yashsingh1/xdaforums huggingface dataset:
[Galaxy S 4 Mini Original Android Development] DonQuichotte:
cm-11-20150812-UNOFFICIAL-serranoltexx

Hello,

as the stagefright bug is a very serious threat i've decided to build an up-to-date CM11 with the security fixes for this bug integrated. It's the first time a have build an Android-ROM myself, but with a very easy to follow step-by-step guide from k2wl at hand i dared to do so. Although the compiler threw no errors at the last rows i could read, i cannot guarantee that this build will run flawless or even boot up. I simply had no time to tryout this build myself yet and probably will not within the next days. So maybe someone else has the time to flash the ROM and can report back if this build is working.

Please do not ask if this or that kernel will work with the ROM, just try for yourself and report back...i think the chances are good with lombartz last kernel for GT-I9195 CM11.

Changelog since 20150626 (last official Snapshot)

9f65a14 Fix integer overflow when handling MPEG4 tx3g atom
18b7e3c Fix integer underflow in covr MPEG4 processing
b5738ab Prevent integer overflow when processing covr MPEG4 atoms
96bd564 Fix integer underflow in ESDS processing
c6fc769 Fix several ineffective integer overflow checks
743caa8 Fix integer overflow during MP4 atom processing
751ec55 SystemUI: Fix mdpi ethernet indicator size
b7842d4 APN: Update configurations for Philippine networks

This ROM is not tested yet so be warned. Flashing at own risk.

Download: cm-11-20150812-UNOFFICIAL-serranoltexx

md5sum: db758f603cfdacb6e7d7036925b8dff0

Feel free to upload this ROM to other filehoster.

bye DonQ
[Galaxy S 4 Mini Original Android Development] RuffBuster:
Will test tonight. Many thanks!
[Galaxy S 4 Mini Original Android Development] icero:
Any chance for the model serrano3gxx ???
[Galaxy S 4 Mini Original Android Development] DonQuichotte:
Building one while i'm writing this. Upload aprox. tomorrow evening.

..bye DonQ
[Galaxy S 4 Mini Original Android Development] icero:
enormously grateful
[Galaxy S 4 Mini Original Android Development] RuffBuster:
New build "seems" to be working fine. And stage fright fixes are in place. Many thanks.
[Galaxy S 4 Mini Original Android Development] DonQuichotte:
another official CM11

Hello,

as some of you may already noticed, there will be an official build of CM11 by the end of august according to this.

...bye DonQ
[Galaxy S 4 Mini Original Android Development] didierk:
cm-11-20150814-UNOFFICIAL-serranoltexx.zip

I built the latest version this afternoon, including the latest patch:

https://github.com/CyanogenMod/android_frameworks_av/commit/a5dd546165cf89e946dc8e463ab632c5370bdedc

https://threatpost.com/stagefright-patch-incomplete-leaving-android-devices-still-exposed/114267

The ROM is tested (it boots and the phone works ok) but be warned, flashing at own risk :cowboy:

file: http://www.imagenetz.de/f682876ea/cm-11-20150814-UNOFFICIAL-serranoltexx.zip.html

md5: 9e7bc00c93de8006ca1b8e6bab33a528

greetings

Edit (15.Aug): I just noticed that something went wrong during the build. The filename is new, but according to the build.prop its still the version from aug 12.

I'll have to check the build system and upload the new file ASAP.
[Galaxy S 4 Mini Original Android Development] RuffBuster:
How does this differ to DonQ's release from yesterday? Or is it just your personal release? Cheers
[Galaxy S 4 Mini Original Android Development] didierk:
Hi

It fixes the other Stagefright bug:

MPEG4Extractor.cpp: handle chunk_size > SIZE_MAX

Edit: Should be CVE-2015-3864, see:

http://arstechnica.com/security/201...he-ropes-with-one-two-punch-from-researchers/

Edit2 (15.Aug): I just noticed that something went wrong during the build. The filename is new, but according to the build.prop its still the version from aug 12.

I'll have to check the build system and upload the new file ASAP.

greetings
[Galaxy S 4 Mini Original Android Development] DonQuichotte:
Hi,

actually the new fixes have been merged to the sources after i have synced the repo for my GT-I9195 build. The build for the GT-I9190 has the new patches already integrated. Will upload this build in about 2 hours when back at home from work.

bye DonQ
[Galaxy S 4 Mini Original Android Development] RuffBuster:
Many thanks to you and DonQ for providing us with the latest build of security fixes! Seriously thank you!

If it wasn't for the security flaws in Android I would still be using stock right now. But now I'm staying on CM11 just so I have the satisfaction of knowing my phone is secure and all my details including PayPal and others are now safe.

Both cm and Samsung are very slow to patch this and its huge in my opinion. Even lollipop builds from the last few months are affected, but due to bugs I don't use these builds.
[Galaxy S 4 Mini Original Android Development] didierk:
I compiled CM11 for me anyway, so why not share it for others :)

Since Aug 14 the Zimperium Stagefright Detector App V3 (Link) is able to detect CVE-2015-3864.

The latest build which I posted seems to perform well!

greetings
[Galaxy S 4 Mini Original Android Development] newbieee:
Where to download GT-I9195 CM-11 latest nightly?

Hi,

thanks for all the work! I have a GT-I9195 LTE (serranoltexx) and for more than 6 months I'm on cm-11-20141008-SNAPSHOT-M11-serranoltexx.zip . I would like to update to the latest CM Android 4.x nightly build to stay up-to-date with security fixes.

I wasn't able to locate the download link, because when I select "nightly" at the official CyanogenMod download page for serranoltexx (http://download.cyanogenmod.org/?device=serranoltexx&type=nightly) it shows only the last 50 nightly builds and all of them are for CM-12.

Where can I download the latest CM-11 nightly?
[Galaxy S 4 Mini Original Android Development] RuffBuster:
There are no nightly builds for cm11 anymore for s4 mini lte. Have been taken down. Only snap shots. But they do not include the latest security fixes. Instead use the link from the posts just above this one. I'm using this and is 100% up to date with new stage fright security problems.
[Galaxy S 4 Mini Original Android Development] 1N4148:
Freshly built from CM sources:

cm-11-20150823-UNOFFICIAL-serranoltexx.zip
[Galaxy S 4 Mini Original Android Development] RuffBuster:
Ooooo my daily driver. Any idea what's changed?
[Galaxy S 4 Mini Original Android Development] 1N4148:
Checkout the common CM11 changelog
[Galaxy S 4 Mini Original Android Development] RuffBuster:
Only thing in there that made sense to me was that they've fixed the compass, though I didn't know this was broken to begin with. Also I don't see anything related to stage fright fixes... When I have time I'll install and see if they have it haven't.

Also I see a lot of commits labelled DO NOT MERGE that have been merged...
[Galaxy S 4 Mini Original Android Development] :
[MENTION=5804713]didierk[/MENTION]

How can I download your rom? All I can see on the link you provided is two google ads to download??
[Galaxy S 4 Mini Original Android Development] RuffBuster:
I use Chrome browser and works for me.
[Galaxy S 4 Mini Original Android Development] RuffBuster:
Can confirm that this build has stage fright fixes. And also compass seems to be working a lot better with this latest build.
[Galaxy S 4 Mini Original Android Development] Mascarponi:
Is there a way to have the musicplayer time-bar in the lockscreen like it was with the stock-rom? So that it's possible to skip some seconds in a musictrack via the lockscreen, instead of only skipping to the next track..
[Galaxy S 4 Mini Original Android Development] :
If anyone missed it, there was an official snapshot release(1st sept) from CM on their download page. It has all the security fixes and other updates.
[Galaxy S 4 Mini Original Android Development] Loulou-13:
yesss !!! :D

thank for new ! ;) i will test ASAP ......

