yashsingh1/xdaforums huggingface dataset:
[Xperia Play General] Selim873:
Wait, what about this? Is this Kexec or different? Could this be ported, because it seems so much easier and it's all done on your phone through the terminal emulator.

[YOUTUBE]0o2j543IOMc[/YOUTUBE]
[Xperia Play General] DubleJayJ:
That would be it.

All we would have to do, is get a kernel, for example, DooMKernel, and use the command and boot into it. Easy as that.
[Xperia Play General] beez1717:
And how would we do this? Help the noobs here please ;-)
[Xperia Play General] DubleJayJ:
http://www.ibm.com/developerworks/linux/library/l-kexec/index.html

Scroll down to Using Kexec

It will explain things
[Xperia Play General] Selim873:
Okay, so what would I put into the command option line, I'm about to attempt this, but I don't know what to do for the command, I know I could access the /system/bypassme/ directory as root, I shouldn't have to use bypassme.sh script, since that script was built for using RAZR phones, but the kexec file is in there, and I'm sure that's all we need to live boot the kernel. Here's what I'm looking for.

kexec -l boot.img --append="<???>"

Do you know what I would put into the ??? zone?

EDIT: I'll check that ibm link, that wasn't posted while I was typing this.

EDIT2: Okay, so the ??? zone should be root="directory of kernel" right? Do you know exactly where that's located? Since my bootloader's locked, I can't see the /boot partition.

EDIT3: I just read up on kexec. It says that the <???> that I posted is the command-line parameters that need to be passed for the new kernel. Would that be root="/boot" ? I'm pretty much a noob at this and I don't wanna make a huge screw up, even though it's just the kernel, which can be repaired with an ftf, I don't wanna take a too big of a chance, since this is my primary phone and not a lab rat.

EDIT4: I think that's right, I also saw that what goes in <???> was root="/dev/hda1" which looks like a drive on Linux, so I'm thinking using /boot would be correct? If someone has a spare locked Xperia Play, could you try? Like I said, this is my primary phone.
[Xperia Play General] DubleJayJ:
/boot/kernel?

And if anything does go wrong, just flash the ftf
[Xperia Play General] Selim873:
Alright, going to download a stock DoomKernel so I can boot into my stock ROM and check the About Phone menu. Will post results in a few.
[Xperia Play General] DubleJayJ:
If this works, you do realize you will be a god.
[Xperia Play General] Selim873:
Okay, I was in the terminal emulator and after putting the command in, it says

kexec: not found

What do I do now? I tried ls and it showed up along with a bunch of other files. I flashed that Motorola bypass zip that made the bypassme directory.

EDIT: Okay, I tried "su kexec" and nothing happened, so I'm about to input the entire command.

EDIT2: That just gave me some random stuff related to superuser, nothing kexec related. I want to try the bypassme.sh script, but there's a lonely ramdisk.gz file in there. Since that flashable zip was built for the Motorola RAZR, that would brick the phone. Porting that ramdisk.gz file to work on the Play should do the trick. I, however, don't know how to do that... Here is the file for developers to look at. The new directory didn't have a kernel img though, maybe that's in the ramdisk?
[Xperia Play General] beez1717:
Can you see the man files?
[Xperia Play General] paxChristos:
Which ramdisk do you need?

Pax
[Xperia Play General] Selim873:
I'm not understanding what you mean...

I flashed the bypassme.zip that was for the Motorola RAZR, which added a directory to the /system filesystem called bypassme. That contained a bunch of files including a ramdisk.gz, which is most likely a ramdisk that contains a kernel img file, not sure, inside the gz file was a single file without an extension named ramdisk. Do you want the bypassme.zip so you can look around? Just flash it and use something like Root Browser to look around /system/bypassme/

All I know that if you have a Motorola RAZR, you would flash that bypassme.zip, then run the .sh script in /system/bypassme using a terminal emulator or ADB. I think the whole thing needs to be ported with the kernel of choice, because after using the script, the RAZR would reboot into a different kernel according to the video I linked earlier.
[Xperia Play General] paxChristos:
yes, send me the bypassme.sh

FYI: Kernels contain two parts, the Ramdisk (initial file system) & the kernel image. (So when you download Doom's Kernel you get the Kernel he built, as well as the Ramdisk that is uber-tweaked to awesomeness :D )

EDIT: Also, in terminal editor if the character directly before where you begin typing is "#" you are working as root user. if it is "$" you are working as a normal user

Pax
[Xperia Play General] Selim873:
Here's the zip file, it's a flashable zip, it has EVERYTHING you need in there to tweak! All credits go to EternityProject for this masterpiece of a script! :D

HERE:

http://dlhg.eternityproject.eu/mtspyder/eprj/EPRJRAZR_BLBYPASS_v0.99_CWM.zip

Source (Just in case)

https://gitorious.org/eternity-prj

EDIT: So while we're talking about kernels, so basically the kernel.img file has that ramdisk file and the kernel image itself inside, like a zip/rar file, as an ftf file has a bunch of different files that represent each filesystem?
[Xperia Play General] paxChristos:
Thanks, working on it, gimme a couple of seconds.

