yashsingh1/xdaforums huggingface dataset:
[G4 Q&A, Help & Troubleshooting] gefiltefish1478:
Possibilities bootloader

I possibly found that the lg g4 can connect a serial console when in fast-boot and android with limited access, and that the boot-loader is based on little kernel

codeaurora.org/blogs/little-kernel-based-android-bootloader

It may be possible to connect uart via serial and map out how the bootrom loads the sbl and (aboot (bootloader))and possibly find a way to unlock the boot-loader

newandroidbook.com/Articles/aboot.html

so far acessing fastboot with a nuked laf partition only specific fastboot commands work. can not get oem-id or reboot/continue via fastboot

console=

/dev/tty

/dev/ttyHS0

/dev/ttyHSL0

/dev/ttyHSL1
[G4 Q&A, Help & Troubleshooting] xrad:
Have you read this?

http://xdaforums.com/showthread.php?p=64703172

Perhaps it helps with your research.

What do you mean by "nuked"?
[G4 Q&A, Help & Troubleshooting] gefiltefish1478:
Possibilities bootloader

I backed up " DD" the laf partion and then flashed it DD

/dev/zero to wipe it out which gave me access to fastboot

Using the same method as entering recovery

---------- Post added at 10:26 PM ---------- Previous post was at 10:15 PM ----------

The best place I would start looking

/sys/devices/soc.0

---------- Post added at 10:35 PM ---------- Previous post was at 10:26 PM ----------

http://xdaforums.com/showpost.php?p=28464645
[G4 Q&A, Help & Troubleshooting] xrad:
Yeah, that. I did stumble over this before but didn't dare venture into this field of mines (literally). Also, IIUC your DD method seems to require that you already have root, right? I was approaching the device from the angle where don't have root or unlock. In this particular context I was hoping to revive the DL mode hacks (EXEC command in particular) to first gain temporary, then permanent root privileges. But then I lost hope, jumped ship and have now an LG unlockable H815 EUR.
[G4 Q&A, Help & Troubleshooting] alitavas:
Hmmm i do this for several times but always when FlashFire app wants to flash System.img after 90% of flashing this partition it says "Not enough space"

but it successfully flash Boot.img and Modem.img And SuperSU!!!!!

then i reboot the phone and in the left corner of screen it says "Not secure boot"(or something like this) and bootloop

:crying: today i will try to download another MM kdz file and test it again
[G4 Q&A, Help & Troubleshooting] Loulou-13:
interresting !

it's not possible to flash the last superSU (or the last beta) with flashfire ....in a MM ,bootloader locked ???

but it's

really

impossible to modify the kernel with flashfire on locked phones ???

how work the root procedure when we root a LP with a v10 system.img (locked phones) ?
[G4 Q&A, Help & Troubleshooting] xrad:
Yes, both are not possible. Flashfire needs root. And yes, a locked phone will not accept a modified kernel.

See this post and the link therein.
[G4 Q&A, Help & Troubleshooting] Loulou-13:
thank you ;)

ho...my bad ! i don't remember that flashfire need root itself...sorry .
[G4 Q&A, Help & Troubleshooting] alitavas:
Why we should modify kernel?

In the lp we just modified system and phone rooted

Sent from my LG-H818
[G4 Q&A, Help & Troubleshooting] Leavard:
Please read the thread. All MM root so far for any device has required a modified kernel.
[G4 Q&A, Help & Troubleshooting] gefiltefish1478:
Little kernal exploit

https://www.codeaurora.org/projects...bypasses-signature-verification-cve-2014-4325

I possibility found an exploit that effects little kernal

CVE-2014-4325:

When processing the boot command in fastboot mode, the Little Kernel bootloader, as used on Android, will not verify that the device is unlocked or that the target does not use signed kernels before booting the downloaded kernel image without verification. A local user can use this flaw to boot arbitrary kernel images via fastboot even when the target uses a signed kernel and the bootloader is locked.

Access Vector: local

Security Risk: critical

Vulnerability: CWE-287 (improper authentication)
[G4 Q&A, Help & Troubleshooting] emilyrugburn:
Isn't that likely to already be patched a while ago? That was released in 2014.
[G4 Q&A, Help & Troubleshooting] gefiltefish1478:
Little kernal exploit

