search

libimobiledevice / idevicerestore

Restore/upgrade firmware of iOS devices
https://libimobiledevice.org
GNU Lesser General Public License v3.0
1.31k stars 391 forks source link

iphone SE A1723 failed to restore FDR 0x175fba0 waiting for message #417

Open jeremiegithub opened 3 years ago

jeremiegithub commented 3 years ago

Hi. After an ios update, Iphone se A1723 keeps booting in recovery mode. Update/restore with itunes failed stuck on "verifying iphone restore" and seems idevicesrestore does the same: FDR Sent 52 bytes FDR 0xb3a00c88 waiting for message... ERROR: Unable to receive message from FDR 0xb3a00c88 (-2). 0/2 bytes FDR 0xb3a00c88 terminating... FDR 0x175fba0 timeout waiting for command FDR 0x175fba0 waiting for message... Enters in a loop here !!!??? Any help would be appreciate thanks ! Jérémie.

Fr translation here in case: Bonjour. Après une mise à jour mon iphone se a1723 est bloqué en mode récupération/restauration. J'ai essayé de restaurer ios via itunes, mais ce dernier reste bloqué sur "vérification de la restauration auprès d'apple". On dirait que idevicerestore fait la même chose. Merci d'avance pour votre aide.

jeremiegithub commented 3 years ago

edit: don't want to jailbreak nor to hack anything (unless I have no choice), just make it work again !

nikias commented 3 years ago

@jeremiegithub if you run it again with -d does it print a "previous restore log" ?

jeremiegithub commented 3 years ago

Hi. Thanks a lot for helping. Here is the log:

