yashsingh1/xdaforums huggingface dataset:
[AT&T Samsung Galaxy Note 4] jpfulton248:
Question: The source for the original firmware that samsung provides for our phones found here: http://opensource.samsung.com/reception/receptionSub.do?method=sub&sub=F&searchValue=sm-n910v was discovered to have not been patched for 7911, right? Assuming there isn't anyway to compile the source to end up with an unpatched firmware file that could be flashed with ODIN, right? I'm guessing the answer is going to be that it would be an unsigned firmware file and therefore not flash-able.
[AT&T Samsung Galaxy Note 4] munjeni:
I can execute code but as unprivileged user :o

Whar say gethostbyname_r on bionic? http://www.cyberciti.biz/faq/cve-2015-0235-patch-ghost-on-debian-ubuntu-fedora-centos-rhel-linux/
[AT&T Samsung Galaxy Note 4] jorgasm209:
This ^^^
[AT&T Samsung Galaxy Note 4] ZPaul2Fresh8:
Wrong. CVE-2014-7911 has been patched since day 1. Else we would have ROOT already.

We need a different exploit.
[AT&T Samsung Galaxy Note 4] jpfulton248:
I know the patch was found in the decompiled firmware. I actually did it myself after someone else pointed it out. I do not know however that someone found the patch in the uncompiled source that samsung provides. Who found it in source?

I don't have time to find it right now but I am almost positive that someone said "the source doesn't match our phones... that's a scary thought". Unless someone can say they verified this themselves I think it's worth looking at. I'll compile the source myself if I can find time and can figure out how to do it.
[AT&T Samsung Galaxy Note 4] lesmaleinad:
I don't have much experience developing, but it seems like we have:

-an exploit that allows us to call system apps to do something

-an exploit that uses a system level app to gain root.

Would a possible method be to use the call expoit to force system apps to either download or install a different app with a system uid? Is there an system level android app that can install other system level apps that we can call to install our own app? Or am I not understanding what is happening?
[AT&T Samsung Galaxy Note 4] jpfulton248:
Hey [MENTION=787413]zxz[/MENTION]o0o did you look for the patch in the source code that samsung provides or did you just find the patch when you downloaded and decompiled the firmwares?
[AT&T Samsung Galaxy Note 4] mircury:
The patch in the firmware is the only one that matters though isn't it? Because that is the one that is signed and will boot. I have seen many complaints that the compiled from source doesn't match what's in the firmwares and won't boot. That has been happening for a long time and has frustrated many devs here.
[AT&T Samsung Galaxy Note 4] brianmaedche:
Just thinking out loud here. But is there a way we could find a way to inject root using ODIN? I guess what im saying is can we build a firmware with root already added into it and flash with Odin in download mode? Just a thought..... Another thought find a way to replace are not loader with the unlocked boot loader from a Dev phone. Seeing as that's the only difference between the two phones

Other then that, would like to say thank you to all the work being put forth on this.
[AT&T Samsung Galaxy Note 4] jpfulton248:
So to be clear, compiled source from Samsung will not boot??? Because I don't believe I've seen anyone say that they have verified the patch in it.
[AT&T Samsung Galaxy Note 4] ZPaul2Fresh8:
As I said multiple times CVE-2014-7911 WILL NOT WORK! It's in the opensource, it's patched. Please move on to researching new exploits.
[AT&T Samsung Galaxy Note 4] mircury:
That is correct. It is part of secure boot. The firmware has to be signed.

" Firmware images, such as operating systems and system components, cryptographically signed by known, trusted authorities, are considered authorized firmware."
[AT&T Samsung Galaxy Note 4] dabl198327:
Has there been any research done on CVE:2014-0997? It doesn't say our device is affected but it doesn't say it isn't either.... I'm just trying to help even tho this may be completely useless... go easy on me.
[AT&T Samsung Galaxy Note 4] jolly_roger_hook:
You must not have been in the scene very long even if you injected root it would not flash because of the locked bootloader flags galor would go up as well the dev phone boot loader will. Not work as well they tried all of these things woth the note 3
[AT&T Samsung Galaxy Note 4] jpfulton248:
Okay. Thank you.
[AT&T Samsung Galaxy Note 4] jorgasm209:
So at this point it appears no root for us until a new CVE comes out or possibly Lollipop. I'm bummed... but great work over past week or so investigating and testing current methods. To everyone who contributed... thank you so much for your time and effort. Now we wait...
[AT&T Samsung Galaxy Note 4] ZPaul2Fresh8:
Correct. Dead end, for now... But don't worry as I'm not ditching the device. I'll keep looking every day for new exploits until we find one.
[AT&T Samsung Galaxy Note 4] iRashawn229:
Same here
[AT&T Samsung Galaxy Note 4] jorgasm209:
The good thing is we do have the Kernel exploit...
[AT&T Samsung Galaxy Note 4] PaulPizz:
Has anyone tried this?

http://www.skipsoft.net/?page_id=1197
[AT&T Samsung Galaxy Note 4] ZPaul2Fresh8:
Nothing there we don't already have.
[AT&T Samsung Galaxy Note 4] lesmaleinad:
http://xdaforums.com/galaxy-note-10...olkit-unified-android-toolkit-galaxy-t2998214

Here is someone posting about it with 11,000 posts.
[AT&T Samsung Galaxy Note 4] jpfulton248:
I don't see that it works on the Verizon/AT&T variants of the Note 4. Am I missing that?
[AT&T Samsung Galaxy Note 4] iRashawn229:
Strange
[AT&T Samsung Galaxy Note 4] jpfulton248:
Please explain.
[AT&T Samsung Galaxy Note 4] iRashawn229:
It's the CVE-2014-8609 app. When you click open terminal emulator it won't do it. But if I go to the "my files" app then long click the downloaded towelroot app it gives me the option to open the terminal emulator from there

*EDIT* I don't know if it's useful or not I was just trying something and that came up
[AT&T Samsung Galaxy Note 4] WizeGuyDezignz:
Where is Howell or whatever his name is?
[AT&T Samsung Galaxy Note 4] iRashawn229:
Are you talking about [MENTION=3302422]howellcp[/MENTION] ? ?
[AT&T Samsung Galaxy Note 4] howellcp:
What's up? [MENTION=1026832]WizeGuyDezignz[/MENTION]
[AT&T Samsung Galaxy Note 4] WizeGuyDezignz:
So, do you think we are dead in the water here or what?
[AT&T Samsung Galaxy Note 4] howellcp:
Truthfully I am not the guy to ask. I am no developer. I search for things that maybe helpful and present them when I find them. I will say I have seen this process happen for many devices and I think we have some good people working on it. I'm hopeful.

[MENTION=1026832]WizeGuyDezignz[/MENTION]
[AT&T Samsung Galaxy Note 4] WizeGuyDezignz:
Oh ok, thanks a lot sir for your reply!
[AT&T Samsung Galaxy Note 4] scoder:
The CVE-2014-8609 uses a broadcast intent to attempt to open the app. This doesn't work, nor would it launch the app with escalated privileges as has been suggested.

The towelroot link is simply a shortcut to Terminal Emulator, not a broadcast intent. It does not launch as superuser, either.
[AT&T Samsung Galaxy Note 4] play2loud:
Note 4 Root

well, Ive tons of reading and looking into what it takes to accomplish root. I have learned many things 1st of which I realized how under appreaciated developers are. I can see how someone or even a few people would litterally spend thousands of hours to develop an app specially one that achievs root without bricking the device. There are sooooo many tedious things to look at and one wrong entry on one line of code could be as minor as not to even be noticed or as major as catastrophic damage to device. I for one know that with what little I know I can figure this stuff out. However, I would much rather pay for an app like towel root, that if memory serves I donated five bucks two or three times with different accounts, than try to come up with something on my own. Just trying to build a regular app is time consuming. Building ann app that achievs root is most definately not easy and looks to be very time consuming.