When I get it back up, flash it via cwm, then call it, (via terminal emulator or adb) by calling

system/bypassme.sh

Pax
[Xperia Play General] cloud1250000:
do you realize that it will never work without more change to it... because these files are highly customized for the droid razr.....
[Xperia Play General] paxChristos:
Here's it changed to DooMLoRD's v2 kernel (for cdma)

http://www.mediafire.com/?uheuyp7vc1daufb

Pax
[Xperia Play General] paxChristos:
It depends on a couple of things, that I'm not 100% sure about. But Ramdisk & zImage are easily changed.

Pax
[Xperia Play General] beez1717:
Hmm. This could mean that it's not as much work as we think....
[Xperia Play General] Selim873:
Didn't work, here's what came out of it.
[Xperia Play General] DubleJayJ:
It couldn't make the directories. So make them manually.
[Xperia Play General] cloud1250000:
need super user right

(su command)

before system/
[Xperia Play General] DubleJayJ:
He did. Then it went to sh.
[Xperia Play General] beez1717:
It looks like we will also have to deal with the exec format errors right?
[Xperia Play General] paxChristos:
He was running as su.

We need to rebuild the kernel with atags.ko module. Talk to Keiran or Doom about it (they're the best chance) as well as get the correct physical memory address.
[Xperia Play General] beez1717:
I think it might be a very useful thing if someone here were to take down notes on how we got kexec working on this phone. It could be useful for people using other phones. If we can figure out a universal set of instructions that allows a hacker to easily know exactly how to rewrite the hack and use it, then it could be a breakthrough for all of android users!
[Xperia Play General] Selim873:
Ditto! :D

I just sent DoomLord a PM, I'll PM Keiran in just a moment. We'll see what they can do.
[Xperia Play General] DubleJayJ:
Is it possible to have a kernel that unlocks a bootloader?
[Xperia Play General] sonicfreak360:
Uhh... Maybe? But not our bootloader with our... Stuff :O
[Xperia Play General] paxChristos:
I'm pretty sure that's a no.
[Xperia Play General] darkfate246:
why are you guys trying to use a file that was compiled for the razrs processor

thats why your getting the errors.

right now im working on getting it working with kholk.
[Xperia Play General] Selim873:
At least we know the script works. Let us know how it goes, darkfate.
[Xperia Play General] DubleJayJ:
Won't we have to get it working with the kernel also?
[Xperia Play General] Selim873:
I think he means that he needs to get it compatible with the Xperia Play first, then the kernel. As he said, those were files for the RAZR's processor. But since the script was throwing errors at me when I tested, we know the script works like it should, better than no output at all. It just needs to be ported first.
[Xperia Play General] beez1717:
We are trying to compile a file for the razor processor because it's all we have right now...
[Xperia Play General] DubleJayJ:
Well good luck. :D
[Xperia Play General] darkfate246:
does anyone know how to locate uart pins on the phone???
[Xperia Play General] Atarii:
Probably the points under the battery (also known as the test point)?
[Xperia Play General] darkfate246:
can you help me find out what pin is what???
[Xperia Play General] Selim873:
I did a little googling and from what I found, I think these are the UART pin points.

The one shown that's being touched is the pin used to unlock bootloaders, I don't know about the other ones though. Hopefully that's the one you're looking for.
[Xperia Play General] DubleJayJ:
Why do we need to know this for Kexec?
[Xperia Play General] Selim873:
Each pin holds information, the one we've used for unlocking puts the phone in a special mode, which when using Optimus, it labels it as a ZEUS FLASH driver, or something like that. He might be able to get what we need through the right pin.

