Difference between revisions of "Restore Mode"

From The iPhone Wiki
Jump to: navigation, search
m
(Too many changes, just ask if something I changed doesn't make sense)
Line 1: Line 1:
 
[[Image:Small_iphone_restore.JPG|thumb|150px|iPhone during iTunes restore.]]
 
[[Image:Small_iphone_restore.JPG|thumb|150px|iPhone during iTunes restore.]]
This is the mode the Apple ramdisk enters to restore the iPhone.
+
This is the mode run by an Apple ramdisk during a restore or update.
   
  +
In this mode the device is controlled by iTunes, which displays 7 steps:
There are 7 steps:
 
  +
# Preparing the iDevice for the restore.
 
  +
'''''See also''''': [[iPhone Restore Procedure]]
# Check the restore with Apple (or [[Cydia.app|Cydia]]).
 
  +
# "Preparing (iDevice type) for the restore." (Get the device [[Recovery Mode|from userland to iBoot]] or from [[DFU Mode]] to [[iBSS]])
  +
# "[[SHSH Protocol|Verifying (iDevice type) restore]] with Apple" (or [[Cydia Server|Cydia]] or [[TinyUmbrella]]).
 
# Preparing the firmware for the restore.
 
# Preparing the firmware for the restore.
# Preparing the iDevice for the restore.
+
# "Preparing (iDevice type) for the restore."
# Restoring the software.
+
# "Restoring (iDevice type) software." ([[ASR]] RESTORE)
# Checking the software.
+
# "Checking (iDevice type) software." ([[ASR]] VERIFY)
  +
# "Restoring (iDevice type) firmware." (The rest of the restore process isn't reported to the host computer in real-time. This includes the restore of the [[NOR]]/[[NAND|boot partition]] image, the installation of the baseband firmware, ...)
# Restoring the firmware.
 
   
  +
== Files used ==
The software is the biggest DMG file in the [[IPSW]] and contains all files for the root parition. The firmware is the smaller DMG (update or restore) and contains the files for the [[iBoot]], [[iBSS]], [[iBEC]] etc. and on an [[iPhone]] or [[iPad]] WiFi + 3G it'll also include the baseband.
 
  +
'''''See also''''': [[IPSW]]
  +
The software is the biggest DMG file in the [[IPSW]] and contains all files for the root parition. The ramdisk is the smaller DMG (update or restore) and on an [[m68ap|iPhone 2G]], [[n82ap|iPhone 3G]], [[n88ap|iPhone 3GS]] or [[iPad]] WiFi + 3G (?) it'll also include the baseband. The firmware images are stored in the <code>./Firmware/all_flash</code> path (relative to the root of the IPSW) and are eventually sent to the device after [[PROD|device-specific customization, if applicable]].
   
 
== Exploits ==
 
== Exploits ==
The original jailbreaks were done by booting the phone into restore mode and copying an [[/etc/fstab]] and afcd plist from the user partition. This was done by using the cp iBoot command, a command which had access to the whole filesystem.
+
The original jailbreaks were done by booting the phone into restore mode and copying an [[/etc/fstab]] and [[/System/Library/Lockdown/Services.plist|afcd plist]] from the user partition. This was done by using the cp iBoot command, a command which had access to the whole filesystem.
   
 
== Implementations ==
 
== Implementations ==

Revision as of 19:38, 8 January 2011

iPhone during iTunes restore.

This is the mode run by an Apple ramdisk during a restore or update.

In this mode the device is controlled by iTunes, which displays 7 steps:

See also: iPhone Restore Procedure

  1. "Preparing (iDevice type) for the restore." (Get the device from userland to iBoot or from DFU Mode to iBSS)
  2. "Verifying (iDevice type) restore with Apple" (or Cydia or TinyUmbrella).
  3. Preparing the firmware for the restore.
  4. "Preparing (iDevice type) for the restore."
  5. "Restoring (iDevice type) software." (ASR RESTORE)
  6. "Checking (iDevice type) software." (ASR VERIFY)
  7. "Restoring (iDevice type) firmware." (The rest of the restore process isn't reported to the host computer in real-time. This includes the restore of the NOR/boot partition image, the installation of the baseband firmware, ...)

Files used

See also: IPSW The software is the biggest DMG file in the IPSW and contains all files for the root parition. The ramdisk is the smaller DMG (update or restore) and on an iPhone 2G, iPhone 3G, iPhone 3GS or iPad WiFi + 3G (?) it'll also include the baseband. The firmware images are stored in the ./Firmware/all_flash path (relative to the root of the IPSW) and are eventually sent to the device after device-specific customization, if applicable.

Exploits

The original jailbreaks were done by booting the phone into restore mode and copying an /etc/fstab and afcd plist from the user partition. This was done by using the cp iBoot command, a command which had access to the whole filesystem.

Implementations