[GH-ISSUE #540] [BUG] pre-injected tweaks don't get signed #488

Closed
opened 2026-03-03 15:34:02 +03:00 by kerem · 5 comments
Owner

Originally created by @m1337v on GitHub (May 29, 2025).
Original GitHub issue: https://github.com/LiveContainer/LiveContainer/issues/540

Describe the bug

When installing an app, which contains tweaks in the framework folder, the tweaks seem to not get resigned.

In the previous version this seemed to work.
This happens on the latest commit of the nightly/multitask branch.

Not an app issue, as regular installation with sideloadly works as expected.

Tried force sign as well. Jit-Less Mode Diagnose shows all green.

dlopen(/private/var/mobile/Containers/Data/Application/2A4244E4-81E9-4874-AF5B-CBA94EDDA77F/Documents/Applications/com.zhiliaoapp.musically.app/TikTok, 0x0109): Library not loaded: @executable_path/Frameworks/BHTikTokPlus.dylib Referenced from: <3C0EDA32-EB31-3AF1-A7C9-5EF1F2FB6CDF> /private/var/mobile/Containers/Data/Application/2A4244E4-81E9-4874-AF5B-CBA94EDDA77F/Documents/Applications/com.zhiliaoapp.musically.app/TikTok Reason: tried: '/private/var/mobile/Containers/Data/Application/2A4244E4-81E9-4874-AF5B-CBA94EDDA77F/Documents/Applications/com.zhiliaoapp.musically.app/Frameworks/BHTikTokPlus.dylib' (code signature invalid in <0226E1FB-A09E-31E3-A7B1-12EFDEB3E7A9> '/private/var/mobile/Containers/Data/Application/2A4244E4-81E9-4874-AF5B-CBA94EDDA77F/Documents/Applications/com.zhiliaoapp.musically.app/Frameworks/BHTikTokPlus.dylib' (errno=1) sliceOffset=0x00008000, codeBlobOffset=0x00128740, codeBlobSize=0x00003E50)

Instructions to reproduce

inject tweak with sideloadly, export as ipa
disable tweakloader injection (same issue if enabled, but tried all settings)
run app
get signature invalid error for injected dylib

What version of LiveContainer are you using?

3.6.60-Release (multitask/07211a8)

Other info

No response

Originally created by @m1337v on GitHub (May 29, 2025). Original GitHub issue: https://github.com/LiveContainer/LiveContainer/issues/540 ### Describe the bug When installing an app, which contains tweaks in the framework folder, the tweaks seem to not get resigned. In the previous version this seemed to work. This happens on the latest commit of the nightly/multitask branch. Not an app issue, as regular installation with sideloadly works as expected. Tried force sign as well. Jit-Less Mode Diagnose shows all green. `dlopen(/private/var/mobile/Containers/Data/Application/2A4244E4-81E9-4874-AF5B-CBA94EDDA77F/Documents/Applications/com.zhiliaoapp.musically.app/TikTok, 0x0109): Library not loaded: @executable_path/Frameworks/BHTikTokPlus.dylib Referenced from: <3C0EDA32-EB31-3AF1-A7C9-5EF1F2FB6CDF> /private/var/mobile/Containers/Data/Application/2A4244E4-81E9-4874-AF5B-CBA94EDDA77F/Documents/Applications/com.zhiliaoapp.musically.app/TikTok Reason: tried: '/private/var/mobile/Containers/Data/Application/2A4244E4-81E9-4874-AF5B-CBA94EDDA77F/Documents/Applications/com.zhiliaoapp.musically.app/Frameworks/BHTikTokPlus.dylib' (code signature invalid in <0226E1FB-A09E-31E3-A7B1-12EFDEB3E7A9> '/private/var/mobile/Containers/Data/Application/2A4244E4-81E9-4874-AF5B-CBA94EDDA77F/Documents/Applications/com.zhiliaoapp.musically.app/Frameworks/BHTikTokPlus.dylib' (errno=1) sliceOffset=0x00008000, codeBlobOffset=0x00128740, codeBlobSize=0x00003E50)` ### Instructions to reproduce inject tweak with sideloadly, export as ipa disable tweakloader injection (same issue if enabled, but tried all settings) run app get signature invalid error for injected dylib ### What version of LiveContainer are you using? 3.6.60-Release (multitask/07211a8) ### Other info _No response_
kerem 2026-03-03 15:34:02 +03:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@hugeBlack commented on GitHub (May 30, 2025):

Fixed

<!-- gh-comment-id:2921170636 --> @hugeBlack commented on GitHub (May 30, 2025): Fixed
Author
Owner

@m1337v commented on GitHub (May 30, 2025):

Tried the latest commit but get the following:

App was signed successfully, but LiveContainer was unable to sign the following files. You may be able to use the app, but do expect crash.

