Dopamine is a semi-untethered jailbreak for iOS 15 and 16
License: MIT License
Rootless arm64e jailbreak for iOS 15.0 - 16.5.1 (arm64e) and iOS 15.0 - 16.6.1 (arm64). More details will follow here soon.
Official website / download: https://ellekit.space/dopamine/
If we can add a environment variable to each process and point it to /preboot//jb-xxxx, then we can make jailbreak apps/tweaks still work normally(access jb files) after removing /var/ symlink.
When using Filza or SSH to modify existing files or create new files in /var/db/MobileIdentityData, it will prompt that there is no permission.
When in jailbroken state, most of notifications, like WhatsApp or Telegram dont work. Have to open the app everytime for them to appear.
iOS 15.4.1, i have all the jb dependencies and Ampere, IAPStore, Shadow and Choicy installed, that’s all.
Tried beta 5, 6, tried last beta 7 version - still.
I've found if wifi is left enabled when jailbreaking during the "Disabling Wifi" state, it seems to move on to the next part of the process too quickly before the wifi is fully disabled. This causes a freeze, followed by a purple screen and a reboot.
I'm aware that this crash is just because of the exploit that is used so I understand if it cannot be fixed. Issue does not occur if wifi is already off before jailbreaking.
iPhone 13 Pro Max
iOS 15.1
Dopamine 1.0.2
hi boss, is it possible for us to randomize the /var/jb path?
It is not a good idea to temporarily remove the /var/jb symbolic link,
it will cause a lot of problems, https://theapplewiki.com/wiki/Rootless#Dilemmas
and can also be detected: https://github.com/tuancc-repo/JBDetect15/blob/2424a9ef349374540cabd5f5fdec811eb8614c3f/main.m#L251
If we could randomize the /var/jb path, we'd never have to worry about how acess/stat detects jailbroken files.
😍
As the title states, I can jailbreak perfectly fine, however if tweak injection is enabled both sileo and zebra never show up. The second I turn it off however, both show up, but I am unable to actually use any tweaks.
iPhone 12 Pro Max on iOS 15.0.1
Deb package installer not work?
When I use winscp to access /private/var/mobile/Containers/Data, it prompts Permission denied. Is this a sandbox permission issue?
I tried reboot userspace function with shortcut but I have problem when using it is black screen hangs and on boot I lost my jailbreak on ipad m1 ios 15.4.1
i install the jailbreak and sileo doesnt appear, so i install it again and it get stuck on initialising environment. ive tried respringing and sileo still doesnt turn up, is there a fix for this? im on iphone XR ios 15.4.1
Hello,
So the problems are :
No gsm,
Freeze at any time without even touching the screen,
The restart of the user space restarts my iPhone but it is well jailbreak moreover if I do not use this functionality and that I make him a manual respring with trollstore for example it functions as if it were jailbreak and does not freeze and the gsm functions.
I want to specify that I use the beta 4 until now and I have in no way encountered any problem before no errors.
The beta 4 was very stable.
For more information do not hesitate to ask me.
When I jailbroke for the first time everything went as expected exempt for all my old tweaks(that I installed via fugu15) were gone, I didn't think much of it and I reinstalled them, after respringing via Sileo, my phone crashed, so I jailbroke again. When I did my phone did a user space reboot to finalise the jailbreak,but when it did instead of booting up my phone showed me the Apple logo for an infinite amount of time, not booting up like it always had, effectively giving me a real scare. Please help me
Device: iPad (8th generation)
iOS: 15.3.1
Dopamine v: 1.0
Tweak injection: True (elekit package not installed yet)
Verbose logging: True
after running the jailbreak successfully, device user space reboots and is then almost unresponsive to touches and physical button presses, they still go through, just after 15-20 seconds. Device eventually crashes to a black screen with a small unmoving loader wheel until force rebooted.
Whilst jailbreaking on beta 8, the phone crashes during the patchfinding stage. Since I’m on 15.1, I have Wi-Fi turned off but I still can’t figure out the problem. Thanks
Hello every one, first I would like to congratulate everyone for the excellent work, and second I would like to know if there is any possibility of updating this jailbreak iphone on ios 15.5 rc beta 4. because some people say that it has the same vulnerability. thanks for all the work and dedication!
I do not get notifications from any apps
While jailbreaking with verbose, sometimes the log looks like corrupted pink mess.
On screenshot it cannot be seen but just on the display while scrolling down
iPhone XS (15.1)
Device: iPhone 11 Pro
Version (before): 1.0.1
Version (now): 1.0.2
tl;dr/summary:
When trying to use the built-in updater when you're not jailbroken, the updater gets stuck after it finishes downloading, it basically just loads for an infinite amount of time.
Only solution I found atm was to close out of the app then manually update through the .tipa.
I have a BMW F30 and I use Spotify and CarPlay all the time. Whenever I am jailbroken, I cannot see the "current playing song" in my Head Up Display, however as soon as I reboot into a non-jailbroken state, the music displays just fine. I don't have any tweaks that could affect this, and I don't have SnowBoard either which I know causes issues with CarPlay in general. Not sure if I'm the only one with that issue but hopefully it gets sorted soon somehow.
Exactly as the title says, running uicache in trollstore breaks icons added by Dopamine. I'm not sure if this should be an issue opened here or on the Trollstore repo, so if this is in the wrong please please move the issue, thanks.
Just out of curiosity, have you considered adding a picture about the jailbreak icon before rebooting the user space, like CoolStar did?
Cards in Apple Pay unavailable after jailbreaking with Dopamine 1.0 same result when using hide jailbreak - Beta 8 had no issues.
Restarting device into stock allows Apple pay to work normally again although double-click side button needs toggling to enable again
11 Pro Max A13 iOS 15.1
iPhone 13promax 15.4 Look for iPhone unavailable after jailbreak activation.
After jailbreaking enabling background sounds through control centre accessibility shortcut no longer works
Apple CarPlay causes a panic on Beta 4, iPhone 13 Pro Max, iOS 15.4.
Turn on Bluetooth to connect to the headphones, and then open the app to enter safe mode
New Term 3 Beta from SileoNew Term 3 Beta
BTW, the same combination of Dopamine & New Term 3 Beta on iPhone 13 Pro/iOS 15.4.1 works fine.
Also, SSH connection to the device cannot be established (with OpenSSH server installed).
After jailbroken, sileo doesnt appears. Only Zebra.
Im using iphone 13, ios, 15.2. Fugu Beta 4. Installed by TrollStore 1.5.1.
hi boss, is it possible for us to randomize the /var/jb path?
It is not a good idea to temporarily remove the /var/jb symbolic link,
it will cause a lot of problems, https://theapplewiki.com/wiki/Rootless#Dilemmas
and can also be detected: https://github.com/tuancc-repo/JBDetect15/blob/2424a9ef349374540cabd5f5fdec811eb8614c3f/main.m#L251
If we could randomize the /var/jb path, we'd never have to worry about how acess/stat detects jailbroken files.
😍
13pormax 15.0.1 After connecting AirPodspor
Crash restart
I promise that I have turned on the Airplane mode and the Wi-Fi. actually, when I surf the net I found a net friend, whose iPad 8th has this problem also.
I can’t enable tweak injection in dopamine. Every time I do my device freezes on lockscreen after user space reboot. I’m on 13 pro 15.0.1. I’ve already updated to version 1.0.1 of dopamine. I've done the following steps:
Re-install Dopamine environment (via erase jailbreak)
Install only ellekit and Amber tweak to test
Disable tweak injection. (No issues, until I re-enable tweaks and perform user space reboot).
exampes:
the install name of the first rootless libraries is "@rpath/usr/lib/libA/libA.dylib"
the install name of the second rootless libraries is "@rpath/usr/lib/libB/libB.dylib"
1: libA.dylib link against libB.dylib with "@rpath/usr/lib/libB/libB.dylib"
2: add rpath "@loader_path/../../../" to libA.dylib
so the rpath does not need to contain any fixed path, and we can use the complete subpath of the library in the jb root directory for the install name. And this method is also officially supported by Apple.
System version: 15.0.2
Model: iPad Pro (12.9-inch) (5th generation) (M1, 8gb RAM)
Previously jailbroken with Fugu 15 Max: No
Previously jailbroken with Xina: Yes, but fully uninstalled long ago
Notes: Tested each step with smart keyboard & apple pencil attached and detached.
The device freezes and userspace restart takes very long. The device shows WIFI as off, but it is not off. Changing any settings is not possible because the user interface freezes for minutes at a time.
Input changing any wireless settings is ignored entirely. All other input takes seconds to minutes to register.
After userspace reboot the device hangs for seconds to minutes at a time between each input. Apps can be opened but take ages, any changes to wireless settings are ignored. Wifi shows as off but is on. Wifi is also not connecting. Apps in the background crash continuously (like Termius) and uninstalling them does not fix the issue. Disconnecting the iPad accessories does also not fix it.
I have once managed to open the settings app before the device locked up completely
After trying for a while the device crashes
I‘ve attempted to re-disable Wifi before the iPad has a chance to userspace reboot post-exploit.
If successful, the userspace reboot takes only seconds. The device is perfectly usable after (no freezes), including wireless settings. However, the iPad refuses to join any Wifi except my iPhone hotspot, the hotspot works perfectly.
I should note that the wifi networks in question are WPA2/3-Enterprise. It produces the following error messages as shown:
These Wifi-Networks work perfectly fine while unjailbroken.
I can attach crash logs as necessary; Many services generated them due to watchdog timeouts, so I will only attach the panic-full
panic-full-2023-05-03-103533.000.txt
{"bug_type":"210","timestamp":"2023-05-04 00:18:06.00 +0800","os_version":"iPhone OS 15.4.1 (19E258)","incident_id":"434E4314-B059-403C-8870-DFD84A7122EE"}
{
"build" : "iPhone OS 15.4.1 (19E258)",
"product" : "iPhone14,2",
"socId" : "0x00008110",
"kernel" : "Darwin Kernel Version 21.4.0: Mon Feb 21 21:27:57 PST 2022; root:xnu-8020.102.31/RELEASE_ARM64_T8110",1/RELEASE_ARM64_T8110\nKernel UUID: E5C6FB6F-07CE-3AEE-8400-99EC7DEB9B6B\niBoot version: iBoot-7459.102.5\nsecure boot?: YES\nPaniclog version: 13\nKernel slide: 0x0000000018724000\nKernel text base:
"incident" : "434E4314-B059-403C-8870-DFD84A7122EE",
"crashReporterKey" : "d8e861e94bb2a7b96ec739501f0147c1461a6da8",
"date" : "2023-05-04 00:18:06.26 +0800",
"panicString" : "panic(cpu 1 caller 0xfffffff022254290): userspace watchdog timeout: no successful checkins from thermalmonitord in 180 seconds\nservice returned not alive with context : unresponsive dispatch queue(s): com.apple.main-thread \nservice: backboardd, total successful checkins since wake (960 seconds ago): 97, last successful checkin: 0 seconds ago\nservice: SpringBoard, total successful checkins since wake (960 seconds ago): 96, last successful checkin: 0 seconds ago\nservice: mediaserverd, total successful checkins since wake (960 seconds ago): 97, last successful checkin: 0 seconds ago\nservice: logd, total successful checkins since wake (960 seconds ago): 97, last successful checkin: 0 seconds ago\nservice: thermalmonitord, total successful checkins since wake (960 seconds ago): 79, last successful checkin: 180 seconds ago\nservice: runningboardd, total successful checkins since wake (960 seconds ago): 97, last successful checkin: 0 seconds ago\nservice: wifid, total successful checkins since wake (960 seconds ago): 97, last successful checkin: 0 seconds ago\n\nDebugger message: panic\nMemory ID: 0xff\nOS release type: User\nOS version: 19E258\nKernel version: Darwin Kernel Version 21.4.0: Mon Feb 21 21:27:57 PST 2022; root:xnu-8020.102.3
{"bug_type":"115","timestamp":"2023-05-04 00:18:07.00 +0800","name":"Reset count","os_version":"iPhone OS 15.4.1 (19E258)","incident_id":"2D03F1F2-D2DB-410B-9C26-866CAD9A8E11"}
Incident Identifier: 2D03F1F2-D2DB-410B-9C26-866CAD9A8E11
CrashReporter Key: d8e861e94bb2a7b96ec739501f0147c1461a6da8
Date: 2023-05-04 00:18:07.92 +0800
Reset count: 1
Boot failure count: 0
Boot faults:
Boot stage: 0
Boot app: 68573167
I’m on 13 pro 15.0.1 and using Dopamine v1.0.2. I can't connect to my vehicle and use CarPlay as tapping on the icon for CarPlay on my vehicle infotainment system does not do anything. If I tap on the CarPlay icon and leave it, my phone will pink screen and crash back to stock iOS. This was not present on Fugu15 but when I migrated to Dopamine.
