futurerestore icon indicating copy to clipboard operation
futurerestore copied to clipboard

Failed to Restore from IOS 13.3 to 13.2.3

Open ramzburn opened this issue 5 years ago • 19 comments

I am having this error every time i try to downgrade my IP7plus. ERROR: zip_name_locate: Firmware/Mav16-7.30.01.Release.bbfw ERROR: Unable to extract baseband firmware from ipsw ERROR: Unable to send baseband data ERROR: Unable to successfully restore device Cleaning up... [exception]: what=ERROR: Unable to restore device

code=67895313 line=1036 file=futurerestore.cpp commit count=29: commit sha =2994651a10d8176a298b31e7706b4b6af97975d1: Done: restoring failed!

ramzburn avatar Jan 02 '20 07:01 ramzburn

Complete Log.

*** Matty's Checkm8 APNonce Setter *** Do you want to input a generator? (y,n) y Please enter your desiered generator. 0x1111111111111111 Your generator is 0x1111111111111111 0x1111111111111111 Supported Device iPhone9,2 Supported device found. Please connect device in DFU mode. Press enter when ready to continue

Cloning into 'ipwndfu_public'... remote: Enumerating objects: 463, done. remote: Total 463 (delta 0), reused 0 (delta 0), pack-reused 463 Receiving objects: 100% (463/463), 1.87 MiB | 315.00 KiB/s, done. Resolving deltas: 100% (239/239), done. Starting ipwndfu No matching processes belonging to you were found Waiting 10 seconds to allow you to enter DFU mode Attempting to get into pwndfu mode Please just enter DFU mode again on each reboot The script will run ipwndfu again and again until the device is in PWNDFU mode *** checkm8 exploit by axi0mX *** *** modified version by Linus Henze *** *** s5l8965x support by Matthew Pierson *** Found: CPID:8010 CPRV:11 CPFM:03 SCEP:01 BDID:0A ECID:001968EC28D1803A IBFL:3C SRTG:[iBoot-2696.0.0.1.33] Device is now in pwned DFU Mode. (0.78 seconds) Device is NOT an iPhone X, using Linus's signature check remover *** SecureROM Signature check remover by Linus Henze *** Found: CPID:8010 CPRV:11 CPFM:03 SCEP:01 BDID:0A ECID:001968EC28D1803A IBFL:3C SRTG:[iBoot-2696.0.0.1.33] PWND:[checkm8] Applying patches... Successfully applied patches Resetting device state

  • This will effectiveley disable pwned DFU Mode
  • Only the signature patches will remain Device is now ready to accept unsigned images Device is now in PWNDFU mode with signature checks removed (Thanks to Linus Henze & akayn) Entering PWNREC mode [==================================================] 100.0% Entered PWNREC mode Current nonce NONC: cd31f9fc9164278b117cf76c22ad3f4198bc04645ab07be59b2f6b388ee0683d Setting nonce to 0x1111111111111111 Waiting for device to restart into recovery mode New nonce NONC: 27325c8258be46e69d9ee57fa9a8fbc28b873df434e5e702a8b27999551138ae We are done!

You can now futurerestore to the firmware that this SHSH is vaild for Assuming that signed SEP and Baseband are compatible Amillas-iMac:checkm8-nonce-setter-master amilla$ /Volumes/DATA/Downgrade/futurerestore -t /Volumes/DATA/Downgrade/7152237924155450_iPhone9,2_d11ap_13.2.3-17B111_27325c8258be46e69d9ee57fa9a8fbc28b873df434e5e702a8b27999551138ae.shsh2 -s /Volumes/DATA/Downgrade/sep-firmware.d11.RELEASE.im4p -b /Volumes/DATA/Downgrade/Mav16-7.30.01.Release.bbfw -p /Volumes/DATA/Downgrade/BuildManifest.plist -m /Volumes/DATA/Downgrade/BuildManifest.plist /Volumes/DATA/Downgrade/iPhone_5.5_P3_13.2.3_17B111_Restore.ipsw Version: aea9c3a94334c6974100489be1e44bc44472060e - 179 Libipatcher Version: 18cf8be6788f7e7ad96dac805724b8db7afcb9b0 - 69 Odysseus for 32-bit support: yes Odysseus for 64-bit support: yes INFO: device serial number is FYQV601GHFYW [INFO] 64-bit device detected futurerestore init done reading signing ticket /Volumes/DATA/Downgrade/7152237924155450_iPhone9,2_d11ap_13.2.3-17B111_27325c8258be46e69d9ee57fa9a8fbc28b873df434e5e702a8b27999551138ae.shsh2 is done [TSSC] opening /Volumes/DATA/Downgrade/BuildManifest.plist [TSSR] User specified doesn't to request a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Did set SEP+baseband path and firmware ERROR: Unable to connect to device?! ERROR: Unable to get FirmwarePreflightInfo [WARNING] failed to read BasebandGoldCertID from device! Is it already in recovery? [WARNING] using tsschecker's fallback to get BasebandGoldCertID. This might result in invalid baseband signing status information [TSSC] opening /Volumes/DATA/Downgrade/BuildManifest.plist [TSSR] User specified to request only a Baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Found device in Recovery mode Device already in Recovery mode Found device in Recovery mode Identified device as d11ap, iPhone9,2 Extracting BuildManifest from iPSW Product version: 13.2.3 Product build: 17B111 Major: 17 Device supports Image4: true Got ApNonce from device: 27 32 5c 82 58 be 46 e6 9d 9e e5 7f a9 a8 fb c2 8b 87 3d f4 34 e5 e7 02 a8 b2 79 99 55 11 38 ae checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID [IMG4TOOL] checking buildidentity 0: [IMG4TOOL] checking buildidentity matches board ... NO [IMG4TOOL] checking buildidentity 1: [IMG4TOOL] checking buildidentity matches board ... YES [IMG4TOOL] checking buildidentity has all required hashes: [IMG4TOOL] checking hash for "AOP" OK (found "aopf" with matching hash) [IMG4TOOL] checking hash for "AppleLogo" OK (found "logo" with matching hash) [IMG4TOOL] checking hash for "BasebandFirmware" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "BatteryCharging0" OK (found "chg0" with matching hash) [IMG4TOOL] checking hash for "BatteryCharging1" OK (found "chg1" with matching hash) [IMG4TOOL] checking hash for "BatteryFull" OK (found "batF" with matching hash) [IMG4TOOL] checking hash for "BatteryLow0" OK (found "bat0" with matching hash) [IMG4TOOL] checking hash for "BatteryLow1" OK (found "bat1" with matching hash) [IMG4TOOL] checking hash for "BatteryPlugin" OK (found "glyP" with matching hash) [IMG4TOOL] checking hash for "DeviceTree" OK (found "dtre" with matching hash) [IMG4TOOL] checking hash for "Homer" OK (found "homr" with matching hash) [IMG4TOOL] checking hash for "KernelCache" OK (found "krnl" with matching hash) [IMG4TOOL] checking hash for "LLB" OK (found "illb" with matching hash) [IMG4TOOL] checking hash for "Liquid" OK (found "liqd" with matching hash) [IMG4TOOL] checking hash for "OS" OK (found "rosi" with matching hash) [IMG4TOOL] checking hash for "RecoveryMode" OK (found "recm" with matching hash) [IMG4TOOL] checking hash for "RestoreDeviceTree" OK (found "rdtr" with matching hash) [IMG4TOOL] checking hash for "RestoreKernelCache" OK (found "rkrn" with matching hash) [IMG4TOOL] checking hash for "RestoreLogo" OK (found "rlgo" with matching hash) [IMG4TOOL] checking hash for "RestoreRamDisk" OK (found "rdsk" with matching hash) [IMG4TOOL] checking hash for "RestoreSEP" OK (found "rsep" with matching hash) [IMG4TOOL] checking hash for "RestoreTrustCache" OK (found "rtsc" with matching hash) [IMG4TOOL] checking hash for "SE,Bootloader" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "SE,Firmware" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "SE,MigrationOS" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "SE,OS" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "SEP" OK (found "sepi" with matching hash) [IMG4TOOL] checking hash for "StaticTrustCache" OK (found "trst" with matching hash) [IMG4TOOL] checking hash for "ftap" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "ftsp" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "iBEC" OK (found "ibec" with matching hash) [IMG4TOOL] checking hash for "iBSS" OK (found "ibss" with matching hash) [IMG4TOOL] checking hash for "iBoot" OK (found "ibot" with matching hash) [IMG4TOOL] checking hash for "rfta" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "rfts" IGN (no digest in BuildManifest) Verified APTicket to be valid for this restore Variant: Customer Erase Install (IPSW) This restore will erase your device data. Using cached filesystem from '/Volumes/DATA/Downgrade/iPhone_5.5_P3_13.2.3_17B111_Restore/048-90842-106.dmg' Extracting iBEC.d11.RELEASE.im4p... Personalizing IMG4 component iBEC... Sending iBEC (474503 bytes)... waiting for device to reconnect... Getting SepNonce in recovery mode... 3b 8b 45 c7 b0 d2 76 20 19 40 1b db 0b 60 1c 04 19 e9 bb 9b Getting ApNonce in recovery mode... 27 32 5c 82 58 be 46 e6 9d 9e e5 7f a9 a8 fb c2 8b 87 3d f4 34 e5 e7 02 a8 b2 79 99 55 11 38 ae [WARNING] Setting bgcolor to green! If you don't see a green screen, then your device didn't boot iBEC correctly Recovery Mode Environment: iBoot build-version=iBoot-5540.40.51 iBoot build-style=RELEASE Sending RestoreLogo... Extracting applelogo@3x~iphone.im4p... Personalizing IMG4 component RestoreLogo... Sending RestoreLogo (19808 bytes)... ramdisk-size=0x20000000 Extracting 048-90011-111.dmg... Personalizing IMG4 component RestoreRamDisk... Sending RestoreRamDisk (101786053 bytes)... Extracting 048-90011-111.dmg.trustcache... Personalizing IMG4 component RestoreTrustCache... Sending RestoreTrustCache (10949 bytes)... Extracting DeviceTree.d11ap.im4p... Personalizing IMG4 component RestoreDeviceTree... Sending RestoreDeviceTree (162583 bytes)... Extracting kernelcache.release.iphone9... Personalizing IMG4 component RestoreKernelCache... Sending RestoreKernelCache (14202045 bytes)... getting SEP ticket Trying to fetch new SHSH blob Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Received SHSH blobs About to restore device... Connecting now... Connected to com.apple.mobile.restored, version 15 Device ffffffffffffffffffffffffffffffff00000003 has successfully entered restore mode Hardware Information: BoardID: 10 ChipID: 32784 UniqueChipID: 7152237924155450 ProductionMode: true Starting FDR listener thread About to send RootTicket... Sending RootTicket now... Done sending RootTicket Waiting for NAND (28) Updating NAND Firmware (58) About to send NORData... Found firmware path Firmware/all_flash Getting firmware manifest from build identity Extracting LLB.d11.RELEASE.im4p... Personalizing IMG4 component LLB... Extracting applelogo@3x~iphone.im4p... Personalizing IMG4 component AppleLogo... Extracting batterycharging0@3x~iphone.im4p... Personalizing IMG4 component BatteryCharging0... Extracting batterycharging1@3x~iphone.im4p... Personalizing