yashsingh1/xdaforums huggingface dataset:
[Xperia Z1 Compact General] derf elot:
Hi there,

yes, I think the order should have been ROM, fix, then Xposed.

I made another build, this should fix CVE-2015-3636. Don't forget to flash the xposed fix, otherwise you might get stuck in a bootloop. I just did, but that might also be because of the script that's keeping Xposed after a new ROM flash.

Now for CVE-2015-1528, I double and triple checked, and I am at least 99.999% sure that the fix is in the build. I saw that VTS has had issues with detecting this vulnerability under KK (see this link). So even though that issue is supposed to be resolved, I have a feeling it isn't quite (at least for these new builds).

Here's the new build:

https://www.androidfilehost.com/?fid=24269982086997114
[Xperia Z1 Compact General] Nash123:
Works! Thx for the info regarding CVE-2015-1528.
[Xperia Z1 Compact General] TroyBrown:
Thanks [MENTION=4063475]derf elot[/MENTION], installed CM and the xposed patch afterwards. Works seamlessly. Top job.

No stagefright deteced too. :good:
[Xperia Z1 Compact General] derf elot:
Heya,

there's a few new fixes that got merged into the CM11 sources. These fix CVE-2015-1474, which is actually quite similar to CVE-2015-1528 from what I can tell. So maybe that's why the latter still shows up as unfixed.

There's currently a fix pending for CVE-2015-3845, and I will wait for the next build until it is merged.

I will also include a fix from [MENTION=5473651]golden-guy[/MENTION] concerning the Xposed framework install issues since the latest security fixes. So no more flashing of old files should be necessary.

Cheers
[Xperia Z1 Compact General] derf elot:
Hi,

just finished a new build. It contains fixes for the following:

CVE-2015-1474 (looks like this one indeed solves CVE-2015-1528 showing as unfixed in VTS)

CVE-2015-1536

CVE-2015-3845

Fix for Xposed not installing anymore. This means no more xposed_fix.zip should be necessary, but keep it handy just in case. (thanks to [MENTION=5473651]golden-guy[/MENTION])

You can grab the build here:

https://www.androidfilehost.com/?fid=24269982087001801

Cheers
[Xperia Z1 Compact General] Nash123:
Nice work! Thanks derf elot! Everything works as you described.
[Xperia Z1 Compact General] LupoSpeed:
Thank you derf elot!

Do you have a paypal account so that I can sponsor your work?
[Xperia Z1 Compact General] derf elot:
Hi,

yes I do and I really appreciate the offer. However, wouldn't feel comfortable accepting any donations.

Firstly, I am also doing this out of my own interest, because I am very unhappy with all the lollipop ROMs that have come out and would like to stay with CM11 as long as possible. Secondly, I feel like by accepting donations, I will have some kind of obligation to continue this work beyond the point of actually having time for it.

So thanks again. But if you have a couple of bucks to give away, please feel free to donate to a good cause on my behalf :)

Best
[Xperia Z1 Compact General] maninder singh bali:
Has anyone encountered the youtube bug. Let me elaborate

If u watch youtube for 30 to 35 min after that the youtube is unable to render video and it keeps spining the white circle and the video doesn't show up. I request the builder of this CM rom kindly do the analysis of the problem.. Thanks in advance
[Xperia Z1 Compact General] maninder singh bali:
Basic games like subway surfers lag in this rom and asphalt 8 also lags a lot. I think there is too much power saving going on under the hud so the games lag.
[Xperia Z1 Compact General] maninder singh bali:
After using this rom i have encountered the video play back bug. As i have mentioned earlier. Not only YouTube stops play videos bt u can't play any video stored on your sdcard
[Xperia Z1 Compact General] maninder singh bali:
See this
[Xperia Z1 Compact General] Nash123:
Why don't you use another video player? Bsplayer free works without a problem for me.
[Xperia Z1 Compact General] 9Lukas5:
I always use MXPlayer with custom codec for AC3 support

L

Gesendet von meinem HTC One m7
[Xperia Z1 Compact General] maninder singh bali:
I have tried to play the video in mx player also bt it stucks. The video bug is resolved for sometime after a reboot.. This bug is present in cm12.1 also
[Xperia Z1 Compact General] derf elot:
Sorry for the late reply, but my work has been keeping really busy these last 2 weeks.

