palera1n/palera1n#478
They mentioned the problem may caused by checkra1n but not the rest step they take part in.
Below are the logs from 0.1337.2.
While Demote looks like working, I have no idea how to test it.
sudo ./checkra1n-linux-arm64 -s -V -v
| - [09/16/24 01:57:59] <Verbose> src/stage1/checkrain.c:413:FoundDevice():
| ----> DFU mode device found
-
| - [09/16/24 01:57:59] <Info> src/stage1/checkrain.c:259:PerformCheckm8():
| ----> Checking if device is ready
-
| - [09/16/24 01:57:59] <Verbose> src/stage1/checkrain.c:259:PerformCheckm8():
| ----> Attempting to perform checkm8 on 8011 10
-
| - [09/16/24 01:57:59] <Info> src/stage1/checkrain.c:272:PerformCheckm8():
| ----> Setting up the exploit
-
| - [09/16/24 01:57:59] <Verbose> src/stage1/checkrain.c:272:PerformCheckm8():
| ----> == checkm8 setup stage ==
-
| - [09/16/24 01:57:59] <Verbose> src/stage1/linux/usb_primitives.c:145:DFUUseAfterFreeRace():
| ----> UaF race: deterministic strategy was successful, g_urb.actual_length: 0x40
-
| - [09/16/24 01:57:59] <Verbose> src/stage1/linux/usb_primitives.c:148:DFUUseAfterFreeRace():
| ----> Entered initial checkm8 state after 1 steps
-
| - [09/16/24 01:57:59] <Verbose> src/stage1/linux/usb_primitives.c:201:DFUMemoryLeakRace():
| ----> Stalled input endpoint after 2 steps
-
| - [09/16/24 01:57:59] <Verbose> src/stage1/checkrain.c:443:LostDevice():
| ----> DFU mode device disconnected
-
| - [09/16/24 01:58:00] <Verbose> src/stage1/checkrain.c:413:FoundDevice():
| ----> DFU mode device found
-
| - [09/16/24 01:58:00] <Verbose> src/stage1/checkrain.c:283:PerformCheckm8():
| ----> == checkm8 trigger stage ==
-
| - [09/16/24 01:58:01] <Info> src/stage1/checkrain.c:290:PerformCheckm8():
| ----> Checkmate!
-
| - [09/16/24 01:58:01] <Verbose> src/stage1/checkrain.c:290:PerformCheckm8():
| ----> Device should now reconnect in download mode
-
| - [09/16/24 01:58:01] <Verbose> src/stage1/checkrain.c:443:LostDevice():
| ----> DFU mode device disconnected
-
| - [09/16/24 01:58:21] <Error> src/stage1/checkrain.c:218:PerformCheckm8_AsyncTimeout_callback():
| ----> Timed out waiting for download mode (error code: -status_exploit_timeout_error)
-
usbmuxd logs and dmesg are in the origin issue, the behavior should be same.
the issus may need to open in the Bugtracker, however there is a similar issue that created long ago with different system version and AMD cpu, while the behavior is same.
#2337
palera1n/palera1n#478
They mentioned the problem may caused by
checkra1nbut not the rest step they take part in.Below are the logs from
0.1337.2.While Demote looks like working, I have no idea how to test it.
usbmuxdlogs anddmesgare in the origin issue, the behavior should be same.the issus may need to open in the Bugtracker, however there is a similar issue that created long ago with different system version and AMD cpu, while the behavior is same.
#2337