fix some normal mode queries

Added a note saying it is not an untether, and about bad success rate.

.github/workflows/build.yml

@@ -2,10 +2,60 @@ name: Build palera1n
 
 on:
   push:
+    paths:
+      - 'src/**'
+      - 'docs/**'
+      - 'patches/**'
+      - 'include/**'
+      - 'Makefile'
+      - 'CMakeLists.txt'
+      - '.github/workflows/build.yml'
   pull_request:
+    paths:
+        - 'src/**'
+        - 'docs/**'
+        - 'patches/**'
+        - 'include/**'
+        - 'Makefile'
+        - 'CMakeLists.txt'
+        - '.github/workflows/build.yml'
   workflow_dispatch:
 
 jobs:
+  build-docs:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Install dependencies (packages)
+        run: |
+          sudo apt-get -y update
+          sudo apt-get -y install mandoc make
+
+      - name: Build Documentation
+        run: |
+          make -j$(nproc) docs
+          mkdir -p ready/docs
+          cp docs/*.html docs/mandoc.css docs/palera1n.1 ready/docs
+
+      - name: Get branch name
+        id: branch-name
+        uses: tj-actions/branch-names@v7
+
+      - name: Upload artifact
+        if: ${{ github.event_name != 'pull_request' }}
+        uses: wangyucode/[email protected]
+        with:
+          host: ${{ secrets.NICKCHAN_FTP_HOST }}
+          port: ${{ secrets.NICKCHAN_FTP_PORT }}
+          username: palera1n
+          password: ${{ secrets.NICKCHAN_FTP_PASS }}
+          forceUpload: true
+          dryRun: false
+          localDir: 'ready/'
+          remoteDir: "/palera1n/artifacts/c-rewrite/${{ steps.branch-name.outputs.ref_branch || github.ref_name }}/${{ github.run_number }}"
+
   build-darwin:
     strategy:
       matrix:
@@ -21,13 +71,14 @@ jobs:
           - arch: arm64
             gnu_triple: aarch64-apple-darwin
             os: iphoneos
-            minos: 14.0
-    runs-on: macos-latest
+            minos: 7.0
+    runs-on: macos-12
     env:
-      MBEDTLS_VERSION: 3.3.0
-      LIBUSB_VERSION: 1.0.26
+      MBEDTLS_VERSION: 3.5.0
       READLINE_VERSION: 8.2
-      NCURSES_VERSION: 6.4
+      SLANG_VERSION: 2.3.3
+      NEWT_VERSION: 0.52.23
+      POPT_VERSION: 1.19
 
     steps:
       - name: Checkout
@@ -38,33 +89,39 @@ jobs:
       - name: Install dependencies (packages)
         run: |
           sudo /usr/local/bin/pip3 install jsonschema jinja2
-          brew install make autoconf automake pkg-config gnu-sed ncurses
+          brew install make autoconf automake pkg-config gnu-sed gettext
           sudo rm -rf /usr/local/Frameworks/Python*
           curl -LO https://github.com/ProcursusTeam/ldid/releases/download/v2.1.5-procursus7/ldid_macosx_x86_64
           sudo install -m755 ldid_macosx_x86_64 /usr/local/bin/ldid
 
       - name: Download dependencies (embedded binaries)
         run: |
-          make -j5 download-deps
           echo "SDK=$(xcrun -sdk ${{ matrix.os }} --show-sdk-path)" >> $GITHUB_ENV
 
       - name: Download dependencies (source code)
         run: |
-          curl -LOOOO \
+          curl -LOOOOOO \
             https://github.com/Mbed-TLS/mbedtls/archive/refs/tags/v${{ env.MBEDTLS_VERSION }}.tar.gz \
-            https://github.com/libusb/libusb/releases/download/v${{ env.LIBUSB_VERSION }}/libusb-${{ env.LIBUSB_VERSION }}.tar.bz2 \
             https://mirror-hk.koddos.net/gnu/readline/readline-${{ env.READLINE_VERSION }}.tar.gz \
-            https://mirror-hk.koddos.net/gnu/ncurses/ncurses-${{ env.NCURSES_VERSION }}.tar.gz
+            https://www.jedsoft.org/releases/slang/slang-${{ env.SLANG_VERSION }}.tar.bz2 \
+            https://releases.pagure.org/newt/newt-${{ env.NEWT_VERSION }}.tar.gz \
+            https://github.com/rpm-software-management/popt/archive/refs/tags/popt-${{ env.POPT_VERSION }}-release.tar.gz
+
           tar -xf v${{ env.MBEDTLS_VERSION }}.tar.gz
-          tar -xjf libusb-${{ env.LIBUSB_VERSION }}.tar.bz2
           tar -xf readline-${{ env.READLINE_VERSION }}.tar.gz
-          tar -xf ncurses-${{ env.NCURSES_VERSION }}.tar.gz
+          tar -xjf slang-${{ env.SLANG_VERSION }}.tar.bz2
+          tar -xf newt-${{ env.NEWT_VERSION }}.tar.gz
+          tar -xf popt-${{ env.POPT_VERSION }}-release.tar.gz
           git clone --depth=1 https://github.com/libimobiledevice/libplist
           git clone --depth=1 https://github.com/libimobiledevice/libimobiledevice-glue
           git clone --depth=1 https://github.com/libimobiledevice/libirecovery
           git clone --depth=1 https://github.com/libimobiledevice/libusbmuxd
           git clone --depth=1 https://github.com/libimobiledevice/libimobiledevice
 
+      - name: Select correct Xcode
+        run: |
+          sudo xcode-select -s /Applications/Xcode_14.2.app
+
       - name: Setup environment
         run: |
           mkdir sysroot
@@ -75,18 +132,24 @@ jobs:
           echo "CC=$(xcrun --find cc)" >> $GITHUB_ENV
           echo "CXX=$(xcrun --find c++)" >> $GITHUB_ENV
           echo "CPP=$(xcrun --find cc) -E" >> $GITHUB_ENV
-          echo "CFLAGS=-g -Os -arch ${{ matrix.arch }} -m${{ matrix.os }}-version-min=${{ matrix.minos }} -isysroot ${{ env.SDK }} -isystem $(pwd)/sysroot/usr/local/include" >> $GITHUB_ENV
-          echo "CPPFLAGS=-g -Os -arch ${{ matrix.arch }} -m${{ matrix.os }}-version-min=${{ matrix.minos }} -isysroot ${{ env.SDK }} -isystem $(pwd)/sysroot/usr/local/include -Wno-error-implicit-function-declaration" >> $GITHUB_ENV
-          echo "CXXFLAGS=-stdlib=libc++ -g -Os -isysroot ${{ env.SDK }} -arch ${{ matrix.arch }} -m${{ matrix.os }}-version-min=${{ matrix.minos }} -isystem $(pwd)/sysroot/usr/local/include" >> $GITHUB_ENV
+          echo "CFLAGS=-g -Os -arch ${{ matrix.arch }} -m${{ matrix.os }}-version-min=${{ matrix.minos }} -isysroot ${{ env.SDK }} -isystem $(pwd)/sysroot/usr/local/include -Os -g -flto=full -Wl,-object_path_lto,lto.o" >> $GITHUB_ENV
+          echo "CPPFLAGS=-g -Os -arch ${{ matrix.arch }} -m${{ matrix.os }}-version-min=${{ matrix.minos }} -isysroot ${{ env.SDK }} -isystem $(pwd)/sysroot/usr/local/include -Wno-error-implicit-function-declaration -Os" >> $GITHUB_ENV
+          echo "CXXFLAGS=-stdlib=libc++ -g -Os -isysroot ${{ env.SDK }} -arch ${{ matrix.arch }} -m${{ matrix.os }}-version-min=${{ matrix.minos }} -isystem $(pwd)/sysroot/usr/local/include -Os" >> $GITHUB_ENV
           echo "LDFLAGS=-g -Wl,-dead_strip -arch ${{ matrix.arch }} -isysroot ${{ env.SDK }} -m${{ matrix.os }}-version-min=${{ matrix.minos }} -L$(pwd)/sysroot/usr/local/lib" >> $GITHUB_ENV
-          echo "CFLAGS_FOR_BUILD=-arch $(uname -m) -isysroot $(xcrun -sdk macosx --show-sdk-path)" >> $GITHUB_ENV
-          echo "CXXFLAGS_FOR_BUILD=-stdlib=libc++ -arch $(uname -m) -isysroot $(xcrun -sdk macosx --show-sdk-path)" >> $GITHUB_ENV
-          echo "CPPFLAGS_FOR_BUILD=-arch $(uname -m) -isysroot $(xcrun -sdk macosx --show-sdk-path) -Wno-error-implicit-function-declaration" >> $GITHUB_ENV
+          echo "CFLAGS_FOR_BUILD=-arch $(uname -m) -isysroot $(xcrun -sdk macosx --show-sdk-path) -Os" >> $GITHUB_ENV
+          echo "CXXFLAGS_FOR_BUILD=-stdlib=libc++ -arch $(uname -m) -isysroot $(xcrun -sdk macosx --show-sdk-path) -Os" >> $GITHUB_ENV
+          echo "CPPFLAGS_FOR_BUILD=-arch $(uname -m) -isysroot $(xcrun -sdk macosx --show-sdk-path) -Wno-error-implicit-function-declaration -Os" >> $GITHUB_ENV
           echo "LDFLAGS_FOR_BUILD=-Wl,-dead_strip" >> $GITHUB_ENV
-          echo $(echo $(brew --cellar)/ncurses/*/bin/tic | sed 's|/tic||') >> $GITHUB_PATH
           mkdir -p $(pwd)/sysroot/usr/local/lib
           ln -sf $(pwd)/sysroot/usr/local/lib{,64}
 
+      - name: Prepare iPhoneOS environment
+        if: matrix.os == 'iphoneos'
+        run: |
+          echo "FAKE_PLATFORM=2" >> $GITHUB_ENV
+          echo "FAKE_SDK=7.0" >> $GITHUB_ENV
+          echo "FAKE_MINOS=7.0" >> $GITHUB_ENV
+
       - name: Prepare headers
         if: matrix.os != 'macosx'
         run: |
@@ -119,50 +182,13 @@ jobs:
           gsed -E /'__API_UNAVAILABLE'/d < ${TARGET_SYSROOT}/usr/include/pthread.h > sysroot/usr/local/include/pthread.h
           gsed -i -E s/'__API_UNAVAILABLE\(.*\)'// sysroot/usr/local/include/IOKit/IOKitLib.h
 
-      - name: Build ncurses
-        run: |
-          cd ncurses-${{ env.NCURSES_VERSION }}
-          ./configure \
-            ${{ env.CONFIGURE_ARGS }} \
-            --with-build-cc="${{ env.CC }}" \
-            --with-build-cflags="${{ env.CFLAGS_FOR_NUILD }}" \
-            --with-build-cpp="${{ env.CC }} -E" \
-            --with-build-cppflags="${{ env.CPPFLAGS_FOR_BUILD }}" \
-            --with-build-ldflags="${{ env.LDFLAGS_FOR_BUILD }}" \
-            --with-pthread \
-            --enable-const \
-            --enable-ext-colors \
-            --enable-ext-mouse \
-            --enable-ext-putwin \
-            --enable-wattr-macros \
-            --disable-overwrite \
-            --without-debug \
-            --without-tests \
-            --enable-sigwinch \
-            --enable-const \
-            --enable-symlinks \
-            --enable-termcap \
-            --enable-pc-files \
-            --without-x11-rgb \
-            --with-tic-path=$(echo $(brew --cellar)/ncurses/*/bin/tic) \
-            --includedir="${{ env.PREFIX }}/include" \
-            --with-pkg-config-libdir="${{ env.PREFIX }}/lib/pkgconfig" \
-            --enable-widec \
-            --with-default-terminfo-dir="/opt/procursus/share/terminfo" \
-            --with-terminfo-dirs="/var/jb/usr/share/terminfo:/opt/procursus/share/terminfo:/opt/local/share/terminfo:/opt/homebrew/share/terminfo:/usr/local/share/terminfo:/opt/sw/share/terminfo:/sw/share/terminfo:/usr/share/terminfo" \
-            LDFLAGS="${{ env.LDFLAGS }}" \
-            PKG_CONFIG_LIBDIR="${{ env.PREFIX }}/lib/pkgconfig" || (cat config.log && exit 1)
-            gmake -j$(sysctl -n hw.ncpu)
-            gmake -j$(sysctl -n hw.ncpu) install DESTDIR=${{ env.DESTDIR }}
-            cd ..
-
       - name: Build Mbed TLS
         run: |
           cd mbedtls-${{ env.MBEDTLS_VERSION }}
-          cat ../patches/0001-Allow-empty-x509-cert-issuer.patch | patch -sN -d . -p1
+          cat ../patches/mbedtls/0001-Allow-empty-x509-cert-issuer.patch | patch -sN -d . -p1
           mkdir build
           cd build
-          cmake .. \
+          SDKROOT="${{ env.SDK }}" cmake .. \
             -DCMAKE_BUILD_TYPE=Release \
             -DCMAKE_CROSSCOMPILING=true \
             -DCMAKE_SYSTEM_NAME=Darwin \
@@ -175,19 +201,8 @@ jobs:
             -DENABLE_PROGRAMS=OFF \
             -DMBEDTLS_FATAL_WARNINGS=OFF \
             -DCMAKE_INSTALL_SYSCONFDIR="/etc"
-          gmake -j$(sysctl -n hw.ncpu)
-          gmake -j$(sysctl -n hw.ncpu) install DESTDIR=${{ env.DESTDIR }}
-          cd ..
-
-      - name: Build libusb
-        run: |
-          cd libusb-${{ env.LIBUSB_VERSION }}
-          if [ "${{ matrix.os }}" != "macosx" ]; then
-            curl -Lo libusb.patch https://github.com/ProcursusTeam/Procursus/raw/5f4f302f6cb81ce10c7d92ffefd75c004b5da18f/build_patch/libusb/0001-Get-rid-of-some-macro-checks.patch
-            cat libusb.patch | patch -sN -d . -p1
-          fi
-          ./configure ${{ env.CONFIGURE_ARGS }} --disable-udev --enable-log
-          gmake -j$(sysctl -n hw.ncpu)
+          gmake -j$(sysctl -n hw.ncpu) \
+             SDKROOT="${{ env.SDK }}"
           gmake -j$(sysctl -n hw.ncpu) install DESTDIR=${{ env.DESTDIR }}
           cd ..
 
@@ -199,6 +214,51 @@ jobs:
           gmake -j$(sysctl -n hw.ncpu) install DESTDIR=${{ env.DESTDIR }}
           cd ..
 
+      - name: Build S-Lang
+        run: |
+          cd slang-${{ env.SLANG_VERSION }}
+          ./configure \
+            ${{ env.CONFIGURE_ARGS }} \
+            --without-x \
+            --without-pcre \
+            --without-onig \
+            --without-z \
+            --without-png \
+            --without-iconv
+          gmake -j$(sysctl -n hw.ncpu) static
+          gmake -j$(sysctl -n hw.ncpu) install-static DESTDIR=${{ env.DESTDIR }}
+          cd ..
+
+      - name: Build popt
+        run: |
+          cd popt-popt-${{ env.POPT_VERSION }}-release
+          autoreconf -fiv
+          ./configure \
+            ${{ env.CONFIGURE_ARGS }} \
+            --without-libiconv-prefix \
+            --without-libintl-prefix \
+            --disable-nls \
+            --disable-werror
+          gmake -j$(sysctl -n hw.ncpu)
+          gmake -j$(sysctl -n hw.ncpu) install DESTDIR=${{ env.DESTDIR }}
+          cd ..
+
+      - name: Build newt
+        run: |
+          cd newt-${{ env.NEWT_VERSION }}
+          ./configure \
+            ${{ env.CONFIGURE_ARGS }} \
+            --with-readline=gnu \
+            --without-python \
+            --without-tcl \
+            --disable-nls
+          gmake -j$(sysctl -n hw.ncpu) libnewt.a
+          mkdir -p ${{ env.DESTDIR }}/usr/local/{lib/pkgconfig,include}
+          install -m644 libnewt.pc ${{ env.DESTDIR }}/usr/local/lib/pkgconfig
+          install -m644 libnewt.a ${{ env.DESTDIR }}/usr/local/lib
+          install -m644 newt.h ${{ env.DESTDIR }}/usr/local/include
+          cd ..
+
       - name: Build libplist
         run: |
           cd libplist
@@ -223,10 +283,9 @@ jobs:
           cd libirecovery
           autoreconf -fiv
           if [ "${{ matrix.os }}" != "macosx" ]; then
-            ./configure ${{ env.CONFIGURE_ARGS }} --with-iokit=no
-          else
-            ./configure ${{ env.CONFIGURE_ARGS }}
+            gsed -i '/case kIOUSBTransactionTimeout/d' src/libirecovery.c
           fi
+          ./configure ${{ env.CONFIGURE_ARGS }}
           echo -e 'all:\ninstall:' > tools/Makefile
           make -j$(sysctl -n hw.ncpu) LIBS="-lncurses"
           make -j$(sysctl -n hw.ncpu) install DESTDIR=${{ env.DESTDIR }}
@@ -255,101 +314,212 @@ jobs:
       - name: Build palera1n
         run: |
           cp -a sysroot/${{ env.PREFIX }}/{include,lib} dep_root
-          if [ "${{ matrix.os }}" = "macosx" ]; then
-            gmake -j$(sysctl -n hw.ncpu)
-          elif [ "${{ matrix.os }}" = "iphoneos" ]; then
-            gmake -j$(sysctl -n hw.ncpu) FAKE_PLATFORM=2 FAKE_SDK=14.0 FAKE_MINOS=14.0
-          fi
-          mv src/palera1n palera1n-${{ matrix.os }}-${{ matrix.arch }}
+          find dep_root -name '*.dylib' -delete
+          find dep_root -name '*.la' -delete
+          gmake -j$(sysctl -n hw.ncpu)
+          cp src/palera1n palera1n-${{ matrix.os }}-${{ matrix.arch }}
           dsymutil palera1n-${{ matrix.os }}-${{ matrix.arch }}
           strip palera1n-${{ matrix.os }}-${{ matrix.arch }}
-          ldid -s palera1n-${{ matrix.os }}-${{ matrix.arch }}
-          mkdir -p ready
-          tar -zcf ready/dep_root-${{ matrix.os }}-${{ matrix.arch }}.tgz dep_root
+
+      - name: Build palera1n (Development)
+        run: |
+          CC="${{ matrix.triple }}-gcc" gmake -j$(sysctl -n hw.ncpu) clean
+          CC="${{ matrix.triple }}-gcc" gmake -j$(sysctl -n hw.ncpu) DEV_BUILD=1 TUI=1 ROOTFUL=1
+          cp src/palera1n palera1n-${{ matrix.os }}-${{ matrix.arch }}.development
+
+      - name: Prepare artifact
+        run: |
+          mkdir -p ready/build_depends
+          tar -zcf ready/build_depends/dep_root-${{ matrix.os }}-${{ matrix.arch }}.tgz dep_root
+          if [ "${{ matrix.os }}" == "macosx" ]; then
+            ldid -S palera1n-${{ matrix.os }}-${{ matrix.arch }}{,.development}
+          else
+            ldid -Ssrc/usb.xml palera1n-${{ matrix.os }}-${{ matrix.arch }}{,.development}
+          fi
+
+      - name: Get branch name
+        id: branch-name
+        uses: tj-actions/branch-names@v7
 
       - name: Upload artifact
+        if: ${{ github.event_name != 'pull_request' }}
         uses: wangyucode/[email protected]
         with:
           host: ${{ secrets.NICKCHAN_FTP_HOST }}
           port: ${{ secrets.NICKCHAN_FTP_PORT }}
           username: palera1n
-          privateKey: ${{ secrets.NICKCHAN_FTP_KEY }}
+          password: ${{ secrets.NICKCHAN_FTP_PASS }}
           forceUpload: true
           dryRun: false
           localDir: 'ready/'
-          remoteDir: '/palera1n/artifacts/c-rewrite'
-
-      - name: Upload artifact
-        uses: wangyucode/[email protected]
-        with:
-          host: ${{ secrets.MINEEK_FTP_HOST }}
-          port: 22
-          username: mineekfiles
-          password: ${{ secrets.MINEEK_FTP_PASS }}
-          forceUpload: true
-          dryRun: false
-          localDir: 'ready/'
-          remoteDir: '/uploads/palera1n/artifacts/palera1n-c'
+          remoteDir: "/palera1n/artifacts/c-rewrite/${{ steps.branch-name.outputs.ref_branch || github.ref_name }}/${{ github.run_number }}"
 
       - name: Upload ${{ matrix.os }} thin ${{ matrix.arch }} build
+        if: ${{ github.event_name != 'pull_request' }}
         uses: actions/upload-artifact@v3
         with:
           name: palera1n-${{ matrix.os }}-${{ matrix.arch }}
           path: palera1n-${{ matrix.os }}-${{ matrix.arch }}
           retention-days: 1
 
+      - name: Upload ${{ matrix.os }} thin ${{ matrix.arch }} build (Development)
+        if: ${{ github.event_name != 'pull_request' }}
+        uses: actions/upload-artifact@v3
+        with:
+          name: palera1n-${{ matrix.os }}-${{ matrix.arch }}.development
+          path: palera1n-${{ matrix.os }}-${{ matrix.arch }}.development
+          retention-days: 1
+
+
       - name: Upload ${{ matrix.os }} thin ${{ matrix.arch }} debug symbols
+        if: ${{ github.event_name != 'pull_request' }}
         uses: actions/upload-artifact@v3
         with:
           name: palera1n-${{ matrix.os }}-${{ matrix.arch }}.dSYM
           path: palera1n-${{ matrix.os }}-${{ matrix.arch }}.dSYM
           retention-days: 1
-
+      
   darwin-dist:
+    if: ${{ github.event_name != 'pull_request' }}
     runs-on: macos-latest
     needs: build-darwin
     steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Setup Procursus
+        uses: beerpiss/[email protected]
+        with:
+          packages: sed coreutils
+          cache: true
+          mirror: 'https://apt.procurs.us/'
+
       - name: Download all Darwin artifacts
         uses: actions/download-artifact@v3
 
       - name: Prepare artifact
         run: |
-          find .
           lipo -create -arch arm64 ./palera1n-macosx-arm64/palera1n-macosx-arm64 -arch x86_64 ./palera1n-macosx-x86_64/palera1n-macosx-x86_64 -output palera1n-macos
+          lipo -create -arch arm64 ./palera1n-macosx-arm64.development/palera1n-macosx-arm64.development -arch x86_64 ./palera1n-macosx-x86_64.development/palera1n-macosx-x86_64.development -output palera1n-macos.development
           mkdir -p palera1n-macos.dSYM/Contents/Resources/DWARF
           cp ./palera1n-macosx-x86_64.dSYM/Contents/Info.plist palera1n-macos.dSYM/Contents
           lipo -create -arch arm64 palera1n-macosx-arm64.dSYM/Contents/Resources/DWARF/palera1n-macosx-arm64 -arch x86_64 palera1n-macosx-x86_64.dSYM/Contents/Resources/DWARF/palera1n-macosx-x86_64 -output palera1n-macos.dSYM/Contents/Resources/DWARF/palera1n-macos
-          mkdir ready
-          cp palera1n-macos ready/palera1n-macos-universal
-          cp ./palera1n-macosx-x86_64/palera1n-macosx-x86_64 ready/palera1n-macos-x86_64
-          cp ./palera1n-macosx-arm64/palera1n-macosx-arm64 ready/palera1n-macos-arm64
-          cp ./palera1n-iphoneos-arm64/palera1n-iphoneos-arm64 ready/palera1n-ios
-          zip -r9 ready/palera1n-ios.dSYM.zip palera1n-iphoneos-arm64.dSYM
-          zip -r9 ready/palera1n-macos.dSYM.zip palera1n-macos.dSYM
+          mkdir -p ready/{debian,binaries,debug_symbols,binaries_development}
+          cp palera1n-macos.development ready/binaries_development/palera1n-macos-universal.development
+          cp palera1n-macos ready/binaries/palera1n-macos-universal
+          cp ./palera1n-macosx-x86_64/palera1n-macosx-x86_64 ready/binaries/palera1n-macos-x86_64
+          cp ./palera1n-macosx-arm64/palera1n-macosx-arm64 ready/binaries/palera1n-macos-arm64
+          cp ./palera1n-iphoneos-arm64/palera1n-iphoneos-arm64 ready/binaries/palera1n-iphoneos-arm64
+          cp ./palera1n-macosx-x86_64.development/palera1n-macosx-x86_64.development ready/binaries_development/palera1n-macos-x86_64.development
+          cp ./palera1n-macosx-arm64.development/palera1n-macosx-arm64.development ready/binaries_development/palera1n-macos-arm64.development
+          cp ./palera1n-iphoneos-arm64.development/palera1n-iphoneos-arm64.development ready/binaries_development/palera1n-iphoneos-arm64.development
+          zip -r9 ready/debug_symbols/palera1n-iphoneos-arm64.dSYM.zip palera1n-iphoneos-arm64.dSYM
+          zip -r9 ready/debug_symbols/palera1n-macosx-arm64.dSYM.zip palera1n-macosx-arm64.dSYM
+          zip -r9 ready/debug_symbols/palera1n-macosx-x86_64.dSYM.zip palera1n-macosx-x86_64.dSYM
+          zip -r9 ready/debug_symbols/palera1n-macos.dSYM.zip palera1n-macos.dSYM
+
+      - name: Build debs
+        run: |
+          make -j$(sysctl -n hw.ncpu) docs
+          version=$(git describe --dirty --tags --abbrev=7 | sed 's|^v||' | sed 's|-beta|~beta|')
+
+          # Darwin x86_64
+          mkdir -p stage/DEBIAN
+          mkdir -p stage/opt/procursus/bin
+          mkdir -p stage/opt/procursus/usr/share/man/man1
+          cp packaging/control.macosx stage/DEBIAN/control
+
+          gsed 's|@DEB_ARCH@|darwin-amd64|g' -i stage/DEBIAN/control
+          gsed "s|@DEB_VERSION@|$version|g" -i stage/DEBIAN/control
+          
+          ginstall -Dm644 ready/binaries/palera1n-macos-x86_64 stage/opt/procursus/bin/palera1n
+          zstd -c19 docs/palera1n.1 > stage/opt/procursus/usr/share/man/man1/palera1n.1.zst
+          chmod 644 stage/opt/procursus/usr/share/man/man1/palera1n.1.zst
+          chmod 755 stage/opt/procursus/bin/palera1n
+
+          dpkg-deb --root-owner-group -Zzstd -b stage palera1n_darwin-amd64.deb
+          rm -rf stage
+
+          # Darwin arm64
+          mkdir -p stage/DEBIAN
+          mkdir -p stage/opt/procursus/bin
+          mkdir -p stage/opt/procursus/usr/share/man/man1
+          cp packaging/control.macosx stage/DEBIAN/control
+
+          gsed 's|@DEB_ARCH@|darwin-arm64|g' -i stage/DEBIAN/control
+          gsed "s|@DEB_VERSION@|$version|g" -i stage/DEBIAN/control
+          
+          ginstall -Dm644 ready/binaries/palera1n-macos-arm64 stage/opt/procursus/bin/palera1n
+          zstd -c19 docs/palera1n.1 > stage/opt/procursus/usr/share/man/man1/palera1n.1.zst
+          chmod 644 stage/opt/procursus/usr/share/man/man1/palera1n.1.zst
+          chmod 755 stage/opt/procursus/bin/palera1n
+
+          dpkg-deb --root-owner-group -Zzstd -b stage palera1n_darwin-arm64.deb
+          rm -rf stage
+
+          # iPhoneOS
+          mkdir -p stage/DEBIAN
+          mkdir -p stage/usr/bin
+          mkdir -p stage/usr/share/man/man1
+          cp packaging/control stage/DEBIAN/control
+
+          gsed 's|@DEB_ARCH@|iphoneos-arm|g' -i stage/DEBIAN/control
+          gsed "s|@DEB_VERSION@|$version|g" -i stage/DEBIAN/control
+          
+          ginstall -Dm644 ready/binaries/palera1n-iphoneos-arm64 stage/usr/bin/palera1n
+          zstd -c19 docs/palera1n.1 > stage/usr/share/man/man1/palera1n.1.zst
+          chmod 644 stage/usr/share/man/man1/palera1n.1.zst
+          chmod 755 stage/usr/bin/palera1n
+
+          dpkg-deb --root-owner-group -Zzstd -b stage palera1n_iphoneos-arm.deb
+          rm -rf stage
+
+          # iPhoneOS (rootless)
+          mkdir -p stage/DEBIAN
+          mkdir -p stage/var/jb/usr/bin
+          mkdir -p stage/var/jb/usr/share/man/man1
+          cp packaging/control stage/DEBIAN/control
+
+          gsed 's|@DEB_ARCH@|iphoneos-arm64|g' -i stage/DEBIAN/control
+          gsed "s|@DEB_VERSION@|$version|g" -i stage/DEBIAN/control
+          
+          ginstall -Dm644 ready/binaries/palera1n-iphoneos-arm64 stage/var/jb/usr/bin/palera1n
+          zstd -c19 docs/palera1n.1 > stage/var/jb/usr/share/man/man1/palera1n.1.zst
+          chmod 644 stage/var/jb/usr/share/man/man1/palera1n.1.zst
+          chmod 755 stage/var/jb/usr/bin/palera1n
+
+          dpkg-deb --root-owner-group -Zzstd -b stage palera1n_iphoneos-arm64.deb
+          rm -rf stage
+
+          mv palera1n*.deb ready/debian
+      
+      - name: Save build tag
+        run: echo "$(git describe --dirty --tags --abbrev=7 | sed 's|-dirty||')" > build-tag.txt
+      
+      - name: Upload build tag
+        uses: actions/upload-artifact@v3
+        with:
+          name: build-tag
+          path: build-tag.txt
+
+      - name: Get branch name
+        id: branch-name
+        uses: tj-actions/branch-names@v7
 
       - name: Upload artifact
+        if: ${{ github.event_name != 'pull_request' }}
         uses: wangyucode/[email protected]
         with:
           host: ${{ secrets.NICKCHAN_FTP_HOST }}
           port: ${{ secrets.NICKCHAN_FTP_PORT }}
           username: palera1n
-          privateKey: ${{ secrets.NICKCHAN_FTP_KEY }}
+          password: ${{ secrets.NICKCHAN_FTP_PASS }}
           forceUpload: true
           dryRun: false
           localDir: 'ready/'
-          remoteDir: '/palera1n/artifacts/c-rewrite'
-
-      - name: Upload artifact
-        uses: wangyucode/[email protected]
-        with:
-          host: ${{ secrets.MINEEK_FTP_HOST }}
-          port: 22
-          username: mineekfiles
-          password: ${{ secrets.MINEEK_FTP_PASS }}
-          forceUpload: true
-          dryRun: false
-          localDir: 'ready/'
-          remoteDir: '/uploads/palera1n/artifacts/palera1n-c'
+          remoteDir: "/palera1n/artifacts/c-rewrite/${{ steps.branch-name.outputs.ref_branch || github.ref_name }}/${{ github.run_number }}"
 
   build-Linux:
     strategy:
@@ -361,10 +531,13 @@ jobs:
         - aarch64-linux-musl
     runs-on: ubuntu-latest
     env:
-      MBEDTLS_VERSION: 3.3.0
+      MBEDTLS_VERSION: 3.5.0
       LIBUSB_VERSION: 1.0.26
       READLINE_VERSION: 8.2
-      NCURSES_VERSION: 6.4
+      SLANG_VERSION: 2.3.3
+      NEWT_VERSION: 0.52.23
+      GPM_VERSION: 1.20.7
+      POPT_VERSION: 1.19
 
     steps:
       - name: Checkout
@@ -374,8 +547,8 @@ jobs:
 
       - name: Install build dependencies (packages)
         run: |
-          sudo apt remove -y libssl-dev libreadline-dev
-          sudo apt install -y pkg-config autoconf automake
+          sudo apt-get remove -y libssl-dev libreadline-dev
+          sudo apt-get install -y pkg-config autoconf automake autopoint mandoc
           sudo pip3 install jsonschema jinja2
 
       - name: Download toolchain checksum
@@ -403,15 +576,19 @@ jobs:
           case ${{ matrix.triple }} in
             i486-linux-musl)
               echo "CHECKRA1N_NAME=linux-x86" >> $GITHUB_ENV
+              echo "ARCH_NAME=i386" >> $GITHUB_ENV
               ;;
             x86_64-linux-musl)
               echo "CHECKRA1N_NAME=linux-x86_64" >> $GITHUB_ENV
+              echo "ARCH_NAME=amd64" >> $GITHUB_ENV
               ;;
             armel-linux-musleabi)
               echo "CHECKRA1N_NAME=linux-armel" >> $GITHUB_ENV
+              echo "ARCH_NAME=armel" >> $GITHUB_ENV
               ;;
             aarch64-linux-musl)
               echo "CHECKRA1N_NAME=linux-arm64" >> $GITHUB_ENV
+              echo "ARCH_NAME=arm64" >> $GITHUB_ENV
               ;;
           esac
           echo "PKG_CONFIG_PATH=$(pwd)/sysroot/usr/local/lib/pkgconfig" >> $GITHUB_ENV
@@ -426,68 +603,37 @@ jobs:
           mkdir -p $(pwd)/sysroot/usr/local/lib
           ln -sf $(pwd)/sysroot/usr/local/lib{,64}
 
-      - name: Download dependencies (embedded binaries)
-        run: |
-          make -j5 download-deps
-
       - name: Download dependencies (source code)
         run: |
-          curl -LOOOO \
+          curl -LOOOOOOO \
             https://github.com/Mbed-TLS/mbedtls/archive/refs/tags/v${{ env.MBEDTLS_VERSION }}.tar.gz \
             https://github.com/libusb/libusb/releases/download/v${{ env.LIBUSB_VERSION }}/libusb-${{ env.LIBUSB_VERSION }}.tar.bz2 \
             https://mirror-hk.koddos.net/gnu/readline/readline-${{ env.READLINE_VERSION }}.tar.gz \
-            https://mirror-hk.koddos.net/gnu/ncurses/ncurses-${{ env.NCURSES_VERSION }}.tar.gz
+            https://www.jedsoft.org/releases/slang/slang-${{ env.SLANG_VERSION }}.tar.bz2 \
+            https://releases.pagure.org/newt/newt-${{ env.NEWT_VERSION }}.tar.gz \
+            https://github.com/telmich/gpm/archive/refs/tags/${{ env.GPM_VERSION }}.tar.gz \
+            https://github.com/rpm-software-management/popt/archive/refs/tags/popt-${{ env.POPT_VERSION }}-release.tar.gz
+
           tar -xf v${{ env.MBEDTLS_VERSION }}.tar.gz
           tar -xjf libusb-${{ env.LIBUSB_VERSION }}.tar.bz2
           tar -xf readline-${{ env.READLINE_VERSION }}.tar.gz
-          tar -xf ncurses-${{ env.NCURSES_VERSION }}.tar.gz
+          tar -xjf slang-${{ env.SLANG_VERSION }}.tar.bz2
+          tar -xf newt-${{ env.NEWT_VERSION }}.tar.gz
+          tar -xf ${{ env.GPM_VERSION }}.tar.gz
+          tar -xf popt-${{ env.POPT_VERSION }}-release.tar.gz
           git clone --depth=1 https://github.com/libimobiledevice/libplist
           git clone --depth=1 https://github.com/libimobiledevice/libimobiledevice-glue
           git clone --depth=1 https://github.com/libimobiledevice/libirecovery
           git clone --depth=1 https://github.com/libimobiledevice/libusbmuxd
           git clone --depth=1 https://github.com/libimobiledevice/libimobiledevice
-
-      - name: Build ncurses
-        run: |
-          cd ncurses-${{ env.NCURSES_VERSION }}
-          ./configure \
-            ${{ env.CONFIGURE_ARGS }} \
-            --with-build-cc="cc" \
-            --with-build-cflags=" " \
-            --with-build-cpp="cc -E" \
-            --with-build-cppflags=" " \
-            --with-build-ldflags=" " \
-            --enable-const \
-            --enable-ext-colors \
-            --enable-ext-mouse \
-            --enable-ext-putwin \
-            --enable-wattr-macros \
-            --with-pthread \
-            --disable-overwrite \
-            --without-debug \
-            --without-tests \
-            --enable-sigwinch \
-            --enable-const \
-            --enable-symlinks \
-            --enable-termcap \
-            --enable-pc-files \
-            --without-x11-rgb \
-            --with-pkg-config-libdir="${{ env.PREFIX }}/lib/pkgconfig" \
-            --includedir="${{ env.PREFIX }}/include" \
-            --enable-widec \
-            --with-default-terminfo-dir="/usr/share/terminfo" \
-            --with-terminfo-dirs="/usr/share/terminfo:/lib/terminfo:/usr/lib/terminfo:/usr/local/share/terminfo:/usr/local/lib/terminfo:/data/data/com.termux/files/usr/share/terminfo" \
-            LDFLAGS="${{ env.LDFLAGS }}" \
-            PKG_CONFIG_LIBDIR="${{ env.PREFIX }}/lib/pkgconfig"
-            gmake -j$(sysctl -n hw.ncpu)
-            gmake -j$(sysctl -n hw.ncpu) install DESTDIR=${{ env.DESTDIR }}
-            cd ..
+          git clone --depth=1 https://github.com/libimobiledevice/usbmuxd
 
       - name: Build Mbed TLS
         run: |
           cd mbedtls-${{ env.MBEDTLS_VERSION }}
-          cat ../patches/0001-Allow-empty-x509-cert-issuer.patch | patch -sN -d . -p1
+          cat ../patches/mbedtls/0001-Allow-empty-x509-cert-issuer.patch | patch -sN -d . -p1
           mkdir build
+          if [ "${{ matrix.triple }}" = "i486-linux-musl" ]; then sed -i '/define MBEDTLS_AESNI_C/d' include/mbedtls/mbedtls_config.h; fi
           cd build
           cmake .. \
             -DCMAKE_BUILD_TYPE=Release \
@@ -522,6 +668,63 @@ jobs:
           make -j$(nproc) install DESTDIR=${{ env.DESTDIR }}
           cd ..
 
+      - name: Build S-Lang
+        run: |
+          cd slang-${{ env.SLANG_VERSION }}
+          ./configure \
+            ${{ env.CONFIGURE_ARGS }} \
+            --without-x \
+            --without-pcre \
+            --without-onig \
+            --without-z \
+            --without-png \
+            --without-iconv
+          gmake -j$(sysctl -n hw.ncpu) static
+          gmake -j$(sysctl -n hw.ncpu) install-static DESTDIR=${{ env.DESTDIR }}
+          cd ..
+
+      - name: Build GPM
+        run: |
+          cd gpm-${{ env.GPM_VERSION }}
+          cat ../patches/gpm/*.patch | patch -sN -d . -p1
+          ./autogen.sh
+          ./configure \
+            ${{ env.CONFIGURE_ARGS }}
+          gmake -j$(sysctl -n hw.ncpu)
+          gmake -j$(sysctl -n hw.ncpu) install DESTDIR=${{ env.DESTDIR }}
+          cd ..
+
+      - name: Build popt
+        run: |
+          cd popt-popt-${{ env.POPT_VERSION }}-release
+          autoreconf -fiv
+          ./configure \
+            ${{ env.CONFIGURE_ARGS }} \
+            --without-libiconv-prefix \
+            --without-libintl-prefix \
+            --disable-nls \
+            --disable-werror
+          gmake -j$(sysctl -n hw.ncpu)
+          gmake -j$(sysctl -n hw.ncpu) install DESTDIR=${{ env.DESTDIR }}
+          cd ..
+
+      - name: Build newt
+        run: |
+          cd newt-${{ env.NEWT_VERSION }}
+          ./configure \
+            ${{ env.CONFIGURE_ARGS }} \
+            --with-readline=gnu \
+            --without-python \
+            --without-tcl \
+            --disable-nls \
+            --with-gpm-support
+          gmake -j$(sysctl -n hw.ncpu) libnewt.a
+          mkdir -p ${{ env.DESTDIR }}/usr/local/{lib/pkgconfig,include}
+          install -m644 libnewt.pc ${{ env.DESTDIR }}/usr/local/lib/pkgconfig
+          install -m644 libnewt.a ${{ env.DESTDIR }}/usr/local/lib
+          install -m644 newt.h ${{ env.DESTDIR }}/usr/local/include
+          cd ..
+
       - name: Build libplist
         run: |
           cd libplist
@@ -574,47 +777,129 @@ jobs:
           sudo rm /usr/local
           sudo mv /usr/local.bak /usr/local
 
+      - name: Build usbmuxd
+        run: |
+          cd usbmuxd
+          autoreconf -fiv
+          ./configure ${{ env.CONFIGURE_ARGS }} --without-systemd
+          ${{ matrix.triple }}-gcc ${{ env.CFLAGS }} -I${{ env.DESTDIR }}/${{ env.PREFIX }}/include/libusb-1.0 src/*.c \
+            -DHAVE_CONFIG_H -no-pie \
+            -I. -static ${{ env.LDFLAGS }}} -limobiledevice-1.0 -lusbmuxd-2.0 -limobiledevice-glue-1.0  \
+            -lplist-2.0 -lusb-1.0 -lmbedtls -lmbedcrypto -lmbedx509 -lpthread -o usbmuxd
+          mkdir -p ${{ env.DESTDIR }}/${{ env.PREFIX }}/sbin
+          ${{ matrix.triple }}-objcopy --only-keep-debug usbmuxd usbmuxd.debug
+          ${{ matrix.triple }}-strip --strip-debug --strip-unneeded usbmuxd
+          ${{ matrix.triple }}-objcopy --add-gnu-debuglink=usbmuxd.debug usbmuxd
+          install -m755 usbmuxd usbmuxd.debug ${{ env.DESTDIR }}/${{ env.PREFIX }}/sbin
+          cd ..
+
       - name: Build palera1n
         run: |
-          cp -a sysroot/${{ env.PREFIX }}/{include,lib} dep_root
+          cp -a ${{ env.DESTDIR }}/${{ env.PREFIX }}/{include,lib} dep_root
           find dep_root -name '*.so' -delete
           find dep_root -name '*.la' -delete
-          make -j$(nproc) CC="${{ matrix.triple }}-gcc" palera1n
+          CC="${{ matrix.triple }}-gcc" make -j$(nproc)
+          cp src/palera1n palera1n.release
 
       - name: Seperate debug symbols
         run: |
-          ${{ matrix.triple }}-objcopy --only-keep-debug src/palera1n palera1n.debug
-          ${{ matrix.triple }}-strip --strip-debug --strip-unneeded src/palera1n
-          ${{ matrix.triple }}-objcopy --add-gnu-debuglink=palera1n.debug src/palera1n
+          ${{ matrix.triple }}-objcopy --only-keep-debug palera1n.release palera1n.debug
+          ${{ matrix.triple }}-strip --strip-debug --strip-unneeded palera1n.release
+          ${{ matrix.triple }}-objcopy --add-gnu-debuglink=palera1n.debug palera1n.release
           chmod -x palera1n.debug
       
+      - name: Build palera1n (Development)
+        run: |
+          CC="${{ matrix.triple }}-gcc" make -j$(nproc) clean
+          CC="${{ matrix.triple }}-gcc" make -j$(nproc) DEV_BUILD=1 TUI=1 ROOTFUL=1
+          cp src/palera1n palera1n.development
+
       - name: Prepare artifact
         run: |
-          mkdir ready
-          mv palera1n.debug ready/palera1n-${{ env.CHECKRA1N_NAME }}.debug
-          mv src/palera1n ready/palera1n-${{ env.CHECKRA1N_NAME }}
-          tar -zcf ready/dep_root_${{ matrix.triple }}.tgz dep_root
+          mkdir -p ready/{binaries,debian,binaries_development,build_depends,debug_symbols} usbmuxd-static
+          mv palera1n.debug ready/debug_symbols/palera1n-${{ env.CHECKRA1N_NAME }}.debug
+          mv palera1n.release ready/binaries/palera1n-${{ env.CHECKRA1N_NAME }}
+          mv palera1n.development ready/binaries_development/palera1n-${{ env.CHECKRA1N_NAME }}.development
+          tar -zcf ready/build_depends/dep_root_${{ matrix.triple }}.tgz dep_root
+          install -m755 sysroot/${{ env.PREFIX }}/sbin/usbmuxd usbmuxd-static/usbmuxd-${{ env.CHECKRA1N_NAME }}
+          install -m755 sysroot/${{ env.PREFIX }}/sbin/usbmuxd.debug usbmuxd-static/usbmuxd-${{ env.CHECKRA1N_NAME }}.debug
+
+      - name: Build debs
+        run: |
+          version=$(git describe --dirty --tags --abbrev=7 | sed 's|^v||' | sed 's|-beta|~beta|')
+
+          make -j$(nproc) docs
+          mkdir -p stage/DEBIAN
+          mkdir -p stage/usr/bin
+          mkdir -p stage/usr/share/man/man1
+          cp packaging/control stage/DEBIAN/control
+
+          sed 's|@DEB_ARCH@|${{ env.ARCH_NAME }}|g' -i stage/DEBIAN/control
+          sed "s|@DEB_VERSION@|$version|g" -i stage/DEBIAN/control
+          
+          install -Dm644 ready/binaries/palera1n-${{ env.CHECKRA1N_NAME }} stage/usr/bin/palera1n
+          gzip -c9 docs/palera1n.1 > stage/usr/share/man/man1/palera1n.1.gz
+          chmod 755 stage/usr/bin/palera1n
+          chmod 644 stage/usr/share/man/man1/palera1n.1.gz
+
+          dpkg-deb --root-owner-group -b stage palera1n_${{ env.ARCH_NAME }}.deb
+          mv palera1n*.deb ready/debian
+          rm -rf stage
+
+      - name: Get branch name
+        id: branch-name
+        uses: tj-actions/branch-names@v7
 
       - name: Upload artifact
+        if: ${{ github.event_name != 'pull_request' }}
         uses: wangyucode/[email protected]
         with:
           host: ${{ secrets.NICKCHAN_FTP_HOST }}
           port: ${{ secrets.NICKCHAN_FTP_PORT }}
           username: palera1n
-          privateKey: ${{ secrets.NICKCHAN_FTP_KEY }}
+          password: ${{ secrets.NICKCHAN_FTP_PASS }}
           forceUpload: true
           dryRun: false
           localDir: 'ready/'
-          remoteDir: '/palera1n/artifacts/c-rewrite'
+          remoteDir: "/palera1n/artifacts/c-rewrite/${{ steps.branch-name.outputs.ref_branch || github.ref_name }}/${{ github.run_number }}"
 
-      - name: Upload artifact
+      - name: Upload usbmuxd artifact
+        if: ${{ github.event_name != 'pull_request' }}
         uses: wangyucode/[email protected]
         with:
-          host: ${{ secrets.MINEEK_FTP_HOST }}
-          port: 22
-          username: mineekfiles
-          password: ${{ secrets.MINEEK_FTP_PASS }}
+          host: ${{ secrets.NICKCHAN_FTP_HOST }}
+          port: ${{ secrets.NICKCHAN_FTP_PORT }}
+          username: palera1n
+          password: ${{ secrets.NICKCHAN_FTP_PASS }}
           forceUpload: true
           dryRun: false
-          localDir: 'ready/'
-          remoteDir: '/uploads/palera1n/artifacts/palera1n-c'
+          localDir: 'usbmuxd-static/'
+          remoteDir: "/palera1n/artifacts/usbmuxd-static"
+
+  finish-build:
+    runs-on: ubuntu-latest
+    if: ${{ github.event_name != 'pull_request' }}
+    needs: [build-docs, build-darwin, darwin-dist, build-Linux]
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      
+      - name: Get branch name
+        id: branch-name
+        uses: tj-actions/branch-names@v7
+
+      - name: Download build tag
+        uses: actions/download-artifact@v3
+        with:
+          name: build-tag
+
+      - uses: geekyeggo/delete-artifact@v2
+        with:
+          name: '*'
+          failOnError: false
+
+      - name: Send Discord build message
+        run: |
+          COMMITMESSAGE=`git log --pretty=format:'- \`%h\` %s' -1 --reverse` &&
+          (curl "${{ secrets.DISCORD_WEBHOOK }}" -sS -H "Content-Type:application/json" -X POST -d "{\"content\":null,\"embeds\":[{\"title\":\"[palera1n:${{ steps.branch-name.outputs.ref_branch }}] Nightly Build ${{ github.run_number }}\",\"url\":\"https://github.com/palera1n/palera1n/actions/runs/${GITHUB_RUN_ID}\",\"color\":2829617,\"fields\":[{\"name\":\"Build tag\",\"value\":\"- \`$(cat build-tag.txt | sed 's|\n||')\`\"},{\"name\":\"Destination\",\"value\":\"- https://cdn.nickchan.lol/palera1n/artifacts/c-rewrite/${{ steps.branch-name.outputs.ref_branch }}/${{ github.run_number }}\"},{\"name\":\"Documentation\",\"value\":\"- [palera1n.1.html](https://cdn.nickchan.lol/palera1n/artifacts/c-rewrite/${{ steps.branch-name.outputs.ref_branch }}/${{ github.run_number }}/docs/palera1n.1.html)\"},{\"name\":\"Main Artifacts\",\"value\":\"- [palera1n-iphoneos-arm64](https://cdn.nickchan.lol/palera1n/artifacts/c-rewrite/${{ steps.branch-name.outputs.ref_branch }}/${{ github.run_number }}/binaries/palera1n-iphoneos-arm64)\n- [palera1n-linux-arm64](https://cdn.nickchan.lol/palera1n/artifacts/c-rewrite/${{ steps.branch-name.outputs.ref_branch }}/${{ github.run_number }}/binaries/palera1n-linux-arm64)\n- [palera1n-linux-armel](https://cdn.nickchan.lol/palera1n/artifacts/c-rewrite/${{ steps.branch-name.outputs.ref_branch }}/${{ github.run_number }}/binaries/palera1n-linux-armel)\n- [palera1n-linux-x86](https://cdn.nickchan.lol/palera1n/artifacts/c-rewrite/${{ steps.branch-name.outputs.ref_branch }}/${{ github.run_number }}/binaries/palera1n-linux-x86)\n- [palera1n-linux-x86_64](https://cdn.nickchan.lol/palera1n/artifacts/c-rewrite/${{ steps.branch-name.outputs.ref_branch }}/${{ github.run_number }}/binaries/palera1n-linux-x86_64)\n- [palera1n-macos-universal](https://cdn.nickchan.lol/palera1n/artifacts/c-rewrite/${{ steps.branch-name.outputs.ref_branch }}/${{ github.run_number }}/binaries/palera1n-macos-universal)\"}],\"footer\":{\"text\":\"${{ github.actor }}\", \"icon_url\": \"https://github.com/${{ github.actor }}.png\",\"timestamp\":\"$(date -u +"%FT%TZ")\"}}],\"username\":\"GitHub Actions\",\"avatar_url\":\"https://github.githubassets.com/images/modules/logos_page/GitHub-Mark.png\"}")
+    

.gitignore

@@ -1,5 +1,5 @@
-dep_root/**
 contrib/**
+dep_root/**
 !dep_root/.keep
 !contrib/.keep
 contrib/
@@ -8,9 +8,19 @@ contrib/
 checkra1n*
 payload.c
 src/palera1n
-palera1n*
 !xxd-embedded.h
 src/binpack.dmg
 src/ramdisk.dmg
+src/ramdisk.dmg.lzma
 src/xxd-*.c
 .DS_Store
+!palera1n.1
+palera1n.1.html
+Payload
+docs/*.html
+build
+src/*.dmg.c
+.idea
+src/stage2/
+src/libcheckra1nhelper.dylib*
+src/Pongo.bin

Makefile

@@ -2,33 +2,44 @@ SRC = $(shell pwd)
 DEP = $(SRC)/dep_root
 STRIP = strip
 CC ?= cc
-CFLAGS += -I$(DEP)/include -I$(DEP)/include/ncursestw -I$(SRC)/include -I$(SRC)
-CFLAGS += -Wall -Wextra -DPALERAIN_VERSION=\"2.0.0\" -Wall -Wextra -Wno-unused-parameter
-CFLAGS += -Wno-unused-variable -I$(SRC)/src
+CFLAGS += -isystem $(DEP)/include -I$(SRC)/include -I$(SRC) -D_XOPEN_SOURCE=500
+CFLAGS += -Wall -Wextra -Wno-unused-parameter -DPALERAIN_VERSION=\"2.0.0\" -DHAVE_LIBIMOBILEDEVICE
+CFLAGS += -Wno-unused-variable -I$(SRC)/src -std=c99 -pedantic-errors -D_C99_SOURCE -D_POSIX_C_SOURCE=200112L
 LIBS += $(DEP)/lib/libimobiledevice-1.0.a $(DEP)/lib/libirecovery-1.0.a $(DEP)/lib/libusbmuxd-2.0.a
-LIBS += $(DEP)/lib/libimobiledevice-glue-1.0.a $(DEP)/lib/libplist-2.0.a -pthread
+LIBS += $(DEP)/lib/libimobiledevice-glue-1.0.a $(DEP)/lib/libplist-2.0.a -pthread -lm
 ifeq ($(TARGET_OS),)
 TARGET_OS = $(shell uname -s)
+UNAME = $(TARGET_OS)
+else
+UNAME = $(shell uname -s)
 endif
 ifeq ($(TARGET_OS),Darwin)
+CFLAGS += -Wno-nullability-extension
 ifeq (,$(findstring version-min=, $(CFLAGS)))
 CFLAGS += -mmacosx-version-min=10.8
 endif
 LDFLAGS += -Wl,-dead_strip
-LIBS += -framework CoreFoundation -framework SystemConfiguration -framework IOKit -framework Security
+LIBS += -framework CoreFoundation -framework IOKit
 else
 CFLAGS += -fdata-sections -ffunction-sections
-LDFLAGS += -static -no-pie -Wl,--gc-sections
+LDFLAGS += -Wl,--gc-sections
 endif
 LIBS += $(DEP)/lib/libmbedtls.a $(DEP)/lib/libmbedcrypto.a $(DEP)/lib/libmbedx509.a $(DEP)/lib/libreadline.a
-LIBS += $(DEP)/lib/libusb-1.0.a
 
+ifeq ($(TUI),1)
+LIBS += $(DEP)/lib/libnewt.a $(DEP)/lib/libpopt.a $(DEP)/lib/libslang.a
+ifeq ($(TARGET_OS),Linux)
+LIBS += $(DEP)/lib/libgpm.a
+endif
+endif
 ifeq ($(DEV_BUILD),1)
-LIBS += $(DEP)/lib/libmenutw.a $(DEP)/lib/libncursestw.a
 CFLAGS += -O0 -g -DDEV_BUILD -fno-omit-frame-pointer
 ifeq ($(ASAN),1)
 BUILD_STYLE=ASAN
 CFLAGS += -fsanitize=address,undefined -fsanitize-address-use-after-return=runtime
+else ifeq ($(TSAN),1)
+BUILD_STYLE=TSAN
+CFLAGS += -fsanitize=thread,undefined
 else
 BUILD_STYLE = DEVELOPMENT
 endif
@@ -36,13 +47,31 @@ else
 CFLAGS += -Os -g
 BUILD_STYLE = RELEASE
 endif
+LIBS += -lc
+
+ifeq ($(TARGET_OS),Linux)
+ifneq ($(shell echo '$(BUILD_STYLE)' | grep -q '[A-Z]\+SAN' && echo 1),1)
+LDFLAGS += -static -no-pie
+endif
+endif
+
+ifneq ($(BAKERAIN_DEVELOPE_R),)
+CFLAGS += -DBAKERAIN_DEVELOPE_R="\"$(BAKERAIN_DEVELOPE_R)\""
+endif
+
 BUILD_DATE := $(shell LANG=C date)
+BUILD_NUMBER := $(shell git rev-list --count HEAD)
 BUILD_TAG := $(shell git describe --dirty --tags --abbrev=7)
 BUILD_WHOAMI := $(shell whoami)
+BUILD_BRANCH := $(shell git rev-parse --abbrev-ref HEAD)
+BUILD_COMMIT := $(shell git rev-parse HEAD)
 
-CFLAGS += -DBUILD_STYLE=\"$(BUILD_STYLE)\" -DBUILD_DATE="\"$(BUILD_DATE)\"" -DBUILD_WHOAMI=\"$(BUILD_WHOAMI)\" -DBUILD_TAG=\"$(BUILD_TAG)\"
+CFLAGS += -DBUILD_STYLE="\"$(BUILD_STYLE)\"" -DBUILD_DATE="\"$(BUILD_DATE)\""
+CFLAGS += -DBUILD_WHOAMI="\"$(BUILD_WHOAMI)\"" -DBUILD_TAG="\"$(BUILD_TAG)\""
+CFLAGS += -DBUILD_NUMBER="\"$(BUILD_NUMBER)\"" -DBUILD_BRANCH="\"$(BUILD_BRANCH)\""
+CFLAGS += -DBUILD_COMMIT="\"$(BUILD_COMMIT)\""
 
-export SRC DEP CC CFLAGS LDFLAGS LIBS TARGET_OS DEV_BUILD BUILD_DATE BUILD_TAG BUILD_WHOAMI BUILD_STYLE
+export SRC DEP UNAME CC CFLAGS LDFLAGS LIBS SHELL TARGET_OS DEV_BUILD BUILD_DATE BUILD_TAG BUILD_WHOAMI BUILD_STYLE BUILD_NUMBER BUILD_BRANCH
 
 all: palera1n
 
@@ -51,12 +80,16 @@ palera1n: download-deps
 
 clean:
 	$(MAKE) -C src clean
+	$(MAKE) -C docs clean
 
 download-deps:
-	$(MAKE) -C src checkra1n-macos checkra1n-linux-arm64 checkra1n-linux-armel checkra1n-linux-x86 checkra1n-linux-x86_64 checkra1n-kpf-pongo ramdisk.dmg binpack.dmg
+	$(MAKE) -C src $(patsubst %, resources/%, checkra1n-macos checkra1n-linux-arm64 checkra1n-linux-armel checkra1n-linux-x86 checkra1n-linux-x86_64 checkra1n-kpf-pongo ramdisk.dmg binpack.dmg Pongo.bin)
+
+docs:
+	$(MAKE) -C docs
 
 distclean: clean
-	rm -rf palera1n-* palera1n*.dSYM src/checkra1n-* src/checkra1n-kpf-pongo src/ramdisk.dmg src/binpack.dmg
+	$(MAKE) -C src distclean
 
-.PHONY: all palera1n clean
+.PHONY: all palera1n clean docs distclean
 

README.md

@@ -1,97 +1,54 @@
-<h1 align="center">
-  palera1n
-</h1>
+<center>
+  <a href="#"><img src="https://cdn.discordapp.com/attachments/1103485261196832779/1126450758523572285/pxd.png" alt="Logo"></a>
+</center>
 
 <p align="center">
-  <a href="#">
-    <img src="https://img.shields.io/badge/made%20with-love-E760A4.svg" alt="Made with love"></img>
-  </a>
-  <a href="https://github.com/palera1n/palera1n-c/blob/main/LICENSE" target="_blank">
-    <img src="https://img.shields.io/github/license/palera1n/palera1n-c.svg" alt="License"></img>
-  </a>
-  <a href="https://github.com/palera1n/palera1n-c/graphs/contributors" target="_blank">
-    <img src="https://img.shields.io/github/contributors/palera1n/palera1n-c.svg" alt="Contributors"></img>
-  </a>
-  <a href="https://github.com/palera1n/palera1n-c/commits/main" target="_blank">
-    <img src="https://img.shields.io/github/commit-activity/w/palera1n/palera1n-c.svg" alt="Commits"></img>
-  </a>
-  <img src="https://img.shields.io/github/search/palera1n/palera1n-c/goto.svg" alt="goto counter"></img>
-  <a href="https://dsc.gg/palera1n" target="_blank">
-    <img src="https://img.shields.io/discord/1028398973452570725?label=discord" alt="Discord"></img>
-  </a>
+    <a href="https://cdn.nickchan.lol/palera1n/c-rewrite/releases/v2.0.0-beta.7/palera1n.1.html">Documentation</a> •
+	<a href="https://ios.cfw.guide/installing-palera1n">Installation Guide</a> •
+	<a href="#requirements">Requirements</a> •
+	<a href="https://discord.gg/palera1n">Support Discord</a> •
+	<a href="https://palera.in">Website</a>
 </p>
 
-<p align="center">
-iOS 15.0-16.3 work in progress, semi-tethered checkm8 jailbreak
-</p>
+## Information
+This is the official repo for the palera1n project, a jailbreak for arm64 devices on iOS 15.0+
 
-# BEFORE YOU USE
+- Loader application used in palera1n can be found [here](https://github.com/palera1n/loader).
+- palera1ns jbinit can be found [here](https://github.com/palera1n/jbinit).
+- palera1ns custom PongoOS can be found [here](https://github.com/palera1n/pongoos).
 
-This is mainly for ROOTLESS, and is NOT READY. It was made public so you can contribute and explore the code. This is not the final product.
+Website & credits can be found at https://palera.in (scroll down for credits).
 
-This version of palera1n supports booting fakefs setups with the `-f` option. No arguments required.
+## Warnings
+We are **NOT** responsible for any data loss, or the result of a device being bricked. The user of this program accepts responsibility should something happen to their device. While nothing should happen, jailbreaking has risks in itself.
+- If your device is stuck in recovery, please run futurerestore `--exit-recovery`, or use `irecovery -n`.
 
-This version of palera1n is able to create fakefs with the `-c` option, however as of right now if the `/jbin/loader.app`
-doesn't exist (which is true for any fakefs created with this version of palera1n), the loader that appears would be rootless.
+- If you're unable to get out of recovery via these methods please restore with iTunes or Finder.
 
-Loader app does appear on rootless, and you can use the SSH server listening at 127.0.0.1:44 (IPv4) or ::1:44 (IPv6).
+- palera1n will never work in VirtualBox, VMware or any virtual machine that doesn't support PCI passthrough.
 
-If the device is previously jailbroken, the jailbreak environment is automatically prepared. 
-You can use the `-s` option to skip this behaviour.
+## Requirements
+- A checkm8 vulnerable iOS device on iOS 15+ (`A8` - `A11`)
+	- On `A11`, **you must disable your passcode while in the jailbroken state** (on iOS 16, you need to **reset your device** before proceeding with palera1n).
 
-Usbmuxd is only required for starting in normal mode, it is not required when started from recovery or DFU mode. (Usbmuxd is preinstalled with macOS)
+- **USB-A** cables are recommended to use, USB-C may have issues with palera1n and getting into DFU mode.<details><summary>Technical explanation</summary>The BootROM will only enter DFU if it detects USB voltage, which boils down to checking whether a certain pin is asserted from the Tristar chip. The Tristar does this based on the cable's accessory ID, and apparently USB-A and USB-C cables have different accessory IDs, and the one of the USB-C cables makes the Tristar not assert the USB voltage pin.</details>
 
-You can obtain the latest build of palera1n-c [here](https://cdn.nickchan.lol/palera1n/artifacts/c-rewrite/).
+- A Linux or macOS computer
+	- AMD CPUs (not AMD Mobile) have an issue [with (likely) their USB controllers] that causes them to have a very low success rate with checkm8. It is not recommended that you use them with palera1n.
+		- If your device does not successfully jailbreak, try a computer with an Intel or other CPU
+    
+- Apple Silicon Macs with USB-C
+	- USB-C port on Apple Silicon Macs may require manual unplugging and replugging of the lightning cable after checkm8 exploit.
+	- This problem may be solved by connecting via USB hub, though extensions can vary.
 
-# This is a work in progress.
+## Need help?
 
-Read this throughly, feel free to ask questions, know the risks. If you want to ask questions, either:
+Make sure you provide full details on your device, such as:
+- iDevice
+- iOS Version
+- Passcode enabled?
+- Logs, if panicked then send latest `panic-full` log from your iDevice.
 
-1. Ask in the [palera1n Discord](https://discord.gg/4S3yUMxuQH)
-2. Ask in the r/jailbreak Discord #palera1n channel
+Using `-VvL` would help with debugging.
 
-Please, please, please, provide necessary info:
-
-- iOS version and device (eg. iPhone 7+ 15.1, iPhone 6s 15.3.1)
-- Computer's OS and version (eg. Ubuntu 22.04, macOS 13.0)
-- The command you ran
-
-**DO NOT** harass tweak devs if tweaks don't work. Refer to [here](https://github.com/itsnebulalol/ios15-tweaks) for compatiblity.
-
-# Patreons
-
-Thank you so much to our Patreons that make the future development possible! You may sub [here](https://patreon.com/palera1n), if you'd like to. If you subscribe, please message [Nebula](https://twitter.com/itsnebulalol) in any way preferred to have you put here.
-
-<a href="https://github.com/samh06"><img width=64 src="https://user-images.githubusercontent.com/18669106/206333607-881d7ca1-f3bf-4e18-b620-25de0c527315.png"></img></a>
-<a href="https://havoc.app"><img width=64 src="https://docs.havoc.app/img/standard_icon.png"></img></a>
-<a href="https://twitter.com/yyyyyy_public"><img width=64 src="https://pbs.twimg.com/profile_images/1429332550112079876/dQQgsURc_400x400.jpg"></img></a>
-<a href="https://twitter.com/0xSp00kyb0t"><img width=64 src="https://pbs.twimg.com/profile_images/1603601553226620935/1t4yD1bD_400x400.jpg"></img></a>
-<a href="https://chariz.com"><img width=64 src="https://chariz.com/img/favicon.png"></img></a>
-<a href="https://twitter.com/stars6220"><img width=64 src="https://pbs.twimg.com/profile_images/1606990218925670400/Y4JBl6OS_400x400.jpg"></img></a>
-<a href="https://github.com/beast9265"><img width=64 src="https://avatars.githubusercontent.com/u/79794946?v=4"></img></a>
-
-# What does this do?
-
-It boots the device with patches for the jailbreak. 
-
-**WARNING**: I am NOT responsible for any data loss. The user of this program accepts responsibility should something happen to their device. While nothing should happen, jailbreaking has risks in itself. If your device is stuck in recovery, please run `futurerestore --exit-recovery`, or use `irecovery -n`.
-
-On A11, you **must disable your passcode while in the jailbroken state**. We don't have an A11 SEP exploit yet.
-
-<!--# Usage
-See the [wiki](https://github.com/palera1n/palera1n-c/wiki).-->
-
-# Credits
-
-- [Nebula](https://github.com/itsnebulalol), palera1n owner and Python rewrite lead developer
-- [Nathan](https://github.com/verygenericname)
-- [Mineek](https://github.com/mineek)
-- [Nick Chan](https://github.com/asdfugil)
-- [Amy](https://github.com/elihwyma) for the [Pogo](https://github.com/elihwyma/Pogo) app
-- [checkra1n](https://github.com/checkra1n) for the base of the kpf
-- [the Procursus Team](https://github.com/ProcursusTeam) for the amazing [bootstrap](https://github.com/ProcursusTeam/Procursus)
-- [F121](https://github.com/F121Live) for helping test
-- [Tom](https://github.com/guacaplushy) for a couple patches and bugfixes
-- [Nick Chan](https://github.com/asdfugil) general help with patches and jbinit
-- [Serena](https://github.com/SerenaKit) for helping with boot ramdisk
-- [Évelyne](https://github.com/evelyneee) for ElleKit, rootless tweak injection
+Join the [Support Discord](https://dsc.gg/palera1n)

docs/Makefile

@@ -0,0 +1,9 @@
+PAGES = palera1n.1.html
+
+all: $(PAGES)
+
+%.1.html: %.1
+	mandoc -T html -O style=mandoc.css palera1n.1 > palera1n.1.html
+
+clean:
+	rm -f $(PAGES)

docs/mandoc.css

@@ -0,0 +1,269 @@
+/* $OpenBSD: mandoc.css,v 1.35 2021/03/30 19:23:50 schwarze Exp $ */
+/*
+ * Standard style sheet for mandoc(1) -Thtml and man.cgi(8).
+ *
+ * Written by Ingo Schwarze <[email protected]>.
+ * I place this file into the public domain.
+ * Permission to use, copy, modify, and distribute it for any purpose
+ * with or without fee is hereby granted, without any conditions.
+ */
+
+/* Global defaults. */
+
+html {
+		--bg: #FFFFFF;
+		--fg: #000000; }
+body {		background: var(--bg);
+		color: var(--fg);
+		font-family: monospace,Helvetica,Arial,sans-serif;
+		max-width: 80ch;
+		margin: 1em auto;
+		padding: 0 1ch;
+	}
+h1 {		font-size: 110%; }
+table {		margin-top: 0em;
+		margin-bottom: 0em;
+		border-collapse: collapse; }
+/* Some browsers set border-color in a browser style for tbody,
+ * but not for table, resulting in inconsistent border styling. */
+tbody {		border-color: inherit; }
+tr {		border-color: inherit; }
+td {		vertical-align: top;
+		padding-left: 0.2em;
+		padding-right: 0.2em;
+		border-color: inherit; }
+ul, ol, dl {	margin-top: 0em;
+		margin-bottom: 0em; }
+li, dt {	margin-top: 1em; }
+pre {		font-family: inherit; }
+
+.permalink {	border-bottom: thin dotted;
+		color: inherit;
+		font: inherit;
+		text-decoration: inherit; }
+* {		clear: both }
+
+/* Search form and search results. */
+
+form {
+	position: sticky;
+	top: 0px;
+	background-color: var(--bg);
+	z-index: 1;
+}
+
+fieldset {	border: thin solid silver;
+		border-radius: 0.3em;
+		text-align: center; }
+input[name=expr] {
+		width: 25%; }
+
+table.results {	margin-top: 1em;
+		margin-left: 2em;
+		font-size: smaller; }
+
+/* Header and footer lines. */
+
+table.head {	width: 100%;
+		border-bottom: 1px dotted #808080;
+		margin-bottom: 1em;
+		font-size: smaller;
+		overflow-wrap: anywhere; }
+td.head-vol {	text-align: center; }
+td.head-rtitle {
+		text-align: right; }
+
+table.foot {	width: 100%;
+		border-top: 1px dotted #808080;
+		margin-top: 1em;
+		font-size: smaller;
+		overflow-wrap: anywhere; }
+td.foot-os {	text-align: right; }
+
+table.Nm {
+	overflow-wrap:anywhere;
+}
+
+/* Sections and paragraphs. */
+
+.manual-text {
+		margin-left: 3.8em; }
+h1.Sh {		margin-top: 1.2em;
+		margin-bottom: 0.6em;
+		margin-left: -3.2em; }
+h2.Ss {		margin-top: 1.2em;
+		margin-bottom: 0.6em;
+		margin-left: -1.2em;
+		font-size: 105%; }
+.Pp {		margin: 0.6em 0em; }
+
+/* Displays and lists. */
+
+.Bd-indent {	margin-left: 3.8em; }
+
+.Bl-bullet {	list-style-type: disc;
+		padding-left: 1em; }
+.Bl-dash {	list-style-type: none;
+		padding-left: 0em; }
+.Bl-dash > li:before {
+		content: "\2014  "; }
+.Bl-item {	list-style-type: none;
+		padding-left: 0em; }
+.Bl-compact > li {
+		margin-top: 0em; }
+
+.Bl-enum {	padding-left: 2em; }
+.Bl-compact > li {
+		margin-top: 0em; }
+
+.Bl-diag > dt {
+		font-style: normal;
+		font-weight: bold; }
+.Bl-diag > dd {
+		margin-left: 0em; }
+.Bl-hang > dd {
+		margin-left: 5.5em; }
+.Bl-inset > dd {
+		margin-left: 0em; }
+.Bl-ohang > dd {
+		margin-left: 0em; }
+.Bl-tag {	margin-top: 0.6em;
+		margin-left: 5.5em; }
+.Bl-tag > dt {
+		float: left;
+		margin-top: 0em;
+		margin-left: -5.5em;
+		padding-right: 0.5em;
+		vertical-align: top; }
+.Bl-tag > dd {
+		clear: right;
+		column-count: 1;  /* Force block formatting context. */
+		width: 100%;
+		margin-top: 0em;
+		margin-left: 0em;
+		margin-bottom: 0.6em;
+		vertical-align: top; }
+.Bl-compact {	margin-top: 0em; }
+.Bl-compact > dd {
+		margin-bottom: 0em; }
+.Bl-compact > dt {
+		margin-top: 0em; }
+
+.Bl-column > tbody > tr > td {
+		margin-top: 1em; }
+.Bl-compact > tbody > tr > td {
+		margin-top: 0em; }
+
+.Rs {		font-style: normal;
+		font-weight: normal; }
+.RsB {		font-style: italic;
+		font-weight: normal; }
+.RsI {		font-style: italic;
+		font-weight: normal; }
+.RsJ {		font-style: italic;
+		font-weight: normal; }
+.RsT {		text-decoration: underline; }
+
+.tbl td {	vertical-align: middle; }
+
+.HP {		margin-left: 3.8em;
+		text-indent: -3.8em; }
+
+/* Semantic markup for command line utilities. */
+
+code.Nm {	font-style: normal;
+		font-weight: bold;
+		font-family: inherit;
+		overflow-wrap: normal; }
+.Fl {		font-style: normal;
+		font-weight: bold;
+		font-family: inherit; }
+.Cm {		font-style: normal;
+		font-weight: bold;
+		font-family: inherit; }
+.Ar {		font-style: italic;
+		font-weight: normal; }
+.Op {		display: inline; }
+.Ic {		font-style: normal;
+		font-weight: bold;
+		font-family: inherit; }
+.Ev {		font-style: normal;
+		font-weight: normal;
+		font-family: monospace; }
+.Pa {		font-style: italic;
+		font-weight: normal; }
+
+/* Semantic markup for function libraries. */
+
+code.In {	font-style: normal;
+		font-weight: bold;
+		font-family: inherit; }
+.Fd {		font-style: normal;
+		font-weight: bold;
+		font-family: inherit; }
+.Ft {		font-style: italic;
+		font-weight: normal; }
+.Fn {		font-style: normal;
+		font-weight: bold;
+		font-family: inherit; }
+.Fa {		font-style: italic;
+		font-weight: normal; }
+.Vt {		font-style: italic;
+		font-weight: normal; }
+.Va {		font-style: italic;
+		font-weight: normal; }
+.Dv {		font-style: normal;
+		font-weight: normal;
+		font-family: monospace; }
+.Er {		font-style: normal;
+		font-weight: normal;
+		font-family: monospace; }
+
+/* Various semantic markup. */
+
+.Cd {		font-style: normal;
+		font-weight: bold;
+		font-family: inherit; }
+.Ad {		font-style: italic;
+		font-weight: normal; }
+.Ms {		font-style: normal;
+		font-weight: bold; }
+
+/* Physical markup. */
+
+.Bf {		display: inline; }
+.No {		font-style: normal;
+		font-weight: normal; }
+.Em {		font-style: italic;
+		font-weight: normal; }
+.Sy {		font-style: normal;
+		font-weight: bold; }
+.Li {		font-style: normal;
+		font-weight: normal;
+		font-family: monospace; }
+
+/* Overrides to avoid excessive margins on small devices. */
+
+@media (max-width: 37.5em) {
+.manual-text {
+		margin-left: 0.5em; }
+h1.Sh, h2.Ss {	margin-left: 0em; }
+.Bd-indent {	margin-left: 2em; }
+.Bl-hang > dd {
+		margin-left: 2em; }
+.Bl-tag {	margin-left: 2em; }
+.Bl-tag > dt {
+		margin-left: -2em; }
+.HP {		margin-left: 2em;
+		text-indent: -2em; }
+}
+
+/* Overrides for a dark color scheme for accessibility. */
+
+@media (prefers-color-scheme: dark) {
+html {		--bg: #000000;
+		--fg: #FFFFFF; }
+:link {		color: #BAD7FF; }
+:visited {	color: #BAD7FF; }
+}
+