IMG4 component BatteryCharging1... Extracting batteryfull@3x~iphone.im4p... Personalizing IMG4 component BatteryFull... Extracting batterylow0@3x~iphone.im4p... Personalizing IMG4 component BatteryLow0... Extracting batterylow1@3x~iphone.im4p... Personalizing IMG4 component BatteryLow1... Extracting glyphplugin@1920~iphone-lightning.im4p... Personalizing IMG4 component BatteryPlugin... Extracting DeviceTree.d11ap.im4p... Personalizing IMG4 component DeviceTree... Extracting liquiddetect@1920~iphone-lightning.im4p... Personalizing IMG4 component Liquid... Extracting recoverymode@1920~iphone-lightning.im4p... Personalizing IMG4 component RecoveryMode... Extracting iBoot.d11.RELEASE.im4p... Personalizing IMG4 component iBoot... Personalizing IMG4 component RestoreSEP... Personalizing IMG4 component SEP... Sending NORData now... Done sending NORData Unmounting filesystems (29) Unmounting filesystems (29) Unmounting filesystems (29) Unmounting filesystems (29) Checking filesystems (15) About to send FDR Trust data... Sending FDR Trust data now... Done sending FDR Trust Data Unmounting filesystems (29) Unmounting filesystems (29) Unmounting filesystems (29) Unmounting filesystems (29) Creating partition map (11) Creating filesystem (12) About to send filesystem... Connected to ASR Validating the filesystem Filesystem validated Sending filesystem now... [==================================================] 100.0% Done sending filesystem Verifying restore (14) [==================================================] 100.0% Checking filesystems (15) Creating Protected Volume (67) Unmounting filesystems (29) Unmounting filesystems (29) Unmounting filesystems (29) Unmounting filesystems (29) Checking filesystems (15) Checking filesystems (15) Checking filesystems (15) Checking filesystems (15) Mounting filesystems (16) Mounting filesystems (16) Mounting filesystems (16) About to send KernelCache... Extracting kernelcache.release.iphone9... Personalizing IMG4 component KernelCache... Sending KernelCache now... Done sending KernelCache Installing kernelcache (27) About to send DeviceTree... Extracting DeviceTree.d11ap.im4p... Personalizing IMG4 component DeviceTree... Sending DeviceTree now... Done sending DeviceTree Installing DeviceTree (61) Flashing firmware (18) [==================================================] 100.0% Requesting FUD data (36) Found FUD component 'AOP' Found FUD component 'Homer' Found FUD component 'RestoreTrustCache' Found FUD component 'StaticTrustCache' Sending FUD image list Extracting aopfw-t8010aop.im4p... Personalizing IMG4 component AOP... Sending FUD data for AOP... Extracting homer_D11.im4p... Personalizing IMG4 component Homer... Sending FUD data for Homer... Extracting 048-90011-111.dmg.trustcache... Personalizing IMG4 component RestoreTrustCache... Sending FUD data for RestoreTrustCache... Extracting 048-90842-106.dmg.trustcache... Personalizing IMG4 component StaticTrustCache... Sending FUD data for StaticTrustCache... Updating gas gauge software (47) Updating gas gauge software (47) Updating Stockholm (55) Requesting FUD data (36) Found FUD component 'AOP' Found FUD component 'Homer' Found FUD component 'RestoreTrustCache' Found FUD component 'StaticTrustCache' Sending FUD image list Updating baseband (19) About to send BasebandData... sending request without baseband nonce Sending Baseband TSS request... Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Received Baseband SHSH blobs ERROR: zip_name_locate: Firmware/Mav16-7.30.01.Release.bbfw ERROR: Unable to extract baseband firmware from ipsw ERROR: Unable to send baseband data ERROR: Unable to successfully restore device Cleaning up... [exception]: what=ERROR: Unable to restore device

