unc0ver 8.0.2 ios 14.4 kernel panic when launching game

[pianistrevor]

Describe the bug Unc0ver 8.0.2 with Fugu14 kernel panic on iOS 14.4

To Reproduce Steps to reproduce the behavior:

1. Untethered Jailbreak, no need to install tweaks
2. Launch Fruit Ninja 2 game from App Store
3. Wait 10 seconds or so. Game freezes, kernel panic

Device (please complete the following information):

• iOS Version: 14.4
• iOS Device: iPhone 12 Pro
• unc0ver Version: 8.0.2

Place an "x" between the brackets if true:

• [ ] this is a bug others will be able to reproduce (I see no reason why it couldn't, I just don't know)
• [x] this issue is present with all tweaks uninstalled(except for default packages) or disabled
• [ ] this issue is present after a rootfs restore
• [x] this issue is present on the latest version of unc0ver

Logs panic-full-2022-01-24-153254.000[30862].txt

[pianistrevor]

online-auth-agent-2022-01-24-153329.000.txt 2022-01-24 23_54_58.txt I should also note that this crash log in CrashReporter popped up at the same time, and mentions KERN_PROTECTION_FAILURE, so I'm guessing something about this process triggered a memory leak in the kernel zone.

[badger200]

I started getting the exact same panics in launchd pid 1 when opening Real Racing 3 v10.42 (current) sometimes just on the game menu but ESPECIALLY when clicking video ads. It typically panics on the very first video ad. I cannot ever watch more than about 3-5 ads before a panic.

A lot of the panic logs mention use after free in zone for panicked task launchd pid 1.

I have carefully tried to determine and revert 1 by 1 all changes I made around the time period these panics started but I cannot find the culprit. It panics even with Tweak Injection Disabled!

It's a disaster and I'm kicking myself because I wish I could go back in time and pinpoint when was precisely the last time it worked panic free, to help isolate what exactly was the change that caused the panics to start.

Have you had any progress? I rarely get panics anywhere else except Real Racing 3 video ads.

If anyone knows how to debug kernel panics I'm eager for any tips where I can start.

[badger200]

Bad news: I just installed Fruit Ninja 2 to see if it would panic like you say, and precisely as you describe: kernel panic about 10 seconds after app launch! It was merely displaying the very first intro/welcome animation screen, game hadn't even really started yet.

I badly wish I could go back in time to 2 wks ago when I wasn't having kernel panics on Real Racing 3, so I could try Fruit Ninja 2 back then...

[snarkywit]

ALWAYS TEST a Pointer Var before Freeing the value.

if( PrrVar != 0) free( PtrVar);

error (PtrVar);

Sent from ProtonMail mobile

-------- Original Message -------- On Jun 12, 2022, 06:31, badger200 wrote:

I started getting the exact same panics in launchd pid 1 when opening Real Racing 3 v10.42 (current) sometimes just on the game menu but ESPECIALLY when clicking video ads. It typically panics on the very first video ad. I cannot ever watch more than about 3-5 ads before a panic.

A lot of the panic logs mention use after free in zone for panicked task launchd pid 1.

I have carefully tried to determine and revert 1 by 1 all changes I made around the time period these panics started but I cannot find the culprit. It panics even with Tweak Injection Disabled!

It's a disaster and I'm kicking myself because I wish I could go back in time and pinpoint when was precisely the last time it worked panic free, to help isolate what exactly was the change that caused the panics to start.

Have you had any progress? I rarely get panics anywhere else except Real Racing 3 video ads.

If anyone knows how to debug kernel panics I'm eager for any tips where I can start.

— Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you are subscribed to this thread.Message ID: @.***>

[alian2plus]

I’m having the issue with iPhone XS Max and all unc0ver versions, iOS 14.4.2, especially when ads pops up or browsing safari.

[badger200]

@alian2plus Does Fruit Ninja 2 crash before you can reach the actual gameplay of any level?

[badger200]

In my research of this, I saw a kernel panic that suggested this occurs with the Apple Neural Engine, I saw a bunch of "ANE____" calls in the panic trace. I can't be certain though.

I desperately wish there was a way to temporarily disable the Neural Engine and test that. Apple tells developers there's no way to know if your code will execute on CPU, GPU, or Neural, as it handles it automatically and uses its own judgment.

So if there was a way to disable the ANE, theoretically everything should continue to function but just get executed on CPU or GPU.

I would be ecstatic if I had the option of disabling ANE and getting rock solid stability, I don't mind a performance trade off.

