Failing to spawn app (unexpectedly hit an invalid memory address with codes)

[jotamjr]

Hi there,

I was testing 16.0.8 but when trying to spawn an app using the -f flag I get the following message:

❯ frida -U -f com.apple.calculator
     ____
    / _  |   Frida 16.0.8 - A world-class dynamic instrumentation toolkit
   | (_| |
    > _  |   Commands:
   /_/ |_|       help      -> Displays the help system
   . . . .       object?   -> Display information about 'object'
   . . . .       exit/quit -> Exit
   . . . .
   . . . .   More info at https://frida.re/docs/home/
   . . . .
   . . . .   Connected to iPhone (id=00008020-)
Failed to attach: unexpectedly hit an invalid memory address with codes [ 0x1, 0x2 ] at dyld!0xe0a4 while initializing suspended process

I'm able to attach to a running application (searched for the calculator pid on this example):

❯ frida -U -p 11666
     ____
    / _  |   Frida 16.0.8 - A world-class dynamic instrumentation toolkit
   | (_| |
    > _  |   Commands:
   /_/ |_|       help      -> Displays the help system
   . . . .       object?   -> Display information about 'object'
   . . . .       exit/quit -> Exit
   . . . .
   . . . .   More info at https://frida.re/docs/home/
   . . . .
   . . . .   Connected to iPhone (id=00008020-)

[iPhone::PID::11666 ]-> exit

I downgraded and tested with 16.0.2 and 16.0.7 and all seems good on those 2 versions. Please let me know if I can assist further.

Regards,

[cybacoffee]

Hi devs & @jotamjr,

I have the same issue with iOS, Android works - here is my setup, working from macOS 14.2.1:

iPhone 7 with iOS 15.8.1
Jailbreak with meowbrek2 - 1.1.7
frida 16.1.11

Here some frida tests on iOS:

~ frida-ls-devices
Id                                        Type    Name                   OS
----------------------------------------  ------  ---------------------  ----------------
local                                     local   MacBook				 macOS 14.2.1
xxx  usb                                  iPhone 7     			 iPhone OS 15.8.1
barebone                                  remote  GDB Remote Stub
socket                                    remote  Local Socket

~ frida-ps -Uia
PID  Name                                       Identifier
---  -----------------------------------------  --------------------------------------------------------
508   AppStore                               com.apple.AppStore
506   MobileSafari                           com.apple.mobilesafari
473   Search                                 com.apple.Spotlight
510   Settings                               com.apple.Preferences
509   TrollMisaka                            com.straight-tamago.trollmisaka
511   TrollStore                             com.opa334.TrollStore
507   WireGuard                              com.wireguard.ios
513   meow                                   jp.meowbrek2.beta.troll
  -   AAUIViewService                        com.apple.AAUIViewService
....
....
....


~ frida -U MobileSafari
     ____
    / _  |   Frida 16.1.11 - A world-class dynamic instrumentation toolkit
   | (_| |
    > _  |   Commands:
   /_/ |_|       help      -> Displays the help system
   . . . .       object?   -> Display information about 'object'
   . . . .       exit/quit -> Exit
   . . . .
   . . . .   More info at https://frida.re/docs/home/
   . . . .
   . . . .   Connected to iPhone (id=xxx)
Failed to attach: unexpected error while probing dyld of target process

Also objection with simple ~ objection explore is not working:

~ objection explore
Checking for a newer version of objection...
Using USB device `iPhone`
Unable to connect to the frida server: unable to launch iOS app via FBS: The operation couldn’t be completed. Application info provider (FBSApplicationLibrary) returned nil for "Gadget"

Pointing directly to pid is working with objection and frida, but only when App is on foreground:

objection --gadget 1234 explore  

~ frida -U -p 506
     ____
    / _  |   Frida 16.1.11 - A world-class dynamic instrumentation toolkit
   | (_| |
    > _  |   Commands:
   /_/ |_|       help      -> Displays the help system
   . . . .       object?   -> Display information about 'object'
   . . . .       exit/quit -> Exit
   . . . .
   . . . .   More info at https://frida.re/docs/home/
   . . . .
   . . . .   Connected to iPhone (id=xxx)

[iPhone::PID::506 ]->