yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] rhcohen:
The version I downloaded earlier today tests as having the same vulnerability (fails Exploit 4).

As I understand it BASH is not installed as part of the base CM11 installation, so some app I'm using must have added it. So probably not a great idea to simply delete it.

UPDATE: I notice when I connect with ADB I am in directory /, where indeed I do not have write priveleges (and in fact the directory is mounted only as read). This is where I ran the test I reported before. If instead I cd to a directory where I can write, shellsocker's test 4 passes. The question is, which is a meaningful test for this vulnerability? (At the very least, this can account for why my test was failing but yours was passing).
[Android Software/Hacking General [Developers Only]] 3lo0sh:
bash installed a part from cyanogenmod as /system/xbin/bash

My test passed every directory i (cd) it

So there is something with your rom (which i don't understand)

So i think you should remove it (no app can install bash)
[Android Software/Hacking General [Developers Only]] rhcohen:
I think I will remove it and see if anything else breaks.

But I would like to understand, when you say "My test passed every directory" -- do you mean by that that you run an individual test (in this case, shellshocker.com's exploit #4) in a bash shell in every directory, or that you cd to a directory then run shellshock_test.sh from shellshocker.net? And you did nothing special like changing those directories to be RW, or running as root?

I ask because ronaldteune's script (in your OP) runs the tests after mounting / as RW. If I manually do that (via adb as root), and then run the individual test #4 in / or /data, the test passes (not vulnerable). If I don't mount / as RW or don't run as root, the test fails (vulnerable). (And, if I don't run as root, the first line of ronaldteune's script, mounting / as RW, fails). So my question remains, what is the proper test.
[Android Software/Hacking General [Developers Only]] 3lo0sh:
It passed every directory (/data,/system,/sdcard and /)

And even non-root user ?

I did mount / rw to link /system/xbin to /bin to make script work

you can edit script to change #!/bin/bash to #!/system/xbin/bash and no need for mount / rw

But i don't know how to help you ?
[Android Software/Hacking General [Developers Only]] Droidimlookingfor:
Have tried wget, won't work with https. Curl tries to work, but then I get some text saying that I don't have gcc compiler installed. Any help with this would be appreciated.
[Android Software/Hacking General [Developers Only]] 3lo0sh:
busybox's wget is not work with https(openssl thing)

Can you give result if your terminal emulator
[Android Software/Hacking General [Developers Only]] Droidimlookingfor:
Here you go.
[Android Software/Hacking General [Developers Only]] 7175:
Hey guys I stripped the binary from the op to give a smaller bash around 1350KB for those interested.

BTW, not to diss bash or anything, but this bash and others are still vulnerable to tons of other related parsing attacks. You can google them. The best solution is to link mksh (much better programmed shell and Android's official shell) to bash. I have a link in my signature to the latest mksh build for arm.

Safest solution:

busybox mount -o rw,remount /system
ln -sf /system/bin/mksh /system/bin/bash
ln -sf /system/bin/mksh /system/xbin/bash
busybox mount -o ro,remount /system
[Android Software/Hacking General [Developers Only]] Droidimlookingfor:
link failed No such file or directory
[Android Software/Hacking General [Developers Only]] 7175:
That's strange. mksh might be located at /system/bin/sh on your phone. I've seen that a couple times now that I think about it. In that case try linking sh to bash:

busybox mount -o rw,remount /system
busybox ln -snf /system/bin/sh /system/bin/bash
busybox ln -snf /system/bin/sh /system/xbin/bash
busybox mount -o ro,remount /system

Thanks for reporting.

Also took a look at your previous post:

Try one or both of the curl binaries I've attached. Use "curl -k -O <url>".
[Android Software/Hacking General [Developers Only]] kInOzAwA:
I found that bash on CM11 m11 got certain vulnerabilities. I extracted bash from their official zip files and got tested.
[Android Software/Hacking General [Developers Only]] h-cspu:
Can't get this thing to work :(. I'm on KitKat-Cataclysm. File in /system/xbin, permission 755.

If I type "bash" in terminal emulator, I only get "Illegal instruction". Any advice? Thanks.
[Android Software/Hacking General [Developers Only]] hoholee12:
nice work!:good:

been dying to find this ever since i reflashed my phone, thanks alot:D
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Updated to version 4.3.33 :D
[Android Software/Hacking General [Developers Only]] puterboy:
Bash fails on S3 Kitkat 4.4.2

Bash runs fine on my Galaxy Nexus with 4.4.2 or on my Nexus 7 with 5.0.2. , but it is not working properly on my S3 with 4.4.2

When I run bash as non-root, I get the following error:

shell-init: error retrieving current directory: getcwd: cannot access parent directories: Permission denied

Other than this error (which repeats when I try to tab-complete a command), bash seems to mostly work

This occurs even though the directory and its parent have permissions 777.

This occurs even if I run bash with the flags '--norc --noprofile'

Note turning off SELinux (setenforce 0) doesn't help.

HOWEVER, when I run bash as ROOT, I am unable to run any commands other than the bash built-in commands (e.g., echo, set). Whenever I run anything else (e.g., ls, grep, cat), I get "permission denied".

Even when I give the direct path to the file (e.g., /system/bin/ls or /system/bin/toolbox).

Note that the permissions on /system/bin/toolbox are 755 -- so it should not be denied (especially not to root!)

Again, turning off SELinux (setenforce 0) doesn't help either.

My S3 has the stock 4.4.2 firmware plus the latest SuperSu root.

Any ideas why bash is not working properly for me?
[Android Software/Hacking General [Developers Only]] 3lo0sh:
run "mount" and send me the output
[Android Software/Hacking General [Developers Only]] killoid:
[MENTION=5869762]3lo0sh[/MENTION] can u upload the latest nano & it's installation procedure plz?
[Android Software/Hacking General [Developers Only]] 3lo0sh:
http://xdaforums.com/showthread.php?t=1530519

read this thread
[Android Software/Hacking General [Developers Only]] puterboy:
I did some more troubleshooting.

Bash as root works fine when I store the executable in /system/bin (or /system/xbin). It even works when I store the executable in /storage/emulated/0. HOWEVER, it doesn't work when I store the executable in /data/mystuff/.

What's interesting is that I don't have this problem on my Galaxy Nexus running the same Kitkat 4.4.2 nor on my Nexus 7 running Lollipop 5.0.2.

There doesn't *seem* to be anything funny about the /data mount options.

It's also not an SELinux issue since it persists with SELinux (and Knox) turned off.

So what is weird about the /data partition on my S3 that messes up bash running as root but not as non-root.

---------- Post added at 02:47 PM ---------- Previous post was at 02:19 PM ----------

Here is some more weirdness. Note I first su to root using a copy of bash in /system/xbin/ (which works)

$ /system/xbin/bash

# /system/bin/ls -ald /system/bin/toolbox

rwxr-xr-x root shell 143440 2014-10-16 06:32 toolbox

#/data/mystuff/bash -c "echo hello"

hello

# /data/mystuff/bash -c "/system/bin/toolbox ls -ald /system/bin/toolbox"

/data/mystuff/bash: /system/bin/toolbox: Permission denied

#/system/xbin/bash -c "/system/bin/toolbox ls -ald /system/bin/toolbox"

rwxr-xr-x root shell 143440 2014-10-16 06:32 toolbox

--------------------------

So it "seems" that bash itself runs ok when launched from /data/mystuff, but it can only access bash internal commands and for some reason the file system gives permission denied for /system/bin/toolbox despite it being 755

Similarly, I get permission denied when running *any* command.
[Android Software/Hacking General [Developers Only]] 3lo0sh:
It's the weirdest thing I ever heared in my life :eek:

Did you try mounting data with same flags that mounted system?
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Updated to patch 42
[Android Software/Hacking General [Developers Only]] Andriy U.:
I did not flashed, just copied needed files. Bash works well on Galaxy Note 3 (KK 4.4.2) and Galaxy S (GB 2.3.6). Excellent! Thanks a lot! :fingers-crossed:
[Android Software/Hacking General [Developers Only]] 3lo0sh:
Updated to patch 46
[Android Software/Hacking General [Developers Only]] fadedout:
Just a heads up I found a few minor issues with the flashable zip. I've addressed them and made a few other changes. They are as follows:

install bashrc and bash_logout into /etc/bash instead of /etc (otherwise they won't get loaded)

install bash binary into /xbin instead of /bin (we don't want to clutter up /bin and besides, /xbin is the right place for addons like this)

fix perms of bashrc and bash_logout which should be 644 instead of 755

remove bashbug script (useless without sendmail)

remove info documents (useless without info reader)

remove man pages (even if you have the busybox man applet, it's useless without groff)

tidy up updater-script

Also a few changes to bashrc:

run `busybox resize` instead of `resize` so you won't get an error message if there's no symlink

use `export HOSTNAME=$(getprop ro.product.device)` instead of `export HOSTNAME=$(getprop ro.cm.device)` so as to support non-CM devices as well

