Null Pointer Dereference / Invalid Memory

[blacktop]

Null Pointer Dereference / Invalid Memory

[blacktop]

Yeah I'd say Go is for pythonistas who want to write C, but don't want to write C 😏

[blacktop]

building a release for the possible fix now

[blacktop]

😩 👍

[turnerrocks1]

I did try going through and reading through and try to understand why this happens ... first time ever reading go language seem like a weird mix of C and python syntax. SOOO major props to you creating a complex program such as this out of it but here's the log basically.

"bootywarrior@Bootys-MacBook-Air ~ % /Users/bootywarrior/Downloads/ipsw_3.1.30_macOS_arm64/ipsw symbolicate /Users/bootywarrior/Desktop/web.ips /Users/bootywarrior/Downloads/dyld_shared_cache_arm64
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x2 addr=0x98 pc=0x1037561c0]

goroutine 1 [running]:
github.com/blacktop/ipsw/cmd/ipsw/cmd.glob..func63(0x1042ef1c0, {0x14000253340, 0x2, 0x2})
github.com/blacktop/ipsw/cmd/ipsw/cmd/symbolicate.go:154 +0x620
github.com/spf13/cobra.(*Command).execute(0x1042ef1c0, {0x14000253300, 0x2, 0x2})
github.com/spf13/[email protected]/command.go:856 +0x668
github.com/spf13/cobra.(*Command).ExecuteC(0x1042eea40)
github.com/spf13/[email protected]/command.go:974 +0x410
github.com/spf13/cobra.(*Command).Execute(...)
github.com/spf13/[email protected]/command.go:902
github.com/blacktop/ipsw/cmd/ipsw/cmd.Execute()
github.com/blacktop/ipsw/cmd/ipsw/cmd/root.go:57 +0x30
main.main()
github.com/blacktop/ipsw/cmd/ipsw/main.go:27 +0x20"

[turnerrocks1]

I can't quite recalls if the stack calls grow up and heap grows down ? anyways does this mean the crash occurs in cmd.globbalfunc63?

[blacktop]

I think it is because there was an Image in the backtrace that wasn't also in the dyld_shared_cache so I did a lookup and then just assumed that what your backtrace has was legit and then used the image object (which was actually nil) I need to just re-write that func, because it's bit me before.

I assume that since that is a MUCH older version of iOS that the format is weird or different than I was expecting, so I take JUST the last part of the image (incase your backtrace has a FULL path or something) and then skip if it doesn't exist in the cache.

[blacktop]

I could see it erroring like that if you were running your own app on the device and your app's name showed up in the backtrace as that name wouldn't exist in the cache

[turnerrocks1]

I think it is because there was an Image in the backtrace that wasn't also in the dyld_shared_cache so I did a lookup and then just assumed that what your backtrace has was legit and then used the image object (which was actually nil) I need to just re-write that func, because it's bit me before.

I assume that since that is a MUCH older version of iOS that the format is weird or different than I was expecting, so I take JUST the last part of the image (incase your backtrace has a FULL path or something) and then skip if it doesn't exist in the cache.

Correctly and most validly said it's funny that you said that when I was in the process of making a safari jailbreak last before I gave up because my Mac was destroyed. TotallyNotSpyware was for a super older iOS Version but it was the only Safari Jailbreak that had its own dyld_shared_cache parser that pulled the cache raw from memory and got the offsets from the shared cache for the exploit. When it was my time to shine and my promise of a new safari jailbreak it took me 4-5 months to actually learn TNS sharedcacheparser and had to to rewrite in for Javascript very fun indeed but that was for iOS 12.1.4 and the mach-O format and cache formate changed from the age of TNS (iOS 10) to my GitHub safari jailbreak (iOS 12) so nice analysis.

[blacktop]

So the fix worked?

[turnerrocks1]

nope closing issue