[Sony Cross-Device General] cee43ja1:
SUCCESS!!!!!

------------------------------------------------------------------------

Trim Area PoC kernel image patcher by Munjeni @ 2017

------------------------------------------------------------------------

hash:0x655AFB58 calc_hash:0x655AFB58

hash:0x120E966D calc_hash:0x120E966D

hash:0x68A3FBC0 calc_hash:0x68A3FBC0

hash:0xE81278DE calc_hash:0xE81278DE

device: F8331

serial number: EDITED

drm key: EDITED

Trim area dump is a valid.

Locked bootloader.

Deleting old folder ramdisk if exist...

if exist ramdisk (rd ramdisk /s/q)

returned: 0.

New directory ramdisk created.

Created ouput folder "out"

opening boot.img

boot.img is Android image format.

Dumping to out...

BOARD_KERNEL_CMDLINE androidboot.hardware=qcom user_debug=31 msm_rtb.filter=0x23

7 ehci-hcd.park=3 lpm_levels.sleep_disabled=1 cma=16M@0-0xffffffff coherent_pool

=2M enforcing=0

BOARD_KERNEL_BASE 80000000

BOARD_NAME

BOARD_PAGE_SIZE 4096

BOARD_KERNEL_OFFSET 00008000

BOARD_RAMDISK_OFFSET 02200000

BOARD_SECOND_OFFSET 00f00000

BOARD_TAGS_OFFSET 02000000

Done.

No file exist out/boot.img.elf .

Gunziping...

setting up infflate...

infflating...

infflate returned: 0

gzpipe: ok.

unziped: ok.

Extracting ramdisk.cpio...

Runing user script...

Making ramdisk/stufs folder

Found android version equal or greater than Marchmalow.

Making ramdisk/init.ta.sh script

Found string in ramdisk/init.sony-platform.rc@0750

patching ramdisk/init.sony-platform.rc@0750

installing ramdisk/stufs/TA.img

Found string in ramdisk/init.rc@0750

patching ramdisk/init.rc@0750

Found binary ramdisk/file_contexts.bin@0644

converting ramdisk/file_contexts.bin@0644 to plaintext file_contexts

converting plaintext file_contexts to binary ramdisk/file_contexts.bin@0644

Patching ramdisk/sepolicy@0644

seinjecting: ramdisk/sepolicy@0644, saving to: ramdisk/sepolicy@0644, source_typ

e: init, target_type: rootfs

libsepol.policydb_index_others: security: 1 users, 2 roles, 1389 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats

libsepol.policydb_index_others: security: 63 classes, 18249 rules, 0 cond rules

Success

seinjecting: ramdisk/sepolicy@0644, saving to: ramdisk/sepolicy@0644, source_typ

e: init, target_type: tad

libsepol.policydb_index_others: security: 1 users, 2 roles, 1389 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats

libsepol.policydb_index_others: security: 63 classes, 18249 rules, 0 cond rules

Success

seinjecting: ramdisk/sepolicy@0644, saving to: ramdisk/sepolicy@0644, source_typ

e: init, target_type: shell_data_file

libsepol.policydb_index_others: security: 1 users, 2 roles, 1389 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats

libsepol.policydb_index_others: security: 63 classes, 18250 rules, 0 cond rules

Success

seinjecting: ramdisk/sepolicy@0644, saving to: ramdisk/sepolicy@0644, source_typ

e: init, target_type: shell_data_file

libsepol.policydb_index_others: security: 1 users, 2 roles, 1389 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats

libsepol.policydb_index_others: security: 63 classes, 18250 rules, 0 cond rules

Success

seinjecting: ramdisk/sepolicy@0644, saving to: ramdisk/sepolicy@0644, source_typ

e: tad, target_type: tad

libsepol.policydb_index_others: security: 1 users, 2 roles, 1389 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats

libsepol.policydb_index_others: security: 63 classes, 18250 rules, 0 cond rules

Success

seinjecting: ramdisk/sepolicy@0644, saving to: ramdisk/sepolicy@0644, source_typ

e: tad, target_type: rootfs

libsepol.policydb_index_others: security: 1 users, 2 roles, 1389 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats

libsepol.policydb_index_others: security: 63 classes, 18251 rules, 0 cond rules

Success

seinjecting: ramdisk/sepolicy@0644, saving to: ramdisk/sepolicy@0644, source_typ

e: tad, target_type: rootfs

libsepol.policydb_index_others: security: 1 users, 2 roles, 1389 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats

libsepol.policydb_index_others: security: 63 classes, 18252 rules, 0 cond rules

Success

seinjecting: ramdisk/sepolicy@0644, saving to: ramdisk/sepolicy@0644, source_typ

e: tad, target_type: shell_data_file

libsepol.policydb_index_others: security: 1 users, 2 roles, 1389 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats

libsepol.policydb_index_others: security: 63 classes, 18252 rules, 0 cond rules

Success

seinjecting: ramdisk/sepolicy@0644, saving to: ramdisk/sepolicy@0644, source_typ

e: tad, target_type: shell_data_file

libsepol.policydb_index_others: security: 1 users, 2 roles, 1389 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats

libsepol.policydb_index_others: security: 63 classes, 18253 rules, 0 cond rules

Success

seinjecting: ramdisk/sepolicy@0644, saving to: ramdisk/sepolicy@0644, source_typ

e: tad, target_type: sysfs

libsepol.policydb_index_others: security: 1 users, 2 roles, 1389 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats

libsepol.policydb_index_others: security: 63 classes, 18254 rules, 0 cond rules

Success

seinjecting: ramdisk/sepolicy@0644, saving to: ramdisk/sepolicy@0644, source_typ

e: kernel, target_type: tad

libsepol.policydb_index_others: security: 1 users, 2 roles, 1389 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats

libsepol.policydb_index_others: security: 63 classes, 18255 rules, 0 cond rules

Success

seinjecting: ramdisk/sepolicy@0644, saving to: ramdisk/sepolicy@0644, source_typ

e: kernel, target_type: shell_data_file

libsepol.policydb_index_others: security: 1 users, 2 roles, 1389 types, 0 bools

libsepol.policydb_index_others: security: 1 sens, 1024 cats

libsepol.policydb_index_others: security: 63 classes, 18256 rules, 0 cond rules

Success

Searching for old drmfix and removing...

removing lines libdrmfix.so from ramdisk/init.environ.rc@0750

removing lines libdrmfix.so from ramdisk/init.rc@0750

removing file ramdisk/vendor/lib/libdrmfix.so@0766

removing file ramdisk/vendor/lib64/libdrmfix.so@0766

dm-verity:

dm-verity is already disabled!

Sony RIC:

Sony RIC is already disabled!

force-encrypt:

force-encrypt is already disabled!

Press any key to continue . . .

script.bat ramdisk ta_poc

returned: 0.

Repacking ramdisk...

ramdisk.cpio done.

Making ramdisk.gz

defflating...

defflate returned: 0

setting up infflate...

infflating...

infflate returned: 0

gzpipe: ok.

gzip: ok.

ramdisk.gz done.

Packing new_boot.img

cmdline="androidboot.hardware=qcom user_debug=31 msm_rtb.filter=0x237 ehci-hcd.p

ark=3 lpm_levels.sleep_disabled=1 cma=16M@0-0xffffffff coherent_pool=2M enforcin

g=0"

base="0x00000000"

pagesize="4096"

ramdiskoff="0x02200000"

No kernel dt, probably zImage allready have dt appended? Continuing anyway.

making new_boot.img

new_boot.img created.

Done.

Press any key to continue . . .

Press any key to continue . . .

Signal is working, and checked the Service Menu Security. Also, dmesg from successful flash WITH custom kernel.