yashsingh1/xdaforums huggingface dataset:
[Sony Cross-Device General] DHGE:
in your TEST only lib libraries included - see my lib64 in attachment

[MENTION=4440037]manipars[/MENTION]

Included are the stagefright libs in 32 and 64bit binaries as found in the SGP712 update.

They should work for the Z3+ phone too.

EDIT:

I copied them into lib and lib64

Unfortunately the system is stuck on booting.

E/AudioService( 1165): Media server died.
I/ServiceManager( 1165): Waiting for service media.audio_flinger...
....
E/QC-QMI ( 587): qmi_client [587]: unable to connect to server, errno=[2:No such file or directory], attempt=52
I/ServiceManager( 1165): Waiting for service media.audio_flinger...
W/linker ( 1391): libsonydseehxwrapper.so has text relocations. This is wasting memory and prevents security hardening. Please fix.
W/linker ( 1391): libsrsprocessing.so has text relocations. This is wasting memory and prevents security hardening. Please fix.
E/QC-QMI ( 587): qmi_client [587]: unable to connect to server, errno=[2:No such file or directory], attempt=53

Does not matter if SELinux enabled or not.

I vaguely remember they changed something in the audio service in the AOSP. So these changes seem to be in the .251 release too.

Conclusion:

Stagefright patch for Z3+/Z4 is futile with only the libfiles.

We better wait for root on .251 ->

http://xdaforums.com/showpost.php?p=62548049&postcount=43
[Sony Cross-Device General] Malmanian:
[MENTION=6774113]DHGE[/MENTION] Thanks for the information and for the helpful posts & attachment file, I completely forgot about the x64 libraries, my mindset is still stuck on the z2/z3 32bit 2014 era :). I’ll report back after some testing. Best regards
[Sony Cross-Device General] fastlone:
[MENTION=1239635]mj084[/MENTION] Did it just after sending my previous post, sorry for that. One week without computer (holidays) was enough to forget XDA rules. :(
[Sony Cross-Device General] apSlain:
Hmm, nothing for the D5833 yet nor the CVE-2015-3864 vulnerability. That's a little disappointing from Sony :\ Then again, I don't know much about the difficulties of implementing this fix.
[Sony Cross-Device General] qwertyq:
Is it safe to use on Z3TC 5.1.1 (rooted stock)?
[Sony Cross-Device General] okij:
Yesterday firmware 23.4.A.1.200 has been certified for the Z2 and some other Xperia devices (no D5803 / Z3c yet).

Let's hope that it will provide all known stagefright vulnerability fixes! :fingers-crossed:
[Sony Cross-Device General] dulehak:
I try "TEST - Xperia Z4 v5.0.2 Stagefright lib update patch 2015-08-29.zip" on Z1 Compact 5.0.2 and stuck on boot animation.

I try manualy push all files except libstagefright.so and phone boot but still Stagefright Vulnerability, when I push only libstagefright.so phone not boot.
[Sony Cross-Device General] Malmanian:
INFO:

This is the downside of Sony’s 6 month release cycle, outdating their phones quickly and focusing all the development resources on the latest flagships. Xperia Z3+/Z4 is still on Android v5.0.2 and already put on hold after the Z5 announcements.

The stagefright vulnerability is completely fixed in Android Marshmallow v6.0 by Google and Sony currently seems to focus on to bring that version to the entire Z-series as well as update all the Sony apps with a lighter Material theme instead of patching the old firmware cross all devices. (We might still receive a final quick-fix update for Lollipop 5.1.1 by Sony before v6.0)

To be fair Sony already fixed first 2 reported stagefright vulnerabilities very quickly with the 23.4.A.0.580 firmware but that has strangely only been pushed to 3 countries so far (UK/Spain/Austria), the rest of the world is still stuck on the old 23.4.A.0.546 firmware.

* Other major manufacturers seem to follow the same path. For example if you mail or call the Samsung Galaxy Support Centres regarding the latest reported CVE-2015-3864 stagefright vulnerability, they will just advice you to disable Auto Retrieve MMS and to not open any MMS messages from numbers outside your contact list until the firmware is updated again.

---

[MENTION=4123580]dulehak[/MENTION] & [MENTION=6774113]DHGE[/MENTION]: Thanks for the updated info, I’ll remove the TEST zip patch since it seems to be unusable for devices on v5.0.2.

[MENTION=4916555]okij[/MENTION]: Thanks for the info, that firmware seems very new and just certified a few days ago, hopefully they have now patched the latest reported CVE-2015-3864 vulnerability but I'm not so hopeful anymore, specially when considering that other manufactures are mostly also ignoring this as well (with a few exceptions of course).

It should work on your v5.1.1 Z3, but it only fixes 2 out of 3 reported Stagefright Vulnerabilities. CVE-2015-3864 is still not fixed as of this date.

Please do not forget to create a backup before patching.
[Sony Cross-Device General] Malmanian:
PATCH UPDATE: (For CVE-2015-3864 vulnerability)

Sony released a new 5.1.1 firmware for Z1 v14.6.A.0.368 and finally fixing the final reported CVE-2015-3864vulnerability.

This patch is for those of you who have already used the previous patch in the first page. Please create a backup first and also note that it is only for v5.1.1 stock firmwares. (for example 23.4.A.0.546 or 23.4.A.0.570 / 580). I'll update the patch in the first page soon.

Please report any issues on your device (such as bootloops) along with additional info about your firmware version and device model to warn other users.

Best regards

/EDIT: ***PATCH ATTACHMENT TEMPORARILY REMOVED DUE TO REPORTED BUGS, WILL BE UPDATED ON MON.21.SEP***
[Sony Cross-Device General] kael2404:
Zimperium app v4.0 shows that XZ 5.1.1 is fully affected in every 6 bugs lol
[Sony Cross-Device General] theduke7:
true, well this fix work for XZ 5.1.1
[Sony Cross-Device General] Malmanian:
[MENTION=4641150]kael2404[/MENTION] & [MENTION=3927764]theduke7[/MENTION]:

6 out 6 vulnerabilities is very bad indeed for XZ, hopefully Sony will address your device officially soon.

Theoretically this patch could perhaps work on your XZ as long as you are on a stock v5.1.1 Sony Lollipop firmware since Sony devices usually do share the same libraries, at least when it comes to Z1/Z2/Z3/Z3C. Unfourtunatley I’m not really sure about XZ.

Please create a backup before testing the patch in the first page in case of bootloops and report any issues to inform other users with the same device as yours. Cheers
[Sony Cross-Device General] Jackos:
This works just fine on the Z2 (.546/.570). Thanks for the update :)
[Sony Cross-Device General] theduke7:
at least for me it didn't work, phone stuck at boot animation ...

do you think xposed has something to do with it? 'm asking because after i restored the phone Xposed was disabled.
[Sony Cross-Device General] Malmanian:
Thanks for the info. I don’t think that it is has anything to do with the Xposed framework. It just seems that XZ doesn’t share the same libstagefright.so file with Z1/Z2/Z3/Z3C even when on v5.1.1.

Xposed is currently behaving a bit strangely on 5.1.1 after a backup restore and sometimes the xposed framework has to be flashed again. rovo89 will minimize all these bugs for 5.1.1 and 6.0 soon.

I personally don’t use Xposed framework anymore due to security reasons since I use my device as a working phone to access my bank and other sensitive info etc.

Xposed is fine as long as you are careful with what modules you install and only install modules from trusted xda developers. Some third party modules leave the system wide open to outside attacks and data collectors.
[Sony Cross-Device General] Dilesh Perera:
Works well in my Z2 with 5.1.1 (580)
[Sony Cross-Device General] casouzaj:
Working flawlessly on my Z3C running 5.1.1. Thanks a lot!
[Sony Cross-Device General] Pandemic:
[MENTION=4660353]Dilesh Perera[/MENTION]

Which zip did you flashed ?