docs/palera1n.1

@@ -0,0 +1,271 @@
+.\"-
+.\" Copyright (c) 2023 Nick Chan
+.\" SPDX-License-Identifier: MIT
+.\"
+.Dd "26 October 2023"
+.Dt palera1n 1
+.Sh NAME
+.Nm palera1n
+.Nd iOS 15.0-17.1 arm64 iOS/iPadOS jailbreaking tool
+.Sh SYNOPSIS
+.Nm
+.Op Fl dDEhILnpRsSvV
+.Op Fl e Ar Boot arguments
+.Op Fl k Ar Pongo image
+.Op Fl o Ar overlay file
+.Op Fl r Ar ramdisk file
+.Op Fl K Ar KPF file
+.Op Fl i Ar checkra1n file
+.Op Fl -version
+.Op Fl -force-revert
+.Sh DESCRIPTION
+.Nm
+jailbreaks any iOS/iPadOS device with an arm64 (arm64e excluded) on iOS 15.0-16.5.1,
+utilizing the
+.Em checkm8
+bootROM exploit.
+.Pp
+Due to the nature of the
+.Em checkm8
+exploit,
+.Nm
+is semi-tethered. That is, you must run the
+.Nm
+tool after the device reboot in order to enter the jailbroken state.
+However, it is not required for the device to boot.
+.Pp
+On A11 devices, that is, iPhone 8, iPhone 8 Plus and iPhone X, the passcode cannot
+be used.
+.Pp
+On iOS 15, the passcode must be off while jailbroken.
+.Pp
+On iOS 16, the passcode must be off since restore, and
+.Sy Reset All Contents and Settings
+from settings app counts as a restore.
+A backup may be used in this case.
+.Pp
+In the remainder of this document, the term "iOS" and "iPadOS" will be used interchangably
+as the difference is negligible as far as the jailbreak is concerened.
+.Pp
+.Sh SUPPORTED DEVICES
+As described above, arm64 iOS 15.0-16.5.1 devices are supported, here is an explicit
+list of supported devicecs:
+
+.Bl -tag -compact
+.It iPhone 6s
+.It iPhone 6s Plus
+.It iPhone SE (2016)
+.It iPhone 7
+.It iPhone 7 Plus
+.It iPhone 8
+.It iPhone 8 Plus
+.It iPhone X
+.El
+
+.Bl -tag -compact
+.It iPad mini 4
+.It iPad Air 2
+.It iPad (5th generation)
+.It iPad (6th generation)
+.It iPad (7th generation)
+.It iPad Pro (9.7")
+.It iPad Pro (12.9") (1st generation)
+.It iPad Pro (10.5")
+.It iPad Pro (12.9") (2nd generation)
+.El
+
+.Bl -tag -compact
+.It iPod Touch (7th generation)
+.El
+
+Support for other arm64 Darwin devices, including Apple TV, HomePod and iBridge
+on Darwin 21 and above could be added, but they are currently unsupported.
+
+arm64e devices will NEVER be supported.
+
+.Sh OPTIONS
+.Bl -tag -width -indent
+.It Fl -version
+Prints the program version and exit.
+.It Fl -force-revert
+Remove the jailbreak while keeping user data. Some jailbreak files may remain
+after running this command. Additionally, jailbreak apps will remain on the 
+home screen on for a while even when the files are deleted as the icon cache
+still has their icons.
+.It Fl d , -demote
+Set the effective production fuse to 0, so as to enable hardware debugging features.
+.It Fl D , -dfuhelper
+Execute the DFU helper to guide the user into putting the device into DFU mode
+then exit.
+.It Fl e , -boot-args Ar boot arguments
+Specify custom XNU kernel command line. The
+.Em rootdev=md0
+argument is used by
+.Nm
+and cannot be overriden.
+.It Fl E , -enter-recovery
+Exit after entering recovery mode.
+.It Fl h , -help
+Prints help text.
+.It Fl i , -checkra1n-file Ar checkra1n file
+Specify the path to a custom checkra1n file.
+.It Fl k , -override-pongo Ar pongo file
+Override PongoOS image. The raw image, named
+.Em Pongo.bin
+when built, should be used. PongoOS 2.6.0 or later is required.
+.It Fl K , -override-kpf Ar KPF file
+Override the kernel patchfinder PongoOS module. The module is required to support setting
+root filesystem in paleinfo with
+.Em rootfs
+command. If in doubt, use
+.Sy https://github.com/palera1n/PongoOS
+iOS15 branch or your own fork of it.
+.Fl L , -jbinit-log-to-file
+Makes jbinit log to
+.Em /cores/jbinit.log
+This file may be viewed from sandboxed applications while jailbroken.
+.It Fl n , -exit-recovery
+Exit recovery mode and exit.
+.It Fl o , -override-overlay Ar overlay file
+Specify the path to a custom overlay file, which is then mounted onto /cores/binpack
+during boot, if the default ramdisk is used. The default ramdisk expects the overlay
+to contain a folder named
+.Em Applications
+at the root of it, as well as a dmg named
+.Em loader.dmg
+at the root of it. Otherwise, the device will not boot. It is also expected that it
+contains a shell, a ssh server, and various command line utilities.
+.It Fl p , -pongo-shell
+Exit after booting into a clean PongoOS shell
+.It Fl P , -pongo-full
+Like
+.Fl p , -pongo-shell
+but default images and options have been uploaded and applied respectively.
+.It Fl r , -override-ramdisk Ar ramdisk file
+Override the ramdisk. At a very minimum, it should contain a
+.Em /sbin/launchd
+as well as a fake dyld
+.Em /usr/lib/dyld
+where the logic is expected to be in.
+.It Fl R , -reboot-device
+Reboot device in normal mode and exit.
+.It Fl s , -safe-mode
+Enter safe mode. An alert will be displayed. Jailbreak daemons nor early boot executable files
+specified (see
+.Sy FILES
+section below) will be executed. The loader app and the built in SSH server can still be used,
+as well as any jailbreak-specific apps you have installed.
+.It Fl S , -no-colors
+Disable colors on the command line. External programs like checkra1n clones may still output colors.
+.It Fl v , -debug-logging
+Enable debug logging. The option may be repeated for extra verbosity.
+.It Fl V , -verbose-boot
+Boots the device in verbose mode, allowing boot logs to be seen.
+.It Fl I , -device-info
+Prints info about device and exits.
+.El
+.Sh ENVIRONMENTAL VARIABLES
+.Bl -tag -width -indent
+.It Ev TMPDIR
+This environmental variable should contain the a directory for temporary
+files. Without the
+.Fl i , -override-checkra1n
+option, files must be executable from it as the built-in checkra1n file
+is extracted and executed here. When not set, /tmp is used.
+.El
+.Sh EXAMPLES
+To (re-)jailbreak in rootless mode:
+.Pp
+.Dl "palera1n"
+.Pp
+To remove the jailbreak in rootless mode:
+.Pp
+.Dl "palera1n --force-revert"
+.Pp
+To exit recovery mode:
+.Pp
+.Dl "palera1n -n"
+.Pp
+.Sh CAVEATS
+.Pp
+.Em -v
+is not a real XNU boot argument. It is interpreted by iBoot. However, since XNU
+boot arguments are set in PongoOS, which is ran after iBoot has ran, it does nothing.
+To verbose boot, use the
+.Fl V , -verbose-boot
+option when jailbreaking.
+.Pp
+iOS 15.0 requires DER entitlements, and iOS 15.1 requires hash agility in code signatures.
+As a result, binaries with the old code signature format need to be resigned with a recent
+version of the Procursus fork of
+.Xr ldid 1
+before they can be ran on a device jailbroken with
+.Nm
+\[char46]
+.Sh POST INSTALLATION
+The palera1n loader app will take up to 30 seconds to appear on the homescreen after the
+device has booted. If it does not appear, you can try using the shortcut:
+.Pp
+.Lk https://www.icloud.com/shortcuts/8cd5f489c8854ee0ab9ee38f2e62f87d
+.Pp
+to open it. After opening the loader app, press install to install a bootstrap as well as
+the
+.Em Sileo
+package manager.
+You can install other package managers from settings of the loader app.
+.Sh FILES
+During the jailbreak process, a temporary filesystem is mounted on /cores as a place
+to stash jailbreak files needed during the boot process. No files are ever written
+onto the actual disk if you do not use the SSH server to write files or using the
+loader app to install additional jailbreak files.
+
+.Bl -tag -width "/var/jb/Library/LaunchDaemons"
+.It Pa /cores
+The location of the temporary filesystem where jailbreak files are stash during boot.
+.It Pa /cores/jbinit.log
+When
+.Fl L
+is used, the log file of jbinit.
+The log file of jbinit.
+.It Pa /var/jb/Library/LaunchDaemons
+The directory where jailbreak-specific
+.Xr launchd.plist 5
+property list files should be placed on rootless.
+.It Pa /var/jb/etc/rc.d
+The directory where executable files that needs to be executed during boot, before
+daemons are launched, are placed on rootless. They are executed after all filesystems
+has been mounted.
+.El
+.Sh BUGS
+.Nm
+may crash if the machine it is running on:
+.Pp
+.Dl "- Has non-compliant USB devices plugged in"
+.Pp
+The exploit may also work less reliably on some hosts, like AMD desktops, or some MediaTek devices.
+.Pp
+The device may randomly crash and reboot due to launchd exiting with code 7.
+.Sh NOTES
+.Nm
+injects a dylib into launchd to allow the
+.Sy launchctl runstats
+command to be used on the device.
+.Sh DEPRECATED AND REMOVED FUNCTIONALITY
+.Pp
+The fakefs functionality was removed.
+.Sh SEE ALSO
+.Xr launchd 8
+.Xr launchd.plist 5
+.Xr ldid 1
+.Sh HISTORY
+The
+.Nm
+jailbreak was first written by Nebula and Mineek on September 26, 2022, as a shell
+script. Tweak support with DEVELOPMENT kernels are added on October 2, 2022. RELEASE
+kernel support is added on November 14, 2022. iOS 16 Support is added on
+December 13, 2022. Later, the first attempt to rewrite palera1n into C begins on January
+01 2023. The
+.Nm
+utility described here is the second attempt, which first started on January 16, 2023,
+using checkra1n 1337 and a custom KPF.
+Something happened on August 15, 2023.

include/ANSI-color-codes.h

@@ -8,78 +8,78 @@
 #define ANSI_COLOR_CODES_H
 
 //Regular text
-#define BLK "\e[0;30m"
-#define RED "\e[0;31m"
-#define GRN "\e[0;32m"
-#define YEL "\e[0;33m"
-#define BLU "\e[0;34m"
-#define MAG "\e[0;35m"
-#define CYN "\e[0;36m"
-#define WHT "\e[0;37m"
+#define BLK "\033[0;30m"
+#define RED "\033[0;31m"
+#define GRN "\033[0;32m"
+#define YEL "\033[0;33m"
+#define BLU "\033[0;34m"
+#define MAG "\033[0;35m"
+#define CYN "\033[0;36m"
+#define WHT "\033[0;37m"
 
 //Regular bold text
-#define BBLK "\e[1;30m"
-#define BRED "\e[1;31m"
-#define BGRN "\e[1;32m"
-#define BYEL "\e[1;33m"
-#define BBLU "\e[1;34m"
-#define BMAG "\e[1;35m"
-#define BCYN "\e[1;36m"
-#define BWHT "\e[1;37m"
+#define BBLK "\033[1;30m"
+#define BRED "\033[1;31m"
+#define BGRN "\033[1;32m"
+#define BYEL "\033[1;33m"
+#define BBLU "\033[1;34m"
+#define BMAG "\033[1;35m"
+#define BCYN "\033[1;36m"
+#define BWHT "\033[1;37m"
 
 //Regular underline text
-#define UBLK "\e[4;30m"
-#define URED "\e[4;31m"
-#define UGRN "\e[4;32m"
-#define UYEL "\e[4;33m"
-#define UBLU "\e[4;34m"
-#define UMAG "\e[4;35m"
-#define UCYN "\e[4;36m"
-#define UWHT "\e[4;37m"
+#define UBLK "\033[4;30m"
+#define URED "\033[4;31m"
+#define UGRN "\033[4;32m"
+#define UYEL "\033[4;33m"
+#define UBLU "\033[4;34m"
+#define UMAG "\033[4;35m"
+#define UCYN "\033[4;36m"
+#define UWHT "\033[4;37m"
 
 //Regular background
-#define BLKB "\e[40m"
-#define REDB "\e[41m"
-#define GRNB "\e[42m"
-#define YELB "\e[43m"
-#define BLUB "\e[44m"
-#define MAGB "\e[45m"
-#define CYNB "\e[46m"
-#define WHTB "\e[47m"
+#define BLKB "\033[40m"
+#define REDB "\033[41m"
+#define GRNB "\033[42m"
+#define YELB "\033[43m"
+#define BLUB "\033[44m"
+#define MAGB "\033[45m"
+#define CYNB "\033[46m"
+#define WHTB "\033[47m"
 
 //High intensty background 
-#define BLKHB "\e[0;100m"
-#define REDHB "\e[0;101m"
-#define GRNHB "\e[0;102m"
-#define YELHB "\e[0;103m"
-#define BLUHB "\e[0;104m"
-#define MAGHB "\e[0;105m"
-#define CYNHB "\e[0;106m"
-#define WHTHB "\e[0;107m"
+#define BLKHB "\033[0;100m"
+#define REDHB "\033[0;101m"
+#define GRNHB "\033[0;102m"
+#define YELHB "\033[0;103m"
+#define BLUHB "\033[0;104m"
+#define MAGHB "\033[0;105m"
+#define CYNHB "\033[0;106m"
+#define WHTHB "\033[0;107m"
 
 //High intensty text
-#define HBLK "\e[0;90m"
-#define HRED "\e[0;91m"
-#define HGRN "\e[0;92m"
-#define HYEL "\e[0;93m"
-#define HBLU "\e[0;94m"
-#define HMAG "\e[0;95m"
-#define HCYN "\e[0;96m"
-#define HWHT "\e[0;97m"
+#define HBLK "\033[0;90m"
+#define HRED "\033[0;91m"
+#define HGRN "\033[0;92m"
+#define HYEL "\033[0;93m"
+#define HBLU "\033[0;94m"
+#define HMAG "\033[0;95m"
+#define HCYN "\033[0;96m"
+#define HWHT "\033[0;97m"
 
 //Bold high intensity text
-#define BHBLK "\e[1;90m"
-#define BHRED "\e[1;91m"
-#define BHGRN "\e[1;92m"
-#define BHYEL "\e[1;93m"
-#define BHBLU "\e[1;94m"
-#define BHMAG "\e[1;95m"
-#define BHCYN "\e[1;96m"
-#define BHWHT "\e[1;97m"
+#define BHBLK "\033[1;90m"
+#define BHRED "\033[1;91m"
+#define BHGRN "\033[1;92m"
+#define BHYEL "\033[1;93m"
+#define BHBLU "\033[1;94m"
+#define BHMAG "\033[1;95m"
+#define BHCYN "\033[1;96m"
+#define BHWHT "\033[1;97m"
 
 //Reset
-#define reset "\e[0m"
-#define CRESET "\e[0m"
-#define COLOR_RESET "\e[0m"
+#define reset "\033[0m"
+#define CRESET "\033[0m"
+#define COLOR_RESET "\033[0m"
 
 #endif

include/kerninfo.h

@@ -1,114 +0,0 @@
-/*
- * pongoOS - https://checkra.in
- *
- * Copyright (C) 2019-2022 checkra1n team
- *
- * This file is part of pongoOS.
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in all
- * copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- *
- */
-#ifndef _KERNINFO_H
-#define _KERNINFO_H
-
-#include <stdbool.h>
-#include <stdint.h>
-
-#define MAX_BOOTARGS_LEN 256
-
-#define checkrain_option_none               0x00000000
-#define checkrain_option_all                0x7fffffff
-#define checkrain_option_failure            0x80000000
-
-// Host options
-#define checkrain_option_verbose_logging    (1 << 0)
-#define checkrain_option_demote             (1 << 1)
-#define checkrain_option_early_exit         (1 << 2)
-#define checkrain_option_quick_mode         (1 << 3)
-#define checkrain_option_pongo_shell        (1 << 4)
-#define checkrain_option_pongo_full         (1 << 5)
-
-// KPF options
-#define checkrain_option_verbose_boot       (1 << 0)
-
-// Global options
-#define checkrain_option_safemode           (1 << 0)
-#define checkrain_option_bind_mount         (1 << 1)
-#define checkrain_option_overlay            (1 << 2)
-#define checkrain_option_force_revert       (1 << 7) /* keep this at 7 */
-
-// palera1n option
-#define palerain_option_rootful              (1 << 0) /* rootful jailbreak */
-#define palerain_option_jbinit_log_to_file   (1 << 1) /* log to /cores/jbinit.log */
-#define palerain_option_setup_rootful        (1 << 2) /* create fakefs */
-#define palerain_option_setup_rootful_forced (1 << 3) /* create fakefs over an existing one */
-
-#define PALEINFO_MAGIC 'PLSH'
-#define PALEINFO_CIGAM 'HSLP'
-
-typedef uint32_t checkrain_option_t, *checkrain_option_p;
-
-typedef enum {
-    jailbreak_capability_tfp0               = 1 << 0,
-    jailbreak_capability_userspace_reboot   = 1 << 1,
-    jailbreak_capability_dyld_ignore_os     = 1 << 2, // TODO: This needs a better name
-} jailbreak_capability_t, *jailbreak_capability_p;
-
-#define DEFAULT_CAPABILITIES (jailbreak_capability_tfp0|jailbreak_capability_userspace_reboot)
-struct kerninfo {
-    uint64_t size;
-    uint64_t base;
-    uint64_t slide;
-    checkrain_option_t flags;
-};
-struct paleinfo {
-    uint32_t magic; // 'PLSH' / 0x504c5348
-    uint32_t version; // 1
-    checkrain_option_t flags;
-    char rootdev[0x10];
-};
-struct kpfinfo {
-    struct kerninfo k;
-    checkrain_option_t kpf_flags;
-    char bootargs[MAX_BOOTARGS_LEN];
-};
-
-#define checkrain_set_option(options, option, enabled) do { \
-    if (enabled)                                            \
-        options = (checkrain_option_t)(options | option);   \
-    else                                                    \
-        options = (checkrain_option_t)(options & ~option);  \
-} while (0);
-
-static inline bool checkrain_option_enabled(checkrain_option_t flags, checkrain_option_t opt)
-{
-    if(flags == checkrain_option_failure)
-    {
-        switch(opt)
-        {
-            case checkrain_option_safemode:
-                return true;
-            default:
-                return false;
-        }
-    }
-    return (flags & opt) != 0;
-}
-
-#endif

include/paleinfo.h

@@ -0,0 +1,71 @@
+/*
+ * jbinit - https://github.com/palera1n/jbinit
+ *
+ * This file is part of jbinit
+ * 
+ * SPDX-License-Identifier: MIT
+ */
+
+#ifndef PALEINFO_H
+#define PALEINFO_H
+
+#include <stdint.h>
+
+#define PALEINFO_VERSION 2U
+typedef uint64_t palerain_option_t;
+
+// unified palera1n options
+#define palerain_option_rootful              (UINT64_C(1) << 0) /* rootful jailbreak */
+#define palerain_option_rootless             (UINT64_C(1) << 1) /* rootless jailbreak */
+#define palerain_option_setup_rootful        (UINT64_C(1) << 2) /* create fakefs */
+// (UINT64_C(1) << 3) /* Deprecated and removed */
+#define palerain_option_setup_partial_root   (UINT64_C(1) << 4) /* fakefs creating should be partial */
+#define palerain_option_checkrain_is_clone   (UINT64_C(1) << 5) /* supplied checkra1n is checkra1n clone */
+#define palerain_option_rootless_livefs      (UINT64_C(1) << 6) /* mount root livefs on rootless */
+#define palerain_option_ssv                  (UINT64_C(1) << 7) /* has signed system volume */
+// (UINT64_C(1) << 8) /* reserved */
+#define palerain_option_clean_fakefs         (UINT64_C(1) << 9) /* clean fakefs, but does not delete it */
+#define palerain_option_tui                  (UINT64_C(1) << 10) /* terminal user interface */
+// #define palerain_option_gui               (UINT64_C(1) << 11) /* graphical user interface*/
+#define palerain_option_dfuhelper_only       (UINT64_C(1) << 12) /* dfuhelper only */
+#define palerain_option_pongo_exit           (UINT64_C(1) << 13) /* boot to clean pongo shell */
+#define palerain_option_demote               (UINT64_C(1) << 14) /* Demote effective production fuse status */
+#define palerain_option_pongo_full           (UINT64_C(1) << 15) /* Boot to pongo with default images and options */
+#define palerain_option_palerain_version     (UINT64_C(1) << 16) /* Print version */
+#define palerain_option_exit_recovery        (UINT64_C(1) << 17) /* Exit recovery mode */
+#define palerain_option_reboot_device        (UINT64_C(1) << 18) /* Reboot device in normal mode */
+#define palerain_option_enter_recovery       (UINT64_C(1) << 19) /* Enter recovery mode */
+#define palerain_option_device_info          (UINT64_C(1) << 20) /* Print device info */
+#define palerain_option_no_colors            (UINT64_C(1) << 21) /* no colors */
+#define palerain_option_bind_mount           (UINT64_C(1) << 22) /* bind mounts should be used (always true iOS 15+)*/
+#define palerain_option_overlay              (UINT64_C(1) << 23) /* there is an overlay (should always be true) */
+#define palerain_option_force_revert         (UINT64_C(1) << 24) /* Unjailbreak */
+#define palerain_option_safemode             (UINT64_C(1) << 25) /* Enter safe mode */
+#define palerain_option_verbose_boot         (UINT64_C(1) << 26) /* verbose boot */
+// #define palerain_option_sf_ssh            (UINT64_C(1) << 27) /* safe mode with bootstrap ssh */
+// #define palerain_option_sf_launchdaemons  (UINT64_C(1) << 28) /* safe mode with launchdaemons */
+// #define palerain_option_emerg_mode        (UINT64_C(1) << 29) /* emergency mode (early boot usb shell) */
+#define palerain_option_jbinit_log_to_file   (UINT64_C(1) << 30) /* deprecated (kept for compatibility) */
+
+#define palerain_option_flower_chain         (UINT64_C(1) << 61) /* Flower chain */
+#define palerain_option_test1                (UINT64_C(1) << 62) /* Developer test option 1 */
+#define palerain_option_test2                (UINT64_C(1) << 63) /* Developer test option 2 */
+
+#define PALEINFO_MAGIC 'PLSH'
+
+#pragma clang diagnostic push
+#pragma clang diagnostic warning "-Wpadded"
+
+/* paleinfo version 2, appended to ramdisk */
+struct paleinfo {
+    uint32_t magic; /* 'PLSH' */
+    uint32_t version; /* 2 */
+    uint64_t kbase; /* kernel base */
+    uint64_t kslide; /* kernel slide */
+    uint64_t flags; /* unified palera1n flags */
+    char rootdev[0x10]; /* ex. disk0s1s8 */
+};
+
+#pragma clang diagnostic pop
+
+#endif

include/palerain.h

@@ -1,8 +1,12 @@
-#ifndef COMMON_H
-#define COMMON_H
+#ifndef PALERAIN_H
+#define PALERAIN_H
+
+#if defined(__APPLE__)
+#define NSIG	__DARWIN_NSIG
+#endif
 
 #include "xxd-embedded.h"
-#include "kerninfo.h"
+#include "paleinfo.h"
 #include <stdbool.h>
 #include <stdint.h>
 #include <stddef.h>
@@ -10,16 +14,59 @@
 #include <usbmuxd.h>
 #include <libirecovery.h>
 #include <libimobiledevice/libimobiledevice.h>
-#include <libusb-1.0/libusb.h>
 
 #define LOG(loglevel, ...) p1_log(loglevel, __FILE__, __LINE__, __func__, __VA_ARGS__)
 #define CLEAR() printf("\33[2K\r");
+#define palerain_option_case(x) (512 + x)
 #define palerain_option_version 129
 #define CMD_LEN_MAX 512
 #define OVERRIDE_MAGIC 0xd803b376
+
+#define palerain_option_case_version      palerain_option_case(0)
+#define palerain_option_case_force_revert palerain_option_case(1)
+
+#ifdef USE_LIBUSB
+#include <libusb-1.0/libusb.h>
+
 #define USB_RET_SUCCESS         LIBUSB_SUCCESS
 #define USB_RET_NOT_RESPONDING  LIBUSB_ERROR_OTHER
 #define USB_RET_IO              LIBUSB_ERROR_IO
+#define USB_RET_NO_DEVICE		LIBUSB_ERROR_NO_DEVICE
+typedef int32_t usb_ret_t;
+typedef libusb_device_handle *usb_device_handle_t;
+
+typedef struct stuff
+{
+    pthread_t th;
+    libusb_device *dev;
+    usb_device_handle_t handle;
+} stuff_t;
+usb_ret_t USBBulkUpload(usb_device_handle_t handle, void *data, int len);
+#else
+#pragma clang diagnostic push
+#pragma clang diagnostic ignored "-Wpedantic"
+#include <IOKit/IOKitLib.h>
+#include <IOKit/usb/IOUSBLib.h>
+#include <IOKit/IOCFPlugIn.h>
+#pragma clang diagnostic pop
+
+#define USB_RET_SUCCESS         KERN_SUCCESS
+#define USB_RET_NOT_RESPONDING  kIOReturnNotResponding
+#define USB_RET_IO              kIOReturnNotReady
+#define USB_RET_NO_DEVICE       kIOReturnNoDevice
+
+typedef IOReturn usb_ret_t;
+typedef IOUSBInterfaceInterface245 **usb_device_handle_t;
+
+typedef struct
+{
+    pthread_t th;
+    volatile uint64_t regID;
+    IOUSBDeviceInterface245 **dev;
+    usb_device_handle_t handle;
+} stuff_t;
+usb_ret_t USBBulkUpload(usb_device_handle_t handle, void *data, uint32_t len);
+#endif
 
 #ifndef PALERAIN_VERSION
 #define PALERAIN_VERSION "2.0.0"
@@ -33,8 +80,8 @@
 #define MH_CIGAM_64 0xcffaedfe
 #define MH_KEXT_BUNDLE 0xb
 
-typedef int cpu_type_t;
-typedef int cpu_subtype_t;
+typedef int32_t cpu_type_t;
+typedef int32_t cpu_subtype_t;
 
 #define CPU_ARCH_ABI64          0x01000000
 #define CPU_TYPE_ARM            ((cpu_type_t) 12)
@@ -53,6 +100,14 @@ struct mach_header_64
 };
 #endif
 
+typedef void *(*pthread_start_t)(void *);
+
+// Keep in sync with Pongo
+#define PONGO_USB_VENDOR    0x05ac
+#define PONGO_USB_PRODUCT   0x4141
+#define CMD_LEN_MAX         512
+#define UPLOADSZ_MAX        (1024 * 1024 * 128)
+
 typedef enum {
 	LOG_FATAL = 0,
 	LOG_ERROR = 1,
@@ -76,7 +131,7 @@ typedef struct {
 
 typedef struct {
 	int mode;
-	unsigned int cpid;
+	int cpid;
 	char product_type[0x20];
 	char display_name[0x20];
 	char iboot_ver[0x20];
@@ -85,26 +140,24 @@ typedef struct {
 typedef struct {
 	uint32_t magic; /* 0xd803b376*/
 	unsigned char* ptr; /* pointer to the override file in memory */
-	unsigned int len; /* length of override file */
+	uint32_t len; /* length of override file */
 	unsigned char* orig_ptr; /* pointer to the overriden file */
-	unsigned int orig_len; /* length of the overriden file */
+	uint32_t orig_len; /* length of the overriden file */
 	int fd; /* file descriptor of the override file */
 } override_file_t;
 
 typedef unsigned char niarelap_file_t[];
-typedef int usb_ret_t;
-typedef libusb_device_handle *usb_device_handle_t;
 
 extern unsigned int verbose;
-extern int demote;
 
 extern char* pongo_path;
-
-extern bool dfuhelper_only, pongo_exit;
-#ifdef DEV_BUILD
-extern bool use_tui;
+#ifdef TUI
+extern bool tui_started;
 #endif
 
+extern uint64_t palerain_flags;
+extern uint64_t* palerain_flags_p;
+
 extern pthread_t dfuhelper_thread, pongo_thread;
 extern int pongo_thr_running, dfuhelper_thr_running;
 
@@ -112,32 +165,26 @@ extern niarelap_file_t *kpf_to_upload_1, *ramdisk_to_upload_1, *overlay_to_uploa
 extern niarelap_file_t **kpf_to_upload, **ramdisk_to_upload, **overlay_to_upload;
 extern override_file_t override_ramdisk, override_kpf, override_overlay;
 
-extern uint32_t checkrain_flags, palerain_flags, kpf_flags;
+extern uint64_t palerain_flags;
 extern pthread_mutex_t log_mutex;
 
 extern pthread_mutex_t spin_mutex, found_pongo_mutex, ecid_dfu_wait_mutex;
 
-extern int enable_rootful, demote;
 extern int pongo_thr_running, dfuhelper_thr_running;
-extern bool ohio, pongo_full, device_has_booted;
+extern bool device_has_booted;
 extern char xargs_cmd[0x270];
-extern char checkrain_flags_cmd[0x20];
-extern char palerain_flags_cmd[0x20];
-extern char kpf_flags_cmd[0x20];
-extern char dtpatch_cmd[0x20];
-extern char rootfs_cmd[512];
-
-extern bool palerain_version;
+extern char palerain_flags_cmd[0x30];
+extern char* ext_checkra1n;
 
 void thr_cleanup(void* ptr);
 void* dfuhelper(void* ptr);
-int p1_log(log_level_t loglevel, const char *fname, int lineno, const char *fxname, char* __restrict format, ...);
+int p1_log(log_level_t loglevel, const char *fname, int lineno, const char *fxname, const char* __restrict format, ...);
 /* devhelper helpers */
 void devinfo_free(devinfo_t *dev);
 bool cpid_is_arm64(unsigned int cpid);
 /* devhelper commands */
 int subscribe_cmd(usbmuxd_event_cb_t device_event_cb, irecv_device_event_cb_t irecv_event_cb);
-int unsubscribe_cmd();
+int unsubscribe_cmd(void);
 int devinfo_cmd(devinfo_t *dev, const char *udid);
 int enter_recovery_cmd(const char* udid);
 int reboot_cmd(const char* udid);
@@ -146,26 +193,40 @@ int recvinfo_cmd(recvinfo_t* info, const uint64_t ecid);
 int autoboot_cmd(const uint64_t ecid);
 int exitrecv_cmd(const uint64_t ecid);
 
-void exec_checkra1n();
+int exec_checkra1n(void);
 int override_file(override_file_t *finfo, niarelap_file_t** orig, unsigned int *orig_len, char *filename);
 void* pongo_helper(void* ptr);
+const unsigned char *
+boyermoore_horspool_memmem(const unsigned char* haystack, size_t hlen,
+                           const unsigned char* needle,   size_t nlen);
 
 
-extern void* pongo_usb_callback(void* arg);
+extern void* pongo_usb_callback(stuff_t* arg);
 usb_ret_t USBControlTransfer(usb_device_handle_t handle, uint8_t bmRequestType, uint8_t bRequest, uint16_t wValue, uint16_t wIndex, uint32_t wLength, void *data, uint32_t *wLenDone);
-usb_ret_t USBBulkUpload(usb_device_handle_t handle, void *data, int len);
 const char *usb_strerror(usb_ret_t err);
-int wait_for_pongo();
-int issue_pongo_command();
-int upload_pongo_file();
-int tui();
+int wait_for_pongo(void);
+int upload_pongo_file(usb_device_handle_t, unsigned char*, unsigned int);
+int issue_pongo_command(usb_device_handle_t, char*);
+int tui(void);
 int optparse(int argc, char* argv[]);
 
-bool get_spin();
+bool get_spin(void);
 bool set_spin(bool val);
-bool get_found_pongo();
+bool get_found_pongo(void);
 void* pongo_helper(void* _);
 bool set_found_pongo(bool val);
-uint64_t get_ecid_wait_for_dfu();
+uint64_t get_ecid_wait_for_dfu(void);
 uint64_t set_ecid_wait_for_dfu(uint64_t ecid);
-#endif
+
+void write_stdout(char *buf, uint32_t len);
+void io_start(stuff_t *stuff);
+void io_stop(stuff_t *stuff);
+
+void print_credits(void);
+
+#ifdef TUI
+#include <newt.h>
+newtComponent get_tui_log(void);
+newtComponent set_tui_log(newtComponent co);
+#endif
+#endif

include/tui.h

@@ -1,8 +1,5 @@
 #ifndef TUI_H
 #define TUI_H
-#define NCURSES_WIDECHAR 1
-
-#include <ncurses.h>
 #include <stdio.h>
 #include <stdlib.h>
 #include <stdint.h>
@@ -13,14 +10,17 @@
 #include <string.h>
 #include <locale.h>
 #include <unistd.h>
+#include <newt.h>
+#include <paleinfo.h>
 
-#define MAIN_OPTIONS "Options"
-#define MAIN_START "Start"
-#define MAIN_EXIT "Exit"
-#define BACK_BUTTON "Back"
+#define WIDTH 76
+#define HEIGHT 19
 
-#define MSG_COLOR 1
-#define ICON_COLOR 2
+#define PI_LOG_COLOR NEWT_COLORSET_CUSTOM(0)
+#define PI_STEP_CURRENT NEWT_COLORSET_CUSTOM(1)
+#define PI_STEP_OTHER NEWT_COLORSET_CUSTOM(2)
+
+#define CHECKBOX_STATE(flags, opt) (flags & opt) != 0 ? '*' : ' '
 
 typedef enum tui_screens {
     ERROR_SCREEN = -1,
@@ -32,13 +32,18 @@ typedef enum tui_screens {
     ENTER_RECOVERY_SCREEN = 5
 } tui_screen_t;
 
-tui_screen_t tui_screen_main();
-tui_screen_t tui_screen_options();
-tui_screen_t tui_screen_enter_recovery();
-tui_screen_t tui_screen_enter_dfu();
-tui_screen_t tui_screen_jailbreak();
+typedef struct bitfield_checkbox_info {
+    uint64_t* flags_p;
+    uint64_t opt;
+} tui_bit_info_t;
 
-int redraw_screen();
+tui_screen_t tui_screen_main(void);
+tui_screen_t tui_screen_options(void);
+tui_screen_t tui_screen_enter_recovery(void);
+tui_screen_t tui_screen_enter_dfu(void);
+tui_screen_t tui_screen_jailbreak(void);
+
+int redraw_screen(void);
 
 
 #endif

include/xxd-embedded.h

@@ -1,16 +1,30 @@
 #ifndef XXD_EMBEDDED_H
 #define XXD_EMBEDDED_H
 
-extern unsigned char checkra1n[];
-extern unsigned int checkra1n_len;
+#if defined(__APPLE__)
+#include <TargetConditionals.h>
+#endif
 
-extern unsigned char checkra1n_kpf_pongo[];
-extern unsigned int checkra1n_kpf_pongo_len;
+#include <stdint.h>
 
-extern unsigned char ramdisk_dmg[];
-extern unsigned int ramdisk_dmg_len;
+extern uint8_t checkra1n[];
+extern uint32_t checkra1n_len;
 
-extern unsigned char binpack_dmg[];
-extern unsigned int binpack_dmg_len;
+extern uint8_t checkra1n_kpf_pongo_lzma[];
+extern uint32_t checkra1n_kpf_pongo_lzma_len;
 
-#endif
+extern uint8_t ramdisk_dmg_lzma[];
+extern uint32_t ramdisk_dmg_lzma_len;
+
+extern uint8_t binpack_dmg[];
+extern uint32_t binpack_dmg_len;
+
+extern uint8_t Pongo_bin[];
+extern uint32_t Pongo_bin_len;
+
+#if defined(__APPLE__) && (TARGET_OS_IPHONE || defined(DEV_BUILD) || defined(FORCE_HELPER))
+extern uint8_t libcheckra1nhelper_dylib[];
+extern uint32_t libcheckra1nhelper_dylib_len;
+#endif
+
+#endif

packaging/control

@@ -0,0 +1,22 @@
+Package: palera1n
+Name: palera1n
+Version: @DEB_VERSION@
+Architecture: @DEB_ARCH@
+Maintainer: palera1n team
+Author: palera1n team
+Depends: usbmuxd
+Section: Utilities
+Priority: optional
+Homepage: https://palera.in
+Description: iOS 15.0-16.5.1 semi-tethered checkm8 jailbreak
+ palera1n is an iOS/iPadOS 15.0-16.5.1 semi tethered jailbreak
+ based on the checkm8 exploit.
+ .
+ palera1n is able to jailbreak the device in fakefs-rootful mode,
+ where / is writable, as well as rootless mode, where / cannot be
+ written to.
+ .
+ IMPORTANT: This does NOT make palera1n untethered or allow you to
+ jailbreak your current device without a computer. It just allows
+ you to jailbreak another iDevice using this device, given you have
+ an appropriate cable. Also, the success rate is likely to be bad.

packaging/control.macosx

@@ -0,0 +1,16 @@
+Package: palera1n
+Name: palera1n
+Version: @DEB_VERSION@
+Architecture: @DEB_ARCH@
+Maintainer: palera1n team
+Author: palera1n team
+Section: Utilities
+Priority: optional
+Homepage: https://palera.in
+Description: iOS 15.0-16.5 semi-tethered checkm8 jailbreak
+ palera1n is an iOS/iPadOS 15.0-16.5 semi tethered jailbreak
+ based on the checkm8 exploit.
+ .
+ palera1n is able to jailbreak the device in fakefs-rootful mode,
+ where / is writable, as well as rootless mode, where / cannot be
+ written to.

