yashsingh1/xdaforums huggingface dataset:
[Nexus S General] philipdeane:
Hi all,

Believing what I've read on the google forums (probably a bad thing) and noted the HUGE thread on 2.3.3 update, this is somewhat a different request.

Google forums indicate that some network operators in the UK (i.e. Vodafone) are holding back the OTA of 2.3.3 (for the usual reasons) whilst others are allowing the update straight away. My question is, are there any UK Nexus S owners out there who have had the OTA update pushed to them and what network operator they use?

I plan to verify this by grabbing a sim of said operator to see if the OTA will drop, knowing I have one NS on Vodafone that hasn't had it pushed to it yet.

I know there are countless ways to update manually, I have done this with my others NS's ;), but for those out there who keep posting that they are patiently waiting, I thought I try this out...unless people think I'm going to hit a brick wall ofc :)

Thank you.
[Nexus S General] Nexus-S:
The UK network operators have nothing to do with updates on the Nexus S. The updates are handled solely by Google.

I suspect that for whatever reason, the OTA for 2.3.3 has been pulled and won't be coming back.
[Nexus S General] mateusbatera:
I'm afraid you're right. But I'm not sure if the best option is to update manually or not. If they are holding back the OTA, there must be some serious issue with it. I mean, why else would they be silent about it?
[Nexus S General] xspyda:
Maybe the OTA to 2.3.3 is what's causing the freezing issue on many Nexus S phones now being reported and this is why they are holding back?
[Nexus S General] Rusty!:
Nope, that's not true.

Just like with the Nexus One, handsets sold by Vodafone have different firmware and have to wait longer for official updates.
[Nexus S General] ccriminal:
Are you sure? I've got a Vodafone Nexus S and it's running 2.3.3.
[Nexus S General] vviper:
Same here before I rooted. Got the phone with the 2.3.3 update already installed.

I've heard that Vodafone do their own update but there is nothing on the phone to suggest this, no bloatware apps or anything, no branding.
[Nexus S General] Rusty!:
From what I've seen, the only way to tell is the kernel version, Just like the N1. Voda don't actually add any crap to it, but they hold back releases.
[Nexus S General] DoomFragger:
I currently own a Vodafone Nexus S with other carrier SIM. So:

- Vodafone changed NS firmware (though they couldn't do it);

- Google has a list of Vodafone IMEI's (this would also be strange);

The relevant content I have in the *#*#CHECKIN#*#* log is this:

04-06 21:30:41.703 I/CheckinService( 226): Preparing to send checkin request

04-06 21:30:41.765 I/CheckinTask( 226): Sending checkin request (1141 bytes)

04-06 21:30:42.835 I/CheckinTask( 226): Checkin success: https://android.clients.google.com/checkin (1 requests sent)

04-06 21:30:42.851 I/CheckinService( 226): From server: Intent { act=android.server.checkin.FOTA_CANCEL }

I have SCLCD GRI40 2.3.3.
[Atrix 4G Q&A, Help & Troubleshooting] crippenx:
The stock moto wall charger that comes with the phone has the following specs:

100-240v ~ 50/60Hrtz

0.2A

output 5.1V = 850 mA

I've been interchanging between the stock one and my old Galaxy-S one, which lists the following:

100-240v ~50/60Hrtz

0.15A

Output 5.0V = 0.7A

Does the slight undervoltage make a difference? I'm wondering if this is what has been causing my battery issues ? Anyone else use anything other than the official moto charger to charge their Atrix?

I didn't think it would make much of a difference since when you're using the car charger, you're not using exactly the same specs either ... ?

Any info appreciated, thanks!
[Atrix 4G Q&A, Help & Troubleshooting] _Dennis_:
Should not make a difference. USB is rated from 4.7v to 5.4v and 500 mAs the charging spec is 1 A on the phones (technically charging spec for USB is anything "safe"). USB is considered 5v so actually the Galaxy-S one is more "perfect" for the specs.
[Atrix 4G Q&A, Help & Troubleshooting] Recon Freak:
I have a 1A charger that will not charge my Atrix but it will charge my old Fuze.
[Atrix 4G Q&A, Help & Troubleshooting] _Dennis_:
I was readin last night after posting, looks like 850 mA is the charging max for Atrix, it says any higher and it will trickle charge for safty. I don't have the link because I am at work but I think it was on the support forums at motorola.com
[Android Apps and Games] diabolito:
Hello has all,

I am has the search for this application :

lock files by useful tool

thanks
[Android Apps and Games] 3rdstring:
ZD Box
[Android Apps and Games] wez89:
use the search function.. thats why its there

OR

go to the market and use keywords to search what your after.. trial and error apps
[Android Apps and Games] diabolito:
No i'm coded files with this app.
[Android Apps and Games] Neurotica:
You "coded"? Are you trying to say that you're trying to open already encrypted files on your phone or are you trying to encrypt files on your phone?
[Desire Q&A, Help & Troubleshooting] F3Speech:
I know 1.8 just released and I have it but I assume the problem remains as its not in the changelog.

If you lock your sim there is no interface to enter your PUK code. I had to swap phones to get my card unlocked. Just wanted to ask if this is 'normal' for a custom rom or if Im doing something wrong (apart from forgetting which pin im resetting ^^)

Cheers.
[Galaxy Tab Q&A, Help & Troubleshooting] derFan11:
Hey Guys,

did someone encountered a charging issue via A/C?

Because my Tab charges but only so it seems to 38% then stops. On top the percentage increases and then it drops. For example from 18% to 15%.

I know that the USB-Port on a Computer and the Car-Kit won't charge the Tab, but not the included charger:confused:

So does anyone know this issue or maybe for god's sake know how to fix it!

Thanks in advance!

derFan

[Edit] My tab is running with the overcome-package! ;-)
[Bada Software and Hacking General] guari:
Very interesting ... great job ;)
[Bada Software and Hacking General] adfree:
My little knowledge/experiments...

1.

Before I NEVER updated manually FOTA. I never seen any Errors like other user... with FOTA not installed or something similar.

Maybe reason is, because my testdevice has NO active SIM card, so no network...

2.

I've tested examples from mijoma. On XXJL2 Boot...

Simple only flash FOTA with Multiloader.

At your own risk. Not all sideeffects known.

I had NO problems. :cool:

3.

Results... I can't see any special after Flashing. But I can go through internal menu, see Pictures.

http://xdaforums.com/showthread.php?t=906966

Normally I have more messages... but with modified FOTA Wave restarts. So the way is correct. :cool:

4.

Delta files are sometimes in Firmware also with Boot... I will add next Link to what I found about Delta files...

Delta Files are part of FOTA concept...

5.

Depend on Firmware... Software update... but sometimes is this point removed and I can't login, because no network...

In other words, I have to start FOTA over this internal menu to see that it is doing something. :cool:

Best Regards
[Bada Software and Hacking General] mijoma:
@adfree

I think you are testing the previous version. Could you confirm you are using mod version 2?

Best Regards,

mijoma
[Bada Software and Hacking General] adfree:
bplib_S8500OpEuro_XXJL2_mijoma_mod2.zip

:o

You are right, not tested yet. Only prior Version.

I will test today mod2 and report later.

I have to flash back to XXJL2... as I play actual on Orange JE7.

Thank you.

Best Regards
[Bada Software and Hacking General] jedil1:
YT: watch?v=A35k3E1F1O4

It's working....

Best regards.
[Bada Software and Hacking General] mkz14:
Amazing job dude. It seems like this could help us to change booting stuff
[Bada Software and Hacking General] lasentenza:
Nice work mijoma !!! :D
[Bada Software and Hacking General] adfree:
:cool:

I can confirm it works. :cool:

Now I see the same like on this Video:

http://www.youtube.com/watch?v=A35k3E1F1O4

Thanx jedil1 for Link.

Sorry mijoma.

I have no idea where I made mistake... :o

This time my first Test was Full Flash (without Boot)...

Second only FOTA and it works too... Original, then yours...

If you flash "Full", then you interrupt the Index process at Start, where Blue Screen shows...

Best Regards
[Bada Software and Hacking General] oleg_k:
Great job!!!

And my opinion,this is a single way to starting full working android on s8500,

because we need to initialize the modem at bootloader stage for fuel gauge.

i temporary use modem from m130k without fuel gauge.
[Bada Software and Hacking General] adfree:
Few Firmware packages have Delta files:

delta.bin
delta_AP.bin
delta_CFS.bin
delta_CP.bin
delta_CRSRC.bin
delta_FS.bin
delta_LFS_01.bin
delta_LFS_02.bin
delta_RSRC2.bin

Around 16 MB...

If I use Google for "Delta Files FOTA"... then I can also find this:

http://www.faqs.org/patents/app/20100175062

Theory/ideas :D

What we also can do with this Security hole:

- maybe "move" folder System to SD or internal Memory, to have no more problems with RC1 :D

- maybe someone is smart enough, to integrate Dump Function for Dump whole RAM or moviNAND... like JTAG

See Upload function...

Best Regards
[Bada Software and Hacking General] mijoma:
I think that Samsung have thought of that already. I had not analysed that as so far, but there's UPLOAD option in the bootloader (handled by a bit separate code from DLOAD). I haven't got the wave, so I never tested it.

You can make a patch on my mod and place a direct jump to that code. I've made a quick patch so you can try it out. I don't know whether there's any software that can handle that mode. I've made a look and there are several funny commands that can be used:

"PrEaMbLe"

"AcKnOwLeDgMeNt"

"PoStAmBlE"

"PoWeRdOwN"

"DaTaXfEr"

Remember that this time we're dealing with some real functionality of the bootloader and that may have some consequences so use on your own risk.

Best Regards,

mijoma

----------------------

Edit: Sorry if anyone tried loading it. By mistake I've used addressing from XXJEE. I've changed the name to represent what it was and added a correct file for XXJL2 bootloader
[Bada Software and Hacking General] adfree:
Upload to PC is in combination with Debug Mode higher then Low...

After you see Bluescreen with very interesting infos you can press Button, then Upload to PC on Screen. But I don't know how to catch Data, as no COM Port is visible.

Btw...

Now I know where I made big mistake.

First tests I used XEKC2 Firmware with XXJL2 Bootloader, as I thought its only Bootloader related. Sorry. :o

My fault. :)

So there must be more then Bootloader from XXJL2 in handset, to run successfully FOTA Mod2.

About new Mod with Upload, I will investigate this time better, before I'll report.

Thank you.

Best Regards
[Bada Software and Hacking General] sabianadmin:
We need to get this guy a wave to test stuff on! Who wants to donate theirs ha
[Bada Software and Hacking General] aLexzkter:
It may have sounded like a joke, but I second that....

He's seems trustworthy and very capable of being sucessful :D Just like adfree, oleg_k and other guys over there.
[Bada Software and Hacking General] mkz14:
I have my paypal account limited but in 1 month I'll b able to donate maybe 20€
[Bada Software and Hacking General] mijoma:
Thanks guys, but I don't think it's necessary.

I do it for fun - don't need any other gratification. Wave got me interested with the effort the manufacturer put trying to keep it closed. I don't need a handset to disassemble the bootloader.
[Bada Software and Hacking General] sabianadmin:
The question is more would you like a wave for you're efforts as otherwise you really won't be able to benefit from you're own work when we have meego, android, webOS etc booting on the Wave. Theres no extra pressure, sure you have already done the trickiest part of the work. :)
[Bada Software and Hacking General] mijoma:
No, I'm being completely honest here. I find this rather a weird form of relax than work.

Wave is a nice phone and I think I'm going to get myself one, but I don't expect a gift.
[Bada Software and Hacking General] rex4u:
You are a champ, buddy :)

Good luck !
[Bada Software and Hacking General] srg.mstr:
compare boot modes:

"standard_mode" vs "download_mode"

View attachment S8500_bootloader_log.rar
[Bada Software and Hacking General] nbates66:
hey srg, since you have a debug cable, and neither myself or Rebellos do, I don't suppose you could test the Fota code we have that attempts to execute the android kernel? A debug log of this could help a great deal.

join IRC chat or PM one of us if you can help.
[Bada Software and Hacking General] srg.mstr:
Exactly for this i made UART-cable ;)

To compile latest FOTA file I need address of this functions for XXJL2 (like this did Raitis before):

get_usb_sw_nv

get_uart_sw_nv

strlen

strcpy

CoDisableDCache

CoDisableIrq

CoDisableFiq

CoDisableMmu
[Bada Software and Hacking General] adfree:
@ srg.mstr

Many thanx for Log files.

