From d3b873c777afc36016481e8552a781e4d52bad13 Mon Sep 17 00:00:00 2001 From: ZomkaDEV Date: Mon, 10 Aug 2026 03:12:27 +0300 Subject: [PATCH] docs: note known ldid-procursus hang in FAQ --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 15f223b..6afa2e5 100644 --- a/README.md +++ b/README.md @@ -181,6 +181,8 @@ vphone-amfidont # .build/vphone-cli.app/Contents/Resources/vphone-amfido **Install a `.ipa`/`.tipa`** — use the running VM's Install menu (drag-drop or file picker). +**`cfw install` hangs re-signing a system binary (e.g. `Campo`), memory climbing unbounded** — known bug in `ldid-procursus` up to `2.1.5-procursus7` (the current Homebrew `stable`): `bytes(uint64_t)` calls `__builtin_clzll(0)` with no zero-guard, which is undefined behavior, and on this build resolves to a `0`-length that underflows an unsigned loop counter — `ldid` spins writing one byte at a time into a growing buffer instead of terminating. Triggered by *any* entitlements plist containing an integer value of exactly `0` (some real Apple system binaries have these). Fixed upstream but not yet in a tagged release; rebuild from source: `brew install --HEAD ldid-procursus && brew link --overwrite ldid-procursus`. Kill the hung `ldid` process first (`sudo kill -9 `) if you already hit it. + ## Automation `vphone-cli` exposes a host control socket (`/vphone.sock`) for programmatic control — screenshots, touch, swipes, hardware keys, clipboard — each action returning an inline screenshot for AI-driven E2E testing. See [vphone-mcp](https://github.com/pluginslab/vphone-mcp) for an MCP server wrapping it.