I know it's hard, but I have to work hard in this direction, rootless is a great initiative, and the entire jailbreak community has put in a lot of effort.
I know that /var/jb has been discussed two years ago, please forgive me for being absent from this historical moment due to health reasons, and in the past year the entire jailbreak community has updated a large number of tools based on /var/jb And the basic library. It is impossible for everyone to rewrite all the code now, especially on the eve of Fugu15Max's upcoming public release.
But randomizing the /var/jb path is not hopeless, it is still a thing worth planning and thinking about. All basic jailbreak tools and libraries of ios15 are open source, such as fugu15max, procursus bootstrap, theos, dkpg, sileo, zebra, etc. As long as we put in the time, sooner or later we can get a rootless jailbreak that randomizes the /var/jb path.
However, it is not enough for us to only have a jailbreak tool and basic library, almost no one just wants a jailbreak tool without the support of third-party jailbreak software. Most people care more about the jailbreak apps and jailbreak brought after jailbreak tweaks.
So although we can modify and recompile jailbreak tools and base libraries to randomize /var/jb in the future, no one can recompile all third-party jailbreak apps/tweaks, especially a large number of third-party closed source Jailbreak apps/tweaks. This is our biggest concern.
Fortunately, there are still ways to alleviate this problem. We don't need to randomize the /var/jb path immediately, nor do we need to modify and recompile all jailbreak tools and basic libraries immediately.
We only need to adjust the interactive interface of jailbreak apps/tweask and rootless jailbreak, we let jailbreak developers no longer rely on the fixed path of /var/jb to code. In this way, we can randomize /var/jb in the future , and maintain good compatibility with third-party jailbreak apps/tweaks, at least not needing to re-modify and recompile all third-party apps/tweaks.
Implementation:
We do not modify the fixed path of /var/jb at present, we only need to add a fixed environment variable pointing to /var/jb to all processes, and the code written for the fixed path of /var/jb will not be invalid immediately , is still compatible.
Environment variables can be easily hidden from specific processes (apps) in the future, and environment variables are very easy to use and code in c/c++/obj-c/swift/shell scripts.
We can lead jailbreak apps/tweaks developers to use this environment variable, and inform developers that the /var/jb path will be changed/randomized in the future.
This plan doesn't solve all problems right away, but at least it makes our subsequent work of randomizing /var/jb easier to implement.
After uninstalling the jailbreak, the Verbose logs text shrinks, which I don't think is purposeful.
Reference:
Hi @opa334
This might be a bug since beta.8, hence this report.
A friend of mine complains that his iPhone 12 Pro Max/iOS 15.1.1 failed to register 5G signal with the China Telecom carrier. This problem emerges first on beta.8, please kindly give a check when you're available.
Why did such a problem happen and how should I solve it?
Is it possible to add a custom bindfs mount?
When activated, the lighting is reduced, and the brightness cannot be raised or lowered
Incident Identifier: 1DBD1AE2-B22F-47D8-BA52-748AD89F82E7
CrashReporter Key: a6e2a43446ac051280e2f626c9b48041429f4c91
Hardware Model: iPhone12,1
Process: oobPCI [269]
Path: /private/var/containers/Bundle/Application/95E4716A-A96B-4D31-B559-F81DF2B62F31/Fugu15.app/oobPCI
Identifier: oobPCI
Version: ???
Code Type: ARM-64 (Native)
Role: Unspecified
Parent Process: Fugu15 [266]
Coalition: de.pinauten.Fugu15 [428]
Date/Time: 2023-04-20 06:49:10.8047 -0400
Launch Time: 2023-04-20 06:48:51.3139 -0400
OS Version: iPhone OS 15.4 (19E241)
Release Type: User
Baseband Version: 3.02.01
Report Version: 104
Exception Type: EXC_BAD_ACCESS (SIGBUS)
Exception Subtype: KERN_PROTECTION_FAILURE at 0x000000484158580c
Exception Codes: 0x0000000000000002, 0x000000484158580c
VM Region Info: 0x484158580c is in 0x1000000000-0x7000000000; bytes after start: 241614477324 bytes before end: 170702383091
REGION TYPE START - END [ VSIZE] PRT/MAX SHRMOD REGION DETAIL
commpage (reserved) fc0000000-1000000000 [ 1.0G] ---/--- SM=NUL ...(unallocated)
---> GPU Carveout (reserved) 1000000000-7000000000 [384.0G] ---/--- SM=NUL ...(unallocated)
UNUSED SPACE AT END
Exception Note: EXC_CORPSE_NOTIFY
Termination Reason: SIGNAL 10 Bus error: 10
Terminating Process: exc handler [269]
Triggered by Thread: 0
Kernel Triage:
VM - Returned success with no page
Thread 0 name: Dispatch queue: com.apple.main-thread
Thread 0 Crashed:
0 ??? 0x484158580c ???
