• Your favorite

    Apple

    ,

    iPhone

    ,

    iPad

    ,

    iOS

    ,
    Jailbreak
    , and
    Cydia
    site.
  • 'GlyphPatch' Fixes a Vulnerability With iOS Character Rendering Engines


    On Sunday, well-known iOS developer Flippo Bigarella released a new free jailbreak tweak in Cydia called GlyphPatch, which has managed to perk some eyebrows. The tweak fixes a vulnerability in iOS having to do with character rendering engines that can be the root cause of a DoS (Denial of Service) attack, as the developer explains:

    Quote Originally Posted by Filippo
    GlyphPatch is a MobileSubstrate tweak which aims to patch a vulnerability affecting iOS / OS X characters rendering engines which can be exploited through a malicious sequence of characters in order to achieve a DoS attack.

    ...

    By installing this tweak you can protect yourself from this particular attack on iOS. Since the vulnerability has been fixed on iOS 7, I donít know if Apple will issue a 6.x update just to fix it before the next major release. So, if you donít want to loose your jailbreak and be immune against that attack, just install it from Cydia.
    Bigarella notes that the vulnerability was first disclosed on August 29th, 2013 and that this tweak can help protect you from the DoS attack without the need to update to a software update that Apple may (or may not) release in the future to patch this problem.

    The vulnerability can be effective against users through all kinds of application interfaces, including the Messages application, Safari application, Settings application, and more. Virtually anywhere in iOS where characters can be rendered, the user can be affected.

    This vulnerability is also available in Mac OS X; Bigarella explains that he is working on a fix for Mac OS X users too, but it is not yet available at this point in time. GlyphPatch is an open source jailbreak tweak, and its source code is available on Github at this link. Bigarella goes into more detail about how the vulnerability works on his blog at this link.

    After installing GlyphPatch, you will be protected from this vulnerability without having to take any further steps. If you want to grab it, refresh your sources and take a look in the Changes tab of Cydia.

    Name: GlyphPatch
    Price: FREE
    Version: 0.1-6
    Repo: BigBoss
    Developer: Filippo Bigarella
    This article was originally published in forum thread: 'GlyphPatch' Fixes a Vulnerability With iOS Character Rendering Engines started by Anthony Bouchard View original post
    Comments 18 Comments
    1. Jato_BZ's Avatar
      Jato_BZ -
      *installed thanks for the heads up! 👍
    1. LaddersRCool's Avatar
      LaddersRCool -
      Quickly someone release a tweak with the string of text in the title to the mmi repo maybe that will teach people of the importance of this fix.
    1. Sage I's Avatar
      Sage I -
      Quote Originally Posted by LaddersRCool View Post
      Quickly someone release a tweak with the string of text in the title to the mmi repo maybe that will teach people of the importance of this fix.
      Huh? I understood your third and fourth line but the first two were confusing and unclear...
    1. DieselVexx's Avatar
      DieselVexx -
      Man, this may have caused a problem with my Youtube app but it seems every other tweak and app is running way smoother and opening super quick. Seems like my phone isn't crashing as much either! Will someone please tell me if I'm dreaming.
    1. aorowe's Avatar
      aorowe -
      So I did a little reading up on this, and now I cannot find it in Cydia. Did the Author take it down or something?
    1. kosher1's Avatar
      kosher1 -
      I can't find it. What gives?
    1. gorskiqne's Avatar
      gorskiqne -
      Seems like my phone isn't crashing as much either!
    1. Jato_BZ's Avatar
      Jato_BZ -
      Quote Originally Posted by aorowe View Post
      So I did a little reading up on this, and now I cannot find it in Cydia. Did the Author take it down or something?
      It's still there... GlyphPatch (no space) via BigBoss Repo
    1. aorowe's Avatar
      aorowe -
      Quote Originally Posted by Jato_BZ View Post
      It's still there... GlyphPatch (no space) via BigBoss Repo
      Still can't seem to find it, even searched within the repo directly under G.

      But it's good to know that I'm not the only one having this issue.
    1. kosher1's Avatar
      kosher1 -
      Quote Originally Posted by aorowe View Post
      Still can't seem to find it, even searched within the repo directly under G.

      But it's good to know that I'm not the only one having this issue.
      Yup same here. Can't see it
    1. Scheuerle's Avatar
      Scheuerle -
      I went to changes in Cydia, it was there. Finished refreshing then 'pop' it disappeared before my eyes.
      Humbug.
    1. Jato_BZ's Avatar
      Jato_BZ -
      You're right it's not there. The version I have is 0.1-6. If you go to his Github page he's up to 0.2-1 so maybe he's pulled it for the time being. There looks like there was one conflict with WhatsApp but I don't have that and haven't had any issues with it so far.

      U can check his Github here as the 0.2-1.deb is up on his page.

      https://github.com/FilippoBiga/GlyphPatch/releases

      Or just wait till it shows on Cydia again perhaps?
    1. aorowe's Avatar
      aorowe -
      Thanks very much for that. It worked for me
    1. izeta's Avatar
      izeta -
      Can't find it yet.
    1. moveandstore's Avatar
      moveandstore -
      I still can't find it either.
    1. Jato_BZ's Avatar
      Jato_BZ -
      Ok, this story really needs updated but here's what I've managed to find.

      It will no longer be on Cydia.

      U can read in between the lines here on the Dev's twitter feed - @FilippoBiga

      https://twitter.com/filippobiga/stat...80675264221184

      Looks like some iOS politics going on hence why it was pulled.

      The Dev is still supplying it via his own Github here...

      https://github.com/FilippoBiga/Glyph...ases/tag/0.2-1

      Edit: just been speaking with the Dev & he is hoping GlyphPatch can be added to ModMyi Repo!

      Also if u have any other version other than 0.2-1 installed the Dev has suggested you update to 0.2-1

      Which is available from his Github page & can be installed easily via iFile.
    1. Jato_BZ's Avatar
      Jato_BZ -
      Ahh will it ever end...version 0.3-1 is NOW on Cydia under the default Saurik/Cydia repo...
    1. Scheuerle's Avatar
      Scheuerle -
      Quote Originally Posted by Jato_BZ View Post
      Ahh will it ever end...version 0.3-1 is NOW on Cydia under the default Saurik/Cydia repo...
      Thanks man. Got it just now.😊