yashsingh1/xdaforums huggingface dataset:
[LG V20 Guides, News, & Discussion] iBuzman:
I got twrp booted.. just need to flash su now.. fingers crossed https://goo.gl/photos/5VrHCGR9zyR651Et5 (not sure if this is old news and Im about to hit the normal roadblocks or whether Im close to getring recovery/su sorted out successfully).. I used dirty cow method described elsewhere for us996 but updated step3 script to flash H990ds specific twrp build..
[LG V20 Guides, News, & Discussion] malifact:
Do you mind me asking how you managed to install TWRP? I would like to try flashing something which doesn't require root, but can't be flashed with stock recovery. Thanks.
[LG V20 Guides, News, & Discussion] 881jz:
Nice work. I couldn't boot from this stage, perhaps I was too impatient.

If you have a backup you could share that would be great too :p
[LG V20 Guides, News, & Discussion] iBuzman:
don't get too excited about my post too quickly [emoji14] ... (but I have booted into twrp many times now) I havent booted normally into android yet since flashing superuser..

what I did was.. followed dirtysanta thread instructions - except I used h990ds twrp.img built by [MENTION=5672995]jcadduono[/MENTION] and changed the step3.sh script to use to correct h990ds twrp.img instead of us996 one the step3 script prescribes.. I can boot into twrp now but cant boot normally... if I get really stuck I may try a custom rom hehe.

and.. updated Tapatalk sig [emoji14]

---------- Post added at 09:16 PM ---------- Previous post was at 09:04 PM ----------

oh.. and I'm not bounty chasing.. I'm just trying to get root - bounties go to dev's not hobbyists butchering others' scripts on their linux laptap ?
[LG V20 Guides, News, & Discussion] jcadduono:
are other variants being unlocked? what V20 variants should i build twrp for?
[LG V20 Guides, News, & Discussion] hykhleif:
please do one for h990 single sim internal version
[LG V20 Guides, News, & Discussion] iBuzman:
I grabbed your twrp build for 990 from nethunter.com/lge/etc..etc devices after I realised my linux build setup needed to be fixed when I tried to compile it from github and it failed.. I havent involved you [MENTION=5672995]jcadduono[/MENTION] as you mentioned in other threads you arent supporting other devices and I presumed youd be annoyed by 990ds requests [emoji14] appreciate all you've contributed, just didnt want to annoy you
[LG V20 Guides, News, & Discussion] jcadduono:
right, i ignore requests from people with devices that have locked bootloaders as there is nothing i can do there, but if people are unlocking bootloaders then it is my business to get twrp to them
[LG V20 Guides, News, & Discussion] iBuzman:
I have a locked bootloader so that makes sense.... fyi - seems both dirty cow and dirty santa work on 990ds.. dirty cow exploited successfully and loaded "run-as" but didnt change selinux to permissive.. dirty santa worked AND enable permissive environment and a twrp boot..

I don't know whether dirty cow or dirty santa was the thing that did the trick.. or maybe running both is needed (eg dirty santa scripts worked because I'd already dirty cow exploited)

but, I think I stuffed something up during earlier attempt, and I can't boot.. or the aboot etc in dirty santa method dont work on h990ds (but... I can still enter twrp, so can flash anything - not stressed yet about an expensive brick as I have recovery) but I would like to boot in android soon to reduce brick-stress
[LG V20 Guides, News, & Discussion] Matt07211:
So do you know about the 4 devices with bootloader unlocked then on the v20?

Thread: http://xdaforums.com/v20/development/ls997vs995h910-dirtysanta-bootloader-t3519410

They've (I've believed) running one of your twrps for the other variant of the device, I think. I haven't kept up with the thread this last week so that may not be the case any more.
[LG V20 Guides, News, & Discussion] midmadn:
My $25.00 will be coming as promised. It's christmas week and I just need to get all my ducks in a row.
[LG V20 Guides, News, & Discussion] elliwigy:
lol.. it was def dirty sant.. however, it doednt work on h990ds.. you essentially pushed the v20 debug aboot and boot and v20 twrp to your phobe which has dif hardware.. you need a h990ds aboot, boot and twrp as well as system to boot

---------- Post added at 12:09 AM ---------- Previous post was at 12:08 AM ----------

if you have a 990ds dont donate yet as theres no working methods for it lol.. the only v20s unlocked via dirty santa at this time are sprint vzw att and the f800L
[LG V20 Guides, News, & Discussion] ahlok_hk:
Good news for those who brick the H990DS when flashing DirtySanta, I have successfully unbrick using the following method!

http://xdaforums.com/v20/how-to/restore-v20-to-100-stock-bricked-devices-t3524903
[LG V20 Guides, News, & Discussion] Prowler_gr:
Perhaps this is the first step into our solution.

Maybe LG will never provide a bootloader unlock that will allow their stock rom to fully boot - BUT - maybe somebody can cook an alternative rom (either AOSP or a ported ROM from other variants) that can fully boot after flashing .......
[LG V20 Guides, News, & Discussion] iBuzman:
followed instructions to the letter.. can get my device recognised as H918 but googling suggests I need to find a non existent V20 lg up dll before I can "upgrade" to the restore kdz file (interesting that you didnt need it.. I wonder why you didnt need it...)..

I may have to make boot.img, system.img etc from 990ds kdz and flash imgs via twrp I guess

incidentally.. I can still fastboot flash files.. not sure if this means I can just flash via terminal once imgs are made from the 990ds kdz
[LG V20 Guides, News, & Discussion] ahlok_hk:
Maybe it was because I did not touched the system partition when I use LGUP. I only bricked because I flashed a non-signed boot.img at that time.
[LG V20 Guides, News, & Discussion] emdroidle:
What do you mean "converted to an US996"? You flashed a US996 KDZ image onto your VS995? Interesting choice there.

I'm pretty sure 80% of the procedure is going to be the same across all V20 models. The only real difference is the aboot.image file is going to differ from one model to another.

I believe [MENTION=4591212]me2151[/MENTION] is currently focusing on a small number of models, but I imagine will be targeting the other V20 models in the near future (once the LS997 is fully done). Others are certainly pondering the situation.

The biggest thing you need is experience. Knowing reverse-engineering tools (IDA) is a big help. Having written a lot of ARM assembly language is a major help. Given unlimited time I'm pretty sure I could get this working, but I'm pretty sure everyone here wants faster progress than that. I do have one silly idea that might generate a quick solution though...

Simplifying [MENTION=4591212]me2151[/MENTION]'s procedure is likely what I'll be doing first. There is a good chance I won't get it down to one button, but I do hope to get it down to only one script needing to be run. (I seem to have a great deal more scripting experience than [MENTION=4591212]me2151[/MENTION], I can easily greatly simply the scripts)

I imagine you've done the F800L, H910, LS997 and VS995 at this point since they've been unlocked. I'd suggest preparing to generate twrp for all V20 variants since this bootloader break looks like it won't take too long to adjust for all the others.

I'm thinking of a very naive shortcut for producing a workable aboot.image file. I may be in contact if it looks viable (or I get really lucky with IDA Pro and manage to produce the magical file). Hmm, I've also got a method to produce an aboot.image file which could return your V20 to functioning condition.

So the H990DS is rather popular in Australia? Is knowledge of dual-SIM phones so rather common there?
[LG V20 Guides, News, & Discussion] elliwigy:
no.. i flashed the us996 deodexed rom so phone was registered as a us996.. im back on a verizon rom now
[LG V20 Guides, News, & Discussion] emdroidle:
Interesting. How did you manage to flash a US996 image onto a VS995? I'm suspecting this is due to having an unlocked bootloader via Dirty Santa? Curious since another bootloader unlock approach would have been to flash the H910 image and simply use the normal `fastboot oem unlock`.
[LG V20 Guides, News, & Discussion] elliwigy:
lol.... the debug firmware on the v20 was from a US996 variant.. we used dirtycow to write debug aboot and boot img.. wouldnt be possible to use H910 img as it wont flash and the aboot/boot alone from H910 isnt enough to unlock the BL.. it also most likely wouldnt boot at all without the H910 system which we couldnt flash or write with dirtycow.

Notice I said we used a US996 deodex rom, which means it was a flashable zip file to flash in twrp.. the debug aboot for the v20 is unlocked by default so at that point we only needed to fastboot flash recovery twrp.img then it was game over..

so your second option will not work as itl fail everytime you try to flash it.. we tried all the obvious methods and they all failed so dirtycowing the debug aboot and boot was the ONLY working method
[LG V20 Guides, News, & Discussion] travis82:
"So the H990DS is rather popular in Australia? Is knowledge of dual-SIM phones so rather common there?" This is the only model they sell in China and Hong Kong also, dual sim is a bit important since many people go back and forth a lot, and travel a lot for buisness. All the mobile stores only sell this model here. I assume Oceania is the same. That might be why you get so many people asking about these models.
[LG V20 Guides, News, & Discussion] elliwigy:
i usually just see the same few ppl ask repeatedly to be honest lol. but yes, im sure quite a bit of ppl have the 990ds
[LG V20 Guides, News, & Discussion] sallad08:
Happy to pledge 50AU. Just bought the LG V20 H990DS from JBHIFI today, would love root to install an ad blocker and titanium backup.
[LG V20 Guides, News, & Discussion] capfirepants:
Something I sadly do not have in any of those things. Got any tips on how to get into them?

