ERROR: Unable to receive message from FDR 0x7f8ba52c4500 (-4). 0/2 bytes - Now in bootloop
Opened this issue · 5 comments
Mariusio commented
Mobook:Upgrade Marius$ ./futurerestore_macos -t /Users/Marius/Desktop/Upgrade/blob.shsh2 --latest-sep --latest-baseband -w /Users/Marius/Desktop/Upgrade/iPhone_5.5_11.1.2_15B202_Restore.ipsw
Version: a0113a4e46bfd00962cd25e3af548fc8b0bd21fd - 173
Odysseus Support: no
[INFO] 64bit device detected
futurerestore init done
reading ticket /Users/Marius/Desktop/Upgrade/blob.shsh2 done
Found device iPhone7,1 n56ap
user specified to use latest signed sep
[TSSC] opening firmware.json
[DOWN] downloading file https://api.ipsw.me/v2.1/firmwares.json/condensed
[TSSC] selecting latest iOS: 11.2.6
[TSSC] got firmwareurl for iOS 11.2.6 build 15D100
100 [===================================================================================================>]
downloading SEP
100 [===================================================================================================>]
[TSSC] opening /tmp/futurerestore/sepManifest.plist
[TSSR] User specified not to request a Baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
user specified to use latest signed baseband (WARNING, THIS CAN CAUSE A NON-WORKING RESTORE)
downloading Baseband
100 [===================================================================================================>]
[TSSC] opening /tmp/futurerestore/basebandManifest.plist
[TSSR] User specified to request only a Baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Found device in Normal mode
Entering recovery mode...
INFO: device serial number is XXX
waiting for nonce: 71 c8 19 ff ea e0 71 2f ac 5c 02 3c 72 cb 92 a7 9e 7b 3e 3d
Got ApNonce from device: 71 c8 19 ff ea e0 71 2f ac 5c 02 3c 72 cb 92 a7 9e 7b 3e 3d
Device has requested ApNonce now
Found device in Recovery mode
Identified device as n56ap, iPhone7,1
Extracting BuildManifest from IPSW
Product Version: 11.1.2
Product Build: 15B202 Major: 15
Device supports Image4: true
Got APNonce from device: 71 c8 19 ff ea e0 71 2f ac 5c 02 3c 72 cb 92 a7 9e 7b 3e 3d
checking APTicket to be valid for this restore...
Verified ECID in APTicket matches device ECID
checking APTicket to be valid for this restore...
Verified ECID in APTicket matches device ECID
Verified APTicket to be valid for this restore
Variant: Customer Erase Install (IPSW)
This restore will erase your device data.
Extracting filesystem from IPSW
[==================================================] 100.0%
Extracting iBEC.n56.RELEASE.im4p...
Personalizing IMG4 component iBEC...
Sending iBEC (694453 bytes)...
waiting for device to reconnect...
Getting SepNonce in recovery mode... 53 f8 f7 98 51 dc 0d 2e d4 05 95 35 f8 00 55 35 bf 41 49 34
Getting ApNonce in recovery mode... 71 c8 19 ff ea e0 71 2f ac 5c 02 3c 72 cb 92 a7 9e 7b 3e 3d
[WARNING] Setting bgcolor to green! If you don't see a green screen, then your device didn't boot iBEC correctly
Recovery Mode Environment:
iBoot build-version=iBoot-4076.20.48
iBoot build-style=RELEASE
Sending RestoreLogo...
Extracting applelogo@3x~iphone.im4p...
Personalizing IMG4 component RestoreLogo...
Sending RestoreLogo (18834 bytes)...
ramdisk-size=0x10000000
Extracting 058-84556-102.dmg...
Personalizing IMG4 component RestoreRamDisk...
Sending RestoreRamDisk (59139571 bytes)...
Extracting DeviceTree.n56ap.im4p...
Personalizing IMG4 component RestoreDeviceTree...
Sending RestoreDeviceTree (124701 bytes)...
Extracting kernelcache.release.iphone7...
Personalizing IMG4 component RestoreKernelCache...
Sending RestoreKernelCache (13716825 bytes)...
Trying to fetch new SHSH blob
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Received SHSH blobs
About to restore device...
Waiting for device...
Device XXX is now connected in restore mode...
Connecting now...
Connected to com.apple.mobile.restored, version 15
Device XXX has successfully entered restore mode
Hardware Information:
BoardID: 4
ChipID: XXX
UniqueChipID: XXX
ProductionMode: true
Starting FDR listener thread
About to send NORData...
Found firmware path Firmware/all_flash
Getting firmware manifest from build identity
Extracting LLB.n56.RELEASE.im4p...
Personalizing IMG4 component LLB...
Extracting applelogo@3x~iphone.im4p...
Personalizing IMG4 component AppleLogo...
Extracting batterycharging0@3x~iphone.im4p...
Personalizing IMG4 component BatteryCharging0...
Extracting batterycharging1@3x~iphone.im4p...
Personalizing IMG4 component BatteryCharging1...
Extracting batteryfull@3x~iphone.im4p...
