Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Failed to Restore from IOS 13.3 to 13.2.3 #296

Open
ramzburn opened this issue Jan 2, 2020 · 19 comments
Open

Failed to Restore from IOS 13.3 to 13.2.3 #296

ramzburn opened this issue Jan 2, 2020 · 19 comments

Comments

@ramzburn
Copy link

ramzburn commented Jan 2, 2020

I am having this error every time i try to downgrade my IP7plus.
ERROR: zip_name_locate: Firmware/Mav16-7.30.01.Release.bbfw
ERROR: Unable to extract baseband firmware from ipsw
ERROR: Unable to send baseband data
ERROR: Unable to successfully restore device
Cleaning up...
[exception]:
what=ERROR: Unable to restore device

code=67895313
line=1036
file=futurerestore.cpp
commit count=29:
commit sha =2994651a10d8176a298b31e7706b4b6af97975d1:
Done: restoring failed!

@ramzburn
Copy link
Author

ramzburn commented Jan 2, 2020

Complete Log.

*** Matty's Checkm8 APNonce Setter ***
Do you want to input a generator? (y,n)
y
Please enter your desiered generator.
0x1111111111111111
Your generator is 0x1111111111111111
0x1111111111111111
Supported Device
iPhone9,2
Supported device found.
Please connect device in DFU mode. Press enter when ready to continue

Cloning into 'ipwndfu_public'...
remote: Enumerating objects: 463, done.
remote: Total 463 (delta 0), reused 0 (delta 0), pack-reused 463
Receiving objects: 100% (463/463), 1.87 MiB | 315.00 KiB/s, done.
Resolving deltas: 100% (239/239), done.
Starting ipwndfu
No matching processes belonging to you were found
Waiting 10 seconds to allow you to enter DFU mode
Attempting to get into pwndfu mode
Please just enter DFU mode again on each reboot
The script will run ipwndfu again and again until the device is in PWNDFU mode
*** checkm8 exploit by axi0mX ***
*** modified version by Linus Henze ***
*** s5l8965x support by Matthew Pierson ***
Found: CPID:8010 CPRV:11 CPFM:03 SCEP:01 BDID:0A ECID:001968EC28D1803A IBFL:3C SRTG:[iBoot-2696.0.0.1.33]
Device is now in pwned DFU Mode.
(0.78 seconds)
Device is NOT an iPhone X, using Linus's signature check remover
*** SecureROM Signature check remover by Linus Henze ***
Found: CPID:8010 CPRV:11 CPFM:03 SCEP:01 BDID:0A ECID:001968EC28D1803A IBFL:3C SRTG:[iBoot-2696.0.0.1.33] PWND:[checkm8]
Applying patches...
Successfully applied patches
Resetting device state

  • This will effectiveley disable pwned DFU Mode
  • Only the signature patches will remain
    Device is now ready to accept unsigned images
    Device is now in PWNDFU mode with signature checks removed (Thanks to Linus Henze & akayn)
    Entering PWNREC mode
    [==================================================] 100.0%
    Entered PWNREC mode
    Current nonce
    NONC: cd31f9fc9164278b117cf76c22ad3f4198bc04645ab07be59b2f6b388ee0683d
    Setting nonce to 0x1111111111111111
    Waiting for device to restart into recovery mode
    New nonce
    NONC: 27325c8258be46e69d9ee57fa9a8fbc28b873df434e5e702a8b27999551138ae
    We are done!