Can you please log also Upload data to PC mode?

http://xdaforums.com/showpost.php?p=12635164&postcount=12

Btw.:

Maybe with this we can understand the mystieries mode, where handset shows green blue Screen... Forgotten which Key combo...

Maybe + - and on

Thanx.

Best Regards

Edit 1.:

Found:

http://code.google.com/p/jetdroid/wiki/JetBootloader

Maybe we have then few more answers.

Thank you.
[Bada Software and Hacking General] nbates66:
yeah thats correct, vol up, vol down and power.
[Bada Software and Hacking General] mijoma:
I'm not that sure you need them all, but here you go:

get_usb_sw_nv equ 0x424896E0

get_uart_sw_nv equ 0x42489694

strlen equ 0x42545818

strcpy equ 0x4254570C

CoDisableDCache equ 0x42546AB8

CoDisableIrq equ 0x42546A0C

CoDisableFiq equ 0x42546A2C

CoDisableMmu equ 0x42546AF8
[Bada Software and Hacking General] srg.mstr:
logs

XXJEE_callkey_mode.txt run FOTA from nbates66 "boot_kernel_moviNAND02.ASM"

on screen:

!!!!!!!!!!!

not found!

ERROR!

ENTERING DOWNLOAD MODE

View attachment logs.RAR

edit1:

i put kernel into /g and change "boot_kernel_moviNAND02.ASM":

s_kernel_path	du '/g/zImage',0
[Bada Software and Hacking General] srg.mstr:
i held volume +/-, and saw blue and then green color on the screen

log: View attachment XXJEE_volupdown_mode.txt

SelectBootingMode: Boot Mode = 40...
[Bada Software and Hacking General] srg.mstr:
put into DeviceStore /galaxyboot/zImage and saw on screen:

!!!!!!!!!!!!!!

debug: 1

debug: 0

debug: 2

debug: 6710472

debug: 1337

done!

!!!!!!!!!!!!!

EDIT:

latest FOTA sources and UART logs http://www.megaupload.com/?d=VC04NOKN
[Bada Software and Hacking General] adfree:
BootFPMKeyCheck

Display_LSI_Boot : disp_FPM_Init

What ever FPM is. But very interesting to see these Log files.

Thank you very much srg.mstr. :cool:

Best Regards
[Bada Software and Hacking General] oSandmaNo:
adfree

i did a google search on BootFPM and found this file on kashan-gsm.com

appararently "BootFPMkeycheck" occurs in that file if you open it with notepad you will find :D

the link was http://www.kashan-gsm.com/download/FLASH-FILES/samsung/S8530/BOOTFILES/BL3_univ.map

ive attached it.. i tried going to http://www.kashan-gsm.com/download/FLASH-FILES/samsung/S8530/BOOTFILES/

but 404 so if you need elf files just type the name after the link and download :D:D

EDIT

this is the only occurrence in that file

BootFPMKeyCheck 0x42480720 ARM Code 160 main.o(.text)
[Bada Software and Hacking General] Rebellos:
Srg, please keep in mind that my last code seems to hang on commandline preparing, so you can try to comment out it or whole atags prepare, this should atleast produce "uncompressing kernel.............." on UART output.
[Bada Software and Hacking General] nbates66:
i haven't sent him any that include the entire Atags code yet, knowing it doesn't work.
[Bada Software and Hacking General] srg.mstr:
"logs2.txt" from oleg_k looks similar

http://code.google.com/p/badadroid/source/browse/trunk/uart_XXJEE_callkey_mode_sbl_log1.txt

mijoma, we need your knowledge, welcome back ;)

added: http://www.youtube.com/watch?v=PH8G0YivIs8

edit2:

i compared "uart_XXJEE_callkey_mode_sbl_log3.txt" and "logs2.txt" from oleg_k => looks similar.

think need to load first "boot.bin" from i9000, like oleg_k and mijoma did it
[Bada Software and Hacking General] adfree:
Thank you very much for all these usefull infos srg.mstr.

:cool:

disp_FPM_Init ---> + - ON

disp_LPM_Init :confused:

Maybe Display Test? Full Low :confused:

PM could be Power Management, I don't know. Only idea... :o

So Upload data to PC should show something like:

disp_Upload_Init

Maybe left:

disp_Dload_User_Init

:confused:

Maybe this is "Kies" Mode, where AT Command is sent?

disp_Dload_Fail_Init

This could be the Picture from RC2...

disp_FOTA_Init

disp_FOTA_Printf

Not found yet... Maybe in mijoma examples.

Thanx kadavil. :cool:

Yes I've checked ELFs too. But not found answer yet. :o

Best Regards
[Bada Software and Hacking General] Kor711:
Hey, I got Samsung wave and I dont realy need it (using galaxy s), how can I help you guys?

I know RE but only in windows, also coding C/ASM/C#/JAVA couple of years.

Looks like you did great job, still reading other pages...
[Bada Software and Hacking General] nbates66:
keep in mind the purpose and capability of my loadsbl file is far less toward a dual boot friendly system and more toward a system that possibly irreverisibly removes and replaces the Bada os and it's bootloader.

that is, unless we can find a way to modify .pit files, but even so, still dangerous for most people.

https://github.com/cmsgs/utilities/tree/master/pit-stuff
[Bada Software and Hacking General] mijoma:
What's pretty interesting is that it actually gets to starting the kernel even without params (it uses default) and kernel partitions. Can you experiment on loading the kernel at the location prior to running the SBL. The default commandline is OK and that should give some output. I'm not sure whether SBL is doing any cleaning before loading kernel, but it should not (in that case we'd do a small modification to convince it not to do it) so give it a try.
[Bada Software and Hacking General] nbates66:
i actually hadn't have thought (or noticed) that...

EDIT: am i right that we shouldn't actually need to load the "boot.bin" file from original galaxy?
[Bada Software and Hacking General] mijoma:
Yes, that's not necessary. PBL runs from iROM and loads SBL to the memory.
[Bada Software and Hacking General] srg.mstr:
to adfree:

http://code.google.com/p/badadroid/source/browse/trunk/uart_XXJEE_UploadToPC_mode.txt
[Bada Software and Hacking General] nbates66:
srg, to get sbl to enter download mode:
[Bada Software and Hacking General] srg.mstr:
vol down + power + home key???
[Bada Software and Hacking General] vivekforbes:
I think he mentioned home key as menu key..
[Bada Software and Hacking General] nbates66:
yeah, middle button.
[Bada Software and Hacking General] srg.mstr:
http://code.google.com/p/badadroid/source/browse/trunk/uart_XXJEE_sbl-mijoma_i9000download_mode.txt

edit: I9003_Odin3 v1.82.exe found my S8500 on COM11 (Message: <ID:0/011> Added!!)
[Bada Software and Hacking General] mijoma:
Guys, I didn't mean download mode in SBL. What I meant was you should load the kernel to 0x32000000, then load SBL to 0x40244000 and jump to SBL and let it run normally (not in download mode)
[Bada Software and Hacking General] nbates66:
yeah don't worry did that as well mijoma :P , i had asked srg for a log of the sbl download mode earlier.

just gotta wait for him to get a log from it now. :)

EDIT: as for odin detecting the phone, we're aware of this, but best not to attempt it for now as there is currently no way back. :P
[Bada Software and Hacking General] thehero21:
as info for devs only: SGS bootloader researches

forum . cyanogenmod . com /topic/15831-some-researches-about-the-sgs-bootloader/

coz the forums-soft dont accept url postings...

