yashsingh1/xdaforums huggingface dataset:
[HTC One E8] griff.allison21:
Yesterday I went through the process of unlocking my bootloader, rooting the phone and then S-OFF via Sunshine. After completing these steps, I attempted to flash a RUU (http://xdaforums.com/one-e8/development/ruu-sprint-htc-one-e8-1-22-651-1-stock-t2952981) - the reason for this being I am attempting to unlock my SIM for use on another carrier. So, I was able to successfully flash the RUU via fastboot commands (followed these instructions: https://www.youtube.com/watch?feature=player_embedded&v=ybu7fZa41so) and then rebooted the device. Upon rebooting the device, I was able to use the phone for 10 seconds or so before it automatically reboot itself. This happened several times before the bootloop stopped and I was able to use the phone just fine. Thinking everything was working, I proceeded to the next step in unlocking my SIM (outlined here: http://xdaforums.com/one-e8/develop...51-1-stock-t2952981/post57116360#post57116360) which was to flash a zip (found here: http://xdaforums.com/atta...1&d=1417208962). Upon flashing the zip, I was unable to successfully reboot the phone. Instead, I am only able to access the bootloader and TWRP recovery.

I am currently at a loss for what to do. One issue is that I may have attempted to flash the RUU and subsequently the zip while my phone was low battery (roughly <15%; I've read this can cause issues but I'm not 100% sure). I am currently charging my phone in hopes that this may solve the issue but I am not entirely optimistic.

I realize that I am an idiot for not having a stock rooted TWRP backup - I actually did create one (albeit on my internal storage) which was subsequently deleted when flashing the RUU. I have not been able to find a stock rooted backup of the Sprint HTC One E8 (perhaps I am not looking in the right places), could anyone help me find this? Or should I try to flash the RUU linked above again (am I wrong in assuming this would serve as a custom recovery)?

I am concerned that I may have bricked my phone...so any help at all would be appreciated.
[HTC One E8] parthasd:
Hope I can help. First the good news- you have not bricked your phone. Now the (not so) bad news- you are in a bit of a mess but will be able to come out with a functional phone.

It sounds like you have a Sprint phone and tried to flash another RUU.

I need to know exact model number of your phone, MID, CID stock ROM etc and what RUU you had tried to use.

The easiest way would be to find a stock RUU that your phone had come with, rename it to 0PAIJMG.zip and put in the root of an external micro sd and reboot the phone in bootloader and let the phone reinstall the original RUU (as you have already done once).

Before, you try to flash another RUU make sure you have superCID and have modified MID as well ( there are plenty of discussion on this in this forum).
[HTC One E8] griff.allison21:
Alright, so after a day of tinkering with things I think I may have resolved the issue (but not achieved my goal of unlocking the SIM).

I ended up getting superCID, and flashing the current RUU for the Sprint HTC One from HTC's website. The phone is now up and running on 2.32.651.7. I did this by downloading the .exe. file straight from HTC's website and following the utility instructions. I was previously trying to manually flash 1.22.651.1.

So my phone is up and running, however I would still like to unlock the SIM. I am following the instructions in the link I provided in my previous post (http://xdaforums.com/one-...0#post57116360) but am somewhat hesitant to re-flash the 1.22.651.1 RUU as instructed in the guide considering what I just went through. I know that I would be able to just revert back to my current RUU which is stable, but I'm not inclined to go through with the process if it is just a dead-end. Would I be able to go through with the instructions (specifically everything including flashing the zip file from http://xdaforums.com/atta...1&d=1417208962 and onwards) and still be able to successfully unlock the SIM from the 2.32.651.7 RUU? Or do you think it specifically requires the 1.22.651.1 RUU to work?

I'm not familiar with MID or why I need to modify it, could you elaborate or should I just look into other forum posts?

As for my phone info, here you go: (I used the command fastboot getvar all; not sure if this is what you wanted)