Just curious ^^
[Sony Cross-Device General] Dilesh Perera:
http://xdaforums.com/showpost.php?p=62832801&postcount=53

this fixed remained vulnerability of CVE-2015-3864
[Sony Cross-Device General] bouvrie:
Hi, I've got an older Xperia ZL C6503 and want the StageFright vulnerability fixed. All I can do for now is flash the latest Android 5.1.1 (firmware 10.7.A.0.222). However, that firmware reportedly doesn't fix the vulnerability.

I found this thread through an article titled 'Recovery Flashable Stagefright Fix for all Sony Xperia devices' , which could possibly have too popular a title? Or could your fix perhaps work on my Xperia ZL device as well?
[Sony Cross-Device General] awert_65:
Hi ! I've tested the patch flashing to ZL 5.1.1 Stock Rom, and it was stuck on boot animation : ( Maybe it do not support the spec of CPU / hardware, it needs to be recompiled from source code to get supported to the older Z chip's one
[Sony Cross-Device General] AlJeane20:
stock up on video when I try to forward the video on mx player

---------- Post added at 04:32 AM ---------- Previous post was at 04:17 AM ----------

stock up on video when I try to forward the video on mx player
[Sony Cross-Device General] okij:
Yep, unfortunately I have to confirm that the latest patch breaks the forwarding of videos. :( I tested it with MX player on my Z3c.

Reverting to the older fix re-enables the correct video playback, but of course also brings back the CVE-2015-3864 vulnerability.

Edit: But there also is some light on the horizon: Sony certified 23.4.A.1.200 firmware for Z3c today. :fingers-crossed:
[Sony Cross-Device General] Pandemic:
All works fine on Z3 with the latest zip in post #53 on MWE V3.5.0 and also with playback in MX player etc ^^

Verstuurd vanaf mijn D6603 met Tapatalk
[Sony Cross-Device General] AlJeane20:
working on latest stagefright detector??
[Sony Cross-Device General] Wolfbreak:
It breaks Camera Function to Record Videos on Z3 so its not fully working, better wait for Official Z3 Update.
[Sony Cross-Device General] ninjazin:
Could you please post previous fix, can't find it
[Sony Cross-Device General] okij:
I attached [MENTION=4440037]manipars[/MENTION]' previous fix from 2015-09-12 to this post. :)
[Sony Cross-Device General] panchuckles:
Yes, I can confirm this.
[Sony Cross-Device General] Malmanian:
INFO:

* Thanks for the bug reports regarding the video recording crash and also the MX player bug on some devices with this latest patch.

* The previous patch didn’t have these bugs because the stagefright library is identical in Z2 / Z3 and Z3C due to the same CPU and nearly identical hardware. For this patch unfortunately I used a single file from the latest Z1 5.1.1 firmware in order to fix the final CVE-2015-3864 vulnerability since that was released first in line. That did indeed fix the CVE-2015-3864 vulnerability but unfortunately also caused these video related bugs that I was unware of at that time and for that I'm sorry.

* I will update this patch as soon as Sony releases the 23.4.A.1.200 firmware for Z2 and Z3 devices.

* To be honest I see no use for this patch anymore. The jump from 23.4.A.0.546 to 570/80 was minimum and Sony just rushed that release in order to fix the Stagefright vulnerbility as soon as possible due to the huge media hype about the Stagefright vulnerability at that time.

But this time around with the upcoming 23.4.A.1.200 firmware it definitely seems more than just a quick stagefright fix and might as well contain many other official bug fixes. Sony rarely releases a changelog but that’s my personal guess since they have had a few month between the firmware releases to sort other bugs out. So it would just be best for all of us to update to the latest firmware instead of patching the old one.

Best regards!
[Sony Cross-Device General] dkionline:
Maybe should use all stagefright files from Z1 for full Support.
[Sony Cross-Device General] panchuckles:
.200 is Rolling out :)
[Sony Cross-Device General] okij:
For which region?

