Skip to content

Fix black screen on iOS 26+ #220

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
aristk wants to merge 1 commit into
base: main
Choose a base branch
from
+9 −11
Open

Fix black screen on iOS 26+ #220

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 9 additions & 11 deletions Natives/dyld_bypass_validation.m
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -228,23 +228,21 @@ void init_bypassDyldLibValidation() {

NSDebugLog(@"[DyldLVBypass] init");

switch ((int)DeviceGetJITFlags(YES)) {
case JIT_FLAG_FORCE_MIRRORED | JIT_FLAG_HAS_TXM:
if (@available(iOS 26.0, *)) {
if (DeviceHasJITFlags(JIT_FLAG_FORCE_MIRRORED | JIT_FLAG_HAS_TXM)) {
NSDebugLog(@"[DyldLVBypass] Using redirectFunctionMirrored");
redirectFunction = redirectFunctionMirrored;
break;
case JIT_FLAG_FORCE_MIRRORED:
// Special special case for non-TXM iOS 26+
// We can JIT without script, but we cannot modify existing code in dsc without it.
// Therefore, we choose a hook method that avoids patching code in dsc completely, using hardware breakpoint.
// The function only stashes the original function pointers, and the breakpoint handler will redirect to our hook
} else if (DeviceHasJITFlags(JIT_FLAG_FORCE_MIRRORED)) {
// Non-TXM iOS 26+: avoid patching code in dsc, use hardware breakpoint instead
NSDebugLog(@"[DyldLVBypass] Using redirectFunctionHWBreakpoint");
redirectFunction = redirectFunctionHWBreakpoint;
break;
default:
} else {
NSDebugLog(@"[DyldLVBypass] Using redirectFunctionDirect");
redirectFunction = redirectFunctionDirect;
break;
}
} else {
NSDebugLog(@"[DyldLVBypass] Using redirectFunctionDirect");
redirectFunction = redirectFunctionDirect;
}

// Modifying exec page during execution may cause SIGBUS, so ignore it now
Expand Down