Between Billing issues and no root I think its time to kiss at&t and the note 4 good bye and move on to a provide and phone model with less headaches.

Anyone want a brand new N910a Note 4 from at&t ?
[AT&T Samsung Galaxy Note 4] Venom0642:
Are you offering it for free lol.

Sent from my SAMSUNG-SM-N910A
[AT&T Samsung Galaxy Note 4] eskomo:
Use Swappa if your going to sell it. Can't sell it in the forums here.
[AT&T Samsung Galaxy Note 4] iRashawn229:
Yeah guys it was a pleasure of trying to get this thing rooted. But I just got qualified for T-mobile service with the option of getting a Note 4 for $140. I guess I'm out guys. Take care
[AT&T Samsung Galaxy Note 4] ZPaul2Fresh8:
Another kernel exploit that can give us elevate privileges with a crafted app.

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4323

I'm not sure if this driver is used in our chip set or not, but it's in our kernel source code and has not been updated to the patch...

What do ya think guys? I know we have an exploit already in our kernel that we need system uid to use, I'm just curious to what extent this exploit can be used to? Same as 4322 since we *may* need system uid to even take advantage of this exploit as well?

[MENTION=3669069]idler1984[/MENTION]

[MENTION=4631220]Venom0642[/MENTION]

[MENTION=4939386]Surge1223[/MENTION]
[AT&T Samsung Galaxy Note 4] iamdeon23:
Not to be a jerk towards [MENTION=6174941]iRashawn229[/MENTION] [MENTION=4281763]play2loud[/MENTION] but why do yall feel the need to announce your departures from the at&t/verizon note 4 to go elsewhere? Yall are just taking up space in this forum with nonsense which ppl don't care to read. We only care about the progression of root!
[AT&T Samsung Galaxy Note 4] iRashawn229:
I wasn't saying it to be an asshole or anything bro. Even tho I'm getting another device I'm still gonna have my Verizon Note 4 retail. But I definitely understand where you're coming from. So no hard feelings or anything.
[AT&T Samsung Galaxy Note 4] play2loud:
note 4 Root

No Hard feelings here, I was mainly trying to say how much I appreciate XDA Developers and all of there hard work thats what the bulk of my message was for, I could go on for pages about at&t and the note 4 and problems, However, like you said thats not what this forum is for, I did want to say in this forum how much I appreciate XDA and how often I find that they are the only ones who can come up with an exploit when no one else and I mean no one at all can do it, they manage to find a way. These guys are some of the brightest minds in the world where code and tech is concerned. I just wanted them to know that. When I get a different phone I'm sure I will be using something they developed for root or whatever. They do so much for the smart phone world I don't think I can live without them. Thanks again XDA you guys are Awesome. Thats all I was trying to say.
[AT&T Samsung Galaxy Note 4] zxz0O0:
Besides you could check if the mdp device exists (highly likely doesn't).
[AT&T Samsung Galaxy Note 4] Dnice25:
Has anybody tried the International way of rooting on att?
[AT&T Samsung Galaxy Note 4] play2loud:
Note 4 Root

What international way? I can try anything with mine now considering that it doesn't matter if I brick it.
[AT&T Samsung Galaxy Note 4] jolly_roger_hook:
If your talking about chainfire cfroot it won't work
[AT&T Samsung Galaxy Note 4] idler1984:
I have checked multiple high-end Qaulcomm devices and this MDP is no there.

On AT&T there is also another obstacle which is system partition write-protection, initialized in boot-loader, determined by warranty_bit. If this can't be bypassed all change to system partition would be temporary.
[AT&T Samsung Galaxy Note 4] play2loud:
Note 4 Root

Like I said I only wanted to let XDA KNow How Much I respect them Thats why I posted that.

