ios_examiner.py - undelete returns TypeError: 'NoneType' object is not iterable

[GoogleCodeExporter]

What steps will reproduce the problem?
1. $ python python_scripts/ios_examiner.py 
2. / bruteforce
3. / nand_dump nand.bin
4. / exit
5. $ python python_scripts/ios_examiner.py nand.bin keys.plist
6. / undelete

What is the expected output? What do you see instead?

Expected output: processing done and got recovered files. 
Actual output: During the progress of "Carving attribute file for file keys",  
following error occurred then no file created.

Traceback (most recent call last):
  File "python_scripts/ios_examiner.py", line 366, in <module>
    main()
  File "python_scripts/ios_examiner.py", line 363, in main
    ExaminerShell(image).cmdloop("")
  File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/cmd.py", line 142, in cmdloop
    stop = self.onecmd(line)
  File "/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/cmd.py", line 219, in onecmd
    return func(arg)
  File "python_scripts/ios_examiner.py", line 229, in do_undelete
    self.carver.carveDeletedFiles_fast(z, f)
  File "/Volumes/DAT/tmp/iphone-dataprotection/python_scripts/nand/carver.py", line 213, in carveDeletedFiles_fast
    self.carveKeys()
  File "/Volumes/DAT/tmp/iphone-dataprotection/python_scripts/nand/carver.py", line 98, in carveKeys
    return self.carveFile(self.volume.xattrFile, self._attributesFileCallback, lbas)
  File "/Volumes/DAT/tmp/iphone-dataprotection/python_scripts/nand/carver.py", line 47, in carveFile
    for vpn in self.ftlhax.get(self.first_lba+i):
TypeError: 'NoneType' object is not iterable

What version of the product are you using? On what operating system?
OS X version : 10.7.5
XCode version : 4.2.1
Tools revision : 3bd0f8f80b8f tip

Please provide any additional information below.

Target iDevice is iPod Touch 4 and iOS 5.1.1. 

Basic information is as follows:
(...snip)
NAND geometry : 8GB (2 CEs (1 physical banks/CE) of 4152 blocks of 128 pages of 
8192 bytes data, 12 bytes metdata)
Image size matches expected size, looks ok
Searching for special pages...
Found DEVICEUNIQUEINFO, NANDDRIVERSIGN, DEVICEINFOBBT special pages in CE 0
NAND signature 0x43313100 flags 0x10006 withening=1, epoch=
Effaceable generation 64
Effaceable CRC OK
Found effaceable lockers in ce 1 block 1 page 96
Lockers : BAG1, DONE, Dkey, LwVM
Found DEVICEUNIQUEINFO, serial number=XXXXXX
Using VSVFL
VSVFL context open OK
YaFTL context OK, version=CX01 maxIndexUsn=230922 context usn=230922
LwVM header CRC OK
Keybag unlocked with passcode key
cprotect version : 4 (iOS 5)
iOS version:  5.1.1
Keybag state: unlocked
(

Original issue reported on code.google.com by kazam...@gmail.com on 6 Oct 2012 at 1:31

[GoogleCodeExporter]

This issue was updated by revision 5bcac22b4bc8.

Original comment by jean.sig...@gmail.com on 6 Oct 2012 at 1:51

[GoogleCodeExporter]

Try updating to the latest revision (hg pull && hg update), this error should 
be fixed now. Thanks.

Original comment by jean.sig...@gmail.com on 6 Oct 2012 at 1:52

• Changed state: Accepted

[GoogleCodeExporter]

I tried again using latest revision and undelete finished successfully. Thanks 
for prompt response.

Original comment by kazam...@gmail.com on 6 Oct 2012 at 10:55

[GoogleCodeExporter]

Original comment by jean.sig...@gmail.com on 14 Jan 2013 at 3:14

• Changed state: Fixed