yashsingh1/xdaforums huggingface dataset:
[Milestone XT720 General] telnet777:
hhcat had tried installing the XT720 OpenRecovery. But he failed, and I don’t know what happens because he has not mentioned and I've no XT711 in hand at the moment.

hhcat said he'll try to enter the OpenRecovery menu using the way you mentioned in these two days. I'm waiting for a good news from him.

I've three question about OpenRecovery and switch.sh

First:"STR" is a parameter transferred by updater-script when running switch.sh

Why do you say XT720 is detected as "STR"？Does the phone itself will detect it is which device when switch.sh is running?

Second:How does the OpenRecovery works? I've reviewed install_script.sh under directory orbootstrap. I don't understand why it can “hijack” boot procedure when reboot. Someone said it utilized a defect of XT720's recovery.

Third:The bootloader is not unlocked. Why can we flash custom roms such as 2.3.7 via OpenRecovery? Why bootloader not check signature?

Thank you!
[Milestone XT720 General] telnet777:
Mioze7Ae, I'm digesting what your said. It is out of my range to understand all of these.

Thank you for your detailed reply and the effort for XT711.
[Milestone XT720 General] Mioze7Ae:
Take your time and ask questions. It took me many months to figure it out. Hopefully we can help you understand it much faster.
[Milestone XT720 General] telnet777:
Hi,Mioze7Ae, I've a good news to tell you. It will spirit up those peoples who brought XT711.

We tried "fastboot boot openrecovery-fastboot.img" and entered into the open recovery!
[Milestone XT720 General] telnet777:
With the help of "小⑨一只", We installed open recovery for XT720 on XT711 and tested fastboot mode successfully on XT711. Much thanks to her. She is now studying in high school.

Details below：

The first thing we do is installing open recovery for XT720 on XT711 which is "OpenRecovery-XT720-01.zip" originally from Mioze7Ae.

The installation is successful.

But error occurs when entering open recovery.

"E:Can't open /cache/recovery/command" appears on the screen.

The second thing wo do is testing fastboot mode with command "fastboot boot openrecovery-fastboot.img" successfully.
[Milestone XT720 General] telnet777:
Mioze7Ae, how to edit the openrecovery to work on XT711? Do you need any further information? What shall we do?

And I've two questions to ask.

The first: XT720's BL is locked. Its kernel is still 2.2 or 2.1. Why some custom ROMs named android 2.3.7? Does the rom is "pseudo-" android 2.3.7?Why some rom contains boot.img? If XT711 entered open recovery, can we upgrade it to android 2.2 although XT711's kernel is still android 2.1?What things can we do with XT711 after entering open recovery?

The second:where can I find the boot procedure of moto's Android phone? I want to know what is the phone doing step one by one（or which script it execute？） when in bootloader mode, recovery mode, fastboot mode and normal reboot or power on.

Thank you in advance.
[Milestone XT720 General] Mioze7Ae:
Great! That's good news. That "E:Can't open /cache/recovery/command" always happens on XT720. It's harmless. The /cache/recovery/command file passes command line parameters from Android to recovery. It's used to auto-install OTA updates. ROM Manager (doesn't work on XT720) uses a similar file on other phones.

Good!

It sounds like it already works, so I don't think you need to do anything more.

On Milestone XT720, there are essentially two versions of the kernel. The old one with lower default clock rate (550MHz) and the newer one at higher clock rate (720MHz). Actually, in OpenRecovery, flashing boot.img does nothing...

Don't use the fastboot recovery until I get a chance to double check the partition structure. There are two ways that the phone gets partitions:

(1) passed as command line parameters (tags) from the CDT partition

(2) hard coded into the kernel

Normal boot uses the tags to get the partition structure dynamically from the partition table. Stock recovery's kernel has hardcoded partition structure. The dynamic tags don't include all partitions and the boot partition is marked read-only. Since bootstrapped openrecovery uses normal boot, it doesn't see some partitions and the boot partition is read-only.