i'm badly surprised ( and disapointed) by tte general stability of all L 5.1.1 customs roms ......

still persist too much buggs ...by umpredictable very bad behaviour .

these roms can't be used by ours devices ...for to basicaly "phone"LOL ! with these umpredictable sound problems and random reboots ...
[Galaxy S 4 Mini Original Android Development] :
Yes, LP has been a failure in my opinion. I think there is no reason why it shouldn't work well, we have 1.5gb ram and plenty of space in the system partition, but a combination of not enough high-level devs willing to work on our device and lollipop in general being a bit half-baked it has been disappointing. The early talk of android m is promising though, fingers crossed.....:)
[Galaxy S 4 Mini Original Android Development] Loulou-13:
i don't think that there will have a "good" development like Lollipop at this time, for this new "M" 6.x .......

if there still have stability issu on Lollipop , i think that "m" will be more bad ! and our phone begin to be less interresting ...

periodicaly ,i see members very happy with Lollipop ...but "one" day" they will have the begin of big unstabilities ... unusable phone ... it's umpredictable .:(
[Galaxy S 4 Mini Original Android Development] RuffBuster:
It is a shame our Lollipop builds have some big bugs that make it unusable as a "stable" daily driver. I personally don't blame the devs here on the mini forum but instead CM team and Google for providing the poor base... I consider devs like F4K to be very competent at what they do, although yes too few devs here for a great device in my opinion.

I would of gone for a more popular "flag ship" device but they are just too bloody big for my lifestyle.

I still have my old GALAXY S2 with the latest build of Lollipop and this device runs great on Lollipop. Who knows...

I always go for phones with good dev support, or devs I recognize to be proficient at what they do. Mainly because ALL phones have their problems and the devs usually find ways to iron out these problems. Fingers crossed the S6 Mini has a good following...
[Galaxy S 4 Mini Original Android Development] :
I whole-heartedly agree, we have some great devs, just not enough of them. And I blame google/android 95% for LP not being what it should be. Like I said it feels half-baked to me. And totally agree with the bigger phones, I still use the S2 more than any other phone.

From what I have read, android m is aiming to be more stable and bug-free than LP. Here's hoping

Sorry for OT
[Galaxy S 4 Mini Original Android Development] Loulou-13:
Yes !!!! I agree !!!! ;)

I just have said that Lollipop is not "stable" with our phone....but never said that the problems are devs ..

I'm fan,i highly respect all devs too ! :good:

There are a problem with S4 mini three sources(used for to make roms ,with all customs sources) ,i think...

Cm12.1 periodicaly have many problems....that's why arco68 expected official stock Samsung Lollipop for to update three sources (used by others roms)...but no official release for our device :(

We have to wait for a work about these sources ....

The best Lollipop customs are not a fork with cm sources....but a pure aosp google sources more stable!
[Galaxy S 4 Mini Original Android Development] savvy1968:
i agree with Loulou-13 ive tried many of the LP Roms for this phone only to be let down by one thing or another and i wouldnt say im a beginner with Roms and phones ive been messing with Roms and the like for many years and LP isnt going forward fast enough for our phone,be it the devs or the ports take your pick but it just isnt getting done.

So im going back to kitkat CM11 cos its fast and stable.
[Galaxy S 4 Mini Original Android Development] Loulou-13:
Yes !

.....and if you like material L ,you have some themes for customs kk with theme support made by cyanogenmod ...

I test tgis last release of cm11 ....and no problem as usual...

And this cm11 kk is the only one who have all securiry fixes !!! Forget pacman,Crom.....etc....and all jb 4.2.2/4.3 too...

But for stocks firmwares i don't see at all massive big updates for all countries since the discovery of many security problems... :eek: for no rooted untouched phones there are knox encryption and firewall ,but for others ???
[Galaxy S 4 Mini Original Android Development] savvy1968:
I think ill stick with CM11 until we see a GOOD FULLY WORKING MM Rom if it happens Great but i wont hold my breath,as for LP ...Ive had my fill.
[Galaxy S 4 Mini Original Android Development] Loulou-13:
M ??? :eek: if it's good for L ,i think...because sources problems...