I am uploading a new build containing the December security fixes. Please download this version and see if the problem is still there. If it is, please attach a logcat to your post and I'll see what I can do, but I can't promise anything :)

As for the performance issues you see, I am not seeing them here on my end. But I also don't play these intensive games. I have not changed anything from standard CM setting that could cause this. Have you tried playing around with the performance settings to see if it helps?

---------- Post added at 01:24 AM ---------- Previous post was at 12:36 AM ----------

So there's a new build containing the following:

Google December security fixes for several CVE's in mediascanner, libstagefright, bluetooth, etc.

You can grab the build here:

https://www.androidfilehost.com/?fid=24269982087014093
[Xperia Z1 Compact General] maninder singh bali:
After the reboot the hanging problem was gone and it was working flawless. I can't test your build bcase i have changed my device to a non sony device and m very happy with it. Now i have moto x play.. Its the best.
[Xperia Z1 Compact General] derf elot:
Happy new year all,

just finished a new build:

Android January 2016 security patch (see here: https://source.android.com/security/bulletin/2016-01-01.html)

Download:

https://www.androidfilehost.com/?fid=24352994023705920

Cheers
[Xperia Z1 Compact General] LupoSpeed:
Thank you again!

F-Droid did not work with the December release, at least for me.

I got a force close every time I started the app.

With this later January release it's working again!
[Xperia Z1 Compact General] derf elot:
That's great, though I can't really explain why it stopped working to begin with :p Don't use F-Droid myself, so I can't tell.

Dirty flash _should_ be fine, but make a backup first nonetheless of course. In case you use Xposed and don't have a script to make it survive flashes, you just have to install the framework again.

I use TWRP and have to use a little workaround for the "incompatible Data" error. For this I first do a backup, then wipe only the data partition, flash the ROM and restore only the data backup again. Since I always do a backup anyway, it doesn't take much longer and so I haven't really looked into what might be causing this. If you use CWM, you should have no worries.
[Xperia Z1 Compact General] derf elot:
Sorry, I possibly misunderstood you. When you say official, do you mean the latest official CM11 or an official Sony stock ROM?

If you run anything other than CM11 right now, you will most likely have to start fresh.
[Xperia Z1 Compact General] gogglebot:
Hi, firstly thanks for making this, but I today installed the latest snapshot and the issue is 1) not fixed and

2) Your fix here doesn't seem to have worked :(

Would you be able to confirm it doesn't work on the lastest snapshot release or have I done something wrong? I used Clockwordmod to install the .zip
[Xperia Z1 Compact General] 9Lukas5:
[MENTION=7211481]gogglebot[/MENTION] I think you should try the latest unofficial build you can find it just one page back instead of the latest Snapshot

L

Gesendet von meinem HTC One m7
[Xperia Z1 Compact General] gogglebot:
Hey, I'm struggling to locate the post, I'll look through my history tomorrow, but on the galaxy S3 it's reported that the fix I quoted in the previous message didn't work (didn't for me either) but someone else created a modified apk for xposed installer that contained the files that were altered in the update, so it now functions (would it then theoretically work for everyone given it's in app form?)

Yeah I'll see if I can find it again tomorrow, I've forgotten how I found it a and now I'm on mobile

(for future historians, this I my first post :))
[Xperia Z1 Compact General] 9Lukas5:
One page back, even on mobile that shouldn't be a problem

http://xdaforums.com/showthread.php?p=64646992

L

Gesendet von meinem HTC One m7
[Xperia Z1 Compact General] derf elot:
Hi there,

new build is up. Synced to CM sources, which contains the following changes:

February Google security patches

Removed WhisperPush (EOL)

Removed CMAccount (EOL)