The fastboot recovery also uses normal boot, but it includes a custom kernel module that modifies the kernel's partition data structures. The changes are hard coded for Milestone XT720 and there's a good chance those changes are incorrect on XT711. Don't use fastboot OpenRecovery on XT711 until I know more about your partition structure--it could send you back to RSD if they don't match. There should be no problems using bootstrap OpenRecovery.

Yes. In fact, Motorola's 2.2 for the Korean Motoroi XT720 used the eclair kernel. The kernel is a very small part of things. On Milestone XT720 we're stuck with 2.1 kernel.

At this point, I think I would just try one of the XT720 CyanogenMods (fjfalcon's latest CM7 or my CM 6.3.6.2) and see what happens. The Motoroi XT720 and Milestone XT720 have slightly different sensors. So, if it boots check the sensors. If it doesn't boot we'll have to do some debugging using adb.

The best place to learn about this is on www.droid-developers.org in pages about the booting chain. http://www.droid-developers.org/wiki/Booting_chain

The Milestone A853 people have reverse-engineered their bootloaders and put their findings there. From what I can tell XT720's bootloader is similar, except the Milestone A853 doesn't have working "fastboot boot".
[Milestone XT720 General] telnet777:
Thank you for your timely reply!

You mentioned "There should be no problems using bootstrap OpenRecovery."

Do you mean the open recovery works well on XT711? We got no further for safety when seeing error occurs. How to entering open recovery? Does press camera button when selecting "apply sdcard:update.zip " ? So I can backup my phone using open recovery?

If this is true, then the next step is to test a rom which can works well on XT711. I think hhcat is the best one who can play a part in it because his wife has a XT711. Who can help us to develop a stable rom for XT711? I can't wait for it! It's a very good news to those who had brought it because MOTO has disappointed us for a long time. They are unwilling to unlock BL and never considering upgrade phones they had selled out.
[Milestone XT720 General] Mioze7Ae:
Hmm. That doesn't sound like OpenRecovery--that sounds like Motorola's stock recovery. If you press and hold volume-up while powering on (hold until you see the boot animation or OpenRecovery menu), does your phone boot to Android or OpenRecovery? OpenRecovery will say

Motorola MILESTONE XT720 Open Recovery

Version 1.46

Created by Skrilax_CZ

on the top and boots straight to the main menu.
[Milestone XT720 General] telnet777:
Do you mean it is not the time to say open recovery for XT720 works well on XT711? Because I don't know how to enter open recovery when reboot, we press media button and power on which entered stock recovery. I will retry to enter it by volume up and power on asap.

Does the fastboot boot works on XT711 is still a good news? I think it can help to do something.
[Milestone XT720 General] telnet777:
We are trying to enter open recovery.

It seems that we entered a lite version of open recovery.

The installation is successful. Then power off. Press and hold volumn-up then power on. The phone stopped at moto logo. Release all button, then the screen is off and the phone reboot normally. Then we power off and try again. It still stopped at moto logo.It is all we can see.

Then we tried OpenRecovery.apk.
[Milestone XT720 General] Mioze7Ae:
OK, that means the hijack is installed, but there's something wrong with the bootstrap or the switch from lite to full recovery. I need to think about how to debug this.

If you remove the sdcard and boot while holding volume-up does it also get stuck at the (M)?

How did you get into OpenRecovery lite?
[Milestone XT720 General] telnet777:
We use the OpenRecovery.apk downloaded from somewhere.

Installation is successful, then when press recovery boot the phone restart five or six times then entered to lite version.

Motorola MILESTONE XT720 Open Recovery

Lite Version

Created by Skrilax_CZ

Then we tried Dexter's OpenRecovery downloaded from here:

http://xdaforums.com/showthread.php?t=971337

It also entered lite version but entered lite version immediately. No reboot several times.
[Milestone XT720 General] telnet777:
We are now tring to remove the sdcard and boot while holding volume-up.