Have you been able to try your quick silly solution?
[LG V20 Guides, News, & Discussion] emdroidle:
Those things take a lot of time. Often people slowly develop those skills by reverse-engineering malware (small computer viruses at first, later bootloaders which insist upon signed images).

Not yet. I'm pretty sure we've pretty well got root and unlocked bootloader due to DirtySanta. Problem is we don't have an Android boot image for the H990DS, so we don't have anything interesting to boot and verify the bootloader being unlocked. I'm aiming to generate one, but there is a kind of large software repository you need to get to implement the process and I've only got so much time. I'm optimistic someone will generate an image fairly soon, but fairly soon could be a bit.
[LG V20 Guides, News, & Discussion] travis82:
Point me to the repository I will check it out, I would like the Dual some model N for HK but I won't touch it till its unlocked. I emailed LG since they are supposed to be unlocked in HK too. Eur/CH half and half deal here. I am waiting for the response they give me.
[LG V20 Guides, News, & Discussion] eladeb:
BTW...

Does it apply to all international veriants?

Like the H990 single sim?

Thanks
[LG V20 Guides, News, & Discussion] somemadcaaant:
The H990ds is the only model sold in australia, no carriers are selling it and only found with one retailer. Very poor presence in Aus, might as well be nonexistent here. No idea what LG was thinking.
[LG V20 Guides, News, & Discussion] 881jz:
so i ended up destroying my phone even more whilst trying to get it working.

i flashed aboot.img and boot.img from backup in https://xdaforums.com/v20/development/ls997vs995h910-dirtysanta-bootloader-t3519410.

phone would only boot download mode and fastboot from this stage and fastboot locked.

after trying every single tool for restore i finally have it back up and running rollowing [MENTION=273964]ahlok_hk[/MENTION] method https://xdaforums.com/v20/how-to/restore-v20-to-100-stock-bricked-devices-t3524903

i had tried this already but failed when using the LG supplied cable on a USB 3.0 port. i used an older cable with the USB type c converter that was supplied by Samsung with the Note 7 and i am back up and running.

my only real difference was using uppercut for the DLL file (tho i had the correct dll from bridge and extracting the KDZ with WindowsLGFirmwareExtract-1.2.5.0-Release-1) i also had to run the upgrade twice, the first time it completed 100% but i had an system restore error 2 after flash. the second time it completed again and the phone booted.

so if anyone has an idea of how to get root going on these phone but worried about brick, i am pretty confident you can bring it back from most states. just used a computer that you can image easily as i have downloaded some pretty suspect items over the last couple of weeks in an attempt to restore.
[LG V20 Guides, News, & Discussion] emdroidle:
Currently I am unaware of any, aside from LG's site which gives the raw source code. I'm cleaning several things and my progress may be a bit slow...

Wow. Perhaps they're planning to release the V20 in Australia later (you're welcome to be pissed at this though).

Yeah, some minor variant invocation of `LGUP` generally rescues most LG phones. What was neat on the V10 there was even a way to recover from 9008 mode.
[LG V20 Guides, News, & Discussion] exadeci:
Unfortunately no

https://twitter.com/LG_Australia/status/800888399854870528
[LG V20 Guides, News, & Discussion] Byte_76:
Have the devs given up on the 990DS or are efforts to crack the bootloader and root the phone still ongoing?
[LG V20 Guides, News, & Discussion] elliwigy:
what devs were working on it to start?
[LG V20 Guides, News, & Discussion] roosta:
Let'sjust chime in when we have relative/interesting/worthwhile comments to make on this topic, people.

I've updated the contributions...over $2000 now. Can't believe a single international dev has come out and publicly stated they are working on it. Baffling.

RoOSTA
[LG V20 Guides, News, & Discussion] emdroidle:
You can be assured at least one person is looking into taking care of the issue for the LG H990DS. There are many draws on my time and right now I'm easily distracted. This is also outside my comfort zone so I'm going slowly in order not to generate lots of bricks. Someone with greater familiarity with the task might do this vastly faster than I (there is also major local event across the next weekend, which adds to the list of distractions).

The crucial steps are done. We know the "DirtySanta" Android bootloader mostly works, the issue is simply adapting the approach for the H990. At this point I do have what looks to be a working kernel build for the H990.

A noticeable amount of money, though salaries in high-tech are quite high. There are costs too. If I get it, I'd be giving a substantial chunk to [MENTION=4591212]me2151[/MENTION] since an awful lot of it would be based on the approach for the Sprint/Verizon devices.

Does anyone have a list of the H990 variants? When trying to get the H990DS kernel to build there are mentions of the "LGH990DS_H990K", "LGH990DS_H990L" and "LGH990DS_H990S". Trying to figuring out whether there really are 3 variants of the H990 and how one might distinguish them if there are. Could explain why the H990 is thought to have so many bands, there are actually 3 separate devices.
[LG V20 Guides, News, & Discussion] InsertDumbNick:
If you could tell me where I might find this information, I could check on my H990DS and let you know. Maybe others could also post theirs as well and you could get some conclusive data.

Thanks for your efforts btw :)
[LG V20 Guides, News, & Discussion] Mayazcherquoi:
Are the root exploits for this device going to involve installing a custom recovery and / or kernel? Will there be any one-click root apps (or similar) to gaining root? It's been agess since I've needed to root a device (previously used Nexus' - I just want to uninstall some built-in applications like Messenging, Clock, EMail, etc, and just stick with the Google defaults which are far better and well maintained). I've already disabled as much as I can and replaced what I could, and doing that this device absolutely flies.
[LG V20 Guides, News, & Discussion] Byte_76:
Thank you for the feedback, your work is definitely appreciated.

I'm not really sure about the different variants of the H990DS either. Any idea where to check that?
[LG V20 Guides, News, & Discussion] ahlok_hk:
There are H990DS firmware for different regions in the following link. But I think they are just using the same dual sim hardware, just like the case for US variants.

http://lg-firmwares.com/lg-h990ds-firmwares/
[LG V20 Guides, News, & Discussion] spiderx_mm:
that one is not even completely listed. for example, the firmware I'm having (V10c-SEA-XX) is not listed there.
[LG V20 Guides, News, & Discussion] somemadcaaant:
SEA is Asia if you followed the region description table from the page, so PHL(Asia/PH/Philippines) is your firmware.
[LG V20 Guides, News, & Discussion] Chatbox:
Is there a separate bounty thread for the the H915?
[LG V20 Guides, News, & Discussion] hashim17:
Hi,

I pledge AUD $30
[LG V20 Guides, News, & Discussion] emdroidle:
Unsure. Looks like LG didn't actually use the kernel configuration setting which would require rebuilding the kernel, so there may in fact be no need to do so. If it does require replacing the kernel, I'll try to stay as close to stock as possible, only change I've got so far is we've found LGE's released kernel source seems not to be the actual kernel source they use for the V20...

Not even the slightest idea. All I know is the source for the H990 kernel has mentions of 3 configurations: "LGH990DS_H990L"/"elsa_lgu_kr", "LGH990DS_H990S"/"elsa_skt_kr", and "LGH990DS_H990K"/"elsa_kt_kr" ("elsa" looks to be the engineering codename for the V20). Could merely be near-trivial differences in software (different language default) or perhaps near-trivial differences in hardware (slightly different radio chip, better tuned for certain frequencies). The resulting kernel difference is very small, looks like a small change in network defaults, but nothing substantial.

Looks like it. I suspect this really is a tiny software difference.
[LG V20 Guides, News, & Discussion] benjpw:
I pledge AUD$50.
[LG V20 Guides, News, & Discussion] mgmori:
unlock bootloader

Why not allow your phone to its customers manage and enforce it

Iran and the Middle East, Africa, since users can not unlock your phone's bootloader and the

Ricoeur installation and other external opportunities

Is this not contrary to the rights of human freedom

Do you think this distinction is not between nations.

Please respect to the comments and requests of our customers have already purchased three models of LG

But it was not unlock bootloader none of this is an insult to a client

Thanks
[LG V20 Guides, News, & Discussion] roosta:
Thread updated. I typically transfer to new phones every couple of years. Unless there's a breakthrough with root on the H990DS before the 1st April 2017, I'll likely withdraw my pledge for root; review my phone options and change brands once again for a phone that has root capability (and an active dev community). LG deserve that, to be quite honest...their customer service and support of flagships in abominable.