Fix wifi scan op in Privacy Guard

You can download it here:

https://www.androidfilehost.com/?fid=24407100847293101

Cheers
[Xperia Z1 Compact General] Nash123:
Nice! Thank you!
[Xperia Z1 Compact General] derf elot:
Hi,

the latest security patches have been merged to the CM sources yesterday. I made a new build, which only contains the following really:

March Google security patches

You can grab the build here: https://www.androidfilehost.com/?fid=24457741883933062

FYI: I have been running CM12.1 myself for the last 2 weeks or so, and probably won't be going back to CM11 anymore myself. The hot reboot issue was finally fixed and using several Xposed modules I was able to get CM12.1 working more or less the way I want to (especially bringing back vibrate mode, but without having every single notification vibrate as well). Right now I am still building CM11 for mint, so I will try to continue the amami builds as long as there's demand and I still got the free resources on my machine.

Best.
[Xperia Z1 Compact General] chrisouch:
Thanks for the updated build.

On Android versions 5.0+ my phone seemingly prompts the google now voice launcher or hands-free detection whenever I plug into the audio jack. Running CM11 solves this problem so it's nice that you're providing a version with security updates. I'll keep running your updated versions as long as you still have the time and resources to maintain this build.
[Xperia Z1 Compact General] LupoSpeed:
Thanks for the build once again!

How is the stability and battery life on the CM12.1 compared with the CM11?

A few months back when I last tried 12.1 the amami was a lot less stable and I had to charge the battery about 30% more often.

That was the reason for me going back to these CM11 builds.
[Xperia Z1 Compact General] derf elot:
The things I use it for, it is quite stable. At least I haven't encountered any issues or reboots. It is true though, that the battery life is not quite as good. While I would usually come home from work and still have about 70% charge left on CM11, this has dropped to about 60% now. Still more than enough for me though.
[Xperia Z1 Compact General] derf elot:
Hi there,

just finished a new build. Besides the monthly Google security patches, I also went through recent kernel patches and applied them since the CM11 branch of the Z1C kernel is not maintained anymore. So the changes include:

April Google security patches

fix for CVE-2015-7550 (Kernel)

fix for CVE-2015-8785 (Kernel)

fix for CVE-2016-0723 (Kernel)

fix for CVE-2016-0774 (Kernel)

fix for CVE-2016-0821 (Kernel)

fix for buffer overflow in msm perf (Kernel)

You can download the build here:

https://www.androidfilehost.com/?fid=24459283995316619

If you know of any other kernel CVE's, let me know and I'll include fixes in the next build.

Seeing as there's a bunch of patches I applied manually and since I don't run CM11 anymore, I'd appreciate a quick confirmation that the ROM still runs OK.

Best
[Xperia Z1 Compact General] Nash123:
Unfortunately flashing did not work for me. But I used TWRP 2.8.7 and encrypted device, whereras I had CWM and unencrypted data partition before. I'm going to fastboot the former CWM-recovery and try again.
[Xperia Z1 Compact General] derf elot:
Flashing with TWRP is a bit annoying concerning the releasekey. Did you get the error message "Can't install this package on top of incompatible data. Please try another package or run a factory reset"?

There's two ways around that. Either edit the "updater-script" file inside the .zip in the META-INF\com\google\android folder and remove the line 21 starting with "sha1_check(read_file("/tmp/releasekey")...", then flash again.

The second way would be to do a backup, format data, flash ROM and then restore data.
[Xperia Z1 Compact General] Nash123:
Yeah exactly that one!

Edit: But as I said I am going to try installing it via CWM-recovery. I'll report back.

Edit 2: Ok it worked as I wanted it to :) Had a backup of CWM-recovery and used "fastboot boot recovery.img" so it did not replace TWRP on the device but only boot CWM just this one time. Within CWM flashing the updated ROM worked flawlessly. Now I just have to install xposed.zip from within TWRP as I need unencrypted data partition.

Thx derfelot for your support and the new updated ROM!
[Xperia Z1 Compact General] derf elot:
OK, good news that it worked for you :)

BTW, if you want to avoid having to reflash Xposed again after every update, you can unzip the attached file and put 90-xposed.sh into the /system/addon.d folder and give it the right permissions (rwxr-xr-x like the other files in there) and Xposed will survive ROM updates.