It seems the same as when sdcard is inserted in the phone.

hhcat had said switch.sh use "STR" to transffer fstab, maybe changes should be made according to XT711. And it is very easy to do so.
[Milestone XT720 General] telnet777:
I need apologize to "小⑨一只". I've made a mistake yesterday. He is a boy in high school, not a girl. Much thanks to him.

With the aid of him, we arrived at this point because I have no XT711 in hand at the moment.
[Milestone XT720 General] telnet777:
Another good news!

hhcat just told me he'll test android 2.3 on XT711 this weekend. He think there is no big problem with open recovery such as compare partition info with XT720 and make some changes. Maybe he'll need ask some questions about it on XDA.

Thank you, Mioze7Ae. Without your detailed reply, we can not go further step by step and see morning twilight now! And I learned much in these six days.
[Milestone XT720 General] hhcat:
Mioze7Ae, great thanks for your explanations!

Now I knew we used "hijacked sh" to replace the stocked "sh", and "hijacked sh" will call to script install.mapphone_umts.bt.sh. And reading install.mapphone_umts.bt.sh, I found the last line is to call to 2nd-init.

But 2nd-init is a binary file, and I am not able to figure out what does 2nd-init do. Does 2nd-init binary finally to execute certain script on sdcard, e.g. switch.sh? What is the entrance to start OpenRecovery?
[Milestone XT720 General] charles98:
I don't seem to be able to decompile
[Milestone XT720 General] telnet777:
I have the same question when I try to read this file. How does the OpenRecovery works? who can explain the procedure step by step？
[Milestone XT720 General] hhcat:
I found "logo" flash may not work in OpenRecovery for xt720. Is this true?

In the file fstab.STCU, there are /system, /data, /cache, /cdrom, but no /logo in it.
[Milestone XT720 General] Mioze7Ae:
Logo isn't mounted ever, it's used by the bootloader before linux is even loaded (it's the white (M) logo you see when you turn the phone on. We have flashed different boot.img on XT720. http://xdaforums.com/showthread.php?p=11981953

2nd-init causes the /init process to restart. /init executes commands from /init.rc and /init.mapphone_umts.rc. All of /init, /init.rc, and /init.mapphone_umts.rc are inside boot.img and signature checked before they are loaded into RAM during boot. So, to change them, sh_hijack.sh modifies the copies in the RAM disk and uses 2nd-init to restart the /init process. The source for 2nd-init is in skrilax_cz's openrecovery code on gitorious. I'll give a link when I get to a computer. The link I gave earlier to cvpcs's blog explains how 2nd-init causes /init to restart, but I don't think those details are very important for this. XT711 is linux 2.6.29?
[Milestone XT720 General] telnet777:
Yes, its kernel is 2.6.29-omap1.
[Milestone XT720 General] Mioze7Ae:
Also, the reason I'm cautious about partitions is I think XT711 might not have /cust --based on looking at an XT711 sbf I downloaded at some point. XT720 has /cust but it's never used, so missing /cust isn't surprising, but it probably shifts the others.
[Milestone XT720 General] hhcat:
I finally got xt711 phone, and dump some information about the phone:

cat /proc/mtd

dev: size erasesize name

mtd0: 00180000 00020000 "pds"

mtd1: 00060000 00020000 "cid"

mtd2: 00060000 00020000 "misc"

mtd3: 00380000 00020000 "boot"

mtd4: 00480000 00020000 "recovery"

mtd5: 008c0000 00020000 "cdrom"

mtd6: 0afa0000 00020000 "system"

mtd7: 06a00000 00020000 "cache"

mtd8: 0c6a0000 00020000 "userdata"

mtd9: 00200000 00020000 "kpanic"

There are some minor difference from xt720. Shall we have to get a new part-STR.ko for xt711?
[Milestone XT720 General] telnet777:
hhcat, thank you!

We are waiting for XT711's open recovery and CM7 ROMs.

Add oil！
[Milestone XT720 General] hhcat:
Ok! part-STR.ko work fine for XT711 as well.

I used fastboot to boot to OR, and insmod part-STR.ko. With the module, I was able to see some hidden partitions.

