yashsingh1/xdaforums huggingface dataset:
[HTC One S] edmun:
[Q] "Three" / "3" UK One S (Ville, S4) - HBOOT 2.13 - Looking for answers

Guys. Basically I am looking for many answers

This is what I had coule of days ago and I was trying to find the correct RUU for my Htc One S (S4) / aka Ville.

Today I have ended with:

And just to clarify and make a small summary.

I don't know what is mine version-main.

H-Boot is the 2.13 version

Baseband is 1.11.50.05.28

I was able to unlock the bootloader with unlock.code

I was able to install TWRM Recovery (currently I have v 2.6.0.0.)

I was able to install su (superuser) priviliges

I don't know exactly how - but rumrunner has made the job (after 2 days of a fight with it) and I have S-OFF

And also - I was able to use revona to remove TAMPERED info (thank you for that)

Yesterday I had CID: H3G__001 (H3G_01)

I was able to change the CID to 11111111 with fastboot as I have found on xda (yupi!).

And ok.. now let's slow down.

I am almost 30 years old, I have degree in IT but I am not a big a phone geek (ok.. maybe a little when I was flashing Samsung i-780 with Windows Mobile 6.5).

To understand what people are talking about in threads regarding One S - I had to spend a lot of time, reading, reading and reading.

So please - do not use so many shortcuts or slang words in replies - I will get lost really easily.

I have now couple of questions and please correct me if I am wrong.

I should be able to install any RUU I want, because I have S-OFF and CID 11111111?

(sorry for such a question but wherever I will check with question: which RUU I can use to recover my phone from a disaster - I am getting some different misconfusing answers)

If I would like to update HBOOT - what precautions I should take and should I update the HBOOT?

I believe that updating HBOOT to at least 2.15 will provide me ability to install Android 4.4.1? (currently I am on Android 4.3.1 CyanogenMod 10.2.0-ville) - is that correct?

And final thing - I have read a lot removing this bloody red information from the booting screen saying:

This build is for development purposes only do not distribute outside of htc

But I am lost. I have a list of files which can be used to remove it - but none of them is matching my model ID (all files are for modelid: 0P3P51000 when I do have PJ4010000)

Is this relevant?

I am hoping to hear from you guys!

If there will be a chance that I can help anyway (because of my different phone details - I am happy to help)
[General Questions and Answers] Lilium180:
My custom boot animation is not working and after reading about every post I could find, using every file format I could reason being relevant, and comparing my animation to known working animations.... I simply am out of ideas with trying to figure out what is wrong with my animation. I am, for reference, on a Nexus 5 device that is rooted (and confirmed to work with other pre-made boot animations outside of stock).

Here is my desc.txt file:

1080 1920 8
p 0 0 part0

I'm using 8 jpeg image files (PNG was not working either) running at 720x1280 (1080x1920 did not work either) with 72dpi and 24 bit depth. Each file is 28.9KB a piece and titled f0000.jpg, f0001.jpg... etc. all within a part0 folder and then zipped with the desc.txt using store as the format (and of course named bootanimation.zip). If there is any more data needed to help solve this just ask.
[General Questions and Answers] Lilium180:
I seem to have forgotten to upload the actual bootanimation... should be here now.
[Galaxy Ace II Q&A, Help & Troubleshooting] Mr.Free:
Hi everyone.

Whenever I try to flash any rom, using any method (CWM, odin), my ACE II boots the old rom!!

.

I've tried all formatting methods/wipe data/factory reset/deleting partitions using parted....

STILL booting the old rom including all old files!!

.

Do you remember when you activate "Deep Freeze" on your PC? whatever you do, whatever you add or delete.... when you reboot everything is restored as it was before.

.

Don't know what to do...

Any one faced or heared about something like that ever?!

Please help.........

.

.

ACE II

Cyanogenmod 11 20140807-UNOFFICIAL-codina

4.4.4

CWM 6.0.5.0
[Galaxy Ace II Q&A, Help & Troubleshooting] Mr.Free:
NO ONE COULD HELP????!!!!

Pleeeeeeeeeeease
[Galaxy Ace II Q&A, Help & Troubleshooting] fluffi444:
II If not yet tried - Try this (flash 3Parted FW)

http://xdaforums.com/showpost.php?p=53921158&postcount=8

This bring you back to GB... Flash then JB again.... An CM (if you like)

Before this go to CWM Recovery - mounts and storage - format SYSTEM CACHE DATA

UNMOUNT the partitions before this (must listed as "mount /system" etc)

Then go DIRECTLY in Download Mode by pressing the 3 keys (do not try to reboot) and flash above mention FW...