On A positive note even with my minimal experience I do have a nack for reading code and seeing patterns and function. My downfall is lack of physical application. I need to know the best route to get the appropriate tools to be able to decompile the bootloader so I can see how it works. then Maybe I could help with this. I do have a few N910a phones to experiment on and in order to learn I am more than willing to help. If some one colud point me in the right direction on what programs to download and where to start, I'm a fast learner and I think I could help in the note 4 root goal. Any forums or programs you could suggest would greatly help.
[AT&T Samsung Galaxy Note 4] dec3169:
Does anyone know if this one will work? CVE-2015-0235

(can't post links yet)

XhttpsX://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-0235

XhttpsX://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability

I'm a linux guy but never set up any of the adb stuff for android. There is an easy test but it requires a compiled program and I can't (currently) compile this on android. FWIW - it compiled fine on all of my linux boxes, and I do have a few that are vulnerable at home.

From the Qualys bug post:

[user@...ora-19 ~]$ cat > GHOST.c << EOF
#include <netdb.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <errno.h>

#define CANARY "in_the_coal_mine"

struct {
char buffer[1024];
char canary[sizeof(CANARY)];
} temp = { "buffer", CANARY };

int main(void) {
struct hostent resbuf;
struct hostent *result;
int herrno;
int retval;

/*** strlen (name) = size_needed - sizeof (*host_addr) - sizeof (*h_addr_ptrs) - 1; ***/
size_t len = sizeof(temp.buffer) - 16*sizeof(unsigned char) - 2*sizeof(char *) - 1;
char name[sizeof(temp.buffer)];
memset(name, '0', len);
name[len] = '\0';

retval = gethostbyname_r(name, &resbuf, temp.buffer, sizeof(temp.buffer), &result, &herrno);

if (strcmp(temp.canary, CANARY) != 0) {
puts("vulnerable");
exit(EXIT_SUCCESS);
}
if (retval == ERANGE) {
puts("not vulnerable");
exit(EXIT_SUCCESS);
}
puts("should not happen");
exit(EXIT_FAILURE);
}
EOF

[user@...ora-19 ~]$ gcc GHOST.c -o GHOST
On Fedora 19 (glibc-2.17):
[user@...ora-19 ~]$ ./GHOST
vulnerable
On Fedora 20 (glibc-2.18):
[user@...ora-20 ~]$ ./GHOST
not vulnerable

I was thinking that if they were still using a vulnerable glibc version there are a number of programs that would likely call gethostbyname. I'm guessing at least the stock email, stock messaging, possibly hangouts, maybe some of the stock widgets, and possibly actual system/OS programs. Maybe something in the proxy functions, or sbeam/nfc/bluetooth/wifi. I haven't looked at any google source, but I would think that some of these would need a hostname at some point.

What made me think of the wifi/beam stuff was the experience I had the other day with a new Samsung camera we purchased for work. It has wifi direct/beam/nfc and actually sets up what amounts to an ad-hoc network so you can use your phone as a viewfinder for the camera, and can pass photos back and forth. I would tend to guess that something like the wifi-direct utility probably didn't get as much developer attention as other programs that may be used more often but that's just my WAG.
[AT&T Samsung Galaxy Note 4] b3asty:
THANK YOU... You read my mind...
[AT&T Samsung Galaxy Note 4] GregPol:
is this guy messing with people?

Is this guy just messing with people, or is there a chance he is for real?

youtube... "Galaxy Note 4 root AT&T" by a David Legacy.

I am soooo ready for a root.
[AT&T Samsung Galaxy Note 4] howellcp:
Well he does seem to know about the bounty. We will see. It's been about 24h since the video Soooo...
[AT&T Samsung Galaxy Note 4] ZPaul2Fresh8:
I seriously doubt it after watching the video... I hope he proves me wrong but it didn't seem like he knew what he was talking about.
[AT&T Samsung Galaxy Note 4] jolly_roger_hook:
Nvm I found it
[AT&T Samsung Galaxy Note 4] dabl198327:
Galaxy Note 4 root AT&T: http://youtu.be/y9Siw2GCvqU
[AT&T Samsung Galaxy Note 4] howellcp:
Installing super user or you know whatever.
[AT&T Samsung Galaxy Note 4] thawte:
Seems legit. He made a video about it... Must trust everything seen on the Internet!
[AT&T Samsung Galaxy Note 4] holywhitebread:
I don't trust him because of his mustache and sunglasses.