I also created a minimal zip for my own personal use that is minus all the documentation and localization files. I'll attach that as well.
[Android Software/Hacking General [Developers Only]] fadedout:
Just a heads up Bash 4.4 was just released! http://lists.gnu.org/archive/html/bug-bash/2016-09/msg00018.html
[Android Software/Hacking General [Developers Only]] jacomail95:
If it doesn't bother you, can you post a compiled build here on XDA? :)

Inviato dal mio Nexus 5 con Tapatalk 2
[Android Software/Hacking General [Developers Only]] mdmaher:
Please help

U cant see anything i type in emulator once i load bash

As well one more problem given in screenshot
[Android Software/Hacking General [Developers Only]] BeeWall:
[MENTION=5869762]3lo0sh[/MENTION]

Can I include the bash binary in a flashable zip (not to install bash, just extracting it temporarily so I can use bash in installer scripts)?
[Android Software/Hacking General [Developers Only]] SomebodySysop:
I am getting this error when I run the downloaded bash executable:

shell-init: error retrieving current directory: getcwd: cannot access parent directories: Success

Running on Android 6.0 px5 head unit.

Any suggestions?
[Android Software/Hacking General [Developers Only]] BeeWall:
I'm not sure if the binary is enough. Did you try flashing the minimal zip on the last page?
[Android Software/Hacking General [Developers Only]] SomebodySysop:
No, I just copied the binary. Never flashed a zip file before. A bit nervous about screwing something up. I'll read up on how to do that. Thanks!
[Android Software/Hacking General [Developers Only]] BeeWall:
You need a custom recovery or FlashFire. Did you just extract the binary, or also the other files? Also, did you set all the permissions?
[Android Software/Hacking General [Developers Only]] SomebodySysop:
I just extracted the binary, not the other files. I set the permissions on the binary chmod +rx.

Looking at flashfire now.
[Android Software/Hacking General [Developers Only]] jacomail95:
I found and pulled from the NanoMod installer package (credits to its makers, not me) a compiled build of the latest Bash 4.4 binary, and replaced the previous in a flashable zip, I hope it works for you all
[Android Software/Hacking General [Developers Only]] BIG_BADASS:
Give this man a medal
[Android Software/Hacking General [Developers Only]] seffparker:
Here is BASH version 5:

https://xdaforums.com/android/software-hacking/aarch64-bash-5-andorid-api-28-t3938612
[Nexus 5 Q&A, Help & Troubleshooting] sn0warmy:
With the recent release of the Hangouts Dialer, I finally decided to go all in with Google Voice for all my calls/texts.

I was successfully able to update my phone's settings so that any calls/texts coming in to my Google Voice number go into the new Hangouts Dialer app. However, if someone calls my regular T-Mobile number, the stock dialer is still used to receive the call. My question is, has anyone figured out how to use the Hangouts Dialer with their carrier phone number? And if you have figured this out, is it as simple as disabling the stock dialer to ensure it never intercepts any calls?
[Nexus 5 Q&A, Help & Troubleshooting] danarama:
Removing the stock dialler will prevent the phone booting. I'm not sure at what point in the boot process package manager "freezes" apps but I would suggest disabling the dialer is a really bad idea.

As for the rest of your question, not sure.
[Nexus 5 Q&A, Help & Troubleshooting] sn0warmy:
Thanks for the heads up. After digging around, it looks like my best current solution is just to make sure everyone I stay in contact with uses my GV number instead. Any calls/texts coming in through my T-Mobile number will just continue to go through the stock dialer.
[Nexus 5 Q&A, Help & Troubleshooting] j'vai:
when I 1st installed the hangouts dialer I wanted the same, & wonder why the hangouts dialer code simply couldn't be baked into the native one (maybe in L?)

*BUT* I found in the mean time -

Its the stock phone dialer app.

Keep awake 7h22m

Included packages

*com.qualcomm.qcrilmsgtunnel*

SIM toolkit

Phone/Messaging storage

Phone

http://xdaforums.com/showpost.php?p=48923078&postcount=4

even with gv, carrier number integration, why we (on sprint) get the double ringing on incoming calls, unless the sprint sim is removed, or cellular data is turned off..

look at what *com.qualcomm.qcrilmsgtunnel* is tied to..
[G2 Q&A, Help & Troubleshooting] Squez:
I picked up my Verizon LG G2 at launch, a little over a year ago. As soon as I got the phone, I rooted it using ioroot. Doing so allowed me to use wifi tether and the rest of the phone has worked flawlessly. With my old Galaxy Nexus, I used to be a crack flasher, but I haven't felt the need to with this G2.

Now a year later, I'm starting to get the itch, as I am getting a little bored with the phone. My question is, in your opinion, is it worth it to upgrade to KitKat? What advantages would I get from KitKat over JB (4.2.2)? I've read a fair amount of the change logs, but haven't found anything that has me really wanting to upgrade.

My big hesitation is that everything works great with my phone now, and I have always found that with custom ROMs, something just doesn't work right, and I'm constantly looking for fixes/upgrades.

If you recommend upgrading, what ROMs do you recommend?

Thanks in advance!
[Nexus 5 Q&A, Help & Troubleshooting] cyberdev:
Hello,

is it possible to say my Nexus that it force the connection to my own wifi Network?

Sometimes its connected to one of the Wifi's of my Neighbors ... i dont want to delete the Wifi's of my Neighbors, but i dont want that the Nexus connect automaticly to them / the nexus to connect to my network if im in the range of them.

Or is there a special app for that?
[One (M7) Q&A, Help & Troubleshooting] josevera30:
After months of thinking it through, i finally decided to give up on sense and try cyanogenmod... horrible desicion. I tried the installer and according to to the installer itself the install had concluded without error and all i had to do now was wait for my device to boot. When booting my device off andd after 5 minutes of beeing stuck in a bootloop, i realized that something had gone horribly wrong. I found many solutions online, but ended up narrowimg down to 2 options: wipe data/ factory reset and wipe dalvik through CWM or running a ruu to go bavk to stock and retry from there. Tried doing the wipe but i kept getting the error "Cant mount data" so i pretty much gave up on that option and went for running the RUU. Succesfully locked my bootloader again and all that was left for me to do was run the ruu and wait for my htc one to be running sense again! While going through the installer, i got an error at around the" 1/5" part of the ruu install (i used an exe) which said "error 171, check usb connection" and i also simultaniously got a pop up window that said "htc_fastboot.exe has stopped working" . At this point i really dont know what to do. PLEASE! Someone help me!
[One (M7) Q&A, Help & Troubleshooting] stovie_steve:
is your phone recognised by device manager? Are you using Windows and if so what version are you running?

Can you post a fastboot getvar all removing your serial number and imei please and let me know what RUU you are running?
[One (M7) Q&A, Help & Troubleshooting] josevera30:
fastboot getvar all

(bootloader) version: 0.5

(bootloader) version-bootloader: 1.57.0000

(bootloader) version-baseband: 4T.28.3218.04

(bootloader) version-cpld: None

(bootloader) version-microp: None

(bootloader) version-main: 6.07.1540.1

(bootloader) version-misc: PVT SHIP S-ON

(bootloader) meid: 00000000000000

(bootloader) product: m7_ul

(bootloader) platform: HBOOT-8064

(bootloader) modelid: PN0712000

(bootloader) cidnum: BS_US001

(bootloader) battery-status: good

(bootloader) battery-voltage: 4298mV

(bootloader) partition-layout: Generic

(bootloader) security: on

(bootloader) build-mode: SHIP

(bootloader) boot-mode: FASTBOOT

(bootloader) commitno-bootloader: dirty-6d8a0b9b

(bootloader) hbootpreupdate: 11

(bootloader) gencheckpt: 0

all: Done!

finished. total time: 0.081s

im using windows 8 and the ruu is

RUU_M7_UL_K44_SENSE55_MR_BrightstarUS_WWE_4.19.1540.9_Radio_4A.23.3263.28_10.38r.1157.04L_release_353887_signed_3.exe
[One (M7) Q&A, Help & Troubleshooting] stovie_steve:
I think it's down to Windows 8 - fastboot isn't detecting the drivers Which is why it fails with error 171

Have you tried again with a Windows 7 PC?

I think there is a post on here about getting fastvoot drivers to work on Windows 8. I'll have a look
[One (M7) Q&A, Help & Troubleshooting] josevera30:
Please help me! If you can find a fix, please do! i kind of hate the cyangenmod installer for getting me into this mess!! When i get back to stock i'll probably still try to put cyanogenmod on my htc one...
[One (M7) Q&A, Help & Troubleshooting] stovie_steve:
Try this guide

http://xdaforums.com/showthread.php?t=2232799
[One (M7) Q&A, Help & Troubleshooting] josevera30:
Followed the guide thoroughly but got this pop up window at the last step.
[One (M7) Q&A, Help & Troubleshooting] Danny201281:
Does fastboot work normally or does it only fail when running an RUU, if that's the case uninstall HTC Sync if you have it installed. But leave drivers installed. HTC sync is known to cause problems with RUU's

But there is no RUU that will work for you since your device is s-on and on the latest firmware. Downgrading is not possible with s-on. At this point the best you can hope for is to flash a custom rom. At least you can get the phone booting that way.

