yashsingh1/xdaforums huggingface dataset:
[Connected Car] incogn1to:
To speed up you SCT, you wight want to adjust cgroups configuration. For unknown reason Volvo decided to give 90% of cpu time to Audio subsystem, which in my eyes doesn't make any sense at all.

Example script:

#!/system/bin/sh
echo performance > /sys/devices/system/cpu/cpu0/cpufreq/scaling_governor # maximum performance of CPU
echo "2148" > /dev/cpuctl/audio/cpu.shares # 20% to audio subsystem
echo "8192" > /dev/cpuctl/others/cpu.shares # 80% to anything else

If you have task, which is not interactive, you can add it to bg_non_interactive group. Example:

#!/system/bin/sh
echo $$ >/dev/cpuctl/others/bg_non_interactive/tasks
rclone --config /mnt/sdcard/rclone/rclone.conf copy box:mp3 /mnt/sdcard/mp3
[Connected Car] berquer:
I stucked in same situation. I downloaded latest firmware from Parrot website but I don't know how can I update it. Is there any option to enter recovery mode?
[Connected Car] nfshp253:
Hi, I'm wondering if this fixes the issue that Waze will reset (losing all account information) if you don't shut down the app before turning off the car's engine.
[Connected Car] xadax:
I did post the core file in core.zip.

---------- Post added at 12:59 AM ---------- Previous post was at 12:43 AM ----------

How do I run this? I don't think running the scripts within adb shell on the SCT is the way. Do I have to make a dump file or can I use the plf, but need a Linux x86 environment? I am currently running Windows 7 x64.
[Connected Car] gekkekoe123:
my bad, I will download the core and see what is happening.

./extract_address_and_disassemble zimage
Searching for zImage compression
GZ compression detected
Unpacking zImage
181+1 records in
181+1 records out
2882635 bytes (2.9 MB) copied, 0.0583776 s, 49.4 MB/s

gzip: stdin: decompression OK, trailing garbage ignored
DONE unpacking zImage
Grabbing addresses
[+]mmap
mem=f6ffe000 length=0059f800 offset=c900a000
kallsyms_addresses search failed
Disassembling kernel for specific functions
0 symbols are loaded.
0 symbols are loaded.
searching for ptmx_fops
searching for perf_swevent_enabled

Tool also doesn't seem to work.
[Connected Car] xadax:
I also tried on a Linux system with the plf (http://www.parrot.com/uk/support/sensus-connected-touch):

Searching for zImage compression
GZ compression detected
Unpacking zImage

gzip: stdin: decompression OK, trailing garbage ignored
DONE unpacking zImage
Grabbing addresses
[+]mmap
mem=f749d000 length=00306e80 offset=c8b6b000
kallsyms_addresses search failed
Disassembling kernel for specific functions
0 symbols are loaded.
0 symbols are loaded.
searching for ptmx_fops
searching for perf_swevent_enabled
[Connected Car] gekkekoe123:
I modified the exploit the return the address 0x80008000.

It also prints the device id.

Could you try this binary ?
[Connected Car] donaldta:
Whoa! Buffer Overrun.

Thank you very much for this go. It provided me with a lot of information but unfortunately, since it was not segmented per install it was very difficult to digest. Next time It would be helpful after you installed a file that you used [CTRL]+[A] before you exported the log then cleared it before the next installation. That way it is much easier to associate the error message with which each installation.

One particularly interesting information is that every install attempt was confronted with "Signatures files not found" yet the installed anyways at least with the AlphaSparma0.apk when opting to re-install.

Well, at least I know that the base app is good.

I was expecting those three to fail because they had files which did not exist in AlphaSparma0.apk. However, I did not expect the next two to fail.

As you see the trojan packages are being re-parsed which is not something I expected. I may have to go back to the drawing board on this one. Would you be able to re-install the modified Wikango app that johnnie_w created, its the one you had named, "evil--ppktemp.apk". I would like to see the logcat data for that installation.

C:\>adb shell dumpsys package com

:) Again, inundated with too much information. Believe me I know the irony of having little to no feedback but then being overwhelmed with a tidal wave of information. For this portion the command, "adb shell dumpsys package com.android.packageinstaller" would have been better since we were only looking for one relevant line. This was analogous to looking for a needle in a haystack.