(bootloader) version: 0.5

(bootloader) version-bootloader: 3.19.0.0000

(bootloader) version-baseband: 1.09.20.0209

(bootloader) version-cpld: None

(bootloader) version-microp: None

(bootloader) version-main: 2.32.651.7

(bootloader) version-misc: PVT SHIP S-OFF

(bootloader) serialno: FA4AASP00761

(bootloader) imei: 990004299346803

(bootloader) imei2: Not Support

(bootloader) meid: 99000429934680

(bootloader) product: mec_whl

(bootloader) platform: hTCBmsm8974

(bootloader) modelid: 0PAJ50000

(bootloader) cidnum: 11111111

(bootloader) battery-status: good

(bootloader) battery-voltage: 0mV

(bootloader) partition-layout: Generic

(bootloader) security: off

(bootloader) build-mode: SHIP

(bootloader) boot-mode: FASTBOOT

(bootloader) commitno-bootloader: d0c41a5b

(bootloader) hbootpreupdate: 11

(bootloader) gencheckpt: 0
[HTC One E8] griff.allison21:
OK so I'm pretty sure what is causing problems is the step outlined here - "flash the attached zip http://xdaforums.com/atta...1&d=1417208962". Apparently the file is supposed to grant write access to modify an APK file and allow the phone to be rooted, however, whenever I flash the zip file from TWRP recovery, I am no longer able to boot into my OS...instead I boot straight to recovery. Not sure why this is - any help would be appreciated!
[Sony Cross-Device General] Malmanian:
WARNING DISCLAIMER: The lib zip patch in this post is only intended for the .546/70 (Z2/Z3/Z3C) firmwares and might cause video related bugs and recording errors on other devices or newer/older firmware versions. It will not fix the CVE-2015-3864 vulnerbility or the upcoming reported CVE-2015-6602 (Stagefright 2.0) at this moment.

* At this point it is highly recommended to update to the latest "23.4.A.1.232" firmware or newer.

Only use the .580 libs if you are still on .546:

(For those of you that are still on .546 custom ROMS and perhaps want to stay on that version until Sony releases Android 6.0 Marshmallow, avoid using any newer libs than .580.)

---

Greetings! (PATCH UPDATED 2015-09-15 with CVE-2015-3864 vulnerability fix)

* Sony has started to roll out the 23.4.A.0.580 stock ROM as of today (2015-08-12) for Z2, Z3 and Z3C in some regions in Europe in order to fix the “Stagefright Vulnerability”.

Info: http://www.xperiablog.net/2015/08/1...arts-seeding-for-xperia-z2-z3-and-z3-compact/

* For Rooted users I find it a bit unnecessary to download a complete 1.4GB Stock ROM just for this minor fix.

(Non-Rooted users have no other choice than to wait for the official OTA release and update their ROM again)

* This patch is only 2.6MB in size and updates all the 35 libstagefright libraries to the latest version from the Stock Sony 23.4.A.0.580 ROM - 2015-08-12 along with CVE-2015-3864 vulnerability fix from the latest Sony v14.6.A.0.368 firmware 2015-09-15

* This patch should work on Z2/Z3/Z3C devices as long as you are on a stock Sony v5.1.1 Lollipop firmware. (It might perhaps also work on some other newer Sony devices since they usually do share the same libraries.)

* I have tested it and flashed it on my rooted v5.1.1 stock 23.4.A.0.546 ROM and the “Stagefright Vulnerability” is now fixed as you can see in the screenshots below.

---

1. Before the update download and install the “Stagefright Detector App” by Zimperium INC. from Google Play Store or from the url below and test your device for the “Stagefright Vulnerability” and re-run the test after the update:

https://goo.gl/T6cHwR

Stagefright Vulnerability before the update:

Stagefright Vulnerability after this patch: (img updated 2015-09-15)

Please note that

CVE-2015-3864

vulnerability is still not patched due to reported video related bugs.

---

Flash in recovery

and Reboot, (you do not need to wipe the cache)

(NOTE! Do not forget to make a BACKUP before flashing this since it has been reported that it causes bootloops on older KitKat and 5.0.2 ROMS)

---

* KitKat and 5.0.2 Lollipop users please read my post in the url below for a temporary workaround fix for this vulnerability on your device.

http://xdaforums.com/showpost.php?p=62319260&postcount=21

Best Regards
[Sony Cross-Device General] Marília de Oliveira:
thanks :D
[Sony Cross-Device General] ogunja:
Thanks Bro. Congrats

Working fine on my Xperia Z3 Single ?
[Sony Cross-Device General] bruno$0:
Thx

Works like a charm onde Z2 Single!:D
[Sony Cross-Device General] stevuna:
Thanks for the update, appreciated. tested after the update, the patch is correct, not vulnerable. Thanks for the work and the share. Z3 compact 5.1.1
[Sony Cross-Device General] Guto ViP:
Thank you! Z3 D6643

Enviado de meu D6603 usando Tapatalk
[Sony Cross-Device General] AnGrY sCoTsMaN:
Just a heads up for you guys on custom roms. Slimlp and slim based roms (twisted slimlp) had this patch applied back in July! Just to clear up any concerns
[Sony Cross-Device General] FlintStoned-:
Thanks for this patch. Flashed it with success. But I want to know, are you sure that their are no other fixes in the update then just this Stagefright Vulnerability?
[Sony Cross-Device General] Malmanian:
A full changelog for 23.4.A.0.580 is unfortunately not yet available from SONY. During the past week Google has been silently forcing all the major manufacturers to update their software to fix this bug as soon as possible since this affects ~95% of all Android users.