Correct me if I'm wrong, I think this is right.
[Xperia Play General] DubleJayJ:
True. And it does labels it as Zeus Flash Drive. Dunno why but it does.
[Xperia Play General] darkfate246:
does any one actually know what those tests points map to
[Xperia Play General] DubleJayJ:
No idea. I doubt anyone would. Contact SE.
[Xperia Play General] darkfate246:
i doubt SE would tell me that kind of stuff

but its worth a try
[Xperia Play General] Selim873:
SE supports bootloader unlocking and custom roms, their official beta involved flashing a whole new kernel, if helping Verizon users is the case, I'm sure they would be glad to help! :D
[Xperia Play General] darkfate246:
you sure?? well i sent them a email.... i hope they get back to me soon
[Xperia Play General] darkfate246:
Thank you for contacting the Sony Xperia™ Contact Center. Your question has been registered and the reference number is CaseIdOnlyTag.

how the hell am i supposed use CaseIdOnlyTag as a reference number?
[Xperia Play General] DubleJayJ:
LOL Not sure. Check the ref number later. It might be still registering atm.
[Xperia Play General] darkfate246:
... grrrr i really need the schematics
[Xperia Play General] beez1717:
Are you looking to put the phone in service mode?
[Xperia Play General] nickholtus:
testpoint: http://www.youtube.com/watch?v=YFhjmtyyy6E

you can just use 1 paperclip
[Xperia Play General] darkfate246:
im looking for the uart pins
[Xperia Play General] DubleJayJ:
SE Is your only hope. Did they respond to you.
[Xperia Play General] darkfate246:
not yet
[Xperia Play General] DubleJayJ:
Just wondering but, how did they get the RAZR's processor information? Isn't that what we need atm?
[Xperia Play General] Selim873:
Well, since android is a linux os, are there possibly commands that you can input on adb to get that info?
[Xperia Play General] beez1717:
I'm assuming that you can just get the info by using the right commands in terminal emulator.
[Xperia Play General] Selim873:
Using the terminal emulator, is this the info you need?

$ cat proc/cpuinfo
Processor : ARMv7 Processor rev 1 (v71)
BogoMIPS : 681.57
Features : swp half thumb fastmult vfp edsp neon
CPU implementer : 0x51
CPU architecture : 7
CPU variant : 0x1
CPU part : 0x00f
CPU revision : 1

Hardware : zeus
Revision : 000b
Serial : 0000000000000000
[Xperia Play General] beez1717:
I really don't know but I did know how to get the info.... I think...
[Xperia Play General] darkfate246:
im looking for those but on the xperia play
[Xperia Play General] Selim873:
Here's the service manual in pdf format. :)

I'm sure you'll find what you need in it. It was written for every R800 model, including the R800x.
[Xperia Play General] darkfate246:
im pretty sure that doesnt tell me what i need
[Xperia Play General] beez1717:
Any news on how this is going?
[Xperia Play General] darkfate246:
no not really i havent been able to talk to kholk lately so right now i dont know where to start
[Xperia Play General] beez1717:
Hmm. Perhaps you can ask someone else to do it?
[Xperia Play General] Leraeniesh:
Has anyone got this program to work on another 2011 Xperia device?

Your problem seems to be that Kexec wants to wright to a portion that doesn't exist. The Xperia Play (and all other 2011+ devices) do not have the standard partition for kernels.

Kernels can only be modified via flash/fastboot.
[Xperia Play General] Selim873:
So would that mean it could be found if the phone was set to test point mode? I'm running Ubuntu Linux right now, so would the proper command with that test point mode activated be of any help?

I haven't used Linux in years so I only remember basic commands like "apt-get" etc.
[Xperia Play General] beez1717:
Maybe it would work if we changed all the paths to fastboot? That might work but would be a lot of work to do that.
[Xperia Play General] darkfate246:
does anyone have a unlocked bootloader that can test an see if my kernel can run kexec?? if we can get the right test points we can even jtag it and replace the bootloader with our own. kinda like the HP touchpad. by the way does anyone know if i can get my bootloader unlocked for 15$? it would make getting kexec to work alot easier
[Xperia Play General] sonicfreak360:
I could try, what rom I use, stock? 2.3.2/3/4?
[Xperia Play General] beez1717:
Hmm. I'm thinking that perhaps what needs to be done is that we have to rewrite the code so th at the program looks in the correct partitions locations, seeing as it was mentioned that all Xperia phones have odd partitions.
[Xperia Play General] darkfate246:
partitions dont matter at the moment right now we need to get it to load a new kernel into memory

gimme a few days to make the kernel kk
[Xperia Play General] darkfate246:
nvm about testing my kernel.

im getting Alejandrissimo to unlock my phone.

when that happens ill be able to start and see whats missing from the kernel by trial and error and if nothings missing then ... im going to need somebody that can help rewrite kexec. does anyone know anything about kmem patching because i think thats the way to go if kexec needs a certain kernel symbol.

