yashsingh1/xdaforums huggingface dataset:
[General Questions and Answers] YuriRM:
Thank you very much! I know that KingoRoot is using now the DirtyCow exploit. It means that it can be rooted by other DirtyCow tools.

Dirty COW, an exploit in the Linux kernel, is now being abused on Android by ZNIU.

https://www.xda-developers.com/dirty-cow-exploit-linux-android-zniu/

You can remove KingoRoot and replace it with SuperSU. There are instructions for that at the XDA forum.

Replace KingoRoot with SuperSU manually without Terminal (2017)

https://xdaforums.com/android/software-hacking/replace-kingoroot-supersu-manually-t3573361

EDIT - However, some people had trouble when removing KingoRoot. It stopped working and they lost root access (have a look at the link provided above. Supersume seems to work. Read carefully the comments). Therefore, do not try to remove KingoRoot as yet. Let's plan ahead to do a full readback backup first and to build the recovery file for Toshiba Excite Pro.

I will have to search on this subject to find the right tools for the Nvidia Tegra 4 cpu.

Give us the full reference of your device, please!

Toshiba AT10LE-A-10D is [MENTION=8590760]Al'++[/MENTION] device.

Toshiba AT10LE-A-108 springs to my mind.

Toshiba AT10LE-A-109 /32GB is mine.
[General Questions and Answers] markop741:
Thank you for it. I'll be waiting for.

My Toshiba AT10LE-A-108/16GB

Android 4.3

compilation number: JSS15Q. 001120220.05

kernel version:

3.4.57-gc710e6f

android-toshiba@tesibuild7

#SMP PREEMPT Mon Dec 2 17:16:19 IST 2013

If you need more information then write
[General Questions and Answers] YuriRM:
We should ask the help of [MENTION=4246643]Tomsgt[/MENTION]. He is a developer for the Nvidia Tegra 4 Note 7. Tomsgt has developed the Super Tool 3.1

This script has 8 options

1. adb and fastboot driver install

2. unlock bootloader

3. Restore / unbrick device

4. Flash stock android recovery

5. install ClockWorkMod recovery Bat version

6. Install TeamWin / TWRP recovery

7. Root access in recovery with supersu

[Super Tool][Utility] Nvidia Tegra Note 7 Kitkat Unlock BL, Restore, Recovery, & Root by Tomsgt

https://xdaforums.com/showthread.php?t=2627654

Root JunkySDL - Tegra Note 7 firmware + Super Tool

http://rootjunkysdl.com/files/?dir=Tegra Note 7

Tegra 4 - Model number T114 devices

https://en.m.wikipedia.org/wiki/Tegra

EDIT - An invitation to Tomsgt has already been posted at the Super Tool forum, on 10th October 2017.

https://xdaforums.com/showthread.php?t=2583677&page=3
[General Questions and Answers] YuriRM:
Dear [MENTION=4246643]Tomsgt[/MENTION] , victory! The sealime protected Toshiba Excite Pro (Toshiba AT10LE-A-108) has been rooted by a DirtyCow enabled KingoRoot. It has long been a challenge but it was finally conquered!

Do you give us permission to fork and adapt your Super Tool 3.1? You are an expert on Nvidia Tegra 4 tablets. Can you help and lead us in this project, please?

KingoRoot is not desirable. Is it possible to use another DirtyCow tool in the Super Tool script? We would love to get Android 4.4 or 5.1 as well. Is it feasible? This tablet is still Android 4.3.

More details on [MENTION=8583469]markop741[/MENTION]'s feat at

https://xdaforums.com/showthread.php?t=2583677&page=3

Regards
[General Questions and Answers] Rafostar:
Rooting with KingoRoot is successful, but su binary is lost after reboot. Can something be done about that?

Also /system is still read-only so root is pretty much useless for now. Is there any way to make it rw?
[General Questions and Answers] YuriRM:
The official LineageOS 13.0 for Nvidia Shield Portable (code name Roth) could be ported to Toshiba Excite Pro. It has the same processor Nvidia Tegra 4 (T114) and 2GB RAM.

https://wiki.lineageos.org/devices/roth

Root Lost after rebooting using Kingo Android Root

https://www.kingoapp.com/troubleshoot/root-lost-after-rebooting-using-kingo-android-root.htm

Setting appropriate permissions on SU binary

https://android.stackexchange.com/questions/55714/setting-appropriate-permissions-on-su-binary

Does it help?

[MENTION=5922272]Rafostar[/MENTION] give us the full reference of your device. There are three variants of Toshiba Excite Pro. There are also 16GB and 32GB storage options.

Device Info HW by Andrey Efremov is a very good app for our project. Make use of it.

[MENTION=8583469]markop741[/MENTION] do you have the same problem as Rafostar?

What does the Root Checker app find?

KingoRoot may enable a root in the Shell.
[General Questions and Answers] markop741:
Yes, i have the same problem. I do not have a permanent root, when I turn on the tablet I have to use the Kingo Root program to do root. Rebooting the tablet and I have to install again the root. I have no permanent root only time. It would be great if you could erase all the tablet software, including the boatloader, and upload the new OS without any add-ons.
[General Questions and Answers] Rafostar:
[MENTION=7147494]YuriRM[/MENTION] Thanks for reply.

My tablet model is AT10LE-A-108, board tostab12BA (16GB EU ver).

Root is working fine until reboot. I am aware the issue is locked bootloader, but I don't know how to unlock it.

/system partition is read-only even when accessing with root permissions (write protected NAND?)
[General Questions and Answers] YuriRM:
I will ask for advice to [MENTION=5312578]mrmazak[/MENTION] on how to proceed from the temporary root on Toshiba Excite Pro achieved by a Dirty Cow enabled KingoRoot.

MrMazak is the co-developer of a successful method to root the BLU R1 smartphone using Dirty Cow.

BLU R1 v6.6 DirtyCowed F.U.

AMAZON ROOT and UNLOCK

https://xdaforums.com/r1-hd/how-to/blu-r1-hd-v6-6-dirtycowed-f-amazon-root-t3490882

EDIT- Are we able to build a recovery.img for Toshiba Excite Pro during the temporary root? It will be needed when the bootloader is unlocked.

EDIT- A screenshot of partitions with block numbers is needed too. The Factory Reset Protection must be found. Device Info HW by Andrey Efremov is the ideal app for that. Can you do it, please [MENTION=5922272]Rafostar[/MENTION] and [MENTION=8583469]markop741[/MENTION] ?
[General Questions and Answers] markop741:
I installed Device Info but I have no idea where I find FRP. [MENTION=7147494]YuriRM[/MENTION] could me tell where I have to looking for?- SoC, system, memory, ect? I'll send You print screen
[General Questions and Answers] Rafostar:
Thanks for help [MENTION=7147494]YuriRM[/MENTION]

I don't have much time recently, but I will try to post partition table later today and try dumping recovery partition.
[General Questions and Answers] YuriRM:
Go to Partitions and post here a full screenshot of it, please. FRP is there under another name. I cannot do it because the Toshiba tablet is at my parents.

We need to get a database for Toshiba Excite Pro because the components and drivers for the three variants and two storage options may differ. Under-the-hood disparities may affect the behavior of custom ROMs.

Therefore, I request that you select Upload device information at the Info Center option in order to feed the Device Info HW database by Andrey Efremov.

