1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
|
/*
* idevicerestore.c
* Restore device firmware and filesystem
*
* Copyright (c) 2010 Joshua Hill. All Rights Reserved.
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 2.1 of the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this library; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
*/
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <plist/plist.h>
#include <libirecovery.h>
#include <libimobiledevice/lockdown.h>
#include <libimobiledevice/libimobiledevice.h>
#include "tss.h"
#include "ipsw.h"
#include "idevicerestore.h"
#define UNKNOWN_MODE 0
#define RECOVERY_MODE 1
#define NORMAL_MODE 2
int idevicerestore_debug = 0;
void usage(int argc, char* argv[]);
int main(int argc, char* argv[]) {
int opt = 0;
int mode = 0;
char* ipsw = NULL;
char* uuid = NULL;
uint64_t ecid = 0;
while ((opt = getopt(argc, argv, "vdhi:u:")) > 0) {
switch (opt) {
case 'h':
usage(argc, argv);
break;
case 'v':
idevicerestore_debug += 1;
break;
case 'd':
idevicerestore_debug = 3;
break;
case 'i':
ipsw = optarg;
break;
case 'u':
uuid = optarg;
break;
default:
usage(argc, argv);
break;
}
}
if(ipsw == NULL) {
error("ERROR: Please supply an IPSW\n");
return -1;
}
idevice_t device = NULL;
irecv_client_t recovery = NULL;
lockdownd_client_t lockdown = NULL;
irecv_error_t recovery_error = IRECV_E_SUCCESS;
idevice_error_t device_error = IDEVICE_E_SUCCESS;
lockdownd_error_t lockdown_error = LOCKDOWN_E_SUCCESS;
info("Checking for device in normal mode...\n");
device_error = idevice_new(&device, uuid);
if(device_error != IDEVICE_E_SUCCESS) {
info("Checking for the device in recovery mode...\n");
recovery_error = irecv_open(&recovery, uuid);
if(recovery_error != IRECV_E_SUCCESS) {
error("ERROR: Unable to find device, is it plugged in?\n");
return -1;
}
info("Found device in recovery mode\n");
mode = RECOVERY_MODE;
} else {
info("Found device in normal mode\n");
mode = NORMAL_MODE;
}
if(mode == NORMAL_MODE) {
lockdown_error = lockdownd_client_new_with_handshake(device, &lockdown, "idevicerestore");
if(lockdown_error != LOCKDOWN_E_SUCCESS) {
error("ERROR: Unable to connect to lockdownd\n");
idevice_free(device);
return -1;
}
plist_t unique_chip_node = NULL;
lockdown_error = lockdownd_get_value(lockdown, NULL, "UniqueChipID", &unique_chip_node);
if(lockdown_error != LOCKDOWN_E_SUCCESS) {
error("ERROR: Unable to get UniqueChipID from lockdownd\n");
lockdownd_client_free(lockdown);
idevice_free(device);
return -1;
}
if(!unique_chip_node || plist_get_node_type(unique_chip_node) != PLIST_UINT) {
error("ERROR: Unable to get ECID\n");
lockdownd_client_free(lockdown);
idevice_free(device);
return -1;
}
plist_get_uint_val(unique_chip_node, &ecid);
lockdownd_client_free(lockdown);
idevice_free(device);
}
else if(mode == RECOVERY_MODE) {
recovery_error = irecv_get_ecid(recovery, &ecid);
if(recovery_error != IRECV_E_SUCCESS) {
error("ERROR: Unable to get device ECID\n");
irecv_close(recovery);
return -1;
}
irecv_close(recovery);
}
if(ecid != 0) {
info("Found ECID %llu\n", ecid);
} else {
error("Unable to find device ECID\n");
return -1;
}
info("Extracting BuildManifest.plist from IPSW\n");
ipsw_archive* archive = ipsw_open(ipsw);
if(archive == NULL) {
error("ERROR: Unable to open IPSW\n");
return -1;
}
ipsw_file* buildmanifest = ipsw_extract_file(archive, "BuildManifest.plist");
if(buildmanifest == NULL) {
error("ERROR: Unable to extract BuildManifest.plist IPSW\n");
ipsw_close(archive);
return -1;
}
plist_t manifest = NULL;
plist_from_xml(buildmanifest->data, buildmanifest->size, &manifest);
ipsw_free_file(buildmanifest);
ipsw_close(archive);
info("Creating TSS request\n");
plist_t tss_request = tss_create_request(manifest, ecid);
if(tss_request == NULL) {
error("ERROR: Unable to create TSS request\n");
plist_free(manifest);
return -1;
}
plist_free(manifest);
info("Sending TSS request\n");
plist_t tss_response = tss_send_request(tss_request);
if(tss_response == NULL) {
error("ERROR: Unable to get response from TSS server\n");
plist_free(tss_request);
return -1;
}
plist_free(tss_request);
info("Got TSS response\n");
plist_free(tss_response);
return 0;
}
void usage(int argc, char* argv[]) {
char *name = strrchr(argv[0], '/');
printf("Usage: %s [OPTIONS]\n", (name ? name + 1: argv[0]));
printf("Restore firmware and filesystem to iPhone/iPod Touch.\n");
printf(" -d, \t\tenable communication debugging\n");
printf(" -v, \t\tenable incremental levels of verboseness\n");
//printf(" -r, \t\tput device into recovery mode\n");
printf(" -i, \t\ttarget filesystem to install onto device\n");
printf(" -u, \t\ttarget specific device by its 40-digit device UUID\n");
printf(" -h, \t\tprints usage information\n");
printf("\n");
exit(1);
}
|