You can now futurerestore to the firmware that this SHSH is vaild for
Assuming that signed SEP and Baseband are compatible
Amillas-iMac:checkm8-nonce-setter-master amilla$ /Volumes/DATA/Downgrade/futurerestore -t /Volumes/DATA/Downgrade/7152237924155450_iPhone9,2_d11ap_13.2.3-17B111_27325c8258be46e69d9ee57fa9a8fbc28b873df434e5e702a8b27999551138ae.shsh2 -s /Volumes/DATA/Downgrade/sep-firmware.d11.RELEASE.im4p -b /Volumes/DATA/Downgrade/Mav16-7.30.01.Release.bbfw -p /Volumes/DATA/Downgrade/BuildManifest.plist -m /Volumes/DATA/Downgrade/BuildManifest.plist /Volumes/DATA/Downgrade/iPhone_5.5_P3_13.2.3_17B111_Restore.ipsw
Version: aea9c3a94334c6974100489be1e44bc44472060e - 179
Libipatcher Version: 18cf8be6788f7e7ad96dac805724b8db7afcb9b0 - 69
Odysseus for 32-bit support: yes
Odysseus for 64-bit support: yes
INFO: device serial number is FYQV601GHFYW
[INFO] 64-bit device detected
futurerestore init done
reading signing ticket /Volumes/DATA/Downgrade/7152237924155450_iPhone9,2_d11ap_13.2.3-17B111_27325c8258be46e69d9ee57fa9a8fbc28b873df434e5e702a8b27999551138ae.shsh2 is done
[TSSC] opening /Volumes/DATA/Downgrade/BuildManifest.plist
[TSSR] User specified doesn't to request a baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Did set SEP+baseband path and firmware
ERROR: Unable to connect to device?!
ERROR: Unable to get FirmwarePreflightInfo
[WARNING] failed to read BasebandGoldCertID from device! Is it already in recovery?
[WARNING] using tsschecker's fallback to get BasebandGoldCertID. This might result in invalid baseband signing status information
[TSSC] opening /Volumes/DATA/Downgrade/BuildManifest.plist
[TSSR] User specified to request only a Baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Found device in Recovery mode
Device already in Recovery mode
Found device in Recovery mode
Identified device as d11ap, iPhone9,2
Extracting BuildManifest from iPSW
Product version: 13.2.3
Product build: 17B111 Major: 17
Device supports Image4: true
Got ApNonce from device: 27 32 5c 82 58 be 46 e6 9d 9e e5 7f a9 a8 fb c2 8b 87 3d f4 34 e5 e7 02 a8 b2 79 99 55 11 38 ae
checking APTicket to be valid for this restore...
Verified ECID in APTicket matches device ECID
checking APTicket to be valid for this restore...
Verified ECID in APTicket matches device ECID
[IMG4TOOL] checking buildidentity 0:
[IMG4TOOL] checking buildidentity matches board ... NO
[IMG4TOOL] checking buildidentity 1:
[IMG4TOOL] checking buildidentity matches board ... YES
[IMG4TOOL] checking buildidentity has all required hashes:
[IMG4TOOL] checking hash for "AOP" OK (found "aopf" with matching hash)
[IMG4TOOL] checking hash for "AppleLogo" OK (found "logo" with matching hash)
[IMG4TOOL] checking hash for "BasebandFirmware" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "BatteryCharging0" OK (found "chg0" with matching hash)
[IMG4TOOL] checking hash for "BatteryCharging1" OK (found "chg1" with matching hash)
[IMG4TOOL] checking hash for "BatteryFull" OK (found "batF" with matching hash)
[IMG4TOOL] checking hash for "BatteryLow0" OK (found "bat0" with matching hash)
[IMG4TOOL] checking hash for "BatteryLow1" OK (found "bat1" with matching hash)
[IMG4TOOL] checking hash for "BatteryPlugin" OK (found "glyP" with matching hash)
[IMG4TOOL] checking hash for "DeviceTree" OK (found "dtre" with matching hash)
[IMG4TOOL] checking hash for "Homer" OK (found "homr" with matching hash)
[IMG4TOOL] checking hash for "KernelCache" OK (found "krnl" with matching hash)
[IMG4TOOL] checking hash for "LLB" OK (found "illb" with matching hash)
[IMG4TOOL] checking hash for "Liquid" OK (found "liqd" with matching hash)
[IMG4TOOL] checking hash for "OS" OK (found "rosi" with matching hash)
