Nyxian 0.9.0 "Falcon" Beta

Changelog

Nyxian

• Improved logic in Issue Navigator (d3e8522)
• Added GUI project configuration (d1fe1f2, a7e9da2, d98b16b, c784014, c120fb8)
• Updated SDK to iPhoneOS26.4 (751e2f1)
• Bug fix: fixed barbutton items not theming on iOS 26 (47eb2a8, e026fc3)
• Bug fix: touch inputs not getting delivered to NXTerminalWindowSession properly (62aa2f6)
• Bug fix: window focus refix (4f4cc1a)
• WindowServer v4 introduction
• Added "Jump to definition" in code editor (026ec8d, 5500bc9, 5384079, b98f2f2)
• Using LLVM's dependency scanner for better accuracy for incremental builds (fdb4d5a)
• Other minor optimizations

Ksurface

• Syscall server improvements (better performance) (4d5d37f, 3a55079, 2ba098c)
• Fixed vulnerability: critical type size mismatch of PEEntitlement (7d7ae3e)
• Fixed vulnerability: null pointer dereference in SYS_handoffep (72220c4)
• Fixed vulnerability: missing break label in SYS_ioctl (d1a0e2c)
• Fixed vulnerability: semantical mismatch of syscalls sys_task_ (58f51c5)
• Fixed vulnerability: memory corruption in proc_copy_for_proc(2) (95fbe14) (already replaced API with kvobject(stands for kernel virtualized object))
• Fixed vulnerability: dangling mach port reference created by SYS_gettask (6432e95, c0b69f1)
• Fixed vulnerability: DOS in SYS_gettask (d6ab609)
• Fixed vulnerability: object leak on ENOSYS path in syscall server (259a39f)
• Fixed vulnerability: null pointer deref may happen in proc list api (4dc1e69)
• Fixed vulnerability: flavour confusion in proc list api (25cec7c)
• Fixed vulnerability: race condition in SYS_procpath (af259e2)
• Fixed vulnerability: privilege escalation in SYS_gettask (2dfc66e)
• Fixed vulnerability: race condition in proc copy api (33cc1b5) (already replaced API with kvobject(stands for kernel virtualized object))
• Fixed vulnerability: missing unlock path of proc table in proc api (7e349d5)
• Fixed vulnerability: use-after-free in proc lookup api (cffd6a3)
• Fixed vulnerability: privilege escalation in proc_permitive_over_pid(5) (f373680, c392b2a)
• Fixed resource leak: file descriptor leak in SYS_signexec (d1a0e2c)
• Fixed resource leak: mach ports leak in syscall server (21e762c)
• Fixed resource leak: entire mach messages of syscall server (67871da, 7ae16ad)
• Bug fix: fixing the iOS 26.4+ crash (4b21e76, 565ed89)
• Bug fix: utility home paths incorrectly being set (407ace1)
• Feature: SYS_wait4 fix (9a0b0a4, ffb91ba, e966e06, 8fae3f1)
• Feature: better panic system (for debug only) (b80dfc8)
• Feature: tty support(no forkpty yet) (edb70ed, 8d4466e, 07eba8c, de3c5cf, 8d89c99, 5ed7894, 6c83b81, 1081cd5, 3af601a, 706796a, 58fe7df, fa052ef, 1cf242b, 1cf242b, 6959604)
• Feature: SYS_setent syscalls to drop entitlements (b7d96f8, a514fb8)
• Feature: new cryptographic code signing (507e828)
• Feature: process zombification (19e831c)
• Improvement: better ksurface init (b8d76de)
• Improvement: validating entitlements now on host side and replaced ksurfaced with containerd (3cee766)
• Improvement: Daemon crashes wont cause deadlocks anymore (f69d208, d4abbf1)
• Improvement: Added brand new kernel object api aka kvobject (29addf5, 5cddfe1, b750644, 0cd2d56, d70151a, f458091, 4ee265d, ca735b8, 09b45f2, eeef5fe, 632fc87, 673ce9e, 47c3ae0, 21b98d9, ebbaac7, e309858, 94c907a, ecf0c29, 5054f98, b5f5c14, c3a6a76, cf08598)
• Improvement: Now tfp works on all iOS versions (b6c9ee6, 4e9f0d1, aa54ed9, d9224e3, fcfbc61, 7f3d93a, 4f4affe, ffeb5da, c44c087, 5c74874, c0bede5, f989152, b1b47fa, 7062e71, 4ebf18b, a5398d5)
• Improvement: stripped and improved inefficient LC source code (25632e9, 261782b, 3987fb8, 5eb7835, d0af2c3, d0af2c3, 6c1b83c, 2822f87, ce1933e, 97be455, c3a2d78)
• Improvement: now the user is warned that the NSExtension is missing if it is missing (10aae93)
• Improvement: added task name support to SYS_gettask (11190af)
• Improvement: removed restrictions from DYLD_INSERT_LIBRARIES (3a32304)
• Improvement: introducing syscall server v3 with userspace ptr support (dbf7248)
• Improvement: introducing 64bit radix trees (2d78377)
• Improvement: replaced the fork() fix with the new vfork() fix (96cbd0f)
• Improvement: better process flag state management (ac4c8a0, 8fd6bef)
• Improvement: replaced 2000 branches with memcpy for CFBundle override (aaf5c50, 83d9356, 714b57f, b08963c)
• Improvement: now exit sets the exit of the process in ksurface (edeb207, be53319)
• Improvement: correctly overriding NSProcessInfo (a114284, 8d9d591, 8d9d591)
• Improvement: hookless posix spawn file actions fix (86cf307, 278465b, f9af413)
• Improvement: forkbomb halfway fixed? (3a9eadd)
• Improvement: fixed crash of process when they append a file descriptor to FDMapObject (328a45b, c0eca4b, 670753d)
• Improvement: return with errno in posix spawn api (814d45c)
• Security hardening: stripping entitlements regardless of platformization (58d5acb)
• Security hardening: removed potential DDOS vector and validated task port flavor in proc_task_for_proc(3) (bf475d4)
• Security hardening: switch to immovable receive right in syscall server (91d50f8)
• Security herdening: limited amount of kvobject events to make sure no attacker can exhaust resources that way (2791120)
• Security hardening: added ipc object validation (b7bd5ed)
• Security hardening: added bundle validation in installd (fdf11f2)
• Security hardening: made signing and running unsigned binaries slightly less likely to iOS kernel panic iPads that have the sloppy IONVME kext (353b84b, e7b2f78)

Nyxian For Jailbreak

• Bug fix: slow installation after first install (bc864bf)
• Bug fix: entitlements not applying (bc864bf)
• Bug fix: deadlock while install
• Improvement: added LLVM from stock Nyxian to jailbroken so kids stop crying at me because their package manage installed the wrong version of clang, lld, etc (25793ec)

Nyxian For TrollStore

• Initial release

Note

Virtual entitlement GUI-based management will be fixed in 0.9.1.
But entitlements of project builds shall not be affected by that problem!

Full Changelog: 0.8.6...0.9