if its missing the /sys/firmware/memmap files i could easily have my kernel create those files and then we can copy them to an sdcard, then we could bind the memmap dir on the sdcard to the /sys/firmware/memmap directory.
[Xperia Play General] Selim873:
I have SO much faith in you right now on this. I wish you luck! I unfortunately can't help you there, but if you need a locked tester, count me in! :D
[Xperia Play General] darkfate246:
ok i guess ill put you up at the top
[Xperia Play General] DubleJayJ:
Good luck bro. If you need another locked bl tester, count me in.
[Xperia Play General] darkfate246:
ok Hopefully by Tuesday ill have the money to pay him.
[Xperia Play General] KeiranFTW:
You are probably better of looking at something like splboot...
[Xperia Play General] darkfate246:
??? whats splboot?
[Xperia Play General] KeiranFTW:
here: http://bit.ly/KyQLg8
[Xperia Play General] beez1717:
Can you explain it in simple terms instead of sending it to another thread? I'm lost looking at the thread for it!
[Xperia Play General] Bionik_kaos:
Count me in too .... I'm ready to try it all:D
[Xperia Play General] savage24x:
The HP Touchpad is nothing like that. They executed a command after the kernel was loaded, without messing with the bootloader, then installed CM.

Sent from my iDevice
[Xperia Play General] darkfate246:
are you sure thats how they installed ubuntu natively on the touchpad
[Xperia Play General] nickholtus:
darkfate: i know someone wo can unlock your phone!

i don't know how much it is but it is but i think about the 15 usd
[Xperia Play General] darkfate246:
who is it??? i dont have any way to send money to someone online at the moment...

i was thinking about using a moneypak to send the money but idk if i have to pay monthly for it???
[Xperia Play General] nickholtus:
he uses paypal.

you can use paypal with a credit card or your own bank account (my brother of 13 is using paypal with his own bank account)
[Xperia Play General] darkfate246:
problem with that my parents are using the bank account
[Xperia Play General] crono141:
That made me chuckle. Nice.
[Xperia Play General] savage24x:
They used the recovery on the device to execute a command to install CM and a new bootloader aka Moboot, which allowed for execution of Recovery (CM and WebOS) and the OS (WebOS or CM). The kernel on the HP TouchPad already supported outside command execution. There was nothing involved with JTAG-ing. Currently, the testpoints (JTAG-ing as you call it), are used for unlocking the bootloader, but require you to pay to use an unlock credit. It's meant for developers only.
[Xperia Play General] nickholtus:
this is the site:

http://unlock-bootloader.com/unlock/

his xda username is alejandrissimo
[Xperia Play General] darkfate246:
im already having him unlock my phone but i dont have the money
[Xperia Play General] beez1717:
Why oh why do we have to pay to get our phones unlocked? Is it a stupid monopoly or something?
[Xperia Play General] lightningdude:
You can blame Verizon for that one. The program that Alejandrissimo uses is a credit-based program, so it's the credit you're paying for, not a greedy user.
[Xperia Play General] mustbepbs:
If you want to do it yourself so you feel the money is justified, buy the credits for a one time use (it's 10 bucks cheaper than having alejandrissimo do it for you @ $14 USD). I'm just lazy and had him do it.
[Xperia Play General] nickholtus:
you can buy credits.

but you also need a cardreader (not for sd cards but other cards)

and alejandrissimo is the cheapest
[Xperia Play General] beez1717:
Just as I thought. A stupid Verizon monopoly just to piss off their users.
[Xperia Play General] DubleJayJ:
So any progress?
[Xperia Play General] netizenmt:
I think it's safe to say if there was, you wouldn't need to ask. ;)
[Xperia Play General] beez1717:
Wow. Did this project die or something?
[Xperia Play General] Leraeniesh:
I don't believe it ever started.
[Xperia Play General] DubleJayJ:
Well, looks like this project got scrapped.

Sent from my locked R800x
[Xperia Play General] Selim873:
I would just invest in unlocking. I've tried Omnius multiple times during the Free Easter promo, which didn't work, but I'm at the point where I would definitely pay since Alejandrissimo's method is guaranteed to work on the R800x.
[Xperia Play General] DubleJayJ:
In Omnius, there's Zeus and Zeusc. We were supposed to choose Zeusc. Anyways, I got $20, and I need $5 more. Once I get it, I'm unlocking. But I was hoping the OP wasn't gonna give up .