Do if adb/fastboot is working normally just push a Rom and install it. If you can't get adb/fastboot working on your Windows 8 pc try my mini guide here to create a bootable Linux pen drive.

If you found my posts helpful, Please click thanks :good:
[One (M7) Q&A, Help & Troubleshooting] josevera30:
Fastboot and ADB only fail while running RUU. I thought i could use the ruu since i pretty much had cyangenmod installed (Got stuck in a bootloop). I still want to install cyanogenmod on my phone so if you could help me with that it would be great! Fastboot and ADB work so if you could help me push cyanogenmod on it, this poblem would be fixed! Please help me!
[One (M7) Q&A, Help & Troubleshooting] alray:
You can't use this RUU on your phone because its an older version. You need s-off to flash lower version RUU. You will need to either s-off your phone or restore it using a nandroid backup of 6.07.1540.1 or flash another custom rom like Danny suggested above. Look in this thread: http://xdaforums.com/showthread.php?t=2355992 you might found a nandroid backup of that version. If you can find it just tell me and I'll upload mine for you. I also have the stock recovery for that version if needed.

to install cyanogenmod you need a recovery with block:by-name support like newer version of TWRP.

http://wiki.cyanogenmod.org/w/Install_CM_for_m7

http://wiki.cyanogenmod.org/w/HTC_fstab_updates
[One (M7) Q&A, Help & Troubleshooting] Danny201281:
Download the latest CWM recovery and flash it with fastboot. http://downloadandroidrom.com/file/HTCOne/recovery/M7CWM/recovery-clockwork-touch-6.0.4.8-m7.img

fastboot flash recovery "nameofrecovery".img
fastboot erase cache

Download CM11 here. Rename the file to rom.zip and place it in your fastboot folder on your pc.

http://downloadandroidrom.com/file/HTCOne/M7/roms/CM11/cm-11-20140624-NIGHTLY-m7.zip

Also download gapps rename it to gapps.zip and place it in your fastboot folder.

http://downloadandroidrom.com/file/gapps/PA/pa_gapps-stock-4.4.3-20140608-signed.zip

Boot your phone to cwm recovery and connect usb. Do a factory reset then in the command window type

adb push rom.zip /sdcard

Wait for the push to compmete

adb push gapps.zip /sdcard

again wait for completion, it's normal for the command window to appear unresponsive until the push completes.

Now use cwm to install the Rom.zip followed by gapps.zip.

If you found my posts helpful, Please click thanks :good:
[One (M7) Q&A, Help & Troubleshooting] Danny201281:
Any update?

If you found my posts helpful, Please click thanks :good:
[One (M7) Q&A, Help & Troubleshooting] alray:
He also asked me (via PM) a TWRP nandroid backup of stock 6.07.1540.1 which I have uploaded for him yesterday.

No update yet, still don't know if the OP will flash the rom or restore the nand but I think he wants to flash the rom (but have the nand just in case).
[One (M7) Q&A, Help & Troubleshooting] Danny201281:
Lol, he was also pm me, last I herd he was having trouble pushing the cm11 Rom. After successful push the Rom was still not on the device.

I instructed him to use "mount usb storage" in cwm. Not heard anything since ;)

If you found my posts helpful, Please click thanks :good:
[One (M7) Q&A, Help & Troubleshooting] josevera30:
Solved!

Thank you so much for your help! I did a wipe data/ factory reset and used sideload to push and install cyanogenmod! Thanks for your help :good::D:D
[One (M7) Q&A, Help & Troubleshooting] Danny201281:
Thanks for the update, good to know you got it sorted ;)

If you found my posts helpful, Please click thanks :good:
[Upgrading, Modifying and Unlocking] qwsr:
During replacement ROM v.3.29 on v3.32 WWE.Build 06 the message has appeared "checksum error!" then the device "has hung" and more to load it was not possible...

At attempt of restoring with usage of buttons "record" + "reset" and "camera" + "record" + "reset" in a top of the display part there is a text - " 2006/08/28 09:47:01 " in the bottom of an empty advance - bar and in one second the display is filled by a pseudo-graphics (triangles, point …)

Correctly it is possible enter only the mode - " Photo+Record+Joistick_Action - USB Console mode ", thus there is a text:

Galaxy FlashRom Update

2006/08/28 09:47:01

Cpu version: PXA27x

USB Cable is connected

And in the bottom of an empty advance - bar.

Win XP at connection informs that "the Device USB is not authenticated "...

Please prompt as to restore service capability P525 with usage of this mode?

The service centre Asus in my city is not present...
[Upgrading, Modifying and Unlocking] tizzi:
Download the official ROM v3.32 in the Download section in Asus Website.

Try Re-upgrade