[IMG4TOOL] checking hash for "RecoveryMode" OK (found "recm" with matching hash)
[IMG4TOOL] checking hash for "RestoreDeviceTree" OK (found "rdtr" with matching hash)
[IMG4TOOL] checking hash for "RestoreKernelCache" OK (found "rkrn" with matching hash)
[IMG4TOOL] checking hash for "RestoreLogo" OK (found "rlgo" with matching hash)
[IMG4TOOL] checking hash for "RestoreRamDisk" OK (found "rdsk" with matching hash)
[IMG4TOOL] checking hash for "RestoreSEP" OK (found "rsep" with matching hash)
[IMG4TOOL] checking hash for "RestoreTrustCache" OK (found "rtsc" with matching hash)
[IMG4TOOL] checking hash for "SE,Bootloader" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "SE,Firmware" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "SE,MigrationOS" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "SE,OS" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "SEP" OK (found "sepi" with matching hash)
[IMG4TOOL] checking hash for "StaticTrustCache" OK (found "trst" with matching hash)
[IMG4TOOL] checking hash for "ftap" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "ftsp" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "iBEC" OK (found "ibec" with matching hash)
[IMG4TOOL] checking hash for "iBSS" OK (found "ibss" with matching hash)
[IMG4TOOL] checking hash for "iBoot" OK (found "ibot" with matching hash)
[IMG4TOOL] checking hash for "rfta" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "rfts" IGN (no digest in BuildManifest)
Verified APTicket to be valid for this restore
Variant: Customer Erase Install (IPSW)
This restore will erase your device data.
Using cached filesystem from '/Volumes/DATA/Downgrade/iPhone_5.5_P3_13.2.3_17B111_Restore/048-90842-106.dmg'
Extracting iBEC.d11.RELEASE.im4p...
Personalizing IMG4 component iBEC...
Sending iBEC (474503 bytes)...
waiting for device to reconnect... Getting SepNonce in recovery mode... 3b 8b 45 c7 b0 d2 76 20 19 40 1b db 0b 60 1c 04 19 e9 bb 9b
Getting ApNonce in recovery mode... 27 32 5c 82 58 be 46 e6 9d 9e e5 7f a9 a8 fb c2 8b 87 3d f4 34 e5 e7 02 a8 b2 79 99 55 11 38 ae
[WARNING] Setting bgcolor to green! If you don't see a green screen, then your device didn't boot iBEC correctly
Recovery Mode Environment:
iBoot build-version=iBoot-5540.40.51
iBoot build-style=RELEASE
Sending RestoreLogo...
Extracting applelogo@3xiphone.im4p...
Personalizing IMG4 component RestoreLogo...
Sending RestoreLogo (19808 bytes)...
ramdisk-size=0x20000000
Extracting 048-90011-111.dmg...
Personalizing IMG4 component RestoreRamDisk...
Sending RestoreRamDisk (101786053 bytes)...
Extracting 048-90011-111.dmg.trustcache...
Personalizing IMG4 component RestoreTrustCache...
Sending RestoreTrustCache (10949 bytes)...
Extracting DeviceTree.d11ap.im4p...
Personalizing IMG4 component RestoreDeviceTree...
Sending RestoreDeviceTree (162583 bytes)...
Extracting kernelcache.release.iphone9...
Personalizing IMG4 component RestoreKernelCache...
Sending RestoreKernelCache (14202045 bytes)...
getting SEP ticket
Trying to fetch new SHSH blob
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Received SHSH blobs
About to restore device...
Connecting now...
Connected to com.apple.mobile.restored, version 15
Device ffffffffffffffffffffffffffffffff00000003 has successfully entered restore mode
Hardware Information:
BoardID: 10
ChipID: 32784
UniqueChipID: 7152237924155450
ProductionMode: true
Starting FDR listener thread
About to send RootTicket...
Sending RootTicket now...
Done sending RootTicket
Waiting for NAND (28)
Updating NAND Firmware (58)
About to send NORData...
Found firmware path Firmware/all_flash
Getting firmware manifest from build identity
Extracting LLB.d11.RELEASE.im4p...
Personalizing IMG4 component LLB...
Extracting applelogo@3x
iphone.im4p...
