MALLOC_MEDIUM (reserved)         720.0M        6         reserved VM address space (unallocated)
MALLOC_NANO (reserved)           384.0M        1         reserved VM address space (unallocated)
Rosetta Arena                     4096K        2 
Rosetta Generic                    948K      234 
Rosetta IndirectBranch             512K        1 
Rosetta JIT                      128.0M        1 
Rosetta Return Stack               220K       22 
Rosetta Thread Context             220K       22 
STACK GUARD                         24K        6 
Stack                             13.1M       11 
Stack Guard                       56.0M        5 
VM_ALLOCATE                       4900K       24 
VM_ALLOCATE (reserved)              20K        4         reserved VM address space (unallocated)
__CTF                               756        1 
__DATA                            19.3M      321 
__DATA_CONST                      12.4M      175 
__DATA_DIRTY                       542K      103 
__FONT_DATA                          4K        1 
__LINKEDIT                       705.2M       20 
__OBJC_RO                         82.8M        1 
__OBJC_RW                         3200K        2 
__TEXT                           234.6M      335 
__UNICODE                          592K        1 
dyld private memory               1024K        1 
mapped file                        5.2G      445 
shared memory                      820K       15 
unshared pmap                     8880K        6 
===========                     =======  ======= 
TOTAL                              8.1G     1903 
TOTAL, minus reserved VM space     7.0G     1903 

