Skip to content

Expose a memory hook API for Frida - #1000

Open
devnoname120 wants to merge 1 commit into
opa334:3.xfrom
devnoname120:feat/frida-memory-hooks
Open

devnoname120 wants to merge 1 commit into
opa334:3.xfrom
devnoname120:feat/frida-memory-hooks

Conversation

@devnoname120

@devnoname120 devnoname120 commented Sep 11, 2026

Copy link
Copy Markdown

Expose a versioned, process-local API for code patching and VM protection through hookd. This replaces Frida's syscall-rewriting shim with explicit calls that do not depend on its instruction layout.

Addresses #938, #979, #985 and frida/frida#3773 together with frida/frida-gum#1150; requires #999.

Validated on an iPhone 11/iOS 26.0 standalone target, including a full reboot.

@TheDauntless

Copy link
Copy Markdown

Tested this on iPhone 11 Pro, iOS 26.0.1. Jailbreak was successful, as well as Frida function hooking.

@morzelowski

Copy link
Copy Markdown

Confirmed working on iPhone 11 / iOS 26.0 as part of the full 3-patch set:

I built Dopamine with both Dopamine PRs and Frida with the matching frida-gum patch.

The new jailbreak-provided memory hook API worked correctly in this setup. frida-ps -U worked and Frida injection no longer caused the kernel panic/reboot I was getting with stock Dopamine.

This looks like a real fix for the iOS 26 Frida integration issue on my device.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants