Hi everyone

I just saw the thread opened by kensou and closed by volkspost ("iPhone 3GS: How to create a custom RAM disk with ssh ?").

I am in a similar situation, but I can't use the method suggested by volkspost (i.e. SSH to the iPhone) because my iPhone is stuck in recovery mode (permanent Apple logo, until it runs out of batteries).

Some more details:

My iPhone 3GS with OS 3.0.1 is jailbroken (redsn0w) and has been working very well for a few weeks. Yesterday, after some Cydia updates (I believe the latest was SQLite), it's become completely stuck (Apple logo never reaching Springboard). I can successfully put it into recovery and/or DFU mode, so I could probably restore the firmware and go from there. However, I have several photos and videos that I haven't backed up (I just came back from a trip to Italy....) and would like to recover, before I restore.

Here are some of the things I did (which didn't seem to help):

- Using iRecovery, I set auto-boot to true, saveenv, exit
- Using redsn0w, I tried to rejailbreak. It ran the full process successfully, but in the end I was stuck with the same Apple logo. One thing that I noticed was that towards the end the iPhone spent quite some time in "waiting for NAND to appear" state (but then proceeded with volume check and so on)
- Using iPhone Tunnel Suite or iPhoneBrowser, I can't connect (kind of expected, but just in case...)

My guess is that once I'm in, using iRecovery, I should be able to identify and transfer the files I need (or the disk image). The only missing piece is a RAMDisk with tools that can mount and move the iPhone disk image. Even though I'm a developer (with extensive C/C++ experience), I have little or no iPhone development experience, so I certainly could not do it myself (at least not in a reasonable time). Do you have any advice, links or ideas on how I could recover those files?

I'm pasting the iRecovery log below: maybe it will show some useful information to the trained eye... Needless to say, the phone is mine (not stolen or anything like that) and the information I'm trying to recover is also mine (I'm sure you would not want to help otherwise). In case these things matter, there is a passcode (which I know, of course) and all backups I made in the past were not encrypted.

ANY idea/suggestion would be GREATLY appreciated!



C:\temp\iRecovery\irecovery-windows>iRecovery.exe -s
iRecovery - Recovery Utility
by wEsTbAeR-- and Tom3q

Got USB


=======================================
::
:: iBoot for n88ap, Copyright 2009, Apple Inc.
::
:: BUILD_TAG: iBoot-596.24
::
:: BUILD_STYLE: RELEASE
::
:: USB_SERIAL_NUMBER: CPID:8920 CPRV:14 CPFM:03 SCEP:02 BDID:00 ECID:00000___________ IBFL:01 SRNM:[___________]
::
=======================================

[FTL:MSG] Apple NAND Driver (AND) RO
[NAND] Found Chip ID 0x3295DE987A on FMI0:CE0
[NAND] Found Chip ID 0x3295DE987A on FMI0:CE1
[NAND] Found Chip ID 0x3295DE987A on FMI1:Cnt: 1
Entering recovery mode, starting command prompt
?[m] IL_Init [OK]
[FTL:MSG] BUF_Init [OK]
[FTL:MSG] FPart Init [OK]
read new style signature 0x43313132 (line:305)
[FTL:MSG] VSVFL Register [OK]
[FTL:MSG] VFL Init [OK]
[FTL:MSG] VFL_Open [OK]
[FTL:MSG] YAFTL Register [OK]
yaFTL::YAFTL_Open(l:2738): CXT is not valid . Performing full NAND R/O restore .
..
[FTL:MSG] FTL_Open [OK]
Boot Failure Count: 15 Panic Fail Cont: 1
Entering recovery mode, starting command prompt
?[m] (Recovery) iPhone$ printenv
build-style = "RELEASE"
build-version = "iBoot-596.24"
config_board = "n88ap"
loadaddr = "0x41000000"
boot-command = "fsboot"
idle-off = "true"
boot-device = "nand0"
boot-partition = "0"
boot-path = "/System/Library/Caches/com.apple.kernelcaches/kernelcache.s5l8920x"
display-color-space = "RGB888"
display-timing = "n88"
P bootdelay = "0"
P platform-uuid = <DATA>
P backlight-level = "197"
P auto-boot = "true"
image-version = "0x3"
framebuffer = "0x4fd0000"
secure-boot = "0x1"

(Recovery) iPhone$ setenv auto-boot true
(Recovery) iPhone$ saveenv
(Recovery) iPhone$ /exit

I have the same problem on my 3GS 32gb... I was running 3.0 firmware unlocked with redsn0w... worked fine for several weeks also and even in Taiwan. All up until I went to Hong Kong and used a PPS sim card and the phone froze up... First I got the message that the iPhone needs to be restored in iTunes and so i tried. Then it gave me the error 23 message and would not let me restore at all, not even update the firmware, I was stuck in recovery mode. I used redsn0w to get it up so I can save my pics and some numbers and noticed there are no signals for phone, wifi, or bluetooth. There are no IMEI or the other numbers below it. I am working in Asia right now and the phone is purchased new back in the states with a 2 year contract with AT&T.

Today I took my phone to China Telecom (Who are the authorized iPhone carriers here in Taiwan) They told me they are unable to assist me.

Can anyone help in my issue? I am lost without my iPhone!

Please...

Exactly same situation, any help??

Yes... the same problem and situation, iPhone 3GS 3.0.1... after installing SQLite from Cydia...

What a shame I had to install 3.1 !

In some cases, it would be nice to have console access in order to repair without needing the restoration process.

I think we really need a rescue ramdisk, included in redsn0w for instance (for instance, on the screen we choose 'install cydia' we could choose 'launch rescue console' )

Mine was a 3GS jailbroken with 3.0.1, I had not exported my certificates onto Saurik server, and it was just my /dev/disks0s2 that was corrupted ! It I had have a console, I certainly have my iphone repaired by a simple fsck_hfs !

Hello, I'm in the same situation I guess, and I would like to know how to use the "fsck_hfs" function with iRecovery. If someone could help me please, that could be greatfull =D
Thank you

and another bump

I'm having the same problem. Restoring to 3.1 isn't an option, this will make me loose unlock, possibly for ever.

I have exacly the same problem. I was in a nice 3.0.1 JB iphone. did a Restore from the iphone. never booted after that (Stuck on Apple Logo).

I redid a JB many times but without success

So I ve tried iRecovery and I got exactly the same ourput as _DL_

can anyone explain me how to fix indexes or fsck partitions .

I found that using redsnow allow us for some seconds to use irecovery in unrestricted mode (thanx to th exploit) . So If someone could hhelp me in iboot comands I will be gratefull.

Can you let me know at what point I should run irecovery while using redsn0w to get into the 3GS without restrictions. I'm in exactly the same situation.. SQLite, boot cycle, no SSH and have been trying to get into the filesystem for a couple of weeks now.

If using irecovery through redsn0w will let me do more I'll give it a try and let you know what happens