code=67895313 line=1036 file=futurerestore.cpp commit count=29: commit sha =2994651a10d8176a298b31e7706b4b6af97975d1: Done: restoring failed!

ramzburn avatar Jan 02 '20 07:01 ramzburn

How to resolved this Issue. Thanks

ramzburn avatar Jan 02 '20 07:01 ramzburn

Come risolvere questo problema. Grazie

Same problem

salvatore8686 avatar Jan 02 '20 13:01 salvatore8686

Restore it with '-d' parameter and give a log.

s0uthwest avatar Jan 03 '20 15:01 s0uthwest

Use 180 to restore from iOS 13.3 to 13.2.3, still get this error. Version: 38b168002bca318c91068fc194abd36e2d54f155 - 180 error log:

Received Baseband SHSH blobs
common.c:printing 20753 bytes plist:

...(plist file content)

ERROR: zip_name_locate: Firmware/Mav10-9.30.02.Release.bbfw
ERROR: Unable to extract baseband firmware from ipsw
ERROR: Unable to send baseband data
ERROR: Unable to successfully restore device
No data to read (timeout)
FDR 0x7fdfd5424910 terminating...
Cleaning up...
[exception]:
what=ERROR: Unable to restore device

code=67829777
line=1035
file=futurerestore.cpp
commit count=29:
commit sha  =2994651a10d8176a298b31e7706b4b6af97975d1:
Done: restoring failed!

tylinux avatar Jan 04 '20 12:01 tylinux

I did a little test. I unzip iOS 13.2.3's ipsw file, and put the bbfw of iOS 13 into iOS 13.2.3's Firmware/ folder and recreate the ipsw, then, i restore succeeded.

Reading data from /var/tmp/ffffffffffffffffffffffffffffffff00000019N4y7pO
Sending BasebandData now...
Done sending BasebandData
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
Updating Baseband completed.
Updating SE Firmware (59)
Updating Veridian (66)
Fixing up /var (17)
Creating system key bag (50)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
FDR 0x7fc229f6e2b0 got sync message
Connecting to FDR client at port 49203
FDR Received 131 bytes
Got device identifier 6633487374b0dc495cff
FDR connected in reply to sync message, starting command thread
FDR 0x7fc229f6e2b0 waiting for message...
FDR 0x7fc229ca44c0 waiting for message...
FDR 0x7fc229ca44c0 got plist message
FDR Received 59 bytes
FDR sending 52 bytes:
common.c:printing 214 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Pong</key>
	<true/>
</dict>
</plist>
FDR Sent 52 bytes
FDR 0x7fc229ca44c0 terminating...
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
FDR 0x7fc229f6e2b0 terminating...
Cleaning up...
Done: restoring succeeded!

tylinux avatar Jan 04 '20 14:01 tylinux

same Error using Version 180. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Received Baseband SHSH blobs ERROR: zip_name_locate: Firmware/Mav16-7.30.01.Release.bbfw ERROR: Unable to extract baseband firmware from ipsw ERROR: Unable to send baseband data ERROR: Unable to successfully restore device Cleaning up... [exception]: what=ERROR: Unable to restore device

code=67829777 line=1035 file=futurerestore.cpp commit count=29: commit sha =2994651a10d8176a298b31e7706b4b6af97975d1: Done: restoring failed!

ramzburn avatar Jan 05 '20 01:01 ramzburn

Successfully Downgraded IP7 Plus from IOS 13.3 to 13.2.3, using tylinux process. Thank you tihmstar for the Futurerestore Update, Thank you tylinux for the info..

ramzburn avatar Jan 05 '20 03:01 ramzburn

by the way i still get this error after using the latest version of futurerestore

Received Baseband SHSH blobs ERROR: zip_name_locate: Firmware/ICE16-4.01.02.Release.bbfw ERROR: Unable to extract baseband firmware from ipsw ERROR: Unable to send baseband data ERROR: Unable to successfully restore device Cleaning up... [exception]: what=ERROR: Unable to restore device

kurdak66 avatar Jan 08 '20 17:01 kurdak66

I was able to get my device restored as well using https://github.com/tihmstar/futurerestore/issues/296#issuecomment-570790424.

Manouchehri avatar Jan 17 '20 05:01 Manouchehri

Can I get a little more guidance on this please? Do I take the bbfw from the higher firmware and zip it into the lower destination firmware? Do I need to zip the higher firmware’s bbfw.plist with it, or just the bbfw itself? Do I delete the existing bbfw and bbfw.plist from the lower destination firmware, or keep them in there with the ones I am adding?

I tried this a couple of times on an iPad Air 2 going from 13.3.1 to 13.3 and got errors about unable to extract bb and firmware file being corrupt, so a little more detail on how to do the fix would be appreciated. Thanks!

PencilNotPen avatar Feb 20 '20 12:02 PencilNotPen

I did a little test. I unzip iOS 13.2.3's ipsw file, and put the bbfw of iOS 13 into iOS 13.2.3's Firmware/ folder and recreate the ipsw, then, i restore succeeded.

Reading data from /var/tmp/ffffffffffffffffffffffffffffffff00000019N4y7pO
Sending BasebandData now...
Done sending BasebandData
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
Updating Baseband completed.
Updating SE Firmware (59)
Updating Veridian (66)
Fixing up /var (17)
Creating system key bag (50)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
FDR 0x7fc229f6e2b0 got sync message
Connecting to FDR client at port 49203
FDR Received 131 bytes
Got device identifier 6633487374b0dc495cff
FDR connected in reply to sync message, starting command thread
FDR 0x7fc229f6e2b0 waiting for message...
FDR 0x7fc229ca44c0 waiting for message...
FDR 0x7fc229ca44c0 got plist message
FDR Received 59 bytes
FDR sending 52 bytes:
common.c:printing 214 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Pong</key>
	<true/>
</dict>
</plist>
FDR Sent 52 bytes
FDR 0x7fc229ca44c0 terminating...
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
FDR 0x7fc229f6e2b0 terminating...
Cleaning up...
Done: restoring succeeded!

can you tell me that how to recreate the ipsw file? thank you

ArmsZhou avatar Feb 29 '20 05:02 ArmsZhou

I did a little test. I unzip iOS 13.2.3's ipsw file, and put the bbfw of iOS 13 into iOS 13.2.3's Firmware/ folder and recreate the ipsw, then, i restore succeeded.

Reading data from /var/tmp/ffffffffffffffffffffffffffffffff00000019N4y7pO
Sending BasebandData now...
Done sending BasebandData
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
Updating Baseband completed.
Updating SE Firmware (59)
Updating Veridian (66)
Fixing up /var (17)
Creating system key bag (50)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
FDR 0x7fc229f6e2b0 got sync message
Connecting to FDR client at port 49203
FDR Received 131 bytes
Got device identifier 6633487374b0dc495cff
FDR connected in reply to sync message, starting command thread
FDR 0x7fc229f6e2b0 waiting for message...
FDR 0x7fc229ca44c0 waiting for message...
FDR 0x7fc229ca44c0 got plist message
FDR Received 59 bytes
FDR sending 52 bytes:
common.c:printing 214 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Pong</key>
	<true/>
</dict>
</plist>
FDR Sent 52 bytes
FDR 0x7fc229ca44c0 terminating...
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
FDR 0x7fc229f6e2b0 terminating...
Cleaning up...
Done: restoring succeeded!

can you tell me that how to recreate the ipsw file? thank you

i made it. i used betterzip software.🎉

ArmsZhou avatar Mar 05 '20 01:03 ArmsZhou

I did a little test. I unzip iOS 13.2.3's ipsw file, and put the bbfw of iOS 13 into iOS 13.2.3's Firmware/ folder and recreate the ipsw, then, i restore succeeded.