Frameworks/CydiaSubstrate.framework/Libraries/SubstrateInjection.dylib
dlopen(/private/var/mobile/Containers/Data/Application/CCBF7EF1-3DBC-459E-81CD-2DD4298B6455/Documents/Applications/com.zhiliaoapp.musically.app/TikTok, 0x0109): Library not loaded: @executable_path/Frameworks/BHTikTokPlus.dylib
  Referenced from: <3C0EDA32-EB31-3AF1-A7C9-5EF1F2FB6CDF> /private/var/mobile/Containers/Data/Application/CCBF7EF1-3DBC-459E-81CD-2DD4298B6455/Documents/Applications/com.zhiliaoapp.musically.app/TikTok
  Reason: tried: '/private/var/mobile/Containers/Data/Application/CCBF7EF1-3DBC-459E-81CD-2DD4298B6455/Documents/Applications/com.zhiliaoapp.musically.app/Frameworks/BHTikTokPlus.dylib' (code signature in <0226E1FB-A09E-31E3-A7B1-12EFDEB3E7A9> '/private/var/mobile/Containers/Data/Application/CCBF7EF1-3DBC-459E-81CD-2DD4298B6455/Documents/Applications/com.zhiliaoapp.musically.app/Frameworks/BHTikTokPlus.dylib' not valid for use in process: mapped file has no cdhash, completely unsigned? Code has to be at least ad-hoc signed.)
<!-- gh-comment-id:2921365500 --> @m1337v commented on GitHub (May 30, 2025): Tried the latest commit but get the following: ``` App was signed successfully, but LiveContainer was unable to sign the following files. You may be able to use the app, but do expect crash. Frameworks/CydiaSubstrate.framework/Libraries/SubstrateInjection.dylib ``` ``` dlopen(/private/var/mobile/Containers/Data/Application/CCBF7EF1-3DBC-459E-81CD-2DD4298B6455/Documents/Applications/com.zhiliaoapp.musically.app/TikTok, 0x0109): Library not loaded: @executable_path/Frameworks/BHTikTokPlus.dylib Referenced from: <3C0EDA32-EB31-3AF1-A7C9-5EF1F2FB6CDF> /private/var/mobile/Containers/Data/Application/CCBF7EF1-3DBC-459E-81CD-2DD4298B6455/Documents/Applications/com.zhiliaoapp.musically.app/TikTok Reason: tried: '/private/var/mobile/Containers/Data/Application/CCBF7EF1-3DBC-459E-81CD-2DD4298B6455/Documents/Applications/com.zhiliaoapp.musically.app/Frameworks/BHTikTokPlus.dylib' (code signature in <0226E1FB-A09E-31E3-A7B1-12EFDEB3E7A9> '/private/var/mobile/Containers/Data/Application/CCBF7EF1-3DBC-459E-81CD-2DD4298B6455/Documents/Applications/com.zhiliaoapp.musically.app/Frameworks/BHTikTokPlus.dylib' not valid for use in process: mapped file has no cdhash, completely unsigned? Code has to be at least ad-hoc signed.) ```
Author
Owner

@hugeBlack commented on GitHub (May 30, 2025):

Then I guess it's an app issue. Please send me the ipa, or you may try another ipa

<!-- gh-comment-id:2921390611 --> @hugeBlack commented on GitHub (May 30, 2025): Then I guess it's an app issue. Please send me the ipa, or you may try another ipa
Author
Owner

@hugeBlack commented on GitHub (May 30, 2025):

It should be fixed by the latest build. Do note that this issue is caused by the tweak being so badly constructed that it confuses the signer.

<!-- gh-comment-id:2921542563 --> @hugeBlack commented on GitHub (May 30, 2025): It should be fixed by the latest build. Do note that this issue is caused by the tweak being so badly constructed that it confuses the signer.
Author
Owner

@m1337v commented on GitHub (May 30, 2025):

you're the best. Thank you so much, latest commit solved it!

<!-- gh-comment-id:2921988014 --> @m1337v commented on GitHub (May 30, 2025): you're the best. Thank you so much, latest commit solved it!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/LiveContainer#488
No description provided.