patches/0001-Allow-empty-x509-cert-issuer.patch

@@ -1,35 +0,0 @@
-From 632cdb6de3f1693fb90d60d81552b723e8dd5e84 Mon Sep 17 00:00:00 2001
-From: Nick Chan <[email protected]>
-Date: Wed, 25 Jan 2023 01:53:00 +0800
-Subject: [PATCH] Allow empty x509 cert issuer
-
----
- library/x509_crt.c | 8 ++++----
- 1 file changed, 4 insertions(+), 4 deletions(-)
-
-diff --git a/library/x509_crt.c b/library/x509_crt.c
-index 0eee97cb6..46702f683 100644
---- a/library/x509_crt.c
-+++ b/library/x509_crt.c
-@@ -1185,14 +1185,14 @@ static int x509_crt_parse_der_core( mbedtls_x509_crt *crt,
-     if( ( ret = mbedtls_asn1_get_tag( &p, end, &len,
-             MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE ) ) != 0 )
-     {
--        mbedtls_x509_crt_free( crt );
--        return( MBEDTLS_ERROR_ADD( MBEDTLS_ERR_X509_INVALID_FORMAT, ret ) );
-+        // mbedtls_x509_crt_free( crt );
-+        // return( MBEDTLS_ERROR_ADD( MBEDTLS_ERR_X509_INVALID_FORMAT, ret ) );
-     }
- 
-     if( ( ret = mbedtls_x509_get_name( &p, p + len, &crt->issuer ) ) != 0 )
-     {
--        mbedtls_x509_crt_free( crt );
--        return( ret );
-+        // mbedtls_x509_crt_free( crt );
-+        // return( ret );
-     }
- 
-     crt->issuer_raw.len = p - crt->issuer_raw.p;
--- 
-2.39.1
-

patches/gpm/001_missing_V_option.patch

@@ -0,0 +1,23 @@
+Description: Add no-op option -V for compatibility
+
+Index: b/src/daemon/cmdline.c
+===================================================================
+--- a/src/daemon/cmdline.c	2008-05-29 02:26:08.000000000 +0300
++++ b/src/daemon/cmdline.c	2008-06-11 05:46:23.000000000 +0300
+@@ -32,7 +32,7 @@
+ void cmdline(int argc, char **argv)
+ {
+    extern struct options option;
+-   char options[]="a:A::b:B:d:Dg:hi:kl:m:Mo:pr:R::s:S:t:Tuv23";
++   char options[]="a:A::b:B:d:Dg:hi:kl:m:Mo:pr:R::s:S:t:TuvV23";
+    int  opt;
+ 
+    /* initialize for the dual mouse */ 
+@@ -81,6 +81,7 @@ void cmdline(int argc, char **argv)
+          case 'u': option.autodetect = 1;                break;
+          case 'T': opt_test++;                           break;
+          case 'v': printf(GPM_MESS_VERSION "\n");        exit(0);
++         case 'V': /* Compat code */                     break;
+          case '2': (which_mouse->opt_three) = -1;                       break;
+          case '3': (which_mouse->opt_three) =  1;                       break;
+          default: exit(usage("commandline"));

patches/gpm/014_has_mouse_control.patch

@@ -0,0 +1,39 @@
+Description: source code of gpm_has_mouse_control helper
+
+Index: b/contrib/control/gpm_has_mouse_control.c
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ b/contrib/control/gpm_has_mouse_control.c	2007-12-10 08:25:45.000000000 +0200
+@@ -0,0 +1,20 @@
++#include <sys/fcntl.h>
++#include <sys/kd.h>
++#include <stdio.h>
++#include <stdlib.h>
++#include <sys/ioctl.h>
++
++int main (int argc, char **argv)
++{
++    int  fd;
++    int  mode;
++    fd = open ("/dev/tty0", O_RDONLY);
++    if (fd == -1)
++	fd = open ("/dev/vc/0", O_RDONLY);
++    if (fd == -1)
++	perror ("open");
++    if (ioctl (fd, KDGETMODE, &mode) != 0)
++	perror ("ioctl");
++    exit(mode);
++}
++
+Index: b/contrib/control/Makefile
+===================================================================
+--- /dev/null	1970-01-01 00:00:00.000000000 +0000
++++ b/contrib/control/Makefile	2007-12-10 08:25:45.000000000 +0200
+@@ -0,0 +1,7 @@
++CC := gcc
++
++all: gpm_has_mouse_control.c
++	$(CC) $(CFLAGS) $(CPPFLAGS) $(LDFLAGS) -o gpm_has_mouse_control -Wall gpm_has_mouse_control.c
++
++clean:
++	-rm -f gpm_has_mouse_control

patches/gpm/031_max_consoles.patch

@@ -0,0 +1,107 @@
+Description: Use MAX_NR_CONSOLES instead of MAX_VC
+
+--- a/src/daemon/gpm.c
++++ b/src/daemon/gpm.c
+@@ -93,7 +93,7 @@
+ int fifofd=-1;
+ 
+ int eventFlag=0;
+-Gpm_Cinfo *cinfo[MAX_VC+1];
++Gpm_Cinfo *cinfo[MAX_NR_CONSOLES+1];
+ 
+ time_t last_selection_time;
+ time_t opt_age_limit = 0;
+--- a/src/daemon/old_main.c
++++ b/src/daemon/old_main.c
+@@ -141,7 +141,7 @@
+          signal(SIGWINCH,gpm_killed); /* reinstall handler */
+ 
+          /* and notify clients */
+-         for(i=0; i<MAX_VC+1; i++) {
++         for(i=0; i<=MAX_NR_CONSOLES; i++) {
+             Gpm_Cinfo *ci;
+             for (ci = cinfo[i]; ci; ci = ci->next) kill(ci->data.pid,SIGWINCH);
+          }
+@@ -214,7 +214,7 @@
+       /*........................ got request */
+ 
+      /* itz 10-22-96 check _all_ clients, not just those on top! */
+-      for (i=0; pending && (i<=MAX_VC); i++) {
++      for (i=0; pending && (i<=MAX_NR_CONSOLES); i++) {
+          Gpm_Cinfo* ci;
+          for (ci = cinfo[i]; pending && ci; ci = ci->next) {
+             if (FD_ISSET(ci->fd,&selSet)) {
+--- a/src/daemon/processconn.c
++++ b/src/daemon/processconn.c
+@@ -67,8 +67,8 @@
+       return -1;
+    }
+ 
+-   if((vc = request->vc) > MAX_VC) {
+-      gpm_report(GPM_PR_DEBUG, GPM_MESS_REQUEST_ON, vc, MAX_VC);
++   if((vc = request->vc) > MAX_NR_CONSOLES) {
++      gpm_report(GPM_PR_DEBUG, GPM_MESS_REQUEST_ON, vc, MAX_NR_CONSOLES);
+       free(info);
+       close(newfd);
+       return -1;
+--- a/src/daemon/processrequest.c
++++ b/src/daemon/processrequest.c
+@@ -41,7 +41,7 @@
+ 
+    gpm_report(GPM_PR_INFO, GPM_MESS_CON_REQUEST, ci->fd, vc);
+ 
+-   if (vc>MAX_VC) return -1;
++   if (vc>MAX_NR_CONSOLES) return -1;
+ 
+    /* itz 10-22-96 this shouldn't happen now */
+    if (vc==-1) gpm_report(GPM_PR_OOPS, GPM_MESS_UNKNOWN_FD);
+--- a/src/headers/daemon.h
++++ b/src/headers/daemon.h
+@@ -26,6 +26,7 @@
+  */
+ #include "gpm.h"           /* Gpm_Event         */
+ #include <sys/select.h>    /* fd_set            */
++#include <linux/vt.h>      /* for cinfo -- to be moved to os/linux in 2.x! */
+ 
+ /*************************************************************************
+  * Types / structures
+@@ -104,13 +105,6 @@
+  * Macros
+  */
+ 
+-/* How many virtual consoles are managed? */
+-#ifndef MAX_NR_CONSOLES
+-#  define MAX_NR_CONSOLES 64 /* this is always sure */
+-#endif
+-
+-#define MAX_VC    MAX_NR_CONSOLES  /* doesn't work before 1.3.77 */
+-
+ /* for adding a mouse; add_mouse */
+ #define GPM_ADD_DEVICE        0
+ #define GPM_ADD_TYPE          1
+@@ -174,7 +168,7 @@
+ extern int              eventFlag;
+ extern struct winsize   win;
+ 
+-extern Gpm_Cinfo       *cinfo[MAX_VC+1];
++extern Gpm_Cinfo       *cinfo[MAX_NR_CONSOLES+1];
+ 
+ extern struct mouse_features  mouse_table[3],
+                              *which_mouse;      /*the current one*/
+--- a/src/headers/gpmCfg.h
++++ b/src/headers/gpmCfg.h
+@@ -32,14 +32,6 @@
+ #include <linux/tty.h>
+ #endif
+ 
+-/* FIXME: still needed ?? */
+-/* How many virtual consoles are managed? */
+-#ifndef MAX_NR_CONSOLES
+-#  define MAX_NR_CONSOLES 64 /* this is always sure */
+-#endif
+-
+-#define MAX_VC    MAX_NR_CONSOLES  /* doesn't work before 1.3.77 */
+-
+ /* How many buttons may the mouse have? */
+ /* #define MAX_BUTTONS 3  ===> not used, it is hardwired :-( */
+ 

patches/gpm/080_cross-compile.patch

@@ -0,0 +1,13 @@
+Description: Add AC_CANONICAL_HOST
+
+--- a/configure.ac.footer
++++ b/configure.ac.footer
+@@ -35,6 +35,8 @@
+ # Find programs
+ #
+ 
++AC_CANONICAL_HOST
++
+ AC_PROG_CC
+ AC_PROG_LIBTOOL
+ AC_PROG_INSTALL

patches/gpm/092_fix-format-not-a-string-literal-and-no-format-arguments.patch

@@ -0,0 +1,16 @@
+Description: Fix FTBFS with -Wformat-security
+Author: Axel Beckert <[email protected]>
+Bug-Debian: https://bugs.debian.org/888792
+Bug-Debian: https://bugs.debian.org/888797
+
+--- a/src/lib/report-lib.c
++++ b/src/lib/report-lib.c
+@@ -47,7 +47,7 @@
+                            log_level = LOG_CRIT; break;
+    }
+ #ifdef HAVE_VSYSLOG
+-   syslog(log_level, string);
++   syslog(log_level, "%s", string);
+    vsyslog(log_level, text, ap);
+ #else
+    fprintf(stderr,"%s[%s(%d)]:\n",string,file,line);

patches/gpm/093_fix-typos.patch

@@ -0,0 +1,133 @@
+Description: Fix spelling errors found by lintian
+Author: Axel Beckert <[email protected]>
+
+--- a/doc/FAQ
++++ b/doc/FAQ
+@@ -132,7 +132,7 @@
+            to keep hold of processor time for at least 1 second).
+      - no pnp vendor will be able to support three buttons any more (no
+            more mouse protocols, all mice must behave the same).
+-     - similary, only 1200 baud devices (any serial device) are supported,
++     - similarly, only 1200 baud devices (any serial device) are supported,
+            because the initialization string of pnp devices only tells
+            the vendor and release, with no information about required
+            port configuration.
+--- a/doc/doc.gpm.in
++++ b/doc/doc.gpm.in
+@@ -394,7 +394,7 @@
+         automatically forces the @emph{repeater} (@samp{\-R}) option on.
+ 
+ @item \-o @var{list-of-extra-options}
+-	The option works similary to the ``\-o'' option of mount; it is
++	The option works similarly to the ``\-o'' option of mount; it is
+ 	used to specify a list of ``extra options'' that are specific
+ 	to each mouse type. The list is comma-separated. The options
+ 	@samp{dtr}, @samp{rts} or @samp{both} are used by the serial
+--- a/src/daemon/old_main.c
++++ b/src/daemon/old_main.c
+@@ -190,7 +190,7 @@
+ /*....................................... got mouse, process event */
+ /*
+  * Well, actually, run a loop to maintain inlining of functions without
+- * lenghtening the file. This is not too clean a code, but it works....
++ * lengthening the file. This is not too clean a code, but it works....
+  */
+ 
+       for (i=1; i <= 1+opt_double; i++) {
+--- a/src/mice.c
++++ b/src/mice.c
+@@ -122,7 +122,7 @@
+          break;
+       }
+       if (p->type == ARGV_END) { /* not found */
+-         fprintf(stderr, "%s: Uknown option \"%s\" for pointer \"%s\"\n",
++         fprintf(stderr, "%s: Unknown option \"%s\" for pointer \"%s\"\n",
+                   option.progname, argv[i], argv[0]);
+          errors++;
+          continue;
+--- a/src/prog/mouse-test.c
++++ b/src/prog/mouse-test.c
+@@ -524,7 +524,7 @@
+       Gpm_Event event;
+ 
+       if (packetsize!=cur->this->packetlen) {
+-         REMOVETYPE(cur,"different packet lenght");
++         REMOVETYPE(cur,"different packet length");
+          continue;
+       }
+ 
+--- a/src/synaptics.c
++++ b/src/synaptics.c
+@@ -2471,7 +2471,7 @@
+ #define PS2_SCALE_11      0xE6      /* Set scale to 1:1 */
+ 
+ 
+-/* Normal ps2 responce */
++/* Normal ps2 response */
+ #define PS2_ERROR         0xFC      /* Error, after a reset,resend or disconnect*/
+ #define PS2_ACK           0xFA      /* Command acknowledge */
+ #define PS2_READY         0xAA      /* Send after a calibration or ERROR */
+@@ -2538,7 +2538,7 @@
+   }
+ 
+ # ifdef DEBUG_PUTBYTE_ACK
+-  gpm_report(GPM_PR_DEBUG,"Responce %X to byte %X",ack,b);
++  gpm_report(GPM_PR_DEBUG,"Response %X to byte %X",ack,b);
+ # endif
+ 
+   return ack;
+@@ -2565,11 +2565,11 @@
+     
+     /* Do some sanity checking */
+     if((response[0] & 0xFC) != 0x84) {
+-      gpm_report (GPM_PR_ERR,"Byte 0 of stick device responce is not valid");
++      gpm_report (GPM_PR_ERR,"Byte 0 of stick device response is not valid");
+       return -1;
+     }
+     if((response[3] & 0xCC) != 0xC4) {
+-      gpm_report (GPM_PR_ERR,"Byte 3 of stick device responce is not valid");
++      gpm_report (GPM_PR_ERR,"Byte 3 of stick device response is not valid");
+       return -1;
+     }
+   }
+@@ -2844,7 +2844,7 @@
+   byte status,id_code = PS2_MOUSE_IDCODE;
+   byte reset_cmd = PS2_RESET;
+ 
+-  gpm_report(GPM_PR_DEBUG,"Reseting Synaptic PS/2 %s\n",(stick?"Stick":"Touchpad"));
++  gpm_report(GPM_PR_DEBUG,"Resetting Synaptic PS/2 %s\n",(stick?"Stick":"Touchpad"));
+ 
+   /* Send reset command without eating the ack. */
+   if(!stick) {
+@@ -2871,11 +2871,11 @@
+   usleep(750000);
+ 
+   if ( (status  = syn_ps2_getbyte(fd,stick)) != PS2_READY ){
+-    gpm_report(GPM_PR_ERR,"Reseting PS/2 Device failed: No READY, got %02X.\n"
++    gpm_report(GPM_PR_ERR,"Resetting PS/2 Device failed: No READY, got %02X.\n"
+ 	                  "Check pc_keyb.c for reconnect smartness.\n",status);
+   }
+   if ( (id_code = syn_ps2_getbyte(fd,stick)) != PS2_MOUSE_IDCODE){
+-    gpm_report(GPM_PR_ERR,"Reseting PS/2 Device failed: Wrong ID, got %02X.\n",id_code);
++    gpm_report(GPM_PR_ERR,"Resetting PS/2 Device failed: Wrong ID, got %02X.\n",id_code);
+   }
+ 
+ }
+@@ -3155,7 +3155,7 @@
+ 
+ void syn_serial_reset(int fd)
+ {
+-  gpm_report (GPM_PR_INFO,"Reseting Synaptic Serial Touchpad.");
++  gpm_report (GPM_PR_INFO,"Resetting Synaptic Serial Touchpad.");
+ 
+   syn_serial_set_mode (fd, (RELATIVE_MODE    |
+ 			    HIGH_REPORT_RATE |
+@@ -3247,7 +3247,7 @@
+ 
+ void syn_ps2_reset (int fd)
+ {
+-  gpm_report (GPM_PR_INFO,"Reseting Synaptic PS/2 Touchpad.");
++  gpm_report (GPM_PR_INFO,"Resetting Synaptic PS/2 Touchpad.");
+ 
+   /* Stop incoming motion data (of whatever kind absolute/relative). */
+   tp_ps2_disable_data(fd);

patches/gpm/094_gpm-1.20.7-glibc-2.26-1.patch

@@ -0,0 +1,63 @@
+Origin: http://download.nutyx.org/x86_64/rolling/cli/gpm/gpm-1.20.7-consolidated-1.patch
+Bug: https://github.com/telmich/gpm/issues/21
+Bug-Debian: https://bugs.debian.org/886903
+Bug-LFS: https://wiki.linuxfromscratch.org/blfs/ticket/9616#ticket
+Author: tnut from nutyx.org, https://github.com/tnut
+Description: Fix FTBFS with glibc 2.26
+
+--- a/src/daemon/open_console.c
++++ b/src/daemon/open_console.c
+@@ -24,6 +24,10 @@
+ #include <sys/ioctl.h>              /* ioctl             */
+ #include <sys/types.h>              /* major()           */
+ 
++#ifdef HAVE_SYS_SYSMACROS_H
++#include <sys/sysmacros.h>          /* major() w/newer glibc */
++#endif
++
+ /* Linux specific (to be outsourced in gpm2 */
+ #include <linux/serial.h>           /* for serial console check */
+ #include <asm/ioctls.h>            /* for serial console check */
+--- a/src/prog/gpm-root.y
++++ b/src/prog/gpm-root.y
+@@ -443,6 +443,7 @@
+ }
+ 
+ /*---------------------------------------------------------------------*/
++#if 0
+ static int f_debug_one(FILE *f, Draw *draw)
+ {
+    DrawItem *ip;
+@@ -465,6 +466,7 @@
+ #undef LINE
+    return 0;
+ }
++#endif
+ 
+ int f_debug(int mode, DrawItem *self, int uid)
+ {
+@@ -960,10 +962,8 @@
+ /*------------*/
+ static inline void scr_restore(int fd, FILE *f, unsigned char *buffer, int vc)
+ {
+-   int x,y, dumpfd;
++   int dumpfd;
+    char dumpname[20];
+-
+-   x=buffer[2]; y=buffer[3];
+    
+    /* WILL NOT WORK WITH DEVFS! FIXME! */
+    sprintf(dumpname,"/dev/vcsa%i",vc);
+@@ -1196,11 +1196,7 @@
+                                                         LOG_DAEMON : LOG_USER);
+    /* reap your zombies */
+    childaction.sa_handler=reap_children;
+-#if defined(__GLIBC__)
+-   __sigemptyset(&childaction.sa_mask);
+-#else /* __GLIBC__ */
+-   childaction.sa_mask=0;
+-#endif /* __GLIBC__ */
++   sigemptyset(&childaction.sa_mask);
+    childaction.sa_flags=SA_INTERRUPT; /* need to break the select() call */
+    sigaction(SIGCHLD,&childaction,NULL);
+ 

patches/gpm/095_fix-compilation-with-gcc-10.patch

@@ -0,0 +1,20 @@
+Description: FTBFS with gcc-10 due to -fno-commons
+Author: Sergei Trofimovich <[email protected]>
+Reviewed-By: Helmut Grohne <[email protected]>
+Origin: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8f7e2ac82fc5a1847c132057fb7de1a996d66c76
+Forwarded: https://github.com/telmich/gpm/pull/37
+Bug: https://github.com/telmich/gpm/pull/37
+Bug-Gentoo: https://bugs.gentoo.org/705878
+Bug-Debian: https://bugs.debian.org/953266
+
+--- a/src/headers/daemon.h
++++ b/src/headers/daemon.h
+@@ -176,7 +176,7 @@
+ extern Gpm_Type         mice[];
+ extern Gpm_Type         *repeated_type;
+ 
+-time_t                  last_selection_time;
++extern time_t           last_selection_time;
+ 
+ 
+ 

patches/gpm/096_fix-compilation-against-musl-libc.patch

@@ -0,0 +1,69 @@
+Description: Add musl support
+ * Use SA_NODEFER instead of its non-standard alias SA_NOMASK.
+ * Add missing sys/select.h and fcntl.h includes.
+ * Use standard sigemptyset unconditionally.
+ * Define SA_INTERRUPT if it's not defined (historical no-op).
+ * With these changes gpm builds against musl libc.
+Author: Szabolcs Nagy <[email protected]>
+Bug-Debian: https://bugs.debian.org/813751
+
+--- a/src/lib/liblow.c
++++ b/src/lib/liblow.c
+@@ -179,7 +179,7 @@
+   /* Reincarnation. Prepare for another death early. */
+   sigemptyset(&sa.sa_mask);
+   sa.sa_handler = gpm_suspend_hook;
+-  sa.sa_flags = SA_NOMASK;
++  sa.sa_flags = SA_NODEFER;
+   sigaction (SIGTSTP, &sa, 0);
+ 
+   /* Pop the gpm stack by closing the useless connection */
+@@ -386,7 +386,7 @@
+ 
+          /* if signal was originally ignored, job control is not supported */
+          if (gpm_saved_suspend_hook.sa_handler != SIG_IGN) {
+-            sa.sa_flags = SA_NOMASK;
++            sa.sa_flags = SA_NODEFER;
+             sa.sa_handler = gpm_suspend_hook;
+             sigaction(SIGTSTP, &sa, 0);
+          }
+--- a/src/prog/display-buttons.c
++++ b/src/prog/display-buttons.c
+@@ -36,6 +36,7 @@
+ #include <stdio.h>            /* printf()             */
+ #include <time.h>             /* time()               */
+ #include <errno.h>            /* errno                */
++#include <sys/select.h>       /* fd_set, FD_ZERO      */
+ #include <gpm.h>              /* gpm information      */
+ 
+ /* display resulting data */
+--- a/src/prog/display-coords.c
++++ b/src/prog/display-coords.c
+@@ -37,6 +37,7 @@
+ #include <stdio.h>            /* printf()             */
+ #include <time.h>             /* time()               */
+ #include <errno.h>            /* errno                */
++#include <sys/select.h>       /* fd_set, FD_ZERO      */
+ #include <gpm.h>              /* gpm information      */
+ 
+ /* display resulting data */
+--- a/src/prog/gpm-root.y
++++ b/src/prog/gpm-root.y
+@@ -1197,6 +1197,9 @@
+    /* reap your zombies */
+    childaction.sa_handler=reap_children;
+    sigemptyset(&childaction.sa_mask);
++#ifndef SA_INTERRUPT
++#define SA_INTERRUPT 0
++#endif
+    childaction.sa_flags=SA_INTERRUPT; /* need to break the select() call */
+    sigaction(SIGCHLD,&childaction,NULL);
+ 
+--- a/contrib/control/gpm_has_mouse_control.c
++++ b/contrib/control/gpm_has_mouse_control.c
+@@ -1,4 +1,4 @@
+-#include <sys/fcntl.h>
++#include <fcntl.h>
+ #include <sys/kd.h>
+ #include <stdio.h>
+ #include <stdlib.h>

patches/mbedtls/0001-Allow-empty-x509-cert-issuer.patch

@@ -0,0 +1,34 @@
+From a2d012f3ba459f6debe636b576ad9aeab7b3c2aa Mon Sep 17 00:00:00 2001
+From: Nick Chan <[email protected]>
+Date: Sat, 27 May 2023 23:50:23 +0800
+Subject: [PATCH] Allow empty x509 cert issuer
+
+---
+ library/x509_crt.c | 8 ++++----
+ 1 file changed, 4 insertions(+), 4 deletions(-)
+
+diff --git a/library/x509_crt.c b/library/x509_crt.c
+index cf62532f2..ef25b3d77 100644
+--- a/library/x509_crt.c
++++ b/library/x509_crt.c
+@@ -1061,13 +1061,13 @@ static int x509_crt_parse_der_core(mbedtls_x509_crt *crt,
+ 
+     if ((ret = mbedtls_asn1_get_tag(&p, end, &len,
+                                     MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE)) != 0) {
+-        mbedtls_x509_crt_free(crt);
+-        return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_X509_INVALID_FORMAT, ret);
++        /*mbedtls_x509_crt_free(crt);
++        return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_X509_INVALID_FORMAT, ret);*/
+     }
+ 
+     if ((ret = mbedtls_x509_get_name(&p, p + len, &crt->issuer)) != 0) {
+-        mbedtls_x509_crt_free(crt);
+-        return ret;
++        /*mbedtls_x509_crt_free(crt);
++        return ret;*/
+     }
+ 
+     crt->issuer_raw.len = p - crt->issuer_raw.p;
+-- 
+2.39.1
+

src/Makefile

@@ -1,68 +1,185 @@
 all: palera1n
 
-OBJECTS  = main.o dfuhelper.o devhelper.o lockdown_helper.o exec_checkra1n.o
-OBJECTS += pongo_usb.o optparse.o override_file.o pongo_helper.o log.o
-OBJECTS += xxd-checkra1n.o xxd-checkra1n-kpf-pongo.o xxd-ramdisk.dmg.o
-OBJECTS += xxd-binpack.dmg.o lock_vars.o
-ifeq ($(DEV_BUILD),1)
-OBJECTS += tui_screen_enter_recovery.o tui_screen_enter_dfu.o tui_main.o
-OBJECTS += tui_screen_jailbreak.o tui_screen_main.o tui_screen_options.o
+OBJDIR = obj
+GENDIR = gen
+RESOURCES_DIR = resources
+
+C_SRC = $(wildcard *.c)
+OBJS = $(patsubst %,$(OBJDIR)/%,$(C_SRC:.c=.c.o))
+
+ifeq (,$(findstring macosx, $(CFLAGS)))
+ifneq (,$(findstring version-min=, $(CFLAGS)))
+C_SRC += $(GENDIR)/gen-libcheckra1nhelper.dylib.c
+endif
 endif
 
-CHECKRA1N_VERSION ?= 0.1337.1
+ifeq ($(FORCE_HELPER),1)
+C_SRC += $(GENDIR)/gen-libcheckra1nhelper.dylib.c
+CFLAGS += -DFORCE_HELPER
+BUILD_OPTIONS += FORCE_HELPER
+endif
+
+ifneq ($(NO_RAMDISK),1)
+C_SRC += $(GENDIR)/gen-ramdisk.dmg.lzma.c
+else
+CFLAGS += -DNO_RAMDISK -DRAMDISK_COMPRESSED_SIZE=\"0\"
+BUILD_OPTIONS += NO_RAMDISK
+endif
+ifneq ($(NO_KPF),1)
+C_SRC += $(GENDIR)/gen-checkra1n-kpf-pongo.lzma.c
+else
+CFLAGS += -DNO_KPF
+BUILD_OPTIONS += NO_KPF
+endif
+ifneq ($(NO_OVERLAY),1)
+C_SRC += $(GENDIR)/gen-binpack.dmg.c
+else
+CFLAGS += -DNO_OVERLAY
+BUILD_OPTIONS += NO_OVERLAY
+endif
+ifneq ($(NO_CHECKRAIN),1)
+C_SRC += $(GENDIR)/gen-checkra1n.c
+else
+CFLAGS += -DNO_CHECKRAIN
+BUILD_OPTIONS += NO_CHECKRAIN
+endif
+
+ifneq ($(NO_CUSTOM_PONGO),1)
+C_SRC += $(GENDIR)/gen-Pongo.bin.c
+else
+CFLAGS += -DNO_CUSTOM_PONGO
+BUILD_OPTIONS += NO_CUSTOM_PONGO
+endif
+
+ifeq ($(TUI),1)
+BUILD_OPTIONS += TUI
+CFLAGS += -DTUI
+endif
+
+CHECKRA1N_VERSION ?= 0.1337.2
 LIPO = lipo
 LDID = ldid
 
-checkra1n-%:
-	curl -LO https://assets.checkra.in/downloads/preview/$(CHECKRA1N_VERSION)/$@
+ifeq ($(TARGET_OS),Darwin)
+ifneq ($(USE_LIBUSB),1)
+else
+LIBS += -framework SystemConfiguration -framework Security
+BUILD_OPTIONS += USE_LIBUSB
+endif
+# add lto and debug symbols for lto
+CFLAGS += -flto=full -g
+LDFLAGS += -Wl,-object_path_lto,obj/lto.o
+else
+USE_LIBUSB = 1
+endif
+
+ifeq ($(USE_LIBUSB),1)
+CFLAGS += -DUSE_LIBUSB=1
+LIBS += $(DEP)/lib/libusb-1.0.a
+endif
+
+ifeq ($(ROOTFUL),1)
+CFLAGS += -DROOTFUL=1
+BUILD_OPTIONS += ROOTFUL
+endif
+
+ifeq ($(BUILD_OPTIONS),)
+BUILD_OPTIONS = (none)
+endif
+
+CFLAGS += -DBUILD_OPTIONS=\""$(BUILD_OPTIONS)"\"
+
+ifeq ($(TARGET_OS),Linux)
+ifeq ($(UNAME),Linux)
+ifeq ($(CHECKRA1N_NAME),)
+ifeq ($(shell arch),x86_64)
+CHECKRA1N_NAME := linux-x86_64
+else ifeq ($(shell arch | grep -q 'i[3-7]86' && echo 1),1)
+CHECKRA1N_NAME := linux-x86
+else ifeq ($(shell arch | grep -v '\(arm\|aarch\)[a-z]\?\+64' | grep -q arm && echo 1),1)
+CHECKRA1N_NAME := linux-armel
+else ifeq  ($(shell arch | grep -q '\(arm\|aarch\)[a-z]\?\+64' && echo 1),1)
+CHECKRA1N_NAME := linux-arm64
+endif
+endif
+endif
+endif
+
+$(RESOURCES_DIR)/checkra1n-%:
+	curl -Lfo $@ https://assets.checkra.in/downloads/preview/$(CHECKRA1N_VERSION)/$$(echo $@ | cut -d/ -f2)
 	chmod 755 $@
 
-checkra1n: checkra1n-macos usb.xml
+$(RESOURCES_DIR)/checkra1n: $(RESOURCES_DIR)/checkra1n-macos usb.xml
 ifeq ($(TARGET_OS),Darwin)
 ifneq (,$(findstring arm64, $(CFLAGS)))
-	$(LIPO) -thin arm64 -output checkra1n checkra1n-macos
+	$(LIPO) -thin arm64 -output $(RESOURCES_DIR)/checkra1n $(RESOURCES_DIR)/checkra1n-macos
 else ifneq (,$(findstring x86_64, $(CFLAGS)))
-	$(LIPO) -thin x86_64 -output checkra1n checkra1n-macos
+	$(LIPO) -thin x86_64 -output $(RESOURCES_DIR)/checkra1n $(RESOURCES_DIR)/checkra1n-macos
+else ifeq ($(shell arch),i386)
+	$(LIPO) -thin x86_64 -output $(RESOURCES_DIR)/checkra1n $(RESOURCES_DIR)/checkra1n-macos
 else
-	$(LIPO) -thin $(shell arch) -output checkra1n checkra1n-macos
+	$(LIPO) -thin $(shell arch) -output $(RESOURCES_DIR)/checkra1n $(RESOURCES_DIR)/checkra1n-macos
 endif
 ifeq (,$(findstring macosx, $(CFLAGS)))
 ifneq (,$(findstring version-min=, $(CFLAGS)))
-	vtool -remove-build-version 1 -replace -output checkra1n checkra1n
-	vtool -set-build-version $(FAKE_PLATFORM) $(FAKE_MINOS) $(FAKE_SDK) -replace -output checkra1n checkra1n
-	install_name_tool -change /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit /System/Library/Frameworks/IOKit.framework/IOKit checkra1n
-	install_name_tool -change /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/CoreFoundation.framework/CoreFoundation checkra1n
-	$(LDID) -Susb.xml checkra1n
+	vtool -remove-build-version 1 -replace -output $(RESOURCES_DIR)/checkra1n $(RESOURCES_DIR)/checkra1n
+	vtool -set-build-version $(FAKE_PLATFORM) $(FAKE_MINOS) $(FAKE_SDK) -replace -output $(RESOURCES_DIR)/checkra1n $(RESOURCES_DIR)/checkra1n
+	install_name_tool -change /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit /System/Library/Frameworks/IOKit.framework/IOKit $(RESOURCES_DIR)/checkra1n
+	install_name_tool -change /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/CoreFoundation.framework/CoreFoundation $(RESOURCES_DIR)/checkra1n
+	$(LDID) -Susb.xml $(RESOURCES_DIR)/checkra1n
 endif
 endif
 else
-	cp checkra1n-$(CHECKRA1N_NAME) checkra1n
+	cp $(RESOURCES_DIR)/checkra1n-$(CHECKRA1N_NAME) $(RESOURCES_DIR)/checkra1n
 endif
 
-xxd-%.c: %
-	xxd -iC $< > $@
+$(GENDIR)/gen-%.c: $(RESOURCES_DIR)/%
+	echo '#include <stdint.h>' > $(RESOURCES_DIR)/../$@
+	cd $(RESOURCES_DIR) && xxd -iC $$(echo $< | cut -d/ -f2) | sed -e 's/unsigned int/uint32_t/' -e 's/unsigned char/uint8_t/' >> ../$@
 
-%.o: %.c
-	$(CC) -c $(CFLAGS) $<
 
-palera1n: $(OBJECTS)
-	$(CC) $(CFLAGS) $(LDFLAGS) $(OBJECTS) $(LIBS) -o palera1n
+$(OBJDIR)/pongo_helper.c.o: pongo_helper.c $(wildcard ../include/*.h) $(RESOURCES_DIR)/ramdisk.dmg $(RESOURCES_DIR)/checkra1n-kpf-pongo
+	$(CC) -c -o $@ $(CFLAGS) -DRAMDISK_UNCOMPRESSED_SIZE="\"$$(wc -c < $(RESOURCES_DIR)/ramdisk.dmg | tr -d ' ')\"" -DKPF_UNCOMPRESSED_SIZE="\"$$(wc -c < $(RESOURCES_DIR)/checkra1n-kpf-pongo | tr -d ' ')\"" $<
+
+$(OBJDIR)/%.c.o: $(GENDIR)/gen-%.c $(wildcard ../include/*.h)
+	$(CC) $(CFLAGS) -c -o $<
+
+$(OBJDIR)/%.c.o: %.c $(wildcard ../include/*.h)
+	$(CC) $(CFLAGS) -c -o $@ $<
+
+palera1n: $(OBJS)
+	$(CC) $(CFLAGS) $(LDFLAGS) $(OBJS) $(LIBS) -o palera1n
 ifeq (,$(findstring macosx, $(CFLAGS)))
 ifneq (,$(findstring version-min=, $(CFLAGS)))
 	$(LDID) -Susb.xml palera1n
 endif
 endif
 
-checkra1n-kpf-pongo:
-	curl -LO https://github.com/guacaplushy/checkp4le/raw/main/binaries/checkra1n-kpf-pongo
+$(RESOURCES_DIR)/libcheckra1nhelper.dylib: chkstk.S
+	$(CC) $(CFLAGS) $(LDFLAGS) -shared chkstk.S -o $@
 
-ramdisk.dmg:
-	curl -LO https://cdn.nickchan.lol/palera1n/c-rewrite/deps/ramdisk.dmg
+$(RESOURCES_DIR)/checkra1n-kpf-pongo:
+	curl -Lfo $@ https://cdn.nickchan.lol/palera1n/artifacts/kpf/iOS15/checkra1n-kpf-pongo
 
-binpack.dmg:
-	curl -LO https://cdn.nickchan.lol/palera1n/c-rewrite/deps/binpack.dmg
+$(RESOURCES_DIR)/ramdisk.dmg.lzma: $(RESOURCES_DIR)/ramdisk.dmg
+	xz --format=lzma -vfc6ekT 0 $< > $@
+
+$(RESOURCES_DIR)/checkra1n-kpf-pongo.lzma: $(RESOURCES_DIR)/checkra1n-kpf-pongo
+	xz --format=lzma -vfc6ekT 0 $< > $@
+
+$(RESOURCES_DIR)/ramdisk.dmg:
+	curl -Lfo $@ https://cdn.nickchan.lol/palera1n/c-rewrite/deps/ramdisk.dmg
+
+$(RESOURCES_DIR)/binpack.dmg:
+	curl -Lfo $@ https://cdn.nickchan.lol/palera1n/c-rewrite/deps/binpack.dmg
+
+$(RESOURCES_DIR)/Pongo.bin:
+	curl -Lfo $@ https://cdn.nickchan.lol/palera1n/artifacts/kpf/iOS15/Pongo.bin
 
 clean:
-	rm -rf *.o palera1n checkra1n checkra1n.c palera1n.dSYM
+	rm -rf $(OBJDIR)/*.o $(GENDIR)/*.c $(GENDIR)/*.o palera1n palera1n.dSYM libcheckra1nhelper.dylib
+
+distclean: clean
+	rm -rf $(RESOURCES_DIR)/*
 
 .PHONY: all clean

src/boyermoore_memmem.c

@@ -0,0 +1,59 @@
+#include <limits.h>
+#include <stdlib.h>
+
+const unsigned char *
+boyermoore_horspool_memmem(const unsigned char* haystack, size_t hlen,
+                           const unsigned char* needle,   size_t nlen)
+{
+    size_t scan = 0;
+    size_t bad_char_skip[UCHAR_MAX + 1]; /* Officially called:
+                                          * bad character shift */
+ 
+    /* Sanity checks on the parameters */
+    if (nlen <= 0 || !haystack || !needle)
+        return NULL;
+ 
+    /* ---- Preprocess ---- */
+    /* Initialize the table to default value */
+    /* When a character is encountered that does not occur
+     * in the needle, we can safely skip ahead for the whole
+     * length of the needle.
+     */
+    for (scan = 0; scan <= UCHAR_MAX; scan = scan + 1)
+        bad_char_skip[scan] = nlen;
+ 
+    /* C arrays have the first byte at [0], therefore:
+     * [nlen - 1] is the last byte of the array. */
+    size_t last = nlen - 1;
+ 
+    /* Then populate it with the analysis of the needle */
+    for (scan = 0; scan < last; scan = scan + 1)
+        bad_char_skip[needle[scan]] = last - scan;
+ 
+    /* ---- Do the matching ---- */
+ 
+    /* Search the haystack, while the needle can still be within it. */
+    while (hlen >= nlen)
+    {
+        /* scan from the end of the needle */
+        for (scan = last; haystack[scan] == needle[scan]; scan = scan - 1)
+            if (scan == 0) /* If the first byte matches, we've found it. */
+            {
+                return haystack;
+            }
+ 
+        /* otherwise, we need to skip some bytes and start again.
+           Note that here we are getting the skip value based on the last byte
+           of needle, no matter where we didn't match. So if needle is: "abcd"
+           then we are skipping based on 'd' and that value will be 4, and
+           for "abcdd" we again skip on 'd' but the value will be only 1.
+           The alternative of pretending that the mismatched character was
+           the last character is slower in the normal case (E.g. finding
+           "abcd" in "...azcd..." gives 4 by using 'd' but only
+           4-2==2 using 'z'. */
+        hlen     -= bad_char_skip[haystack[last]];
+        haystack += bad_char_skip[haystack[last]];
+    }
+ 
+    return NULL;
+}

src/chkstk.S

@@ -0,0 +1,65 @@
+#define _PTHREAD_STRUCT_DIRECT_STACKADDR_OFFSET   -48
+#define _PTHREAD_STRUCT_DIRECT_STACKBOTTOM_OFFSET -40
+
+.align 4
+_thread_chkstk_darwin:
+        .globl ___chkstk_darwin
+___chkstk_darwin: // %w9/x9 == alloca size
+        stp     x10, x11, [sp, #-16]
+
+        // validate that the frame pointer is on our stack (no alt stack)
+        mrs     x10, TPIDRRO_EL0
+
+        // (%sp - pthread_self()->stackaddr) > 0 ?
+#if defined(__ARM64_ARCH_8_32__)
+        ubfx    x9, x9, #0, #32
+        ldur    w11, [x10, _PTHREAD_STRUCT_DIRECT_STACKADDR_OFFSET]
+#else
+        ldur    x11, [x10, _PTHREAD_STRUCT_DIRECT_STACKADDR_OFFSET]
+#endif
+        subs    x11, sp, x11
+        b.hs    Lprobe
+
+        // %sp <= pthread_self()->stackbottom ?
+#if defined(__ARM64_ARCH_8_32__)
+        ldur    w11, [x10, _PTHREAD_STRUCT_DIRECT_STACKBOTTOM_OFFSET]
+#else
+        ldur    x11, [x10, _PTHREAD_STRUCT_DIRECT_STACKBOTTOM_OFFSET]
+#endif
+        mov     x10, sp
+        cmp     x10, x11
+        b.ls    Lprobe
+
+        // %sp - (uintptr_t)%x9 < pthread_self()->stackbottom ?
+        subs    x10, x10, x9
+        b.lo    Lcrash
+        cmp     x10, x11
+        b.lo    Lcrash
+
+Lexit:
+        ldp     x10, x11, [sp, #-16]
+        ret
+
+Lcrash:
+        // POSIX mandates that stack overflow crashes with SIGSEGV
+        // so load an address in the guard page and dereference it
+        //
+        // x11 contains pthread_self()->stackbottom already
+        ldr     x11, [x11, #-8]
+        // if main_thread caused stack growth with setrlimit()
+        // fall into Lprobe and eventually cause SIGSEGV.
+
+Lprobe:
+        mov     x10, sp
+        cmp     x9, #0x1000
+        b.lo    Lend
+Lloop:
+        sub     x10, x10, #0x1000
+        ldr     x11, [x10]
+        sub     x9, x9, #0x1000
+        cmp     x9, #0x1000
+        b.hi    Lloop
+Lend:
+        sub     x10, x10, x9
+        ldr     x11, [x10]
+        b       Lexit

src/credits.c

@@ -0,0 +1,23 @@
+#include <stdio.h>
+
+#ifndef BAKERAIN_DEVELOPE_R
+#define BAKERAIN_DEVELOPE_R "kok3shidoll"
+#endif
+#define THE_PLUSH "Ploosh"
+
+#define T void
+#define R print_credits(void) {
+#define O fprintf
+#define U (
+#define B stderr
+#define L ,
+#define E "# == palera1n-c == \n#\n"
+#define M "# Made by: Nick Chan, " THE_PLUSH ", Samara, Nebula, staturnz, " BAKERAIN_DEVELOPE_R " \n#\n"
+#define A "# Thanks to: pythonplayer123, llsc12, Mineek, tihmstar, nikias\n"
+#define K "# (libimobiledevice), checkra1n team (Siguza, axi0mx, littlelailo\n"
+#define I "# et al.), Procursus Team (Hayden Seay, Cameron Katri, Keto et.al)\n\n"
+#define N )
+#define G ;
+#define S }
+
+T R O U B L E M A K I N G S

src/devhelper.c

@@ -28,15 +28,14 @@
 #include <libimobiledevice/diagnostics_relay.h>
 #include <plist/plist.h>
 
-#include "lockdown_helper.h"
-
 #ifdef HAVE_LIB_TV_CONTROL
 #include <libtvcontrol.h>
 #endif
 
-#include <common.h>
+#include <palerain.h>
 
 irecv_device_event_context_t irecvctx = NULL;
+usbmuxd_subscription_context_t usbmuxdctx = NULL;
 
 void devinfo_free(devinfo_t *dev) {
 	free(dev->buildVersion);
@@ -75,33 +74,35 @@ bool cpid_is_arm64(unsigned int cpid) {
 	* ========== 0x8960 ===========
 	* (ARM64)      A7     
 	*/
-	if (
-		cpid == 0x8960 || cpid == 0x7000 || cpid == 0x7001
-		|| cpid == 0x8000 || cpid == 0x8001 || cpid == 0x8003
-		|| cpid == 0x8010 || cpid == 0x8011 || cpid == 0x8012
-		|| cpid == 0x8015
-	
-	) return true;
-	return false;
+	return (
+		cpid == 0x8960 || cpid == 0x7000 || cpid == 0x7001 || 
+		cpid == 0x8000 || cpid == 0x8001 || cpid == 0x8003 || 
+		cpid == 0x8010 || cpid == 0x8011 || cpid == 0x8012 || 
+		cpid == 0x8015
+	);
 }
 
 int subscribe_cmd(usbmuxd_event_cb_t device_event_cb, irecv_device_event_cb_t irecv_event_cb)
 {
-	usbmuxd_subscribe(device_event_cb, NULL);
-	irecv_device_event_subscribe(&irecvctx, irecv_event_cb, NULL);
+	int ret;
+	if ((ret = usbmuxd_events_subscribe(&usbmuxdctx, device_event_cb, NULL))) return ret;
+	if ((ret = irecv_device_event_subscribe(&irecvctx, irecv_event_cb, NULL))) return ret;
 	return 0;
 }
 
-int unsubscribe_cmd()
+int unsubscribe_cmd(void)
 {
-	usbmuxd_unsubscribe();
-	irecv_device_event_unsubscribe(irecvctx);
+	int ret;
+	if ((ret = usbmuxd_events_unsubscribe(usbmuxdctx))) return ret;
+	if ((ret = irecv_device_event_unsubscribe(irecvctx))) return ret;
 	irecvctx = NULL;
+	usbmuxdctx = NULL;
 	return 0;
 }
 
 int devinfo_cmd(devinfo_t *dev, const char *udid)
 {
+	int ret;
 	uint64_t this_ecid = 0;
 	char *productType = NULL;
 	char *productVersion = NULL;
@@ -110,79 +111,79 @@ int devinfo_cmd(devinfo_t *dev, const char *udid)
 	char *CPUArchitecture = NULL;
 	idevice_t device = NULL;
 	lockdownd_client_t lockdown = NULL;
-	if (idevice_new(&device, udid) != IDEVICE_E_SUCCESS)
+	if ((ret = idevice_new_with_options(&device, udid, IDEVICE_LOOKUP_USBMUX)) != IDEVICE_E_SUCCESS)
 	{
-		LOG(LOG_ERROR, "Error connecting to device.");
+		LOG(LOG_ERROR, "Error connecting to device: %d (%s)", ret, lockdownd_strerror(ret));
 		return -1;
 	}
-	if (lockdownd_client_new(device, &lockdown, "palera1n") != LOCKDOWN_E_SUCCESS)
+	if ((ret = lockdownd_client_new_with_handshake(device, &lockdown, "palera1n")) != LOCKDOWN_E_SUCCESS)
 	{
-		idevice_free(device);
-		LOG(LOG_ERROR, "Device is not in normal mode.");
+		(void)idevice_free(device);
+		LOG(LOG_ERROR, "Device is not in normal mode: %d (%s)", ret, lockdownd_strerror(ret));
 		return -1;
 	}
 	plist_t node = NULL;
-	if (lockdownd_get_value(lockdown, NULL, "UniqueChipID", &node) != LOCKDOWN_E_SUCCESS)
+	if ((ret = lockdownd_get_value(lockdown, NULL, "UniqueChipID", &node)) != LOCKDOWN_E_SUCCESS)
 	{
-		lockdownd_client_free(lockdown);
-		idevice_free(device);
-		LOG(LOG_ERROR, "Error getting ECID");
+		(void)lockdownd_client_free(lockdown);
+		(void)idevice_free(device);
+		LOG(LOG_ERROR, "Error getting ECID: %d (%s)", ret, lockdownd_strerror(ret));
 		return -1;
 	}
 	plist_get_uint_val(node, &this_ecid);
 	plist_free(node);
 
 	node = NULL;
-	if (lockdownd_get_value(lockdown, NULL, "ProductType", &node) != LOCKDOWN_E_SUCCESS)
+	if ((ret = lockdownd_get_value(lockdown, NULL, "ProductType", &node)) != LOCKDOWN_E_SUCCESS)
 	{
-		lockdownd_client_free(lockdown);
-		idevice_free(device);
-		LOG(LOG_ERROR, "Error getting product type");
+		(void)lockdownd_client_free(lockdown);
+		(void)idevice_free(device);
+		LOG(LOG_ERROR, "Error getting product type: %d (%s)", ret, lockdownd_strerror(ret));
 		return -1;
 	}
 	plist_get_string_val(node, &productType);
 	plist_free(node);
 
 	node = NULL;
-	if (lockdownd_get_value(lockdown, NULL, "CPUArchitecture", &node) != LOCKDOWN_E_SUCCESS)
+	if ((ret = lockdownd_get_value(lockdown, NULL, "CPUArchitecture", &node)) != LOCKDOWN_E_SUCCESS)
 	{
-		lockdownd_client_free(lockdown);
-		idevice_free(device);
-		LOG(LOG_ERROR, "Error getting CPU type");
+		(void)lockdownd_client_free(lockdown);
+		(void)idevice_free(device);
+		LOG(LOG_ERROR, "Error getting CPU type: %d (%s)", ret, lockdownd_strerror(ret));
 		return -1;
 	}
 	plist_get_string_val(node, &CPUArchitecture);
 	plist_free(node);
 
 	node = NULL;
-	if (lockdownd_get_value(lockdown, NULL, "ProductVersion", &node) != LOCKDOWN_E_SUCCESS)
+	if ((ret = lockdownd_get_value(lockdown, NULL, "ProductVersion", &node)) != LOCKDOWN_E_SUCCESS)
 	{
-		lockdownd_client_free(lockdown);
-		idevice_free(device);
-		LOG(LOG_ERROR, "Error getting product version");
+		(void)lockdownd_client_free(lockdown);
+		(void)idevice_free(device);
+		LOG(LOG_ERROR, "Error getting product version: %d (%s)", ret, lockdownd_strerror(ret));
 		return -1;
 	}
 	plist_get_string_val(node, &productVersion);
 	plist_free(node);
 
 	node = NULL;
-	if (lockdownd_get_value(lockdown, NULL, "BuildVersion", &node) != LOCKDOWN_E_SUCCESS)
+	if ((ret = lockdownd_get_value(lockdown, NULL, "BuildVersion", &node)) != LOCKDOWN_E_SUCCESS)
 	{
-		lockdownd_client_free(lockdown);
-		idevice_free(device);
-		LOG(LOG_ERROR, "Error getting build version");
+		(void)lockdownd_client_free(lockdown);
+		(void)idevice_free(device);
+		LOG(LOG_ERROR, "Error getting build version: %d (%s)", ret, lockdownd_strerror(ret));
 		return -1;
 	}
 	plist_get_string_val(node, &buildVersion);
 	plist_free(node);
-	lockdownd_client_free(lockdown);
-	idevice_free(device);
+	(void)lockdownd_client_free(lockdown);
+	(void)idevice_free(device);
+
 	irecv_device_t rcvydev;
 	if (irecv_devices_get_device_by_product_type(productType, &rcvydev) == IRECV_E_SUCCESS)
 	{
 		displayName = rcvydev->display_name;
-	}
-	else
+	} else
 	{
 		displayName = productType;
 	}
@@ -207,23 +208,22 @@ int enter_recovery_cmd(const char* udid) {
 		LOG(LOG_ERROR, "Could not connect to lockdownd: %s", lockdownd_strerror(ldret));
 		return -1;
 	}
-	do {
-		ldret = lockdownd_enter_recovery(lockdown);
-		if (ldret == LOCKDOWN_E_SESSION_INACTIVE) {
-			lockdownd_client_free(lockdown);
-			lockdown = NULL;
-			if (LOCKDOWN_E_SUCCESS != (ldret = lockdownd_client_new_with_handshake(device, &lockdown, "palera1n"))) {
-				LOG(LOG_ERROR, "Could not connect to lockdownd: %s", lockdownd_strerror(ldret));
-				return -1;
-			}
-			ldret = lockdownd_enter_recovery(lockdown);
-		}
+	ldret = lockdownd_enter_recovery(lockdown);
+	if (ldret == LOCKDOWN_E_SESSION_INACTIVE) {
+		lockdownd_client_free(lockdown);
+		lockdown = NULL;
+		ldret = lockdownd_client_new_with_handshake(device, &lockdown, "palera1n");
 		if (ldret != LOCKDOWN_E_SUCCESS) {
-			LOG(LOG_ERROR, "Could not trigger entering recovery mode: %s", lockdownd_strerror(ldret));
+			LOG(LOG_ERROR, "Could not connect to lockdownd: %s", lockdownd_strerror(ldret));
 			return -1;
 		}
-		lockdownd_client_free(lockdown);
-	} while (0);
+		ldret = lockdownd_enter_recovery(lockdown);
+	}
+	if (ldret != LOCKDOWN_E_SUCCESS) {
+		LOG(LOG_ERROR, "Could not trigger entering recovery mode: %s", lockdownd_strerror(ldret));
+		return -1;
+	}
+	lockdownd_client_free(lockdown);
 	idevice_free(device);
 	return 0;
 }
@@ -240,8 +240,8 @@ int reboot_cmd(const char* udid) {
 			if (diagnostics_relay_restart(diag, DIAGNOSTICS_RELAY_ACTION_FLAG_WAIT_FOR_DISCONNECT) != DIAGNOSTICS_RELAY_E_SUCCESS) {
 				LOG(LOG_ERROR, "Could not reboot device.");
 			}
-			diagnostics_relay_goodbye(diag);
-			diagnostics_relay_client_free(diag);
+			(void)diagnostics_relay_goodbye(diag);
+			(void)diagnostics_relay_client_free(diag);
 		} else {
 			LOG(LOG_ERROR, "Could not connect to device.");
 			return -1;
@@ -300,9 +300,9 @@ int passstat_cmd(unsigned char* status, const char* udid) {
 	derr = diagnostics_relay_query_mobilegestalt(diagnostics_client, keys, &node);
 
 	plist_free(keys);
-	diagnostics_relay_client_free(diagnostics_client);
-	lockdownd_service_descriptor_free(service);
-	idevice_free(dev);
+	(void)diagnostics_relay_client_free(diagnostics_client);
+	(void)lockdownd_service_descriptor_free(service);
+	(void)idevice_free(dev);
 
 	if (derr != DIAGNOSTICS_RELAY_E_SUCCESS || !node)
 	{
@@ -320,9 +320,9 @@ int passstat_cmd(unsigned char* status, const char* udid) {
 	plist_get_string_val(status_node, &passstat_status);
 	if (!status || strncmp(passstat_status, "Succ", 4))
 	{
-		if (passstat_status)
+		if (passstat_status) 
 			free(passstat_status);
-
+		passstat_status = NULL;
 		plist_free(node);
 		LOG(LOG_ERROR, "Error getting passcode state (invalid status)");
 		return -1;
@@ -347,55 +347,59 @@ int passstat_cmd(unsigned char* status, const char* udid) {
 int recvinfo_cmd(recvinfo_t* info, const uint64_t ecid) {
 	irecv_client_t client = NULL;
 	irecv_error_t err = irecv_open_with_ecid(&client, ecid);
-	if (err != IRECV_E_SUCCESS) {
-		LOG(LOG_ERROR, "libirecovery error: %d (%s)", err, irecv_strerror(err));
-		return -1;
-	}
+	if (err != IRECV_E_SUCCESS) goto err;
 	int mode = 0;
-	irecv_get_mode(client, &mode);
+	err = irecv_get_mode(client, &mode);
+	if (err != IRECV_E_SUCCESS) goto err;
 	char *ibootver = NULL;
-	irecv_getenv(client, "build-version", &ibootver);
+	err = irecv_getenv(client, "build-version", &ibootver);
+	if (err != IRECV_E_SUCCESS) goto err;
 	irecv_device_t device;
 	err = irecv_devices_get_device_by_client(client, &device);
-	if (err != IRECV_E_SUCCESS) {
-		LOG(LOG_ERROR, "libirecovery error: %d (%s)", err, irecv_strerror(err));
-		return -1;
-	}
+	if (err != IRECV_E_SUCCESS) goto err;
 	info->mode = mode;
 	info->cpid = device->chip_id;
-	strncpy(info->product_type, device->product_type, 0x20);
-	strncpy(info->display_name, device->display_name, 0x20);
-	strncpy(info->iboot_ver, (ibootver) ? ibootver : "", 0x20);
+	snprintf(info->product_type, 0x20, "%s", device->product_type);
+	snprintf(info->display_name, 0x20, "%s", device->display_name);
+	snprintf(info->iboot_ver, 0x20, "%s", (ibootver) ? ibootver : "");
 	free(ibootver);
 	irecv_close(client);
 	return 0;
+err:
+	LOG(LOG_ERROR, "libirecovery error: %d (%s)", err, irecv_strerror(err));
+	return -1;
 }
 
 int autoboot_cmd(const uint64_t ecid) {
 	irecv_client_t client = NULL;
 	irecv_error_t err = irecv_open_with_ecid(&client, ecid);
-	if (err == IRECV_E_SUCCESS) {
-		irecv_setenv(client, "auto-boot", "true");
-		irecv_saveenv(client);
-		irecv_close(client);
-		return 0;
-	} else { 
-		LOG(LOG_ERROR, "libirecovery error: %d (%s)", err, irecv_strerror(err));
+	if (err != IRECV_E_SUCCESS) goto err;
+	err = irecv_setenv(client, "auto-boot", "true");
+	if (err != IRECV_E_SUCCESS) goto err;
+	err = irecv_saveenv(client);
+	if (err != IRECV_E_SUCCESS) goto err;
+	err = irecv_close(client);
+	if (err != IRECV_E_SUCCESS) goto err;
+	return 0;
+err:
+	LOG(LOG_ERROR, "libirecovery error: %d (%s)", err, irecv_strerror(err));
 		return -1;
-	}
 }
 
 int exitrecv_cmd(const uint64_t ecid) {
 	irecv_client_t client = NULL;
 	irecv_error_t err = irecv_open_with_ecid(&client, ecid);
-	if (err == IRECV_E_SUCCESS) {
-		irecv_setenv(client, "auto-boot", "true");
-		irecv_saveenv(client);
-		irecv_reboot(client);
-		irecv_close(client);
-		return 0;
-	} else {
-		LOG(LOG_ERROR, "libirecovery error: %d (%s)", err, irecv_strerror(err));
-		return -1;
-	}
+	if (err != IRECV_E_SUCCESS) goto err;
+	err = irecv_setenv(client, "auto-boot", "true");
+	if (err != IRECV_E_SUCCESS) goto err;
+	err = irecv_saveenv(client);
+	if (err != IRECV_E_SUCCESS) goto err;
+	err = irecv_reboot(client);
+	if (err != IRECV_E_SUCCESS) goto err;
+	err = irecv_close(client);
+	if (err != IRECV_E_SUCCESS) goto err;
+	return 0;
+err:
+	LOG(LOG_ERROR, "libirecovery error: %d (%s)", err, irecv_strerror(err));
+	return -1;
 }

src/dfuhelper.c

@@ -25,7 +25,7 @@
 #include <usbmuxd.h>
 
 #include <ANSI-color-codes.h>
-#include <common.h>
+#include <palerain.h>
 
 #define FORMAT_KEY_VALUE 1
 #define FORMAT_XML 2
@@ -36,12 +36,20 @@ int dfuhelper_thr_running = false;
 
 void step(int time, int time2, char *text, bool (*cond)(uint64_t), uint64_t cond_arg) {
     for (int i = time2; i < time; i++) {
-        printf(CYN "\r\e[K%s (%d)" CRESET, text, time - i + time2);
+		printf(
+			(palerain_flags & palerain_option_no_colors) 
+			? "\r\033[K%s (%d)" 
+			: BCYN "\r\033[K%s (%d)" CRESET, text, time - i + time2
+		);
         fflush(stdout);
         sleep(1);
 		if (cond != NULL && cond(cond_arg)) pthread_exit(NULL);
     }
-    printf(CYN "\r%s (%d)" CRESET, text, time2);
+    printf(
+		(palerain_flags & palerain_option_no_colors)
+		? "\r%s (%d)" 
+		: CYN "\r%s (%d)" CRESET, text, time2
+	);
 	if (time2 == 0) puts("");
 }
 
@@ -53,13 +61,15 @@ int connected_normal_mode(const usbmuxd_device_info_t *usbmuxd_device) {
 		LOG(LOG_ERROR, "Unable to get device information");
 		return 0;
 	}
-	if (strcmp(dev.CPUArchitecture, "arm64")) {
+	if (strncmp(dev.CPUArchitecture, "arm64", strlen("arm64"))) {
 		devinfo_free(&dev);
 		LOG(LOG_WARNING, "Ignoring non-arm64 device...");
+		LOG(LOG_WARNING, "palera1n doesn't and never will work on A12+ (arm64e)");
 		return -1;
 	}
 	if (!strncmp(dev.productType, "iPhone10,", strlen("iPhone10,"))) {
-		LOG(LOG_VERBOSE2, "Product %s requires passcode to be disabled", dev.productType);
+		if (!(palerain_flags & palerain_option_device_info))
+			LOG(LOG_VERBOSE2, "Product %s requires passcode to be disabled", dev.productType);
 		unsigned char passcode_state = 0;
 		ret = passstat_cmd(&passcode_state, usbmuxd_device->udid);
 		if (ret != 0) {
@@ -69,14 +79,39 @@ int connected_normal_mode(const usbmuxd_device_info_t *usbmuxd_device) {
 		}
 		if (passcode_state) {
 			LOG(LOG_ERROR, "Passcode must be disabled on this device");
-			LOG(LOG_ERROR, "Additionally, passcode must never be set since restore on iOS 16+");
+			if (!(palerain_flags & palerain_option_device_info))
+				LOG(LOG_ERROR, "Additionally, passcode must never be set since a restore on iOS 16+");
 			devinfo_free(&dev);
 			return -1;
 		}
 	}
-	LOG(LOG_INFO, "Telling device with udid %s to enter recovery mode immediately", usbmuxd_device->udid);
+
+	if ((palerain_flags & palerain_option_device_info)) {
+		printf("Mode: normal\n");
+		printf("ProductType: %s\n", dev.productType);
+		printf("Architecture: %s\n", dev.CPUArchitecture);
+		printf("Version: %s\n", dev.productVersion);
+		printf("DisplayName: %s\n", dev.displayName);
+
+		device_has_booted = true;
+		set_spin(0);
+		unsubscribe_cmd();
+		return 0;
+	}
+	if (verbose > 1) {
+		/* (LOG_VERBOSE - 3) or below*/
+		LOG(LOG_INFO, "Telling device with udid %s to enter recovery mode immediately", usbmuxd_device->udid);
+	} else {
+		/* At least (LOG_VERBOSE2 - 3) */
+		LOG(LOG_INFO, "Entering recovery mode");
+	}
 	enter_recovery_cmd(usbmuxd_device->udid);
 	devinfo_free(&dev);
+	if ((palerain_flags & palerain_option_enter_recovery)) {
+		device_has_booted = true;
+		set_spin(0);
+		unsubscribe_cmd();
+	}
 	return 0;
 }
 
@@ -91,45 +126,40 @@ void* connected_recovery_mode(struct irecv_device_info* info) {
 	cpid = info->cpid;
 	ecid = info->ecid;
 	bdid = info->bdid;
-#if defined(__APPLE__) || defined(__linux__)
-	pthread_setname_np("in.palera.recovery-mode-handler");
-#endif
-	if (!cpid_is_arm64(info->cpid)) {
+	info = NULL;
+	if (!cpid_is_arm64(cpid)) {
 		LOG(LOG_WARNING, "Ignoring non-arm64 device...");
 		return NULL;
 	}
 	sleep(1);
-	ret = autoboot_cmd(info->ecid);
+	ret = autoboot_cmd(ecid);
 	if (ret) {
 		LOG(LOG_ERROR, "Cannot set auto-boot back to true");
 		return NULL;
 	}
-	LOG(LOG_INFO, "Press any key when ready for DFU mode");
+	LOG(LOG_INFO, "Press Enter when ready for DFU mode");
 	getchar();
+	step(3, 0, "Get ready", NULL, 0);
 	if (NOHOME) 
-		step(4, 2, "Hold Volume Down + Side button", NULL, 0);
+		step(4, 2, "Hold volume down + side button", NULL, 0);
 	else
-		step(4, 2, "Hold Home + Power Button", NULL, 0);
-	set_ecid_wait_for_dfu(info->ecid);
-	ret = exitrecv_cmd(info->ecid);
-	info = NULL;
+		step(4, 2, "Hold home + power button", NULL, 0);
+	set_ecid_wait_for_dfu(ecid);
+	ret = exitrecv_cmd(ecid);
 	if (ret) {
 		LOG(LOG_ERROR, "Cannot exit recovery mode");
 		set_ecid_wait_for_dfu(0);
 		return NULL;
 	}
-	printf("\r\e[K");
-	bool nohome = NOHOME;
-	if (nohome) 
-		step(2, 0, "Hold Volume Down + Side button", NULL, 0);
-	else
-		step(2, 0, "Hold Home + Power Button", NULL, 0);
-	if (nohome) 
-		step(10, 0, "Hold Volume Down button", conditional, ecid);
-	else
-		step(10, 0, "Hold Home button", conditional, ecid);
-	if (get_ecid_wait_for_dfu() != ecid) {
+	printf("\r\033[K");
+	if (NOHOME) {
+		step(2, 0, "Hold volume down + side button", NULL, 0);
+		step(10, 0, "Hold volume down button", conditional, ecid);
 	} else {
+		step(2, 0, "Hold home + power button", NULL, 0);
+		step(10, 0, "Hold home button", conditional, ecid);
+	}
+	if (get_ecid_wait_for_dfu() == ecid) {
 		LOG(LOG_WARNING, "Whoops, device did not enter DFU mode");
 		LOG(LOG_INFO, "Waiting for device to reconnect...");
 		set_ecid_wait_for_dfu(0);
@@ -141,16 +171,13 @@ void* connected_recovery_mode(struct irecv_device_info* info) {
 }
 
 void* connected_dfu_mode(struct irecv_device_info* info) {
-#if defined(__APPLE__) || defined(__linux__)
-	pthread_setname_np("in.palera.dfu-mode-handler");
-#endif
 	if (get_ecid_wait_for_dfu() == info->ecid) {
 		set_ecid_wait_for_dfu(0);
 		puts("");
 		LOG(LOG_INFO, "Device entered DFU mode successfully");
 	}
-	unsubscribe_cmd();
 	set_spin(0);
+	unsubscribe_cmd();
 	pthread_exit(NULL);
 	return NULL;
 }
@@ -160,6 +187,18 @@ void device_event_cb(const usbmuxd_event_t *event, void* userdata) {
 	switch (event->event) {
 	case UE_DEVICE_ADD:
 		LOG(LOG_VERBOSE, "Normal mode device connected");
+		if ((palerain_flags & palerain_option_exit_recovery)) {
+			break;
+		} else if ((palerain_flags & palerain_option_reboot_device)) {
+			int ret = reboot_cmd(event->device.udid);
+			if (!ret) {
+				LOG(LOG_INFO, "Restarted device");
+				set_spin(0);
+				unsubscribe_cmd();
+			}
+			pthread_exit(NULL);
+			break;
+		}
 		connected_normal_mode(&event->device);
 		break;
 	case UE_DEVICE_REMOVE:
@@ -170,17 +209,85 @@ void device_event_cb(const usbmuxd_event_t *event, void* userdata) {
 
 void irecv_device_event_cb(const irecv_device_event_t *event, void* userdata) {
 	pthread_t recovery_thread, dfu_thread;
+	int ret;
 	
 	switch(event->type) {
 		case IRECV_DEVICE_ADD:
-		if (event->mode == IRECV_K_RECOVERY_MODE_1 || event->mode == IRECV_K_RECOVERY_MODE_2 || event->mode == IRECV_K_RECOVERY_MODE_3 || event->mode == IRECV_K_RECOVERY_MODE_4) {
-			LOG(LOG_VERBOSE, "Recovery mode device %ld connected", event->device_info->ecid);
-			pthread_create(&recovery_thread, NULL, (void* (*)(void*))connected_recovery_mode, event->device_info);
-		} else if (event->mode == IRECV_K_DFU_MODE) {
-			LOG(LOG_VERBOSE, "DFU mode device %ld connected", event->device_info->ecid);
-			pthread_create(&dfu_thread, NULL, (void* (*)(void*))connected_dfu_mode, event->device_info);
-		}
-		break;
+			if (event->mode == IRECV_K_RECOVERY_MODE_1 || 
+				event->mode == IRECV_K_RECOVERY_MODE_2 || 
+				event->mode == IRECV_K_RECOVERY_MODE_3 || 
+				event->mode == IRECV_K_RECOVERY_MODE_4) {
+				if (!(palerain_flags & palerain_option_device_info))
+					LOG(LOG_VERBOSE, "Recovery mode device %" PRIu64 " connected", event->device_info->ecid);
+				if ((palerain_flags & palerain_option_exit_recovery)) {
+					ret = exitrecv_cmd(event->device_info->ecid);
+					if (!ret) {
+						LOG(LOG_INFO, "Exited recovery mode");
+						device_has_booted = true;
+						set_spin(0);
+						unsubscribe_cmd();
+					} else {
+						LOG(LOG_WARNING, "Could not exit recovery mode");
+					}
+					if (dfuhelper_thr_running) pthread_cancel(dfuhelper_thread);
+					pthread_exit(NULL);
+					break;
+				}
+
+				if ((palerain_flags & palerain_option_device_info)) {
+					recvinfo_t info;
+					ret = recvinfo_cmd(&info, event->device_info->ecid);
+					if (ret) {
+						LOG(LOG_WARNING, "Could not get info from device");
+					} else {
+						printf("Mode: Recovery\n");
+						printf("ProductType: %s\n", info.product_type);
+						printf("DisplayName: %s\n", info.display_name);
+
+						device_has_booted = true;
+						set_spin(0);
+						unsubscribe_cmd();
+					}
+					if (dfuhelper_thr_running) pthread_cancel(dfuhelper_thread);
+					pthread_exit(NULL);
+					break;
+				}
+
+				if ((palerain_flags & palerain_option_enter_recovery) ||
+					(palerain_flags & palerain_option_reboot_device)) return;
+				pthread_create(&recovery_thread, NULL, (pthread_start_t)connected_recovery_mode, event->device_info);
+			} else if (event->mode == IRECV_K_DFU_MODE) {
+				if (!(palerain_flags & palerain_option_device_info))
+					LOG(LOG_VERBOSE, "DFU mode device %" PRIu64 " connected", event->device_info->ecid);
+
+				if ((palerain_flags & palerain_option_device_info)) {
+					recvinfo_t info;
+					ret = recvinfo_cmd(&info, event->device_info->ecid);
+					if (ret) {
+						LOG(LOG_WARNING, "Could not get info from device");
+					} else {
+						printf("Mode: DFU\n");
+						printf("ProductType: %s\n", info.product_type);
+						printf("DisplayName: %s\n", info.display_name);
+
+						device_has_booted = true;
+						set_spin(0);
+						unsubscribe_cmd();
+					}
+					if (dfuhelper_thr_running) pthread_cancel(dfuhelper_thread);
+					pthread_exit(NULL);
+					break;
+				}
+
+				if (
+					(palerain_flags & palerain_option_exit_recovery) ||
+					(palerain_flags & palerain_option_enter_recovery) ||
+					(palerain_flags & palerain_option_reboot_device)) {
+						break;
+				}
+				pthread_create(&dfu_thread, NULL, (pthread_start_t)connected_dfu_mode, event->device_info);
+			}
+			break;
 		case IRECV_DEVICE_REMOVE:
 			LOG(LOG_VERBOSE, "Recovery mode device disconnected");
 		break;
@@ -189,11 +296,8 @@ void irecv_device_event_cb(const irecv_device_event_t *event, void* userdata) {
 
 void *dfuhelper(void* ptr) {
 	dfuhelper_thr_running = true;
-#if defined(__APPLE__) || defined(__linux__)
-	pthread_setname_np("in.palera.dfu-helper");
-#endif
-	subscribe_cmd(device_event_cb, irecv_device_event_cb);
 	set_spin(1);
+	subscribe_cmd(device_event_cb, irecv_device_event_cb);
 	while (get_spin()) {
 		sleep(1);
 	};

src/exec_checkra1n.c

@@ -11,60 +11,186 @@
 #include <errno.h>
 #include <limits.h>
 
+#include <assert.h>
 #include <sys/types.h>
 #include <sys/wait.h>
 #include <sys/stat.h>
+#include <inttypes.h>
+#include <sys/utsname.h>
+
+#if defined(__APPLE__)
+#include <TargetConditionals.h>
+#endif
 
 extern char **environ;
 
-#include <common.h>
+#include <palerain.h>
 #include <xxd-embedded.h>
 char* pongo_path = NULL;
+bool external_pongo = false;
+char* ext_checkra1n = NULL;
 