Now we know that you performed these steps with Package Installer 2.3.7 present. Is there anyway you can try this again with one of the 2.3.3 installed?
[Connected Car] gekkekoe123:
also try this one:

I switched the exploit order. the fb mem thing crashes.

but test sploit3 and 4 for me and paste output.
[Connected Car] xadax:
Attempt fb mem exploit...
[1] Segmentation fault (core dumped) ./break_setresuid

New core attached, I hope you can find it there.
[Connected Car] donaldta:
Hidden they are!

I took a look at the "com.parrot.setting2.apk" from the SCT's PLF and it looks like most if not all of the standard settings are present. I'm not quite sure how they hid them but perhaps we can use Activity Manager to bring them up. Give these four a try first to see if the respective settings control panel will pop up on the SCT.

root@Microknoppix:/home/knoppix# [B]adb shell am start -n com.android.settings/.ApplicationSettings[/B]
Starting: Intent { cmp=com.android.settings/.ApplicationSettings }

root@Microknoppix:/home/knoppix# [B]adb shell am start -n com.android.settings/.RunningServices[/B]
Starting: Intent { cmp=com.android.settings/.RunningServices }

root@Microknoppix:/home/knoppix# [B]adb shell am start -n com.android.settings/.DevelopmentSettings[/B]
Starting: Intent { cmp=com.android.settings/.DevelopmentSettings }

root@Microknoppix:/home/knoppix# [B]adb shell am start -n com.android.settings/.applications.StorageUse[/B]
Starting: Intent { cmp=com.android.settings/.applications.StorageUse }

If these work then I'll go back and catalog the rest of them for you. If they don't maybe we can find out why with the logcat messages.
[Connected Car] gekkekoe123:
Good, I made a mistake in 3. it uses the crashing exploit first. But try 4. that one switches order
[Connected Car] xadax:
$ ./break_setresuid3b
Attempt fb mem exploit...
[1] Segmentation fault (core dumped) ./break_setresuid3b

core3b attached

$./break_setresuid4
ACU Volvo (V01.47.88_Volvo_EU) is not supported.
Attempting to detect from /proc/kallsyms...
ACU Volvo (V01.47.88_Volvo_EU) is not supported.
failed to open /dev/diag due to No such file or directory.Attempt fb mem exploit
...
failed to get root access
[1] Segmentation fault (core dumped) ./break_setresuid4

core4 attached

and ls -l /dev attached
[Connected Car] gekkekoe123:
another try :)

from http://blog.azimuthsecurity.com/2013/02/re-visiting-exynos-memory-mapping-bug.html

so we could also use framaroot gimli method if the break_setresuid fails
[Connected Car] xadax:
./break_setresuid5
ACU Volvo (V01.47.88_Volvo_EU) is not supported.
failed to open /dev/diag due to No such file or directory.Attempt fb mem exploit
...
failed to get root access
[1] Segmentation fault (core dumped) ./break_setresuid5

core5 attached
[Connected Car] gekkekoe123:
Ok thank you for all the usefull testing. The break_setresuid5 doesn't seem to work, or we need to see why it core dumped.

Both method are somewhat time consuming.

Checking our dev log i noticed:

crwxrwxrwx root root 246, 0 2013-11-02 01:53 DspBridge

This is the one framaroot uses. In the coming days, I'll try to make a commandline programme that uses framalib to exploit /dev/dspbridge

Volvo seems to be lucky to be using such an "old" kernel :(

again thanks for the testing.
[Connected Car] xadax:
I tried them, it seems to be working. The ApplicationSettings and DevelopmentSettings still show the known limited menus.

RunningServices and StorareUse show screens I have not seen before.

P.S. this will be my last action for now, since it is getting late here, it is raining heavily and I don't want a flat battery tomorrow...

Thanks, there seems to be some progress now. Perhaps some other SCT owner take over for now.

---------- Post added at 02:34 AM ---------- Previous post was at 02:32 AM ----------

There is a new firmware coming in two weeks, I don't know which Asteroid/kernel version this is based on.
[Connected Car] gekkekoe123:
Okay,

I'ven doing some hacking and got a proof of concept command line framaroot.

For now only Gimli exploit is enabled. But this exploit works on the parrot so this should work. The other exploit are samsung exploits.

I will enable them at a later stage

usage:

adb push libframalib.so /data/local/.
adb push sploit /data/local
adb shell chmod 755 /data/local/sploit

Now try each of the following:

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit Gimli 0

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit Gimli 1

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit Gimli 2

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit Gimli 3

and verify after each step if you have root.

If stuff breaks please post adb logcat

[Edit]

Ok, cmd-frama3 now enables all the exploits in frama root!

Use one of these instead of Gimli in the commands above:

Gandalf, Boromir, Pippin, Legolas, Aragorn, Gimli

For SCT Gimli is the one that should work.

Credits to the Author of frama root for the lib.

Hopefully Volvo didn't patch more than parrot did...

Also don't update any firmware as they might have patched the Omap bug
[Connected Car] gekkekoe123:
The cmd frama tool allows you to invoke functions from the frama lib. We don't need to install it as APK since the native tool will load the lib itself. Its important that the framalib is in the same folder as the tool.

I added an option where the user can choose a mode (1=normal, 0=adb).

See attached cmd-frama4.zip

Usage:

adb push libframalib.so /data/local/.
adb push sploit /data/local
adb shell chmod 755 /data/local/sploit

Now try each of the following and check for root after each try:

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit 0 Gimli 0

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit 1 Gimli 0

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit 0 Gimli 1

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit 1 Gimli 1

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit 0 Gimli 2

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit 1 Gimli 2

At this point, I need someone to run cmd-frama4 on actual unit. My emulator cannot emulate the SCT.

I can see the stacktrace that the framalib methods are invoked.

The following 2 parameters should have the highest succes rate:

# use normal activity with Gimli exploit and selected idx 0 from root menu

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit 1 Gimli 0

# use ADB activity with Gimli exploit and selected idx 0 from root menu

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit 0 Gimli 0

Please post output and adb logcat in case of problems.
[Connected Car] johnnie_w:
Not sure if this can be of any help, but attached the output of dmesg on the SCT.
[Connected Car] gekkekoe123:
Did you also try first arg 1 ? Because I don't see /dev/stuff going on in the stack.

so:

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit 1 Gimli 0

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit 1 Gimli 1

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit 1 Gimli 2

adb shell LD_LIBRARY_PATH=/data/local /data/local/sploit 1 Gimli 3

? Only the Gimli exploit probably will work on SCT

You should be able to see super user apk appearing
[Connected Car] kamel6k:
Hi all,

How feasible would be to use a generic USB dongle with Carplay for Android?

They operate through a USB connection and an Android app. What i haven't manage to find is a dongle with an app for a previous version of android than 4.0.

Am i beeing naive thinking that the app itself is the bigest chalenge, or is there a impossibility through the USB connection?

Thank you all for all the work putted in to this old platform.
[Connected Car] incogn1to:
For this, you need to close it using intent. You can do it with tasker or other app. Just send intent when Android is going to shutdown.

In Tasker:
Send intent:
Action: Eliran_Close_Intent
Cat: Default
Target: Broadcast Receiver

---------- Post added at 09:27 PM ---------- Previous post was at 09:25 PM ----------

App is the biggest challenge. Technically you don't need a dongle. There is open source project, which can convert SCT to Android Auto unit without any extra hardware.

https://github.com/viktorgino/headunit-desktop

The biggest question is how to port it to old Android version we have.
[Connected Car] nfshp253:
Thanks, so for the context should I use Event-->System-->Device Shutdown?
[Connected Car] incogn1to:
Correct.
[Connected Car] nfshp253:
Thanks. I assume Tasker will always launch in the background and be active when the system boots up?
[Connected Car] berquer:
Does anybody know how I can enter recovery mode? My SCT displays Volvo logo and don't skip this step. If I wait enough time it resets again and again. Before this situation I suddenly stops my engine during factory reset process. After that it don't open again. Volvo service offers me replace all unit. I know this problem solved with new firmware installation. I tried rubbing solution for enter recovery mode but it did not work. Can anybody help me?
[Connected Car] maurus09volvo:
necesito el firmware de volvo sct

tengo el mismo problema alfuien tiene el firmware del sct volvo v40 2014. ya no se puede descargar de parrot

---------- Post added at 07:16 PM ---------- Previous post was at 06:55 PM ----------

tengo el mismo problema se quedo trabado mi sensus connected touch. .... Se queda en la pantalla de volvo y reinicia. Como puedo destrabarlo pudiste arregarlo alguien tiene el firmware ooooo algun truco para sacralo de ahi
[Connected Car] auesp:
Thank you for the updated Waze. Unluckily when Waze starts my SCT goes to vertical mode.

Can you help me to resolve this issue?
[Connected Car] incogn1to:
You can lock unit in landscape mode using rotation lock.
[Connected Car] auesp:
Thanks, that worked fine.