Further, I tired to backup system, data, cache with OR. All work completed sucessfully. And unyaffs those generated img files, all looks good. :)

Now the only issue is OR's bootstrap.
[Milestone XT720 General] telnet777:
Well done！Add oil！

We have released a 2.1 ROM tonight on hiapk which is using "fastboot to boot to OR" to backup and restore via Nandroid. The rom is a simplified version of stock ROM and some beautification is made on UI.
[Milestone XT720 General] BrezC:
Yeah,My rom download:bbs .hiapk .com/thread-3270172-1-1.html

But Android version is 2.1
[Milestone XT720 General] telnet777:
Your rom's address is :

bbs.hiapk.com/thread-3270172-1-1.html

Why do you changed your forum name?
[Milestone XT720 General] BrezC:
Em..Bcoz my name is BrezCrut .
[Milestone XT720 General] telnet777:
Thank you for comparing the partitions structure ! I really appreciate!
[Milestone XT720 General] telnet777:
I've a question not related with this thread.

I've upload my Profile Picture in "USER CP" and then "Edit Profile Picture". I can see it below "Your Current Profile Picture". Why I can't see it in the left of my post?
[Milestone XT720 General] Mioze7Ae:
You want "Edit Avatar" instead of "Edit Profile Picture". Profile picture is shown here http://xdaforums.com/member.php?u=4499205
[Milestone XT720 General] telnet777:
I‘ve done.

I don't know the meaning of "Avatar" before.

Thank you!
[Milestone XT720 General] hhcat:
Hi, Mioze7Ae. Great thanks for your analysis! What does "atags" mean?

I had a quick try to flash one 2.3 CM7 Rom, but the startup stop at the first screen logo "M".

2.3 CM7 Rom also used 2nd init during startup, so I thought the startup failure might result from the same cause to that 2nd init fail to enter main menu of OpenRecovery. I connected the phone with USB and open Eclipse to try capture possible log output at startup. However, no outputs were captured.

I think it might be easier to backwards to debug OR's bootstrap issue first. Do you have any ideas how to debug this issue?
[Milestone XT720 General] Mioze7Ae:
I looked at the XT711 ramdisk. It looks like XT711 hardware identifies itself as "choi" but XT720 identifies itself as "mapphone_umts" (you have /init.choi.rc instead of /init.mapphone_umts.rc). So, I think this means the hijacked sh tries to run:

/system/persistent/orbootstrap/install.choi.btsh

instead of

/system/persistent/orbootstrap/install.mapphone_umts.btsh

to enter openrecovery. Try this:

Edit /sdcard/OpenRecovery/orbootstrap/STR/utils/install.mapphone_umts.btsh near line 12 to add this line:

#exchange the init scripts
rm /init.rc
rm /init.mapphone_umts.rc
rm /init.mapphone_cdma.rc
[B]rm /init.choi.rc[/B]
rm /default.prop

Make a copy of /sdcard/OpenRecovery/orbootstrap/STR/utils/install.mapphone_umts.btsh called /sdcard/OpenRecovery/orbootstrap/STR/utils/install.choi.btsh

Reinstall the orbootstrap for STR

atags is some mechanism ARM has for passing pre-parsed command line parameters to the kernel. It can be difficult to debug if the boot doesn't make it far enough, but what I've done in the past is just make sh_hijack.sh scripts that record information to the sdcard. That isn't very helpful without a working OpenRecovery with adb, though. So you're right, we need to fix OpenRecovery first.

Has anyone tried flashing XT720 sbf on XT711? It looks like XT711 uses lis331dlh compass instead of kxtf9, so it's probably closest to Motoroi XT720. If you're adventurous you could try flashing the modified xt720.sbf -- it has a vulnerable recovery (does't require OR bootstrap) and /data is also larger. I'm pretty sure there's a motoroi version of the modxt720.sbf somewhere and it doesn't have the sensor problem we have.
[Milestone XT720 General] telnet777:
------------Duplicated reply has already been erased！-------------------
[Milestone XT720 General] telnet777:
This maybe is the breakthrough point!

I know someone did flash XT720 sbf on XT711. But they all failed when using RSD lite. I don't know details such as which sbf they flashed. Maybe we can try the sbf you mentioned.

Thank you and see you tomorrow.
[Milestone XT720 General] 543221947:
thanks for your jobs!

I'm from China.On behalf of my friends in the BBS and myself I must say thanks to you.

Many people said they are sad about XT711.

We hope you can transplant the openrecovery to XT711 as soon as possible!

Sorry for my bad English.
[Milestone XT720 General] telnet777:
Hi,Mioze7Ae, we have tried the way you mentioned.

1. add "rm /init.choi.rc" in install.mapphone_umts.btsh's line 12;

2. rename install.mapphone_umts.btsh to install.choi.btsh;

3. put install.choi.btsh into directory /sdcard/OpenRecovery/orbootstrap/STR/utils/

4. install OR with commands below

su
cp /sdcard/OpenRecovery/orbootstrap/install_script.sh /tmp
chmod 755 /tmp/install_script.sh
/tmp/install_script.sh STR

5. Installation is successful. Then power off. Hold volumn-up then power on. But instead of getting into open recovery, the phone boot normally.

What can we do now?
[Milestone XT720 General] Mioze7Ae:
Try creating a file called /cache/.boot_to_or and reboot.

Also try running the command: "reboot openrecovery" on the phone.
[Milestone XT720 General] telnet777:
The first way is useless. The phone still boot normally.

We are trying the second way.
[Milestone XT720 General] telnet777:
we have tried.

Using "reboot openrecovery"，the phone boot normally.

Using "/cache/.boot_to_or" , the phone also boot normally. And every time the phone boot, this file will disappear.

We tried OpenRecovery-XT720-01 and reboot(volumn-up plus power on). This time the phone got into lite version of OR. We don't know why the phone stuck at "M" last time. If we delete install.mapphone_umts.btsh, the phone boot normally. It seems there are no difference if install.choi.btsh exist or not.

The boot procedure is :

1. moto logo

2.pic1：

3. sometimes the phone reboot, sometimes pic2 and entering or:
[Milestone XT720 General] telnet777:
Hi, all:

I've a very good news to post.

After many times of retrying, we have got into full version of open recovery. Excellent！

We edited install.mapphone_umts.btsh by adding "rm /init.choi.rc" at line 12. It does work! We can now enter OR. The pic is below:

Mioze7Ae，Thank you!
[Milestone XT720 General] telnet777:
We have released an openrecovery.apk for XT711:
[Milestone XT720 General] hhcat:
Thanks Mioze7A! Yes, XT711 used mapphone_umts instead of mapphone_umts. By following your instructions, now orbootstrap worked correctly.

---------- Post added at 10:23 AM ---------- Previous post was at 10:22 AM ----------

Wow, glad to see you solve the issue ealier. :)
[Milestone XT720 General] telnet777:
Hehe, 小9 and I just try and try. It works. He want your qq number. can you pm me?
[Milestone XT720 General] BrezC:
Can u call me BrezC?

I think English is better than Chinese on bbs,lol：D：D：D
[Milestone XT720 General] telnet777:
OK, it's fine, BrezC:) hehe
[Milestone XT720 General] telnet777:
Hi, Mioze7Ae,

Have you heard of this good news?

We want to share the joy with you.

We are really appreciated.

So if you see, pls reply.

And we are now trying to transplant roms of XT720 on XT711.

Great thanks for your help!
[Milestone XT720 General] Mioze7Ae:
That's great news! Happy hacking!
[Milestone XT720 General] telnet777:
hehe, It is good to see you!
[Milestone XT720 General] Dr. Hurt:
Hello guys, I'm sorry for posting this here but I'm desperate. I'm here on behalf of owners of the xt530/xt531 to ask for your help.

Our phone's bootloader is also locked, so I think we have to use this boot strapping method.