Do you already have it? If so, please give it to manipars for extracting the fixed stagefright files! :)
[Sony Cross-Device General] Malmanian:
The complete stagefright library of Z1 was a few files shorter than Z2 and Z3, (31 files instead of 35) and that made me a bit unsure regarding the compatibility of the entire Z1 stagefright library with Z2/Z3.

That's good news and hopefully it will reach most regions soon or by tomorrow :). I just checked XperiFirm and unfourtunatley the latest available firmware for Z2/Z3/Z3C is still .580 as of this moment. Perhaps those with unrooted devices might receive the update a bit earlier directly on their devices.
[Sony Cross-Device General] panchuckles:
http://xdaforums.com/showthread.php?p=62882295

See in Xperia z2 forum, there is a FTF now.
[Sony Cross-Device General] Malmanian:
[MENTION=4135255]panchuckles[/MENTION] Thanks for the thread link, [MENTION=2932798]Einride[/MENTION] that shared the .200 z2 firmware also posted this info regarding the stagefright vulnerability test (see the url below) and I find it very strange since it looks much worst than .546 and 580. Perhaps it might be an early pre-release firmware for Nordic regions only or for users that have signed up as Xperia beta-testers. Hopefully Sony will sort it out soon before fully pushing it to all regions.

http://xdaforums.com/showpost.php?p=62882662&postcount=600
[Sony Cross-Device General] okij:
23.4.A.1.200 firmware for Z3c / D5803 is online

[MENTION=4440037]manipars[/MENTION]: Today [MENTION=5257357]masuods70[/MENTION] posted here the russian 23.4.A.1.200 firmware for the Z3c / D5803. :good:

It would be great if you could have a look if it contains new stagefright files and update your patch! :cool:
[Sony Cross-Device General] Jackos:
As far as I know the .200 update doesn't include any Stagefright patches and is still vulnerable to all exploits.
[Sony Cross-Device General] Malmanian:
[MENTION=856195]Jackos[/MENTION] is definitely correct! I just tested and extracted the stagefright library from the above mentioned Z3C Russian 23.4.A.1.200 firmware (see the img below) and the results are exactly the same as the previously released Z2 .200 firmware with none of the stagefright vulnerabilities fixed :(.

I find this very strange and also wonder why these early firmware releases only show up in Sony PC Companion software and still unavailable in XperiFirm. Perhaps there is a reason for that.

I’ll restore the previous .580 patch in the first page. At least Sony fixed 5 out of 6 reported stagefright vulnerabilities on that firmware and it was bug free. The Z1 5.1.1 stagefright library is completely fixed but that also breaks the video recording on Z2/Z3 devices.

Best regards.
[Sony Cross-Device General] Jackos:
There is already an update that fixes all the exploits. Why not use that?
[Sony Cross-Device General] okij:
23.4.A.1.200 firmware seems to be crap in terms of stagefright vulnerability!

Yes, unfortunately you're right. I was hoping that the .200 update for the Z3c would be better than the .200 update for the Z2 in this aspect, but I was proven wrong:

I downloaded the russian .200 firmware for the Z3c and updated [MENTION=4440037]manipars[/MENTION]' Xperia_Z3C_Stagefright_lib_update_patch.zip accordingly (see attached file), but it contains all vulnerabilities (see attached screenshot).

What are you doing, SONY? Why the **** are the firmwares getting worse in terms of security again?

BTW, recording videos also doesn't work with the new stagefright files, so either there are some other changes inside the new firmware, or maybe the new firmware really is a mistake by SONY.

Edit: After posting this, I saw that [MENTION=4440037]manipars[/MENTION] already was faster than me. :)
[Sony Cross-Device General] Malmanian:
Do you mean the latest Z1 stagefright library from the v14.6.A.0.368 firmware? Unfortunately that also completely broke the video recording capabilities on Z2/Z3 and every time I hit the record button the camera app crashed. That was not worth it just to fix the last remaining CVE-2015-3864 vulnerbility. Hopefully these .200 firmwares are not the final release.
[Sony Cross-Device General] Jackos:
Weird, I'm running this and I have no issues like this... Just checked video recording and it's fine.

Keep in mind I just pushed

libstagefright.so

, but not the other files like:

libstagefrighthw.so; libstagefright_*.so

etc.

Maybe you should try reflashing the ROM and overwrite only the main file.
[Sony Cross-Device General] Malmanian:
Strange, previously I also mixed the libraries and pushed (libstagefright.so) from the latest Z1 firmware and (libstagefrighthw.so; libstagefright_*.so) from Z3 .580 and couldn't record video in the camera app (both normal mode and 4K). Perhaps your other remaining *.so files are from the older .546?

It might also be a region or device specific issue. For example the patch might work bugfree on D5833 and buggy on D5803 etc., some users didn’t have any video releated bugs but others did on the same patch and I find it a bit weird.
[Sony Cross-Device General] Jackos:
I got no idea, I was previously running on .546 libs overwritten by libstagefright.so from Z1 and now I'm running .200 with libstagefright.so from Z1. Both without any issues with the camera, video playback etc.

Why would be the libraries be region dependent? This seems weird, but you might be right after all.
[Sony Cross-Device General] Jackos:
I attached the .200 libs overwritten by the fixed libstagefright.so from Z1.

This is not a flashable file. Let me know if this fixes the video recording issues for you.
[Sony Cross-Device General] okij:
Do you notice any changes in the .200 firmware (e.g. UI, icons, software, mobile radio active bug)?

Could it be that the .200 files that leaked so far are a hoax? But then again, these are TFT files and can't be faked IIRC.
[Sony Cross-Device General] Jackos:
There are some new overlays and there is a minor bugfix. Only NFC fix and lockscreen Sony Clock fix as far as I know (read that on the xperiablog). I did not disassemble the new firmware as I don't have enough time these days.

No, this is not a hoax and this is Sony release. Also, I got my files from the Sony PC Companion application.
[Sony Cross-Device General] Malmanian:
Thanks for the help and attachment, I just tested it and unfortunately the results are the same, as soon as I hit the camera record button the app freezes and then crashes on my Z3C D5803 with this message: (ERROR - Uknown error). The .580 stagefright libraries worked without any issues on my device.
[Sony Cross-Device General] fluffi444:
Does not work for Z3C .580 (stock / SLiM 3.4) - Back to my old 35 libs...
[Sony Cross-Device General] Jackos:
Thanks for your feedback guys. Try to retain your stock stagefright libs and just replace stagefright.so

Let me know if this works! :)

Seems to be a Z3C issue, I'm running this on a Z2.
[Sony Cross-Device General] polik1:
I'd also like to report that flashing Xperia_Z2__Z3___Z3C_v5.1.1_Stagefright_lib_update_patch_+_CVE-2015-3864_vulnerability_fix.zip breaks video recording. I flashed this on Z3 Compact D5803 23.4.A.0.546 Baltic Generic rooted. Really weird :)
[Sony Cross-Device General] okij:
Same here (Z3c running on D5803_23.4.A.0.546_Customized_DE_prerooted), going back to the .580 libs again.

---

Edit:

I tried this now too (.546 stock stagefright libs with .200 stagefright.so), but video recording still doesn't work.

I assume this is the reason.
[Sony Cross-Device General] Malmanian:
* I think the best solution for now is two different patches one for Z2 with a completely fixed stagefright lib and one for Z3/Z3C with the .580 libs with only 1 remaining vulnerability (CVE-2015-3864). I'll attach these files to the first post as well until Sony officially fixes this for all devices.