edit:

if somebody wants to test this (with a serial cable) - i can build this uboot version - but needs a correctly loading by foto!
[Bada Software and Hacking General] Rebellos:
We've got SVN repository for project, it is in early stage now, if you wish, feel welcome to browse it:

http://code.google.com/p/badadroid/source/browse/#svn/trunk

And some maybe useful binaries:

http://code.google.com/p/badadroid/downloads/list

Also, I created something like FOTA basic kitchen, sourcefiles should be less-messy from now on, tried to comment fota_example.ASM well, if anyone wants to try it on its own.
[Bada Software and Hacking General] nbates66:
interesting info perhaps:

http://xdaforums.com/showthread.php?t=925034

post 8 onwards?
[Bada Software and Hacking General] srg.mstr:
i'll try it, tnx ))

Edit: post 9 No need to modify the kernel. On the captivate you can get into the SBL prompt???
[Bada Software and Hacking General] srg.mstr:
http://code.google.com/p/badadroid/source/browse/trunk/compare_logs/SBL_mode_help.txt

SBL>

SBL> help

Following commands are supported:

* setenv

* saveenv

* printenv

* help

* reset

* boot

* kernel

* format

* open

* close

* erasepart

* eraseall

* loadkernel

* showpart

* addpart

* delpart

* savepart

* nkernel

* nramdisk

* nandread

* nandwrite

* usb

* mmctest don't use this, because it'll damage TFS4 (UserStorage). In my case reload firmware helped

* keyread

* usb_read

* usb_write

* fuelgauge

* pmic_read

* pmic_write

To get commands help, Type "help <command>"

SBL>
[Bada Software and Hacking General] Rebellos:
Did some research on booting sequence of S5PC110.

It seems that .elfs that contains symbols, which are included to some WAVE BL releases does contain only part of all BL stages.

(can't look into files right now, so here is what I remember)

BL1 and BL2 contains parts of IROM code (look at the offsets) which is NOT FLASHABLE.

whole IROM BL0 IS NOT included anywhere, nor mapped, but its possible to dump it directly from 0xD0000000.

BL1 is being run from 0xD0008000 or something like that as far I remember.

But S5PC110 sets PC register at 0xD0000000 after power_on by default and it doesn't seem to be way to change it, so whats between 0xD0000000 -0xD0008000? In I9000 it is possible to dump it from kernel-level, so it must be possible to do it through FOTA too.

boot_loader.mbn after decrypt is complete BL3 bootloader, but what is listed in BL3.elf is only the 2. stage of BL3. There probably doesn't exist mapfiles for BL3 1. stage (offset 0x0 in boot_loader.mbn, the well known part (stage 2.) starts from 0x20000)

Of course all of it is only my assumption. Probably mijoma will correct it. ;P

If anyone have I9000 SBL symbols, I beg you to send it to me or post on the forum. It does exist: http://xdaforums.com/showpost.php?p=12664462&postcount=2

I wrote PM to Odia and I hope he replies. ;d

Also, in that topic is very nice discussion about IBL, it is very likely that it is almost the same in I9000 and S8500, because why would they change it?

Need to compare two dumps to make sure. For example I9000 BL0 looks like have recovery mode and tries to find some repair image on MMC2 slot and make connection through UART if it cannot load PBL from NAND.

Uhm, sorry, I should post it in AMSS/BL thread i think. ;d
[Bada Software and Hacking General] Rebellos:
After a week of research I found it!

We haven't loaded PBL as we thought it is unnecessary. But it has got very important role. It does complete reinitialization of DDR controller MPC0, mapping chip0 to 0x30 address space (by default it is under 0x20) and chip1 under 0x40 (it does some kind of switching, because before that chip1 is being controlled by MPC1 as chip0)

For now I've copied parts of PBL code to FOTA, now waiting for Serg to do some tests. Of course I'd be very surprised if that would be enough to boot kernel, but we're closer for sure!
[Bada Software and Hacking General] anghelyi:
Very well done! Just watched Serg's youtube video, you are definetly closer! Many thanks for your efforts!
[Bada Software and Hacking General] anghelyi:
Are there any public news on this? Or a how-to to recreate Serg's work? I checked the project's space and see the initramfs and oleg's zimage but how can I upload them? How can I change my FOTA to be able to boot it? TIA!