RoOSTA
[LG V20 Guides, News, & Discussion] l_npl:
+1

Hi all. So.. we don't have to wait for this thread. Can i ask you which phone? Pixel?
[LG V20 Guides, News, & Discussion] capfirepants:
+1. F*** LG for being such ****s about root. Sad to (probably) have to pass on this phone. Any Idea what you'll be getting? I'm eying the Oneplus 3t myself.
[LG V20 Guides, News, & Discussion] hykhleif:
i swear never ever will i buy an lg phone, that is the worst decision i made in 3 years

honestly its a piece of crap phone by all means
[LG V20 Guides, News, & Discussion] avbeef2:
+1 as well

I'm going to have to find a replacement phone in the next few weeks if I can't get root/twrp on this one.

I'm afraid I'm going to have to withdraw my bounty when I get a new device. To be fair to everyone, I'll honor the bounty to the 1st of April 2017 as well even if I do find a replacement before then.

Thanks for trying devs and keep up the good work :)
[LG V20 Guides, News, & Discussion] me7tarfeek:
I already changed mine... I gote the Mate 9 and is rooted.... :cool:
[LG V20 Guides, News, & Discussion] Team DevDigitel:
if somone can run dirty santa and get it to step 2, it backs up the aboot and the stock boot.img

but this would also mean that dirty santa would work and that you mise well continue through all steps and gain root,

only issues i would see would be getting the boot.img to work fully on all features witch has been a task for the other models that can be unlocked as of now.. really its all about swapping your boot.loader out for the bootloader in the unlocked version, then pushing your stock image back ( thats been modded for no dm-verity and no force encrypt) and wiping all data and formatting data to remove the encryption.

has no one even tried to flash the international model with dirty santa and see what happens?

i dont mean to say just try and blame me for a brick, but if you have a full KDZ or TOT for your device it would be pretty hard to fully brick it and not get LGUP to restore it.

maybe the international model has too many hardware diffrences to make it work, but i just dont see that being the case knowing the "unlocked version" was designed as a international variant here... just food for thought, someones gotta be the ginny pig on this one!
[LG V20 Guides, News, & Discussion] me2151:
If someone wants to be a tester for me... Tomorrow I will try to work on a 990DS ONLY because you guys have a KDZ. I would prefer the tester have SOME knowledge in testing and know how to use the KDZ.

EDIT: No body has stepped forward. Do you guys not want root?
[LG V20 Guides, News, & Discussion] emdroidle:
I may be paranoid, but I kind of like to keep personal data I'm walking around with encrypted. Sounds like the decryption is makes TWRP backups easier and has some role in having the device root-able, hopefully this can be worked around.

Generating the modified boot image is the key issue. I've been looking at the task, but it is distinctly outside my comfort zone and so I'm doing a lot of reading to ensure I get tasks done correctly.

Several people have tried doing so, and reported some success. Even with the KDZ it is easy to get into a very hard to recover state, simply run `dd if=/dev/zero of=/dev/block/sdb1; dd if=/dev/zero of=/dev/block/sdb2; dd if=/dev/zero of=/dev/block/sdc1; dd if=/dev/zero of=/dev/block/sdc2` and you should be in 9008 mode.

One neat thing with the V10 is a way was found to recover from 9008 mode. I hope a similar thing is found for the V20, but I haven't seen it yet.

Dual-SIM is a pretty significant hardware difference.

I can confirm the DirtySanta aboot.img Android bootloader works on a H990DS. As with other devices, lots of static on-screen during boot. The "static" pretty clearly has a fair bit of structure, so I'm pretty sure the framebuffer is getting pointed at an unexpected address resulting in it being overwritten with <something>. One bit of bad news is enough of the screen is overwritten such that entering the decryption password is difficult or impossible. Having now gone back and confirmed there is a workaround I may see if I can get further

Bad news though, after being on for a little while mine goes to a blue screen with an error message about "unexpected modem state" (not an exact quote). Pretty clearly looked like something did a panic. Didn't look like a Linux kernel panic, so I'm worried. Could be DirtySanta is incompatible with the H990DS, though I hope another conclusion can be reached. Good news is `fastboot flash aboot abootbackup.img` and everything is back to pure stock. Two notes here, this was after "step2" and I didn't have an SIMs in the H990 at the time.

Drat, I was kind of hoping to get to the end first, but I'll concede the bounty if you get there first. I'm quite worried about that modem-related panic.
[LG V20 Guides, News, & Discussion] me2151:
Do you have the 990DS?