-void exec_checkra1n() {
+#define tmpdir getenv("TMPDIR") == NULL ? "/tmp" : getenv("TMPDIR")
+
+int exec_checkra1n(void) {
 	LOG(LOG_INFO, "About to execute checkra1n");
-	int fd, ret;
-	char checkra1n_path[] = "/tmp/checkra1n.XXXXXX";
-	fd = mkstemp(checkra1n_path);
-	if (fd == -1) {
-		LOG(LOG_FATAL, "Cannot open temporary file: %d (%s)", errno, strerror(errno));
-		return;
+	int fd_checkra1n, fd_pongo, ret;
+	char* checkra1n_path = NULL;
+	if (ext_checkra1n != NULL) {
+		checkra1n_path = ext_checkra1n;
+		goto checkra1n_exec;
 	}
-	ssize_t didWrite = write(fd, checkra1n, checkra1n_len);
-	if (didWrite != (ssize_t)checkra1n_len) {
-		LOG(LOG_FATAL, "Size written does not match expected: %lld != %d: %d (%s)", didWrite, checkra1n_len, errno, strerror(errno));
-		close(fd);
+#ifndef NO_CUSTOM_PONGO
+	if (pongo_path == NULL) {
+		pongo_path = malloc(strlen(tmpdir) + 20);
+		if (pongo_path == NULL) {
+			LOG(LOG_FATAL, "memory allocation failed\n");
+			return -1;
+		}
+		snprintf(pongo_path, strlen(tmpdir) + 20, "%s/Pongo.bin.XXXXXX", tmpdir);
+		fd_pongo = mkstemp(pongo_path);
+		if (fd_pongo == -1) {
+			LOG(LOG_FATAL, "Cannot open temporary file %s: %d (%s)", pongo_path, errno, strerror(errno));
+			free(pongo_path);
+			return -1;
+		}
+		ssize_t didWrite_Pongo_bin = write(fd_pongo, Pongo_bin, Pongo_bin_len);
+		if (didWrite_Pongo_bin != (ssize_t)Pongo_bin_len) {
+			LOG(LOG_FATAL, "Size written to %s does not match expected: %zd != %" PRIu32 ": %d (%s)", pongo_path, didWrite_Pongo_bin, Pongo_bin_len, errno, strerror(errno));
+			close(fd_pongo);
+			unlink(pongo_path);
+			free(pongo_path);
+			pongo_path = NULL;
+			return -1;
+		}
+	} else external_pongo = true;
+#endif
+	checkra1n_path = malloc(strlen(tmpdir) + 20);
+	if (checkra1n_path == NULL) {
+		LOG(LOG_FATAL, "memory allocation failed\n");
+		return -1;
+	}
+	snprintf(checkra1n_path, strlen(tmpdir) + 20, "%s/checkra1n.XXXXXX", tmpdir);
+	fd_checkra1n = mkstemp(checkra1n_path);
+	if (fd_checkra1n == -1) {
+		LOG(LOG_FATAL, "Cannot open temporary file %s: %d (%s)", checkra1n_path, errno, strerror(errno));
+		free(checkra1n_path);
+		checkra1n_path = NULL;
+		return -1;
+	}
+	ssize_t didWrite_checkra1n = write(fd_checkra1n, checkra1n, checkra1n_len);
+	if (didWrite_checkra1n != (ssize_t)checkra1n_len) {
+		LOG(LOG_FATAL, "Size written to %s does not match expected: %zd != %" PRIu32 ": %d (%s)", checkra1n_path, didWrite_checkra1n, checkra1n_len, errno, strerror(errno));
+		close(fd_checkra1n);
 		unlink(checkra1n_path);
-		return;
+		free(checkra1n_path);
+		checkra1n_path = NULL;
+		return -1;
 	}
-	close(fd);
+	close(fd_checkra1n);
 	ret = chmod(checkra1n_path, 0700);
 	if (ret) {
 		LOG(LOG_FATAL, "Cannot chmod %s: %d (%s)", checkra1n_path, errno, strerror(errno));
 		unlink(checkra1n_path);
+		free(checkra1n_path);
+		checkra1n_path = NULL;
+		return -1;
 	}
-	char args[0x10] = "-pE";
-	if (demote) strncat(args, "d", 0xf);
-	if (verbose >= 2) strncat(args, "v", 0xf);
-	if (pongo_path != NULL) strncat(args, "k", 0xf); // keep this at last
+#if defined(__APPLE__) && defined(__arm64__) && (TARGET_OS_IPHONE || defined(FORCE_HELPER))
+	char* libcheckra1nhelper_dylib_path = NULL;
+	{
+		struct utsname name;
+		uname(&name);
+		unsigned long darwinMajor = strtoul(name.release, NULL, 10);
+		assert(darwinMajor != 0);
+#if !defined(FORCE_HELPER)
+		if (darwinMajor < 20) {
+#endif
+			libcheckra1nhelper_dylib_path = malloc(strlen(tmpdir) + 40);
+			if (libcheckra1nhelper_dylib_path == NULL) {
+				LOG(LOG_FATAL, "memory allocation failed\n");
+				return -1;
+			}
+			snprintf(libcheckra1nhelper_dylib_path, strlen(tmpdir) + 40, "%s/libcheckra1nhelper.dylib.XXXXXX", tmpdir);
+			int helper_fd = mkstemp(libcheckra1nhelper_dylib_path);
+			if (helper_fd == -1) {
+				LOG(LOG_FATAL, "Cannot open temporary file: %d (%s)", errno, strerror(errno));
+				return -1;
+			}
+			ssize_t didWrite_libcheckra1nhelper = write(helper_fd, libcheckra1nhelper_dylib, libcheckra1nhelper_dylib_len);
+			if ((unsigned int)didWrite_libcheckra1nhelper != libcheckra1nhelper_dylib_len) {
+				LOG(LOG_FATAL, "Size written does not match expected: %zd != %" PRIu32 ": %d (%s)", didWrite_libcheckra1nhelper, libcheckra1nhelper_dylib_len, errno, strerror(errno));
+				close(helper_fd);
+				unlink(libcheckra1nhelper_dylib_path);
+				return -1;
+			}
+			close(helper_fd);
+			ret = chmod(libcheckra1nhelper_dylib_path, 0700);
+			if (ret) {
+				LOG(LOG_FATAL, "Cannot chmod %s: %d (%s)", libcheckra1nhelper_dylib_path, errno, strerror(errno));
+				unlink(libcheckra1nhelper_dylib_path);
+				return -1;
+			}
+			setenv("DYLD_INSERT_LIBRARIES", libcheckra1nhelper_dylib_path, 1);
+#if !defined(FORCE_HELPER)
+		}
+#endif
+	}
+#endif
+checkra1n_exec: {};
+	char args[0x10] = "-E";
+	if ((palerain_flags & palerain_option_demote)) strncat(args, "d", 0xf);
+	if (!(palerain_flags & palerain_option_checkrain_is_clone)) {
+		strncat(args, "p", 0xf);
+		if (verbose >= 2) strncat(args, "v", 0xf);
+		if ((palerain_flags & palerain_option_no_colors)) strncat(args, "n", 0xf);
+	} else {
+		strncat(args, "R", 0xf);
+	}
+	LOG(LOG_VERBOSE5, args);
+	if (pongo_path != NULL) LOG(LOG_VERBOSE5, pongo_path);
 	pid_t pid;
-	char* checkra1n_argv[] = {
-		checkra1n_path,
-		args,
-		pongo_path,
-		NULL
-	};
-	ret = posix_spawn(&pid, checkra1n_path, NULL, NULL, checkra1n_argv, environ);
-	if (pongo_path != NULL) free(pongo_path);
-	pongo_path = NULL;
+	if (pongo_path != NULL) {
+		ret = posix_spawn(&pid, checkra1n_path, NULL, NULL, (char* []){
+			checkra1n_path,
+			args,
+			"-k",
+			pongo_path,
+			NULL
+		}, environ);
+	} else {
+		ret = posix_spawn(&pid, checkra1n_path, NULL, NULL, (char* []){
+			checkra1n_path,
+			args,
+			NULL
+		}, environ);
+	}
 	if (ret) {
 		LOG(LOG_FATAL, "Cannot posix spawn %s: %d (%s)", checkra1n_path, errno, strerror(errno));
-		unlink(checkra1n_path);
-		return;
+		if (ext_checkra1n != NULL) unlink(checkra1n_path);
+		return -1;
 	}
 	LOG(LOG_VERBOSE2, "%s spawned successfully", checkra1n_path);
 	sleep(2);
-	unlink(checkra1n_path);
+	if (ext_checkra1n == NULL) {
+		unlink(checkra1n_path);
+		free(checkra1n_path);
+		checkra1n_path = NULL;
+	}
 	waitpid(pid, NULL, 0);
-	return;
+		if (!external_pongo && pongo_path != NULL) {
+		unlink(pongo_path);
+	}
+	if (pongo_path != NULL) free(pongo_path);
+	pongo_path = NULL;
+#if defined(__APPLE__) && defined(__arm64__) && (TARGET_OS_IPHONE || defined(FORCE_HELPER))
+	if (libcheckra1nhelper_dylib_path != NULL) {
+		unlink(libcheckra1nhelper_dylib_path);
+		unsetenv("DYLD_INSERT_LIBRARIES");
+		unsetenv("DYLD_FORCE_FLAT_NAMESPACE");
+		free(libcheckra1nhelper_dylib_path);
+		libcheckra1nhelper_dylib_path = NULL;
+	}
+#endif
+	return 0;
 }

src/fake_embedded.c

@@ -0,0 +1,26 @@
+#include <stdlib.h>
+
+#ifdef NO_KPF
+unsigned char* checkra1n_kpf_pongo_lzma = NULL;
+unsigned int checkra1n_kpf_pongo_lzma_len = 0;
+#endif
+
+#ifdef NO_RAMDISK
+unsigned char* ramdisk_dmg_lzma = NULL;
+unsigned int ramdisk_dmg_lzma_len = 0;
+#endif
+
+#ifdef NO_CHECKRAIN
+unsigned char* checkra1n = NULL;
+unsigned int checkra1n_len = 0;
+#endif
+
+#ifdef NO_OVERLAY
+unsigned char* binpack_dmg = NULL;
+unsigned int binpack_dmg_len = 0;
+#endif
+
+#ifdef NO_CUSTOM_PONGO
+unsigned char* Pongo_bin = NULL;
+unsigned int Pongo_bin_len = 0;
+#endif

src/gen/.gitignore

@@ -0,0 +1 @@
+*.o

src/gen/resources

@@ -0,0 +1 @@
+.

src/lock_vars.c

@@ -25,52 +25,53 @@
 #include <libimobiledevice/libimobiledevice.h>
 
 #include <ANSI-color-codes.h>
-#include <common.h>
+#include <palerain.h>
 #include <xxd-embedded.h>
-#include <kerninfo.h>
+#include <paleinfo.h>
 
 pthread_mutex_t spin_mutex, found_pongo_mutex, ecid_dfu_wait_mutex;
+#ifdef TUI
+#include <newt.h>
+pthread_mutex_t tui_log_mutex;
+newtComponent tui_log_output = NULL;
+#endif
 
 bool spin, found_pongo = 0;
 uint64_t ecid_wait_for_dfu = 0;
 
-bool get_spin() {
-    LOG(LOG_VERBOSE5, "locking spin mutex for get");
-    pthread_mutex_lock(&spin_mutex);
-    bool ret = spin;
-    LOG(LOG_VERBOSE5, "UN-locking spin mutex, spin value is %d", spin);
-    pthread_mutex_unlock(&spin_mutex);
+static bool get_locked_bool(bool* val, pthread_mutex_t* mutex) {
+    // fprintf(stderr, "%s: val = %p mutex = %p\n", __func__, (void*)val, (void*)mutex);
+    pthread_mutex_lock(mutex);
+    bool ret = *val;
+    pthread_mutex_unlock(mutex);
     return ret;
 }
 
-bool set_spin(bool val) {
-    LOG(LOG_VERBOSE5, "locking spin mutex for set spin = %d", val);
-    pthread_mutex_lock(&spin_mutex);
-    spin = val;
-    LOG(LOG_VERBOSE5, "UN-locking spin mutex after setting spin\n");
-    pthread_mutex_unlock(&spin_mutex);
-    return val;
+static bool set_locked_bool(bool* val, bool newval, pthread_mutex_t* mutex) {
+    // fprintf(stderr, "%s: val = %p mutex = %p, newval = %d\n", __func__, (void*)val, (void*)mutex, newval);
+    pthread_mutex_lock(mutex);
+    *val = newval;
+    pthread_mutex_unlock(mutex);
+    return newval;
 }
 
-bool get_found_pongo() {
-    LOG(LOG_VERBOSE5, "locking found pongo mutex for get");
-    pthread_mutex_lock(&found_pongo_mutex);
-    bool ret = found_pongo;
-    LOG(LOG_VERBOSE5, "UN-locking pongo mutex, found_pongo value is %d", found_pongo);
-    pthread_mutex_unlock(&found_pongo_mutex);
-    return ret;
+bool get_spin(void) {
+    return get_locked_bool(&spin, &spin_mutex);
+}
+
+bool set_spin(bool newval) {
+    return set_locked_bool(&spin, newval, &spin_mutex);
+}
+
+bool get_found_pongo(void) {
+   return get_locked_bool(&found_pongo, &found_pongo_mutex);
 }
 
 bool set_found_pongo(bool val) {
-    LOG(LOG_VERBOSE5, "locking found pongo mutex for set found_pongo = %d", val);
-    pthread_mutex_lock(&found_pongo_mutex);
-    found_pongo = val;
-    LOG(LOG_VERBOSE5, "UN-locking pongo mutex after setting found_pongo");
-    pthread_mutex_unlock(&found_pongo_mutex);
-    return val;
+    return set_locked_bool(&found_pongo, val, &found_pongo_mutex);
 }
 
-uint64_t get_ecid_wait_for_dfu() {
+uint64_t get_ecid_wait_for_dfu(void) {
     LOG(LOG_VERBOSE5, "locking ecid wait for dfu mutex for get");
     pthread_mutex_lock(&ecid_dfu_wait_mutex);
     uint64_t ret = ecid_wait_for_dfu;
@@ -80,10 +81,26 @@ uint64_t get_ecid_wait_for_dfu() {
 }
 
 uint64_t set_ecid_wait_for_dfu(uint64_t ecid) {
-    LOG(LOG_VERBOSE5, "locking ecid wait for dfu value for set ecid_wait_for_dfu = %llu", ecid);
+    LOG(LOG_VERBOSE5, "locking ecid wait for dfu mutex for set ecid_wait_for_dfu = %llu", ecid);
     pthread_mutex_lock(&ecid_dfu_wait_mutex);
     ecid_wait_for_dfu = ecid;
     LOG(LOG_VERBOSE5, "UN-locking ecid wait for dfu mutex afrer setting ecid_wait_for_dfu");
     pthread_mutex_unlock(&ecid_dfu_wait_mutex);
     return ecid;
 }
+
+#ifdef TUI
+newtComponent get_tui_log(void) {
+    pthread_mutex_lock(&tui_log_mutex);
+    newtComponent ret = tui_log_output;
+    pthread_mutex_unlock(&tui_log_mutex);
+    return ret;
+}
+
+newtComponent set_tui_log(newtComponent co) {
+    pthread_mutex_lock(&tui_log_mutex);
+    tui_log_output = co;
+    pthread_mutex_unlock(&tui_log_mutex);
+    return co;
+}
+#endif

src/lockdown_helper.c

@@ -1,255 +0,0 @@
-#ifndef HAVE_LIBIMOBILEDEVICE
-#include "lockdown_helper.h"
-#include <usbmuxd.h>
-#include <arpa/inet.h>
-#include <errno.h>
-#include <stdlib.h>
-#include <stdio.h>
-#include <string.h>
-#include <unistd.h>
-
-#ifdef DEBUG
-#define log_debug(...) fprintf(stderr, __VA_ARGS__); fputc('\n', stderr)
-#else
-#define log_debug(...)
-#endif
-#define log_error(...) fprintf(stderr, __VA_ARGS__); fputc('\n', stderr)
-
-int lockdown_connect_handle(uint32_t handle)
-{
-	int fd = usbmuxd_connect(handle, 62078);
-	if (fd < 0) {
-		log_debug("Can't connect to lockownd on device #%u", handle);
-		return fd;
-	}
-	return fd;
-}
-
-int lockdown_connect_udid(const char* udid)
-{
-	usbmuxd_device_info_t device;
-	if (usbmuxd_get_device_by_udid(udid, &device) < 0) {
-		log_debug("Can't find device %s", udid);
-		return -ENOENT;
-	}
-	return lockdown_connect_handle(device.handle);
-}
-
-void lockdown_disconnect(int fd)
-{
-	usbmuxd_disconnect(fd);
-}
-
-int lockdown_check_type(int fd, const char* type_match);
-
-static const char QUERY_TYPE_REQUEST[] = "____<plist version=\"1.0\"><dict><key>Label</key><string>palera1n</string><key>Request</key><string>QueryType</string></dict></plist>";
-static const char GET_VALUE_DOMAIN_REQUEST_FMT[] = "____<plist version=\"1.0\"><dict><key>Label</key><string>palera1n</string><key>Domain</key><string>%s</string><key>Key</key><string>%s</string><key>Request</key><string>GetValue</string></dict></plist>";
-static const char GET_VALUE_REQUEST_FMT[] = "____<plist version=\"1.0\"><dict><key>Label</key><string>palera1n</string><key>Key</key><string>%s</string><key>Request</key><string>GetValue</string></dict></plist>";
-static const char VALUE_KEY_NODE[] = "<key>Value</key>";
-static const char INTEGER_NODE[] = "<integer>";
-static const char STRING_NODE[] = "<string>";
-static const char ENTER_RECOVERY_REQUEST[] = "____<plist version=\"1.0\"><dict><key>Label</key><string>palera1n</string><key>Request</key><string>EnterRecovery</string></dict></plist>";
-static const char ERROR_KEY_NODE[] = "<key>Error</key>";
-static const char ENTER_RECOVERY_STRING_NODE[] = "<string>EnterRecovery</string>";
-static const int VALUE_KEY_NODE_SIZE = sizeof(VALUE_KEY_NODE)-1;
-static const int INTEGER_NODE_SIZE = sizeof(INTEGER_NODE)-1;
-static const int STRING_NODE_SIZE = sizeof(STRING_NODE)-1;
-static const int ERROR_KEY_NODE_SIZE = sizeof(ERROR_KEY_NODE)-1;
-
-static void skip_ws(char** cur, char* end)
-{
-    char* p = *cur;
-    while (p < end && ((*p == ' ') || (*p == '\t') || (*p == '\r') || (*p == '\n'))) {
-        p++;
-    }
-    *cur = p;
-}
-
-static char* _send_request_and_get_reply(int fd, const char* request, uint32_t len, uint32_t* received)
-{
-	uint32_t sent_bytes = 0;
-	usbmuxd_send(fd, request, len, &sent_bytes);
-	if (sent_bytes != len) {
-		usbmuxd_disconnect(fd);
-		log_error("Failed to send data payload");
-		return NULL;
-	}
-
-	uint32_t recv_bytes = 0;
-	uint32_t besize = 0;
-	int r = usbmuxd_recv(fd, (char*)&besize, sizeof(besize), &recv_bytes);
-	if (recv_bytes != sizeof(besize)) {
-		usbmuxd_disconnect(fd);
-		log_error("Failed to get size of packet (%d)", r);
-		return NULL;
-	}
-
-	uint32_t resp_size = ntohl(besize);
-	char* resp = (char*)malloc(resp_size+1);
-
-	recv_bytes = 0;
-	usbmuxd_recv(fd, resp, resp_size, &recv_bytes);
-	if (recv_bytes != resp_size) {
-		usbmuxd_disconnect(fd);
-		free(resp);
-		log_error("Failed to receive payload");
-		return NULL;
-	}
-	resp[resp_size] = '\0';
-	*received = resp_size;
-	return resp;
-}
-
-int lockdown_check_type(int fd, const char* type_match)
-{
-	unsigned char tmp[512];
-	uint32_t len = (uint32_t)snprintf((char*)tmp, 512, QUERY_TYPE_REQUEST);
-	uint32_t belen = htonl(len-4);
-	*(uint32_t*)tmp = belen;
-	uint32_t resp_size = 0;
-	char* resp = _send_request_and_get_reply(fd, (char*)tmp, len, &resp_size);
-	if (!resp) {
-		log_error("Failed to get lockdown type");
-		return -1;
-	}
-
-	int result = (strstr(resp, type_match) == NULL) ? -1 : 0;
-	free(resp);
-
-	return result;
-}
-
-int lockdown_get_uint_value(int fd, const char* domain, const char* key, uint64_t* value)
-{
-	char tmp[1024];
-	uint32_t len;
-	if (domain) {
-		len = snprintf(tmp, 1024, GET_VALUE_DOMAIN_REQUEST_FMT, domain, key);
-	} else {
-		len = snprintf(tmp, 1024, GET_VALUE_REQUEST_FMT, key);
-	}
-	*(uint32_t*)&tmp = htonl(len-4);
-
-	uint32_t resp_size = 0;
-	char* resp = _send_request_and_get_reply(fd, tmp, len, &resp_size);
-	if (!resp) {
-		log_error("Failed to get value for key %s", key);
-		return -1;
-	}
-
-	char* p = strstr(resp, VALUE_KEY_NODE);
-	if (!p) {
-		log_debug("Failed to get Value key node?!");
-		return -1;
-	}
-	p += VALUE_KEY_NODE_SIZE;
-	skip_ws(&p, resp+resp_size);
-	if (p >= resp+resp_size) {
-		log_debug("Failed to get value node");
-		return -1;
-	}
-	if (strncmp(p, INTEGER_NODE, INTEGER_NODE_SIZE) != 0) {
-		log_debug("Failed to parse value node");
-		return -1;
-	}
-	p += INTEGER_NODE_SIZE;
-	*value = (uint64_t)strtoll(p, NULL, 10);
-	free(resp);
-
-	return 0;
-}
-
-int lockdown_get_string_value(int fd, const char* domain, const char* key, char** value)
-{
-	char tmp[1024];
-	uint32_t len;
-	if (domain) {
-		len = snprintf(tmp, 1024, GET_VALUE_DOMAIN_REQUEST_FMT, domain, key);
-	} else {
-		len = snprintf(tmp, 1024, GET_VALUE_REQUEST_FMT, key);
-	}
-	*(uint32_t*)&tmp = htonl(len-4);
-
-	uint32_t resp_size = 0;
-	char* resp = _send_request_and_get_reply(fd, tmp, len, &resp_size);
-	if (!resp) {
-		log_error("Failed to get value for key %s", key);
-		return -1;
-	}
-
-	char* p = strstr(resp, VALUE_KEY_NODE);
-	if (!p) {
-		log_debug("Failed to get Value key node?!");
-		free(resp);
-		return -1;
-	}
-	p += VALUE_KEY_NODE_SIZE;
-	skip_ws(&p, resp+resp_size);
-	if (p >= resp+resp_size) {
-		log_debug("Failed to get value node");
-		free(resp);
-		return -1;
-	}
-	if (strncmp(p, STRING_NODE, STRING_NODE_SIZE) != 0) {
-		log_debug("Failed to parse value node");
-		free(resp);
-		return -1;
-	}
-	p += STRING_NODE_SIZE;
-	char* str_start = p;
-	while (*p != '<' && *p != '\0') p++;
-	if (*p == '\0') {
-		log_debug("Failed to parse string value node");
-		free(resp);
-		return -1;
-	}
-	size_t str_len = p - str_start;
-	*value = (char*)malloc(str_len + 1);
-	strncpy(*value, str_start, str_len);
-	(*value)[str_len] = '\0';
-	free(resp);
-
-	return 0;
-}
-
-int lockdown_enter_recovery(int fd)
-{
-	char tmp[512];
-	uint32_t len = (uint32_t)snprintf(tmp, 512, ENTER_RECOVERY_REQUEST);
-	*(uint32_t*)&tmp = htonl(len-4);
-	uint32_t resp_size = 0;
-	char* resp = _send_request_and_get_reply(fd, tmp, len, &resp_size);
-	if (!resp) {
-		log_error("Failed to enter recover?");
-		return -1;
-	}
-
-	int result = -1;
-	char* p = strstr(resp, ERROR_KEY_NODE);
-	if (p) {
-		char* str_start = NULL;
-		size_t str_len = 0;
-		p += ERROR_KEY_NODE_SIZE;
-		skip_ws(&p, resp+resp_size);
-		if (*p && !strncmp(p, STRING_NODE, STRING_NODE_SIZE)) {
-			p += STRING_NODE_SIZE;
-			str_start = p;
-			while (*p != '<' && *p != '\0') p++;
-			if (*p == '<') {
-				str_len = p - str_start;
-			}
-		}
-		if (str_start && str_len > 0) {
-			log_error("ERROR: Failed to make device enter recovery mode: %.*s", (int)str_len, str_start);
-		} else {
-			log_error("ERROR: Failed to make device enter recovery mode: (unknown error)");
-		}
-		result = -2;
-	} else {
-		result = (strstr(resp, ENTER_RECOVERY_STRING_NODE) == NULL) ? -1 : 0;
-	}
-	free(resp);
-	return result;
-}
-
-#endif

src/lockdown_helper.h

@@ -1,30 +0,0 @@
-#ifndef __LOCKDOWN_HELPER_H
-#define __LOCKDOWN_HELPER_H
-
-#ifndef HAVE_LIBIMOBILEDEVICE
-
-#include <stdint.h>
-
-#ifdef __cplusplus
-extern "C" {
-#endif
-
-int lockdown_connect_udid(const char* udid);
-int lockdown_connect_handle(uint32_t handle);
-
-void lockdown_disconnect(int fd);
-
-int lockdown_check_type(int fd, const char* type_match);
-
-int lockdown_get_uint_value(int fd, const char* domain, const char* key, uint64_t* value);
-int lockdown_get_string_value(int fd, const char* domain, const char* key, char** value);
-
-int lockdown_enter_recovery(int fd);
-
-#ifdef __cplusplus
-}
-#endif
-
-#endif
-
-#endif

src/log.c

@@ -6,11 +6,15 @@
 #include <assert.h>
 
 #include <ANSI-color-codes.h>
-#include <common.h>
+#include <palerain.h>
 
-int p1_log(log_level_t loglevel, const char *fname, int lineno, const char *fxname, char *__restrict format, ...)
+int p1_log(log_level_t loglevel, const char *fname, int lineno, const char *fxname, const char *__restrict format, ...)
 {
-    if (verbose >= 5) fprintf(stderr, "p1_log: loglevel %d from %s:%d:%s()\n", loglevel, fname, lineno, fxname);
+    if (verbose >= 5 
+#ifdef TUI
+	&& !(palerain_flags & palerain_option_tui)
+#endif
+	) fprintf(stderr, "p1_log: loglevel %d from %s:%d:%s()\n", loglevel, fname, lineno, fxname);
 	int ret = 0;
 	char type[0x10];
 	char colour[0x10];
@@ -18,7 +22,11 @@ int p1_log(log_level_t loglevel, const char *fname, int lineno, const char *fxna
 	va_list args;
 	va_start(args, format);
 	if (verbose < (loglevel - 3) && loglevel > LOG_INFO) {
-        if (verbose >= 5) fprintf(stderr, "p1_log: hid log with high log level (%d < %d)\n", verbose, loglevel - 3);
+        if (verbose >= 5
+#ifdef TUI
+		&& !tui_started
+#endif
+) fprintf(stderr, "p1_log: hid log with high log level (%d < %d)\n", verbose, loglevel - 3);
         return 0;
     }
 	switch (loglevel) {
@@ -49,28 +57,55 @@ int p1_log(log_level_t loglevel, const char *fname, int lineno, const char *fxna
 		snprintf(colour_bold, 0x10, "%s", BWHT);
 		break;
 	}
-    pthread_mutex_lock(&log_mutex);
-	char timestring[0x80];
-	time_t curtime;
-	time(&curtime);
-	struct tm* timeinfo = localtime(&curtime);
-	snprintf(timestring, 0x80, "%s[%s%02d/%02d/%d %02d:%02d:%02d%s]", CRESET, HBLK, timeinfo->tm_mon + 1, timeinfo->tm_mday, timeinfo->tm_year - 100, timeinfo->tm_hour, timeinfo->tm_min, timeinfo->tm_sec, CRESET);
-	if (verbose >= 2) {
-		printf("%s| - %s%s <%s> " CRESET "%s" HBLU "%s" CRESET ":" BLU "%d" CRESET ":" BMAG "%s()" CRESET ": \n%s| ----> ", colour_bold, timestring, colour_bold, type, WHT, fname, lineno, fxname, colour_bold);
-	} else {
-		printf(" - %s %s<%s>%s: ", timestring, colour_bold, type, CRESET);
+	if ((palerain_flags & palerain_option_no_colors)) {
+		colour[0] = '\0';
+		colour_bold[0] = '\0';
 	}
-	printf("%s", colour);
-	ret = vprintf(format, args);
-	va_end(args);
+#ifdef TUI
+	if ((palerain_flags & palerain_option_tui) && tui_started) {
+		newtComponent co = get_tui_log();
+		if (co == NULL) {
+			return 0; /* 0 bytes printed */
+		}
+		char printbuf[0x200];
+		ret = vsnprintf(printbuf, 0x200, format, args);
+	    pthread_mutex_lock(&log_mutex);
+		newtTextboxSetText(co, printbuf);
+	} else
+#endif
+	{
+		pthread_mutex_lock(&log_mutex);
+		char timestring[0x80];
+		time_t curtime;
+		time(&curtime);
+		struct tm* timeinfo = localtime(&curtime);
+		if (!(palerain_flags & palerain_option_no_colors))
+			snprintf(timestring, 0x80, "%s[%s%02d/%02d/%d %02d:%02d:%02d%s]", CRESET, HBLK, timeinfo->tm_mon + 1, timeinfo->tm_mday, timeinfo->tm_year - 100, timeinfo->tm_hour, timeinfo->tm_min, timeinfo->tm_sec, CRESET);
+		else
+			snprintf(timestring, 0x80, "[%02d/%02d/%d %02d:%02d:%02d]", timeinfo->tm_mon + 1, timeinfo->tm_mday, timeinfo->tm_year - 100, timeinfo->tm_hour, timeinfo->tm_min, timeinfo->tm_sec);
+		if (verbose >= 2 && !(palerain_flags & palerain_option_no_colors)) {
+			printf("%s| - %s%s <%s> " CRESET "%s" HBLU "%s" CRESET ":" BLU "%d" CRESET ":" BMAG "%s()" CRESET ": \n%s| ----> ", colour_bold, timestring, colour_bold, type, WHT, fname, lineno, fxname, colour_bold);
+		} else if (!(palerain_flags & palerain_option_no_colors)) {
+			printf(" - %s %s<%s>%s: ", timestring, colour_bold, type, CRESET);
+		} else if (verbose >= 2 && (palerain_flags & palerain_option_no_colors)) {
+			printf("%s| - %s%s <%s> %s:%d:%s(): \n%s| ----> ", colour_bold, timestring, colour_bold, type, fname, lineno, fxname, colour_bold);
+		} else if ((palerain_flags & palerain_option_no_colors)) {
+			printf(" - %s %s<%s>: ", timestring, colour_bold, type);
+		}
+		printf("%s", colour);
+		ret = vprintf(format, args);
+		va_end(args);
 	
-	if (verbose < 2)
-		printf(CRESET "\n");
-	else {
-		printf("\n%s-%s\n", colour, CRESET);
+		if (verbose < 2 && !(palerain_flags & palerain_option_no_colors))
+			printf(CRESET "\n");
+		else if (!(palerain_flags & palerain_option_no_colors))
+			printf("\n%s-%s\n", colour, CRESET);
+		else if (verbose < 2) 
+			printf("\n");
+		else 
+			printf("\n%s-\n", colour);
+		fflush(stdout);
 	}
-
-	fflush(stdout);
-    pthread_mutex_unlock(&log_mutex);
+	pthread_mutex_unlock(&log_mutex);
 	return ret;
-}
+}

src/main.c

@@ -7,6 +7,7 @@
 #include <unistd.h>
 #include <stdarg.h>
 #include <ctype.h>
+#include <limits.h>
 #include <assert.h>
 
 #include <sys/select.h>
@@ -16,7 +17,6 @@
 #include <signal.h>
 #include <pthread.h>
 #include <inttypes.h>
-#include <getopt.h>
 #include <errno.h>
 #include <spawn.h>
 #include <sys/mman.h>
@@ -25,23 +25,21 @@
 #include <libimobiledevice/libimobiledevice.h>
 
 #include <ANSI-color-codes.h>
-#include <common.h>
+#include <palerain.h>
 #include <xxd-embedded.h>
-#include <kerninfo.h>
+#include <paleinfo.h>
 
 #define CMD_LEN_MAX 512
 #define OVERRIDE_MAGIC 0xd803b376
 
 unsigned int verbose = 0;
-int enable_rootful = 0, demote = 0;
-bool ohio = true;
-char xargs_cmd[0x270] = "xargs", checkrain_flags_cmd[0x20] = "deadbeef", palerain_flags_cmd[0x20] = "deadbeef";
-char kpf_flags_cmd[0x20] = "deadbeef", dtpatch_cmd[0x20] = "deadbeef", rootfs_cmd[512] = "deadbeef";
+/* we want to write to them so don't use string literals */
+char xargs_cmd[0x270] = { 'x', 'a', 'r', 'g', 's', '\0' }, 
+	palerain_flags_cmd[0x30] = { 'd', 'e', 'a', 'd', 'b', 'e', 'e', 'f', '\0' };
 extern char** environ;
-typedef unsigned char niarelap_file_t[];
 
-niarelap_file_t* kpf_to_upload_1 = &checkra1n_kpf_pongo;
-niarelap_file_t* ramdisk_to_upload_1 = &ramdisk_dmg;
+niarelap_file_t* kpf_to_upload_1 = &checkra1n_kpf_pongo_lzma;
+niarelap_file_t* ramdisk_to_upload_1 = &ramdisk_dmg_lzma;
 niarelap_file_t* overlay_to_upload_1 = &binpack_dmg;
 
 niarelap_file_t** kpf_to_upload = &kpf_to_upload_1;
@@ -50,7 +48,7 @@ niarelap_file_t** overlay_to_upload = &overlay_to_upload_1;
 
 override_file_t override_ramdisk, override_kpf, override_overlay;
 
-uint32_t checkrain_flags = 0, palerain_flags = 0, kpf_flags = 0;
+uint64_t palerain_flags = 0;
 
 pthread_mutex_t log_mutex;
 pthread_t dfuhelper_thread, pongo_thread;
@@ -59,7 +57,8 @@ void thr_cleanup(void* ptr) {
 	*(int*)ptr = 0;
 }
 
-int build_checks() {
+int build_checks(void) {
+#ifndef NO_CHECKRAIN
 #if defined(__APPLE__)
 	struct mach_header_64* c1_header = (struct mach_header_64*)&checkra1n[0];
 	if (c1_header->magic != MH_MAGIC_64 && c1_header->magic != MH_CIGAM_64) {
@@ -67,57 +66,81 @@ int build_checks() {
 		return -1;
 	}
 	if (c1_header->cputype != _mh_execute_header.cputype) {
-		LOG(LOG_FATAL, "Broken build: checkra1n CPU type is not the same as %s CPU type", getprogname());
+		LOG(LOG_FATAL, "Broken build: checkra1n CPU type does not match palera1n CPU type");
 		return -1;
 	}
 #endif
-	struct mach_header_64 *kpf_hdr = (struct mach_header_64 *)checkra1n_kpf_pongo;
-	if (kpf_hdr->magic != MH_MAGIC_64 && kpf_hdr->magic != MH_CIGAM_64) {
-		LOG(LOG_FATAL, "Broken build: Invalid kernel patchfinder: Not thin 64-bit Mach-O");
-		return -1;
-	} else if (kpf_hdr->filetype != MH_KEXT_BUNDLE) {
-		LOG(LOG_FATAL, "Broken build: Invalid kernel patchfinder: Not a kext bundle");
-		return -1;
-	} else if (kpf_hdr->cputype != CPU_TYPE_ARM64) {
-		LOG(LOG_FATAL, "Broken build: Invalid kernel patchfinder: CPU type is not arm64");
-		return -1;
+	if (checkra1n_len <= (UCHAR_MAX + 1)) {
+		LOG(LOG_FATAL, "checkra1n too small");
 	}
+	if (boyermoore_horspool_memmem(&checkra1n[0], checkra1n_len, (const unsigned char *)"[ra1npoc15-part] thanks to", strlen("[ra1npoc15-part] thanks to")) != NULL) {
+		palerain_flags |= palerain_option_checkrain_is_clone;
+	}
+#endif
 	return 0;
 }
 
-bool dfuhelper_only = false, pongo_exit = false, palerain_version = false;
-#ifdef DEV_BUILD
-bool use_tui = false;
+#ifdef TUI
+bool tui_started = false;
+#endif
+
+#ifdef USE_LIBUSB
+void log_cb(libusb_context *ctx, enum libusb_log_level level, const char *str) {
+    LOG(level + 0, str);
+}
 #endif
 
 int palera1n(int argc, char *argv[]) {
+	print_credits();
 	int ret = 0;
-#if defined(__APPLE__) || defined(__linux__)
-	pthread_setname_np("in.palera.main-thread");
-#endif
 	pthread_mutex_init(&log_mutex, NULL);
 	pthread_mutex_init(&spin_mutex, NULL);
 	pthread_mutex_init(&found_pongo_mutex, NULL);
 	pthread_mutex_init(&ecid_dfu_wait_mutex, NULL);
 	if ((ret = build_checks())) return ret;
 	if ((ret = optparse(argc, argv))) goto cleanup;
-	if (palerain_version) goto normal_exit;
-#ifdef DEV_BUILD
-	if (use_tui) {
+	if (!(palerain_flags & palerain_option_device_info) && (palerain_flags & palerain_option_palerain_version)) goto normal_exit;
+#ifdef TUI
+	if ((palerain_flags & palerain_option_tui)) {
 		ret = tui();
 		if (ret) goto cleanup;
 		else goto normal_exit;
 	}
 #endif
-	LOG(LOG_INFO, "Waiting for devices");
+#ifdef USE_LIBUSB
+	{
+		libusb_set_log_cb(NULL, log_cb, LIBUSB_LOG_CB_GLOBAL);
+		libusb_context* ctx = NULL;
+		int test_libusb = libusb_init(&ctx);
+		if (test_libusb) {
+			LOG(LOG_ERROR, "cannot initialize libusb: %d (%s)\n", test_libusb, libusb_strerror(test_libusb));
+			libusb_exit(ctx);
+			goto cleanup;
+		}
+	libusb_exit(ctx);
+	}
+#endif
+
+	if (!(palerain_flags & palerain_option_device_info))
+		LOG(LOG_INFO, "Waiting for devices");
+
+	if (getenv("USBMUXD_SOCKET_ADDRESS") == NULL && access("/var/run/usbmuxd", F_OK) != 0) 
+		LOG(LOG_WARNING, "/var/run/usbmuxd not found, normal mode device detection will not work.");
+	
 	pthread_create(&pongo_thread, NULL, pongo_helper, NULL);
 	pthread_create(&dfuhelper_thread, NULL, dfuhelper, NULL);
 	pthread_join(dfuhelper_thread, NULL);
 	set_spin(0);
-	if (dfuhelper_only || device_has_booted)
+	if ((palerain_flags & (palerain_option_dfuhelper_only | 
+											  palerain_option_reboot_device  | 
+											  palerain_option_exit_recovery  | 
+											  palerain_option_enter_recovery | 
+											  palerain_option_device_info)
+								 ) || device_has_booted)
 		goto normal_exit;
-	exec_checkra1n();
-	if (pongo_exit || demote)
+	if (exec_checkra1n()) goto cleanup;
+
+	if ((palerain_flags & (palerain_option_pongo_exit | palerain_option_demote)))
 		goto normal_exit;
 	set_spin(1);
 	sleep(2);
@@ -128,27 +151,6 @@ int palera1n(int argc, char *argv[]) {
 		sleep(1);
 	}
 normal_exit:
-	if (access("/usr/bin/curl", F_OK) == 0 && ohio) {
-		LOG(LOG_VERBOSE4, "Ohio");
-		char* ohio_argv[] = {
-			"/usr/bin/curl",
-			"-sX",
-			"POST",
-			"-d",
-			"{\"app_name\": \"palera1n_c-rewrite\"}",
-			"-H",
-			"Content-Type: application/json",
-			"-H",
-			"User-Agent: python-requests/99 palera1n-c-rewrite/0",
-			"-o",
-			"/dev/null",
-			"https://ohio.itsnebula.net/hit",
-			NULL
-		};
-		pid_t pid;
-		posix_spawn(&pid, ohio_argv[0], NULL, NULL, ohio_argv, environ);
-	}
-
 cleanup:
 	if (override_kpf.magic == OVERRIDE_MAGIC) {
 		munmap(override_kpf.ptr, (size_t)override_kpf.len);
@@ -162,6 +164,7 @@ cleanup:
 		munmap(override_overlay.ptr, (size_t)override_overlay.len);
 		close(override_overlay.fd);
 	}
+	if (ext_checkra1n != NULL) free(ext_checkra1n);
 	pthread_mutex_destroy(&log_mutex);
 	pthread_mutex_destroy(&spin_mutex);
 	pthread_mutex_destroy(&found_pongo_mutex);

src/obj/.gitignore

@@ -0,0 +1 @@
+*.o

src/obj/gen

@@ -0,0 +1 @@
+.

src/optparse.c

@@ -9,13 +9,19 @@
 #include <ctype.h>
 #include <assert.h>
 #include <getopt.h>
+#include <limits.h>
 #include <errno.h>
-#include <common.h>
+#include <palerain.h>
+#include <sys/mman.h>
+#include <inttypes.h>
 