Keep up the good work with our antique SCT! It still can give us many pleasures it would be a shame to throw it away.
[Connected Car] incogn1to:
I've created a simple replacement for default ACU launcher.

Weather data is obtained from OpenWeatherAPI using current coordinates.

Weather gets updated every 10 minutes (or every 5 km).

Main idea is to control unit from steering wheel.

If you scroll joystick up - you will see list of currently running applications.

If you scroll it down - you will see list of all installed applications.

When you switch tracks - toast message with track name appears

Photo of results is attached. Sources can be found here:

https://bitbucket.org/incogn1to/bcu/src/master/

Latest version can be found here:

https://bitbucket.org/incogn1to/bcu/downloads/
[Connected Car] incogn1to:
It might be old, but it is still working fine. At specially after some tweaks. Actually I do have an idea of porting AndroidAuto to it. :cool:
[Connected Car] kangoogr:
Hello all,

owner here of a sensus connected touch unpatched on a Volvo fully workable. I am thinking to proceed with patching it. Does is still worth doing it? Will i be able to tweak it to a better and workable set of application like whether etc? What do you think now that we are in 2020? Shall i do it? What to do after initial run of patching? Will the controls of wheel still be functioning?
[Connected Car] incogn1to:
Waze 3.8.1.0 - search mechanism stopped working. Is it just me? Is Google dropping some APIs?
[Connected Car] kangoogr:
You seem to be an expert on Sensus Connected Touch.

Could you help me tweak mine with your expert knowledge?

I will patch it the next days and i would like to have a working weather.
[Connected Car] -Fade-:
Just patched (rooted) my SCT, the steps in the first post on how to root worked fine for me.

The weather is working after installing the bcu.apk that incogn1to has supplied, in my V60 the lettertype seems to be a bit bolder than the original ACU but its fine by me.

This weekend I'll try the Waze app. the google maps seems to be working as well but its quite old... compared to the recent versions on the phones.

I'm really hoping the port for android auto is possible that would make this system just great!

Are there any updates on that side incogn1to?
[Connected Car] stefanpo:
Waze search not working for me either - but but all else including routing still works.
[Connected Car] auesp:
Same for me, search does not work anymore routing works with the favorites that remained.
[Connected Car] dms120:
Can't download from Parrot

Hi, i tried to download Parrot software from parrot website but i does not seems to be working.

Anyone can? If so, can you share the files?
[Connected Car] theqkash:
Well, yes, same for me.

But generally, is there any chance to update android version on this device?

I'm just curious when it all will broke down, waze is almost dead for now as we all see, for spotify I was unable to find any version of app which will be installable on this device and will let me to remote control my car music from remote device, so without having favourites list on spotify it's almost impossible to use it.

It's not something like "you do it I watch", but I'm just afraid that in near future things can finally stop working and we will not be able to do anything more.

Going into Android Auto seems to be only fair method, except flashing it to newer Android version, IMO.
[Connected Car] incogn1to:
Other option would be to disassemble Waze. 3.9.9.9 version seems to be working fine.
[Connected Car] nfshp253:
So there's hope? Well one way I'm using Waze for now is to launch the app on my phone, and set my destination as the Work address, then launch Waze in SCT and select that. Troublesome workaround but it works (I could just use my phone, but I don't want an ugly phone holder in the car).
[Connected Car] le_mOnd:
Backup or update iGo?

Hi [MENTION=9350973]All[/MENTION]!

I have a V40 T5 with the SCT including iGo and I am reluctant to root it, because I fear I might turn the system unusable, which would be bad, because the car does not have the original Sensus navigation, only iGo.

So now I got new maps and a new license for the maps from the internet. I made a backup of the whole original SD card and I'm using the backup card (a 32 GB sandisk) to test the whole thing. The backup card worked as long as I keep the original content. But when I replace the maps and other folders and put the license in the appropriate folder, iGo starts up and shows a message that it cannot display the map because of licensing issues. I also got a new iGo version as an .apk which I don't dare to install, because I fear I might lose the whole iGo system if anything goes wrong.

So is there a way to backup the old iGo primo before testing with a new version?

I assume, there is no problem with the new card, because if the whole iGo is tied to the original card, then the new card would not work at all, is that right?