1 oobPCI 0x1004e1f28 main + 148
2 dyld 0x100821ce4 start + 520
Thread 1:
0 oobPCI 0x1004e5c84 pac_loop + 0
Thread 2:
0 oobPCI 0x1004e5c84 pac_loop + 0
Thread 3:
0 oobPCI 0x1004e5c84 pac_loop + 0
Thread 0 crashed with ARM Thread State (64-bit):
x0: 0x000000016f9238a8 x1: 0x000000016f9238a0 x2: 0x00000001006a4000 x3: 0x0000000000000000
x4: 0x0000000000001303 x5: 0x0000000000000000 x6: 0x0000000000000000 x7: 0xfffffff01cbd15dc
x8: 0x000000484158580c x9: 0x0000000080000000 x10: 0x000000016f92334c x11: 0x0000000000002803
x12: 0x000000004da2b68c x13: 0x0000000000000048 x14: 0x0000000000003ff0 x15: 0x000000000000004c
x16: 0xffffffffffffffe1 x17: 0x6ae100016f922f10 x18: 0x0000000000000000 x19: 0x0000000100530060
x20: 0x00000001004e1e94 x21: 0x0000000100860070 x22: 0x0000000000000000 x23: 0x0000000000000000
x24: 0x0000000000000000 x25: 0x0000000000000000 x26: 0x0000000000000000 x27: 0x0000000000000000
x28: 0x0000000000000000 fp: 0x000000016f923940 lr: 0x00000001004e1794
sp: 0x000000016f923480 pc: 0x000000484158580c cpsr: 0x60000000
far: 0x000000484158580c esr: 0x82000005 (Instruction Abort) Translation fault
Binary Images:
0x0 - 0xffffffffffffffff ??? unknown-arch <00000000000000000000000000000000> ???
0x1004dc000 - 0x100513fff oobPCI arm64 <a90085650fb13cc1a868160847ca44b1> /private/var/containers/Bundle/Application/95E4716A-A96B-4D31-B559-F81DF2B62F31/Fugu15.app/oobPCI
0x100808000 - 0x10085ffff dyld arm64e <d16b72c0d6193e4892622c10a1d3066f> /usr/lib/dyld
EOF
-----------------------------------------------
Hopefully this proves useful. Update to this issue: I've isolated this problem on my phone, involving wifid and oobPCI. Don't know the cause, but every time oobPCI panics when wifid does it's "not a crash" crash. As per usual crash reports are located below
--------------------------------------------------
Wifid
Incident Identifier: 3311FEDC-92CE-4F8A-98C3-DA1E87F8ADD7
CrashReporter Key: a6e2a43446ac051280e2f626c9b48041429f4c91
Hardware Model: iPhone12,1
Process: wifid [383]
Path: /usr/sbin/wifid
Identifier: wifid
Version: ???
Code Type: ARM-64 (Native)
Role: Unspecified
Parent Process: launchd [1]
Coalition: com.apple.wifid [573]
Date/Time: 2023-04-25 19:21:51.0751 -0400
Launch Time: 2023-04-25 19:21:40.2631 -0400
OS Version: iPhone OS 15.4 (19E241)
Release Type: User
Baseband Version:
Report Version: 104
Exception Type: EXC_GUARD
Exception Subtype: GUARD_TYPE_USER
Exception Message: namespc 18 reason_code 0x0000000000000002
Exception Codes: 0x6000000000000012, 0x0000000000000002
Exception Note: SIMULATED (this is NOT a crash)
Termination Reason: LIBSYSTEM 2 Application Triggered Fault
Triggered by Thread: 11
Thread 0:
0 libsystem_kernel.dylib 0x1c9b934e0 mach_msg_trap + 8
1 libsystem_kernel.dylib 0x1c9b93b24 mach_msg + 76
2 CoreFoundation 0x192197820 __CFRunLoopServiceMachPort + 372
3 CoreFoundation 0x19219bcac __CFRunLoopRun + 1180
4 CoreFoundation 0x1921af6b8 CFRunLoopRunSpecific + 600
5 Foundation 0x193996414 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 236
6 Foundation 0x193996bd0 -[NSRunLoop(NSRunLoop) run] + 92
7 wifid 0x1042d35e4 0x104220000 + 734692
8 dyld 0x104851ce4 start + 520
Thread 1:
0 libsystem_kernel.dylib 0x1c9b934e0 mach_msg_trap + 8
1 libsystem_kernel.dylib 0x1c9b93b24 mach_msg + 76
2 libdispatch.dylib 0x191eab678 _dispatch_mach_send_and_wait_for_reply + 540
3 libdispatch.dylib 0x191eaba00 dispatch_mach_send_with_result_and_wait_for_reply + 60
4 libxpc.dylib 0x2031d9f0c xpc_connection_send_message_with_reply_sync + 240
5 Foundation 0x1939bcc1c __NSXPCCONNECTION_IS_WAITING_FOR_A_SYNCHRONOUS_REPLY__ + 16
6 Foundation 0x1939c2cec -[NSXPCConnection _sendInvocation:orArguments:count:methodSignature:selector:withProxy:] + 2540
7 Foundation 0x193a06dfc -[NSXPCConnection _sendSelector:withProxy:arg1:arg2:arg3:] + 152
8 Foundation 0x1939a555c _NSXPCDistantObjectSimpleMessageSend3 + 84
9 CoreLocation 0x1996b3b14 0x1996a6000 + 56084
10 CoreLocation 0x1996b21fc 0x1996a6000 + 49660
11 CoreLocation 0x1996d90b8 0x1996a6000 + 209080
12 WiFiPolicy 0x1cb551f20 -[WiFiLocationManager createCoreLocationObjects] + 268
13 libdispatch.dylib 0x191e8ee68 _dispatch_call_block_and_release + 32
14 libdispatch.dylib 0x191e90a2c _dispatch_client_callout + 20
15 libdispatch.dylib 0x191e98124 _dispatch_lane_serial_drain + 668
16 libdispatch.dylib 0x191e98c80 _dispatch_lane_invoke + 392
17 libdispatch.dylib 0x191ea3500 _dispatch_workloop_worker_thread + 648
18 libsystem_pthread.dylib 0x2031b20bc _pthread_wqthread + 288
19 libsystem_pthread.dylib 0x2031b1e5c start_wqthread + 8
Thread 2:
0 libsystem_kernel.dylib 0x1c9b93ab4 __workq_kernreturn + 8
1 libsystem_pthread.dylib 0x2031b2108 _pthread_wqthread + 364
2 libsystem_pthread.dylib 0x2031b1e5c start_wqthread + 8
Thread 3:
0 libsystem_kernel.dylib 0x1c9b934e0 mach_msg_trap + 8
1 libsystem_kernel.dylib 0x1c9b93b24 mach_msg + 76
2 libdispatch.dylib 0x191eab678 _dispatch_mach_send_and_wait_for_reply + 540
3 libdispatch.dylib 0x191eaba00 dispatch_mach_send_with_result_and_wait_for_reply + 60
4 libxpc.dylib 0x2031d9f0c xpc_connection_send_message_with_reply_sync + 240
5 CoreTelephony 0x19288f48c SendXpcMessageIf(bool, __CTServerConnection*, xpc::dict const&, xpc::dict&, CTFeatureRequirement) + 276
6 CoreTelephony 0x192930c44 _CTServerConnectionCopyPacketContextInterfaceNameByServiceType + 248
7 wifid 0x1042b80f0 0x104220000 + 622832
8 libdispatch.dylib 0x191e8ee68 _dispatch_call_block_and_release + 32
9 libdispatch.dylib 0x191e90a2c _dispatch_client_callout + 20
10 libdispatch.dylib 0x191e98124 _dispatch_lane_serial_drain + 668
11 libdispatch.dylib 0x191e98cb4 _dispatch_lane_invoke + 444
12 libdispatch.dylib 0x191ea3500 _dispatch_workloop_worker_thread + 648
13 libsystem_pthread.dylib 0x2031b20bc _pthread_wqthread + 288
14 libsystem_pthread.dylib 0x2031b1e5c start_wqthread + 8
Thread 4:
0 libsystem_kernel.dylib 0x1c9b93ab4 __workq_kernreturn + 8
1 libsystem_pthread.dylib 0x2031b2108 _pthread_wqthread + 364
2 libsystem_pthread.dylib 0x2031b1e5c start_wqthread + 8
Thread 5:
0 libsystem_kernel.dylib 0x1c9b934e0 mach_msg_trap + 8
1 libsystem_kernel.dylib 0x1c9b93b24 mach_msg + 76
2 libdispatch.dylib 0x191eab678 _dispatch_mach_send_and_wait_for_reply + 540
3 libdispatch.dylib 0x191eaba00 dispatch_mach_send_with_result_and_wait_for_reply + 60
4 libxpc.dylib 0x2031d9f0c xpc_connection_send_message_with_reply_sync + 240
5 Foundation 0x1939bcc1c __NSXPCCONNECTION_IS_WAITING_FOR_A_SYNCHRONOUS_REPLY__ + 16
6 Foundation 0x1939c2cec -[NSXPCConnection _sendInvocation:orArguments:count:methodSignature:selector:withProxy:] + 2540
7 CoreFoundation 0x1921be70c ___forwarding___ + 1128
8 CoreFoundation 0x1921bda60 _CF_forwarding_prep_0 + 96
9 PassKitCore 0x19f9b7aa8 -[PKPassLibrary _copyPassesOfType:withRetries:] + 384
10 PassKitCore 0x19f9b712c -[PKPassLibrary passesOfType:] + 28
11 WiFiPolicy 0x1cb553594 __41-[WiFiWalletSource _initializeWiFiPasses]_block_invoke + 116
12 libdispatch.dylib 0x191e8ee68 _dispatch_call_block_and_release + 32
13 libdispatch.dylib 0x191e90a2c _dispatch_client_callout + 20
14 libdispatch.dylib 0x191e98124 _dispatch_lane_serial_drain + 668
15 libdispatch.dylib 0x191e98c80 _dispatch_lane_invoke + 392
16 libdispatch.dylib 0x191ea3500 _dispatch_workloop_worker_thread + 648
17 libsystem_pthread.dylib 0x2031b20bc _pthread_wqthread + 288
18 libsystem_pthread.dylib 0x2031b1e5c start_wqthread + 8
Thread 6:
0 libsystem_kernel.dylib 0x1c9b934e0 mach_msg_trap + 8
1 libsystem_kernel.dylib 0x1c9b93b24 mach_msg + 76
2 libdispatch.dylib 0x191eab678 _dispatch_mach_send_and_wait_for_reply + 540
3 libdispatch.dylib 0x191eaba00 dispatch_mach_send_with_result_and_wait_for_reply + 60
4 libxpc.dylib 0x2031d9f0c xpc_connection_send_message_with_reply_sync + 240
5 IDS 0x19b04e8f4 0x19b049000 + 22772
6 IDS 0x19b093f60 0x19b049000 + 307040
7 IDS 0x19b058598 0x19b049000 + 62872
8 libdispatch.dylib 0x191e8ee68 _dispatch_call_block_and_release + 32
9 libdispatch.dylib 0x191e90a2c _dispatch_client_callout + 20
10 libdispatch.dylib 0x191e98124 _dispatch_lane_serial_drain + 668
11 libdispatch.dylib 0x191e98cb4 _dispatch_lane_invoke + 444
12 libdispatch.dylib 0x191ea3500 _dispatch_workloop_worker_thread + 648
13 libsystem_pthread.dylib 0x2031b20bc _pthread_wqthread + 288
14 libsystem_pthread.dylib 0x2031b1e5c start_wqthread + 8
Thread 7:
0 libsystem_kernel.dylib 0x1c9b93bdc kevent_id + 8
1 libdispatch.dylib 0x191eb31fc _dispatch_kq_poll + 228
2 libdispatch.dylib 0x191eb3c20 _dispatch_event_loop_wait_for_ownership + 444
3 libdispatch.dylib 0x191e9ff54 __DISPATCH_WAIT_FOR_QUEUE__ + 328
4 libdispatch.dylib 0x191e9fb28 _dispatch_sync_f_slow + 144
5 IDS 0x19b04c6f4 0x19b049000 + 14068
6 IDS 0x19b0cdce8 0x19b049000 + 543976
7 IDS 0x19b0cc568 0x19b049000 + 537960
8 IDS 0x19b0fb9cc 0x19b049000 + 731596
9 IDS 0x19b050d64 0x19b049000 + 32100
10 IDS 0x19b0ec754 0x19b049000 + 669524
11 libdispatch.dylib 0x191e8ee68 _dispatch_call_block_and_release + 32
12 libdispatch.dylib 0x191e90a2c _dispatch_client_callout + 20
13 libdispatch.dylib 0x191e98124 _dispatch_lane_serial_drain + 668
14 libdispatch.dylib 0x191e98cb4 _dispatch_lane_invoke + 444
15 libdispatch.dylib 0x191ea3500 _dispatch_workloop_worker_thread + 648
16 libsystem_pthread.dylib 0x2031b20bc _pthread_wqthread + 288
17 libsystem_pthread.dylib 0x2031b1e5c start_wqthread + 8
Thread 8:
0 libsystem_kernel.dylib 0x1c9b93ab4 __workq_kernreturn + 8
1 libsystem_pthread.dylib 0x2031b2108 _pthread_wqthread + 364
2 libsystem_pthread.dylib 0x2031b1e5c start_wqthread + 8
Thread 9:
0 libsystem_kernel.dylib 0x1c9b93bdc kevent_id + 8
1 libdispatch.dylib 0x191eb31fc _dispatch_kq_poll + 228
2 libdispatch.dylib 0x191eb3c20 _dispatch_event_loop_wait_for_ownership + 444
3 libdispatch.dylib 0x191e9ff54 __DISPATCH_WAIT_FOR_QUEUE__ + 328
4 libdispatch.dylib 0x191e9fb28 _dispatch_sync_f_slow + 144
5 IDS 0x19b04c6f4 0x19b049000 + 14068
6 IDS 0x19b04c1e0 0x19b049000 + 12768
7 wifid 0x104398f78 0x104220000 + 1544056
8 libdispatch.dylib 0x191e8ee68 _dispatch_call_block_and_release + 32
9 libdispatch.dylib 0x191e90a2c _dispatch_client_callout + 20
10 libdispatch.dylib 0x191ea2280 _dispatch_root_queue_drain + 680
11 libdispatch.dylib 0x191ea296c _dispatch_worker_thread2 + 164
12 libsystem_pthread.dylib 0x2031b2080 _pthread_wqthread + 228
13 libsystem_pthread.dylib 0x2031b1e5c start_wqthread + 8
Thread 10:
0 libsystem_kernel.dylib 0x1c9b93ab4 __workq_kernreturn + 8
1 libsystem_pthread.dylib 0x2031b2108 _pthread_wqthread + 364
2 libsystem_pthread.dylib 0x2031b1e5c start_wqthread + 8
Thread 11 Crashed:
0 libsystem_kernel.dylib 0x1c9bc1144 os_fault_with_payload + 8
1 libsystem_trace.dylib 0x1acff5e38 _os_log_impl_flatten_and_send + 7544
2 libsystem_trace.dylib 0x1acff2830 _os_log + 152
3 libsystem_trace.dylib 0x1acffa930 _os_log_fault_impl + 24
4 SyncedDefaults 0x1bebf54bc +[SYDClientToDaemonConnection defaultStoreIdentifierForCurrentProcessWithApplicationIdentifier:].cold.1 + 96
5 SyncedDefaults 0x1bebeaa78 +[SYDClientToDaemonConnection defaultStoreIdentifierForCurrentProcessWithApplicationIdentifier:] + 388
6 SyncedDefaults 0x1bebe6d00 -[SYDRemotePreferencesSource initWithApplicationID:storeID:shared:additionalSource:containerPath:storeType:] + 328
7 Foundation 0x193a5424c -[NSUbiquitousKeyValueStore initWithBundleIdentifier:storeIdentifier:additionalStore:storeType:] + 348
8 WiFiCloudSyncEngine 0x1fd3abaec -[WiFiCloudSyncEngineCore subscribeKVStoreNotficationsForBundleId:] + 160
9 WiFiCloudSyncEngine 0x1fd3ab9e8 -[WiFiCloudSyncEngineCore enableIcloudSyncing:ForBundleId:] + 128
10 WiFiCloudSyncEngine 0x1fd3af9ec WiFiCloudSyncEngineStartEngine + 184
11 libdispatch.dylib 0x191e90a2c _dispatch_client_callout + 20
12 libdispatch.dylib 0x191e9fc90 _dispatch_lane_barrier_sync_invoke_and_complete + 56
13 WiFiCloudSyncEngine 0x1fd3ac62c -[WiFiCloudSyncEngineCore queryKeychainSyncState] + 272
14 libdispatch.dylib 0x191e90a2c _dispatch_client_callout + 20
15 libdispatch.dylib 0x191e93eec _dispatch_continuation_pop + 500