And if it still have devs too... ,I don't think that there still will be officials teams who support our phone... If arco68 will maintain future cm13 ...

And if there still are S4 mini users...(for me ,i expect an LG G3 or G4.....but never an another Samsung ! )
[Galaxy S 4 Mini Original Android Development] supachris:
O have the same experiences. LP is buggy by design (double unlock swipe, strange message bar...) and even tje official snapshot is not stable for daily use...so I still on 4.4.4
[Galaxy S 4 Mini Original Android Development] Tom Mix:
i second that!

^+1
[Galaxy S 4 Mini Original Android Development] charliebigpot:
Hi, not sure how updated the first post is, but I see that there now is a stable version from 1st September and a nightly from today (20th), has anything changed i the CM policy and we've got both stable and nightly again?

Cheers!
[Galaxy S 4 Mini Original Android Development] RuffBuster:
Ooooooo new nightly?! Gonna have to check that github to see what's happened ?

---------- Post added at 02:09 AM ---------- Previous post was at 01:20 AM ----------

These nightly were taken down 404... Have a feeling these were a mistake release...
[Galaxy S 4 Mini Original Android Development] :
Edit: my bad...
[Galaxy S 4 Mini Original Android Development] Hyst:
if I am not mistaken that are cm12.1 nightlies and not cm11
[Galaxy S 4 Mini Original Android Development] savvy1968:
[MENTION=3044346]arco68[/MENTION] Are you still maintaining this Rom bud?.
[Galaxy S 4 Mini Original Android Development] Hyst:
I doubt it. The the (EOL) in the thread title means End-Of-Life. So cm11 is not supported anymore by the cyanogenmod team. Altough it received an updated a couple of weeks back (stagefright fix, etc). But this was an exception.
[Galaxy S 4 Mini Original Android Development] iltoffa:
Anyone is finding issues with Bluetooth? On the phone I'm able to see it as connected, also passing the phone book... But on the car I cannot see the connection, and it doesn't work. Any patch or any suggestions?

Thanks

Inviato dal mio GT-I9195 utilizzando Tapatalk
[Galaxy S 4 Mini Original Android Development] side:
makes my 3 european devices,freeze and reboot when i use data for surfing internet.

anyone knows how to fix ?
[Galaxy S 4 Mini Original Android Development] drums173:
+1 :good:

Appeal to please please update this CM11 with any future big security fixes in the future, at least until the stability issues plaguing LP are ironed out.
[Galaxy S 4 Mini Original Android Development] jimger:
Don't have the same problem to my i9195 European device...
[Galaxy S 4 Mini Original Android Development] Loulou-13:
;)

This last 01/09/2015 snapshot (if i remember the date of release ,if it's true...) have "all" security fixes ! This rom is totaly safe... :good:
[Galaxy S 4 Mini Original Android Development] didierk:
But you've read about stagefright 2.0? I'll see if there are already fixes in the sources and will try to build a new unofficial nightly or just the fix tomorrow.

Greetings
[Galaxy S 4 Mini Original Android Development] RuffBuster:
Stage fright 2.0? WTF?
[Galaxy S 4 Mini Original Android Development] :
https://blog.zimperium.com/zimperiu...me-new-vulnerability-processing-mp3mp4-media/
[Galaxy S 4 Mini Original Android Development] savvy1968:
[MENTION=5804713]didierk[/MENTION] did you do another build?
[Galaxy S 4 Mini Original Android Development] RuffBuster:
+1000000 for a build with the latest stage fright v2 fix.
[Galaxy S 4 Mini Original Android Development] didierk:
Found no cm patches atm nor a general fix (AOSP) and no detailled technical description on what is broken this time.

Sorry, no patch atm :(

I'll keep my eyes open and publish an update here ASAP.