All the best and thanks in advance for any comments and hints how to fix this thing. I just want more recent maps, and a working weather widget, and maybe working google maps and internet traffic.
[Connected Car] dreamy2:
volvo stc stop to work

i've on my Volvo V60 my11 the STC installed in 2014. i've rooted it and it work fine.

from a couple of month ago it stop to work. it freeze during loading with volvo screen and the android button on the left side, after some minutes of this screen it reboot and show again volvo screen.

i've also tried to remove the SD and put in the original one provided by volvo, but the issue is the same.

there is some way to hard reset or to let it boot again?

Thanks
[Connected Car] incogn1to:
I'm afraid you are in boot loop. There is no way back.

Only option is to plug ethernet card, connect via adb and try to figure out what is going wrong.

Might take a while.
[Connected Car] dreamy2:
Thanks for your help.

Do you think can be usefull to try to load last software version via usb? I m not able to find it more on parrot site.

What do you mean for "plug eternet card"?

Thanks
[Connected Car] dongwenxuan:
Found that Google dropped support for old android - Youtube won't be support in a few days unless SCT can be upgraded to 4.0 and later version. Volvo/Parrot no longer support nor care about SCT. Not sure if anyone had tried to upgrade the OS or change the hardware for this unit?
[Connected Car] Rita159:
By contrast, I prefer the Atoto S8 headunit, support android auto&carplay, dual bluetooth, split scrren display, ultra Clear QLED Display, VSV Parking...meet all my needs.
[Connected Car] mikedeep975:
Sensus connected touch factory reset

Hi, my sct no longer starts after factory reset. Can you help me? Is there any way to get it started again?

Please help me
[Connected Car] martijn246:
Installation doesn't work

I'll try to hack my SCT system with version 1.49.34 and i have some problems with it.

My log....

Pushing libframalib.so to /data/local

cannot stat 'libframalib.so': No such file or directory

Pushing sploit.jar to /data/local/.

8 KB/s (1837 bytes in 0.207s)

Creating /data/local/tmp/dalik-cache directory

mkdir failed for /data/local/tmp/dalvik-cache, File exists

What can i do to install this hack on my SCT system?
[Connected Car] alexey.vasilyev:
It looks like API for Waze app for Android 2.3 is completely down. I'm constantly getting 'Searching network...' now for more than a week.

UPDATE: API is live again.
[Connected Car] icaroavelar:
Hi all, good afternoon. Is it possible to update the SCT to android 4.0+? I've try to do it by connecting to a wifi and using the automatic update in my V40 T5 2014, but it shows a message of connection faillure.

All other apps works fine, but when I try to update, this message occur.
[Connected Car] konradmik:
First of all, I'd like to thank everyone contributing to this thread for making this totally useless hardware a bit more useful. Thanks guys!

So far, thanks to you, I was able to deal with most of the problems, unfortunately I got stuck on Internet connecion. The problem is that some apps doesn't "see" active connection. It does't matter if I connect via Wifi, BT tethering or usb 4g stick. This is especially true for google "related" apps i.e. Waze (it starts but can't connect), Play Store (it opens and load but i can't download anything) or Google Maps Live Wallpapers (it shows map centered to google headquaters and doesn't refresh). Today i had a problem with AirDroid (it starts but can't login because of "No Internet connection. Check connection settings and try again"). A lot of other apps works great. Do you have any solution for this??

Cheers!!
[Connected Car] incogn1to:
It is not the apps. The problem is that services are dropping support for old APIs. Applications responds as "no network" just because they can't reach service APIs they are used to.
[Connected Car] konradmik:
Sad. Thanks.
[Connected Car] danielnuke:
mine too did you find solution ????
[Connected Car] incogn1to:
I have found a trinity miner on my unit.

For more details please check: https://blogs.quickheal.com/trinity-miner-using-open-adb-port-to-target-iot-devices/

Recommendation is to disable adb by default or at least change default adb port.

Also it makes sense to check /data/local/tmp folder. It seems that this particular miner is using it as a base.

Also make sense to install superSU and remove root privileges from shell.
[Connected Car] incogn1to:
Mirroring can be easily added by such unit. Works fine.

Car WIFI Wireless Display Mirror Link Adapter HDMI DLNA Media Miracast Dongle | eBay

Find many great new & used options and get the best deals for Car WIFI Wireless Display Mirror Link Adapter HDMI DLNA Media Miracast Dongle at the best online prices at eBay! Free shipping for many products!

www.ebay.com
[Connected Car] rwientjens:
I want to install a new apk for google maps. But I am already stuck on downloading cmd-frama-menu, because both Edge and Chrome are blocking the download. It is marked 'unsafe'!

Has anyone a solution for that?