-----------
Full Report
-----------

{"app_name":"Blackb0x","timestamp":"2022-10-23 15:53:47.00 +0100","app_version":"1.0","sroute_id":3,"slice_uuid":"cb03e3b2-652e-3944-b162-68820779405f","build_version":"1","platform":1,"bundleID":"spiral.Blackb0x","share_with_app_devs":1,"is_first_party":0,"bug_type":"309","os_version":"macOS 12.5.1 (21G83)","incident_id":"845CB69B-C5B1-4137-98A9-E5A2AF0A63ED","name":"Blackb0x"}
{
  "uptime" : 1700000,
  "procLaunch" : "2022-10-23 15:53:46.6158 +0100",
  "procRole" : "Foreground",
  "version" : 2,
  "userID" : 501,
  "deployVersion" : 210,
  "modelCode" : "MacBookPro17,1",
  "procStartAbsTime" : 41333336485166,
  "coalitionID" : 209937,
  "osVersion" : {
    "train" : "macOS 12.5.1",
    "build" : "21G83",
    "releaseType" : "User"
  },
  "captureTime" : "2022-10-23 15:53:47.2901 +0100",
  "incident" : "845CB69B-C5B1-4137-98A9-E5A2AF0A63ED",
  "bug_type" : "309",
  "pid" : 24628,
  "procExitAbsTime" : 41333352504638,
  "translated" : true,
  "cpuType" : "X86-64",
  "procName" : "Blackb0x",
  "procPath" : "\/Applications\/Blackb0x.app\/Contents\/MacOS\/Blackb0x",
  "bundleInfo" : {"CFBundleShortVersionString":"1.0","CFBundleVersion":"1","CFBundleIdentifier":"spiral.Blackb0x"},
  "storeInfo" : {"deviceIdentifierForVendor":"20E20523-DC41-5CF8-A3B4-B7730416E2FB","thirdParty":true},
  "parentProc" : "launchd",
  "parentPid" : 1,
  "coalitionName" : "spiral.Blackb0x",
  "crashReporterKey" : "2C123C9D-8438-3E6F-8A53-EB8F66478EF8",
  "wakeTime" : 5985,
  "sleepWakeUUID" : "2EB2CF51-8AB0-4F47-A1B3-A7F7EF7D9825",
  "sip" : "enabled",
  "sroute_id" : 3,
  "isCorpse" : 1,
  "exception" : {"codes":"0x0000000000000001, 0x0000000000000000","rawCodes":[1,0],"type":"EXC_BAD_INSTRUCTION","signal":"SIGILL"},
  "termination" : {"flags":0,"code":4,"namespace":"SIGNAL","indicator":"Illegal instruction: 4","byProc":"exc handler","byPid":24628},
  "asi" : {"libsystem_c.dylib":["detected buffer overflow"]},
  "extMods" : {"caller":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"system":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"targeted":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"warnings":0},
  "faultingThread" : 2,
  "threads" : [{"id":23100487,"queue":"com.apple.main-thread","frames":[{"imageOffset":26492,"symbol":"_platform_memmove$VARIANT$Rosetta","symbolLocation":140,"imageIndex":0},{"imageOffset":82029,"symbol":"png_combine_row","symbolLocation":307,"imageIndex":1},{"imageOffset":45033,"symbol":"_cg_png_read_row","symbolLocation":956,"imageIndex":1},{"imageOffset":193119,"symbol":"PNGReadPlugin::DecodeFrameStandard(IIOImageReadSession*, ReadPluginData const&, PNGPluginData const&, IIODecodeFrameParams&)","symbolLocation":1561,"imageIndex":2},{"imageOffset":477889,"symbol":"PNGReadPlugin::DecodeUncomposedFrames(IIOImageRead*, GlobalPNGInfo*, ReadPluginData const&, PNGPluginData const&, std::__1::vector<IIODecodeFrameParams, std::__1::allocator<IIODecodeFrameParams> >&)","symbolLocation":87,"imageIndex":2},{"imageOffset":267614,"symbol":"PNGReadPlugin::copyImageBlockSetStandard(InfoRec*, CGImageProvider*, CGRect, CGSize, __CFDictionary const*)","symbolLocation":1674,"imageIndex":2},{"imageOffset":187066,"symbol":"PNGReadPlugin::copyImageBlockSet(InfoRec*, CGImageProvider*, CGRect, CGSize, __CFDictionary const*)","symbolLocation":54,"imageIndex":2},{"imageOffset":116254,"symbol":"IIO_Reader::CopyImageBlockSetProc(void*, CGImageProvider*, CGRect, CGSize, __CFDictionary const*)","symbolLocation":166,"imageIndex":2},{"imageOffset":230677,"symbol":"IIOImageProviderInfo::copyImageBlockSetWithOptions(CGImageProvider*, CGRect, CGSize, __CFDictionary const*)","symbolLocation":665,"imageIndex":2},{"imageOffset":115988,"symbol":"IIOImageProviderInfo::CopyImageBlockSetWithOptions(void*, CGImageProvider*, CGRect, CGSize, __CFDictionary const*)","symbolLocation":880,"imageIndex":2},{"imageOffset":162341,"symbol":"CA::Render::copy_image(CGImage*, CGColorSpace*, unsigned int, double, double)","symbolLocation":2587,"imageIndex":3},{"imageOffset":159727,"symbol":"CA::Render::prepare_image(CGImage*, CGColorSpace*, unsigned