Data abort at ml_io_write, iPhone 11 running iOS 15.3.1

[LIJI32]

Running the exploit on an iPhone 11 running iOS 15.3.1 semi-consistently results in a data abort panic inside ml_io_write. In a few other cases, I seem to get an "Unexpected fault in kernel static region" panic in a function I could not identify yet (It consists of an LDR X0, [X0] instruction, which crashes, followed a RET, where X0 is some page-aligned address that doesn't seem to be relative to the kernel base). Last thing I manage to see in the log before the phone reboots is Pos 26:. Any quick pointers (no pun intended) to where should I be looking at to fix this? Two sample panics included.

panic-full-2022-11-01-182210.000.ips panic-full-2022-11-01-182314.0002.ips

[Thomas20090425]

I seems to have the same problem on iPhone 11 Pro on the same os, but strangely enough I didn’t see any panic-full log.

[zqidev]

Seems to be the same issue as #39 and #13. Anything 15.1-15.3 seems to be very unstable. Just a question - how do you / what application do you use to analyze kernel panics? I’ve been trying to learn how to, but I can’t find any information online.

[zqidev]

I seems to have the same problem on iPhone 11 Pro on the same os, but strangely enough I didn’t see any panic-full log.

This might be a dumb question, but did you try scrolling down in the logs menu? Privacy & Security -> Analytics & Improvements -> Analytics Data. There should be a kernel panic around the “p” section since it is in alphebetical order. It would be quite strange for your device to abruptly reboot without any logs.

[Thomas20090425]

I seems to have the same problem on iPhone 11 Pro on the same os, but strangely enough I didn’t see any panic-full log.

This might be a dumb question, but did you try scrolling down in the logs menu? Privacy & Security -> Analytics & Improvements -> Analytics Data. There should be a kernel panic around the “p” section since it is in alphebetical order. It would be quite strange for your device to abruptly reboot without any logs.

I forgot to give you an update on it, so it turns out that there isn’t any log for the first few abnormal restart, I believe is really strange, but then there are panic full logs! Which is normal, and I tried to either screenshot the last few lines of code or screen record, neither of them got save to the iPhone! But thanks for you suggestion I did check those logs, but found none before.

[zqidev]

Sounds good. Glad I could help :) If you wish, you could send your logs so I can see if we are all experiencing the same issue!

[vadim-a-yegorov]

@LinusHenze What do you think about it? I have the same issue, wifi is off, ios 15.3.1, iphone 12 A2399

Kernel panic on “Patchfinding” step

[vadim-a-yegorov]