EDIT - I have just found that my Takee 1 smartphone is slightly different than another one at the Device Info HW database. Mine has a Flash from Samsung I2U00A and he has a Hynix HBG4e eMMC flash drive. The power management integrated circuit (PMIC) has an additional component too, a TPS6128x converter to operate in power-save mode.

http://www.deviceinfohw.ru/devices/...form0&brand=brand0&filter=takee&submit=Search
[General Questions and Answers] Rafostar:
So, here is partitions info of this tablet:

[IMG="Partitions list"]https://image.ibb.co/err7t6/Part01.png[/IMG]

And their names:

[IMG="Partitions names"]https://image.ibb.co/hWDLD6/Part02.png[/IMG]

According to Nexus 7 development thread, these are common names on Tegra tablets:

APP -> system

CAC -> cache

LNX -> boot

MDA -> encrypted userdata

MSC -> misc

PER -> per device calibration

SOS -> recovery

UDA -> userdata

USP -> bootloader

Dumping recovery (SOS partition) was successful. :D

I'm sending it in attached file.
[General Questions and Answers] markop741:
Ok. [MENTION=7147494]YuriRM[/MENTION]. I sent the tablet specification to the Device Info HW database by Audrey Efremov.

[MENTION=5922272]Rafostar[/MENTION] how did you do it? Can you send me instructions on email? I'm not a programmer and when i enter the recovery mode (volume +, switch on) i do not know what to do next. Maybe I do not know what command to write then - doing wipa will not give me anything.

Regards
[General Questions and Answers] Rafostar:
There is no need for you to dump it again. Recovery image should be the same on all Excite Pro tablets.

I posted it here so devs can download it and modify it into custom recovery like TWRP for anyone to flash.

But we need unlocked bootloader first. :(

Anyway, here is the guide that should help you if you still want to try dumping it yourself:

https://xdaforums.com/showthread.php?t=2450045

Just after restoring root go to KingoRoot installed folder and one of the folders inside should contain adb.exe.

Open command prompt there and type "adb shell", then execute commands from guide above ;)
[General Questions and Answers] YuriRM:
Thanks a lot for all this valuable information (partitions, labels and the recovery image).

However, the screenshot of partitions at the Device Info HW app is much easier to understand. This app is built for wannabe developers like us. It will enable everybody to understand what is being discussed and give their opinion during development.

[MENTION=8583469]markop741[/MENTION] I know that you have installed the Device Info HW app. Can you post here the screenshot of partitions, please? Let's compare it with the traditional print posted by Rafostar.

Here is the data for Toshiba Excite Pro (Toshiba AT10LE-A) uploaded by markop741 using the app.

http://www.deviceinfohw.ru/devices/...rm0&brand=brand0&filter=Toshiba&submit=Search

[MENTION=5922272]Rafostar[/MENTION] can you upload yours too, please? Manufacturers do sometimes change components according to price and availability.
[General Questions and Answers] Rafostar:
No problem. Uploaded already. Doesn't seem any different.

BTW [MENTION=7147494]YuriRM[/MENTION] You sure this app shows device partitions? I don't see this option... Maybe it is in paid Pro version only?
[General Questions and Answers] YuriRM:
The standard version has 15 tabs that can be reached either by selecting the top left menu or simply by swiping your finger from right to left.

The Partitions tab is the 12th, between Project and PMIC.
[General Questions and Answers] Rafostar:
I don't see that tab :(

I checked on both app versions from xda and on latest from Play Store (enabling root in app settings doesn't increase tab count).

Screenshot in attachment.
[General Questions and Answers] markop741:
I agree with the [MENTION=5922272]Rafostar[/MENTION] the program does not show all the information. [MENTION=7147494]YuriRM[/MENTION] I send You some print screen.

---------- Post added at 11:05 PM ---------- Previous post was at 10:57 PM ----------

[MENTION=7147494]YuriRM[/MENTION] mayby You have got better version od this program. I installed it yesterday.
[General Questions and Answers] YuriRM:
You are right! The Device Info HW app is not optimized for Nvidia Tegra 4 devices. Therefore, the partitions information is not available. I will ask Andrey Efremov to add support for Tegra 4. I have been using this app on a MediaTek device (Takee 1).