Personalizing IMG4 component AppleLogo...
Extracting batterycharging0@3xiphone.im4p...
Personalizing IMG4 component BatteryCharging0...
Extracting batterycharging1@3x
iphone.im4p...
Personalizing IMG4 component BatteryCharging1...
Extracting batteryfull@3xiphone.im4p...
Personalizing IMG4 component BatteryFull...
Extracting batterylow0@3x
iphone.im4p...
Personalizing IMG4 component BatteryLow0...
Extracting batterylow1@3xiphone.im4p...
Personalizing IMG4 component BatteryLow1...
Extracting glyphplugin@1920
iphone-lightning.im4p...
Personalizing IMG4 component BatteryPlugin...
Extracting DeviceTree.d11ap.im4p...
Personalizing IMG4 component DeviceTree...
Extracting liquiddetect@1920iphone-lightning.im4p...
Personalizing IMG4 component Liquid...
Extracting recoverymode@1920
iphone-lightning.im4p...
Personalizing IMG4 component RecoveryMode...
Extracting iBoot.d11.RELEASE.im4p...
Personalizing IMG4 component iBoot...
Personalizing IMG4 component RestoreSEP...
Personalizing IMG4 component SEP...
Sending NORData now...
Done sending NORData
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Checking filesystems (15)
About to send FDR Trust data...
Sending FDR Trust data now...
Done sending FDR Trust Data
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Creating partition map (11)
Creating filesystem (12)
About to send filesystem...
Connected to ASR
Validating the filesystem
Filesystem validated
Sending filesystem now...
[==================================================] 100.0%
Done sending filesystem
Verifying restore (14)
[==================================================] 100.0%
Checking filesystems (15)
Creating Protected Volume (67)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Checking filesystems (15)
Checking filesystems (15)
Checking filesystems (15)
Checking filesystems (15)
Mounting filesystems (16)
Mounting filesystems (16)
Mounting filesystems (16)
About to send KernelCache...
Extracting kernelcache.release.iphone9...
Personalizing IMG4 component KernelCache...
Sending KernelCache now...
Done sending KernelCache
Installing kernelcache (27)
About to send DeviceTree...
Extracting DeviceTree.d11ap.im4p...
Personalizing IMG4 component DeviceTree...
Sending DeviceTree now...
Done sending DeviceTree
Installing DeviceTree (61)
Flashing firmware (18)
[==================================================] 100.0%
Requesting FUD data (36)
Found FUD component 'AOP'
Found FUD component 'Homer'
Found FUD component 'RestoreTrustCache'
Found FUD component 'StaticTrustCache'
Sending FUD image list
Extracting aopfw-t8010aop.im4p...
Personalizing IMG4 component AOP...
Sending FUD data for AOP...
Extracting homer_D11.im4p...
Personalizing IMG4 component Homer...
Sending FUD data for Homer...
Extracting 048-90011-111.dmg.trustcache...
Personalizing IMG4 component RestoreTrustCache...
Sending FUD data for RestoreTrustCache...
Extracting 048-90842-106.dmg.trustcache...
Personalizing IMG4 component StaticTrustCache...
Sending FUD data for StaticTrustCache...
Updating gas gauge software (47)
Updating gas gauge software (47)
Updating Stockholm (55)
Requesting FUD data (36)
Found FUD component 'AOP'
Found FUD component 'Homer'
Found FUD component 'RestoreTrustCache'
Found FUD component 'StaticTrustCache'
Sending FUD image list
Updating baseband (19)
About to send BasebandData...
sending request without baseband nonce
Sending Baseband TSS request...
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Received Baseband SHSH blobs
ERROR: zip_name_locate: Firmware/Mav16-7.30.01.Release.bbfw
ERROR: Unable to extract baseband firmware from ipsw
ERROR: Unable to send baseband data
ERROR: Unable to successfully restore device
Cleaning up...
[exception]:
what=ERROR: Unable to restore device