BUT: I have no big hope because u already tried to format with parted...
[ONE Q&A, Help & Troubleshooting] badjoras:
Hey guys, i'd like to know how to get google now back on swipe right from homescreen, since it's gone after the update to the latest firmware.

thanks.
[ONE Q&A, Help & Troubleshooting] laminaat:
Go to your home screen, tap the menu button, tap the little up arrow, tap search screen. Google Now should be back. You can also get there by long pressing the home button or tapping the searchbar if you have it enabled.
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Bash 4.3.46 for Android

Safe from Shellshock
​

All right guys im just going to keep this real nice and simple. Purpose of thread:

I compiled this binary from source and patched it get safe from

ShellShock

bug. It's compiled using arm-linux-gnueabihf toolchain from Linaro (CFLAGS = "-g -Ofast -static -pipe")
​

[*]You Should Now Have Bash

[*]To run it just type in termial "bash" or "bash --login" if you want to load /etc/profile
​

Download Link

Click The Text To Download

Flashable ZIP (thanks to Primokorn)

Flashable ZIP md5sum

Shellshock Test (thanks to ronaldteune)

busybox mount -o remount,rw /
busybox ln -s /system/xbin /bin
# download from browser https://shellshocker.net/shellshock_test.sh and place it in /data
busybox chmod 777 /data/shellshock_test.sh
/data/shellshock_test.sh
rm -f /data/shellshock_test.sh
busybox rm /bin
busybox mount -o remount,ro /

Thanks For Reading :good:

P.S.#1 Bash binary always be updated

P.S.#2 to mount system rw run from terminal

mount -o remount,rw /system

P.S.#3 if you don't have root put it in /data/local/bin and add it to your PATH
[Android Software/Hacking General [Developers Only]] Joshmccullough:
I'm trying to mount my /system using the following commands in Terminal Emulator:

su

mount -rw /system

When I try and type the chmod line above, I keep getting the message:

Usage: mount [-r] [-w] [-o options] [-t type] device directory

What am I doing wrong to mount the /system file in order to perform the chmod command? I've also used ~/system, same result.....it's probably something super simple, but I'm flummoxed. Any assist would be appreciated, thanks!
[Android Software/Hacking General [Developers Only]] 3lo0sh:
The currect syntax is

mount -o remount,rw /system

?
[Android Software/Hacking General [Developers Only]] hp420:
It never even occurred to me that android is vulnerable!! I hope Google patches this in AOSP Android L!!
[Android Software/Hacking General [Developers Only]] abidifethi:
I have in /system/xbin an old bash file ( coming with the ROM), I must overwrite it or that's enough?
[Android Software/Hacking General [Developers Only]] nadejo:
i hope the cm team will include this
[Android Software/Hacking General [Developers Only]] abidifethi:
I'm running CM 11 M11 and I have the bash file but it's different from this one in size.
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Android will never be vulnerable (unless installed unpatched bash)
[Android Software/Hacking General [Developers Only]] 3lo0sh:
If the original bash is patched (no need) just copy it as bash-arm

If it's not patched (overwrite it)
[Android Software/Hacking General [Developers Only]] 3lo0sh:
I don't think they will include it

I think they will just patch theirs
[Android Software/Hacking General [Developers Only]] SVR:
[MENTION=5869762]3lo0sh[/MENTION] Getting an error like this 'unable to chmod 777 /system/xbin/bash: Read-only file system. Where i am wrong?

EDIT:- I'm sorry for that. After typing this 'mount -o remount,rw /system' command in terminal I am not getting the above error but when i issue bash command this error returns 'bash: precmd: command not found. Herewith attaching screenshot
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Is it bigger ?
[Android Software/Hacking General [Developers Only]] 3lo0sh:
dude did you read the OP

you must mount your system rw

just run from terminal

"mount -o remount,rw /system"
[Android Software/Hacking General [Developers Only]] abidifethi:
no t's smaller (about 417kb)
[Android Software/Hacking General [Developers Only]] 3lo0sh:
It's even include bash_history ??