int, double)","symbolLocation":20,"imageIndex":3},{"imageOffset":159015,"symbol":"CA::Layer::prepare_commit(CA::Transaction*)","symbolLocation":553,"imageIndex":3},{"imageOffset":1544889,"symbol":"CA::Context::commit_transaction(CA::Transaction*, double, double*)","symbolLocation":655,"imageIndex":3},{"imageOffset":11885,"symbol":"CA::Transaction::commit()","symbolLocation":777,"imageIndex":3},{"imageOffset":1749457,"symbol":"__62+[CATransaction(NSCATransaction) NS_setFlushesWithDisplayLink]_block_invoke","symbolLocation":285,"imageIndex":4},{"imageOffset":9383772,"symbol":"___NSRunLoopObserverCreateWithHandler_block_invoke","symbolLocation":41,"imageIndex":4},{"imageOffset":517925,"symbol":"__CFRUNLOOP_IS_CALLING_OUT_TO_AN_OBSERVER_CALLBACK_FUNCTION__","symbolLocation":23,"imageIndex":5},{"imageOffset":517562,"symbol":"__CFRunLoopDoObservers","symbolLocation":543,"imageIndex":5},{"imageOffset":514620,"symbol":"__CFRunLoopRun","symbolLocation":840,"imageIndex":5},{"imageOffset":512052,"symbol":"CFRunLoopRunSpecific","symbolLocation":562,"imageIndex":5},{"imageOffset":189926,"symbol":"RunCurrentEventLoopInMode","symbolLocation":292,"imageIndex":6},{"imageOffset":189258,"symbol":"ReceiveNextEventCommon","symbolLocation":594,"imageIndex":6},{"imageOffset":188645,"symbol":"_BlockUntilNextEventMatchingListInModeWithFilter","symbolLocation":70,"imageIndex":6},{"imageOffset":257965,"symbol":"_DPSNextEvent","symbolLocation":927,"imageIndex":4},{"imageOffset":251498,"symbol":"-[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:]","symbolLocation":1394,"imageIndex":4},{"imageOffset":195865,"symbol":"-[NSApplication run]","symbolLocation":586,"imageIndex":4},{"imageOffset":15511,"symbol":"NSApplicationMain","symbolLocation":817,"imageIndex":4},{"imageOffset":21806,"symbol":"start","symbolLocation":462,"imageIndex":7}]},{"id":23100496,"name":"com.apple.rosetta.exceptionserver","frames":[{"imageOffset":18756,"imageIndex":8},{"imageOffset":74720,"imageIndex":8},{"imageOffset":81496,"imageIndex":8}]},{"triggered":true,"id":23100508,"threadState":{"flavor":"x86_THREAD_STATE","rbp":{"value":13028212272},"r12":{"value":0},"rosetta":{"tmp2":{"value":140705619579316},"tmp1":{"value":533},"tmp0":{"value":140703195132771}},"rbx":{"value":105553116353408},"r8":{"value":0},"r15":{"value":39},"r10":{"value":50},"rdx":{"value":0},"rdi":{"value":0},"r9":{"value":0},"r13":{"value":276},"rflags":{"value":514},"rax":{"value":0},"rsp":{"value":13028212272},"r11":{"value":13028211793},"rcx":{"value":0},"r14":{"value":105553145040209},"rsi":{"value":520617996}},"queue":"com.apple.root.default-qos","frames":[{"imageOffset":525155,"symbol":"__chk_fail_overflow","symbolLocation":16,"imageIndex":9},{"imageOffset":67964,"symbol":"__strcpy_chk","symbolLocation":83,"imageIndex":9},{"imageOffset":80288,"imageIndex":10},{"imageOffset":8396,"symbol":"_dispatch_call_block_and_release","symbolLocation":12,"imageIndex":11},{"imageOffset":13079,"symbol":"_dispatch_client_callout","symbolLocation":8,"imageIndex":11},{"imageOffset":23036,"symbol":"_dispatch_queue_override_invoke","symbolLocation":787,"imageIndex":11},{"imageOffset":76482,"symbol":"_dispatch_root_queue_drain","symbolLocation":343,"imageIndex":11},{"imageOffset":78428,"symbol":"_dispatch_worker_thread2","symbolLocation":160,"imageIndex":11},{"imageOffset":12170,"symbol":"_pthread_wqthread","symbolLocation":256,"imageIndex":12},{"imageOffset":8023,"symbol":"start_wqthread","symbolLocation":15,"imageIndex":12}]},{"id":23100509,"frames":[{"imageOffset":141332,"imageIndex":8}]},{"id":23100519,"frames":[{"imageOffset":141332,"imageIndex":8}]},{"id":23100523,"frames":[{"imageOffset":141332,"imageIndex":8}]},{"id":23100533,"frames":[{"imageOffset":140705616603456,"imageIndex":13},{"imageOffset":6522,"symbol":"mach_msg_trap","symbolLocation":10,"imageIndex":14},{"imageOffset":7400,"symbol":"mach_msg","symbolLocation":56,"imageIndex":14},{"imageOffset":521568,"symbol":"__CFRunLoopServiceMachPort","symbolLocation":319,"imageIndex":5},{"imageOffset":515056,"symbol":"__CFRunLoopRun","symbolLocation":1276,"imageIndex":5},{"imageOffset":512052,"symbol":"CFRunLoopRunSpecific","symbolLocation":562,"imageIndex":5},{"imageOffset":1066343,"symbol":"CFRunLoopRun","symbolLocation":40,"imageIndex":5},{"imageOffset":10001,"symbol":"_irecv_event_handler","symbolLocation":353,"imageIndex":15},{"imageOffset":25825,"symbol":"_pthread_start","symbolLocation":125,"imageIndex":12},{"imageOffset":8043,"symbol":"thread_start","symbolLocation":15,"imageIndex":12}]},{"id":23100534,"frames":[{"imageOffset":140705616603456,"imageIndex":13},{"imageOffset":40282,"symbol":"__select","symbolLocation":10,"imageIndex":14},{"imageOffset":21781,"symbol":"socket_check_fd","symbolLocation":189,"imageIndex":16},{"imageOffset":22289,"symbol":"socket_receive_timeout","symbolLocation":36,"imageIndex":16},{"imageOffset":12415,"symbol":"receive_packet","symbolLocation":51,"imageIndex":16},{"imageOffset":8038,"symbol":"device_monitor","symbolLocation":154,"imageIndex":16},{"imageOffset":25825,"symbol":"_pthread_start","symbolLocation":125,"imageIndex":12},{"imageOffset":8043,"symbol":"thread_start","symbolLocation":15,"imageIndex":12}]},{"id":23100539,"frames":[{"imageOffset":141332,"imageIndex":8}]},{"id":23100540,"frames":[{"imageOffset":141332,"imageIndex":8}]},{"id":23100541,"frames":[{"imageOffset":141332,"imageIndex":8}]},{"id":23100542,"name":"com.apple.NSEventThread","frames":[{"imageOffset":140705616603456,"imageIndex":13},{"imageOffset":6522,"symbol":"mach_msg_trap","symbolLocation":10,"imageIndex":14},{"imageOffset":7400,"symbol":"mach_msg","symbolLocation":56,"imageIndex":14},{"imageOffset":521568,"symbol":"__CFRunLoopServiceMachPort","symbolLocation":319,"imageIndex":5},{"imageOffset":515056,"symbol":"__CFRunLoopRun","symbolLocation":1276,"imageIndex":5},{"imageOffset":512052,"symbol":"CFRunLoopRunSpecific","symbolLocation":562,"imageIndex":5},{"imageOffset":1755598,"symbol":"_NSEventThread","symbolLocation":132,"imageIndex":4},{"imageOffset":25825,"symbol":"_pthread_start","symbolLocation":125,"imageIndex":12},{"imageOffset":8043,"symbol":"thread_start","symbolLocation":15,"imageIndex":12}]}],
  "usedImages" : [
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703195951104,
    "size" : 40960,
    "uuid" : "bd2bd848-f9c9-35ff-9795-32d31977523d",
    "path" : "\/usr\/lib\/system\/libsystem_platform.dylib",
    "name" : "libsystem_platform.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703412285440,
    "size" : 135168,
    "uuid" : "e9f85a3e-0a29-31e0-a6b2-0c69c62098b6",
    "path" : "\/System\/Library\/Frameworks\/ImageIO.framework\/Versions\/A\/Resources\/libPng.dylib",
    "name" : "libPng.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703352045568,
    "CFBundleShortVersionString" : "3.3.0",
    "CFBundleIdentifier" : "com.apple.ImageIO",
    "size" : 2387968,
    "uuid" : "7449c64c-4a64-3d6e-b2d2-d5c3973e0c5b",
    "path" : "\/System\/Library\/Frameworks\/ImageIO.framework\/Versions\/A\/ImageIO",
    "name" : "ImageIO",
    "CFBundleVersion" : "2222.7.4"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703319482368,
    "CFBundleShortVersionString" : "1.11",
    "CFBundleIdentifier" : "com.apple.QuartzCore",
    "size" : 3223552,
    "uuid" : "e3b63002-28fd-32aa-adf5-ce5691c3a954",
    "path" : "\/System\/Library\/Frameworks\/QuartzCore.framework\/Versions\/A\/QuartzCore",
    "name" : "QuartzCore",
    "CFBundleVersion" : "964.35"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703239876608,
    "CFBundleShortVersionString" : "6.9",
    "CFBundleIdentifier" : "com.apple.AppKit",
    "size" : 15269888,
    "uuid" : "bcb46e9b-acd5-3b26-878f-a3988bc5df7e",
    "path" : "\/System\/Library\/Frameworks\/AppKit.framework\/Versions\/C\/AppKit",
    "name" : "AppKit",
    "CFBundleVersion" : "2113.60.148"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703196168192,
    "CFBundleShortVersionString" : "6.9",
    "CFBundleIdentifier" : "com.apple.CoreFoundation",
    "size" : 5246976,
    "uuid" : "32d2d187-4e52-376e-bc07-245a48c37e2b",
    "path" : "\/System\/Library\/Frameworks\/CoreFoundation.framework\/Versions\/A\/CoreFoundation",
    "name" : "CoreFoundation",
    "CFBundleVersion" : "1866"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703348649984,
    "CFBundleShortVersionString" : "2.1.1",
    "CFBundleIdentifier" : "com.apple.HIToolbox",
    "size" : 3096576,
    "uuid" : "95eab511-8fc1-353a-ac8a-26aa19032e2e",
    "path" : "\/System\/Library\/Frameworks\/Carbon.framework\/Versions\/A\/Frameworks\/HIToolbox.framework\/Versions\/A\/HIToolbox",
    "name" : "HIToolbox"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 8627740672,
    "size" : 442368,
    "uuid" : "f71fb3ca-5fcc-3577-9457-b047888a46d1",
    "path" : "\/usr\/lib\/dyld",
    "name" : "dyld"
  },
  {
    "source" : "P",
    "arch" : "arm64",
    "base" : 140703126970368,
    "size" : 196608,
    "uuid" : "ef33add1-6b70-3cc9-8bbc-c8544b609d2b",
    "path" : "\/usr\/libexec\/rosetta\/runtime",
    "name" : "runtime"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703194607616,
    "size" : 561152,
    "uuid" : "e8499aa8-6800-372f-bd48-82846d88c6cb",
    "path" : "\/usr\/lib\/system\/libsystem_c.dylib",
    "name" : "libsystem_c.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 4332064768,
    "CFBundleShortVersionString" : "1.0",
    "CFBundleIdentifier" : "spiral.Blackb0x",
    "size" : 241664,
