search

ginsudev / WDBFontOverwrite

Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.
https://notnow.dev/zhuowei
886 stars 72 forks source link

Remove 16k woff/ttc font padding #52

Closed zhuowei closed 1 year ago

zhuowei commented 1 year ago

Ian Beer's exploit can write all 16k of each page, so we don't need to pad the last byte of every 16k anymore.

I kept the built-in fonts padded for now: I can switch them to regular TTF in a follow-up commit if you want.

Tested by importing HannaSoft by evynw and confirming that the overwrite still works.

Note that this removes the TTC fix, since it shouldn't be needed anymore, but the UI options are still there. I can remove them as well, if you want, or you can if you want.

ginsudev commented 1 year ago

I'll work on removing the UI stuff now, is switching the built-in fonts back to TTF a big task?

zhuowei commented 1 year ago

It shouldn't be: I think I only need to change this to .ttf from woff2 and remove the padding step. https://github.com/ginsudev/WDBFontOverwrite/blob/87de0fabf510f586e11c881cde1ef3a2dd318c3c/repackfonts/make_woff2src.sh#L27

the current woff2 fonts should still work with this, though, so I don't think it's urgent.

ahyeonss commented 1 year ago

File "helvetica.ttf" cannot be applied The message "font too big" comes up. Why is it like this?