code=67895313
line=1036
file=futurerestore.cpp
commit count=29:
commit sha =2994651a10d8176a298b31e7706b4b6af97975d1:
Done: restoring failed!

@ramzburn
Copy link
Author

ramzburn commented Jan 2, 2020

How to resolved this Issue. Thanks

@salvatore8686
Copy link

Come risolvere questo problema. Grazie

Same problem

@s0uthwest
Copy link
Contributor

Restore it with '-d' parameter and give a log.

@tylinux
Copy link

tylinux commented Jan 4, 2020

Use 180 to restore from iOS 13.3 to 13.2.3, still get this error. Version: 38b168002bca318c91068fc194abd36e2d54f155 - 180
error log:

Received Baseband SHSH blobs
common.c:printing 20753 bytes plist:

...(plist file content)

ERROR: zip_name_locate: Firmware/Mav10-9.30.02.Release.bbfw
ERROR: Unable to extract baseband firmware from ipsw
ERROR: Unable to send baseband data
ERROR: Unable to successfully restore device
No data to read (timeout)
FDR 0x7fdfd5424910 terminating...
Cleaning up...
[exception]:
what=ERROR: Unable to restore device

code=67829777
line=1035
file=futurerestore.cpp
commit count=29:
commit sha  =2994651a10d8176a298b31e7706b4b6af97975d1:
Done: restoring failed!

@tylinux
Copy link

tylinux commented Jan 4, 2020

I did a little test. I unzip iOS 13.2.3's ipsw file, and put the bbfw of iOS 13 into iOS 13.2.3's Firmware/ folder and recreate the ipsw, then, i restore succeeded.

Reading data from /var/tmp/ffffffffffffffffffffffffffffffff00000019N4y7pO
Sending BasebandData now...
Done sending BasebandData
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
Updating Baseband completed.
Updating SE Firmware (59)
Updating Veridian (66)
Fixing up /var (17)
Creating system key bag (50)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
FDR 0x7fc229f6e2b0 got sync message
Connecting to FDR client at port 49203
FDR Received 131 bytes
Got device identifier 6633487374b0dc495cff
FDR connected in reply to sync message, starting command thread
FDR 0x7fc229f6e2b0 waiting for message...
FDR 0x7fc229ca44c0 waiting for message...
FDR 0x7fc229ca44c0 got plist message
FDR Received 59 bytes
FDR sending 52 bytes:
common.c:printing 214 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Pong</key>
	<true/>
</dict>
</plist>
FDR Sent 52 bytes
FDR 0x7fc229ca44c0 terminating...
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
FDR 0x7fc229f6e2b0 terminating...
Cleaning up...
Done: restoring succeeded!

@ramzburn
Copy link
Author

ramzburn commented Jan 5, 2020

same Error using Version 180.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Received Baseband SHSH blobs
ERROR: zip_name_locate: Firmware/Mav16-7.30.01.Release.bbfw
ERROR: Unable to extract baseband firmware from ipsw
ERROR: Unable to send baseband data
ERROR: Unable to successfully restore device
Cleaning up...
[exception]:
what=ERROR: Unable to restore device

code=67829777
line=1035
file=futurerestore.cpp
commit count=29:
commit sha =2994651a10d8176a298b31e7706b4b6af97975d1:
Done: restoring failed!

@ramzburn
Copy link
Author

ramzburn commented Jan 5, 2020

Successfully Downgraded IP7 Plus from IOS 13.3 to 13.2.3, using tylinux process.
Thank you tihmstar for the Futurerestore Update,
Thank you tylinux for the info..

@kurdak66
Copy link

kurdak66 commented Jan 8, 2020

by the way i still get this error after using the latest version of futurerestore

Received Baseband SHSH blobs
ERROR: zip_name_locate: Firmware/ICE16-4.01.02.Release.bbfw
ERROR: Unable to extract baseband firmware from ipsw
ERROR: Unable to send baseband data
ERROR: Unable to successfully restore device
Cleaning up...
[exception]:
what=ERROR: Unable to restore device

@Manouchehri
Copy link

I was able to get my device restored as well using #296 (comment).

@PencilNotPen
Copy link

Can I get a little more guidance on this please? Do I take the bbfw from the higher firmware and zip it into the lower destination firmware? Do I need to zip the higher firmware’s bbfw.plist with it, or just the bbfw itself? Do I delete the existing bbfw and bbfw.plist from the lower destination firmware, or keep them in there with the ones I am adding?

I tried this a couple of times on an iPad Air 2 going from 13.3.1 to 13.3 and got errors about unable to extract bb and firmware file being corrupt, so a little more detail on how to do the fix would be appreciated. Thanks!

@ArmsZhou
Copy link

I did a little test. I unzip iOS 13.2.3's ipsw file, and put the bbfw of iOS 13 into iOS 13.2.3's Firmware/ folder and recreate the ipsw, then, i restore succeeded.

Reading data from /var/tmp/ffffffffffffffffffffffffffffffff00000019N4y7pO
Sending BasebandData now...
Done sending BasebandData
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
Updating Baseband completed.
Updating SE Firmware (59)
Updating Veridian (66)
Fixing up /var (17)
Creating system key bag (50)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
FDR 0x7fc229f6e2b0 got sync message
Connecting to FDR client at port 49203
FDR Received 131 bytes
Got device identifier 6633487374b0dc495cff
FDR connected in reply to sync message, starting command thread
FDR 0x7fc229f6e2b0 waiting for message...
FDR 0x7fc229ca44c0 waiting for message...
FDR 0x7fc229ca44c0 got plist message
FDR Received 59 bytes
FDR sending 52 bytes:
common.c:printing 214 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Pong</key>
	<true/>
</dict>
</plist>
FDR Sent 52 bytes
FDR 0x7fc229ca44c0 terminating...
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
FDR 0x7fc229f6e2b0 terminating...
Cleaning up...
Done: restoring succeeded!

can you tell me that how to recreate the ipsw file? thank you

@ArmsZhou
Copy link

ArmsZhou commented Mar 5, 2020

I did a little test. I unzip iOS 13.2.3's ipsw file, and put the bbfw of iOS 13 into iOS 13.2.3's Firmware/ folder and recreate the ipsw, then, i restore succeeded.

Reading data from /var/tmp/ffffffffffffffffffffffffffffffff00000019N4y7pO
Sending BasebandData now...
Done sending BasebandData
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
Updating Baseband completed.
Updating SE Firmware (59)
Updating Veridian (66)
Fixing up /var (17)
Creating system key bag (50)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
FDR 0x7fc229f6e2b0 got sync message
Connecting to FDR client at port 49203
FDR Received 131 bytes
Got device identifier 6633487374b0dc495cff
FDR connected in reply to sync message, starting command thread
FDR 0x7fc229f6e2b0 waiting for message...
FDR 0x7fc229ca44c0 waiting for message...
FDR 0x7fc229ca44c0 got plist message
FDR Received 59 bytes
FDR sending 52 bytes:
common.c:printing 214 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Pong</key>
	<true/>
</dict>
</plist>
FDR Sent 52 bytes
FDR 0x7fc229ca44c0 terminating...
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
FDR 0x7fc229f6e2b0 terminating...
Cleaning up...
Done: restoring succeeded!

can you tell me that how to recreate the ipsw file? thank you

i made it. i used betterzip software.🎉

@mariano3562
Copy link

I did a little test. I unzip iOS 13.2.3's ipsw file, and put the bbfw of iOS 13 into iOS 13.2.3's Firmware/ folder and recreate the ipsw, then, i restore succeeded.