pi@raspberrypi:/usr/local/bin $ sudo idevicerestore -d -y -e -R /home/pi/iphone/img/latest > /home/pi/iphone/log.txt irecv_event_cb: device 001c6dca102b60a6 (udid: N/A) connected in DFU mode opening device 05ac:1227... found device with ECID 001c6dca102b60a6 Setting to configuration 1 Setting to interface 0:0 opening device 05ac:1227... found device with ECID 001c6dca102b60a6 Setting to configuration 1 Setting to interface 0:0 Getting device's ECID for TSS request NOTE: Unable to find BbCalibrationManifestKeyHash node NOTE: Unable to find BbFactoryActivationManifestKeyHash node NOTE: Unable to find BbSkeyId node DEBUG: Applying restore request rules for entry AOP DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry Ap,SystemVolumeCanonicalMetadata DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry AppleLogo DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry BatteryCharging0 DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry BatteryCharging1 DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry BatteryFull DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry BatteryLow0 DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry BatteryLow1 DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry BatteryPlugin DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry DeviceTree DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry KernelCache DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry LLB DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry OS DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry RecoveryMode DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry RestoreDeviceTree DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry RestoreKernelCache DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry RestoreLogo DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry RestoreRamDisk DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry RestoreSEP DEBUG: Adding ESEC=true to TSS entry DEBUG: Adding EPRO=true to TSS entry DEBUG: Applying restore request rules for entry RestoreTrustCache DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry SEP DEBUG: Adding ESEC=true to TSS entry DEBUG: Adding EPRO=true to TSS entry DEBUG: Applying restore request rules for entry StaticTrustCache DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry SystemVolume DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry ftap DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: No Digest data, using empty value for entry ftap DEBUG: Applying restore request rules for entry ftsp DEBUG: Adding ESEC=true to TSS entry DEBUG: Adding EPRO=true to TSS entry DEBUG: No Digest data, using empty value for entry ftsp DEBUG: Applying restore request rules for entry iBEC DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry iBSS DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry iBoot DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: Applying restore request rules for entry rfta DEBUG: Adding EPRO=true to TSS entry DEBUG: Adding ESEC=true to TSS entry DEBUG: No Digest data, using empty value for entry rfta DEBUG: Applying restore request rules for entry rfts DEBUG: Adding ESEC=true to TSS entry DEBUG: Adding EPRO=true to TSS entry DEBUG: No Digest data, using empty value for entry rfts opening device 05ac:1227... found device with ECID 001c6dca102b60a6 Setting to configuration 1 Setting to interface 0:0 DEBUG: tss_response_get_path_by_entry: No entry 'iBSS' in TSS response NOTE: No path for component iBSS in TSS, will fetch from build_identity Tag found Waiting for device to disconnect... irecv_event_cb: device 001c6dca102b60a6 (udid: N/A) disconnected Waiting for device to reconnect... irecv_event_cb: device 001c6dca102b60a6 (udid: N/A) connected in DFU mode opening device 05ac:1227... found device with ECID 001c6dca102b60a6 Setting to configuration 1 Setting to interface 0:0 Setting to configuration 1 DEBUG: tss_response_get_path_by_entry: No entry 'iBEC' in TSS response NOTE: No path for component iBEC in TSS, will fetch from build_identity Tag found Waiting for device to disconnect... irecv_event_cb: device 001c6dca102b60a6 (udid: N/A) disconnected Waiting for device to reconnect in recovery mode... irecv_event_cb: device 001c6dca102b60a6 (udid: N/A) connected in Recovery mode opening device 05ac:1281... found device with ECID 001c6dca102b60a6 Setting to configuration 1 Setting to interface 0:0 DEBUG: tss_response_get_path_by_entry: No entry 'RestoreLogo' in TSS response NOTE: No path for component RestoreLogo in TSS, will fetch from build_identity Tag found DEBUG: RestoreTrustCache is loaded by iBoot. DEBUG: tss_response_get_path_by_entry: No entry 'RestoreTrustCache' in TSS response NOTE: No path for component RestoreTrustCache in TSS, will fetch from build_identity Tag found DEBUG: tss_response_get_path_by_entry: No entry 'RestoreRamDisk' in TSS response NOTE: No path for component RestoreRamDisk in TSS, will fetch from build_identity Tag found DEBUG: tss_response_get_path_by_entry: No entry 'RestoreDeviceTree' in TSS response NOTE: No path for component RestoreDeviceTree in TSS, will fetch from build_identity Tag found DEBUG: tss_response_get_path_by_entry: No entry 'RestoreSEP' in TSS response NOTE: No path for component RestoreSEP in TSS, will fetch from build_identity Tag found DEBUG: tss_response_get_path_by_entry: No entry 'RestoreKernelCache' in TSS response NOTE: No path for component RestoreKernelCache in TSS, will fetch from build_identity Tag found DEBUG: Waiting for device to disconnect... irecv_event_cb: device 001c6dca102b60a6 (udid: N/A) disconnected idevice_event_cb: device 001c6dca102b60a6 (udid: ffffffffffffffffffffffffffffffff00000001) connected in