---------- Post added at 09:35 AM ---------- Previous post was at 09:31 AM ----------
[AT&T Samsung Galaxy Note 4] greekunit690:
http://youtu.be/_ElQqA2Umsc lol idk what he tried to show us but it's absolutely nothing about root

Sent from my SAMSUNG-SM-N910A
[AT&T Samsung Galaxy Note 4] thawte:
It's also n910a...
[AT&T Samsung Galaxy Note 4] greekunit690:
So is mine... I don't get it

Sent from my SAMSUNG-SM-N910A
[AT&T Samsung Galaxy Note 4] thawte:
Nevermind I was thinking the 10 part denoted developer because I just have a verizon note 3. My bad
[AT&T Samsung Galaxy Note 4] jpfulton248:
Finally someone said it.
[AT&T Samsung Galaxy Note 4] thanitos:
He said xda is reviewing it, well wouldn't a mod stepforward that is reviewing it to prove it's lagit?
[AT&T Samsung Galaxy Note 4] Kyuta Syuko:
Gotta agree with this statement. After the last no root I'm highly skeptical about this...
[AT&T Samsung Galaxy Note 4] ZPaul2Fresh8:
His legitimacy is here:

Gunther - Ding Dong Song Gunther Video (You Touch…: http://youtu.be/z13qnzUQwuI

LoL
[AT&T Samsung Galaxy Note 4] SlothlyDX:
I'm calling it now, it's fake. The way he talks about "the kernel and stuff" and how he doesn't even know what Superuser is? No one posts about releasing root "soon" especially a video of the obviously cool looking dude (sarcasm) and is legit. I'd rather stay on topic here and trust the pros, not a lost cause. If he proved me wrong great but I doubt he will. Plus no one really voices their opinion so quickly about the money. Notice how all the great devs in this thread haven't mentioned the money once! They are about the community and our phones freedom. Sure the money is worth donating to them but the goal is root. This guy is a money hungry scam. IMHO

Thanks to the guys who are still trying and all your hard work. I'm having so much fun watching you guys work your magic. Even if we don't get root, your effort is more than appreciated! ?
[AT&T Samsung Galaxy Note 4] NYYFan02:
That video was so bad.
[AT&T Samsung Galaxy Note 4] arjun90:
Everyone should just buy the T-Mobile Variant. No point in fueling this thread with wasteful videos like the one posted above.

Why can't someone ask CyanogenMod and see what the experienced pro's can do in terms of enabling root for the AT&T Note 4?
[AT&T Samsung Galaxy Note 4] UniX1rm:
I agree, Nobody is paying attention to the AT&T variant. I, myself, bought oneplus one for myself and sold the Note 4. Lost hope!
[AT&T Samsung Galaxy Note 4] collinstheclown:
Why do anything at all? Why doesn't everyone just have $800 to drop a phone? Derp derp derp let's tell people give up hope and just buy another phone!

Thanks for the contribution :)
[AT&T Samsung Galaxy Note 4] jolly_roger_hook:
Not everybody can afford a new phone as well as T-mobile serveice is booty in most areas I get zero service where I live and have to go almost 1 hour away to get a possible 1-2 bars of service for T-mobile it's great if you live in a city but otherwise not so much

Sorry for the off topic post keep up the great work guys
[AT&T Samsung Galaxy Note 4] K-alz:
I can't believe ya'll are actually talking about this dude in the video. He doesn't even know how to talk. And the stache......is killing me. lmfao

It would be a miracle if this dude has really achieved root.
[AT&T Samsung Galaxy Note 4] GregPol:
He posted an update,

"Note 4 root att preview" by the same guy, David Legacy
[AT&T Samsung Galaxy Note 4] greekunit690:
We know... I posted it on here as well a couple hours ago. Seems like a complete fake. He just went through settings to the kit Kat easter egg...

Sent from my SAMSUNG-SM-N910A
[AT&T Samsung Galaxy Note 4] GregPol:
Yeah, i noticed after i posted... pretty sure he is a troll. Sorry to even bring him up.
[AT&T Samsung Galaxy Note 4] scarygood536:
Does anyone know where "maintenance boot" resides? I ask as a potential attack avenue considering it appears it's new to samsung devices and could have bugs.. Is it just an extension of recovery?

Sent from my bandaid smelling s-pen
[AT&T Samsung Galaxy Note 4] brittoking:
Is this what you're referring to??

http://xdaforums.com/showthread.php?t=2935455

Found something cool
[AT&T Samsung Galaxy Note 4] note3palermo:
OK so this is absolute CRAP! first they tell us that the lollipop update will be to us note 4 users by the end of December and that we will be a few of the FIRST GROUP to receive this luscious update. Then it was said that we'd have it by January sometime. Then the end of January. NOW they sat who knows when we will get it due to the GEAR VR crap! Like who cares about that. Give us the update then those few ppm who grab that device, wait for the bugs and whatever to that to be hammered out. This is crap. Why do we all have to wait just because those few ppl who will get that, have to wait. Now we may not gt this update until mid June? Are you serious? This is a joke. My device lacks so badly due to not having root privelages. Yes I said it. I want root. Lollipop is what is holding is from getting root. Once lollipop drops, then we will get root ability. They won't release that to us now because once lollipop comes out, it would wipe out our rooted device. Makes no sense to release it now. I agree. (The ability to root). I've had it entirely. I won't switch carriers or devices but I want the truth is all. Tell us that gosh darn truth. Stop having me hang by my devices weakness and I mean, not being rooted. As to the iPhone. They suck unless jail broken. The note 4 is cool. But it would be smackadealiously awesome with root. Whatever. I can not wait. I'm just a simple man. Like simple jack. Waiting for my phone to become complete. What can I do with it without being rooted? Tell me someone. And don't say a launcher. Please spare me. And so, what apps or apks will help me cope? Someone? Anyone?
[AT&T Samsung Galaxy Note 4] howellcp:
This guy....
[AT&T Samsung Galaxy Note 4] holywhitebread:
I read this in Charlie Brown's teacher's voice.
[AT&T Samsung Galaxy Note 4] scarygood536:
Exactly this.

Sent from my bandaid smelling s-pen
[AT&T Samsung Galaxy Note 4] dabl198327:
I tried to replicate this on my phone but to no avail.... are we sure it's compatible with our device?
[AT&T Samsung Galaxy Note 4] dieselbuddeh:
I tried on my Nk3 N910a ad it just kept rebooting no maintenance menu.
[AT&T Samsung Galaxy Note 4] davbay1:
Same here also nk3 n910a

---------- Post added at 02:33 AM ---------- Previous post was at 02:29 AM ----------

Keeps rebooting won't go into maintenance menu
[AT&T Samsung Galaxy Note 4] scarygood536:
Interesting. Verizon specific? I cant find it in the source

Sent from my bandaid smelling s-pen
[AT&T Samsung Galaxy Note 4] jay8302:
I was able to do it...I didn't see anything to special but like someone else said might be something there
[AT&T Samsung Galaxy Note 4] davbay1:
Nk1 or nk3
[AT&T Samsung Galaxy Note 4] howellcp:
You are not helping the root progress. Please stop posting.
[AT&T Samsung Galaxy Note 4] mikeius89:
I was able to get the maintenance screen with boot and wipe options VZW. It is an interesting menu.
[AT&T Samsung Galaxy Note 4] K-alz:
I believe this is the XDA forums not a samsung/AT&T store. [emoji23]

from my Allianced N3.

Remember! if your Alliance manager FCs, just delete the "Alliance" folder in your SDcard then re-open the Alliance manager app.
[AT&T Samsung Galaxy Note 4] P1Tater:
Final warning.

If you're not helping or just being rude, then don't bother posting. Keep it on topic or I will be forced to take further corrective action.

Thanks for understanding.