Skip to content

linux crashing when attempting to boot on iPhone #12

@satwa1298

Description

@satwa1298

Following HOWTO.md, I compiled pongo on a macbook (intel macbook pro running macOS 11.6.5) and booted into pongoOS using checkra1n 0.12.4, on an iPhone 6 running iOS 12.5.6. Here's the output from checkra1n:

[12/15/22 10:56:34] <Info>: Waiting for DFU devices
[12/15/22 10:56:47] <Verbose>: DFU mode device found
[12/15/22 10:56:47] <Info>: Exploiting
[12/15/22 10:56:47] <Verbose>: Attempting to perform checkm8 on 7000 11...
[12/15/22 10:56:47] <Info>: Checking if device is ready
[12/15/22 10:56:47] <Verbose>: == Checkm8 Preparation stage ==
[12/15/22 10:56:47] <Verbose>: DFU device disconnected
[12/15/22 10:56:47] <Verbose>: DFU mode device found
[12/15/22 10:56:47] <Info>: Setting up the exploit (this is the heap spray)
[12/15/22 10:56:47] <Verbose>: == Checkm8 Setup stage ==
[12/15/22 10:56:47] <Info>: Right before trigger (this is the real bug setup)
[12/15/22 10:56:47] <Verbose>: Entered initial checkm8 state after 0 steps, issuing DFU abort..
[12/15/22 10:56:47] <Verbose>: DFU device disconnected
[12/15/22 10:56:47] <Verbose>: DFU mode device found
[12/15/22 10:56:47] <Verbose>: == Checkm8 Trigger stage ==
[12/15/22 10:56:47] <Verbose>: Checkmate!
[12/15/22 10:56:48] <Verbose>: DFU device disconnected
[12/15/22 10:56:48] <Verbose>: DFU mode device found
[12/15/22 10:56:48] <Verbose>: == Checkm8 Trying to run payload... ==
[12/15/22 10:56:48] <Verbose>: If everything went correctly, you should now have code execution.
[12/15/22 10:56:48] <Verbose>: DFU device disconnected
[12/15/22 10:56:48] <Info>: Entered download mode
[12/15/22 10:56:48] <Verbose>: Download mode device found
[12/15/22 10:56:48] <Info>: Booting...
[12/15/22 10:56:48] <Verbose>: Setting bootargs to: rootdev=md0 -v
[12/15/22 10:56:50] <Verbose>: Download mode device disconnected
[12/15/22 10:58:18] <Error>: Timed out waiting for bootstrap upload (error code: -20)

And here's what the iPhone screen looks like after this step:
pongo

Again following the guide I compiled the kernel, this time on a vm running Ubuntu 22.04.1 LTS. following the rest of the steps and running load_linux.py, it seems to be a success and i get the following output:
Waiting for device...
Loading initial ramdisk...
Initial ramdisk loaded successfully.
Loading device tree...
Device tree loaded successfully.
Loading kernel...
Kernel loaded successfully.
Booting...
Success.

However here's what shows up on the iPhone screen:
error

After maybe 5 seconds, the iPhone just restarts and iOS comes up as normal. I'm not sure where to begin troubleshooting so any help would be appreciated

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions