BugTracker icon indicating copy to clipboard operation
BugTracker copied to clipboard

A7 devices require disconnect to progress with checkra1n

Open nergzd723 opened this issue 4 years ago • 84 comments

  1. What iDevice are you using? iPad mini with retina disp
  2. On what version of iOS is it? 12.4.3
  3. What version of checkra1n are you using? beta 10.1
  4. What is your host system (OS version? Hackintosh? VM? etc.)? Ubuntu 18.04
  5. How are you connecting to the device (USB-A? USB-C? Apple/3rd party cable? Through a USB hub?)? Original Apple USB-A to Lightning What are the steps to reproduce the issue?
  6. Run the checkra1n on iPad

...

What do you expect, and what is happening instead? The same bug, stuck on right before trigger with lots of usbfs errors in kernel log

Does the issue also occur if you enable Safe Mode? Yep.

Any other info, error logs, screenshots, ...? BTW my iPad Air 2 is working, that's the same issue with A7 devices as before.

nergzd723 avatar Apr 09 '20 06:04 nergzd723

update: disconnecting and reconnecting device quickly(after watchdog freezes the process) boots to PongoOS and then jailbreak is successful. Maybe it has something with the way that A7 deal with USB?

nergzd723 avatar Apr 09 '20 08:04 nergzd723

Surprisingly your workaround did work for me but still the checkra1n app has not appeared, which is kind of weird. Therefore, it must be a bug as I have tried using the beta 10.1 on both my 5s and two official USB cables, without immediate success, while my 6s worked flawlessly (besides of the checkra1n app not appearing but I'm convinced it is a conflict between Unc0ver and Chechra1n)

Un4givenPG avatar Apr 09 '20 09:04 Un4givenPG

Surprisingly your workaround did work for me but still the checkra1n app has not appeared, which is kind of weird. Therefore, it must be a bug as I have tried using the beta 10.1 on both my 5s and two official USB cables, without immediate success, while my 6s worked flawlessly (besides of the checkra1n app not appearing but I'm convinced it is a conflict between Unc0ver and Chechra1n)

Just wait a little while. App doesn't appear immediately in my case too, I started searching on Reddit why it doesn't work, and then when I closed Reddit the app appeared. So you need to wait 2-5 mins for it to appear.

nergzd723 avatar Apr 09 '20 09:04 nergzd723

This is exactly what happened. Thank you for your help

Un4givenPG avatar Apr 09 '20 09:04 Un4givenPG

On my 5s on 12.4.6 it takes less than a minute, but I guess this will vary a lot depending on battery health and how much the device gets underclocked as a result... :/

I'll change the title and mark it as deferred, not sure if we want to/can really do something about this.

Siguza avatar Apr 09 '20 10:04 Siguza

@Siguza , but that's not the only issue. It still freezes on Right before trigger and needs manual reconnection of device after watchdog fires.

edit: described it on #1171

nergzd723 avatar Apr 09 '20 10:04 nergzd723

On my 5s on 12.4.6 it takes less than a minute, but I guess this will vary a lot depending on battery health and how much the device gets underclocked as a result... :/

I'll change the title and mark it as deferred, not sure if we want to/can really do something about this.

I really want to jailbreak my A7 device and I'm waiting more than 1 month for A7 fix :/ . If you can't fix this, at least add 0.9.7 Linux support for A7 devices or fix this issue next update. We cannot wait another month for update. Thanks for your hardworking and effort. We know you have a lot of pressure on you.

CanerKaraca23 avatar Apr 09 '20 11:04 CanerKaraca23

On my 5s on 12.4.6 it takes less than a minute, but I guess this will vary a lot depending on battery health and how much the device gets underclocked as a result... :/

I'll change the title and mark it as deferred, not sure if we want to/can really do something about this.

I really want to jailbreak my A7 device and I'm waiting more than 1 month for A7 fix :/ . If you can't fix this, at least add 0.9.7 Linux support for A7 devices or fix this issue next update. We cannot wait another month for update. Thanks for your hardworking and effort. We know you have a lot of pressure on you.

Just use a workaround, it will work just fine.

nergzd723 avatar Apr 09 '20 11:04 nergzd723

So I unplugged and plugged my device on right before trigger step and said done and booted my device but there is nothing on my home screen.

CanerKaraca23 avatar Apr 09 '20 12:04 CanerKaraca23

So I unplugged and plugged my device on right before trigger step and said done and booted my device but there is nothing on my home screen.

Surprisingly your workaround did work for me but still the checkra1n app has not appeared, which is kind of weird. Therefore, it must be a bug as I have tried using the beta 10.1 on both my 5s and two official USB cables, without immediate success, while my 6s worked flawlessly (besides of the checkra1n app not appearing but I'm convinced it is a conflict between Unc0ver and Chechra1n)

Just wait a little while. App doesn't appear immediately in my case too, I started searching on Reddit why it doesn't work, and then when I closed Reddit the app appeared. So you need to wait 2-5 mins for it to appear.

nergzd723 avatar Apr 09 '20 12:04 nergzd723

Hello, I have iPhone 5s and I can't jailbreak my phone on bootra1n 0.10.1. I disabled my password. I tried USB Safe, RAM and normal mode. Tried verbose and safe mode. I unpluged and pluged my phone on right before trigger step and checkra1n boots my device and finally gaves error -77 error. I disabled my password. I don't have original Apple cable I don't know its cause because of this.

CanerKaraca23 avatar Apr 09 '20 16:04 CanerKaraca23

Hello, I have iPhone 5s and I can't jailbreak my phone on bootra1n 0.10.1. I disabled my password. I tried USB Safe, RAM and normal mode. Tried verbose and safe mode. I unpluged and pluged my phone on right before trigger step and checkra1n boots my device and finally gaves error -77 error. I disabled my password. I don't have original Apple cable I don't know its cause because of this.

Wait till watchdog fires, you can do

cat /dev/kmsg And then wait for an linux kernel watchdog to fire, it looks like a lot of stack trace and Code: bad RIP value

Also you need to do it very quickly, just slowly take the cable out till you see DFU_SYNC... failed, then plug the cable back in.

nergzd723 avatar Apr 09 '20 16:04 nergzd723

Hello, I have iPhone 5s and I can't jailbreak my phone on bootra1n 0.10.1. I disabled my password. I tried USB Safe, RAM and normal mode. Tried verbose and safe mode. I unpluged and pluged my phone on right before trigger step and checkra1n boots my device and finally gaves error -77 error. I disabled my password. I don't have original Apple cable I don't know its cause because of this.

Wait till watchdog fires, you can do

cat /dev/kmsg And then wait for an linux kernel watchdog to fire, it looks like a lot of stack trace and Code: bad RIP value

Also you need to do it very quickly, just slowly take the cable out till you see DFU_SYNC... failed, then plug the cable back in.

I'm already doing very quickly. I'm using bootra1n so I can't enter "cat /dev/kmsg" . What is watchdog fires?

CanerKaraca23 avatar Apr 09 '20 17:04 CanerKaraca23

Hello, I have iPhone 5s and I can't jailbreak my phone on bootra1n 0.10.1. I disabled my password. I tried USB Safe, RAM and normal mode. Tried verbose and safe mode. I unpluged and pluged my phone on right before trigger step and checkra1n boots my device and finally gaves error -77 error. I disabled my password. I don't have original Apple cable I don't know its cause because of this.

Wait till watchdog fires, you can do cat /dev/kmsg And then wait for an linux kernel watchdog to fire, it looks like a lot of stack trace and Code: bad RIP value Also you need to do it very quickly, just slowly take the cable out till you see DFU_SYNC... failed, then plug the cable back in.

I'm already doing very quickly. I'm using bootra1n so I can't enter "cat /dev/kmsg" . What is watchdog fires?

There's a bug, and because of it kernel watchdog freezes the process when it's locked more than 2 minutes. If you can't see kernel logs, wait 3 minutes after you see right before trigger, and then very quickly unplug and connect the device.

nergzd723 avatar Apr 09 '20 17:04 nergzd723

@Siguza , I think we should distinguish these two bugs. One bug got fixed(the one when PongoOS couldn't mount something on A7) and this one, which is usbfs bug. I thought that the usbfs bug was triggering that PongoOS failure, but it seems it's not.

nergzd723 avatar Apr 09 '20 17:04 nergzd723

Could you guys record a video showing how to get watchdog fires thing on bootra1n or at least how to jailbreak and solve the problem when jailbreaking ios 12.4--> 12.4.6 iPhone 5s A7

Baker19788 avatar Apr 09 '20 18:04 Baker19788

Could you guys record a video showing how to get watchdog fires thing on bootra1n or at least how to jailbreak and solve the problem when jailbreaking ios 12.4--> 12.4.6 iPhone 5s A7

Okay, I will do more simple guide.

  1. Connect your A7 device to PC.
  2. Run sudo checkra1n from terminal or launch a GUI version of checkra1n.
  3. Wait for freeze on Right before trigger(this is the real bug setup)(actually can take a while, 1-2 minutes to be sure)
  4. Then, either run cat /dev/kmsg from terminal and look for stack trace, or wait 5 minutes(to be completely sure) after Right before trigger screen.(this is when the watchdog fires and freezes checkra1n process)
  5. It's pretty complicated, but you'll get it on 2-3 attempt. Slowly start taking the cable out, very slowly, but make sure you won't plug the cable out(if you take cable out for a second or two, it will boot back to iOS). As soon as you'll see DFUSyncUpload FAILED -1, let go the cable, and place your device on the table. It should boot PongoOS and then the iOS.

Hopefully it would be helpful

Best regards, Mark Hargreaves

nergzd723 avatar Apr 09 '20 18:04 nergzd723

I have an iPad air (A7 device) with firmware 12.4.5. I am using the linux version (ubuntu) of checkra1n 0.10.1 beta. I am happy to let people know that the new version of checkra1n works! Checkra1n gets to the "right before trigger this is the real bug setup" in 1 to 2 minutes and then freezes. Unplug and re-plug in the lightening connector. It will then say booting and jailbreak the device. The ipad boots up but does not show the checkra1n app ( if it was not prevously installed). Unplug and re-plug the lightening connector in again and the checkra1n app will install. From there you can install cydia. Thanks to the checkra1n team for solving the A7 device problem!

lb99 avatar Apr 09 '20 18:04 lb99

I can confirm this is an issue, I get a usbfs (gets stuck on "Right before trigger (this is the real bug setup)") error when jailbreaking my iPhone 5s (A7 Device) with checkra1n 0.10.1, however replugging the device when it gets stuck on "Right before trigger (this is the real bug setup)" fixes the problem and jailbreaks successfully.

AMDBartek avatar Apr 09 '20 18:04 AMDBartek

i'll try it

maxii26 avatar Apr 09 '20 19:04 maxii26

I can confirm this is an issue, I get a usbfs (gets stuck on "Right before trigger (this is the real bug setup)") error when jailbreaking my iPhone 5s (A7 Device) with checkra1n 0.10.1, however replugging the device when it gets stuck on "Right before trigger (this is the real bug setup)" fixes the problem and jailbreaks successfully.

Not working for me :/ I'm getting error -77. I removed password and FMY already.

CanerKaraca23 avatar Apr 09 '20 19:04 CanerKaraca23

@CanerKaraca23 You should not need to remove password/passcode/TouchID/FaceID from the device. Before you replug the device let checkra1n sit on the "right before trigger" stage for at least 15 seconds and see how that goes.

AMDBartek avatar Apr 09 '20 20:04 AMDBartek

@CanerKaraca23 You should not need to remove password/passcode/TouchID/FaceID from the device. Before you replug the device let checkra1n sit on the "right before trigger" stage for at least 15 seconds and see how that goes. Watchdog freezes the process after 120 secs of inactivity, so you need to wait at least 2 mins. I haven't got any luck without watchdog stopping the process.

nergzd723 avatar Apr 09 '20 20:04 nergzd723

I can confirm that it is linux-only bug, checkra1n on my Mac Mini on Catalina is working fine.

nergzd723 avatar Apr 09 '20 20:04 nergzd723

@CanerKaraca23 You should not need to remove password/passcode/TouchID/FaceID from the device. Before you replug the device let checkra1n sit on the "right before trigger" stage for at least 15 seconds and see how that goes.

I said, I already removed, disabled all of them.

CanerKaraca23 avatar Apr 09 '20 21:04 CanerKaraca23

My TouchID is broken. Could it be due to this?

CanerKaraca23 avatar Apr 09 '20 22:04 CanerKaraca23

No, I don’t think that checkra1n breaks TouchID functionality as I have jailbroken with checkra1n and my TouchID still works. Maybe you have installed a bad tweak?

AMDBartek avatar Apr 09 '20 22:04 AMDBartek

No, I don’t think that checkra1n breaks TouchID functionality as I have jailbroken with checkra1n and my TouchID still works. Maybe you have installed a bad tweak?

I think @CanerKaraca23 meant that he already has broken TID, and asked if that could affect checkra1n. AFAIK, no, it can't affect the jb process.

nergzd723 avatar Apr 09 '20 23:04 nergzd723

I can confirm it worked on my iPhone 5S (iOS 12.4.5) by gently pulling the lightning cable when checkra1n was stuck in "right before trigger". Thanks for the tip!

juliocesarfort avatar Apr 10 '20 09:04 juliocesarfort

I have jailbreaked and bypassed my idevice without any problem using bootra1n version 10.1. I did also get stuck in right before trigger but that didnt stop me the thing that i've done is still holding the home buttom when entering dfu mode and i did wait around 1-2 minutes when it got stuck on right before trigger while holding the home button. After i did swap usb port which caused the the checkra1n app to switch to booting and this did jailbreak my phone.

Baker19788 avatar Apr 10 '20 10:04 Baker19788