Sadly it isn't import bash.bashrc by default ?
[Android Software/Hacking General [Developers Only]] abidifethi:
So what's your advise?I overwrite it and "Maoulaha RABBI"
[Android Software/Hacking General [Developers Only]] SVR:
I did that pls see the post again! I have attached screenshot also.
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Overwrite it

It's smaller,lastest and patched
[Android Software/Hacking General [Developers Only]] 3lo0sh:
I think it's will not work in adb shell ? I am not developer so i think you should wait untel i search for patch to make it work ?
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Pls se the picture

Add this function to your /etc/profile and do "bash --login"
[Android Software/Hacking General [Developers Only]] exodius48:
Flashable ZIP would be nice. :)
[Android Software/Hacking General [Developers Only]] 3lo0sh:
I am just lazy ??
[Android Software/Hacking General [Developers Only]] abidifethi:
Ok done thanks.
[Android Software/Hacking General [Developers Only]] Jb boin:
As i said on the XDA News page, BASH isnt installed by default on Android, please check if you already have it before putting the upgraded version :
[Android Software/Hacking General [Developers Only]] 3lo0sh:
I told to him ?
[Android Software/Hacking General [Developers Only]] Joshmccullough:
That did it, thanks! And if 'P.S. #2' with the syntax was there before I asked, my apologies for not looking more closely :)
[Android Software/Hacking General [Developers Only]] mirabilos:
Just remember that Android does NOT use GNU bash as shell.

Rather, it normally ships with mksh, which was never vulnerable to all those issues.
[Android Software/Hacking General [Developers Only]] 3lo0sh:
No problem :)
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Cyanogenmod is vulnerable :p

and any other rom based on it
[Android Software/Hacking General [Developers Only]] Primokorn:
Here you go: https://www.dropbox.com/s/zbed1om7hgb5iqb/Bash-signed.zip?dl=0
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Hi Bro,

Thanks for making flashable zip ( i will include it on the OP )
[Android Software/Hacking General [Developers Only]] Primokorn:
You're welcome! Of course I mention you in the script ;)
[Android Software/Hacking General [Developers Only]] 3lo0sh:
No need to metion me (it's your script) :cowboy:
[Android Software/Hacking General [Developers Only]] Ryuinferno:
CyanogenMod is already patched against Shellshock:

https://github.com/CyanogenMod/android_external_bash/commit/1392e41109f3dbae276726ae0af1f15c87829df5

And also included an extra patch which fixes another bug which was undercovered after Shellshock:

https://github.com/CyanogenMod/android_external_bash/commit/58b59146c7cfd39b08f13fe829c7a269c61fe7f4

Unless you are using older versions of CM, you are already safe from this bug...

Just some note on your source code, you should not really overwrite the old commit history. Even if you started off with a clean base, the clean base is your "initial commit". The patch applied should be made as a second commit, that way people can actually see what has changed...
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Thanks Ryuinferno,

Today, I tested CM11 M11 on my i9100G and it's already patched as you said

But after i tested old nightlies on my Nexus 5 it was unpacthed :eek: ex.(Cyanogenmod 11S for hammerhead is unpatched)

Even If it's patched My Bash is more safe than CM's and it has extra features as bash_history and it's smaller than CM's

it include lastest bash (4.3) while in CM it's includes (4.1) which may also include undiscoverd securty bugs (Shellshock was in bash from 1992 :cool: ) so keeping lastest is the safe way

And I am git noob -__- but i will include patches in git history ex. "applied patch 31 ..,patch 32...,patch 33...etc)
[Android Software/Hacking General [Developers Only]] Ryuinferno:
CM kept bash at 4.1 which means they must have their reasons...If you are really keen in helping, actually propose the patch to CM...

On a side note, CM11S is not the latest version of CM btw (and it was meant for 1+1), and as stated by the term "recent", you don't have to reassure that something is not recent by testing on an old version
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Mmmmm,I can't help CM because I am not a Developer :silly: and patches is already on GNU ftp -_- why they not just apply it ..

And about Cyangenmod 11S . It's base on CM11 M10 which it's vulnerable, OnePlus One realy need my bash :eek:
[Android Software/Hacking General [Developers Only]] ronaldteune:
Ha... I just did it myself, seeing this a little too late.

One addition: I'd recommend chmod 755 over 777.

Could it be that this is still vulnerable to the taviso bug?
[Android Software/Hacking General [Developers Only]] 3lo0sh:
No It isn't vulnerable

About chmod (i will update bash randomly) so it's anoyying to do chmod after every update ?
[Android Software/Hacking General [Developers Only]] hp420:
My mistake! I guess this is why I didn't think android was vulnerable...it usually isn't lol
[Android Software/Hacking General [Developers Only]] steakhutzeee:
Can i use this on my Xperia Mini with CM 9.1 and MesaHibrydKerbel 4.4? :confused:
[Android Software/Hacking General [Developers Only]] Droidimlookingfor:
getting error

I am rooted and am using terminal emulator. When I type in the "mount -o remount,rw /system" command, I get the response "mount: Operation not permitted". Can anyone help me out?
[Android Software/Hacking General [Developers Only]] philippe734:
How to check the vulnerability in terminal ? I wish a similar command as below on android to test this bug :

env X="() { :;} ; echo you might be vulnerable" /bin/bash -c "echo hello"
[Android Software/Hacking General [Developers Only]] saintgein:
My device is still vulnerable after flashing this bash, how come?
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Should work in any device ?
[Android Software/Hacking General [Developers Only]] 3lo0sh:
You must type "su" to get root access
[Android Software/Hacking General [Developers Only]] 3lo0sh:
All commands to check vulnerability is work
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Can you give me mpre informetion ?
[Android Software/Hacking General [Developers Only]] saintgein:
I flashed the zip from the first post, then i tested with: https://play.google.com/store/apps/details?id=in.indiandragon.shellshock.shellshockvulnerabilityscan

And it says it's vulnerable.
[Android Software/Hacking General [Developers Only]] Coodarah:
Use this script

https://github.com/hannob/bashcheck/blob/master/bashcheck

(Just copy and paste the code into a text file and put it on your phone - i. e. in /data/local/bashcheck or somewhere else)

from this site

https://github.com/hannob/bashcheck

You must change the first line in the script

#!/bin/bash

to the location where you put the patched bash on your phone. - This should be the original location (and file name) of the old bash . - Example:

if You put your new bash into /system/xbin/ you have to changed the line to

#!/system/xbin/bash

To run the script bashcheck open a shell

adb shell

(or a Terminal app on the phone)

and run it from there with

. /data/local/bashcheck

(Type a space between the leading dot "." and the slash "/")
[Android Software/Hacking General [Developers Only]] 3lo0sh:
I don't think android apps can help you

But Coodarch script can
[Android Software/Hacking General [Developers Only]] nadejo:
can some one please explain what this file does?
[Android Software/Hacking General [Developers Only]] saintgein:
Are there no apps then that work testing this bug?

And btw, has cm already patched this bug? I heard cm11s is already patched, but i also read this report:

https://jira.cyanogenmod.org/browse/CYAN-5594
[Android Software/Hacking General [Developers Only]] Coodarah:
If you mean the bashcheck - it's checking your bash on your phone for the known vulnerabilities and give you the results in (terminal) shell (See screenshot for an example).

Write one on your own and then share it?

For the spoon-fed here around (you aren't meant): Gaining security fast isn't always comfortable.

BTW: using a shell == using an app (= application = program = executable)
[Android Software/Hacking General [Developers Only]] steakhutzeee:
Can i check if my phone is vulnerable?
[Android Software/Hacking General [Developers Only]] Thela7:
Hmm, this is the first binary that I use that requires " --login" to make it read profile and company.

Is there any reason for this? the CM version doesn't require that.

Thank you
[Android Software/Hacking General [Developers Only]] 3lo0sh:
If you have file /system/xbin/bash

You should download my file and overwrite into /system/xbin/bash

Explain.

Pleaze read this wiki page

http://en.m.wikipedia.org/wiki/Shellshock_(software_bug)

My file protect you from it
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Script can help not apps

Apps can be outdated but scripts always be updated

CM 11S is not already patched but CM11 M11 patched .
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Read Coodarch post
[Android Software/Hacking General [Developers Only]] 3lo0sh:
I don't know why but it's cannot read bashrc by default

So I give --login to read /etc/profile then you can there source /etc/bash.bashrc
[Android Software/Hacking General [Developers Only]] steakhutzeee:
This is for check if i've this vulnerability?
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Yes ?
[Android Software/Hacking General [Developers Only]] :
hi,

just two quick questions, what areas of the source did you change/patch ?

compiling this for x86 [gt-p52xx] are there any special flags i need to use [other than -m32] ?

thanks.

m

ps that smiley is kinda creepy looking :eek:

looks like pac-man with a hangover :silly:
[Android Software/Hacking General [Developers Only]] 3lo0sh:
I just applied patch from GNU Ftp

by "patch -p0 < [my_patch]"

about X86 you need to add -static to your CFLAGS

About smile -_-
[Android Software/Hacking General [Developers Only]] ronaldteune:
Hmm, weird, then I perhaps made a mistake testing.