Reading data from /var/tmp/ffffffffffffffffffffffffffffffff00000019N4y7pO
Sending BasebandData now...
Done sending BasebandData
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
Updating Baseband completed.
Updating SE Firmware (59)
Updating Veridian (66)
Fixing up /var (17)
Creating system key bag (50)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
FDR 0x7fc229f6e2b0 got sync message
Connecting to FDR client at port 49203
FDR Received 131 bytes
Got device identifier 6633487374b0dc495cff
FDR connected in reply to sync message, starting command thread
FDR 0x7fc229f6e2b0 waiting for message...
FDR 0x7fc229ca44c0 waiting for message...
FDR 0x7fc229ca44c0 got plist message
FDR Received 59 bytes
FDR sending 52 bytes:
common.c:printing 214 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Pong</key>
	<true/>
</dict>
</plist>
FDR Sent 52 bytes
FDR 0x7fc229ca44c0 terminating...
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
FDR 0x7fc229f6e2b0 terminating...
Cleaning up...
Done: restoring succeeded!

can you tell me that how to recreate the ipsw file? thank you

Hi, I have the same problem and I ask you, did you download iOS 13, unzip the ipsw of iOS 13, did you take out the iOS 13 baseband to insert it into iOS 13.2.3?

@ArmsZhou
Copy link

ArmsZhou commented Mar 9, 2020

I did a little test. I unzip iOS 13.2.3's ipsw file, and put the bbfw of iOS 13 into iOS 13.2.3's Firmware/ folder and recreate the ipsw, then, i restore succeeded.

Reading data from /var/tmp/ffffffffffffffffffffffffffffffff00000019N4y7pO
Sending BasebandData now...
Done sending BasebandData
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
Updating Baseband completed.
Updating SE Firmware (59)
Updating Veridian (66)
Fixing up /var (17)
Creating system key bag (50)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
FDR 0x7fc229f6e2b0 got sync message
Connecting to FDR client at port 49203
FDR Received 131 bytes
Got device identifier 6633487374b0dc495cff
FDR connected in reply to sync message, starting command thread
FDR 0x7fc229f6e2b0 waiting for message...
FDR 0x7fc229ca44c0 waiting for message...
FDR 0x7fc229ca44c0 got plist message
FDR Received 59 bytes
FDR sending 52 bytes:
common.c:printing 214 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Pong</key>
	<true/>
</dict>
</plist>
FDR Sent 52 bytes
FDR 0x7fc229ca44c0 terminating...
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
FDR 0x7fc229f6e2b0 terminating...
Cleaning up...
Done: restoring succeeded!

can you tell me that how to recreate the ipsw file? thank you

Hi, I have the same problem and I ask you, did you download iOS 13, unzip the ipsw of iOS 13, did you take out the iOS 13 baseband to insert it into iOS 13.2.3?

YES, i download the iOS 13.3.1 and put all the Mavxxxx.bbfw and the associated xxxx.plist in the "Firmware/" folder into iOS 13.2.3 ipsw’s "Firmware/" folder. i just use bettezip to view the iOS 13.2.3 ipsw file (not unzip) and do this operations ,then click the save button on the top-left of betterzip window.

my english is not good. can you understand?

@mariano3562
Copy link

Of course I understand you, let me try and notice your way of doing it

@mariano3562
Copy link

One more question, did you leave both files or replace them with those from 13.3.1 to 13.2.3?

Hice una pequeña prueba. Descomprimo el archivo ipsw de iOS 13.2.3, pongo el bbfw de iOS 13 en la Firmware/carpeta de iOS 13.2.3 y vuelvo a crear el ipsw , luego restauro con éxito.

Reading data from /var/tmp/ffffffffffffffffffffffffffffffff00000019N4y7pO
Sending BasebandData now...
Done sending BasebandData
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
Updating Baseband completed.
Updating SE Firmware (59)
Updating Veridian (66)
Fixing up /var (17)
Creating system key bag (50)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
FDR 0x7fc229f6e2b0 got sync message
Connecting to FDR client at port 49203
FDR Received 131 bytes
Got device identifier 6633487374b0dc495cff
FDR connected in reply to sync message, starting command thread
FDR 0x7fc229f6e2b0 waiting for message...
FDR 0x7fc229ca44c0 waiting for message...
FDR 0x7fc229ca44c0 got plist message
FDR Received 59 bytes
FDR sending 52 bytes:
common.c:printing 214 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Pong</key>
	<true/>
</dict>
</plist>
FDR Sent 52 bytes
FDR 0x7fc229ca44c0 terminating...
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
FDR 0x7fc229f6e2b0 terminating...
Cleaning up...
Done: restoring succeeded!