[21mtd]

iPhone XS, iOS 14.6, unc0ver 8.0.2, having this same problem.

I don't play games on mobile at all, reboot can happen at anytime anywhere, even with system-wide Adblock + adblock tweaks for apps. But I've noticed it usually happens around 2 or 3 days uptime mark.

I tested playing Fruit Ninja 2 and Real Racing 3 for a few minutes/races, still no ads at all. But after closing and remove the games, reboot happened.

Daemons that usually crash are: companionappd, nanotimekitcompaniond, online-auth-agent, clipserviced.

Recently, I've tried PaiBloxx with MyBloxx PAC to block ads and only companionappd crashed when I was unlocking the phone to open Spotify (Premium). (phone still rebooted)

companionappd-2023-07-05-150833.0002.symbolicated.txt

I know we can just rejailbreak but I get super anxious everytime when my phone getting to 3 days uptime.

Do you guys have a temporary solution or better adblocks?

[alian2plus]

@alian2plus Does Fruit Ninja 2 crash before you can reach the actual gameplay of any level?

Will it depends, for you it was fruit Ninja for me was with deferent other games. The most important question is, have you ever replaced you iPhone screen or battery?

Sorry for the late respond

[21mtd]

a little update

I stopped using Res Setter and got 5 days uptime instead of 3 days, then my apps were blank from opening except the one I was using at the time (YouTube) which forced me to userspace restart, then I got into respring loop for 10 minutes which forced me to rejailbreak. Checked crashlogs, backboardd and online-auth-agent crashed.

Currently using Re:Scale 2 instead of Res Setter and on day 4 uptime,

Wonder if you guys are using any resolution changers, could be the cause/small factor of crashes

[alian2plus]

a little update

I stopped using Res Setter and got 5 days uptime instead of 3 days, then my apps were blank from opening except the one I was using at the time (YouTube) which forced me to userspace restart, then I got into respring loop for 10 minutes which forced me to rejailbreak. Checked crashlogs, backboardd and online-auth-agent crashed.

Currently using Re:Scale 2 instead of Res Setter and on day 4 uptime,

Wonder if you guys are using any resolution changers, could be the cause/small factor of crashes

I'm pretty sure it has something to do with iPhone screen either the iPhone current screen doesn't hold the actual resolution or it's already a corrupted screen.

I used to have a genuine screen in the beginning but it somehow got cracked and then changed it with a cheap one and from there the panics has had started, later on I've changed it with another good one that is less good than genuine one, the panics started to get less and less but still I wasn't amused by the sudden panics after one week, week ago i bought a genuine one and guess what? No panics when playing the games that i used to play with before. I'll keep updating if it has completed 2 weeks from now and of course i would share if got fail.

[badger200]

@alian2plus No, it's the original iPad screen and never used a res setter.

[alian2plus]

@alian2plus No, it's the original iPad screen and never used a res setter.

Well, unfortunately i was all the way wrong and i had sudden reboot when opening apps.

It's definitely an issue we can't fix without dev help.

[alian2plus]

Just when things is getting crazy, Taurine is up.

[badger200]

@alian2plus What do you mean? I thought Taurine only supported up to 14.3. Can you elaborate? Also what's your terminal app/font lol I like it

[badger200]

@alian2plus Dev help has arrived! 🎉🚀 A new jailbreak fixing the root cause of Fugu14's kernel panics has been developed and an alpha is released: https://github.com/LinusHenze/Fugu14/pull/242#issuecomment-1716031814 Its only source code at the moment, I'm eager for someone to build a binary and post their test results. The dev has not had a panic in two months!

[alian2plus]

@alian2plus What do you mean? I thought Taurine only supported up to 14.3. Can you elaborate? Also what's your terminal app/font lol I like it

Dude, there is a new build released in r/jailbreak, go check it out. Taurine 1.1.7 tor all devices 14.4-14.8.1 Terminal app is newterm2, and the font is ubuntu

[alian2plus]

@alian2plus Dev help has arrived! 🎉🚀 A new jailbreak fixing the root cause of Fugu14's kernel panics has been developed and an alpha is released: https://github.com/LinusHenze/Fugu14/pull/242#issuecomment-1716031814 Its only source code at the moment, I'm eager for someone to build a binary and post their test results. The dev has not had a panic in two months!

You made my day lol, I've said this already, things are getting just crazy.

[21mtd]

too much jailbreak news for a day 🎉