Supported platforms:

full: Mediatek, Rockchip

partialy: Qualcomm, Exynos, Intel and others.

low: Some devices with android 7.0+

My Toshiba AT10LE-A-109 /32GB details have been uploaded to the Device Info HW database by Audrey Efremov. It is identical to your AT10LE-A-108 with the exception of a Flash Toshiba 032G94.

http://www.deviceinfohw.ru/devices/...rm0&brand=brand0&filter=Toshiba&submit=Search

[MENTION=8590760]Al'++[/MENTION] We need your contribution too! Can you install the app and upload the Toshiba AT10LE-A-10D details to the database, please?
[General Questions and Answers] YuriRM:
Root Checker screenshots (Congratulations, Verify root and Build info)

Root Checker screenshots (Congratulations, Verify root and Build info) provided by [MENTION=8583469]markop741[/MENTION]

Has this KingoRoot method bypassed Toshiba's infamous sealime.ko security module? Rooting with KingoRoot is successful, but su binary is lost after reboot. Can something be done about that?

Also /system is still read-only so root is pretty much useless for now. Is there any way to make it rw? Is it now possible to flash an unlocked bootloader which allows custom recovery and kernels/ramdisks (boot.img) to be used? [MENTION=4630655]pio_masaki[/MENTION] and [MENTION=5327304]AmEv[/MENTION] have achieved that goal in 2013. Read their feat!

[Root Tool] Toshiba Thrive 10.1" ICS (Android 4.0.4, Ice Cream Sandwich, Nvidia Tegra 2)

https://xdaforums.com/showthread.php?t=2341075&page=1
[General Questions and Answers] Rafostar:
Hmm... I took a look at their Thrive root script. (link)

It looks like they are using system restore function to gain temp root from "fakebackup.ab". (line 30)

I think we can skip it thanks to Kingo temp root.

Lines 37-45 are just copying files to temp dirs for later flashing.

But I am curious about line 48 - "Bypassing sealime....".

The only thing they did to achive this is to move contents of mmcblk0p6 to mmcblk0p9 partition (also note, that they used move command instead of dd ). After that they have overwritten mmcblk0p9 with new unlocked bootloader. So if I'm not mistaken they simply get rid of all contents of mmcblk0p6 partition.

Can someone find partition names of that tablet and compare it to ours (ones that i posted earlier in this thread)?

sealime.ko is holding us from gaining write access to system...
[General Questions and Answers] YuriRM:
Eureka! This is the answer to your prayers. Read to the very end and get GPS ready.

Rooting the Toshiba Thrive - Roy Keene´s Wiki

http://www.rkeene.org/projects/info/wiki/210
[General Questions and Answers] Rafostar:
No. It's not.

The GPS part is useless because it is only a weird way to gain root over adb (with the use of custom su binary).

KingoRoot already did that for us and even allowed us to gain root with an app in tablet (not only in adb shell).

The part about creating loop device and syncing it contents with system partition, even through it "might" work, only works like that:

- copy system somewhere else,

- modify it,

- resync

So the /system is still read-only. And needs repeating of modifying it with above steps every time you want to add/modify files.

Most root programs that we install are accessing and tinkering with /system as they work, so in other words they wouldn't work at all.
[General Questions and Answers] YuriRM:
Complete ICS Thrive rooting tool

Maybe this link is the same that you already analyzed. I am doing searches on a smartphone and the screen is tiny! Sorry.

Complete ICS Thrive rooting tool. Reported to be internationally working....

https://github.com/thrive-hackers/thrive-10-inch-ics-root

Got the link to the solution from here by robyn402

https://xdaforums.com/showthread.php?t=2341075&page=2

A very interesting thread on this subject

http://www.thriveforums.org/forum/t...nt/16229-wip-root-toshiba-thrive-ics-ota.html
[General Questions and Answers] YuriRM:
Another tablet with sealime.ko conquered is

Toshiba Excite 10 SE (AT300SE) root [SOLVED]

http://www.thriveforums.org/forum/t...hiba-excite-10-se-at300se-root-solved-26.html

CVE-2013-6282 proof of concept for Android

https://github.com/timwr/CVE-2013-6282
[General Questions and Answers] YuriRM:
Porting KatKiss - Nougatella to Toshiba Excite Pro (AT10LE-A)

I have made a request on our behalf to [MENTION=3951330]timduru[/MENTION] on 23-10-2017, 04:04 PM |#230 and maintained a dialogue with him until 27-10-2017, 12:51 PM |#235

We got permission for porting KatKiss - Nougatella to Toshiba Excite Pro (AT10LE-A).