¿Puedes decirme cómo recrear el archivo ipsw? gracias

Hola, tengo el mismo problema y te pregunto: ¿descargaste iOS 13, descomprimiste el ipsw de iOS 13, sacaste la banda base de iOS 13 para insertarlo en iOS 13.2.3?

SÍ, descargué el iOS 13.3.1 y puse todo el Mavxxxx.bbfw y el xxxx.plist asociado en la carpeta "Firmware /" en la carpeta "Firmware /" del iOS 13.2.3 ipsw. solo uso bettezip para ver el archivo ipsw de iOS 13.2.3 (no descomprimir) y hago estas operaciones, luego hago clic en el botón Guardar en la esquina superior izquierda de la ventana de Betterzip.

Mi inglés no es bueno. ¿Entiendes?

One more question, did you leave both files or replace them with those from 13.3.1 to 13.2.3?

@ArmsZhou
Copy link

ArmsZhou commented Mar 9, 2020

One more question, did you leave both files or replace them with those from 13.3.1 to 13.2.3?

Hice una pequeña prueba. Descomprimo el archivo ipsw de iOS 13.2.3, pongo el bbfw de iOS 13 en la Firmware/carpeta de iOS 13.2.3 y vuelvo a crear el ipsw , luego restauro con éxito.

Reading data from /var/tmp/ffffffffffffffffffffffffffffffff00000019N4y7pO
Sending BasebandData now...
Done sending BasebandData
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
Updating Baseband completed.
Updating SE Firmware (59)
Updating Veridian (66)
Fixing up /var (17)
Creating system key bag (50)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
No data to read (timeout)
FDR 0x7fc229f6e2b0 timeout waiting for command
FDR 0x7fc229f6e2b0 waiting for message...
No data to read (timeout)
FDR 0x7fc229f6e2b0 got sync message
Connecting to FDR client at port 49203
FDR Received 131 bytes
Got device identifier 6633487374b0dc495cff
FDR connected in reply to sync message, starting command thread
FDR 0x7fc229f6e2b0 waiting for message...
FDR 0x7fc229ca44c0 waiting for message...
FDR 0x7fc229ca44c0 got plist message
FDR Received 59 bytes
FDR sending 52 bytes:
common.c:printing 214 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Pong</key>
	<true/>
</dict>
</plist>
FDR Sent 52 bytes
FDR 0x7fc229ca44c0 terminating...
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
FDR 0x7fc229f6e2b0 terminating...
Cleaning up...
Done: restoring succeeded!

¿Puedes decirme cómo recrear el archivo ipsw? gracias

Hola, tengo el mismo problema y te pregunto: ¿descargaste iOS 13, descomprimiste el ipsw de iOS 13, sacaste la banda base de iOS 13 para insertarlo en iOS 13.2.3?

SÍ, descargué el iOS 13.3.1 y puse todo el Mavxxxx.bbfw y el xxxx.plist asociado en la carpeta "Firmware /" en la carpeta "Firmware /" del iOS 13.2.3 ipsw. solo uso bettezip para ver el archivo ipsw de iOS 13.2.3 (no descomprimir) y hago estas operaciones, luego hago clic en el botón Guardar en la esquina superior izquierda de la ventana de Betterzip.
Mi inglés no es bueno. ¿Entiendes?

One more question, did you leave both files or replace them with those from 13.3.1 to 13.2.3?

i left both files, did not delete any file in 13.2.3 ipsw. Good luck for you!

@mariano3562
Copy link

if I could demote it from iOS 13.3.1 to 13.2.3 as you taught me to do it.thanks for sharing ..!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

9 participants