+uint64_t* palerain_flags_p = &palerain_flags;
+static bool force_use_verbose_boot = false;
 
 static struct option longopts[] = {
+	{"setup-partial-fakefs", no_argument, NULL, 'B'},
 	{"setup-fakefs", no_argument, NULL, 'c'},
-	{"setup-fakefs-forced", no_argument, NULL, 'C'},
+	{"clean-fakefs", no_argument, NULL, 'c'},
 	{"dfuhelper", no_argument, NULL, 'D'},
 	{"help", no_argument, NULL, 'h'},
 	{"pongo-shell", no_argument, NULL, 'p'},
@@ -25,17 +31,25 @@ static struct option longopts[] = {
 	{"boot-args", required_argument, NULL, 'e'},
 	{"fakefs", no_argument, NULL, 'f'},
 	{"rootless", no_argument, NULL, 'l'},
-	{"jbinit-log-to-file", no_argument, NULL, 'L'},
 	{"demote", no_argument, NULL, 'd'},
-	{"force-revert", no_argument, NULL, checkrain_option_force_revert},
+	{"force-revert", no_argument, NULL, palerain_option_case_force_revert},
+	{"no-colors", no_argument, NULL, 'S'},
 	{"safe-mode", no_argument, NULL, 's'},
-	{"version", no_argument, NULL, palerain_option_version},
+	{"version", no_argument, NULL, palerain_option_case_version},
 	{"override-pongo", required_argument, NULL, 'k'},
 	{"override-overlay", required_argument, NULL, 'o'},
 	{"override-ramdisk", required_argument, NULL, 'r'},
 	{"override-kpf", required_argument, NULL, 'K'},
-	{"disable-ohio", no_argument, NULL, 'O'},
+	{"override-checkra1n", required_argument, NULL, 'i'},
+	{"reboot-device", no_argument, NULL, 'R'},
+	{"exit-recovery", no_argument, NULL, 'n'},
+	{"enter-recovery", no_argument, NULL, 'E'},
+	{"device-info", no_argument, NULL, 'I'},
 #ifdef DEV_BUILD
+	{"test1", no_argument, NULL, '1'},
+	{"test2", no_argument, NULL, '2'},
+#endif
+#ifdef TUI
 	{"tui", no_argument, NULL, 't'},
 #endif
 	{NULL, 0, NULL, 0}
@@ -44,39 +58,64 @@ static struct option longopts[] = {
 static int usage(int e, char* prog_name)
 {
 	fprintf(stderr,
+	"Usage: %s [-"
+	"DEhpvVdsSLRnPI"
 #ifdef DEV_BUILD
-			"Usage: %s [-cCDhpvVldsOLtf]"
-#else
-			"Usage: %s [-cCDhpvVldsOLf]"
+			"12"
 #endif
-			" [-e boot arguments] [-k Pongo image] [-o overlay file] [-r ramdisk file] [-K KPF file]\n"
+#ifdef ROOTFUL
+			"cCfBl"
+#endif
+#ifdef TUI
+			"t"
+#endif
+			"] [-e boot arguments] [-k Pongo image] [-o overlay file] [-r ramdisk file] [-K KPF file] [-i checkra1n file]\n"
 			"Copyright (C) 2023, palera1n team, All Rights Reserved.\n\n"
-			"iOS/iPadOS 15+ arm64 jailbreaking tool\n\n"
+			"iOS/iPadOS 15.0-16.5.1 arm64 jailbreaking tool\n\n"
 			"\t--version\t\t\t\tPrint version\n"
 			"\t--force-revert\t\t\t\tRemove jailbreak\n"
+#ifdef DEV_BUILD
+			"\t-1, --test1\t\t\t\tSet palerain_option_test1\n"
+			"\t-2, --test2\t\t\t\tSet palerain_option_test2\n"
+#endif
+#ifdef ROOTFUL
+			"\t-B, --setup-partial-fakefs\t\tSetup partial fakefs\n"
 			"\t-c, --setup-fakefs\t\t\tSetup fakefs\n"
-			"\t-C, --setup-fakefs-forced\t\tSetup fakefs and overwrite any existing ones\n"
-			"\t-D, --dfuhelper-only\t\t\tExit after entering DFU\n"
+			"\t-C, --clean-fakefs\t\t\tClean fakefs\n"
+#endif
+			"\t-d, --demote\t\t\t\tDemote\n"
+			"\t-D, --dfuhelper\t\t\t\tExit after entering DFU\n"
+			"\t-e, --boot-args <boot arguments>\tXNU boot arguments\n"
+			"\t-E, --enter-recovery\t\t\tEnter recovery mode\n"
+#ifdef ROOTFUL
+			"\t-f, --fakefs \t\t\t\tBoots fakefs\n"
+#endif
 			"\t-h, --help\t\t\t\tShow this help\n"
+			"\t-i, --override-checkra1n <file>\t\tOverride checkra1n\n"
+			"\t-k, --override-pongo <file>\t\tOverride Pongo image\n"
+			"\t-K, --override-kpf <file>\t\tOverride kernel patchfinder\n"
+#ifdef ROOTFUL
+			"\t-l, --rootless\t\t\t\tBoots rootless. This is the default\n"
+#endif
+			"\t-L, --jbinit-log-to-file\t\tMake jbinit log to /cores/jbinit.log (can be read from sandbox while jailbroken)\n"
+			"\t-n, --exit-recovery\t\t\tExit recovery mode\n"
+			"\t-I, --device-info\t\t\tPrint info about the connected device\n"
+			"\t-o, --override-overlay <file>\t\tOverride overlay\n"
 			"\t-p, --pongo-shell\t\t\tBoots to PongoOS shell\n"
 			"\t-P, --pongo-full\t\t\tBoots to a PongoOS shell with default images already uploaded\n"
+			"\t-r, --override-ramdisk <file>\t\tOverride ramdisk\n"
+			"\t-R, --reboot-device\t\t\tReboot connected device in normal mode\n"
+			"\t-s, --safe-mode\t\t\t\tEnter safe mode\n"
+			"\t-S, --no-colors\t\t\t\tDisable colors on the command line\n"
 			"\t-v, --debug-logging\t\t\tEnable debug logging\n"
 			"\t\tThis option can be repeated for extra verbosity.\n"
 			"\t-V, --verbose-boot\t\t\tVerbose boot\n"
-			"\t-L, --jbinit-log-to-file\t\tMake jbinit log to /cores/jbinit.log (can be read from sandbox while jailbroken)\n"
-			"\t-e, --boot-args <boot arguments>\tXNU boot arguments\n"
-			"\t-f, --fakefs \t\t\t\tBoots fakefs\n"
-			"\t-l, --rootless\t\t\t\tBoots rootless. This is the default\n"
-			"\t-s, --safe-mode\t\t\t\tEnter safe mode\n"
-			"\t-d, --demote\t\t\t\tDemote\n"
-			"\t-k, --override-pongo <file>\t\tOverride Pongo image\n"
-			"\t-o, --override-overlay <file>\t\tOverride overlay\n"
-			"\t-r, --override-ramdisk <file>\t\tOverride ramdisk\n"
-			"\t-K, --override-kpf <file>\t\tOverride kernel patchfinder\n"
-			"\t-O, --disable-ohio\t\t\tDisable Ohio\n"
-#ifdef DEV_BUILD
+
+#ifdef TUI
 			"\t-t, --tui\t\t\t\tTerminal user interface\n"
 #endif
+		"\nEnvironmental variables:\n"
+		"\tTMPDIR\t\ttemporary diretory (path the built-in checkra1n will be extracted to)\n"
 			,
 			prog_name);
 	exit(e);
@@ -85,32 +124,35 @@ static int usage(int e, char* prog_name)
 int optparse(int argc, char* argv[]) {
 	int opt;
 	int index;
-	while ((opt = getopt_long(argc, argv, 
+	while ((opt = getopt_long(argc, argv,
+	"DEhpvVlLdsStRnPIe:o:r:K:k:i:"
 #ifdef DEV_BUILD
-	"cCDhpvVldsOLtfPe:o:r:K:k:", 
-#else
-	"cCDhpvVldsOLfPe:o:r:K:k:", 
+	"12"
 #endif
-	longopts, NULL)) != -1)
+	"fCcB"
+	,longopts, NULL)) != -1)
 	{
 		switch (opt) {
+		case 'B':
+			palerain_flags |= palerain_option_setup_partial_root;
+			palerain_flags |= palerain_option_setup_rootful;
+			palerain_flags |= palerain_option_verbose_boot;
+			break;
 		case 'c':
 			palerain_flags |= palerain_option_setup_rootful;
-			kpf_flags |= checkrain_option_verbose_boot;
+			palerain_flags |= palerain_option_verbose_boot;
 			break;
 		case 'C':
-			palerain_flags |= palerain_option_setup_rootful;	
-			palerain_flags |= palerain_option_setup_rootful_forced;
-			kpf_flags |= checkrain_option_verbose_boot;
+			palerain_flags |= palerain_option_clean_fakefs;
 			break;
 		case 'p':
-			pongo_exit = true;
+			palerain_flags |= palerain_option_pongo_exit;
 			break;
 		case 'P':
-			pongo_full = 1;
+			palerain_flags |= palerain_option_pongo_full;
 			break;
 		case 'D':
-			dfuhelper_only = true;
+			palerain_flags |= palerain_option_dfuhelper_only;
 			break;
 		case 'h':
 			usage(0, argv[0]);
@@ -119,7 +161,8 @@ int optparse(int argc, char* argv[]) {
 			verbose++;
 			break;
 		case 'V':
-			kpf_flags |= checkrain_option_verbose_boot;
+			palerain_flags |= palerain_option_verbose_boot;
+			force_use_verbose_boot = true;
 			break;
 		case 'e':
 			if (strstr(optarg, "rootdev=") != NULL) {
@@ -132,21 +175,24 @@ int optparse(int argc, char* argv[]) {
 			snprintf(xargs_cmd, sizeof(xargs_cmd), "xargs %s", optarg);
 			break;
 		case 'f':
-			snprintf(rootfs_cmd, sizeof(rootfs_cmd), "rootfs %s", optarg);
-			snprintf(dtpatch_cmd, 0x20, "dtpatch %s", optarg);
-			enable_rootful = 1;
+			palerain_flags |= palerain_option_rootful;
+			palerain_flags &= ~palerain_option_rootless;
 			break;
 		case 'l':
-			enable_rootful = 0;
+			palerain_flags &= ~palerain_option_rootful;
+			palerain_flags |= palerain_option_rootless;
 			break;
 		case 'L':
 			palerain_flags |= palerain_option_jbinit_log_to_file;
 			break;
 		case 'd':
-			demote = 1;
+			palerain_flags |= palerain_option_demote;
+			break;
+		case 'E':
+			palerain_flags |= palerain_option_enter_recovery;
 			break;
 		case 's':
-			checkrain_flags |= checkrain_option_safemode;
+			palerain_flags |= palerain_option_safemode;
 			break;
 		case 'k':
 			if (access(optarg, F_OK) != 0) {
@@ -154,18 +200,22 @@ int optparse(int argc, char* argv[]) {
 				return -1;
 			}
 			pongo_path = malloc(strlen(optarg) + 1);
-			strcpy(pongo_path, optarg);
+			if (pongo_path == NULL) {
+				LOG(LOG_FATAL, "memory allocation failed");
+				return -1;
+			}
+			snprintf(pongo_path, strlen(optarg) + 1, "%s", optarg);
 			break;
 		case 'o':
 			if (override_file(&override_overlay, overlay_to_upload, &binpack_dmg_len, optarg))
 				return 1;
 			break;
 		case 'r':
-			if (override_file(&override_ramdisk, ramdisk_to_upload, &ramdisk_dmg_len, optarg))
+			if (override_file(&override_ramdisk, ramdisk_to_upload, &ramdisk_dmg_lzma_len, optarg))
 				return 1;
 			break;
 		case 'K':
-			if (override_file(&override_kpf, kpf_to_upload, &checkra1n_kpf_pongo_len, optarg))
+			if (override_file(&override_kpf, kpf_to_upload, &checkra1n_kpf_pongo_lzma_len, optarg))
 				return 1;
 			struct mach_header_64* hdr = (struct mach_header_64*)override_kpf.ptr;
 			if (hdr->magic != MH_MAGIC_64 && hdr->magic != MH_CIGAM_64) {
@@ -179,63 +229,155 @@ int optparse(int argc, char* argv[]) {
 				return -1;
 			}
 			break;
-		case 'O':
-			ohio = false;
+		case 'i': {};
+			struct stat st;
+			if (stat(optarg, &st) != 0) {
+				LOG(LOG_FATAL, "cannot stat external checkra1n file: %d (%s)", errno, strerror(errno));
+				return -1;
+			} else if (!(st.st_mode & S_IXUSR) && !(st.st_mode & S_IXGRP) && !(st.st_mode & S_IXOTH)) {
+				LOG(LOG_FATAL, "%s is not executable", optarg);
+				return -1;
+			} else if (!S_ISREG(st.st_mode)) {
+				LOG(LOG_FATAL, "%s is not a regular file", optarg);
+				return -1;
+			}
+			if (st.st_size < (UCHAR_MAX+1)) {
+				LOG(LOG_FATAL, "%s too small", optarg);
+				return -1;
+			}
+			int checkra1n_fd = open(optarg, O_RDONLY);
+			if (checkra1n_fd == -1) {
+				LOG(LOG_FATAL, "Cannot open %s: %d (%s)", optarg, errno, strerror(errno));
+				return -1;
+			}
+			void* addr = mmap(NULL, st.st_size, PROT_READ, MAP_PRIVATE, checkra1n_fd, 0);
+			if (addr == MAP_FAILED) {
+				LOG(LOG_ERROR, "Failed to map file %s: %d (%s)", optarg, errno, strerror(errno));
+				return -1;
+			}
+			if (boyermoore_horspool_memmem(addr, st.st_size, (const unsigned char*)"[ra1npoc15-part] thanks to", strlen("[ra1npoc15-part] thanks to")) != NULL) 
+				{
+					palerain_flags |= palerain_option_checkrain_is_clone;
+					LOG(LOG_VERBOSE3, "%s is checkra1n clone", optarg);
+				}
+			else
+			{
+				palerain_flags &= ~palerain_option_checkrain_is_clone;
+				LOG(LOG_VERBOSE3, "%s is checkra1n", optarg);
+			}
+			munmap(addr, st.st_size);
+			close(checkra1n_fd);
+			ext_checkra1n = calloc(1, strlen(optarg) + 1);
+			snprintf(ext_checkra1n, strlen(optarg) + 1, "%s", optarg);
 			break;
-#ifdef DEV_BUILD
+		case 'R':
+			palerain_flags |= palerain_option_reboot_device;
+			break;
+		case 'n':
+			palerain_flags |= palerain_option_exit_recovery;
+			break;
+		case 'I':
+			palerain_flags |= palerain_option_device_info;
+			break;
+		case 'S':
+			palerain_flags |= palerain_option_no_colors;
+			break;
+#ifdef TUI
 		case 't':
-			use_tui = true;
+			palerain_flags |= palerain_option_tui;
 			break;
 #endif
-		case checkrain_option_force_revert:
-			checkrain_flags |= checkrain_option_force_revert;
+#ifdef DEV_BUILD
+		case '1':
+			palerain_flags |= palerain_option_test1;
 			break;
-		case palerain_option_version:
-			palerain_version = true;
+		case '2':
+			palerain_flags |= palerain_option_test2;
+			break;
+#endif
+		case palerain_option_case_force_revert:
+			palerain_flags |= palerain_option_force_revert;
+			break;
+		case palerain_option_case_version:
+			palerain_flags |= palerain_option_palerain_version;
 			break;
 		default:
 			usage(1, argv[0]);
 			break;
 		}
 	}
-	if (palerain_version) {
-		printf("palera1n version " PALERAIN_VERSION ": " BUILD_DATE "; " BUILD_WHOAMI ":" BUILD_TAG "/" BUILD_STYLE "\n");
+	if ((palerain_flags & palerain_option_palerain_version)) {
+		printf(
+			"palera1n " PALERAIN_VERSION "\n"
+			BUILD_COMMIT " " BUILD_NUMBER " (" BUILD_BRANCH ")\n\n"
+			"Build date: " BUILD_DATE "\n"
+			"Build style: " BUILD_STYLE "\n"
+			"Build tag: " BUILD_TAG "\n"
+			"Built by: " BUILD_WHOAMI "\n"
+#ifdef USE_LIBUSB
+			"USB backend: libusb\n"
+#else
+			"USB backend: IOKit\n"
+#endif
+			"Build options: " BUILD_OPTIONS "\n"
+		);
 		return 0;
 	}
 
-	if (enable_rootful) {
-		palerain_flags |= palerain_option_rootful;
+	if ((strstr(xargs_cmd, "serial=") != NULL) && !force_use_verbose_boot && (palerain_flags & palerain_option_setup_rootful)) {
+		palerain_flags &= ~palerain_option_verbose_boot;
 	}
 
-	if (checkrain_option_enabled(checkrain_flags, checkrain_option_force_revert) && checkrain_option_enabled(palerain_flags, palerain_option_setup_rootful)) {
-		LOG(LOG_WARNING, "force revert and setup rootful requested at the same time, behaviour here is undefined");
+	if ((palerain_flags & (palerain_option_rootless | palerain_option_rootful)) == 0) {
+		LOG(LOG_FATAL, "must specify -l option");
+		return -1;
 	}
-
-	snprintf(checkrain_flags_cmd, 0x20, "checkra1n_flags 0x%x", checkrain_flags);
-	snprintf(palerain_flags_cmd, 0x20, "palera1n_flags 0x%x", palerain_flags);
-	snprintf(kpf_flags_cmd, 0x20, "kpf_flags 0x%x", kpf_flags);
-	LOG(LOG_VERBOSE3, "checkrain_flags: %s", checkrain_flags_cmd);
+    
+	snprintf(palerain_flags_cmd, 0x30, "palera1n_flags 0x%" PRIx64, palerain_flags);
 	LOG(LOG_VERBOSE3, "palerain_flags: %s", palerain_flags_cmd);
-	LOG(LOG_VERBOSE3, "kpf_flags: %s", kpf_flags_cmd);
 	if (override_kpf.magic == OVERRIDE_MAGIC) {
-		LOG(LOG_VERBOSE4, "kpf override length %u -> %u", override_kpf.orig_len, checkra1n_kpf_pongo_len);
+		LOG(LOG_VERBOSE4, "kpf override length %" PRIu32 " -> %" PRIu32, override_kpf.orig_len, checkra1n_kpf_pongo_lzma_len);
 		LOG(LOG_VERBOSE4, "kpf override ptr %p -> %p", override_kpf.orig_ptr, **kpf_to_upload);
 	}
 	if (override_ramdisk.magic == OVERRIDE_MAGIC) {
-		LOG(LOG_VERBOSE4, "ramdisk override length %u -> %u", override_ramdisk.orig_len, ramdisk_dmg_len);
+		LOG(LOG_VERBOSE4, "ramdisk override length %" PRIu32 " -> %" PRIu32, override_ramdisk.orig_len, ramdisk_dmg_lzma_len);
 		LOG(LOG_VERBOSE4, "ramdisk override ptr %p -> %p", override_ramdisk.orig_ptr, **ramdisk_to_upload);
 	}
 	if (override_overlay.magic == OVERRIDE_MAGIC) {
-		LOG(LOG_VERBOSE4, "overlay override length %u -> %u", override_overlay.orig_len, binpack_dmg_len);
+		LOG(LOG_VERBOSE4, "overlay override length %" PRIu32 " -> %" PRIu32, override_overlay.orig_len, binpack_dmg_len);
 		LOG(LOG_VERBOSE4, "overlay override ptr %p -> %p", override_overlay.orig_ptr, **overlay_to_upload);
 	}
 
-	if (!checkrain_option_enabled(palerain_flags, palerain_option_rootful)) {
-		if (checkrain_option_enabled(palerain_flags, palerain_option_setup_rootful) || checkrain_option_enabled(palerain_flags, palerain_option_setup_rootful_forced)) {
+	if (!(palerain_flags & palerain_option_rootful)) {
+		if ((palerain_flags & palerain_option_setup_rootful)) {
 			LOG(LOG_FATAL, "Cannot setup rootful when rootless is requested. Use -f to enable rootful mode.");
 			return -1;
 		}
 	}
+	if (!(
+			(palerain_flags & palerain_option_dfuhelper_only) ||
+			(palerain_flags & palerain_option_enter_recovery) ||
+			(palerain_flags & palerain_option_exit_recovery) ||
+			(palerain_flags & palerain_option_reboot_device)))
+	{
+#ifdef NO_CHECKRAIN
+		if (checkra1n_len == 0 && ext_checkra1n == NULL)
+		{
+			LOG(LOG_FATAL, "checkra1n omitted in build but no override specified");
+			return -1;
+		}
+		if (!((palerain_flags & palerain_option_pongo_exit) || (palerain_flags & palerain_option_pongo_exit)))
+		{
+#ifdef NO_KPF
+			if (checkra1n_kpf_pongo_lzma_len == 0)
+			{
+				LOG(LOG_FATAL, "kernel patchfinder omitted in build but no override specified");
+				return -1;
+			}
+#endif
+		}
+#endif
+	}
 
 	for (index = optind; index < argc; index++)
 	{
@@ -252,17 +394,19 @@ int optparse(int argc, char* argv[]) {
 			usage(1, argv[0]);
 		}
 	}
-	if (verbose >= 2) putenv("LIBUSB_DEBUG=1");
+	if (verbose >= 2) setenv("LIBUSB_DEBUG", "1", 1);
+
 	if (verbose >= 3)
 	{
+		libusbmuxd_set_debug_level(verbose - 2);
 		irecv_set_debug_level(1);
-		putenv("LIBUSB_DEBUG=2");
+		setenv("LIBUSB_DEBUG", "2", 1);
 	}
 	if (verbose >= 4) {
 		idevice_set_debug_level(1);
-		putenv("LIBUSB_DEBUG=3");
+		setenv("LIBUSB_DEBUG", "3", 1);
 	}
 	if (verbose >= 5)
-		putenv("LIBUSB_DEBUG=4");
+		setenv("LIBUSB_DEBUG", "4", 1);
     return 0;
 }

src/override_file.c

@@ -1,3 +1,5 @@
+#include <palerain.h>
+
 #include <stdio.h>
 #include <stdlib.h>
 #include <stdint.h>
@@ -12,7 +14,6 @@
 #include <sys/mman.h>
 #include <errno.h>
 
-#include <common.h>
 
 int override_file(override_file_t *finfo, niarelap_file_t** orig, unsigned int *orig_len, char *filename) {
 	int ret = 0;
@@ -30,7 +31,7 @@ int override_file(override_file_t *finfo, niarelap_file_t** orig, unsigned int *
 		return errno;
 	}
 	LOG(LOG_VERBOSE5, "override_file: fstat fd %d succeeded!", fd);	
-	void *addr = mmap(NULL, st.st_size, PROT_READ, MAP_FILE | MAP_PRIVATE, fd, 0);
+	void *addr = mmap(NULL, st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);
 	if (addr == MAP_FAILED) {
 		LOG(LOG_ERROR, "Failed to map file %s: %d (%s)", filename, errno, strerror(errno));
 		return errno;
@@ -46,4 +47,4 @@ int override_file(override_file_t *finfo, niarelap_file_t** orig, unsigned int *
 	*orig_len = (unsigned int)st.st_size;
 	LOG(LOG_VERBOSE5, "override_file() finished!");
 	return 0;
-};
+}

src/pongo_helper.c

@@ -10,17 +10,17 @@
 #include <sys/mman.h>           // mmap, munmap
 #include <sys/stat.h>           // fstst
 
-#include <common.h>
+#include <palerain.h>
+#include <ANSI-color-codes.h>
 
-bool pongo_full, device_has_booted = 0;
+bool device_has_booted = 0;
 int pongo_thr_running = 0;
 
+#define ERR(...) LOG(LOG_VERBOSE, __VA_ARGS__)
+
 void* pongo_helper(void* ptr) {
 	pongo_thr_running = 1;
 	pthread_cleanup_push(thr_cleanup, &pongo_thr_running);
-#if defined(__APPLE__) || defined(__linux__)
-	pthread_setname_np("in.palera.pongo-helper");
-#endif
 	wait_for_pongo();
 	while (get_spin()) {
 		sleep(1);
@@ -29,45 +29,197 @@ void* pongo_helper(void* ptr) {
 	return NULL;
 }
 
-void *pongo_usb_callback(void *arg) {
+void *pongo_usb_callback(stuff_t *arg) {
 	if (get_found_pongo())
 		return NULL;
 	set_found_pongo(1);
-#if defined(__APPLE__) || defined(__linux__)
-	pthread_setname_np("in.palera.pongo-handler");
-#endif
-	strncat(xargs_cmd, " rootdev=md0", 0x270 - strlen(xargs_cmd) - 1);
-	if (checkrain_option_enabled(palerain_flags, palerain_option_setup_rootful)) {
+	if ((palerain_flags & palerain_option_setup_rootful)) {
 		strncat(xargs_cmd, " wdt=-1", 0x270 - strlen(xargs_cmd) - 1);	
 	}
 	LOG(LOG_INFO, "Found PongoOS USB Device");
-	usb_device_handle_t handle = *(usb_device_handle_t *)arg;
+	usb_device_handle_t handle = arg->handle;
 	issue_pongo_command(handle, NULL);	
 	issue_pongo_command(handle, "fuse lock");
 	issue_pongo_command(handle, "sep auto");
-	upload_pongo_file(handle, **kpf_to_upload, checkra1n_kpf_pongo_len);
-	issue_pongo_command(handle, "modload");
-	issue_pongo_command(handle, kpf_flags_cmd);
-	issue_pongo_command(handle, checkrain_flags_cmd);
+	upload_pongo_file(handle, **kpf_to_upload, checkra1n_kpf_pongo_lzma_len);
+	if (*kpf_to_upload == &checkra1n_kpf_pongo_lzma) {
+		issue_pongo_command(handle, "modload " KPF_UNCOMPRESSED_SIZE);
+	} else {
+		issue_pongo_command(handle, "modload");
+	}
 	issue_pongo_command(handle, palerain_flags_cmd);
-	if (enable_rootful)
+#ifdef NO_RAMDISK
+	if (ramdisk_dmg_lzma_len != 0)
+#endif
 	{
-		issue_pongo_command(handle, "rootfs");
+		// strncat(xargs_cmd, " rootdev=md0", 0x270 - strlen(xargs_cmd) - 1);
+		upload_pongo_file(handle, **ramdisk_to_upload, ramdisk_dmg_lzma_len);
+		if ((*ramdisk_to_upload) == &ramdisk_dmg_lzma)
+			issue_pongo_command(handle, "ramdisk " RAMDISK_UNCOMPRESSED_SIZE);
+		else {
+			issue_pongo_command(handle, "ramdisk");
+		}
+	}
+#ifdef NO_OVERLAY
+	if (binpack_dmg_len != 0)
+#endif
+	{
+		upload_pongo_file(handle, **overlay_to_upload, binpack_dmg_len);
+		issue_pongo_command(handle, "overlay");
 	}
-	upload_pongo_file(handle, **ramdisk_to_upload, ramdisk_dmg_len);
-	issue_pongo_command(handle, "ramdisk");
-	upload_pongo_file(handle, **overlay_to_upload, binpack_dmg_len);
-	issue_pongo_command(handle, "overlay");
 	issue_pongo_command(handle, xargs_cmd);
-	if (pongo_full) goto done;
+	if ((palerain_flags & palerain_option_pongo_full)) goto done;
 	issue_pongo_command(handle, "bootx");
 	LOG(LOG_INFO, "Booting Kernel...");
+	if ((palerain_flags & palerain_option_setup_partial_root)) {
+		LOG(LOG_INFO, "Please wait up to 5 minutes for the bindfs to be created.");
+		LOG(LOG_INFO, "Once the device boots up to iOS, run again without the -B (Create BindFS) option to jailbreak.");
+	} else if ((palerain_flags & palerain_option_setup_rootful)) {
+		LOG(LOG_INFO, "Please wait up to 10 minutes for the fakefs to be created.");
+		LOG(LOG_INFO, "Once the device boots up to iOS, run again without the -c (Create FakeFS) option to jailbreak.");
+	}
 	if (dfuhelper_thr_running) {
 		pthread_cancel(dfuhelper_thread);
 		dfuhelper_thr_running = false;
 	}
 done:
 	device_has_booted = true;
+#ifdef USE_LIBUSB
+	libusb_unref_device(arg->dev);
+#endif
 	set_spin(0);
 	return NULL;
-}
+}
+
+int issue_pongo_command(usb_device_handle_t handle, char *command)
+{
+	uint32_t outpos = 0;
+	uint32_t outlen = 0;
+	int ret = USB_RET_SUCCESS;
+	uint8_t in_progress = 1;
+	if (command == NULL) goto fetch_output;
+	size_t len = strlen(command);
+	char command_buf[512];
+	char stdout_buf[0x2000];
+	if (len > (CMD_LEN_MAX - 2))
+	{
+		LOG(LOG_ERROR, "Pongo command %s too long (max %d)", command, CMD_LEN_MAX - 2);
+		return EINVAL;
+	}
+    if (verbose < 3 || verbose > 4) {
+	    LOG(LOG_VERBOSE, "Executing PongoOS command: '%s'", command);
+    } else {
+        printf("%s\n", command);
+    }
+	snprintf(command_buf, 512, "%s\n", command);
+	len = strlen(command_buf);
+	ret = USBControlTransfer(handle, 0x21, 4, 1, 0, 0, NULL, NULL);
+	if (ret)
+		goto bad;
+	ret = USBControlTransfer(handle, 0x21, 3, 0, 0, (uint32_t)len, command_buf, NULL);
+fetch_output:
+	while (in_progress) {
+		ret = USBControlTransfer(handle, 0xa1, 2, 0, 0, (uint32_t)sizeof(in_progress), &in_progress, NULL);
+		if (ret == USB_RET_SUCCESS)
+		{
+			ret = USBControlTransfer(handle, 0xa1, 1, 0, 0, 0x1000, stdout_buf + outpos, &outlen);
+			if (ret == USB_RET_SUCCESS)
+			{
+				write_stdout(stdout_buf + outpos, outlen);
+				outpos += outlen;
+				if (outpos > 0x1000)
+				{
+					memmove(stdout_buf, stdout_buf + outpos - 0x1000, 0x1000);
+					outpos = 0x1000;
+				}
+			}
+		}
+		if (ret != USB_RET_SUCCESS)
+		{
+			goto bad;
+		}
+	}
+bad:
+	if (ret != USB_RET_SUCCESS)
+	{
+        if (command != NULL && (!strncmp("boot", command, 4))) {
+			if (ret == USB_RET_IO || ret == USB_RET_NO_DEVICE || ret == USB_RET_NOT_RESPONDING)
+				return 0;
+		}
+		LOG(LOG_ERROR, "USB error: %s", usb_strerror(ret));
+		return ret;
+	}
+	else
+		return ret;
+}
+
+int upload_pongo_file(usb_device_handle_t handle, unsigned char *buf, unsigned int buf_len)
+{
+	int ret = 0;
+	ret = USBControlTransfer(handle, 0x21, 1, 0, 0, 4, &buf_len, NULL);
+	if (ret == USB_RET_SUCCESS)
+	{
+		ret = USBBulkUpload(handle, buf, buf_len);
+		if (ret == USB_RET_SUCCESS)
+		{
+		    if (verbose < 3 || verbose > 4) {
+				LOG(LOG_VERBOSE, "Uploaded %llu bytes to PongoOS", (unsigned long long)buf_len);
+    		} else {
+				if ((palerain_flags & palerain_option_no_colors))
+				    printf("/send mem:%p:%p\nUploaded %llu bytes]\n", (void*)buf, (void*)(buf + buf_len), (unsigned long long)buf_len);
+				else
+        			printf("/send mem:%p:%p\n" BCYN "[Uploaded %llu bytes]\n" CRESET, (void*)buf, (void*)(buf + buf_len), (unsigned long long)buf_len);
+    		}
+		}
+	}
+	if (verbose >= 3) printf("pongoOS> ");
+	return ret;
+}
+
+void io_start(stuff_t *stuff)
+{
+    int r = pthread_create(&stuff->th, NULL, (pthread_start_t)pongo_usb_callback, stuff);
+    if(r != 0)
+    {
+        ERR("pthread_create: %s", strerror(r));
+        set_spin(0);
+		return;
+    }
+    pthread_join(stuff->th, NULL);
+}
+
+void io_stop(stuff_t *stuff)
+{
+    int r = pthread_cancel(stuff->th);
+    if(r != 0)
+    {
+        ERR("pthread_cancel: %s", strerror(r));
+        set_spin(0);
+		return;
+    }
+    r = pthread_join(stuff->th, NULL);
+    if(r != 0)
+    {
+        ERR("pthread_join: %s", strerror(r));
+        set_spin(0);
+		return;
+    }
+#ifdef USE_LIBUSB
+	libusb_unref_device(stuff->dev);
+#endif
+}
+
+void write_stdout(char *buf, uint32_t len)
+{
+    while(len > 0) {
+        if (verbose >= 3) {
+                ssize_t s = write(1, buf, len);
+            if(s < 0) {
+                LOG(LOG_ERROR, "write: %s", strerror(errno));
+                pthread_exit(NULL);
+            }
+            buf += s;
+            len -= s;
+        } else break;
+    }
+}

src/resources/.gitignore

@@ -0,0 +1,2 @@
+*
+!.gitignore

src/tui_main.c

@@ -1,8 +1,4 @@
-#define NCURSES_WIDECHAR 1
-
-#include <ncurses.h>
-#include <form.h>
-#include <menu.h>
+#ifdef TUI
 #include <stdio.h>
 #include <stdlib.h>
 #include <stdint.h>
@@ -14,78 +10,97 @@
 #include <unistd.h>
 #include <assert.h>
 
-#include <common.h>
+#include <palerain.h>
 #include <tui.h>
 
-int redraw_screen() {
-    erase();
-    resizeterm(24, 80);
-    box(stdscr, 0, 0);
-    mvaddstr(0, 80 - strlen("[palera1n version " PALERAIN_VERSION "]") - 2 , "[palera1n version " PALERAIN_VERSION "]");
+int redraw_screen(void) {
     return 0;
 }
 
-int destroy_window() {
-    endwin();
+int destroy_window(void) {
     return 0;
 }
 
-int init_window() {
+int init_window(void) {
     setlocale(LC_ALL, NULL);
-    initscr();
-    if (has_colors() == TRUE) {
-        start_color();
-        init_pair(MSG_COLOR, COLOR_YELLOW, COLOR_BLACK);
-        init_pair(ICON_COLOR, COLOR_WHITE, COLOR_BLACK);
-    }
-    int height, width;
-    getmaxyx(stdscr, height, width);
-    if (width < 80 || height < 24) {
-        LOG(LOG_ERROR, "Terminal size must be at least 80x24");
+    setenv(
+        "NEWT_COLORS",
+        "root=,black\n"
+        "border=lightgray,black\n"
+        "title=lightgray,black\n"
+        "roottext=red,black\n"
+        "label=lightgray,black\n"
+        "entry=lightgray,black\n"
+        "window=red,black\n"
+        "textbox=lightgray,black\n"
+        "button=black,lightgray\n"
+        "compactbutton=lightgray,black\n"
+        "listbox=lightgray,black\n"
+        "actlistbox=black,lightgray\n"
+        "actsellistbox=black,lightgray\n"
+        "checkbox=lightgray,black\n"
+        "actcheckbox=black,lightgray\n",
+        0);
+
+    tui_started = true;
+    newtInit();
+    int cols, rows;
+    newtGetScreenSize(&cols, &rows);
+    if (cols < 80 || rows < 24) {
+        newtFinished();
+        tui_started = false;
+        LOG(LOG_FATAL, "Terminal size must be at least 80x24");
         return -1;
     }
-    if (has_colors() == FALSE) {
-        LOG(LOG_VERBOSE2, "Terminal without color support detected");
-    }
-    cbreak();
-    noecho();
-    keypad(stdscr, TRUE);
+    LOG(LOG_VERBOSE3, "cols: %d, rows: %d\n", cols, rows);
+    newtCls();
+    newtSetColor(PI_LOG_COLOR, "yellow", "black");
+    newtSetColor(PI_STEP_CURRENT, "lightgray", "black");
+    newtSetColor(PI_STEP_OTHER, "gray", "black");
+    newtDrawRootText(0, 0, "palera1n version 2.0.0");
+    newtPushHelpLine(NULL);
     return 0;
 }
 
-int tui() {
-    int ret = MAIN_SCREEN;
-    init_window();
+int tui(void) {
+    int ret = 0;
+    if ((ret = init_window())) return ret;
+    ret = MAIN_SCREEN;
     while (1) {
-        redraw_screen();
         switch (ret) {
-            case ERROR_SCREEN:
-                goto out;
-                break;
-            case EXIT_SCREEN:
-                goto out;
-                break;
-            case MAIN_SCREEN:
-                ret = tui_screen_main();
-                break;
-            case OPTIONS_SCREEN:
-                ret = tui_screen_options();
-                break;
-            case ENTER_RECOVERY_SCREEN:
-                ret = tui_screen_enter_recovery();
-                break;
-            case ENTER_DFU_SCREEN:
-                ret = tui_screen_enter_dfu();
-                break;
-            case JAILBREAKING_SCREEN:
-                ret = tui_screen_jailbreak();
-                break;
-            default:
-                assert(0);
-                goto out;
+        case ERROR_SCREEN:
+            goto out;
+            break;
+        case EXIT_SCREEN:
+            goto out;
+            break;
+        case MAIN_SCREEN:
+            ret = tui_screen_main();
+            break;
+        case OPTIONS_SCREEN:
+            ret = tui_screen_options();
+            break;
+        case ENTER_RECOVERY_SCREEN:
+            ret = tui_screen_enter_recovery();
+            break;
+        case ENTER_DFU_SCREEN:
+            ret = tui_screen_enter_dfu();
+            break;
+        case JAILBREAKING_SCREEN:
+            ret = tui_screen_jailbreak();
+            break;
+        default:
+            assert(0);
+            goto out;
         }
+        newtPopWindow();
     }
 out:
-    destroy_window();
-    return ret;
+    newtFinished();
+    tui_started = false;
+    return 0;
 }
+#else
+/* ISO C forbids an empty translation unit */
+extern char** environ;
+#endif

src/tui_screen_enter_dfu.c

@@ -1,8 +1,4 @@
-#define NCURSES_WIDECHAR 1
-
-#include <ncurses.h>
-#include <form.h>
-#include <menu.h>
+#ifdef TUI
 #include <stdio.h>
 #include <stdlib.h>
 #include <stdint.h>
@@ -14,7 +10,12 @@
 #include <unistd.h>
 #include <assert.h>
 