Cheers
[Xperia Z1 Compact General] Nash123:
Nice! Thx :)
[Xperia Z1 Compact General] marsa47:
I flashed the new build with TWRP with no issues at all.

Thank you for your work!
[Xperia Z1 Compact General] TroyBrown:
Works excellent as usual. Thanks for your support.
[Xperia Z1 Compact General] derf elot:
Hi guys,

new month, new update. Just finished uploading a new build. I also went on a hunt for kernel security issues and added few more fixes for those as well. Overall the build contains the following:

May Google security patches

fix for CVE-2013-4312 (Kernel)

fix for CVE-2014-7822 (Kernel)

fix for CVE-2014-7970 (Kernel)

fix for CVE-2014-7975 (Kernel)

fix for CVE-2014-8160 (Kernel)

fix for CVE-2015-5697 (Kernel)

fix for CVE-2015-7509 (Kernel)

fix for CVE-2015-7799 (Kernel)

fix for CVE-2015-8539 (Kernel)

fix for CVE-2015-8543 (Kernel)

fix for CVE-2016-2384 (Kernel)

fix for CVE-2016-2545 (Kernel)

fix for CVE-2016-2546 (Kernel)

fix for CVE-2016-2547 (Kernel)

fix for CVE-2016-2549 (Kernel)

fix for CVE-2016-2847 (Kernel)

I don't know if the kernel fixes before CVE-2015-5697 are really necessary for us on Android, but since I was working on it anyway I just included them.

You can download the new build here:

https://www.androidfilehost.com/?fid=24533103863138781

For those interested, here's a link to my github for the CM11 kernel: https://github.com/derfelot/android_kernel_sony_msm8974/tree/cm-11.0

And finally, those running CM12.1 like me might be interested to know that I am also incorporating these kernel fixes into the CM12.1 tree (which is not seeing much official love anymore either) and making my own builds. Let me know if you are interested and I can upload that as well when I have the time.

Cheers
[Xperia Z1 Compact General] LupoSpeed:
The build for May works excellent as usual.

Thank you!
[Xperia Z1 Compact General] Yokurt815:
I'd be interested in the fixes for CM12.1 :)
[Xperia Z1 Compact General] Marv42:
I'm too
[Xperia Z1 Compact General] CyanoFriend:
Hi,

thanks a lot for your new build.

Works as good as expected :)

Only one remark:

VTS shows one remaining vulnerability, the CVE-2015-6616.

Any chance to fix this?

Regards,

R.
[Xperia Z1 Compact General] derf elot:
Hi,

that is very strange. It should have been fixed back in December already.

I am wondering, if it might be a false positive in VTS (see here:https://github.com/AndroidVTS/android-vts/issues/112 ). Can you try X-Ray instead?

https://labs.duosecurity.com/xray

---------- Post added at 03:18 AM ---------- Previous post was at 03:13 AM ----------

Hi there,

working on a new build as we speak. Merged another 20 or so fixes in the kernel. Will try to upload tomorrow.

Cheers
[Xperia Z1 Compact General] CyanoFriend:
Thanks for quick response.

Tried X-Ray (with the awaitable warnings of AV-Products).

Same reports. All clear, only the mattered CVE. Any suggestions?

One more info: 2 more supplemental fixes on my system, one for fm-radio, one more for speaker loudness.

Regards,

R.
[Xperia Z1 Compact General] derf elot:
Are these fixes flashable .zip's?

Can you post a link, so I can look at them?

Edit: Is anyone else seeing this? I am fairly sure that when I was still on CM11, everything came out as OK.
[Xperia Z1 Compact General] CyanoFriend:
No prob, same fountain :)

http://xdaforums.com/showthread.php?t=2476498

http://xdaforums.com/sony-xperia-z1-compact/general/cm11-fm-radio-finally-t3127965

I hope, there is no problem with xda-dev...

