iPhone 5 iOS 10.3.3 h3lix jailbreak uicache failed!

image.png

iPhone 5 是32位的手机，32位手机上iOS10系统的越狱软件只有h3lix，以前越狱都很正常，最近发现使用h3lix越狱总是失败提示“uicahce failed！”（如上图），重启N次都没有效果。

搜索后发现有两种方法：

1. 在重签名的时候去掉“get-task-allow”权限可以解决这个问题；
   这种方法不知道怎么搞，网上有人成功：https://www.exchen.net/h3lix-uicache-failed.html
   

   image.png

2. 使用针对H3lix RC6版本的补丁程序来解决。
   1.1 下载脚本后，把patch.sh和h3lix-RC6.ipa放到同一目录后执行以下命令：
   ./patch.sh h3lix-RC6.ipa h3lix-RC6-path.ipa
   

   image.png
   
   1.2 使用AltDeploy安装修补后的h3lix程序，执行，成功越狱。
   
   image.png

#patch.sh for H3lix RC6
if [ $# != 2 ]; then
    echo "Usage: $0 /path/to/input_ipa /path/to/output_ipa"
    exit 1
fi

if ! [ -f $1 ]; then
    echo "'$1' does not exist"
    exit 1
fi

if [ -f $2 ]; then
    echo "'$2' already exists"
    exit 1
fi

echo "Setting up environment"
mkdir /tmp/unpacked_h3lix
if [ $? != 0 ]; then
    echo "mkdir create temporary directory"
    exit 1
fi

echo "Extracting"
unzip $1 -d /tmp/unpacked_h3lix > /dev/null
if [ $? != 0 ]; then
    echo "can't unzip '$1'"
    rm -rf /tmp/unpacked_h3lix
    exit 1
fi

echo "Patching"

# tada tada P\WX+1y~~z??ti.....
(printf '\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11' | dd of=/tmp/unpacked_h3lix/Payload/h3lix.app/h3lix bs=1 seek=30848 count=20 conv=notrunc) 2> /dev/null
(printf '\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11\x11' | dd of=/tmp/unpacked_h3lix/Payload/h3lix.app/h3lix bs=1 seek=32920 count=20 conv=notrunc) 2> /dev/null

# i DoN'T hAz CS_GET_TASK_ALLOW?!?!??
(printf '\x00\x00\x00\x00' | dd of=/tmp/unpacked_h3lix/Payload/h3lix.app/h3lix bs=1 seek=31790 count=4 conv=notrunc) 2> /dev/null

# DeBuG Br34K
(printf '\x70\x47' | dd of=/tmp/unpacked_h3lix/Payload/h3lix.app/h3lix bs=1 seek=40800 count=2 conv=notrunc) 2> /dev/null

echo "Compressing"

CD=$(pwd)
cd /tmp/unpacked_h3lix

if [[ "$2" = /* ]]; then
    zip -r $2 Payload/ > /dev/null
else
    zip -r "$CD/$2" Payload/ > /dev/null
fi

if [ $? != 0 ]; then
    echo "can't zip '$1'"
    rm -rf /tmp/unpacked_h3lix
    cd - > /dev/null
    exit 1
fi

cd - > /dev/null
rm -rf /tmp/unpacked_h3lix
echo "Done"
exit 0

修复后的H3lix程序：
https://workupload.com/start/etd9TYxN
https://drive.google.com/file/d/1bdYuKH1VEkIKDhAf31eH3MTRzbesb7MA/view

参考：
https://github.com/pixelomer/AltDeploy/issues/30
https://www.exchen.net/h3lix-uicache-failed.html