Acelogic
1510d8c6ce
An EL2 monitor/hypervisor and toolchain that boots macOS 27 on the ASUS A16 (Snapdragon X2 Elite), with an Adreno Metal plug-in and IOGPU kext, and air2ir3, an AIR to Mesa ir3 shader compiler. MIT, with GPL-2.0 components listed in LICENSE and THIRD_PARTY_NOTICES.md. No Apple, Qualcomm, ASUS or Microsoft binaries are included.
58 lines
2.4 KiB
Python
Executable File
58 lines
2.4 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
# SPDX-License-Identifier: MIT
|
|
"""Extract the profile-bound active-root hash payload from its matching IPSW."""
|
|
import argparse
|
|
import hashlib
|
|
from pathlib import Path
|
|
import plistlib
|
|
import runpy
|
|
import sys
|
|
import zipfile
|
|
|
|
ROOT = Path(__file__).resolve().parents[1]
|
|
sys.path.insert(0, str(ROOT / 'probes'))
|
|
from guestprofile import get_profile
|
|
|
|
|
|
def main():
|
|
ap = argparse.ArgumentParser(description=__doc__)
|
|
ap.add_argument('ipsw', type=Path)
|
|
ap.add_argument('--guest-profile', default='j700ap-26A428')
|
|
ap.add_argument('--output', required=True, type=Path)
|
|
args = ap.parse_args()
|
|
profile = get_profile(args.guest_profile)
|
|
spec = profile.root_hash
|
|
if spec is None:
|
|
raise ValueError('profile has no qualified root-hash component')
|
|
with zipfile.ZipFile(args.ipsw) as archive:
|
|
manifest = plistlib.loads(archive.read('BuildManifest.plist'))
|
|
if manifest['ProductBuildVersion'] != spec.build_id:
|
|
raise ValueError('IPSW build does not match profile')
|
|
identities = [i for i in manifest['BuildIdentities']
|
|
if i['Info'].get('DeviceClass') == spec.device_class and
|
|
i['Info'].get('Variant') == 'macOS Customer']
|
|
if len(identities) != 1:
|
|
raise ValueError('expected one native macOS identity for this board')
|
|
component = identities[0]['Manifest'][spec.component]
|
|
path = component['Info']['Path']
|
|
data = archive.read(path)
|
|
if (hashlib.sha256(data).hexdigest() != spec.component_sha256 or
|
|
hashlib.sha384(data).digest() != component['Digest']):
|
|
raise ValueError('root-hash component differs from profile or manifest')
|
|
extract = runpy.run_path(str(ROOT / 'tools/extract-firmware.py'))['im4p_payload']
|
|
payload = extract(data)
|
|
if len(payload) != spec.payload_bytes or hashlib.sha256(payload).hexdigest() != spec.payload_sha256:
|
|
raise ValueError('extracted root-hash payload differs from profile')
|
|
if args.output.exists():
|
|
if args.output.read_bytes() != payload:
|
|
raise ValueError('refusing to replace a different existing output')
|
|
else:
|
|
args.output.parent.mkdir(parents=True, exist_ok=True)
|
|
args.output.write_bytes(payload)
|
|
print(f'{path}: {len(payload)} raw bytes -> {args.output}')
|
|
print(f'SHA256 {spec.payload_sha256}')
|
|
|
|
|
|
if __name__ == '__main__':
|
|
main()
|