-#include <common.h>
+#include <palerain.h>
 #include <tui.h>
 
-tui_screen_t tui_screen_enter_dfu() { return JAILBREAKING_SCREEN; }
+tui_screen_t tui_screen_enter_dfu(void) { return JAILBREAKING_SCREEN; }
+
+#else
+/* ISO C forbids an empty translation unit */
+extern char** environ;
+#endif

src/tui_screen_enter_recovery.c

@@ -1,8 +1,4 @@
-#define NCURSES_WIDECHAR 1
-
-#include <ncurses.h>
-#include <form.h>
-#include <menu.h>
+#ifdef TUI
 #include <stdio.h>
 #include <stdlib.h>
 #include <stdint.h>
@@ -14,7 +10,12 @@
 #include <unistd.h>
 #include <assert.h>
 
-#include <common.h>
+#include <palerain.h>
 #include <tui.h>
 
-tui_screen_t tui_screen_enter_recovery() { return ENTER_DFU_SCREEN; }
+tui_screen_t tui_screen_enter_recovery(void) { return ENTER_DFU_SCREEN; }
+
+#else
+/* ISO C forbids an empty translation unit */
+extern char** environ;
+#endif

src/tui_screen_jailbreak.c

@@ -1,8 +1,4 @@
-#define NCURSES_WIDECHAR 1
-
-#include <ncurses.h>
-#include <form.h>
-#include <menu.h>
+#ifdef TUI
 #include <stdio.h>
 #include <stdlib.h>
 #include <stdint.h>
@@ -14,7 +10,12 @@
 #include <unistd.h>
 #include <assert.h>
 
-#include <common.h>
+#include <palerain.h>
 #include <tui.h>
 
-tui_screen_t tui_screen_jailbreak() { return EXIT_SCREEN; }
+tui_screen_t tui_screen_jailbreak(void) { return EXIT_SCREEN; }
+
+#else
+/* ISO C forbids an empty translation unit */
+extern char** environ;
+#endif

src/tui_screen_main.c

@@ -1,8 +1,4 @@
-#define NCURSES_WIDECHAR 1
-
-#include <ncurses.h>
-#include <form.h>
-#include <menu.h>
+#ifdef TUI
 #include <stdio.h>
 #include <stdlib.h>
 #include <stdint.h>
@@ -14,97 +10,44 @@
 #include <unistd.h>
 #include <assert.h>
 
-#include <common.h>
+#include <palerain.h>
 #include <tui.h>
 
-tui_screen_t tui_screen_main() {
-    int ret = -1;
-    mvaddstr(1, 2, "Welcome to palera1n!");
-    move(2,1);
-    whline(stdscr, ACS_HLINE, 80 - 2);
-    move(5,2);
-    attron(COLOR_PAIR(MSG_COLOR));
-    mvaddstr(4,2, "Connect your iPhone, iPad, or iPod Touch");
-    mvaddstr(5,2, "to begin.");
-    attroff(COLOR_PAIR(MSG_COLOR));
-    attron(COLOR_PAIR(ICON_COLOR));
-    mvaddwstr(2, 43, L" MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM ");
-    mvaddwstr(3, 44,  L"MMMMMMMMMMMMMWNOddONWMMMMMMMMMMMMM");
-    mvaddwstr(4,  44, L"MMMMMMMMMMMMWNx.  .xNWMMMMMMMMMMMM");
-    mvaddwstr(5,  44, L"MMMMMMMMMMMMW0;....;OWMMMMMMMMMMMM");
-    mvaddwstr(6,  44, L"MMMMMMMMMMMMW0;....;OWMMMMMMMMMMMM");
-    mvaddwstr(7,  44, L"MMMMMMMMMMMWXo'.....lKWMMMMMMMMMMM");
-    mvaddwstr(8,  44, L"MMMMMMMMMMWNkc;'....'dNWMMMMMMMMMM");
-    mvaddwstr(9,  44, L"MMMMMMMMMMN0dc:,''''.:ONWMMMMMMMMM");
-    mvaddwstr(10, 44, L"MMMMMMMMMWKxllc;,'''',lKWMMMMMMMMM");
-    mvaddwstr(11, 44, L"MMMMMMMMWNkoolc;,,,,;;:xXWMMMMMMMM");
-    mvaddwstr(12, 44, L"MMMMMMMMW0olllc;,,,,,,,:OWMMMMMMMM");
-    mvaddwstr(13, 44, L"MMMMMMMMNOollc:,'....'';xNMMMMMMMM");
-    mvaddwstr(14, 44, L"MMMMMMMMW0dllc:,''''''':OWMMMMMMMM");
-    mvaddwstr(15, 44, L"MMMMMMMMWN0dc::;;,,,,,cONWMMMMMMMM");
-    mvaddwstr(16, 44, L"MMMMMMMMMMWXOxoc::cldkXWMMMMMMMMMM");
-    mvaddwstr(17, 44, L"MMMMMMMMMMMMWWNNXXNNWWMMMMMMMMMMMM");
-    mvaddwstr(18, 44, L"MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM");
-    mvaddstr(7, 2, "Made by: Nick Chan, Mineek, Tom, Nebula,");
-    mvaddstr(8, 2, "llsc12, Nathan");
-    move(9, 2);
-    whline(stdscr, ACS_HLINE, 40);
-    mvaddstr(10, 2, "Thanks to: nyuszika7h, Procursus Team");
-    mvaddstr(11, 2, "dora2ios, m1sta, Serena, xerub, tihmstar");
-    mvaddstr(12, 2, "sbingner, checkra1n team (Siguza, Axi0mx");
-    mvaddstr(13, 2, "argp et al.)");
-    move(14, 2);
-    whline(stdscr, ACS_HLINE, 40);
-    mvaddstr(19, 2, "palera1n is NOT affinated with checkra1n");
-    mvaddstr(20, 2, "Note: Backup your stuff. Use at your own risk.");  
-    mvaddstr(19, 78 - strlen("@palera1n"), "@palera1n");
-    mvaddstr(20, 78 - strlen("https://palera.in"), "https://palera.in");
-    attroff(COLOR_PAIR(ICON_COLOR));
-    move(21,1);
-    whline(stdscr, ACS_HLINE, 80 - 2);
-    move(22, 40);
-
-    ITEM* main_buttons[4];
-    MENU* main_menu;
-
-    main_buttons[0] = new_item(MAIN_OPTIONS, "");
-    main_buttons[1] = new_item(MAIN_START, "");
-    main_buttons[2] = new_item(MAIN_EXIT, "");
-    main_buttons[3] = NULL;
-    main_menu = new_menu(main_buttons);
-    item_opts_off(main_buttons[1], O_SELECTABLE);
-    
-    set_menu_format(main_menu, 1, 40);
-    set_menu_sub(main_menu, derwin(stdscr, 0, 0, 22, 50));
-    post_menu(main_menu);
-    raw();
-    refresh();
-    while (1) {
-        int ch = getch();
-        if (ch == KEY_LEFT) {
-            menu_driver(main_menu, REQ_LEFT_ITEM);
-        } else if (ch == KEY_RIGHT) {
-            menu_driver(main_menu, REQ_RIGHT_ITEM);
-        } else if (ch == 10) {
-            if (!(item_opts(current_item(main_menu)) & O_SELECTABLE)) continue;
-            // fprintf(stderr, "Button %s pressed\n", current_item(main_menu)->name.str);
-            if (!strcmp(current_item(main_menu)->name.str, MAIN_EXIT)) {
-                ret = EXIT_SCREEN;
-            } else if (!strcmp(current_item(main_menu)->name.str, MAIN_START)) {
-                ret = ENTER_RECOVERY_SCREEN;
-            } else if (!strcmp(current_item(main_menu)->name.str, MAIN_OPTIONS)) {
-                ret = OPTIONS_SCREEN;
-            }
-            goto end;
-        }
-        refresh();
+tui_screen_t tui_screen_main(void) {
+    int ret = MAIN_SCREEN;
+    bool can_start = false;
+    newtCenteredWindow(WIDTH, HEIGHT, NULL);
+    newtComponent optionsButton = newtCompactButton(46, 18, "Options");
+    newtComponent startButton = newtCompactButton(57, 18, "Start");
+    newtComponent exitButton = newtCompactButton(66, 18, "Exit");
+    newtComponent welcome = newtLabel(1, 0, "Welcome to palera1n!");
+    newtComponent deviceMsg = newtTextbox(1, 2, 40, 3, NEWT_FLAG_WRAP);
+    set_tui_log(deviceMsg);
+    LOG(LOG_INFO, "Connect your iPhone, iPad or iPod Touch to begin.");
+    newtTextboxSetColors(deviceMsg, PI_LOG_COLOR, PI_LOG_COLOR);
+    set_tui_log(deviceMsg);
+    newtComponent form = newtForm(NULL, NULL, 0);
+    newtFormAddComponents(form, optionsButton, startButton, exitButton, welcome,
+    deviceMsg, NULL);
+    newtRunForm(form);
+    newtRefresh();
+    newtComponent buttonPressed = newtFormGetCurrent(form);
+    if (buttonPressed == optionsButton) {
+        ret = OPTIONS_SCREEN;
+    } else if (buttonPressed == startButton) {
+        if (can_start)
+            ret = ENTER_RECOVERY_SCREEN;
+        else
+            ret = MAIN_SCREEN;
+    } else if (buttonPressed == exitButton) {
+        ret = EXIT_SCREEN;
     }
-end:
-    noraw();
-    unpost_menu(main_menu);
-    free_menu(main_menu);
-    free_item(main_buttons[0]);
-    free_item(main_buttons[1]);
-    free_item(main_buttons[2]);
+    set_tui_log(NULL);
+    newtFormDestroy(form);
     return ret;
 }
+
+#else
+/* ISO C forbids an empty translation unit */
+extern char** environ;
+#endif

src/tui_screen_options.c

@@ -1,8 +1,4 @@
-#define NCURSES_WIDECHAR 1
-
-#include <ncurses.h>
-#include <form.h>
-#include <menu.h>
+#ifdef TUI
 #include <stdio.h>
 #include <stdlib.h>
 #include <stdint.h>
@@ -14,44 +10,72 @@
 #include <unistd.h>
 #include <assert.h>
 
-#include <common.h>
+#include <palerain.h>
 #include <tui.h>
 
-tui_screen_t tui_screen_options() {
-    tui_screen_t ret = EXIT_SCREEN;
-    ITEM* back_button[2];
-    MENU* back_menu;
-    back_button[0] = new_item("Back", "");
-    back_button[1] = NULL;
-    back_menu = new_menu(back_button);
+void bitfield_check_cb(newtComponent box, void* data) {
+    if (newtCheckboxGetValue(box) == ' ') {
+        *((tui_bit_info_t*)data)->flags_p = *((tui_bit_info_t*)data)->flags_p &~ ((tui_bit_info_t*)data)->opt;
+    } else if (newtCheckboxGetValue(box) == '*') {
+        *((tui_bit_info_t*)data)->flags_p |= ((tui_bit_info_t*)data)->opt;
+    } else assert(0);
+}
 
-    move(21, 1);
-    hline(ACS_HLINE, 80 - 2);
 
-    set_menu_format(back_menu, 1, 10);
-    set_menu_sub(back_menu, derwin(stdscr, 0, 0, 22, 68));
-    post_menu(back_menu);
+tui_screen_t tui_screen_options(void) {
+    tui_bit_info_t verbose_info = { &palerain_flags, palerain_option_verbose_boot };
+    tui_bit_info_t rootful_info = { &palerain_flags, palerain_option_rootful };
+    tui_bit_info_t setup_rootful_info = { &palerain_flags, palerain_option_setup_rootful };
+    tui_bit_info_t force_revert_info = { &palerain_flags, palerain_option_force_revert };
+    tui_bit_info_t safemode_info = { &palerain_flags, palerain_option_safemode };
+    tui_bit_info_t flower_chain_info = { &palerain_flags, palerain_option_flower_chain };
 
-    FORM* options_form;
-    FIELD* options[3];
-    
+    const char* bootargs_entered = NULL;
+    int ret = MAIN_SCREEN;
 
-    refresh();
+    newtCenteredWindow(WIDTH, HEIGHT, NULL);
+    newtComponent backButton = newtCompactButton(66, 18, "Back");
 
-    while(1) {
-        int ch = getch();
-        if (ch == 10) {
-            if (!(item_opts(current_item(back_menu)) & O_SELECTABLE)) continue;
-            if (!strcmp(current_item(back_menu)->name.str, BACK_BUTTON)) {
-                ret = MAIN_SCREEN;
-            }
-            goto end;
-        }
-        refresh();
-    }
-end:
-    unpost_menu(back_menu);
-    free_item(back_button[0]);
-    free_menu(back_menu);
+    newtComponent optionsNotice = newtTextbox(1, 0, WIDTH - 2, 3, NEWT_FLAG_WRAP);
+    newtTextboxSetText(optionsNotice, "You may set the following options. If you don't know what they mean you'll probably have no reason to set them.");
+    // newtTextboxSetColors(optionsNotice, NEWT_COLORSET_LABEL, NEWT_COLORSET_LABEL);
+
+    newtComponent verboseBootBox = newtCheckbox(1, 3, "Verbose boot", CHECKBOX_STATE(palerain_flags, palerain_option_verbose_boot), NULL, NULL);
+    newtComponent rootfulBox = newtCheckbox(1, 4, "Rootful", CHECKBOX_STATE(palerain_flags, palerain_option_rootful), NULL, NULL);
+    newtComponent rootfulSetupBox = newtCheckbox(1, 5, "Setup fakefs", CHECKBOX_STATE(palerain_flags, palerain_option_setup_rootful), NULL, NULL);
+    newtComponent forceRevertBox = newtCheckbox(1, 6, "Restore system", CHECKBOX_STATE(palerain_flags, palerain_option_force_revert), NULL, NULL);
+    newtComponent safeModeBox = newtCheckbox(1, 7, "Safe mode", CHECKBOX_STATE(palerain_flags, palerain_option_safemode), NULL, NULL);
+
+    newtComponentAddCallback(verboseBootBox, bitfield_check_cb, &verbose_info);
+    newtComponentAddCallback(rootfulBox, bitfield_check_cb, &rootful_info);
+    newtComponentAddCallback(rootfulSetupBox, bitfield_check_cb, &setup_rootful_info);
+    newtComponentAddCallback(forceRevertBox, bitfield_check_cb, &force_revert_info);
+    newtComponentAddCallback(safeModeBox, bitfield_check_cb, &safemode_info);
+
+    newtComponent bootCmdlineLabel = newtLabel(1, 8, "Kernel command line:");
+    newtComponent bootCmdlineEntry = newtEntry(1, 9, &xargs_cmd[6], WIDTH - 2, &bootargs_entered, NEWT_ENTRY_SCROLL);
+
+    newtComponent flowerChainBox = newtCheckbox(1, 10, "Flower chain", CHECKBOX_STATE(palerain_flags, palerain_option_flower_chain), NULL, NULL);
+    newtComponentAddCallback(flowerChainBox, bitfield_check_cb, &flower_chain_info);
+
+
+    newtComponent form = newtForm(NULL, NULL, 0);
+    newtFormAddComponents(form, backButton, verboseBootBox, rootfulBox,
+     rootfulSetupBox, forceRevertBox, safeModeBox, bootCmdlineLabel, 
+     bootCmdlineEntry, flowerChainBox, optionsNotice,
+     NULL);
+    newtRunForm(form);
+    newtRefresh();
+    snprintf(xargs_cmd, 0x270, "xargs %s", bootargs_entered);
+    newtComponent buttonPressed = newtFormGetCurrent(form);
+    if (buttonPressed == backButton) {
+        ret = MAIN_SCREEN;
+    } else ret = MAIN_SCREEN;
+    newtFormDestroy(form);
     return ret;
 }
+
+#else
+/* ISO C forbids an empty translation unit */
+extern char** environ;
+#endif

src/usb_iokit.c

@@ -0,0 +1,257 @@
+/*
+ * pongoOS - https://checkra.in
+ *
+ * Copyright (C) 2019-2022 checkra1n team
+ *
+ * This file is part of pongoOS.
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in all
+ * copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ *
+ */
+#ifndef USE_LIBUSB
+#include <errno.h>
+#include <fcntl.h>              // open
+#include <pthread.h>
+#include <stdbool.h>
+#include <stdint.h>
+#include <stdio.h>
+#include <stdlib.h>             // exit, strtoull
+#include <string.h>             // strlen, strerror, memcpy, memmove
+#include <unistd.h>             // close
+#include <wordexp.h>
+#include <sys/mman.h>           // mmap, munmap
+#include <sys/stat.h>           // fstst
+#include <mach/mach.h>
+
+#include <palerain.h>
+#include <CoreFoundation/CoreFoundation.h>
+
+#define ERR(...) LOG(LOG_VERBOSE, __VA_ARGS__)
+
+const char *usb_strerror(usb_ret_t err)
+{
+    return mach_error_string(err);
+}
+
+usb_ret_t USBControlTransfer(usb_device_handle_t handle, uint8_t bmRequestType, uint8_t bRequest, uint16_t wValue, uint16_t wIndex, uint32_t wLength, void *data, uint32_t *wLenDone)
+{
+    IOUSBDevRequest request =
+    {
+        .bmRequestType = bmRequestType,
+        .bRequest = bRequest,
+        .wValue = wValue,
+        .wIndex = wIndex,
+        .wLength = wLength,
+        .pData = data,
+    };
+    usb_ret_t ret = (*handle)->ControlRequest(handle, 0, &request);
+    if(wLenDone) *wLenDone = request.wLenDone;
+    return ret;
+}
+
+usb_ret_t USBBulkUpload(usb_device_handle_t handle, void *data, uint32_t len)
+{
+    return (*handle)->WritePipe(handle, 2, data, len);
+}
+
+static void FoundDevice(void *refCon, io_iterator_t it)
+{
+    stuff_t *stuff = refCon;
+    if(stuff->regID)
+    {
+        return;
+    }
+    io_service_t usbDev = MACH_PORT_NULL;
+    while((usbDev = IOIteratorNext(it)))
+    {
+        uint64_t regID;
+        kern_return_t ret = IORegistryEntryGetRegistryEntryID(usbDev, &regID);
+        if(ret != KERN_SUCCESS)
+        {
+            ERR("IORegistryEntryGetRegistryEntryID: %s", mach_error_string(ret));
+            goto next;
+        }
+        SInt32 score = 0;
+        IOCFPlugInInterface **plugin = NULL;
+        ret = IOCreatePlugInInterfaceForService(usbDev, kIOUSBDeviceUserClientTypeID, kIOCFPlugInInterfaceID, &plugin, &score);
+        if(ret != KERN_SUCCESS)
+        {
+            ERR("IOCreatePlugInInterfaceForService(usbDev): %s", mach_error_string(ret));
+            goto next;
+        }
+        HRESULT result = (*plugin)->QueryInterface(plugin, CFUUIDGetUUIDBytes(kIOUSBDeviceInterfaceID), (LPVOID*)&stuff->dev);
+        (*plugin)->Release(plugin);
+        if(result != 0)
+        {
+            ERR("QueryInterface(dev): 0x%x", result);
+            goto next;
+        }
+        ret = (*stuff->dev)->USBDeviceOpenSeize(stuff->dev);
+        if(ret != KERN_SUCCESS)
+        {
+            ERR("USBDeviceOpenSeize: %s", mach_error_string(ret));
+        }
+        else
+        {
+            ret = (*stuff->dev)->SetConfiguration(stuff->dev, 1);
+            if(ret != KERN_SUCCESS)
+            {
+                ERR("SetConfiguration: %s", mach_error_string(ret));
+            }
+            else
+            {
+                IOUSBFindInterfaceRequest request =
+                {
+                    .bInterfaceClass = kIOUSBFindInterfaceDontCare,
+                    .bInterfaceSubClass = kIOUSBFindInterfaceDontCare,
+                    .bInterfaceProtocol = kIOUSBFindInterfaceDontCare,
+                    .bAlternateSetting = kIOUSBFindInterfaceDontCare,
+                };
+                io_iterator_t iter = MACH_PORT_NULL;
+                ret = (*stuff->dev)->CreateInterfaceIterator(stuff->dev, &request, &iter);
+                if(ret != KERN_SUCCESS)
+                {
+                    ERR("CreateInterfaceIterator: %s", mach_error_string(ret));
+                }
+                else
+                {
+                    io_service_t usbIntf = MACH_PORT_NULL;
+                    while((usbIntf = IOIteratorNext(iter)))
+                    {
+                        ret = IOCreatePlugInInterfaceForService(usbIntf, kIOUSBInterfaceUserClientTypeID, kIOCFPlugInInterfaceID, &plugin, &score);
+                        IOObjectRelease(usbIntf);
+                        if(ret != KERN_SUCCESS)
+                        {
+                            ERR("IOCreatePlugInInterfaceForService(usbIntf): %s", mach_error_string(ret));
+                            continue;
+                        }
+                        result = (*plugin)->QueryInterface(plugin, CFUUIDGetUUIDBytes(kIOUSBInterfaceInterfaceID), (LPVOID*)&stuff->handle);
+                        (*plugin)->Release(plugin);
+                        if(result != 0)
+                        {
+                            ERR("QueryInterface(intf): 0x%x", result);
+                            continue;
+                        }
+                        ret = (*stuff->handle)->USBInterfaceOpen(stuff->handle);
+                        if(ret != KERN_SUCCESS)
+                        {
+                            ERR("USBInterfaceOpen: %s", mach_error_string(ret));
+                        }
+                        else
+                        {
+                            io_start(stuff);
+                            stuff->regID = regID;
+                            while((usbIntf = IOIteratorNext(iter))) IOObjectRelease(usbIntf);
+                            IOObjectRelease(iter);
+                            while((usbDev = IOIteratorNext(it))) IOObjectRelease(usbDev);
+                            IOObjectRelease(usbDev);
+                            return;
+                        }
+                        (*stuff->handle)->Release(stuff->handle);
+                        stuff->handle = NULL;
+                    }
+                    IOObjectRelease(iter);
+                }
+            }
+        }
+
+    next:;
+        if(stuff->dev)
+        {
+            (*stuff->dev)->USBDeviceClose(stuff->dev);
+            (*stuff->dev)->Release(stuff->dev);
+            stuff->dev = NULL;
+        }
+        IOObjectRelease(usbDev);
+    }
+}
+
+static void LostDevice(void *refCon, io_iterator_t it)
+{
+    stuff_t *stuff = refCon;
+    io_service_t usbDev = MACH_PORT_NULL;
+    while((usbDev = IOIteratorNext(it)))
+    {
+        uint64_t regID;
+        kern_return_t ret = IORegistryEntryGetRegistryEntryID(usbDev, &regID);
+        IOObjectRelease(usbDev);
+        if(ret == KERN_SUCCESS && stuff->regID == regID)
+        {
+            io_stop(stuff);
+            stuff->regID = 0;
+            (*stuff->handle)->USBInterfaceClose(stuff->handle);
+            (*stuff->handle)->Release(stuff->handle);
+            (*stuff->dev)->USBDeviceClose(stuff->dev);
+            (*stuff->dev)->Release(stuff->dev);
+        }
+    }
+}
+
+static const int pongo_usb_vendor = PONGO_USB_VENDOR;
+static const int pongo_usb_product = PONGO_USB_PRODUCT;
+
+int wait_for_pongo(void) {
+    kern_return_t ret;
+    stuff_t stuff;
+    io_iterator_t found, lost;
+
+    void* cfdict_keys[3];
+    void* cfdict_values[3];
+
+    cfdict_keys[0] = (void*)CFSTR("IOProviderClass");
+    cfdict_keys[1] = (void*)CFSTR("idVendor");
+    cfdict_keys[2] = (void*)CFSTR("idProduct");
+
+    cfdict_values[0] = (void*)CFSTR("IOUSBDevice");
+    cfdict_values[1] = (void*)CFNumberCreate(kCFAllocatorDefault, kCFNumberSInt32Type, &pongo_usb_vendor);
+    cfdict_values[2] = (void*)CFNumberCreate(kCFAllocatorDefault, kCFNumberSInt32Type, &pongo_usb_product);
+
+    CFDictionaryRef cfdict = CFDictionaryCreate(kCFAllocatorDefault, (const void**)cfdict_keys, (const void**)cfdict_values, 3, &kCFTypeDictionaryKeyCallBacks, &kCFTypeDictionaryValueCallBacks);
+    IONotificationPortRef notifyPort = IONotificationPortCreate(kIOMasterPortDefault);
+
+    CFRetain(cfdict);
+    // CFRunLoopAddSource(CFRunLoopGetCurrent(), IONotificationPortGetRunLoopSource(notifyPort), kCFRunLoopDefaultMode);
+
+    ret = IOServiceAddMatchingNotification(notifyPort, kIOFirstMatchNotification, cfdict, &FoundDevice, &stuff, &found);
+    if(ret != KERN_SUCCESS)
+    {
+        ERR("IOServiceAddMatchingNotification: %s", mach_error_string(ret));
+        return -1;
+    }
+    FoundDevice(&stuff, found);
+
+    CFRetain(cfdict);
+    ret = IOServiceAddMatchingNotification(notifyPort, kIOTerminatedNotification, cfdict, &LostDevice, &stuff, &lost);
+    if(ret != KERN_SUCCESS)
+    {
+        ERR("IOServiceAddMatchingNotification: %s", mach_error_string(ret));
+        return -1;
+    }
+    LostDevice(&stuff, lost);
+    // CFRunLoopRun();
+    while (get_spin()) {
+        sleep(1);
+    }
+    CFRelease(cfdict);
+    return 0;
+}
+#else
+/* ISO C forbids an empty translation unit */
+extern char** environ;
+#endif

src/usb_libusb.c

@@ -24,8 +24,7 @@
  * SOFTWARE.
  *
  */
-
-
+#ifdef USE_LIBUSB
 #include <errno.h>
 #include <fcntl.h>              // open
 #include <pthread.h>
@@ -38,20 +37,11 @@
 #include <sys/mman.h>           // mmap, munmap
 #include <sys/stat.h>           // fstst
 
-#include <common.h>
-#define ERR(...) LOG(LOG_VERBOSE, __VA_ARGS__)
-
-// Keep in sync with Pongo
-#define PONGO_USB_VENDOR    0x05ac
-#define PONGO_USB_PRODUCT   0x4141
-#define CMD_LEN_MAX         512
-#define UPLOADSZ_MAX        (1024 * 1024 * 128)
-
-typedef struct stuff stuff_t;
-
-static void io_start(stuff_t *stuff);
-static void io_stop(stuff_t *stuff);
+#include <palerain.h>
+#define ERR(...) LOG(LOG_ERROR, __VA_ARGS__)
 
+void io_start(stuff_t *stuff);
+void io_stop(stuff_t *stuff);
 
 const char *usb_strerror(usb_ret_t err)
 {
@@ -122,21 +112,14 @@ usb_ret_t USBBulkUpload(usb_device_handle_t handle, void *data, int len)
     return LIBUSB_SUCCESS;
 }
 
-struct stuff
-{
-    pthread_t th;
-    libusb_device *dev;
-    usb_device_handle_t handle;
-};
-
 static int FoundDevice(libusb_context *ctx, libusb_device *dev, libusb_hotplug_event event, void *arg)
 {
-    LOG(LOG_VERBOSE, "PongoOS USB Device connected");
     stuff_t *stuff = arg;
     if(stuff->handle)
     {
         return LIBUSB_SUCCESS;
     }
+    LOG(LOG_VERBOSE, "PongoOS USB Device connected");
 
     libusb_device_handle *handle;
     int r = libusb_open(dev, &handle);
@@ -179,15 +162,16 @@ static int FoundDevice(libusb_context *ctx, libusb_device *dev, libusb_hotplug_e
 
 static int LostDevice(libusb_context *ctx, libusb_device *dev, libusb_hotplug_event event, void *arg)
 {
-    LOG(LOG_VERBOSE, "PongoOS USB Device disconnected");
     stuff_t *stuff = arg;
     if(stuff->dev != dev)
     {
         return LIBUSB_SUCCESS;
     }
+    LOG(LOG_VERBOSE, "PongoOS USB Device disconnected");
 
     io_stop(stuff);
     libusb_close(stuff->handle);
+    libusb_unref_device(dev);
     stuff->handle = NULL;
     stuff->dev = NULL;
 
@@ -196,10 +180,12 @@ static int LostDevice(libusb_context *ctx, libusb_device *dev, libusb_hotplug_ev
 
 int wait_for_pongo(void)
 {
-    stuff_t stuff = {};
+    stuff_t stuff;
+    stuff.handle = NULL;
     libusb_hotplug_callback_handle hp[2];
+    libusb_context* ctx = NULL;
 
-    int r = libusb_init(NULL);
+    int r = libusb_init(&ctx);
     if(r != LIBUSB_SUCCESS)
     {
         ERR("libusb_init: %s", libusb_error_name(r));
@@ -209,195 +195,76 @@ int wait_for_pongo(void)
     if(!libusb_has_capability(LIBUSB_CAP_HAS_HOTPLUG))
     {
         ERR("libusb: no hotplug capability");
-        libusb_exit(NULL);
+        libusb_exit(ctx);
         return -1;
     }
 
-    r = libusb_hotplug_register_callback(NULL, LIBUSB_HOTPLUG_EVENT_DEVICE_ARRIVED, 0, PONGO_USB_VENDOR, PONGO_USB_PRODUCT, LIBUSB_HOTPLUG_MATCH_ANY, FoundDevice, &stuff, &hp[0]);
+    r = libusb_hotplug_register_callback(ctx, LIBUSB_HOTPLUG_EVENT_DEVICE_LEFT, 0, PONGO_USB_VENDOR, PONGO_USB_PRODUCT, LIBUSB_HOTPLUG_MATCH_ANY, LostDevice, &stuff, &hp[1]);
     if(r != LIBUSB_SUCCESS)
     {
         ERR("libusb_hotplug: %s", libusb_error_name(r));
-        libusb_exit(NULL);
+        libusb_exit(ctx);
         return -1;
     }
 
-    r = libusb_hotplug_register_callback(NULL, LIBUSB_HOTPLUG_EVENT_DEVICE_LEFT, 0, PONGO_USB_VENDOR, PONGO_USB_PRODUCT, LIBUSB_HOTPLUG_MATCH_ANY, LostDevice, &stuff, &hp[1]);
-    if(r != LIBUSB_SUCCESS)
-    {
-        ERR("libusb_hotplug: %s", libusb_error_name(r));
-        libusb_exit(NULL);
-        return -1;
-    }
-
-    libusb_device **list;
-    ssize_t sz = libusb_get_device_list(NULL, &list);
-    if(sz < 0)
-    {
-        ERR("libusb_get_device_list: %s", libusb_error_name((int)sz));
-        libusb_exit(NULL);
-        return -1;
-    }
-
-    for(ssize_t i = 0; i < sz; ++i)
-    {
-        struct libusb_device_descriptor desc = {};
-        r = libusb_get_device_descriptor(list[i], &desc);
-        if(r != LIBUSB_SUCCESS)
-        {
-            ERR("libusb_get_device_descriptor: %s", libusb_error_name(r));
-            // continue anyway
-        }
-        if(desc.idVendor != PONGO_USB_VENDOR || desc.idProduct != PONGO_USB_PRODUCT)
-        {
-            libusb_unref_device(list[i]);
-            continue;
-        }
-        r = FoundDevice(NULL, list[i], LIBUSB_HOTPLUG_EVENT_DEVICE_ARRIVED, &stuff);
-        for(ssize_t j = i + 1; j < sz; ++j)
-        {
-            libusb_unref_device(list[j]);
-        }
-        if(r != LIBUSB_SUCCESS)
-        {
-            libusb_free_device_list(list, 0);
-            libusb_exit(NULL);
-            return -1;
-        }
-        break;
-    }
-    libusb_free_device_list(list, 0);
-
-    while(get_spin())
-    {
-        r = libusb_handle_events(NULL);
+    while (1) {
+        r = libusb_handle_events(ctx);
         if(r != LIBUSB_SUCCESS)
         {
             ERR("libusb_handle_events: %s", libusb_error_name(r));
             break;
         }
-    }
 
-    libusb_exit(NULL);
-    return 0;
-}
+        libusb_device **list;
+        ssize_t sz = libusb_get_device_list(ctx, &list);
+        bool done = false;
+        if(sz < 0)
+        {
+            ERR("libusb_get_device_list: %s", libusb_error_name((int)sz));
+            libusb_exit(ctx);
+            return -1;
+        }
 
-
-static void io_start(stuff_t *stuff)
-{
-    int r = pthread_create(&stuff->th, NULL, &pongo_usb_callback, &stuff->handle);
-    if(r != 0)
-    {
-        ERR("pthread_create: %s", strerror(r));
-        exit(-1); // TODO: ok with libusb?
-    }
-    pthread_join(stuff->th, NULL);
-}
-
-static void io_stop(stuff_t *stuff)
-{
-    int r = pthread_cancel(stuff->th);
-    if(r != 0)
-    {
-        ERR("pthread_cancel: %s", strerror(r));
-        exit(-1); // TODO: ok with libusb?
-    }
-    r = pthread_join(stuff->th, NULL);
-    if(r != 0)
-    {
-        ERR("pthread_join: %s", strerror(r));
-        exit(-1); // TODO: ok with libusb?
-    }
-}
-
-static void write_stdout(char *buf, uint32_t len)
-{
-    while(len > 0) {
-        if (verbose >= 3) {
-                ssize_t s = write(1, buf, len);
-            if(s < 0) {
-                LOG(LOG_ERROR, "write: %s", strerror(errno));
-                pthread_exit(NULL);
+        for(ssize_t i = 0; i < sz; ++i)
+        {
+            struct libusb_device_descriptor desc;
+            r = libusb_get_device_descriptor(list[i], &desc);
+            if(r != LIBUSB_SUCCESS)
+            {
+                ERR("libusb_get_device_descriptor: %s", libusb_error_name(r));
+                // continue anyway
             }
-            buf += s;
-            len -= s;
-        } else break;
+            if(desc.idVendor != PONGO_USB_VENDOR || desc.idProduct != PONGO_USB_PRODUCT)
+            {
+                libusb_unref_device(list[i]);
+                continue;
+            }
+            r = FoundDevice(ctx, list[i], LIBUSB_HOTPLUG_EVENT_DEVICE_ARRIVED, &stuff);
+            for (ssize_t j = i; j < sz; ++j) {
+                libusb_unref_device(list[j]);
+            }
+
+            if(r != LIBUSB_SUCCESS)
+            {
+                libusb_free_device_list(list, 0);
+                libusb_exit(ctx);
+                return -1;
+            } else {
+                done = true;
+            }
+            break;
+        }
+
+        libusb_free_device_list(list, 0);
+
+        if (done) goto end;
     }
-}
 
-int issue_pongo_command(usb_device_handle_t handle, char *command)
-{
-	uint32_t outpos = 0;
-	uint32_t outlen = 0;
-	int ret = USB_RET_SUCCESS;
-	uint8_t in_progress = 1;
-	if (command == NULL) goto fetch_output;
-	size_t len = strlen(command);
-	char command_buf[512];
-	char stdout_buf[0x2000];
-	if (len > (CMD_LEN_MAX - 2))
-	{
-		LOG(LOG_ERROR, "Pongo command %s too long (max %d)", command, CMD_LEN_MAX - 2);
-		return EINVAL;
-	}
-    if (verbose < 3 || verbose > 4) {
-	    LOG(LOG_VERBOSE, "Executing PongoOS command: '%s'", command);
-    } else {
-        printf("%s\n", command);
-    }
-	snprintf(command_buf, 512, "%s\n", command);
-	len = strlen(command_buf);
-	ret = USBControlTransfer(handle, 0x21, 4, 1, 0, 0, NULL, NULL);
-	if (ret)
-		goto bad;
-	ret = USBControlTransfer(handle, 0x21, 3, 0, 0, (uint32_t)len, command_buf, NULL);
-fetch_output:
-	while (in_progress) {
-		ret = USBControlTransfer(handle, 0xa1, 2, 0, 0, (uint32_t)sizeof(in_progress), &in_progress, NULL);
-		if (ret == USB_RET_SUCCESS)
-		{
-			ret = USBControlTransfer(handle, 0xa1, 1, 0, 0, 0x1000, stdout_buf + outpos, &outlen);
-			if (ret == USB_RET_SUCCESS)
-			{
-				write_stdout(stdout_buf + outpos, outlen);
-				outpos += outlen;
-				if (outpos > 0x1000)
-				{
-					memmove(stdout_buf, stdout_buf + outpos - 0x1000, 0x1000);
-					outpos = 0x1000;
-				}
-			}
-		}
-		if (ret != USB_RET_SUCCESS)
-		{
-			goto bad;
-		}
-	}
-bad:
-	if (ret != USB_RET_SUCCESS)
-	{
-		if (ret == USB_RET_NOT_RESPONDING)
-			return 0;
-        if (command != NULL && (!strncmp("boot", command, 4) && ret == USB_RET_IO))
-            return 0;
-		LOG(LOG_ERROR, "USB error: %s", usb_strerror(ret));
-		return ret;
-	}
-	else
-		return ret;
+    end:
+        libusb_exit(ctx);
+        return 0;
 }
-
-int upload_pongo_file(usb_device_handle_t handle, unsigned char *buf, unsigned int buf_len)
-{
-	int ret = 0;
-	ret = USBControlTransfer(handle, 0x21, 1, 0, 0, 4, &buf_len, NULL);
-	if (ret == USB_RET_SUCCESS)
-	{
-		ret = USBBulkUpload(handle, buf, buf_len);
-		if (ret == USB_RET_SUCCESS)
-		{
-			LOG(LOG_VERBOSE, "Uploaded %llu bytes to PongoOS", (unsigned long long)buf_len);
-		}
-	}
-	return ret;
-}
-
+#else
+/* ISO C forbids an empty translation unit */
+extern char** environ;
+#endif