About chmod: 755 is enough to update bash as a root user. 777 means 'writable to everyone' (that includes non-root users). That's why I'd recommend 755. ;)

@ everyone: for an easy way to test with nice colored output, I found this one: https://shellshocker.net/

The wget method will probably work on most phones, and is described just below the curl method. Otherwise you can just download the file and execute it in a shell.

Seems it hasn't been noticed here, yet.
[Android Software/Hacking General [Developers Only]] 3lo0sh:
I will include it in my post :)
[Android Software/Hacking General [Developers Only]] Primokorn:
[MENTION=5869762]3lo0sh[/MENTION] here is a new flashable zip with permissions set to 755 instead of 777.

https://www.dropbox.com/s/zbed1om7hgb5iqb/Bash-signed.zip?dl=0
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Thanks to your work :)

How can I thank you ? :highfive:

I wish i have credit card to donate to you

But In Iraq we don't have :(
[Android Software/Hacking General [Developers Only]] Primokorn:
Hitting the thanks button is enough ;)
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Fixed github commit history
[Android Software/Hacking General [Developers Only]] rhcohen:
Hello, I downloaded the patch 1 1/2 days ago and put in /system/xbin. (This version has same checksum as the currently posted version, so I assume it hasn't changed.) I tried the individual tests on shellshocker.net, and found that my phone still fails one of the tests (#4). If it matters, the phone is a Motorola Atrix 4g running a custom version of CM11 dated Oct 5, from http://xdaforums.com/atrix-4g/development/rom-cm-11-android-4-4-4-atrix-bigpart-t2847281 .
[Android Software/Hacking General [Developers Only]] 3lo0sh:
How does that happend?

i did a test and get "not vulnerable" for all tests

Do you have file /system/bin/bash in your system ? if yes remove it
[Android Software/Hacking General [Developers Only]] rhcohen:
No I do not have /system/bin/bash. And as the pasted record below shows, the phone is picking up the bash from /system/xbin/bash and it is the one from this thread. (I'm executing this via adb shell, if that matters).

The ls -l below shows that the bash was downloaded Oct 10 late in the day (U.S. west coast time). Am I correct (based on looking at the md5 sum) that there were no changes from then to today, or should I try again with a freshly downloaded version?

shell@olympus:/ $ which bash

/system/xbin/bash

shell@olympus:/ $ bash --version

GNU bash, version 4.3.30(1)-release (arm-none-linux-gnueabi)

Copyright (C) 2013 Free Software Foundation, Inc.

License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>

This is free software; you are free to change and redistribute it.

There is NO WARRANTY, to the extent permitted by law.

shell@olympus:/ $ ls -l /system/xbin/bash

-rwxr-xr-x root root 3562644 2014-10-10 22:06 bash

shell@olympus:/ $ bash -c 'true <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF <<EOF' ||

> echo "CVE-2014-7186 vulnerable, redir_stack"

bash: warning: here-document at line 0 delimited by end-of-file (wanted `EOF')

bash: warning: here-document at line 0 delimited by end-of-file (wanted `EOF')

bash: warning: here-document at line 0 delimited by end-of-file (wanted `EOF')

bash: warning: here-document at line 0 delimited by end-of-file (wanted `EOF')

bash: warning: here-document at line 0 delimited by end-of-file (wanted `EOF')

bash: warning: here-document at line 0 delimited by end-of-file (wanted `EOF')

bash: warning: here-document at line 0 delimited by end-of-file (wanted `EOF')

bash: warning: here-document at line 0 delimited by end-of-file (wanted `EOF')

bash: warning: here-document at line 0 delimited by end-of-file (wanted `EOF')

bash: warning: here-document at line 0 delimited by end-of-file (wanted `EOF')

bash: warning: here-document at line 0 delimited by end-of-file (wanted `EOF')

bash: warning: here-document at line 0 delimited by end-of-file (wanted `EOF')

bash: warning: here-document at line 0 delimited by end-of-file (wanted `EOF')

bash: warning: here-document at line 0 delimited by end-of-file (wanted `EOF')

bash: cannot create temp file for here-document: Read-only file system

CVE-2014-7186 vulnerable, redir_stack
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Redownload the flashable zip and test it

Or just remove bash if you not use it

?