Many thanks for all the feedbacks and info so far. Best regards.
[Sony Cross-Device General] tRippinthehead:
I have the same problem with video recording crash. Will try revert back
[Sony Cross-Device General] fluffi444:
Looks like that 23.4.A.1.200 will fix nothing...

http://www.carbontesla.com/2015/09/download-23-4-a-1-200-ftf-for-xperia-z2-d6503/

Furthermore I pulled those 35 libs out of 23.4.A.1.200 for Z3C which came avilable over PC Companion.

http://xdaforums.com/crossdevice-dev/sony/pc-xperifirm-xperia-firmware-downloader-t2834142/page132

I decrypeded this with Flashtool, de-sin with UnSin and extracted libs with ext2explore.

And I came to the same result.. ALL Stagefright are open again... wtf.

Actually i don't know if this FW will be final. Or any other region dependencies are there. Or any other libs are needed actually...

Time will tell....
[Sony Cross-Device General] stayawake:
I had to roll back the .580 libs on Z2 too, the patch was causing video issues, including when I was playing games

Enviado de meu D6503 usando Tapatalk
[Sony Cross-Device General] kael2404:
Look that stagefright v3 app shows only one bug but v4 shows ALL bugs on lollipop Xperia Z
[Sony Cross-Device General] Wolfbreak:
For me V4.1 still shows only one vulnerable.
[Sony Cross-Device General] MSpider65:
On my Xperia Z2 D6503, locked bootloader stock Lollipop .546 pre-rooted ROM: the Z2 patch causes camera video crash.

The z3/z3c patch works well but one of the vulnerabilities is still there.
[Sony Cross-Device General] Malmanian:
Thanks for the feedbacks; I’ll remove the z2 patch from the first post. I find it very strange that the libs are device specific and works bug free on some z2 devices and not all.

The .580 libs is currently the best all-round choice despite the remaining CVE-2015-3864 vulnerability.

Hopefully the current 23.4.A.1.200 firmware that some users are receiving over PC Companion might perhaps be just an early test release for developers or Xperia beta testers. I find it really hard to believe that Sony will push that firmware as it is as a final ver. across all devices/regions.
[Sony Cross-Device General] stayawake:
[MENTION=4440037]manipars[/MENTION], hey bro, did you read about the Xperia Z1 updates to 5.1.1? I found this schedule about updates, maybe the "StageFright v1+2" is a definitive fix from Sony

font: http://www.androidpolice.com/2015/0...exus-5-and-6-starting-october-5th-says-telus/
[Sony Cross-Device General] Malmanian:
Thanks for the info. The previous Z1 5.1.1 v14.6.A.0.368 firmware from 2015-09-15 did indeed fix all of the stagefright vulnerabilities (including CVE-2015-3864) but also caused some major video related bugs on some Z2 and Z3 devices. I think Stagefright v1+2 just means that Sony applied the two official Google stagefright patches, (CVE-2015-3864 is the last v2 google patch). I'll test this on monday when released but unfortunately it seems that we cannot use the Z1 stagefright libs since it is not compatible with the entire Z2 and z3 range of devices and might cause some instability, crashes and video related bugs on some devices. Our best bet is to wait for a newer firmware for Z2/Z3 (newer than 23.4.A.1.200).
[Sony Cross-Device General] okij:
Which is already on its way (firmware 23.4.A.1.232). :D
[Sony Cross-Device General] Malmanian:
Tnx, excellent news! Hopefully Sony will get it right this time. I’m looking forward to finally upgrade my old .546 firmware, especially after reading all the positive xda user feedbacks regarding the latest Sony 23.4.A.1.200 firmware's performance, stability and battery life. (But I guess there is a slight chance that it’s just a Placebo effect but I really hope it's not :). Cheers
[Sony Cross-Device General] Dilesh Perera:
23.4.A.1.200 is better than previous ( of course not with stagefright ) small UI changes and yes its not really Placebo. using .200 for several days now and with battery as i did charge and discharged and battery life is very good.
[Sony Cross-Device General] dkionline:
Someone checked M2 Upated libs?
[Sony Cross-Device General] mj084:
OT: yes battery is better than older LP Firmwares and UI is faster too:)