We are all running stock rooted 2.3.5! I have tried fastboot to open recovery from the thread called "[REF] Fastboot to OpenRecovery and how to dump more partitions" but apparently it doesn't work.

I rebooted into bootloader mode using adb, and phone rebooted to the red moto logo. I then used moto-fastboot to boot open recovery, and it said "downloading okay", "booting okay", but that's it, phone hangs on red moto logo, no reboot, no recovery, and I have to remove battery to force reboot. Am I doing something wrong?!

We don't have many sbf packages for this phone yet (only a Chinese sbf) so I'm scared to do anything too invasive.

Could you please help us get this working on our phone?

Once again, sorry for posting here. If you would like me to delete this post, I'll do so promptly.

Thanks in advance :)

Here is the thread we're using: http://xdaforums.com/showthread.php?t=1271114&page=14
[Milestone XT720 General] Mioze7Ae:
I don't think we're a good resource for XT530. It looks like XT530 is on a qualcomm chip instead of OMAP. The security is probably quite different.

We're also stuck on eclair kernels and you're on gingerbread, so there are quite a few differences. Milestone A853 did get a real froyo from motorola, but post froyo changes are significant. Based on examining Defy ROMs, I think gingerbread uses ext3 instead of yaffs just to name one big difference. So, updating openrecovery for use in gingerbread would be quite an undertaking.

What I would do is look through the motodev website to find phones with similar specs and see what they use. Sorry I can't be more helpful.
[Milestone XT720 General] telnet777:
It‘s never mind.

Do you mean "fastboot boot openrecovery-fastboot.img" doesn't work?

It is an openrecovery for XT720 and we have tested it on XT711 successfully. But I don't know whether it can work on your phone.

Mioze7Ae has mentioned steps below:

"So for example you can get into OpenRecovery after flashing a stock ROM without rooting and without installing the openrecovery bootstrap. (You still need to put the relevant parts of OpenRecovery on the sdcard). Basically after flashing a stock ROM you can:

1) Enable USB Debugging

2) adb reboot bootloader

3) fastboot boot openrecovery-fastboot.img"

Maybe you should try it step by step.

Make sure you have backup your phone before you do anything.

And make sure you can flash stock ROM when the phone can't boot.

Maybe you should try Mioze7Ae's open recovery for XT720 or Dexter's OpenRecovery.apk for XT720.

http://xdaforums.com/showthread.php?t=1242259

http://xdaforums.com/showthread.php?t=971337

Because your phone is not similar to XT720 and XT711. I think the way to enter open recovery is not the same as XT720/Xt711 which is holding volumn-up and power on for several minutes.

You can try Dexter's OpenRecovery.apk. You can select "recovery boot" in this program.

Write down everything your see when you try to enter open recovery. It may help to find way to enter OR.

Keep trying and trying. I wish you success!

I'm not familiar with android. So what I said maybe wrong. I only hope it can help you.
[Milestone XT720 General] telnet777:
It seems that I have given wrong information. So pls ignore what I’ve said.
[Xperia Arc Q&A, Help & Troubleshooting] Laqany:
I just updated my arc via PC companion software to .62 firmware.

I rooted it earlier by super one click method by DooMLorD from here.

Now after the update I don't have root access and I can't get it back by the same way or by GingerBreak and I can still see superuser icon.

The system apps are reaaally using too much memory.

Any idea how i can solve that please?!
[Xperia Arc Q&A, Help & Troubleshooting] lilude56214:
fw .62 needs unlock bootloader to root
[Xperia Arc Q&A, Help & Troubleshooting] taaviu:
Downgrade back to .42-root it-update to .62 back and you get rooted .62
[Xperia Arc Q&A, Help & Troubleshooting] Laqany:
Thanks

But is there a thread here on how i can do that?!

does the risk include other things than losing the warranty?!
[Xperia Arc Q&A, Help & Troubleshooting] Laqany:
It was a rooted .42

I updated and lost root access although i still have superuser app

can you please explain more what you mean?!