yashsingh1/xdaforums huggingface dataset:
[Huawei MediaPad M5  Guides, News, & Discussion] xF4m3:
send raw data failure

UPDATE:

I just downlaoded some board software from android filehost ru and boardsoftware 1.0.0.25 did work after some tries with random files and just hammering it xD

This one did the trick

Hello, i hope somebody can help me

So i did everything according to the instructions, but when i start with

./hikey_idt -c config -p /dev/ttyUSB0

(same port for me btw), I get the following output:

Config name: config
Port name: /dev/ttyUSB0
0: Image: ./sec_usb_xloader.img Downalod Address: 0x20000
1: Image: ./sec_uce_boot.img Downalod Address: 0x6a908000
2: Image: ./sec_fastboot.img Downalod Address: 0x1ac00000
Serial port open successfully!
Start downloading ./sec_usb_xloader.img@0x20000...
file total size 106304
downlaod address 0x20000
Finish downloading
Start downloading ./sec_uce_boot.img@0x6a908000...
file total size 24064
downlaod address 0x6a908000
retry: ack 0, len 0, err 0...

the last one i get about 300 times or so (just estimating)

and then at the end it get

send raw data failure
Finish downloading

(for all three files)

After that i also cant see any fastboot devices, only the usb device and modem

I try to attach the whole output as a file

Edit: Additional info that might be useful:

lsusb --> usb ser device is there

dmesg --> modem is attached at ttyUSB0

adb devices --> nothing

fastboot devices -->nothing

CMR-AL09 tried using Boardsoftware 1.0.0.29 and 1.0.0.22 aswell as the on OP provided, nothing works

[27544.238649] usb 3-3: new full-speed USB device number 104 using xhci_hcd
[27544.388707] usb 3-3: New USB device found, idVendor=12d1, idProduct=3609
[27544.388712] usb 3-3: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[27544.388715] usb 3-3: Product: USB SER
[27544.388717] usb 3-3: Manufacturer: HISILICON
[27544.389605] option 3-3:1.0: GSM modem (1-port) converter detected
[27544.389749] usb 3-3: GSM modem (1-port) converter now attached to ttyUSB0
[Huawei MediaPad M5  Guides, News, & Discussion] xF4m3:
Okay i got another issue that you mgiht be able to help me with,

I can flash twrp on revovery_ramdisk, but when i try to boot it with volume down nothing happens and if i hold volume up i just lang in erecovery from huawei :/

I have my bootloader successfully unlocked

UPDATE: Okay solved the problem by patching the ramdisk image from stock firmware with magisk app, flashed the ramdisk, flashed twrp recovery, booted too system, opend twrp app with root and rebooted to recovery = I wa sin TWRP
[Huawei MediaPad M5  Guides, News, & Discussion] Maximize0987:
Any chance I could pay you to do this for me?
[Huawei MediaPad M5  Guides, News, & Discussion] wag3slav3:
Naw, I'd have to charge you twice what the tablet is worth. If you can get the glass off the rest is a cakewalk tho.
[Huawei MediaPad M5  Guides, News, & Discussion] darks0ldier:
Dear user goodwin_c

I wanna say THANK YOU....i make the procedure, and works everything (my device is a Honor 10). Is a complex procedure, but, following the steps, no errors. I just pay for the Board Software. If had pay for dc-phoenix or chimera tool or funkyhuawei, i'm was without money now.......

Your procedure is very good, free (must be a little knowlegde) and saves my device, my life and my money!!

Thanks a lot!!!!
[Huawei MediaPad M5  Guides, News, & Discussion] ferraript:
> My device has no UCE, so remove that from the config file. If in doubt about the addresses, consult the XML.

How do I know if my device has UCE?

>You should avoid erasing modemnvm_anything, as your IMEI may disappear.

>I would not suggest randomly flashing the reserved partitions, just read the IDT XML to find out what to flash where. You can see the commands under the <partially_erase_configuration> tag.

But the thing is that in IDT XML, under that tag, there is command to erase modemnvm_factory

It's not clear to me which files should I flash. Those files are in board software as well as in UPDATE.APP firmware file.

[MENTION=2461994]goodwin_c[/MENTION] , [MENTION=8556932]hackintosh5[/MENTION] , [MENTION=2002534]wag3slav3[/MENTION]

Guys, two weeks ago I sent you PMs asking for help, unfortunately nobody replied.

Is there really no one willing to help?
[Huawei MediaPad M5  Guides, News, & Discussion] psbhullar:
DUK-L09

Tried all using your method, boots into fastboot with COM 1.0 testpoint and IDT on linux. device doesnt come in 3 botton force upgrade. Then bought Dc-Phoenix account, as per their process tried all with Factory firmware & Actual firmwares from their download area, after flashing device cannot come alive in force upgrade with 3 finger Vol+, Vol - and Power buttons. Nothing on screen though screen only is white when IDT loads the bootloader.

Any guidance.
[Huawei MediaPad M5  Guides, News, & Discussion] atthevoltain:
So I got as far as running hikey_idt on my tablet with the testpoint shorted in this process, but I get stuck on this every time:

Config name: config

Port name: /dev/ttyUSB0

0: Image: ./sec_usb_xloader.img Downalod Address: 0x20000

1: Image: ./sec_uce_boot.img Downalod Address: 0x6a908000

2: Image: ./sec_fastboot.img Downalod Address: 0x1ac00000

Serial port open successfully!

Start downloading ./sec_usb_xloader.img@0x20000...

file total size 106304

downlaod address 0x20000

I've even let it run all night before. Tablet is a SHT-W09, Board software 1.0.0.18

[MENTION=2461994]goodwin_c[/MENTION] any thoughts? I'm trying to downgrade far enough to read the bootloader code with dc unlocker
[Huawei MediaPad M5  Guides, News, & Discussion] wag3slav3:
I got stuck there once, I had to actually use a different USB port/cable (I swapped both at the same time) on my linux box to get it to work. When it works it takes about a second for the first 2 and 15 seconds for the last one.
[Huawei MediaPad M5  Guides, News, & Discussion] atthevoltain:
I finally got it! I really should have realized the windows driver wasn't installed a lot sooner, but it's showing up in fastboot so now I'm going to flash 8.0.0.163(C432), which I think is the last version that works with dc-unlocker
[Huawei MediaPad M5  Guides, News, & Discussion] atthevoltain:
I've hit a bit of a wall again. I have the tablet still in the special fastboot (i think) and I'm flashing 8.0.0.163 I got from Easy-firmware. Is that correct or should I be flashing the files in the "fastbootimage" folder from the Board Software? When trying the 163 files I'm having trouble getting everything to go through, some of them (system, vendor, etc.) just hang on the first "sending" command, others just fail with errors like "FAILED (remote: image xloader1 verification error)."

I've flashed every partition that will work so far, but on my windows host DC-Unlocker is still reporting the firmware at 8.0.0.196
[Huawei MediaPad M5  Guides, News, & Discussion] atthevoltain:
Okay, I got most of the partitions that were hanging to go through by booting my M5 back to the windows host and using my fastboot setup on there. (Also a few that were spelling mistakes on my end)

I'm still getting some failures on trying to flash some of the partitions, can anyone help me out? Here are the results from the failed fastboot commands:

Some of these seem pretty important, so I want to make sure I have everything I need before I run the erase/BD software flash commands and reassemble/reboot

[MENTION=2461994]goodwin_c[/MENTION] and [MENTION=2002534]wag3slav3[/MENTION] any thoughts? I'm sorry to be asking so much for assistance on this but I've never mucked around with Huawei devices before this one, and I'm not really familiar with their partition layout

My next thought was to try flashing just these files with the .img files from the BD software instead of the extracted UPDATE.APP, but I'm not too sure if those are the same files
[Huawei MediaPad M5  Guides, News, & Discussion] wag3slav3:
Looks like your bootloader is still locked.

After you do the testpoint you have to leave the phone plugged in and turned on to stay in that bypass mode. When I did it I used the (super old) board software images and that text file as a guide to flash everything with fastboot in linux. It complains about the partition name not being right (cross ref with the text) and I just kept going until I got a new flash on each partition. I think you really only need the few referenced in the OP but I was in there and thought "why not."

It didn't really give me a usable system, but it did get me a valid boot in an android version old enough to use dc_unlocker to get the oem code. The only reason you're doing this is to get the damn OEM unlock code that Huawei decided to withhold. That code will work FOREVER on any firmware you get on this device to unlock the bootloader, so save it and then do a firmware flash from SD to debork whatever you break getting that downgrade.

I am wifi only so I don't need to worry about the IMEI, take someone else's advice about not messing with the IMEI partitions to keep your LTE modem working properly.
[Huawei MediaPad M5  Guides, News, & Discussion] atthevoltain:
I'm pretty sure it is, I'm still trying to flash the downgrade so I can read the code with DC unlocker. Should I be flashing the files that came with the board software to do so or the ones i extracted from UPDATE.APP from SHT-W09 8.0.0.163? (I've been using the ones from 163 so far but I can start over if need be with the files from the board software)
[Huawei MediaPad M5  Guides, News, & Discussion] wag3slav3:
Use the files from the board software and leave it plugged in after you use the hikey_idt injector. That hikey_idt basically gives you ONE BOOT in unlocked mode so you can overwrite the security crap and downgrade. You have to use the software from the place that you got the images that you used in hikey_idt or you'll get that image verification error since they are signed.

You only get that bypass mode until it reboots and you should be running 100% off of USB power while it's in testpoint so you can't unplug or cut power (reboot the PC) and stay in that mode.
[Huawei MediaPad M5  Guides, News, & Discussion] atthevoltain:
Ahhh, okay, I've definitely been using the wrong files then.

I'm pretty sure I've been keeping it in the hikey fastboot mode, but I can start from a clean (hikey) boot later when I get home and use the BD files to downgrade to be certain, I'm remoted into my home PC from work rn. I should use the files in "fastbootimage" since they're the ones I've booted off of then, right?
[Huawei MediaPad M5  Guides, News, & Discussion] wag3slav3:
I don't remember which ones it takes. I do remember having to try a few different ones from board software to find the ones that it would accept without that verification error. If you get that you have to find another file of that name in another dir or you have the wrong partition name. The text file in there is a great way to find the different partition to file matches.

---------- Post added at 12:52 PM ---------- Previous post was at 12:48 PM ----------

On a completely unrelated note I'd stay on an EMUI 8 image when you're done. EMUI 9s fingerprint reader doesn't work in phh based system images (what you'll have to do for ROMS) and you can run almost any of them in AONLY mode (EMUI8 is AONLY 9 is AB) and you'll have a better experience. For me I'm just living with no reader or fingerprint gestures because I'm too lazy to testpoint and downgrade to EMUI8 again (you still can't downgrade with unlocked bootloader for some stupid reason) because it's such a pain to retape after.

I'm waiting on EMUI9.1 hoping it will fix that problem.
[Huawei MediaPad M5  Guides, News, & Discussion] atthevoltain:
My plan is to follow the XML under the flashbootimage section, I think that's the last place I've been going wrong so far. I'm going to set up a linux partition on my work laptop so I can avoid the whole USB passthrough thing altogether for virtualbox and make sure it stays on once I've hikey booted the thing. Hopefully I can get everything set up the way it's supposed to be, I'd really like to reseal this tablet and never have to think about the bootloader again

Thanks for the heads up though, I'm going to stick with EMUI 8 as a base and just flash treble AOSP roms after i get this thing cracked. I mostly want the bootloader unlocked so I can update to Pie (and Q and beyond) with treble images since the likelihood of the US M5 getting any more updates seems pretty low
[Huawei MediaPad M5  Guides, News, & Discussion] atthevoltain:
well, no go, I'm still getting an error when i try to flash xloader:

C:\Users\*****\Desktop\fastbootimage>fastboot flash huawei_crc_check sec_xloader_crc.img

target reported max download size of 471859200 bytes

sending 'huawei_crc_check' (0 KB)...

OKAY [ 0.004s]

writing 'huawei_crc_check'...

OKAY [ 0.006s]

finished. total time: 0.013s

C:\Users\*****\Desktop\fastbootimage>fastboot flash xloader sec_xloader.img

target reported max download size of 471859200 bytes

sending 'xloader' (151 KB)...

OKAY [ 0.006s]

writing 'xloader'...

FAILED (remote: image xloader1 verification error)

finished. total time: 0.038s

This is with the files listed in the .XML from the board software. The problem might just be me at this point haha

EDIT: Now I'm just confused, I half reassembled the tablet to see what sort of state all the flashing left it in and it actually booted. So I got past setup and turned on debugging and I was able to get the bootloader code with dc unlock. OEM unlock is still grayed out though, so I need to figure that one out
[Huawei MediaPad M5  Guides, News, & Discussion] wag3slav3:
You have the oem code, you're 99% of the way there! Doing the downgrade really munges everything and the ONLY REASON we needed it was to get that code.

Grab the EMUI 8 firmware you got from ezfirm and do a force upgrade.

https://huaweiadvices.com/flash-stock-firmware-huawei-honor-phones/

This will give you working software again. Once you're back online with the newer firmware turn on OEM unlocking in dev tools (if it doesn't exist you don't need it) and use fastboot mode to do the fastboot oem unlock *code*.
[Huawei MediaPad M5  Guides, News, & Discussion] atthevoltain:
So, I ended up flashing the wrong xloader and soft-bricked my tablet. I was able to get it it booting again by using IDT to just flash the board software build, unlocked the bootloader and flashed twrp to get the stock firmware back on there. Except I think the partitions/ptable are still set up for the board software build (I have "No Service" in the notification board of a wifi only tablet at the moment), and I somehow managed to relock the bootloader and lose the unlock code :eek:

So I'm gonna take it back apart and reshort the testpoint and do this all over again, but I'm not sure how to fix the partitions after the board software's been flashed. I can get it partially back to this stock 190 build, but even trying to flash the other partitions in normal fastboot doesn't work so I guess I have to redo the testpoint fastboot a third time for that
[Huawei MediaPad M5  Guides, News, & Discussion] wag3slav3:
As far as I know the force upgrade with all three buttons will work no matter what, recreating all partitions. It's taken a completely corrupted system for me and got me a factory fresh software load.

