Add support for new taDFU mode (iPhone 14 family)

libimobiledevice / libirecovery

Library and utility to talk to iBoot/iBSS via USB on Mac OS X, Windows, and Linux

https://libimobiledevice.org

GNU Lesser General Public License v2.1

550 stars 207 forks source link

Add support for new taDFU mode (iPhone 14 family) #106

Open nikias opened 1 year ago

nikias commented 1 year ago

This is to track implementation progress for the new taDFU mode that is uses with newer devices like iPhone 14. Thanks to some initial analysis by @siguza, we already know a few things:

USB VID: 0x05ac PID: 0x1881
Initial packet to send to pipe 6 (ep3): { 0x01, 0x10, 0xa0, 0x10, 0x00, 0x00, 0x01, 0x04, 0x00, 0x00, 0x00, 0x00 }
read back from pipe 5 (ep 3) will yield a buffer that contains a USB descriptor, with NONC, SNON values, and CPID, BDID, etc...

ChinaGuCheng commented 1 year ago

It seems to work. Do you know how to send files

Siguza commented 1 year ago

Dumping this here: main.m.gz
This reads and prints a bunch of DFU descriptors.
There's also an #if 0 block that I think correctly uploads an image to DFU, but so far I haven't been able to boot iBSS. My current theory is that there's actually something missing in the img4, possibly related to the <key>MemoryMap</key> key in BuildManifest?

weikaizu commented 1 year ago

May I ask, has this problem been solved?

weikaizu commented 1 year ago

@nikias

nikias commented 10 months ago

I pushed a few commits, thanks to the work of @LinusHenze and @tihmstar we have support for it for macOS and Linux. Windows is still missing.