    "uuid" : "cb03e3b2-652e-3944-b162-68820779405f",
    "path" : "\/Applications\/Blackb0x.app\/Contents\/MacOS\/Blackb0x",
    "name" : "Blackb0x",
    "CFBundleVersion" : "1"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703194066944,
    "size" : 290816,
    "uuid" : "5115c8ef-bc57-32db-91c6-71b61a79966e",
    "path" : "\/usr\/lib\/system\/libdispatch.dylib",
    "name" : "libdispatch.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703195852800,
    "size" : 49152,
    "uuid" : "f32b6d06-b156-3da0-b086-a31cf011362b",
    "path" : "\/usr\/lib\/system\/libsystem_pthread.dylib",
    "name" : "libsystem_pthread.dylib"
  },
  {
    "size" : 0,
    "source" : "A",
    "base" : 0,
    "uuid" : "00000000-0000-0000-0000-000000000000"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703195623424,
    "size" : 229376,
    "uuid" : "792406fe-2224-3c14-ba9f-f076fd7839d2",
    "path" : "\/usr\/lib\/system\/libsystem_kernel.dylib",
    "name" : "libsystem_kernel.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 4473663488,
    "size" : 32768,
    "uuid" : "ca5d9945-5f05-3afa-8262-1c210c9786f6",
    "path" : "\/Applications\/Blackb0x.app\/Contents\/Frameworks\/libirecovery.3.dylib",
    "name" : "libirecovery.3.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 4474187776,
    "size" : 28672,
    "uuid" : "c64b8859-b814-391d-b5df-40098b9eefea",
    "path" : "\/Applications\/Blackb0x.app\/Contents\/Frameworks\/libusbmuxd.dylib",
    "name" : "libusbmuxd.dylib"
  }
],
  "sharedCache" : {
  "base" : 140703192596480,
  "size" : 19331678208,
  "uuid" : "f3387257-f96f-3907-b94c-1d7f0ebef98b"
},
  "vmSummary" : "ReadOnly portion of Libraries: Total=939.8M resident=0K(0%) swapped_out_or_unallocated=939.8M(100%)\nWritable regions: Total=1.8G written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=1.8G(100%)\n\n                                VIRTUAL   REGION \nREGION TYPE                        SIZE    COUNT (non-coalesced) \n===========                     =======  ======= \nAccelerate framework               256K        2 \nActivity Tracing                   256K        1 \nCG backing stores                 2560K        4 \nCG image                           104K        8 \nColorSync                          216K       25 \nCoreAnimation                     20.6M       26 \nCoreGraphics                        12K        2 \nCoreUI image data                 1736K       14 \nFoundation                          16K        1 \nImage IO                         340.7M        1 \nKernel Alloc Once                    8K        1 \nMALLOC                           260.2M       43 \nMALLOC guard page                  192K        9 \nMALLOC_MEDIUM (reserved)         720.0M        6         reserved VM address space (unallocated)\nMALLOC_NANO (reserved)           384.0M        1         reserved VM address space (unallocated)\nRosetta Arena                     4096K        2 \nRosetta Generic                    948K      234 \nRosetta IndirectBranch             512K        1 \nRosetta JIT                      128.0M        1 \nRosetta Return Stack               220K       22 \nRosetta Thread Context             220K       22 \nSTACK GUARD                         24K        6 \nStack                             13.1M       11 \nStack Guard                       56.0M        5 \nVM_ALLOCATE                       4900K       24 \nVM_ALLOCATE (reserved)              20K        4         reserved VM address space (unallocated)\n__CTF                               756        1 \n__DATA                            19.3M      321 \n__DATA_CONST                      12.4M      175 \n__DATA_DIRTY                       542K      103 \n__FONT_DATA                          4K        1 \n__LINKEDIT                       705.2M       20 \n__OBJC_RO                         82.8M        1 \n__OBJC_RW                         3200K        2 \n__TEXT                           234.6M      335 \n__UNICODE                          592K        1 \ndyld private memory               1024K        1 \nmapped file                        5.2G      445 \nshared memory                      820K       15 \nunshared pmap                     8880K        6 \n===========                     =======  ======= \nTOTAL                              8.1G     1903 \nTOTAL, minus reserved VM space     7.0G     1903 \n",
  "legacyInfo" : {
  "threadTriggered" : {
    "queue" : "com.apple.root.default-qos"
  }
},
  "trialInfo" : {
  "rollouts" : [
    {
      "rolloutId" : "5fc94383418129005b4e9ae0",
      "factorPackIds" : {

