砸壳失败,啥原因帮忙看看

dyld: warning, LC_RPATH @executable_path/Frameworks in /var/mobile/Containers/Bundle/Application/08F34125-5082-475E-89DA-BFA55BED93F3/QunarTravel.app/QunarTravel being ignored in restricted program because of @executable_path
dyld: warning, LC_RPATH @executable_path/Frameworks in /var/mobile/Containers/Bundle/Application/08F34125-5082-475E-89DA-BFA55BED93F3/QunarTravel.app/QunarTravel being ignored in restricted program because of @executable_path
dyld: warning, LC_RPATH @executable_path/Frameworks in /var/mobile/Containers/Bundle/Application/08F34125-5082-475E-89DA-BFA55BED93F3/QunarTravel.app/QunarTravel being ignored in restricted program because of @executable_path
2015-11-01 14:57:00.356 QunarTravel[1706:102802] Foundation called mkdir("/tmp/(A Document Being Saved By 去哪儿旅行)"), it didn’t return 0, and errno was set to 1.
dyld: warning, LC_RPATH @executable_path/Frameworks in /var/mobile/Containers/Bundle/Application/08F34125-5082-475E-89DA-BFA55BED93F3/QunarTravel.app/QunarTravel being ignored in restricted program because of @executable_path
2015-11-01 14:57:00.366 QunarTravel[1706:102802] Foundation called mkdir("/tmp/(A Document Being Saved By 去哪儿旅行)"), it didn’t return 0, and errno was set to 1.
dyld: warning, LC_RPATH @executable_path/Frameworks in /var/mobile/Containers/Bundle/Application/08F34125-5082-475E-89DA-BFA55BED93F3/QunarTravel.app/QunarTravel being ignored in restricted program because of @executable_path
dyld: warning, LC_RPATH @executable_path/Frameworks in /var/mobile/Containers/Bundle/Application/08F34125-5082-475E-89DA-BFA55BED93F3/QunarTravel.app/QunarTravel being ignored in restricted program because of @executable_path
dyld: warning, LC_RPATH @executable_path/Frameworks in /var/mobile/Containers/Bundle/Application/08F34125-5082-475E-89DA-BFA55BED93F3/QunarTravel.app/QunarTravel being ignored in restricted program because of @executable_path
dyld: warning, LC_RPATH @executable_path/Frameworks in /var/mobile/Containers/Bundle/Application/08F34125-5082-475E-89DA-BFA55BED93F3/QunarTravel.app/QunarTravel being ignored in restricted program because of @executable_path
dyld: warning, LC_RPATH @executable_path/Frameworks in /var/mobile/Containers/Bundle/Application/08F34125-5082-475E-89DA-BFA55BED93F3/QunarTravel.app/QunarTravel being ignored in restricted program because of @executable_path
dyld: warning, LC_RPATH @executable_path/Frameworks in /var/mobile/Containers/Bundle/Application/08F34125-5082-475E-89DA-BFA55BED93F3/QunarTravel.app/QunarTravel being ignored in restricted program because of @executable_path
dyld: warning, LC_RPATH @executable_path/Frameworks in /var/mobile/Containers/Bundle/Application/08F34125-5082-475E-89DA-BFA55BED93F3/QunarTravel.app/QunarTravel being ignored in restricted program because of @executable_path
dyld: warning, LC_RPATH @executable_path/Frameworks in /var/mobile/Containers/Bundle/Application/08F34125-5082-475E-89DA-BFA55BED93F3/QunarTravel.app/QunarTravel being ignored in restricted program because of @executable_path
dyld: warning, LC_RPATH @executable_path/Frameworks in /var/mobile/Containers/Bundle/Application/08F34125-5082-475E-89DA-BFA55BED93F3/QunarTravel.app/QunarTravel being ignored in restricted program because of @executable_path
dyld: warning, LC_RPATH @executable_path/Frameworks in /var/mobile/Containers/Bundle/Application/08F34125-5082-475E-89DA-BFA55BED93F3/QunarTravel.app/QunarTravel being ignored in restricted program because of @executable_path
Abort trap: 6

restricted Mach-O 中加入了 restrict 字段,不允许动态库的插入。

1 个赞

替换restrict字段后 scp回手机闪退。
好像AppSync没有成功,IOS8.3的系统 换了好几个源了重新安装都不行,itools都显示appsync unpatched.
有没有能正常用的Appsync

这个问题我也关注过一段时间了,狗神写过一篇帖子,提到了去除restrict,但是他时在iOS7.0 上搞的。

@liangyong @hailhttp://cydia.angelxwind.net 源,下AppSync Unified试试

在8.1.2 上已经下载过了,修改了Mach-O文件之后仍然有这个问题。9.0.2上也是存在的。
我打算搞搞dyld,看看里面的判断__restrict 字段的函数,能不能hook一下。

狗神,我修改了iOS系统中的dyld里面的东西,只是做一些字符串的替换。然后系统是没有问题的。但是一旦系统重启,就挂掉了,需要重新刷机。苹果是不是有什么防护机制去检验他本身自带的这些可执行文件?

你是直接hook了dyld,还是直接修改了这个文件?

直接修改了文件。把里面的__restrict 字符串给改了。然后启动之后就挂了。如果hook dyld的话我看了一下它的汇编代码,写到一起去了,在main中,不知道该怎么来hook。

我的意思是,你对dyld做了什么修改?是hook了dyld,还是修改了dyld的binary?

修改了dyld的binary。

dyld是iOS的核心组件,对于99%的开发者来说,最好不要动,危险性太大了

我感觉还是hook其中的某些方法比较靠谱,直接修改binary确实不合适。

越狱市场版的是怎么砸壳市场版APP的呢?

成功了吗? 我也遇到这问题。。

请问你怎么解决的?

大佬们后来怎么解决的呀?