Asus Transformer TF701 - Transformer TF701 Original Android Development - [ROM][N 7.1.2] [ KatKiss - Nougatella #026 ] by timduru

https://xdaforums.com/showpost.php?p=74266972&postcount=230
[General Questions and Answers] YuriRM:
[MENTION=5922272]Rafostar[/MENTION] can you analyze and comment the dialogue between pio_masaki (developer) and UserName (Thrive Lurker) on pages 24, 25 and 26, please?

Thread: Toshiba Excite 10 SE (AT300SE) root [SOLVED]

http://www.thriveforums.org/forum/t...hiba-excite-10-se-at300se-root-solved-24.html

http://www.thriveforums.org/forum/t...hiba-excite-10-se-at300se-root-solved-25.html

http://www.thriveforums.org/forum/t...hiba-excite-10-se-at300se-root-solved-26.html

On Toshiba Excite Pro (AT10LE-A) are we able to go back to Android 4.2.1 in order to profit from the unpatched sealime.ko ? Is Android 4.3 still vulnerable to seakiller, motochopper and kernelchopper ?

Has KingoRoot used this on our tablet AT10LE-A?

["... an exploit based on CVE-2013-6282 that worked out of the box:

https://github.com/timwr/CVE-2013-6282

However, I'm still blocked by sealime and can't access various files:

shell@android:/ # ls /modules/

sealime.ko

shell@android:/ # cat /modules/sealime.ko

/system/bin/sh: cat: /modules/sealime.ko: Operation not permitted "...]

EDIT - has UserName really managed to modify the sealime.ko module in his dirty C++ code? He intended to make it available on GitHub. His last publication is from 14 March 2017.
[General Questions and Answers] YuriRM:
Partitions by Aida64 and Device Info HW

Andrey Efremov, the creator of Device Info HW app has answered my request on Partitions info for Toshiba Excite Pro. The new version 4.6.0 has full support for Qualcomm and a few more processors. Maybe the Nvidia Tegra 4 is among them. The new version is not yet available on Google Play.

Find attached two screenshots of partitions by Aida64 and Device Info HW (this is an example for the Takee 1 smartphone). Which one do you prefer? Both views are needed for ROM development and tackling Sealime.ko.

EDIT - version 4.6.4 of Device Info HW is already available on Google Play. Try it on Toshiba Excite Pro (AT10LE-A), please!

https://play.google.com/store/apps/details?id=ru.andr7e.deviceinfohw
[General Questions and Answers] YuriRM:
Version 4.6.4 of Device Info HW by Andrey Efremov (ANDR7E)

I have already tested the Version 4.6.4 of Device Info HW app by Andrey Efremov (ANDR7E).

https://play.google.com/store/apps/details?id=ru.andr7e.deviceinfohw

It has some nice functionalities in line switches. The partitions info is now detected and displayed in the traditional way that [MENTION=5922272]Rafostar[/MENTION] presented to us.

Therefore, my request to [MENTION=1061510]ANDR7E[/MENTION] is to improve the Partitions info with names (like on MediaTek SOCs). A second request is the inclusion of Project information, please!

Congratulations on this fabulous app!