Reading data from /var/tmp/ffffffffffffffffffffffffffffffff00000019N4y7pO
Sending BasebandData now...
Done sending BasebandData
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
Updating Baseband completed.
Updating SE Firmware (59)
Updating Veridian (66)
Fixing up /var (17)
Creating system key bag (50)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
FDR 0x7fc229f6e2b0 got sync message
Connecting to FDR client at port 49203
FDR Received 131 bytes
Got device identifier 6633487374b0dc495cff
FDR connected in reply to sync message, starting command thread
FDR 0x7fc229f6e2b0 waiting for message...
FDR 0x7fc229ca44c0 waiting for message...
FDR 0x7fc229ca44c0 got plist message
FDR Received 59 bytes
FDR sending 52 bytes:
common.c:printing 214 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Pong</key>
	<true/>
</dict>
</plist>
FDR Sent 52 bytes
FDR 0x7fc229ca44c0 terminating...
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
FDR 0x7fc229f6e2b0 terminating...
Cleaning up...
Done: restoring succeeded!

can you tell me that how to recreate the ipsw file? thank you

Hi, I have the same problem and I ask you, did you download iOS 13, unzip the ipsw of iOS 13, did you take out the iOS 13 baseband to insert it into iOS 13.2.3?

mariano3562 avatar Mar 09 '20 05:03 mariano3562

I did a little test. I unzip iOS 13.2.3's ipsw file, and put the bbfw of iOS 13 into iOS 13.2.3's Firmware/ folder and recreate the ipsw, then, i restore succeeded.

Reading data from /var/tmp/ffffffffffffffffffffffffffffffff00000019N4y7pO
Sending BasebandData now...
Done sending BasebandData
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
Updating Baseband completed.
Updating SE Firmware (59)
Updating Veridian (66)
Fixing up /var (17)
Creating system key bag (50)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
FDR 0x7fc229f6e2b0 got sync message
Connecting to FDR client at port 49203
FDR Received 131 bytes
Got device identifier 6633487374b0dc495cff
FDR connected in reply to sync message, starting command thread
FDR 0x7fc229f6e2b0 waiting for message...
FDR 0x7fc229ca44c0 waiting for message...
FDR 0x7fc229ca44c0 got plist message
FDR Received 59 bytes
FDR sending 52 bytes:
common.c:printing 214 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Pong</key>
	<true/>
</dict>
</plist>
FDR Sent 52 bytes
FDR 0x7fc229ca44c0 terminating...
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
FDR 0x7fc229f6e2b0 terminating...
Cleaning up...
Done: restoring succeeded!

can you tell me that how to recreate the ipsw file? thank you

Hi, I have the same problem and I ask you, did you download iOS 13, unzip the ipsw of iOS 13, did you take out the iOS 13 baseband to insert it into iOS 13.2.3?

YES, i download the iOS 13.3.1 and put all the Mavxxxx.bbfw and the associated xxxx.plist in the "Firmware/" folder into iOS 13.2.3 ipsw’s "Firmware/" folder. i just use bettezip to view the iOS 13.2.3 ipsw file (not unzip) and do this operations ,then click the save button on the top-left of betterzip window.

my english is not good. can you understand?

ArmsZhou avatar Mar 09 '20 06:03 ArmsZhou

Of course I understand you, let me try and notice your way of doing it

mariano3562 avatar Mar 09 '20 07:03 mariano3562

One more question, did you leave both files or replace them with those from 13.3.1 to 13.2.3?

Hice una pequeña prueba. Descomprimo el archivo ipsw de iOS 13.2.3, pongo el bbfw de iOS 13 en la Firmware/carpeta de iOS 13.2.3 y vuelvo a crear el ipsw , luego restauro con éxito.

Reading data from /var/tmp/ffffffffffffffffffffffffffffffff00000019N4y7pO
Sending BasebandData now...
Done sending BasebandData
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
Updating Baseband completed.
Updating SE Firmware (59)
Updating Veridian (66)
Fixing up /var (17)
Creating system key bag (50)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
FDR 0x7fc229f6e2b0 got sync message
Connecting to FDR client at port 49203
FDR Received 131 bytes
Got device identifier 6633487374b0dc495cff
FDR connected in reply to sync message, starting command thread
FDR 0x7fc229f6e2b0 waiting for message...
FDR 0x7fc229ca44c0 waiting for message...
FDR 0x7fc229ca44c0 got plist message
FDR Received 59 bytes
FDR sending 52 bytes:
common.c:printing 214 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Pong</key>
	<true/>
</dict>
</plist>
FDR Sent 52 bytes
FDR 0x7fc229ca44c0 terminating...
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
FDR 0x7fc229f6e2b0 terminating...
Cleaning up...
Done: restoring succeeded!