These silent updates usually does not contain any other additional features or fixes without some internal beta testing so my guess is that this is just a quick update to fix this Stagefright issue.

More info at XPERIA blog:

http://www.xperiablog.net/2015/08/1...arts-seeding-for-xperia-z2-z3-and-z3-compact/
[Sony Cross-Device General] [NUT]:
[MENTION=4440037]manipars[/MENTION] and anyone else interested

On my Z2 with

23.4.A.0.546

I have successfully patched the ROM with the zip you made for the

Z3C

:good:

So, you can create a topic in the Z2 boards to further distribute it :highfive:
[Sony Cross-Device General] Malmanian:
Thanks for the report and reply fellow xda members. :cowboy:

I am not really sure if I posted this on the right forum section. Can an admin/moderator please perhaps move or redirect this thread to “Cross-Device Development Themes and Apps for Sony Devices” section if it suits it better.

This patch should work on all the Z-series on Lollipop and perhaps on some other newer Sony devices since they usually do share the same libraries.

You only need to update 4 libstagefright files in the (system/lib) folder in order to fix this vulnerability issue

* libstagefright.so

* libstagefright_soft_aacdec.so

* libstagefright_soft_aacenc.so

* libstagefright_soft_hevcdec.so

In this patch all the 35 libstagefright are updated from the latest Sony patch 2015-08-12 just to be on the safe side.

!! This might cause a bootloop for users that are still on KitKat. You could try to update the 4 files mentioned above manually and see if it works. (A backup before flashing is a must just to safe incase this causes a bootloop).

Please report back so that we can inform other users that are still on KitKat regarding this issue.

Best regards.
[Sony Cross-Device General] matt4321:
moved for you ;)
[Sony Cross-Device General] serajr:
Thank you so much!!

It did fix perfectly the vulnerability problem in the 3 devices I own (Z3, Z3C, Z2T), all of them running 5.1.1 .546 fw!!
[Sony Cross-Device General] deserted:
Same here. Working fine on Z3 D6603 23.4.A.0.546
[Sony Cross-Device General] Metallijim:
5.0.2 eXistenZ Y 2.0 Bootloop

Just tried it on above mentioned ROM, caused bootloop (went to Sony logo, no further).

Restoring a backup now, then I'm going to try just the 4 files mentioned in post 11.

I'll report soon.

EDIT: Nope Bootloop as above.
[Sony Cross-Device General] Malmanian:
Thanks for the information regarding this.

I wasn’t certain that this would cause a bootloop on 5.0.2 and older firmware’s, that was just a guess since the libraries has changed a bit in 5.1.1 but now we know for sure.

I’ll update the first post to inform others that this patch is only for all the Sony devices that are already on 5.1.1 Lollipop stock roms. Cheers
[Sony Cross-Device General] moonryder:
is there a way to get this patch for LP 5.0.2 ? This would be awesome
[Sony Cross-Device General] [NUT]:
I personally consider it most unlikely...

Maybe someone can grab the patched sony aosp versions for 5.0.2 and test them, because there is little chance sony will release anything older then 5.1.1 from now on...
[Sony Cross-Device General] Guto ViP:
I do not know if it is related to the patch, but some "small apps" my Z3 gone, I noticed now when trying to use the "screen shot" that was previously present in the device.
[Sony Cross-Device General] Malmanian:
With the screenshot small app do you perhaps mean the “Active Clip” small app?

Are you on a complete stock sony 5.1.1 rom for your Z3?

* I’m not really sure if this is related to this patch. Try first to wipe your cache and dalvik cache and reboot so that all the apps can rebuild again and see if it helps.

* If it does not help and if you plan to revert back to your previous backup before flashing this, please inform us then if all your small apps are visible again without this patch.

* If that is the case I’ll upload a lighter patch with only 4 updated libstagefright files instead of 35 for Z3 owners.

Other inputs from other Z3 owners would be appreciated regarding this issue since I can only test it on my Z3C. Cheers

* libstagefright.so

* libstagefright_soft_aacdec.so

* libstagefright_soft_aacenc.so

* libstagefright_soft_hevcdec.so
[Sony Cross-Device General] Malmanian:
[MENTION=4904057][NUT][/MENTION] is right, I don’t think that we will see an official fix for 5.0.2 stock Sony roms anytime soon and KitKat roms might even be completely ignored by most manufacturers that already offer Lollipop firmwares for their devices.

