Skip to content

mremap_encrypted: Operation not permitted #13

@yuzhouheike

Description

@yuzhouheike

mremap_encrypted: Operation not permitted

iPhone:/tmp root# fouldecrypt -v /var/containers/Bundle/Application/5D9125CB-EFD0-4235-BF46-FF308E079B48/AppleSupport.app/AppleSupport ./AppleSupport_ok22
17:49:01.705168	mapping input file: /var/containers/Bundle/Application/5D9125CB-EFD0-4235-BF46-FF308E079B48/AppleSupport.app/AppleSupport
17:49:01.706061	mapping output file: ./AppleSupport_ok22
17:49:01.707180	copying original data of size 0xa764e0...
17:49:01.716459	    not fat binary, directly decrypting it!
17:49:01.716491	    finding encryption_info segment in slide...
17:49:01.716499	        found encryption_info segment at offset d30
17:49:01.716505	    decrypting encrypted data...
17:49:01.716511	        Going to decrypt crypt page: off 0x4000 size 0x894000 cryptid 1, cpuType 100000c cpuSubType 0
17:49:01.716549	        Already 16k aligned, directly go ahead :)
17:49:01.716561	-->> 16k-aligned mmaping(0x0, 0x894000, 5, 0x2, 3, 0x4000)
17:49:01.716612	<<-- 16k-aligned mmaping(0x0, 0x894000, 5, 0x2, 3, 0x4000) = 0x104584000
17:49:01.716622	<<-- unprotect mremap_encrypted(0x104584000, 0x894000, 1, 0x100000c, 0x0)
mremap_encrypted: Operation not permitted
17:49:01.724322	-->> unprotect mremap_encrypted(0x104584000, 0x894000, 1, 0x100000c, 0x0) = -1

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions