yashsingh1/xdaforums huggingface dataset:
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] foresto:
It's important to remember that there is a difference between a vulnerability being present and successfully exploiting the vulnerability. The latter can require a very specific set of circumstances, such as the in-memory locations of code or the timing of parallel tasks. These can be quite different between two different kernel builds, even if the vulnerability is present in both, and sometimes even if both builds were made from the same kernel version.

Our friend j4nn and his collaborators spent a lot of time and effort to discover the right circumstances and develop an exploit that would work on a couple of common kernel builds. When he says the exploit will not work on others, we have every reason to believe him. If the kernel build in your phone is not among those listed, and you don't have the skills to develop your own exploit, then your only reasonable options are to flash a kernel build that *is* listed, or to give up.

I faced a similar situation to yours: I had a phone with old and theoretically vulnerable firmware, but it was not a kernel build for which an exploit was available. I used XperiFirm to download firmware that is compatible with j4nn's exploit, flashed that firmware with newflasher (excluding persist*.sin), and then ran the exploit and backed up my TA partition. I then flashed the latest firmware from the phone's original region. It all worked.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] linuxct:
Man, thanks a bunch, thought I killed something off my device already but it was just a matter of an FTF with a badly placed file. Thank you for your extensive write ups.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] MUSHO54n:
faild in to step 4

i have done install frimware.

but on step 4 nothing happend when open apk

SOV36
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] SXUsr:
What does it say is supposed to happen on step 4?
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] filandry:
Thanks For the tools man

succesfully backup and restore ta.img file,but now i want to upgrade to latest pie again,which file is excluded from firmware to flash with newflasher?should i delete ta extension file and persist.sin again?thanks
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] j4nn:
[MENTION=7319692]filandry[/MENTION], skip persist.sin, keep everything in boot folder. You can skip *.ta files in the main folder. When switching to another customization I would flash the cust-reset.ta.

Skip userdata.sin if upgrading and wanting to keep apps/data, when downgrading you need to flash it to do an erase. You may skip Qnovo, appslog, diag, ramdump, ssd.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Kyochi:
Looking for some help.

I originally was able to get through the entire process smoothly. TA backed up. Camera worked. No green pictures.

But, I wasn't able to boot into TWRP by holding volume down and power. So I thought I messed up somewhere.

That's where I messed up and tried re-doing the whole process. I thought I would be OK, since I have the TA backed up.

I re-flashed back to 47.1.A.8.49, and tried going through the steps again, but my bootloader is still unlocked.

I tried restoring the TA-locked.img file, but I still get green pictures.

Is there anything I can do to fix this?
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] SXUsr:
Once you unlock, you can never go relock. :D

Re-read the OP from step 10.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Kyochi:
Oh yeah, I know I'll never go relock again. :)

But what you're saying is, if I follow through step 10, then my camera will function normally again?
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Kyochi:
[MENTION=2735402]SXUsr[/MENTION] Thanks! That worked!
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] munjeni:
ta unit 0x10471 is dev_id HMAC key, just to remind myself and post for further analyse :)
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Ryhorse:
[MENTION=4418980]j4nn[/MENTION] bro, I want to flash magisk with dm-verity enabled, but I don't understand your instructions at all.

You said:

What does "start twrp having adb access enabled" mean? I have only adb access when the device is turned on and TWRP I can only boot with fastboot, at which point adb is disabled.

I tried a few things to try to understand your instructions:

1:

a) When device is turned ON, I typed "adb shell", which gave me shell access.

b) Then I typed "stop recovery", but then I get this error: stop: must be root

2:

a) I booted to TWRP with fastboot.

b) Then I typed "adb shell", but then I got this "error: device unauthorized.

This adb server's $ADB_VENDOR_KEYS is not set

Try 'adb kill-server' if that seems wrong.

Otherwise check for a confirmation dialog on your device."

So nothing works. Can you please explain a bit better?
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] j4nn:
[MENTION=6995680]Ryhorse[/MENTION], you just need to access adb with normal boot, authorize your PC permanently and then reboot into twrp, where adb should work too, not needing auth anymore, as already accepted from main boot.

If it is not, it may be caused by that twrp does not have access to phones data - maybe it needs unlock first?

Or different twrp version.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] klpetkov:
Hello,

I need litle help.

I am on the stage of pulling TA-unlocked, phone restarts and after that can't figure out what command to use to continue. It says the system cannot find the path specified.

Full descriptive answer will be appreciated :D
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] j4nn:
[MENTION=4876667]klpetkov[/MENTION], just restart with the "8. get temp root again" step to continue.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] klpetkov:
Hi there,

Thanks fot the reply.

Maybe i somehow have pulled TA-unlocked, bc i contunied and pushed TA-locked.

Everything is fine, magisk is working, camera and the audio stuff as well.

I used your post and a pdf guide.

Thanks for the great work.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] j4nn:
[MENTION=4876667]klpetkov[/MENTION], well you should have both TA-locked.img and TA-unlocked.img on your PC. If you did not save TA-unlocked.img, it is ok as that is just for reference or testing/comparison with "lost drm key" state.

Glad it worked for you in the end...
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] j4nn:
A donation received from a xz1c user on 2020-08-13 16:08:55 UTC.

Thank you, really appreciated.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] j4nn:
[MENTION=4489365]virvin[/MENTION], not possible - just read the howto and downgrade or get working another temp root exploit.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] JIJOK:
[MENTION=4418980]j4nn[/MENTION] hey there, sorry bother but Q&A forum for xz1 ist really dead and need some expert answer

AFAIK, with pie update unlocking the bootloader doens't break camera, but still works as stock ?

my phone : g8342 47.2.a.11.228
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] j4nn:
Camera works on pie after unlock with lost drm keys, question is if quality is the same. You should backup TA before unlock as it is not that difficult and it is good not to loose the device key.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] moist_line:
Hello! Thank you for the guide! I've followed the steps outlined in the pdf and got to the last part. I was able to successfully extract ta locked and push it back in and install twrp but ran into issues when flashing custom G8441_Customized DE_1310-4373_47.2.A.11.228_R3C or US rom from flashtool. I believe I have all of the drivers which got me this far but now, I am getting:

no usb device with vid:0x0fce pid:0xb00b !

I've reinstalled the drivers, restarted my computer, tried installing LOS17 and pixel experience in twrp 3.3.1 (because of the issue above) to no avail -- either bootloop or black screen. Any help would be much appreciated.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] moist_line:
After some more troubleshooting I realised that I had to be in flashmode instead of fastboot. Things are sorted out now, thank you for the guide. I've tried LOS17 but suffer restarts and crashes possibly because of my sd card. Pixel experience just bootloops for me -- not sure why. I will try to experiment some more. To clarify, I installed the custom USA 47.2.A.11.228_R3C from flashtool. I've formatted my data on twrp everytime I install a new rom. Perhaps someone could point out what I'm missing here. Thank you all for the input :)
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] thefelineofaveb:
Did you flash the backed-up TA keys with custom ROMs? I had bootloops when first installing custom ROMs and that seemed to be the cause. Not flashing the TA.img solved the issue for me
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] moist_line:
I only pushed the locked ta once during the rooting process and installing twrp but not after because my camera worked again. Is pushing ta part of the process every time we install a rom because wiping from TWRP deletes it? I'm on rooted stock pie now due to no network signal and other bugs encountered in other roms -- pushing ta again will fix those issues? Also, I noticed that my camera doesn't have slow mo and other features from stock anymore. Is that part of what you'll lose when your device is rooted?
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] SGH-i200:
If you restored the ta partition and don't deleted it by flashing persist.sin (and the forbidden ta files) via newflasher while flashing back to stock, you should have all stock camera features enabled! But I never flashed a Custom ROM on my XZ1, yet. I'm on rooted stock.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] SGH-i200:
Do you regret your decision yet?
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Fenderstratocaster87:
if i want to flash some Rom(Havoc) what i have to do? i'm on 42.2.A.11.228 always stock, never mod.

downgrade

backup TA

unlock bootloader

flash backup

and then flash twrp and rom??
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Fenderstratocaster87:
Point 6 with this "dd if=/dev/block/bootdevice/by-name/TA of=TA-locked.img" --->Permission denied

Can U hel me?please
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Kryoflamme:
SOV36

Everything worked so far with my SOV36 (backed up TA-locked.img just now) - but now I'm kind of stuck with the Sony-Unlock because of "Rooting status: unknown". From what I read that's because I did not flash the boot-folder. But I should not do this coming from the japanese fw, correct?

I'd be glad if someone could point me in the right direction. Coming this far it would be sad to fail now :)
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] J.M.Siyath:
I bought a new XZ1 and just flash android 9 via flash tool (not unlock boot-loader), Now I noticed that no difference with Video Image Enhancement On and Off. What should i do to return to work?

Reflashing oreo will fix it?
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Doomer D. Great:
Hi!

I am blown away by the OP's effort and the community making all of this work. Sadly, by error on my part, I never knew about the DRM Keys and TA partition. I went ahead to root my Maple Dual running original latest FW three months ago. I did the Sony online Codes thingy and even though I remember it telling me about DRM keys, I blindly proceeded as rooting was top priority. ..

Have it lost all possibility now? While using different FWs, I do not remember explicitly erasing any TA partition. Only Wiped/Format Data. Are my keys gone now?
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] carastro:
Restore DRM-Backup to another phone

I have a similar question as in post #1650:

Has anyone ever tried to restore a TA-backup from on phone to another? Or are drm-keys device-specific? Would there be a risk trying?
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Mochs:
After backing up my drm-keys and installing twrp-recovery I am getting the message: "your device has been unlocked and can't be trusted". I know, that by now I cant get rid of this message and that would be okay for me. But I cant access the recovery due to the message, cause the device always reboots after 5 seconds and loses the comand to enter the recovery. Is there a way to still enter the recovery?
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Dematen:
In new format of hideunlock kernels flashable to multi fw versions I not undstand if have to use:

kernel-G8141-47.2.A.10.62-hideunlock.zip

or

kernel-G8141-47.1.A.16.20-hideunlock.zip
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] OGSwank:
Do i still need to backup DRM keys when unlocking the BL none of the flash tools are working on my device.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Klaus N.:
Yes, it's recommended; otherwise the keys are lost forever.

Have you tried newflasher? Did you install the appropriate drivers for your device?
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Charlestai1225:
Does anybody know how to backup ta for sony xz1 sov36 au version. This is because i tried many times but i still cant find a way.Thanks
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Joper_:
How can i access TWRP after

fastboot boot twrp.img

?

After that command it(my phone) shows "your bootloader is unlocked" and just turns the screen off.

I was trying to hold the power button and vol buttons(up\down). But it wasn't successfull.

Help me, please.

Thank you.

I've used a wrong image )

Because the twrp image should be taken from here: https://xdaforums.com/xperia-xz1-compact/development/recovery-twrp-3-1-1-stock-security-t3706704

[MENTION=4418980]j4nn[/MENTION], please add this link into the corresponding post https://xdaforums.com/showpost.php?p=79880858&postcount=1029
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Pizzaswift01:
Hi to everyone, I'm the "tech expert" in my family and my brother asked me if can unlock and flash the havoc rom on his xz1 compact. Honestly I wasn't expecting this gargantuan procedure, I'm used to unlock phones easily and in like 1/2 hours have everything flashed, so I don't remember how, but I found a file named "xz1_compact_root_instructions_v3.zip", if I follow all the instructions does this procedure work ? Also, I remember reading from this thread that with the Pie update unlocking from the official site doesn't give you the cam error ? So maybe this is a more straightforward way?
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Dematen:
Ciao compatriota, ti sarei grato se mi avvisassi qualora riuscissi a fare il root di questo telefono senza perde cam, video, googlepay e simili.

Di solito io non ottengo mai risposte scrivo su questo forum.

Ciao.

MOD EDIT: Please post only in English according to the FORUM RULES,translation added below:

Hi compatriot, I would be grateful if you let me know if I manage to root this phone without losing cams, videos, googlepay and the like.

Usually I never get answers I write on this forum.

Hi.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Pizzaswift01:
Ciao, guarda se riesco senza dubbio ti contatto e ti dico come ho fatto, anche se ho visto che tu non ci sei riuscito e questa cosa un po' mi spaventa, comunque dovrei provare i prossimi giorni :good:

MOD EDIT: Please post only in English according to the FORUM RULES,translation added below:

Hi, see if I can, without a doubt I will contact you and tell you how I did it, even if I saw that you did not succeed and this thing scares me a little, however I should try the next few days: good:
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Dematen:
Si, ero fiducioso in questo metodo perché consentirebbe di fare il root senza sbloccare il telefono.

Come avrai letto, sono riuscito così a fare il backup del TA, ma, anche se non me lo aspettassi per quanto letto in questo thread, la cam faceva solo foto verdi e non funzionavano cose tipo il qrcode.

Per fortuna aggiornando il telefonino la cam si è ripristinata mentre i video non mai avuto modo di testarli ma confido per il bene.

Intanto ti ringrazio per la risposta visto che negli ultimi non è ho ricevute altre ;)

MOD EDIT: Please post only in English according to the FORUM RULES,translation added below:

Yes, I was confident in this method because it would allow you to root without unlocking the phone.

As you will have read, I was able to backup the TA, but, even if I did not expect it from what I read in this thread, the cam only took green photos and things like the qrcode did not work.

Fortunately, updating the phone the cam has been restored while the videos have never had the opportunity to test them but I trust for the good.

In the meantime, thank you for your reply since I haven't received any others in the last few years;)
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] thefelineofaveb:
Io avevo il root sulla stock Pie senza problemi di sorta! Rimettendo le chiavi TA funzionava tutto, app di banche, fotocamera, etc. Non ti so dire per Google Pay perché non lo uso.

Ho seguito le varie istruzioni qui e non ho avuto particolari difficoltà.

Al momento ho la Lineage 17.1 da circa 6 mesi e va più che bene.

Se posso aiutare, scrivimi che lo faccio volentieri!

[Edit: sorry for non-english writing!]

MOD EDIT: Please post only in English according to the FORUM RULES,translation added below:

I had the root on the stock Pie with no problems whatsoever! Putting the TA keys back, everything worked, bank apps, camera, etc. I can't tell you for Google Pay because I don't use it.

I followed the various instructions here and had no particular difficulties.

I have currently had Lineage 17.1 for about 6 months and it's just fine.

If I can help, write me that I gladly do it!
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Dematen:
Avevi fatto il root con questo metodo senza sblocco?

Mi fai venire il dubbio che forse io non abbia ricaricato le TA pensando che il telefono comunque non era sbloccato.

Sarebbe stato determinante ricaricare le TA anche senza sbloccare il telefono?

In caso ci riprovo.

p.s. se avete il telefono sottomano potreste solo di quando premete in quicktools l'air mode oltre wifi diventa grigio anche il mobile data rimane illuminato anche se inattivo? ty.

MOD EDIT: Please post only in English according to the FORUM RULES,translation added below:

Avevi fatto il root con questo metodo senza sblocco?

Mi fai venire il dubbio che forse io non abbia ricaricato le TA pensando che il telefono comunque non era sbloccato.

Sarebbe stato determinante ricaricare le TA anche senza sbloccare il telefono?

In caso ci riprovo.

p.s. se avete il telefono sottomano potreste solo di quando premete in quicktools l'air mode oltre wifi diventa grigio anche il mobile data rimane illuminato anche se inattivo? ty.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] thefelineofaveb:
No, senza sbloccare il bootloader ho solo fatto una copia delle TA, poi ho sbloccato il bootloader, ri-flashato le chiavi TA, TWRP e Magisk per il root.

[Edit: sulla Lienage non c'è l'errore dell'icona dei dati mobili che dici]

MOD EDIT: Please post only in English according to the FORUM RULES,translation added below:

No, without unlocking the bootloader I just made a copy of the TA, then I unlocked the bootloader, re-flashed the TA, TWRP and Magisk keys for root.

[Edit: on Lienage there is no mobile data icon error you say]
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Dematen:
Capisco, io invece ho fatto il backup del TA senza sblocco, poi ho visto che comunque il root funzionava, e seguendo quanto ho capito da questo thread, non ho sbloccato il bootloader.

Solo che la cam non funzionava e allora son corso subito ai ripari leggendo che si poteva aggiornare il sistema per recuperarla.

Tu hai fatto lo sblocco del bootloader ma in questo thread non è scritto che apposta per affermare che il root funziona anche senza sblocco?

Io ho fatto il backup del TA ma mi è rimasto il dubbio che l'abbia fatto in modo scorretto.

Si può verificare la congruità del TA?

O comunque un backup del TA è sempre genuino finché non si sblocca il bootloader?

ty.

MOD EDIT: Please post only in English according to the FORUM RULES,translation added below:

I understand, I instead made the backup of the TA without unlocking, then I saw that the root worked anyway, and following what I understood from this thread, I did not unlock the bootloader.

Except that the cam didn't work and then I immediately ran for cover reading that the system could be updated to recover it.

You have unlocked the bootloader but in this thread is not written that on purpose to say that the root works even without unlocking?

I made the backup of the TA but I was left with the doubt that he did it incorrectly.

Can the adequacy of the TA be verified?

Or is a TA backup always genuine until the bootloader is unlocked?

ty.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] strongst:
Hello friends,

please post only in English according to the FORUM RULES.

Thank's for the understanding!

strongst

Forum Moderator[/COLOR][/B]
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] raziel7893:
Hello, I've tried to skip through the last pages to find an answer, but i didn't find one.

First: i have a SOV36, downgraded it via the great tutorial in the first post, gained root via renoroot, and saved the TA partition. While unlocking i get "Command not allowed"

As i understand, when root-status is unknown and Unlock fails with Command not allowed there is no posibility to unlock the bootloader, right?

Is it possible to simply dd the twrp image to the recovery-partition and start with installing a custom rom regardless?

Or is this partion read-only without unlock?

thanks in advance

Greets Alex
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] raziel7893:
Hmm ist there no edit-function?

I found the answer myself. No it seems I'm out of luck :(.

But thanks for your great tutorial. At least i've got an international Rom now :)

Best regards
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] Shahnewaz:
Alright, I'm in a weird position now.

I've finally decided to unlock and root my XZ1c, and I've done it as explained in #1029. TA is restored after unlock.

However, I still get the bootloader unlocked screen, but my device is certified in the Play Store and all security features seem to be functional. Everything works... but the unlocked screen remains. :unsure:

Did I do something wrong? I've attached my security service info screenshot.
[Sony Xperia XZ1 Compact ROMs, Kernels, Recoveries,] SXUsr:
You haven't done anything wrong, but you're stuck with that screen now as there is no way to remove it.