Mine also insists that it's got an LTE modem after doing all this. Might be an artifact of the downgrade.
[Huawei MediaPad M5  Guides, News, & Discussion] atthevoltain:
Huh. Well once I get the unlock code I guess I'll force the upgrade and leave it be. I tried flashing a phh-treble img to system after i had it unlock and got an error though, which is what got me on this whole path again anyway. Well that and my inability to save txt files.
[Huawei MediaPad M5  Guides, News, & Discussion] wag3slav3:
I never got phh-treble to work, TBH. Every phh-treble based ROM worked but phh itself, nope. I think I'm using havoc right now. Remember to boot into EMUI recovery after fastboot flash system for your new ROM to factory reset and clear cache or it will hang on splash.
[Huawei MediaPad M5  Guides, News, & Discussion] atthevoltain:
Looks like I'm giving some others a try then! I got it back and booting, but now for some reason It's not being recognized on windows because the USB device fails to start or properly identify itself or something... I'm assuming I overwrote something on the board's usb controller somehow. Not ideal, but it's up and running and unlocked again so I'll just live with it for now I guess
[Huawei MediaPad M5  Guides, News, & Discussion] atthevoltain:
I got it! I am now unlocked, rooted and trying out a couple GSI rom images. Thanks for your help, [MENTION=2002534]wag3slav3[/MENTION]!
[Huawei MediaPad M5  Guides, News, & Discussion] ferraript:
I managed to get it working too, so thanks a lot to all of you, gyus ;)
[Huawei MediaPad M5  Guides, News, & Discussion] ver2go:
Question on "special fastboot" is that from the board software? ie completing step 2 will put me into this mode.

The longer story is that I have unlocked bootloader and upgraded to SHT-W09-8.0.0.198(C567) in my last wipe. I can still get to bootloader to do fastboot flashes of system, but will not boot phhtreble when I flash the system image but I can flash back the just system image from 198 and it will boot fine. I can't seem to downgrade to see if any see if that is the issue.

I believe I was either on SHT-W09-8.0.0.172 or SHT-W09-8.0.0.190 previously when I was able to flash phhtreble and have it boot (and run).

Thanks in advance
[Huawei MediaPad M5  Guides, News, & Discussion] bombername:
Question:

When you downgraded your security level, how or with which service did you unlock your bootlaoder?

Thanks in advance.

Edit:

I see, DC-Unlocker will work with EMUI 8 with less than .192 ?
[Huawei MediaPad M5  Guides, News, & Discussion] Druwer:
[ 3164.077906] usb 1-1: Product: USB SER

[ 3164.077910] usb 1-1: Manufacturer: HISILICON

[ 3164.079436] option 1-1:1.0: GSM modem (1-port) converter detected

[ 3164.080321] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0

alexandr@alexandr-E502NA:~/hwi$ ./hikey_idt -c config -p /dev/ttyUSB0

Config name: config

Port name: /dev/ttyUSB0

0: Image: ./hisi-sec_usb_xloader.img Downalod Address: 0x20000

1: Image: ./hisi-sec_uce_boot.img Downalod Address: 0x6a908000

2: Image: ./hisi-sec_fastboot.img Downalod Address: 0x1ac00000

Unable to open /dev/ttyUSB0

any advice how to fix it ?
[Huawei MediaPad M5  Guides, News, & Discussion] wag3slav3:
sudo ?
[Huawei MediaPad M5  Guides, News, & Discussion] syaif fabian:
. /hikey_idt -c config -p /dev/ttyUSB0

No is directory please help

How to put hikey_idt

I saved C

---------- Post added at 11:29 AM ---------- Previous post was at 11:27 AM ----------

. /hikey_idt -c config -p /dev/ttyUSB0

No is directory please help

How to put hikey_idt
[Huawei MediaPad M5  Guides, News, & Discussion] himekifee:
My p10 plus is bricked, as i connected to my laptop, it shows USB SER directly without short the testpin. Do i still need to short that?
[Huawei MediaPad M5  Guides, News, & Discussion] kenzyyy:
Method doesn't work for locked bootloader's, tried everything nothing can save my P10 it can go in trash bin lol
[Huawei MediaPad M5  Guides, News, & Discussion] wag3slav3:
Why are you posting that in this M5 thread?
[Huawei MediaPad M5  Guides, News, & Discussion] yura808:
Hello. Can anyone throw a normal photo where is the test point in SHT-W09?