If your still on zv6 or zv5 witch were released in ~mid 2014

So it could apply
[G4 Q&A, Help & Troubleshooting] gefiltefish1478:
Hexed aboot

So I recently opened aboot in a text editor to notice this
[G4 Q&A, Help & Troubleshooting] thznutz87:
I'm on zv5 still
[G4 Q&A, Help & Troubleshooting] emilyrugburn:
I sort of understand what these previous posts are about but... Wouldn't someone have already tried to use this exploit?
[G4 Q&A, Help & Troubleshooting] ajayk111:
What versions do zv6 and zv5 correspond to for the H810
[G4 Q&A, Help & Troubleshooting] ABotelho23:
So what does this mean? That LG is using a version vulnerable to that exploit? Would anybody here know how to exploit this?
[G4 Q&A, Help & Troubleshooting] gefiltefish1478:
Basically this means when in fastboot if you boot from a specific image (recovery/boot) it doesn't check those images to see if there signed by lg

- fastboot boot recovery.img

I have not tested this yet but will try to make a custom recovery and see i can get it to boot it
[G4 Q&A, Help & Troubleshooting] Loulou-13:
thank again to persons with knowledges to try to understand LG codes.

For me,i just dream to see a phenomenal exploit by only root a MM with bootloader locked ....and just with xposed it would be great^^
[G4 Q&A, Help & Troubleshooting] ABotelho23:
That's VERY interesting. So basically just a forked/modified TWRP image?

---------- Post added at 07:54 PM ---------- Previous post was at 07:52 PM ----------

I'd just be interested in a custom ROM like Cyanogenmod, and those are fully capable to be rooted correct?
[G4 Q&A, Help & Troubleshooting] FrodgE:
?? Hmmm do you actually have an idea how to bypass the signature check or are you just dreaming of an unlocked/hacked future ?

What you've written is no different to the method used to temporarily boot the twrp recovery image on an unlocked device --> http://xdaforums.com/showpost.php?p=61137652&postcount=63 ...which we already know doesn't work on a locked device.
[G4 Q&A, Help & Troubleshooting] xrad:
My thoughts exactly. This thread has totally lost it's purpose and probably should be just closed. Should someone ever come up with an unofficial unlock method, that achievement deserves its own thread anyway.
[G4 Q&A, Help & Troubleshooting] Loulou-13:
i think that we don't have the right to criticize the op and some members here who have

tried

to understand and hack LG code ....

we absolutely need devs and others members with knowledges for to progress and to opyain interresting things for our devices ===>>>it's generally what it happen on all xda .
[G4 Q&A, Help & Troubleshooting] xrad:
In case you haven't noticed I am one of the devs who have tried, so I think I do have some right to criticize that this thread is going south. It used to be called "technical" for a reason. I feel everybody's despair given the sore situation LG has left all but the EUR owners in -- but that doesn't excuse that people blindly post anything that crosses their minds without even reading any of what has been written and explored in the past. Mindless optimism won't get us anywhere.
[G4 Q&A, Help & Troubleshooting] rigocalin:
re-lock/remove unlocked warning?

I just read all the posts in this forum trying to understand myself how this unlock.bin works.

I understood it at the high level. My question is if you (or anybody else) can think of a way to re-locking a previously bootloader unlocked device or at least remove the bootloader unlocked text on boot-up?
[G4 Q&A, Help & Troubleshooting] Loulou-13:
ha ok ;) yes....i agree this point of view and i don't remember your "name" .

For me i principaly have written on this thread , for to congratulate and thank for this hononary effort of hacking ...

And too, out of topic (sorry ! ) ,for asking if there are a chance to bypass this hell of sh*** of damned security verification on boot :mad: >>>for to open the possibility to root MM with locked bootloader ,to have the possibility to flash a system.img like LP ...

but i'm desesperate with that... i have asked if it's possible to modify a MM kdz file and flash with LGUP for that, but it seem impossible too ,and never used on lg phones.....
[G4 Q&A, Help & Troubleshooting] xrad:
Well I haven't tried but since the the unlock.bin is check during each boot I would suppose flashing an invalid (or just a zeroed) unlock.bin should lock the device again. I don't know however if that also removes the message, it might stay permanently, for example if unlocking blows a Qfuse to indicate that the device has been tampered with.

Even if we knew how to build a KDZ, the parts in it must be signed to be accepted by the bootloader. The most likely to succeed approach would be to find a good old fashioned Jailbreak to obtain root. (but not unlock!). But of course this will be fixed by Samsung in the next release.
[G4 Q&A, Help & Troubleshooting] ABotelho23:
At this point I think I'm just gonna update my device to Marshmallow, wait for the Xperia Z6 and get that. Never doing LG again lol
[G4 Q&A, Help & Troubleshooting] alitavas:
I remember something that may help us

In sony's locked bootloader phone we add recovery in system folder(xbin or bin) using adb then edit the ramdisk and finally we get recovery

So why we dont do it?(sorry for English)

Edit:i found answer there isn't ramdisk.tar in the system/bin

Sent from my Xperia SP
[G4 Q&A, Help & Troubleshooting] ReQueM:
Bump.. Any ideas?
[G4 Q&A, Help & Troubleshooting] alitavas:
We cant install TWRP so we cant use Bump

Sent from my LG-H818
[G4 Q&A, Help & Troubleshooting] devilh:
Step by step to current status

Hey,

I want to try my best with unlocking the bootloader.

