watchthelight labs

Releases

LegionBtFix 0.2.0

0.2.0 · 2026-10-17

Two in-memory patches to /usr/sbin/bluetoothd on macOS Tahoe 26.7.1 (25G241) for the MediaTek MT7925 Bluetooth controller: LE Create Connection always uses the public own address (ends the bluetoothd crash loop, STATUS 718), and the A2DP Read Clock result is stored even though the controller returns handle 0 (ends "Failed to read BT clock"). Gated to that exact bluetoothd by byte windows and page hashes; on any other build it does nothing. Needs Lilu 1.7.2 or newer and MtkBt for the controller itself.

AirPods play with these patches only together with the HCI logging workaround in tools/bt-hci-logging.sh; the remaining link drop is described in the README and is not fixed here.

The kext is the exact file running on the test laptop; a clean build of this tag with tools/build-mac.sh and Apple clang 17 reproduces it. GPL-2.0.

sha256 LegionBtFix.kext/Contents/MacOS/LegionBtFix: 3c330a217c47d398a13eb70a161657f719be9b376282737b2cdf6568263d8ee5

Downloads