Regards,

R.
[Xperia Z1 Compact General] Nash123:
I can confirm in CM11, that x-ray states CVE-2015-6616 is vulnerable.
[Xperia Z1 Compact General] CyanoFriend:
I would like to be a little from help. I tested your cm-11-20151208-UNOFFICIAL-amami.zip naked without my two additional fixes.

VTS and x-ray showed it vulnerable to the CVE-2015-6616.

Regards,

R.
[Xperia Z1 Compact General] derf elot:
Thank you for the test. Actually, it's not surprising that both show the same results, as I found out that X-Ray simply uses the same test as VTS.

There is a new version of of the Stagefright Detector app by Zimperium that was released today on the market, unfortunately they don't mention which tests were added in the new version (and there's no summary screen anymore at the end of the scan).

I have quickly checked yesterday, and the patches against this CVE do seem to be included. I will have a more thorough look when I have the time.
[Xperia Z1 Compact General] derf elot:
Hi there,

I've made a new build last week but haven't had the time to upload it yet. So this does not include any possible fixes for CVE-2015-6616 (I'll try to look into that tomorrow). Instead, I included a lot more kernel fixes and brought the CM11 kernel mostly up to date with that from CM12.1. That's a LOT of changes, so please make a backup first, in case anything goes wrong. On the security side, there's fixes for the following CVE's in the kernel:

CVE-2012-4398

CVE-2012-6657

CVE-2014-0975

CVE-2014-0976

CVE-2014-2523

CVE-2014-3181

CVE-2014-3601

CVE-2014-4171

CVE-2014-4321

CVE-2014-4324

CVE-2014-5206

CVE-2014-8173

CVE-2014-9683

CVE-2014-9715

CVE-2015-1420

CVE-2015-1465

CVE-2015-1534

CVE-2015-2041

CVE-2015-2922

CVE-2015-3339

CVE-2015-5364

CVE-2015-5366

CVE-2015-6640

CVE-2015-7515

CVE-2015-7872

CVE-2015-8019

CVE-2015-8215

CVE-2015-8575

CVE-2016-3134

CVE-2016-3135

CVE-2016-3138

CVE-2016-3156

CVE-2016-3951

CVE-2016-4569

CVE-2016-4578

arm: mach-msm: pil-msa: Fix speculative accesses on DMA memory

PRIMA wlan: Address buffer overflow due to invalid length

Plus the other updates. Please let me know if it runs OK. Overall, I have made over 100 commits past the CM11 kernel. You can download the build it here: https://www.androidfilehost.com/?fid=24533103863142324

And as always, the changes are on my github: https://github.com/derfelot/android_kernel_sony_msm8974/tree/cm-11.0

Cheers

---------- Post added at 03:50 PM ---------- Previous post was at 03:38 PM ----------

A few people were interested in a similarly updated CM12.1 You can download a build from last week here: https://www.androidfilehost.com/?fid=24533103863142325

It contains the following fixes over the nightly CM12.1 (I'm running this myself, so I know it runs fine):

CVE-2012-4398

CVE-2013-4312

CVE-2014-0975

CVE-2014-0976

CVE-2014-3181

CVE-2014-3601

CVE-2014-4171

CVE-2014-4321

CVE-2014-4324

CVE-2014-7822

CVE-2014-7970

CVE-2014-7975

CVE-2014-8160

CVE-2015-0805

CVE-2015-1805

CVE-2015-7515

CVE-2015-7550

CVE-2015-7799

CVE-2015-8543

CVE-2015-8785

CVE-2016-0723

CVE-2016-0774

CVE-2016-0821

CVE-2016-2384

CVE-2016-2545

CVE-2016-2546

CVE-2016-2547

CVE-2016-2549

CVE-2016-2847

CVE-2016-3134

CVE-2016-3135

CVE-2016-3138

CVE-2016-3156

CVE-2016-3951

CVE-2016-4569

CVE-2016-4578

arm: mach-msm: pil-msa: Fix speculative accesses on DMA memory

Changes for this are also on my github: https://github.com/derfelot/android_kernel_sony_msm8974/tree/cm-12.1
[Xperia Z1 Compact General] Nash123:
Thanks derf elot. Works like a charm, as always!
[Xperia Z1 Compact General] havesomefaith:
CM 12.1 Camera Problem

Hey guys! I couldn't find a dedicated CM12 thread so I'm just gonna put this up here.