¿Puedes decirme cómo recrear el archivo ipsw? gracias

Hola, tengo el mismo problema y te pregunto: ¿descargaste iOS 13, descomprimiste el ipsw de iOS 13, sacaste la banda base de iOS 13 para insertarlo en iOS 13.2.3?

SÍ, descargué el iOS 13.3.1 y puse todo el Mavxxxx.bbfw y el xxxx.plist asociado en la carpeta "Firmware /" en la carpeta "Firmware /" del iOS 13.2.3 ipsw. solo uso bettezip para ver el archivo ipsw de iOS 13.2.3 (no descomprimir) y hago estas operaciones, luego hago clic en el botón Guardar en la esquina superior izquierda de la ventana de Betterzip.

Mi inglés no es bueno. ¿Entiendes?

One more question, did you leave both files or replace them with those from 13.3.1 to 13.2.3?

mariano3562 avatar Mar 09 '20 07:03 mariano3562

One more question, did you leave both files or replace them with those from 13.3.1 to 13.2.3?

Hice una pequeña prueba. Descomprimo el archivo ipsw de iOS 13.2.3, pongo el bbfw de iOS 13 en la Firmware/carpeta de iOS 13.2.3 y vuelvo a crear el ipsw , luego restauro con éxito.

Reading data from /var/tmp/ffffffffffffffffffffffffffffffff00000019N4y7pO
Sending BasebandData now...
Done sending BasebandData
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
Updating Baseband completed.
Updating SE Firmware (59)
Updating Veridian (66)
Fixing up /var (17)
Creating system key bag (50)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
FDR 0x7fc229f6e2b0 got sync message
Connecting to FDR client at port 49203
FDR Received 131 bytes
Got device identifier 6633487374b0dc495cff
FDR connected in reply to sync message, starting command thread
FDR 0x7fc229f6e2b0 waiting for message...
FDR 0x7fc229ca44c0 waiting for message...
FDR 0x7fc229ca44c0 got plist message
FDR Received 59 bytes
FDR sending 52 bytes:
common.c:printing 214 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Pong</key>
	<true/>
</dict>
</plist>
FDR Sent 52 bytes
FDR 0x7fc229ca44c0 terminating...
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
FDR 0x7fc229f6e2b0 terminating...
Cleaning up...
Done: restoring succeeded!

¿Puedes decirme cómo recrear el archivo ipsw? gracias

Hola, tengo el mismo problema y te pregunto: ¿descargaste iOS 13, descomprimiste el ipsw de iOS 13, sacaste la banda base de iOS 13 para insertarlo en iOS 13.2.3?

SÍ, descargué el iOS 13.3.1 y puse todo el Mavxxxx.bbfw y el xxxx.plist asociado en la carpeta "Firmware /" en la carpeta "Firmware /" del iOS 13.2.3 ipsw. solo uso bettezip para ver el archivo ipsw de iOS 13.2.3 (no descomprimir) y hago estas operaciones, luego hago clic en el botón Guardar en la esquina superior izquierda de la ventana de Betterzip. Mi inglés no es bueno. ¿Entiendes?

One more question, did you leave both files or replace them with those from 13.3.1 to 13.2.3?

i left both files, did not delete any file in 13.2.3 ipsw. Good luck for you!

ArmsZhou avatar Mar 09 '20 07:03 ArmsZhou

if I could demote it from iOS 13.3.1 to 13.2.3 as you taught me to do it.thanks for sharing ..!

mariano3562 avatar Mar 09 '20 09:03 mariano3562