Sent from my locked R800x
[Xperia Play General] darkfate246:
i didnt really give up its just i dont have enough time to mess around with kexec
[Xperia Play General] DubleJayJ:
So, in other words, you gave up.:rolleyes:
[Xperia Play General] Selim873:
Nevermind. :)
[Xperia Play General] kamarush:
Just to let you know, we succeeded to boot 3.0.8 kernel over kexec ;)
[Xperia Play General] KeiranFTW:
Source?
[Xperia Play General] Insane PPC:
would love to hear more as well!
[Xperia Play General] nickholtus:
I know a few things:

Don't pm him about release it!

He is not going to release it atm

He is working on a suprise
[Xperia Play General] DubleJayJ:
I knew as soon as I payed to unlock my boot loader,something like this was gonna happen.
[Xperia Play General] nickholtus:
in the future (coming weeks/months) you don't need to unlock bootloader anymore
[Xperia Play General] Selim873:
Exactly what I thought! Well worth it anyways. :)
[Xperia Play General] DubleJayJ:
I KNEW IT. I KNEW I SHOULDN'T OF PAYED. :l Oh well.
[Xperia Play General] nickholtus:
if you didn't you had to wait a few weeks/months.

becausse the method isn't finished (lot of bugs)
[Xperia Play General] zengj:
R800 can reset slide count?

greetings
[Xperia Play General] DubleJayJ:
I wouldn't mind waiting if a developer said they were working on this. But, I figured, the project is screwed, so I'm gonna pay.
[Xperia Play General] nickholtus:
We didn't know this was going to happen

They found a way to do this when porting kernel 3.0.8
[Xperia Play General] KeiranFTW:
I'll believe it when I see it :)
[Xperia Play General] nickholtus:
i believe the developer.

the bugs for now: no gsm signal

camera act weird

this is what i know

when everything works he will release the source

i am not going to call names, because of spamming.

they just want to work on it without people asking things about it
[Xperia Play General] Insane PPC:
thanks for the updates nick!

i'm probably switching carriers to something my play won't work on, but more than likely keeping the little guy just to play some games on and being able to flash it would be a welcome addition.
[Xperia Play General] beez1717:
I am keeping my experia play forever. OnLive and emulators FTW!

By the way, I wonder, if you temporarily re lock your phone can you use this method? It would help in testing in the future (once testing is needed)
[Xperia Play General] Insane PPC:
just a friendly bump to keep this up
[Xperia Play General] DubleJayJ:
I'm pretty sure it doesn't matter if you have an unlocked bootloader or not.
[Xperia Play General] genetic608:
Now I'm all excited >.<

Definitely going to test when this happens :D
[Xperia Play General] darkharbinger81:
Any word on how this is coming along? I'm really curious and want to try doomkernal on My locked r800x :D
[Xperia Play General] crazymonkey05:
I'm really hoping this comes through, then we can shove it in Verizon's face haha :)

There's nothing devolpers can't do
[Xperia Play General] crazymonkey05:
maby this will help

i found these threads for the xperia x10 which is relitivly close to the play about suceessfully using kexec to bypass the BL here , here , and here
[Xperia Play General] ~iSamur@i:
and if you look better, this is a work of one years ago: do you really think that if it was so easy to port it in one year they haven't already tried this solution?
[Xperia Play General] crazymonkey05:
Well I was just trying help our developers I mean come on its closer to us then the RAZR family
[Motorola Droid 4] DNak206:
I've debated getting the D4 for some time now (had my upgrade for awhile) and pretty much miss a physical keyboard which is my primary motivation.

How are you guys liking it, obviously the big con is moto vs htc in bootloader locks but otherwise, would you recommend it? Not being able to tether the 4G would be a huge blocker too..
[Motorola Droid 4] jy3ng4:
I am happy with the D4 and would recommend it...cautiously.

Like you said, the bootloader is locked, and as a result development activity is somewhat limited. If custom ROMs are a top priority then I would go in another direction. Furthermore, the screen is sub-par.

Other than that though, the phone is great. Build quality, battery life, the keyboard, and the stock OS are all very good. 4G wireless tethering works perfectly.
[Motorola Droid 4] gefagan:
I had the same prob when I went from D1 to bionic, always found myself choosing not to use the phone for some task (like answering this thread), waiting until I could use a laptop instead. I'm very happy I switched. It may not be ideal, but then the ideal doesn't exist. Physical keyboard, dual core, Vz 4g: What else gets a check on that trio? -GEF
[Motorola Droid 4] xredjokerx:
Funny thing, I'm debating the switch too.

I found a cheap cheap droid 4 on CL and I'm about to activate it today. I sure am going to miss my thunderbolt though. Kinda sad that I'm selling it today.. :(