restore mode restore_is_current_device: Connected to com.apple.mobile.restored, version 15 Connecting to FDR client at port 1082 About to do ctrl handshake FDR sending 89 bytes: FDR Sent 89 bytes FDR Received 105 bytes Ctrl handshake done (ConnPort = 49159) FDR 0x1a2e200 waiting for message... DEBUG: tss_response_get_path_by_entry: No entry 'LLB' in TSS response NOTE: Could not get LLB path from TSS data, will fetch from build identity Tag found Tag found Tag found Tag found Tag found Tag found Tag found Tag found Tag found Tag found Tag found Tag found Tag found FDR 0x1a2e200 got sync message Connecting to FDR client at port 49159 FDR Received 131 bytes Got device identifier 6b8b4567327b23c6643c9869 FDR connected in reply to sync message, starting command thread FDR 0x1a2e200 waiting for message... FDR 0xb3a00c30 waiting for message... FDR 0xb3a00c30 got plist message FDR Received 59 bytes FDR sending 52 bytes: FDR Sent 52 bytes FDR 0xb3a00c30 waiting for message... ERROR: Unable to receive message from FDR 0xb3a00c30 (-2). 0/2 bytes FDR 0xb3a00c30 terminating... FDR 0x1a2e200 got sync message Connecting to FDR client at port 49159 FDR Received 131 bytes Got device identifier 6633487374b0dc5119495cff FDR connected in reply to sync message, starting command thread FDR 0x1a2e200 waiting for message... FDR 0xb3a00d90 waiting for message... FDR 0xb3a00d90 got plist message FDR Received 59 bytes FDR sending 52 bytes: FDR Sent 52 bytes FDR 0xb3a00d90 waiting for message... ERROR: Unable to receive message from FDR 0xb3a00d90 (-2). 0/2 bytes FDR 0xb3a00d90 terminating... FDR 0x1a2e200 got sync message Connecting to FDR client at port 49159 FDR Received 131 bytes Got device identifier 2ae8944a625558ec238e1f29 FDR connected in reply to sync message, starting command thread FDR 0x1a2e200 waiting for message... FDR 0xb3a00c30 waiting for message... FDR 0xb3a00c30 got plist message FDR Received 59 bytes FDR sending 52 bytes: FDR Sent 52 bytes FDR 0xb3a00c30 waiting for message... ERROR: Unable to receive message from FDR 0xb3a00c30 (-2). 0/2 bytes FDR 0xb3a00c30 terminating... FDR 0x1a2e200 got sync message Connecting to FDR client at port 49159 FDR Received 131 bytes Got device identifier 46e87ccd3d1b58ba507ed7ab FDR connected in reply to sync message, starting command thread FDR 0x1a2e200 waiting for message... FDR 0xb3a00d90 waiting for message... FDR 0xb3a00d90 got plist message FDR Received 59 bytes FDR sending 52 bytes: FDR Sent 52 bytes FDR 0xb3a00d90 waiting for message... ERROR: Unable to receive message from FDR 0xb3a00d90 (-2). 0/2 bytes FDR 0xb3a00d90 terminating... FDR 0x1a2e200 got sync message Connecting to FDR client at port 49159 FDR Received 131 bytes Got device identifier 2eb141f241b71efb79e2a9e3 FDR connected in reply to sync message, starting command thread FDR 0x1a2e200 waiting for message... FDR 0xb3a00c30 waiting for message... FDR 0xb3a00c30 got plist message FDR Received 59 bytes FDR sending 52 bytes: FDR Sent 52 bytes FDR 0xb3a00c30 waiting for message... ERROR: Unable to receive message from FDR 0xb3a00c30 (-2). 0/2 bytes FDR 0xb3a00c30 terminating... FDR 0x1a2e200 got sync message Connecting to FDR client at port 49159 FDR Received 131 bytes Got device identifier 7545e146515f007c5bd062c2 FDR connected in reply to sync message, starting command thread FDR 0x1a2e200 waiting for message... FDR 0xb3a00d90 waiting for message... FDR 0xb3a00d90 got plist message FDR Received 59 bytes FDR sending 52 bytes: FDR Sent 52 bytes FDR 0xb3a00d90 waiting for message... ERROR: Unable to receive message from FDR 0xb3a00d90 (-2). 0/2 bytes FDR 0xb3a00d90 terminating... FDR 0x1a2e200 got sync message Connecting to FDR client at port 49159 FDR Received 131 bytes Got device identifier 122008544db127f80216231b FDR connected in reply to sync message, starting command thread FDR 0x1a2e200 waiting for message... FDR 0xb3a00c30 waiting for message... FDR 0xb3a00c30 got plist message FDR Received 59 bytes FDR sending 52 bytes: FDR Sent 52 bytes FDR 0xb3a00c30 waiting for message... ERROR: Unable to receive message from FDR 0xb3a00c30 (-2). 0/2 bytes FDR 0xb3a00c30 terminating... FDR 0x1a2e200 got sync message Connecting to FDR client at port 49159 FDR Received 131 bytes Got device identifier 1f16e9e81190cde766ef438d FDR connected in reply to sync message, starting command thread FDR 0x1a2e200 waiting for message... FDR 0xb3a00d90 waiting for message... FDR 0xb3a00d90 got plist message FDR Received 59 bytes FDR sending 52 bytes: FDR Sent 52 bytes FDR 0xb3a00d90 waiting for message... ERROR: Unable to receive message from FDR 0xb3a00d90 (-2). 0/2 bytes FDR 0xb3a00d90 terminating... FDR 0x1a2e200 timeout waiting for command FDR 0x1a2e200 waiting for message... No data to read (timeout) FDR 0x1a2e200 timeout waiting for command FDR 0x1a2e200 waiting for message... No data to read (timeout) FDR 0x1a2e200 timeout waiting for command FDR 0x1a2e200 waiting for message... ERROR: Could not read data (-256). Aborting. idevice_event_cb: device 001c6dca102b60a6 (udid: ffffffffffffffffffffffffffffffff00000001) disconnected FDR 0x1a2e200 terminating... ERROR: Unable to restore device

jeremiegithub commented 3 years ago

I see no track of previous restore tries.

jeremiegithub commented 3 years ago

strange thing, any idevicexxx commands ends to no device found whatever i'm in recovery or dfu mode but irecovery is able to : pi@raspberrypi:/usr/local/bin $ irecovery -q CPID: 0x8003 CPRV: 0x01 BDID: 0x02 ECID: 0x001c6dca102b60a6 CPFM: 0x03 SCEP: 0x01 IBFL: 0x1d SRTG: N/A SRNM: FDDWPFG9HTVL IMEI: N/A NONC: 048cad03bc6da99e51317958ec8ee885ea139b17 SNON: c714d1bfc22065e89f83282b6da7282cdd54d306 MODE: Recovery PRODUCT: iPhone8,4 MODEL: n69ap NAME: iPhone SE