p0larisdev / untether

wip untether for p0laris
64 stars 8 forks source link

iPad 2 / iPad Mini Support? #2

Open a-hurst opened 2 years ago

a-hurst commented 2 years ago

Hi there!

First of all, thanks so much for all your work on a better jailbreak for these old iDevices! Very nice to see legacy hardware getting some love.

I noticed in the README that the WIP untether currently only works on an iPhone 4S since that's all you have the offsets for. Is the limiting factor for adding other devices lack of access to hardware, or does each additional device involve a ton of extra effort? I have an iPad 2 and original iPad Mini lying around that I could test things on, just wondering if that could be any help.

Cheers,

Austin

spv420 commented 2 years ago

First of all, no problem, just having some fun hacking some shit. :P

Second of all, it isn't a lack of access to hardware, just a lack of effort mostly. Though IIRC the offsets should™️ work for iPad2,1, idk tho.

It's not a ton of effort to make work though, there's at most like 10 offsets (besides ROP stuff which is the same for most of the builds currently being targeted), all of which are in the shared cache, and aren't too hard to find.

CatsLover2006 commented 2 years ago

I also have an iPad 2 (iPad2,4) that I've always wanted a 9.3.5 untether for, maybe I'll see if I can hackjob in the offsets for this model. Just to save me some time, could you tell me where are the offsets stored? Edit: Would I be correct in guessing that the offsets are in src/gen/patchfinder.c?

thequantumcog commented 1 year ago

I also have an iPad 2 (iPad2,4) that I've always wanted a 9.3.5 untether for, maybe I'll see if I can hackjob in the offsets for this model. Just to save me some time, could you tell me where are the offsets stored? Edit: Would I be correct in guessing that the offsets are in src/gen/patchfinder.c?

Were you successful?

spv420 commented 1 year ago

I also have an iPad 2 (iPad2,4) that I've always wanted a 9.3.5 untether for, maybe I'll see if I can hackjob in the offsets for this model. Just to save me some time, could you tell me where are the offsets stored? Edit: Would I be correct in guessing that the offsets are in src/gen/patchfinder.c?

iirc src/gen/patchfinder.c finds (some?) of the ROP offsets