You can read my message here:

https://xdaforums.com/showpost.php?p=74479254&postcount=15

The reply of Andrey Efremov (ANDR7E)

https://xdaforums.com/showpost.php?p=74486098&postcount=16

Regards

EDIT - The test was done on my unrooted tablet and thus is unable to fetch partition names. Your rooted devices will perform better.
[General Questions and Answers] Rafostar:
Sorry for my recent inactivity. As I mentionet earlier I don't have much time recently because of work and various "tasks" :(

motochopper is not for us - tool for rooting and it doesn't override sealime too (we already use KingoRoot with 100% chance of working without risk of bricking).

seakiller is not designed for our newer tablet model and as mentioned in thriveforums it would require to understand the assembler code of the sealime_sb_mount() function and I'm really NOT into assembler code.

Thanks for finding android roms that shouldn't be too hard to port to our device. But in our stock 3e recovery there is no option to flash anything other than "update" that must be digitally signed otherwise it gets rejected (tried myself). So flashing even a patch to remove/modify sealime functionality is impossible afaik. We need to get rid of sealime for good some way or another, otherwise there is no point in porting roms that can't be flashed.

Toshiba doesn't host rom images (unlike other brands), so going back to older android is unlikely.

"Basically if sealime does NOT return null, the kernel proceeds." - if that is true then finding a way to edit part of memory that holds return value of sealime loading function would allow us to proceed with sealime turned off and do whatever we please. But we probably would need help as I can't handle this alone :(

I have seen that thread some time ago before and searched for his "dirty C++ code" but never found it.
[General Questions and Answers] YuriRM:
Creation of a device tree for Toshiba Excite Pro on GitHub

Thanks for your valuable opinion!

1 - My suggestion is to move forward into the creation of a device tree for Toshiba Excite Pro (AT10LE-A or tostab12BA) and push it to GitHub. Making the configuration code available on GitHub gives visibility to this device and may attract interested people that have the required experience to do the memory trick that fools sealime. It is also a necessary step for ROM development. It is only a question of time before we get rid of sealime. KatKiss-Nougatella is an AOSP based ROM. Is it wise to make two device trees for AOSP and LineageOS ?

The device configuration of three clones is on GitHub.

My parents tablet is not rooted. Therefore, the task of device tree creation belongs to you and [MENTION=8583469]markop741[/MENTION] .

https://wikidevi.com/wiki/Toshiba_AT10LE-A

http://www.deviceinfohw.ru/devices/item.php?item=5174

Device tree for ASUS Transformer Pad TF701T (macallan or K00C or taurus)

https://github.com/pershoot/android_device_asus_tf701t

http://deviceinfohw.ru/devices/item.php?item=5259

Device tree for HP SlateBook 10 x2 PC (maya)

https://github.com/Tegra4/android_device_hp_maya

http://deviceinfohw.ru/devices/item.php?item=4558

Device tree for HP Slate 21 Pro (ranger)

https://github.com/Quaesar/android_device_hp_ranger

2 - There is another topic of relevance brought to me by Andrey Efremov, creator of the Hardware Info HW app. He complained to be unable to find the source code of Nvidia Tegra 4. However, he got hold of the source code for Nvidia Tegra 3 that was uploaded by Pio Masaki on GitHub.

https://github.com/pio-masaki/kerne.../arch/arm/mach-tegra/board-tostab12AL-panel.c

Can you manage to find the source code of Nvidia Tegra 4 (Wayne, tegraT114, tostab12BA, Linux version 3.4.57-gc710e6f) and upload it to GitHub, please?

EDIT - the Source Code of Linux kernel 3.4.57 is available on the Linux Kernel Archives (https://www.kernel.org/). Unfortunately, I could not find the variant Linux version 3.4.57-gc710e6f used on Toshiba Excite Pro. Does it make a significant difference? Nonetheless, the source codes of Nvidia Tegra 4 (Wayne, tegraT114) and the board tostab12BA are nowhere to be found. I had a look inside the linux kernel 3.4.57 under arch/arm/mach-tegra/board-

Where can it be found??

EDIT - Protecting Data on Smartphones and Tablets from Memory Attacks

https://dl.acm.org/citation.cfm?id=2694380