Found himself

View attachment 4921413
[Huawei MediaPad M5  Guides, News, & Discussion] jiang2020:
@ goodwin_c

Dear user goodwin_c

Could you share me your CMR-W09 tablet‘s oeminfo.img file? I flash all board software in my CMR-W09 tablet and lost the omeinfo partition.I need a CMR-W09 omeinfo image file whether which region to restore my CMR-W09 tablet's system.Thanks!
[Huawei MediaPad M5  Guides, News, & Discussion] FUHuawei:
Is this guide still valid for a MATE 10? I am just sick of ****ing huawei changing things on my phone, and I would like to try any possible method to root the phone and flash a new ROM, even if I risk to brick the phone
[Huawei MediaPad M5  Guides, News, & Discussion] karlkluwe001:
Between Step 2. and 3. --- you need a reboot?

once the 3 Files are copied in step 2.

"

- Run next command “./hikey_idt -c config -p /dev/ttyUSB0”. You should see information about loaded all boot stages, with “Finish downloading” message after each. If you did everything fine – in 5-15 seconds you will have your device ready for downgrade/unbrick/killing_your_cat

"

Do i need to adb "fastboot reboot"? or press the Power Button on the m5?

I have a cmr-w09 (c432 from build number)

did anyone found a video guide? (i have some "Doorstopper" issues)

thx

---->answer yes

---------------------------------------------

After now 35 hours of trying testing, suceeding and failing i managed to flash the board files but

My Problem - pls help

whenever i boot the tablet boots into edl mode --- without having the test point pressed

no fastboot --- via vol down button (black screen)

no emregency rescue----- via vol up button(black screen)

just the edl mode :

-----------------------------------------------------------------

Manufacturer: HISILICON

GSM modem (1-port) converter detected

usb 3-3: GSM modem (1-port) converter now attached to ttyUSB0

------------------------------------------------------------------------------------

BUT i get a full working fastboot with HiKey_IDT tools --> stable

but whenever i reboot (and disconnect usb or not[and disconnect battery or not ] ) i get a black screen and "land" in edl testpoint mode

any help'?

or is he dead Jim?

------------------------------------------------------------

another 30 hours later

i made it - i made it - its working it's working

so for me only the 3 files for the hikey_idt tools in the "update_nv_bootloader_block" directory were working!!

these somewhow(huawei evil magic) crc checked to the sec_xloader(which always failed to write) in the "update_nv" directory

so i copied all "fastbootimage" files in one directory and the files from the "update_nv" too(and replaced them if needed) and got it resourected with the <partially_erase_configuration>

in the xml file "update_nv_rback.xml" converted to fastboot - file is attached

https://ufile.io/4qz5gqt3

for me getting to stable testpoint fastboot i needed to reconnect the battery when the idt command ./hikey_idt -c config -p /dev/ttyUSB0 was loading but not finished, otherwise fastboot was constantly rebooting
[Huawei MediaPad M5  Guides, News, & Discussion] sunnatter:
I have a m5 pro 10.8 inches CMR-AL19. I have spent the whole day to open it but couldn't. Can you teach me how? I read all previous comments then tried but no luck. I found no way to fit in the plastic. If it is small enough to fit, it will just be bent however i tried.
[Huawei MediaPad M5  Guides, News, & Discussion] karlkluwe001:
Yes - for me the hardest part was the beginning. To find a starting point to enter the plastic stripes(torn plastic bottle). I end up using an old razor blade from a modern razer and i scratched a little the frame, visible only under magnifier.

u can search for several youtube videos(mediapad disassemble - if i remember correctly).

Always keep in mind once u have the starting point you are done in 10 minutes. It takes more pressure than u think but i started with little an increase not to break the glass.

And loo at photos from opened devices to see where the 2 cables from board to screen go and leave those parts for the very end - not to accidentally cut them.

---------- Post added at 09:31 AM ---------- Previous post was at 09:26 AM ----------

once i got your device open search the frame for a white printed model number - for the cmr-w09 there seems to be two versions at least mine is the cmr-w09a a being the reason i think why i had so much trouble - because the board software(the one in the download link on first page) wasn't 100% accurate.

i got it to work read previous page