      },
      "deploymentId" : 240000504
    },
    {
      "rolloutId" : "61301e3a61217b3110231469",
      "factorPackIds" : {
        "SIRI_FIND_MY_CONFIGURATION_FILES" : "6348493aa52bb16adc4e4d06"
      },
      "deploymentId" : 240000023
    }
  ],
  "experiments" : [

  ]
}
}

Model: MacBookPro17,1, BootROM 7459.141.1, proc 8:4:4 processors, 16 GB, SMC 
Graphics: Apple M1, Apple M1, Built-In
Display: Color LCD, 2560 x 1600 Retina, Main, MirrorOff, Online
Memory Module: LPDDR4
AirPort: Wi-Fi, wl0: Mar 23 2022 19:57:59 version 18.60.27.0.7.8.129 FWID 01-570be953
Bluetooth: Version (null), 0 services, 0 devices, 0 incoming serial ports
Network Service: Wi-Fi, AirPort, en0
USB Device: USB31Bus
USB Device: USB3.2 Hub
USB Device: USB3.0 Card Reader
USB Device: USB2.1 Hub
USB Device: AppleTV
USB Device: USB31Bus
Thunderbolt Bus: MacBook Pro, Apple Inc.
Thunderbolt Bus: MacBook Pro, Apple Inc.
citystrawman commented 1 year ago

I've same issue on my 1469. The blackb0x software already said "Done..." but when I plugged apple tv to monitor it does not have any changes

NSSpiral commented 1 year ago

The jailbreak still works, I'm updating blackb0x to be easier to use. If you do a clean restore to the latest firmware and then run blackb0x it should work. I haven't tested it on an M1 mac yet so that might be why you're having problems.

sbond75 commented 1 year ago

Same issue, including crash after opening the app again, on Catalina x86 mac

sbond75 commented 1 year ago

The crash log mentions an issue loading a png? It contains things like "PNGReadPlugin"

DinBan commented 7 months ago

It is not working at all for me. It says that device a1469 jailbroken but it absolutely same as original and it is not working on fresh restored firmware also. I\m do it on M1 Air, but all looks like works ok, but nothing... Is it just fake, right? Any pictures or videos of this software working results? Anyone? Thanx

antonnnnnn commented 6 months ago

same here :(

marrakeshn commented 3 months ago

The jailbreak still works, I'm updating blackb0x to be easier to use. If you do a clean restore to the latest firmware and then run blackb0x it should work. I haven't tested it on an M1 mac yet so that might be why you're having problems.

Finally did it on ATV2 & ATV3, macOS Ventura, M1 Pro. Restore them first, then enter DFU & next connect to Mac, right click blackb0x etc...

Kodi appear only on ATV2, no NitoTV on both(((

NSSpiral commented 3 months ago

New package manager with apps/tweaks is coming, no ETA atm

On Wed, Mar 6, 2024 at 11:36 PM Mark Nesvietiei @.***> wrote:

The jailbreak still works, I'm updating blackb0x to be easier to use. If you do a clean restore to the latest firmware and then run blackb0x it should work. I haven't tested it on an M1 mac yet so that might be why you're having problems.

Finally did it on ATV2 & ATV3, macOS Ventura, M1 Pro. Restore them first, then enter DFU & next connect to Mac, right click blackb0x etc...

Kodi appear only on ATV2, no NitoTV on both(((

— Reply to this email directly, view it on GitHub https://github.com/NSSpiral/Blackb0x/issues/135#issuecomment-1980777382, or unsubscribe https://github.com/notifications/unsubscribe-auth/AHWXOR5T24KUXP3ASTEXGZ3YW4EWJAVCNFSM6AAAAAARMKIR6WVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSOBQG43TOMZYGI . You are receiving this because you commented.Message ID: @.***>