I've recently unlocked BL, fastbooted TWRP und flashed the latest CM 12.1 nightly.

I've encountered a problem with the camera where I can't use the Google Drive Scan function. When selecting it there is a split second where I can see a camera interface, then the display turns black and the camera makes a shutting noise. The only way to get out of this black screen is to guestimate the return home button and hit it. The same problem also occurs with Microsoft Office Lens. Interestingly enough CamScanner works fine, so does the stock camera app and OpenCamera.

Did someone else run into this problem and/or knows how to fix it?

Help will be appreciated a lot!

EDIT: I just fixed it. Disabling HW overlay in developer options did the trick!
[Xperia Z1 Compact General] Tom Mix:
CM11 still alive and kicking ...

@derf elot

thank you 4 the CM11 build!

i am one of those sticking with KK because i dont see any advance

by LP or MM. may it bee the battery life or my quick-tiles or the quick unlock...

thanks i have found this topic, even by accident:cyclops:

post sciptum: where can i find the info about the difference between: twrp-3.0.2-1.img vs.twrp-3.0.2-1_cm11_test.img
[Xperia Z1 Compact General] TroyBrown:
[MENTION=4063475]derf elot[/MENTION], this is your own personal CM12.1 built?

If it's as good as the CM11 ones, I'd be tempted! :)
[Xperia Z1 Compact General] Yokurt815:
Here's the CM12.1 thread: [ROM][5.1.1_r1][UNOFFICIAL] CyanogenMod 12.1 Lollipop - Amami [LMY47V][2015/04/24]
[Xperia Z1 Compact General] groggog:
Camera quality in updated CM11?

Hi!

I've been using the official CM11 for a long time, and the camera quality has annoyed me quite a bit. I'm really happy to see that others are updating CM11! I didn't even think about security holes...!

A big question for me is - does this include the original camera firmware, or a way to install it? Or is the Camera quality improved over official CM11?
[Xperia Z1 Compact General] derf elot:
Sorry for the late reply. Life's been very busy theses days, and now there's all this football to watch, too ;) The "twrp-3.0.2-1_cm11_test.img" file was simply a test to see if decryption would work this way on cm11, too. Unfortunately, it doesn't. So if you are using encryption, I would recommend to stick with TWRP 2.8.7.0.

---------- Post added at 12:49 AM ---------- Previous post was at 12:47 AM ----------

Hi,

the camera is unchanged as compared to official CM11. I am only adding security patches. The exception being one patch to make the official Xposed work again due to some changes in CM source code.

---------- Post added at 01:05 AM ---------- Previous post was at 12:49 AM ----------

Hi guys,

new builds of both CM11 and CM12.1 - don't want to jump into the 'official' CM12.1 thread and too lazy to make a new one ;) Changes include:

Google June 2016 security patches

fix for CVE-2016-2488 (kernel)

fix for CVE-2016-4482 (kernel)

fix for CVE-2016-4805 (kernel)

bunch more fixes, including some Google kernel patches...see my github for details :)

Github links:

CM11 kernel branch: https://github.com/derfelot/android_kernel_sony_msm8974/tree/cm-11.0

CM12.1 kernel branch: https://github.com/derfelot/android_kernel_sony_msm8974/tree/cm-12.1

Download link:

CM11: https://www.androidfilehost.com/?fid=24591000424940717

CM12.1: https://www.androidfilehost.com/?fid=24591000424940718

I haven't had the chance yet to check for CVE-2015-6616 in CM11. Could somebody please test this and let me know? If it's still vulnerable, I should have some time this weekend to take a look at it.

As always, if you come across any specific CVE that you think I might have missed, let me know and I'll see what I can do.

Cheers
[Xperia Z1 Compact General] CyanoFriend:
Hi,

first thing to say: many thanks for the new build.

I installed it without any additional patches, everything seems ok.

Unfortunately VTS shows CVE-2015-6616 still to be there.

Regards

R.