Greetings
[Galaxy S 4 Mini Original Android Development] savvy1968:
Cheers
[Galaxy S 4 Mini Original Android Development] didierk:
Today I found some of the patches in the CM12.1 tree and added them locally to a fresh synced CM11 tree.

Fixes for Sonivox, Skia and libstagefright are included. I'm currently trying to build the modified version and test it.

Overview of all updates (not all concerns CM11/Android 4.4)

https://groups.google.com/forum/#!topic/android-security-updates/_Rm-lKnS2M8

Edit: The build process finished without errors, not tested on device yet. But also no PoC atm to test the build against.

If anyone is interested I can provide the build file. But be warned, without any any warranty, absolutely and totally untested!

greetings
[Galaxy S 4 Mini Original Android Development] RuffBuster:
[MENTION=5804713]didierk[/MENTION] I would definitely want to test this out!

Also what is PoC?
[Galaxy S 4 Mini Original Android Development] savvy1968:
I would like to test it too if possible.
[Galaxy S 4 Mini Original Android Development] icero:
:bien:

friend please do not forget 3g model. Thanks for your time.
[Galaxy S 4 Mini Original Android Development] didierk:
=>Proof of Concept. A piece of software which is able to exploit the bug and which could be used to test the new compiled CM against.

PS. The first build had still some issues (CVE-2015-6602), currently working on it. I'll try to implement the fix for FLAC too.

I dont know if its possible to compile for the 3G model, but I'll give a try.

greetings
[Galaxy S 4 Mini Original Android Development] didierk:
Success!

Will post more info & d/l later.

Greetings

Didier
[Galaxy S 4 Mini Original Android Development] savvy1968:
Nice one Didierk wrll done bud.
[Galaxy S 4 Mini Original Android Development] didierk:
The latest build finished without errors this night. Installed it to my device, boots up ok and the Stagefright Detector does not complain anything.

In addition to the CVE's tested by the Detector App, the following bugs should be resolved:

Remote Code Execution Vulnerability in libFLAC	CVE-2014-9082

Remote Code Execution Vulnerability in Skia	CVE-2015-3877

Remote Code Execution Vulnerabilities in Sonivox	CVE-2015-3874

Elevation of Privilege Vulnerability in KeyStore	CVE-2015-3863

Patches for reading ID3 Tags	CVE-2015-6603

Various other fixes, dont know the corresponding CVEs

Download 1: https://www.androidfilehost.com/?fid=24052804347836551

Download 2 (mirror): http://www.imagenetz.de/faf551523/cm-11-20151011-UNOFFICIAL-serranoltexx.zip.html

md5sum: 101113572bb9ab557d7a38267a1bd487

sha1sum: 8a5c1b2a976c4bcd6b6fdcfb1010517eb8b8977d

I'm currently building from the same source tree for the serrano3gxx, build is in process.

I'll add d/l links here as soon as its finished.

Edit: The build for serrano3gxx has finished!

Download 1: https://www.androidfilehost.com/?fid=24052804347836530

Download 2 (mirror): todo

md5sum: da68022667cf6ec9355566fb1d39fc77

sha1sum: a8bd7961fe61f124f9a904e2785eb8c362f4a7f7

Note: Even if the name is different (cm-11-20151011-UNOFFICIAL vs. cm-11-20151012-UNOFFICIAL), the sources are the same.

The 3g build is absolutely untested, but should work. Please give me some feedback if everything is fine, I would add it here as an information for others.

greetings

Didier
[Galaxy S 4 Mini Original Android Development] savvy1968:
Cheers Didierk just dloaing now.
[Galaxy S 4 Mini Original Android Development] icero:
[MENTION=224688]didier[/MENTION] both links make model error downloading 3g :(
[Galaxy S 4 Mini Original Android Development] didierk:
Hi

Moved the files to androidfilehost and updated the links, sorry. It seems that the mega d/l was broken.

Greetings
[Galaxy S 4 Mini Original Android Development] savvy1968:
samsung released a new update http://live.samsung-updates.com/index.php?device=GT-I9195
[Galaxy S 4 Mini Original Android Development] RuffBuster:
But it's only stage fright v1 isn't it? No v2?
[Galaxy S 4 Mini Original Android Development] savvy1968:
hopefully both the release is only 4 days old so should be for both.
[Galaxy S 4 Mini Original Android Development] RuffBuster:
I doubt it as the build dates are from back in August and want till late September when v2 was discovered. These stock roms always take an age to release after they were built.
[Galaxy S 4 Mini Original Android Development] savvy1968:
well ive put it in incase anyone wants to have a look.
[Galaxy S 4 Mini Original Android Development] RuffBuster:
Is anyone who is using Didierks new Stage Fright v2 build suffering any problems with their calls? I'm now getting the same issue as I had with Lollipop CM builds where I lose microphone and ear speaker when receiving or making a call. Afterwards things that use the microphone like Google search won't function. And if I keep trying the dialer eventually it will crash. After a reboot or even pulling the battery things were still broken. I had to go back to stock where everything works again because I need my phone. Going to try again, but didn't suffer this with earlier builds of CM11 which makes me wonder if any other commits apart from security fixes were put in there to cause this?
[Galaxy S 4 Mini Original Android Development] k2wl:
do you have patches for cm11??? i will build for i9192 if you have patches:)
[Galaxy S 4 Mini Original Android Development] savvy1968:
didierk are you using this rom as your daily driver?
[Galaxy S 4 Mini Original Android Development] savvy1968:
I have installed this Rom and had no problems but i did a clean install so that might be the problem for others.

Thanks Didierk its working fine bud.
[Galaxy S 4 Mini Original Android Development] icero:
I'm using DIDIERK building upon publication and no problem. Clean install anyway. I had forgotten to thank :)
[Galaxy S 4 Mini Original Android Development] savvy1968:
Can anyone reccomend a good kernel i can use with this Rom?
[Galaxy S 4 Mini Original Android Development] RuffBuster:
Did you guys ever suffer call problems on Lollipop? I did. I'm now thinking I either have a slightly different hardware revision or faulty hardware. Though stock and older CM11 builds worked without issues, the new CM11 build and EVERY 5.1.1 Lollipop build causes my microphone and earpiece to mute and crash out the dialer eventually.

I'm going to give it one more go tonight with CM11 Didierk build, fingers crossed.

What modems do you guys use?

Cheers.
[Galaxy S 4 Mini Original Android Development] savvy1968:
i never had any call problems with any rom ive used.
[Galaxy S 4 Mini Original Android Development] RuffBuster:
Was your phone carrier locked? Or factory unlocked version? Do you know where your phone was made?

---------- Post added at 03:29 PM ---------- Previous post was at 03:24 PM ----------

I'm back on this ROM again, been making and receiving calls without problem so far. This time I used CWM instead of TWRP. A different set of GAPPS and changed my baseband. Fingers crossed, but I'm happy again. Don't think I'll ever be able to use Lollipop on this phone because of some freaky issue with my phone, so this is as good as it gets till I finally decide on my new device. Saying that it's still a very nice experience.
[Galaxy S 4 Mini Original Android Development] savvy1968:
Yes my phone was locked to Orange

i dont have problems with lp itself i have problems when i use Xposed framework with lp,infact i think its the mod XinternalSD that is the problem together with lp because it will work for awhile ...maybe 2-3 days then ill start getting fc`s on things im not even using for no reason then they get worse until i think im going mad so the only stable Rom i can be sure of is This one..Well the Didierk version now.
[Galaxy S 4 Mini Original Android Development] didierk:
Hey

Did today a repo Diff (see attachment) That are the changes which are compiled into my nighty from Oct-11.

But there are again new patches to do, see:

https://groups.google.com/forum/#!topic/android-security-updates/GwZn7sixask

I'll see what I can do.

PS. Is anyone familiar with the CyanogenMod / Github and could help me to get the patches into the official cm11 tree?

greetings