I am experienced with C , encryptions and exploits, but not so much with android low level hierarchy(boot flow) or with G4 terms (as I just got mine and want to give this a shot).

I read through this thread,

But couldn't get all what I needed. will be happy to a short step-by-step guide on how to get the dev environment to the "current status" where I can:

1. See a dissasebmly of the bootloader

2. Activate commands in download mode(writing to serial?)

3. Have all the required testing files(such as working unlocked.img with its matching ID and IMEI)

thanks
[G4 Q&A, Help & Troubleshooting] xrad:
Kudos! I'll pm you my disassembled aboot.img tomorrow and some notes. As for dev tools I mainly worked on Linux with Linaro 32/64 bit cross arm tools.

Edit: Done, check your PM.
[G4 Q&A, Help & Troubleshooting] Nekator:
I was browsing the web and found this document. Maybe there a some usefull information in it.

https://www.google.de/url?sa=t&sour...LvIiEVcnS-J7KYOYQ&sig2=YKWoBcRkIHQRCaxVZm4eIg
[G4 Q&A, Help & Troubleshooting] jjhaohao:
Hey, another idea, just a long shot. Anyone knows if the checking of the hashes/crypto data of the bootloader.bin in the kernel is done by a particular binary? there is no way we can spoof that binary that do the checking/comparision (having root access with root injection method) and making it always answer true?
[G4 Q&A, Help & Troubleshooting] Nekator:
Is baked into the bootloader by setting a special flag while compiling.

---------- Post added at 07:55 AM ---------- Previous post was at 07:52 AM ----------

Just an idea is it possible to develop an own bootloader based on caf lk bootloader an install this bootloader through jtag to replace the current one?

Just a Theory
[G4 Q&A, Help & Troubleshooting] xrad:
AFAIK the bootloader is also signed and checked by the phone's boot logic.
[G4 Q&A, Help & Troubleshooting] gefiltefish1478:
I found qfips keys located in /system/usr/qfipsverify/booting.hmac

---------- Post added at 12:47 PM ---------- Previous post was at 12:45 PM ----------

BTW deos not required root to read

---------- Post added at 12:54 PM ---------- Previous post was at 12:47 PM ----------

Couldn't we use this along with a timing attack??
[G4 Q&A, Help & Troubleshooting] alitavas:
I flashed H815 Twrp recovery on (dev/block/platform/f9824900.sdhci/recovery) with adb

Transfer was successful but when tried to open recovery from Hard reset menu and recovery buttons it said secure boot failed and then rebooted

Sent from my LG-H818
[G4 Q&A, Help & Troubleshooting] shiboby:
I'd be willing to bet that someone has already considered this, but I thought I should ask just in case.

If I understand correctly the H811's bootloader can be unlocked once upgraded to MM. Is there a similar procedure that would work for the H815?
[G4 Q&A, Help & Troubleshooting] xavierlangevin1:
I just found that with my 812 if i flash the 10h version i could flash any other version of this phone but the 811 give me a hard brick, *not so bad* I think that we should focus on the kdz of the 811.

(i've reached access to fastboot but i've contacted lg for an unlock.bin *being the stupid guy that want to unlock a brand new phone* They know with the Device-ID and IMEI the model of my phone.)
[G4 Q&A, Help & Troubleshooting] LaughingCarrot:
Chainfire has officially released root and TWRP for the G5. Maybe that'll give us some leads?
[G4 Q&A, Help & Troubleshooting] shiboby:
hope in one hand, poop in the other. See which one fills up first ;)
[G4 Q&A, Help & Troubleshooting] shiboby:
has anyone tried this? http://www.unlockphonetool.com/unloc...ode-generator/

I'm in the last leg of my master thesis otherwise I would
[G4 Q&A, Help & Troubleshooting] gie62001:
This has nothing to do with unlocking of bootloader. It's only sim unlock and even that looks shoddy. Most probably would just get your IMEI details to use for something else.
[G4 Q&A, Help & Troubleshooting] xavierlangevin1:
The 812 MB

The 811 MB

I've notice that the MB is missing a fuse on the 811
[G4 Q&A, Help & Troubleshooting] xavierlangevin1:
Can some tester could sacrifice is device for testing ? I need someone to find the 811 10A or less than 10H to flash into any other G4 that is not unlock. I've tested the 811 10H but it's got the anti rollback version that brick my phone (812) so we need the 10A
[G4 Q&A, Help & Troubleshooting] jal3223:
I'm on the original shipping firmware for Verizon. I would be willing to test whatever if you still need someone.
[Shield Tablet Q&A, Help & Troubleshooting] parsons151185:
Hi everyone!

I'd been having tethering issues with my Nvidia Shield Tablet running Update 3.0 (LMY47H.32256_546.1774). Anyway...

Long story short, I was looking for the Recovery Image and 3.0 has disappeared and all the older recovery images have the same release date, 2015/07/09.

Having built the Tegra AOSP for ST8, I thought I'd look at the repo. And sure enough, there is a new branch!

So hopefully there will be a 3.1/3.0.1 update, with Android 5.1.1 under the hood. Hopefully a factory image will fix my non functional tethering.

I'm going to build rel-st8-l-r5-partner and see how it is.
[Shield Tablet Q&A, Help & Troubleshooting] RaySorian:
I remember looking on Nvidia's forum stating that 3.0 was pulled due to an audio issue on some devices after flashing.
[Shield Tablet Q&A, Help & Troubleshooting] parsons151185:
Seems like I've had 3.0 on my tablet for what seems to be ages.

I've been trying to compile the new branch, but it keeps failing. Made sure I have all the requisite packages installed for Ubuntu with Gnome 15.04.

The new build is 5.1 - LMY47Q, up from LMY47H.

Should know the results in around 90 mins.
[Shield Tablet Q&A, Help & Troubleshooting] NaminatoR1254jaime.sier:
I hope this turns ok.

Because, the tegra note 7 users who installed the LP OTA, report the same issues that were reported by NST users who installed ota 3.0 (sound issues, no OTG, apps optimizing on every reboot)...

Enviado desde mi SHIELD Tablet mediante Tapatalk
[XDA Assist] LunaticWinchester:
im pretty much doomed

i use a motorola moto g 2nd gen 2014 version

recovery TWRP-2.7.1.1

till now i was using the titan prime rom for xt1068 - lollipop

yesterday i tried to flash the cyanogenmod 12.1 nightly titan

i have flashed 3-4 roms before and am not new to the process, i've been using a rooted device for almost an year

yesterday i copied the rom to my external sd card , took backups using titanium backup,did the standard wiping procedures and proceeded to flash the rom. when i tried to flash the rom

it gave me an error E:/ error executing updater binary in zip ' /sdcard1/cyanogenmod12.1 nightly.zip'

at first i thought there was a problem with my rom, so i took out my external sd , put my titan prime rom's zip on it and then did the standard wiping procedures again and tried to flash it

only to get the same error again

now i dont have any os on my device.

when i try to mount the storage on my laptop using the twrp / mount usb storage my laptop doesn't read the device at all.

it doesnt read the device when it is connected through usb cable and the recovery mode is on

however it does read it till it is in the bootloader state as - fastboot titan

as soon as i turn on the recovery it doesnt read

at first i thought it's because i had the rom on my external sd so i searched the internet on how to copy the rom to my internal memory that is 16GB

i got many methods using adb so i installed adb copied it ito c:/adb. then i tried using the adb commands to copy the files

in this tutorial the device is detected while in the recovery mode but mine doesnt get detected. i have installed the proper drivers , motorola device manager etc but nothing seems to work. i need help ASAP
[XDA Assist] Razvan:
Hi there,

All you need is in this threads:

G 2014 General -> [INDEX] Start here....

[WINDOWS TOOL][ROM][Lollipop][5.0.2][XT1068] Stock Android 5.0.2 Easy Installer

For more questions please use this forum : G 2014 Q&A, Help & Troubleshooting

Good luck
[Android Studio] Sopnohin_pothik:
Dear Dev Sir,

I want to khow that, How current recovery IMG backup in my android phone kitkat Walton Primo GH3 I khow that, rebrand from Giyone CTRL V4S..

Dear DEV sir please help me How can I back up my current recovery IMG..plz help me sir.
[Wing, P4350 Herald Upgrading] mrebean:
Somehow by trying out different dialpads, one has managed to stay. It looks like the default one, just smaller. I've tried installing other ones to replace it, both on storage card and on the phone memory to no avail.

Where do these files reside so I can just manually remove them?

Thanks in advance.

jR
[Wing, P4350 Herald Upgrading] neonstorm:
Check this registry key:

HKLM\Security\Phone\Skin

Try toggling 'enabled' to 1. If it's set to 0, I believe it displays the WM6 default keypad which has smaller keys than the default TMO one.

Hope it helps...

Ryan
[Samsung Galaxy Core Prime Questions & Answers] shatty:
Can the SM-G360V be used on T-MO? I have been out of the scene for a while. I tried google and couldn't find the answer. Will the 4G/LTE work? I don't wanna go spend $$ to unlock if it wont work. Thanks
[XDA Assist] SPIKYMAN1998:
So i recently bought note 4 from tmobile and tried rooting it using cf auto root but after succesfully passing odin i go into recover to instal twrp but i cant because it still in stock recovery mode....i need help!!!
[XDA Assist] Clark Joseph Kent:
Please read the Stickies....
[Android One (First-Generation) Cross-Device Genera] TanRemson:
Anyone built already a flashable .zip file or .img files for Android One (Sprout) smartphones? Anyone can upload the latest version here? I'm not of a techy type of person but it seems like a lot of Android One users are looking for an easy installable ROM for their Android phones. Like this for example: http://xdaforums.com/general/xda-assist/flashable-firefox-os-rom-android-one-t3160682

I found this link: https://github.com/b2g-sprout/ however a lot of them are not technically enough and even I don't even know what to do with these files even though I have already tried using Firefox's instructions and some other articles on the Web about Porting FFOS. Full instructions on how to build Firefox OS from the files on the given link would also be appreciated. And also an example on how to update them for the latest version. Thanks for all willing to help...
[Android One (First-Generation) Cross-Device Genera] F4uzan:
Technically, the files from b2g-sprout github can be directly built after syncing AOSP source code.

The guide itself is mentioned in the B2G readme file here

https://github.com/b2g-sprout/B2G/blob/master/README.md
[Android One (First-Generation) Cross-Device Genera] TanRemson:
Building HELP!!!

Can you give me specific instructions then on what to do with these files then? Please. :( I tried extracting "B2G" and "B2G-manifest" on my Home Directory then the "device-sprout" to the folder inside B2G: "device/google/sprout/" and I have no idea what to do to the others but when I try "./config.sh", it keeps on telling me that "sprout.xml" doesn't exist which I have no idea why. I am still very confused and hoping that you can solve this thing. :confused: I would also want to help and upload builds if ever, posting it on those users asking for a Firefox OS build for their Android One phones. Hope you can help us... :angel: I'll note you on those posts also so don't worry. :good: I will appreciate it also if you are to upload an already built rom for Firefox OS 'coz I have searched every corner of the internet already and there's not yet a version for Sprout. Thank you very much... :o
[Android One (First-Generation) Cross-Device Genera] TanRemson:
Still Searching

I have been searching everywhere for weeks now but still no answers. Anyone can help? Sorry but I'm really a big fan of the Open Web... :( And would really want to create apps for FFOS. :crying:
[P3600 Software Upgrading] andytof47:
Hi Just a quick query ------ any ideas if there is a beta nix for trinity in the pipline soon or do we just put that aside and come idea to see how it all is in 12 months
[P3600 Software Upgrading] andytof47:
no info???????? no pulse?

Just might be helpful as an general update for myself and the others who desperatly await a decent operating system for their Trinity.......

Thanks all
[P3600 Software Upgrading] Rudegar:
http://wiki.xda-developers.com/index.php?pagename=Xanadux

when there is news that page would prob be the place it would be shown

looks like they need people maybe it could be you? ;)
[P3600 Software Upgrading] andytof47:
can't program can test

well i can't program but I would test it till the cows come home ------ I will wait

Cheers for the funny signature ---- I also come from a long line of jedi's ----- jedi taxi drivers:)
[P3600 Software Upgrading] kimusan:
I started working on a linux port for trinity. I nearly got the kernel running but there was some problems with the uart driver (if I remember correctly) that prevented it from loading completely.

I had to stop working on it due to lack of sparetime to use on this project.
[P3600 Software Upgrading] andytof47:
I will weep uncontrollably

That hurts more than you will ever know:eek:

but I will let anyone know that any effort that is spent towards this is appreciated and time very well spent... I'm sure your work wasn't in vain

cheers
[P3600 Software Upgrading] hotplainrice:
Needing linux, feeling WM6 is limiting
[P3600 Software Upgrading] nealed:
check out news on ubuntu mobile - they are hoping to release a distrib later this year working on as many smartphones as possible
[P3600 Software Upgrading] BiBite:
Hi,

Your work is quite intersting !

Would it be possible you publish the kernel version, the patches and the .config you used in the wiki ?

Thanks ^^