Personalizing IMG4 component BatteryFull...
Extracting batterylow0@3x~iphone.im4p...
Personalizing IMG4 component BatteryLow0...
Extracting batterylow1@3x~iphone.im4p...
Personalizing IMG4 component BatteryLow1...
Extracting glyphplugin@1920~iphone-lightning.im4p...
Personalizing IMG4 component BatteryPlugin...
Extracting DeviceTree.n56ap.im4p...
Personalizing IMG4 component DeviceTree...
Extracting recoverymode@1920~iphone-lightning.im4p...
Personalizing IMG4 component RecoveryMode...
Extracting iBoot.n56.RELEASE.im4p...
Personalizing IMG4 component iBoot...
Personalizing IMG4 component RestoreSEP...
Personalizing IMG4 component SEP...
Sending NORData now...
Done sending NORData
About to send RootTicket...
Sending RootTicket now...
Done sending RootTicket
Waiting for NAND (28)
Checking filesystems (15)
Checking filesystems (15)
Checking filesystems (15)
Checking filesystems (15)
About to send FDR Trust data...
Sending FDR Trust data now...
Done sending FDR Trust Data
ERROR: Unable to receive message from FDR 0x7f8ba52c4500 (-4). 0/2 bytes
Starting point was an iPhone 6+ on 10.2, jailbroken with Yalu and nonce set with v0rtexNonce.
I followed this tutorial https://github.com/ProAppleOS/Upgrade-from-10.3.x-to-iOS-11.1.2-on-any-64Bit-device-with-Blobs/blob/master/README.md and everything seemed to work fine until I got the error message. I left the MacBook in this state for another hour or so but nothing happened. Then I cancelled the process and now the device is in a boot loop. I can put it into Recovery Mode and run the command again, however the nonces generated are incorrect:
Mobook:Upgrade Marius$ ./futurerestore_macos -t /Users/Marius/Desktop/Upgrade/blob.shsh2 --latest-sep --latest-baseband -w /Users/Marius/Desktop/Upgrade/iPhone_5.5_11.1.2_15B202_Restore.ipsw
Version: a0113a4e46bfd00962cd25e3af548fc8b0bd21fd - 173
Odysseus Support: no
INFO: device serial number is XXX
[INFO] 64bit device detected
futurerestore init done
reading ticket /Users/Marius/Desktop/Upgrade/blob.shsh2 done
Found device iPhone7,1 n56ap
user specified to use latest signed sep
[TSSC] opening firmware.json
[DOWN] downloading file https://api.ipsw.me/v2.1/firmwares.json/condensed
[TSSC] selecting latest iOS: 11.2.6
[TSSC] got firmwareurl for iOS 11.2.6 build 15D100
100 [===================================================================================================>]
downloading SEP
100 [===================================================================================================>]
[TSSC] opening /tmp/futurerestore/sepManifest.plist
[TSSR] User specified not to request a Baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
user specified to use latest signed baseband (WARNING, THIS CAN CAUSE A NON-WORKING RESTORE)
downloading Baseband
100 [===================================================================================================>]
[WARNING] Failed to read BasebandGoldCertID from device! Is it already in recovery?
[WARNING] Using tsschecker's fallback BasebandGoldCertID. This might result in invalid baseband signing status information
[WARNING] Failed to read BasebandSerialNumber from device! Is it already in recovery?
[WARNING] Using tsschecker's fallback BasebandSerialNumber size. This might result in invalid baseband signing status information
[TSSC] opening /tmp/futurerestore/basebandManifest.plist
[TSSR] User specified to request only a Baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Found device in Recovery mode
Device already in Recovery mode
waiting for nonce: 71 c8 19 ff ea e0 71 2f ac 5c 02 3c 72 cb 92 a7 9e 7b 3e 3d
Got ApNonce from device: 6d e0 29 76 a4 ca 71 42 ff b3 c8 ab fb 80 ff 6a 5b cb 06 8b
Got ApNonce from device: 26 ae 48 3a 87 25 c1 f3 7b c4 7a 86 77 86 8a c1 bc 35 84 82
Got ApNonce from device: c4 e6 3a c8 9d 88 7f 23 17 7e c8 8b 18 25 7c 3f 0f a7 c2 0f
Got ApNonce from device: 29 c1 ba 81 69 d1 e5 38 36 07 ab d8 08 66 e7 92 26 68 99 5e
Got ApNonce from device: e2 8b d2 27 6a eb 24 45 79 9b 09 73 55 93 71 f5 4f 59 71 8e
[...]
Looks like I need to restore to 10.2.6 and loose the jailbreak :(
Is there anything else I could try?
ProAppleOS commented
I am the creator of that Tutorial. I think you can't do anything unfortunately.
Mariusio commented
That is what I thought, so I restored to 11.2.6. Anyway, thanks a lot for creating the tutorial, too bad it didn't work out.
ProAppleOS commented
It's not my fault it's was an error by futurerestore btw
Mariusio commented
I know! Sorry, I didn't want to imply that something was wrong with the tutorial.