There is a few workarounds for KitKat users and Lollipop 5.0.2 users that you could try for now until better methods are available:

Method 1.

(Important)

Open your Sony Messaging app and go to the settings and disable “MMS auto download”.

This option should always be off as default in my opinion as safety. And anytime you receive an MMS from an unknown number that you do not have in your contact list, delete it instead of opening it, and as long as you do not press "download" button in the MMS message you will be fine from any harmful codes.

If you have "MMS auto download" enabled (as it is by default) then it will automatically download all the MMS contents without any user input and that includes harmful attacks such as this vulnerability.

Method 2.

(Optional)

You can also completely disable stagefright in your system/build.prop.

This will make your device invulnerable to stagefright attacks directed to your mobilephone-number but it will also disable some MMS features on your device. It is not a good solution but it is better than leaving your device vulnerable as it is.

a) Open your build.prop

b) Seach for the lines mentioned below in red

media.stagefright.enable-player=true

media.stagefright.enable-http=true

media.stagefright.enable-aac=true

media.stagefright.enable-qcp=true

media.stagefright.enable-fma2dp=true

media.stagefright.enable-scan=true

c) Set them all to false

media.stagefright.enable-player=false

media.stagefright.enable-http=false

media.stagefright.enable-aac=false

media.stagefright.enable-qcp=false

media.stagefright.enable-fma2dp=false

media.stagefright.enable-scan=false

d) Save and Reboot, your device should be safe for now until better official fixes are released for older firmwares.

Best Regards.
[Sony Cross-Device General] @soka:
Thank you...

Works like a charm,

Z2 D6503 5.1.1 FW
[Sony Cross-Device General] Depump:
thank you for your file

i don't full flash for z3c

:D:D:D
[Sony Cross-Device General] km8j:
Would just like to clarify something. Can I use this http://xdaforums.com/z3-compact/general/how-to-root-backup-drm-keys-t3013343 and then the fix in this thread?
[Sony Cross-Device General] papatsonis:
vulnerability 3864 seems still open, in .580fw (at least in the .zip update, but i think it would be the same on .580 fw also)
[Sony Cross-Device General] zxspectrun:
Do not work on z2
[Sony Cross-Device General] :
The 570 or 580 firmwares have this issue fixed.
[Sony Cross-Device General] vkevin16:
Thanks for the patch, installed properly on Z2 D6503 but it still shows the CVE-2015-3864 is still vulnerable.
[Sony Cross-Device General] mj084:
Yes same here:

Stagefright Detector App was updated and showing now the not fixed CVE correctly....

http://blog.exodusintel.com/2015/08/13/stagefright-mission-accomplished/

Think we have to wait for Google/Sony....
[Sony Cross-Device General] Malmanian:
I also noticed this last night when I updated the “Stagefright Detector App” in the Play Store. This also happens on a completely clean 23.4.A.0.580 ROM install and has also been reported on other Galaxy flagships with the latest official firmware's and fixes. I find it a bit strange that suddenly all the flagship devices are vulnerable again out of nowhere despite just being updated recently by the manufacturers.

My 0.2cents:

“Zimperium INC.” (the developers of the detector app) is a business after all and also a data collector and they are doing their best to be under the spotlight for as long as possible. And this latest app update will bring them back in the news again. They might as well have known about this latest reported "CVE-2015-3664" vulnerability all this time but just didn't report it at first.

Most users usually uninstall such apps when their device is shown as "Not Vulnerable", now it will be installed by millions all over again.. hmm....

They have now also added buttons to redirect users to their own website and blogs. Who knows they might add some "ads" in the next update as well.

Google really should officially release their own Stagefright vulnerability detector app in the Play Store, especially since this is a huge bug.
[Sony Cross-Device General] igotroot:
T-mobile d6616

Must be nice to fix a Z3 when its not on Tmobile.....

I'm on 4.4.4, and didn't want LP...... But now I apparently need to get LP... But oh, that's Right Tmobile doesn't have 5.1.1 for its. Z3. Sucks for us.
[Sony Cross-Device General] zxspectrun:
i know thx, i'm on .546 only i wanted to inform
[Sony Cross-Device General] Malmanian:
UPDATE:

Google has released another Stagefright vulnerability patch recently to fix the latest reported “CVE-2015-3864” vulnerability.

Nexus devices will get it first. At this point we just have to wait for Sony to release another patch. Best regards

More information:

http://www.pcworld.com/article/2971332/google-has-another-try-at-patching-stagefright-flaw.html
[Sony Cross-Device General] :
Oh, so 570 firmware is useless now. It failed terribly after Zimperium updated their app.
[Sony Cross-Device General] matt4321:
What it is to do with is that ZIMPERIUM found all the flaws (stagefright) and provided patches but soon after exodus researchers found a flaw in one of the patches and it turned out that the CVE the patch was fixing was slightly more complex than originally thought and it was given a new CVE identifier. That's why the 2nd release of the app has and tests for one extra CVE. It also explains why a 2nd, later, official patch is making its way to devices.

Zimperium aren't trying to pull a fast one for publicity don't worry. They're good and trusted researchers.
[Sony Cross-Device General] danytrial:
Me too

Enviado desde mi D6653 mediante Tapatalk
[Sony Cross-Device General] Malmanian:
[MENTION=4393511]matt4321[/MENTION] : thanks for the info and clarification; I was a bit harsh Zimperium and it was my mistake because previously lots of similar companies on both the PC platform and Android have used scare-tactics to gain a huge user-base and advertise their services but Zimperium defenitley seems legit as well as this entire Stagefright vulnerbility which Google should be ashamed of.

---

UPDATE: A patch for the “CVE-2015-3864” vulnerability has already been released for some Nexus devices recently, we only need to update 1 single libstagefright file to fix this issue for our Sony devices. I’ll try to use the file from the latest Nexus firmware to see if it is compatible but I’m certain that it will cause a bootloop. I’ll update the first zip-patch as soon as I get a complete “Not Vulnerable”status for my Z3C.

Best regards
[Sony Cross-Device General] whalesplaho:
Thanks for tha post... we do be looking forward to yur update!!! :good::good::good:
[Sony Cross-Device General] bastardociccio:
news ?
[Sony Cross-Device General] Malmanian:
Sorry for the lack of updates. I have tried everything without success.

Unfortunately we cannot not use the latest Google patch directly, that is only compatible if you are on AOSP or CM nightly based roms and not the stock Sony rom. Some of the libstagefright* files are device specific and heavily modified by the manufacturers. Using any other version will cause an infinite bootloop.

Sony should roll out the next .59x firmware for Z2/Z3/Z3C anytime soon during this or next month now since they have already signed it.

I would recommend using the application XperiFirm (in the url below) to check the Sony servers for the latest firmware available. (Select your device and click the “Check All” button to see the firmware versions). It should be newer than “23.4.A.0.580”

http://xdaforums.com/crossdevice-dev/sony/pc-xperifirm-xperia-firmware-downloader-t2834142

Info: On the bright side, this latest reported Mp4 MMS vulnerability (CVE-2015-3864) is not as severe as the previous two that is already patched for our devices.

Only the Zimperium app currently reports it. Most other Stagefright detector apps doesn’t. For example if you use the “Lookout Mobile Security” Stagefright Detector in the url below:

https://play.google.com/store/apps/details?id=com.lookout.stagefrightdetector&hl=en
[Sony Cross-Device General] Malmanian:
UPDATE: Sony has rolled out a new firmware for Z4/Z3+ (28.0.A.8.251) recently (2015-08-28), and strangely with Android 5.0.2 version but with updated stagefright libraries.

* The patched files are not compatible with Android v5.1.1 and causes a bootloop, since they are made for an older version of Android (v5.0.2).

* Unfourtunatley I do not have a v5.0.2 stock sony firmware installed to test this patch.

* I’ll temporarily upload the z4 patch here with this post for those of you that are still on 5.0.2 and want to test these updated libraries on your device.

(Please do not forget to make a BACKUP before flashing this since there is a slight chance that it might cause a bootloop even on v5.0.2)

* Feel free to inform the others if the Z4 patch works on your Z2/Z3 with the stock 5.0.2 firmware so that we can update the first post with the correct info for other 5.0.2 users.

Best regards
[Sony Cross-Device General] fastlone:
After flashing your patch from first post (Z3C, 23.4.A.0.546) my device is still vulnerable.
[Sony Cross-Device General] DHGE:
Failure on Tablet Z4

[MENTION=4440037]manipars[/MENTION]

I flashed your TEST via flashtool:

no bootloop but "perma"-boot (new for me)

I am on 28.0.A.7.24.

Back to flashtool ... :crying:
[Sony Cross-Device General] mj084:
[MENTION=3596156]fastlone[/MENTION]

Read some Posts before!

:p