16 libdispatch.dylib 0x191ea713c _dispatch_source_invoke + 1596
17 libdispatch.dylib 0x191e98000 _dispatch_lane_serial_drain + 376
18 libdispatch.dylib 0x191e98c80 _dispatch_lane_invoke + 392
19 libdispatch.dylib 0x191ea3500 _dispatch_workloop_worker_thread + 648
20 libsystem_pthread.dylib 0x2031b20bc _pthread_wqthread + 288
21 libsystem_pthread.dylib 0x2031b1e5c start_wqthread + 8
Thread 12 name: AVAudioSession Notify Thread
Thread 12:
0 libsystem_kernel.dylib 0x1c9b934e0 mach_msg_trap + 8
1 libsystem_kernel.dylib 0x1c9b93b24 mach_msg + 76
2 CoreFoundation 0x192197820 __CFRunLoopServiceMachPort + 372
3 CoreFoundation 0x19219bcac __CFRunLoopRun + 1180
4 CoreFoundation 0x1921af6b8 CFRunLoopRunSpecific + 600
5 AudioSession 0x19b798f04 CADeprecated::GenericRunLoopThread::Entry(void*) + 164
6 AudioSession 0x19b7a28f0 CADeprecated::CAPThread::Entry(CADeprecated::CAPThread*) + 92
7 libsystem_pthread.dylib 0x2031b29ac _pthread_start + 148
8 libsystem_pthread.dylib 0x2031b1e68 thread_start + 8
Thread 13:
0 libsystem_kernel.dylib 0x1c9b93ab4 __workq_kernreturn + 8
1 libsystem_pthread.dylib 0x2031b2108 _pthread_wqthread + 364
2 libsystem_pthread.dylib 0x2031b1e5c start_wqthread + 8
Thread 14:
0 libsystem_kernel.dylib 0x1c9b93ab4 __workq_kernreturn + 8
1 libsystem_pthread.dylib 0x2031b2108 _pthread_wqthread + 364
2 libsystem_pthread.dylib 0x2031b1e5c start_wqthread + 8
Thread 15:
Thread 11 crashed with ARM Thread State (64-bit):
x0: 0x0000000000000012 x1: 0x0000000000000002 x2: 0x00000001047350a0 x3: 0x0000000000000107
x4: 0x00000001bebf91c0 x5: 0x0000000000000000 x6: 0x000000000000002e x7: 0x0000000000000111
x8: 0x000000016c1de370 x9: 0x00000001047350a0 x10: 0x00000000000001a8 x11: 0x0000002000000001
x12: 0x000000016c1dcf18 x13: 0x0000000000000000 x14: 0x0000000000000001 x15: 0x000000000000a43b
x16: 0x0000000000000211 x17: 0x00000001ee2028e8 x18: 0x0000000000000000 x19: 0x00000001047350a0
x20: 0x0000000000000007 x21: 0x0000000000000011 x22: 0x0000000000000000 x23: 0x00000001bebe3000
x24: 0x2cdbd1c016041104 x25: 0x0000000000000002 x26: 0x0000000000180022 x27: 0x0000000000000001
x28: 0x0000000000000011 fp: 0x000000016c1de360 lr: 0x00000001acff5e38
sp: 0x000000016c1dd070 pc: 0x00000001c9bc1144 cpsr: 0x40000000
far: 0x00000001e9c26a10 esr: 0x56000080 Address size fault
Binary Images:
0x1c9b92000 - 0x1c9bc7fff libsystem_kernel.dylib arm64e <c2fcc05874803c14b4790064a3f843e3> /usr/lib/system/libsystem_kernel.dylib
0x192190000 - 0x1925e5fff CoreFoundation arm64e <d2716f2f688b3d51ba8b17e6553b209e> /System/Library/Frameworks/CoreFoundation.framework/CoreFoundation
0x19397e000 - 0x193c86fff Foundation arm64e <feeef9b1b0e63561adfa3ef0302d23f8> /System/Library/Frameworks/Foundation.framework/Foundation
0x104220000 - 0x104467fff wifid arm64e <56fef4510b10374fbcee5f3134207e5b> /usr/sbin/wifid
0x104838000 - 0x10488ffff dyld arm64e <d16b72c0d6193e4892622c10a1d3066f> /usr/lib/dyld
0x191e8d000 - 0x191ed2fff libdispatch.dylib arm64e <69dac9c7ddaf318eb068be596d142a2f> /usr/lib/system/libdispatch.dylib
0x2031cc000 - 0x203208fff libxpc.dylib arm64e <b56312ce5ade34e5abb4afcbe0512205> /usr/lib/system/libxpc.dylib
0x1996a6000 - 0x199765fff CoreLocation arm64e <f7ce18ec96ed3b6c95d56482aa829dc0> /System/Library/Frameworks/CoreLocation.framework/CoreLocation
0x1cb4e7000 - 0x1cb5fbfff WiFiPolicy arm64e <897e2894a60335b989e98a71bd79a332> /System/Library/PrivateFrameworks/WiFiPolicy.framework/WiFiPolicy
0x2031b1000 - 0x2031bcfff libsystem_pthread.dylib arm64e <b48efcbed4f7308ba3fa172e0ea78e33> /usr/lib/system/libsystem_pthread.dylib
0x19288a000 - 0x1929adfff CoreTelephony arm64e <ecb8c0404523390f9311c0a63992a117> /System/Library/Frameworks/CoreTelephony.framework/CoreTelephony
0x19f9a0000 - 0x1a0034fff PassKitCore arm64e <e89882c654183a27b8f75b54e2b3471e> /System/Library/PrivateFrameworks/PassKitCore.framework/PassKitCore
0x19b049000 - 0x19b1c9fff IDS arm64e <fcca93f6d47d301f805fc11917b6d680> /System/Library/PrivateFrameworks/IDS.framework/IDS
0x1acff0000 - 0x1ad009fff libsystem_trace.dylib arm64e <dd7de6751dcb3bb7a7d920cae6bfefdc> /usr/lib/system/libsystem_trace.dylib
0x1bebe3000 - 0x1bebfcfff SyncedDefaults arm64e <2333a64453973d24afa78ab600d5c3c5> /System/Library/PrivateFrameworks/SyncedDefaults.framework/SyncedDefaults
0x1fd3a8000 - 0x1fd3b7fff WiFiCloudSyncEngine arm64e <7fa683e7df2a34b194651a5b3db22fb6> /System/Library/PrivateFrameworks/WiFiCloudSyncEngine.framework/WiFiCloudSyncEngine
0x19b792000 - 0x19b7bcfff AudioSession arm64e <37d438b9289d39b08b671b38de65305f> /System/Library/PrivateFrameworks/AudioSession.framework/AudioSession
EOF
--------------------------------------------------
oobPCI
Incident Identifier: 2C623EAE-B826-4907-B3F4-DD6C5220B8FB
CrashReporter Key: a6e2a43446ac051280e2f626c9b48041429f4c91
Hardware Model: iPhone12,1
Process: oobPCI [311]
Path: /private/var/containers/Bundle/Application/95E4716A-A96B-4D31-B559-F81DF2B62F31/Fugu15.app/oobPCI
Identifier: oobPCI
Version: ???
Code Type: ARM-64 (Native)
Role: Unspecified
Parent Process: Fugu15 [310]
Coalition: de.pinauten.Fugu15 [470]
Date/Time: 2023-04-25 19:21:31.2975 -0400
Launch Time: 2023-04-25 19:20:45.9928 -0400
OS Version: iPhone OS 15.4 (19E241)
Release Type: User
Baseband Version: 3.02.01
Report Version: 104
Exception Type: EXC_BAD_ACCESS (SIGBUS)
Exception Subtype: KERN_PROTECTION_FAILURE at 0x000000484158580c
Exception Codes: 0x0000000000000002, 0x000000484158580c
VM Region Info: 0x484158580c is in 0x1000000000-0x7000000000; bytes after start: 241614477324 bytes before end: 170702383091
REGION TYPE START - END [ VSIZE] PRT/MAX SHRMOD REGION DETAIL
commpage (reserved) fc0000000-1000000000 [ 1.0G] ---/--- SM=NUL ...(unallocated)
---> GPU Carveout (reserved) 1000000000-7000000000 [384.0G] ---/--- SM=NUL ...(unallocated)
UNUSED SPACE AT END
Exception Note: EXC_CORPSE_NOTIFY
Termination Reason: SIGNAL 10 Bus error: 10
Terminating Process: exc handler [311]
Triggered by Thread: 0
Kernel Triage:
VM - Returned success with no page
Thread 0 name: Dispatch queue: com.apple.main-thread
Thread 0 Crashed:
0 ??? 0x484158580c ???
1 oobPCI 0x104dadf28 main + 148
2 dyld 0x10501dce4 start + 520
Thread 1:
0 oobPCI 0x104db1c84 pac_loop + 0
Thread 2:
0 oobPCI 0x104db1c84 pac_loop + 0
Thread 3:
0 oobPCI 0x104db1c84 pac_loop + 0
Thread 0 crashed with ARM Thread State (64-bit):
x0: 0x000000016b0578a8 x1: 0x000000016b0578a0 x2: 0x0000000104f70000 x3: 0x0000000000000000
x4: 0x0000000000000a03 x5: 0x0000000000000000 x6: 0x0000000000000000 x7: 0xfffffff01d2555dc
x8: 0x000000484158580c x9: 0x0000000080000000 x10: 0x000000016b05734c x11: 0x0000000000001703
x12: 0x000000004da2b68c x13: 0x0000000000000048 x14: 0x0000000000003ff0 x15: 0x000000000000004c
x16: 0xffffffffffffffe1 x17: 0x6ae100016b056f10 x18: 0x0000000000000000 x19: 0x0000000104dfc060
x20: 0x0000000104dade94 x21: 0x000000010505c070 x22: 0x0000000000000000 x23: 0x0000000000000000
x24: 0x0000000000000000 x25: 0x0000000000000000 x26: 0x0000000000000000 x27: 0x0000000000000000
x28: 0x0000000000000000 fp: 0x000000016b057940 lr: 0x0000000104dad794
sp: 0x000000016b057480 pc: 0x000000484158580c cpsr: 0x60000000
far: 0x000000484158580c esr: 0x82000005 (Instruction Abort) Translation fault
Binary Images:
0x0 - 0xffffffffffffffff ??? unknown-arch <00000000000000000000000000000000> ???
0x104da8000 - 0x104ddffff oobPCI arm64 <a90085650fb13cc1a868160847ca44b1> /private/var/containers/Bundle/Application/95E4716A-A96B-4D31-B559-F81DF2B62F31/Fugu15.app/oobPCI
0x105004000 - 0x10505bfff dyld arm64e <d16b72c0d6193e4892622c10a1d3066f> /usr/lib/dyld
I've managed to get the panic crash report, it says spinlock which opa has already said he was unaware of what causes this. Hopefully these reports help because at 19:20 Wifid does its simulated crash than spinlock panics resulting in oobpci crashing. Resulting in a reboot.
Connect AirPodsPor to use the pink screen to shut down.
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.