[Moto G5 Questions & Answers] RainbowOblivion:
Broken Firmware

Hi there, I hope that somebody here can help me with my issue.

I have a Moto G5 XT1675 (Bootloader locked), which recently has completely stopped working.

The issue

Whenever I boot into the phone I get the following error (and whenever I try and load Recovery Mode, Factory Mode, BP Tools, QCOM):

Start Up Failed:
Your device didn't start up successfully.
Use the Software Repair Assistant on computer to repair your device.
Connect your device to your computer to get the Software Repair Assistant.

AP Fastboot Flash Mode [Secure]
Failed to verify hab image boot
failed to validate boot image
ERROR: Failed to pass validaton, backup to fastboot
Fastboot Reason: Fall-though from normal boot mode

(Yes the spelling of validation is wrong on the screen).

Whenever I plug into a charging cable I get the following error:

Start Up Failed:
Your device didn't start up successfully.
Use the Software Repair Assistant on computer to repair your device.
Connect your device to your computer to get the Software Repair Assistant.

AP Fastboot Flash Mode [Secure]
Failed to verify hab image boot
failed to validate boot image
ERROR: Failed to pass validaton, backup to fastboot
Fastboot Reason: Fall-though from charger boot mode

Other Data

(IMEI + SERIAL Removed):

> fastboot getvar all
(bootloader) version: 0.5
(bootloader) version-bootloader: moto-msm8937-B8.31
(bootloader) product: cedric
(bootloader) board: cedric
(bootloader) secure: yes
(bootloader) hwrev: P5
(bootloader) radio: 7
(bootloader) storage-type: emmc
(bootloader) emmc: 16GB SKHYNIX HAG4a2 RV=08 PV=A5 FV=00000000000000A5
(bootloader) ram: 2GB SKHYNIX LP3 DIE=8Gb M5=06 M6=04 M7=00 M8=1F
(bootloader) cpu: MSM8937
(bootloader) serialno:
(bootloader) cid: 0x0032
(bootloader) channelid: 0x41
(bootloader) uid: 313A7B0200000000000000000000
(bootloader) securestate: oem_locked
(bootloader) iswarrantyvoid: no
(bootloader) max-download-size: 535822336
(bootloader) reason: Fall-through from charger boot mode
(bootloader) imei:
(bootloader) meid:
(bootloader) date: 02-07-2018
(bootloader) sku: XT1675
(bootloader) carrier_sku:
(bootloader) battid:
(bootloader) iccid:
(bootloader) cust_md5:
(bootloader) max-sparse-size: 268435456
(bootloader) current-time: "Tue Mar 5 0: 9:16 UTC 2019"
(bootloader) ro.build.fingerprint[0]: motorola/cedric/cedric:8.1.0/OPP28
(bootloader) ro.build.fingerprint[1]: .85-19-4-2/3447de:user/release-key
(bootloader) ro.build.fingerprint[2]: s
(bootloader) poweroffalarm: 0
(bootloader) ro.build.version.full[0]: Blur_Version.28.301.2.cedric.reta
(bootloader) ro.build.version.full[1]: il.en.US
(bootloader) ro.build.version.qcom: LA.UM.6.6.r1-08600-89xx.0
(bootloader) version-baseband: M8937_46.42.02.75R CEDRIC_EMEA_CUST
(bootloader) kernel.version[0]: Linux version 3.18.71-perf-gea366bb-0001
(bootloader) kernel.version[1]: 6-g6e15bdb (hudsoncm@ilclbld31) (gcc ver
(bootloader) kernel.version[2]: sion 4.8 (GCC) ) #1 SMP PREEMPT Mon Mar
(bootloader) kernel.version[3]: 4 18:13:35 CST 2019
(bootloader) sbl1.git: git=MBM-NG-VB8.31-0-g77d3670
(bootloader) rpm.git: git=bd76357-dirty
(bootloader) tz.git: git=3f87a46
(bootloader) devcfg.git: git=3f87a46
(bootloader) keymaster.git: git=3f87a46
(bootloader) cmnlib.git: git=3f87a46
(bootloader) cmnlib64.git: git=3f87a46
(bootloader) prov.git: git=3f87a46
(bootloader) aboot.git: git=MBM-NG-VB8.31-0-g0b9dae9
(bootloader) frp-state: protected (277)
(bootloader) ro.carrier: retgb
(bootloader) current-slot:
(bootloader) slot-suffixes: _a
(bootloader) slot-count: 1
(bootloader) slot-successful:_a: INVALID
(bootloader) slot-successful:_b: INVALID
(bootloader) slot-bootable:_a: INVALID
(bootloader) slot-bootable:_b: INVALID
(bootloader) slot-retry-count:_a: unknown
(bootloader) slot-retry-count:_b: unknown
all: listed above
Finished. Total time: 0.081s

What I've tried to fix it

Rescue and Smart Assistant

I have tried to use Rescue and Smart Assistant to fix this phone, because that is what was suggest by the phone, whenever I start the repair process, it just gets to 68% and then fails.

The file it uses for the firmware is:

BUILD REQUEST INFO:
SW Version: cedric-user 8.1.0 OPP28.85-19-4-2 3447de release-keysM8937_46.42.02.75R
MBM Version: B8.31
Modem Version: M8937_46.42.02.75R
FSG Version: FSG-8937-02.65.34
Build Fingerprint: motorola/cedric/cedric:8.1.0/OPP28.85-19-4-2/3447de:user/release-keys
CQATest App Version: 6.0.6

VERSION INFO FOUND UNDER 'ABOUT PHONE' SCREEN:
System Version: 28.301.2.cedric.retail.en.US
Model Number: Moto G (5)
Android Version: 8.1.0
Baseband Version: M8937_46.42.02.75R
Build Id: OPP28.85-19-4-2
SW Display Build ID: OPP28.85-19-4-2
Build Date: Mon Mar 4 17:31:16 CST 2019

OTHER MISC VERSION INFO:
Subsidy Lock Config: slcf_rev_d_default_v1.0.nvm
Regulatory Info (eLabel): regulatory_info_default.png
Blur Version: Blur_Version.28.301.2.cedric.retail.en.US
Version when read from CPV: cedric-user 8.1.0 OPP28.85-19-4-2 3447de release-keys

AB Update Enabled: False
Full Treble Enabled: False

Flashing Firmware Manually

Whenever I try and flash firmware, the partition table can never be written as I receive the following errors (my phone will also not let me fb_mode_set):

>(m)fastboot flash partition gpt.bin
(bootloader) is-logical:partition: not found
Sending 'partition' (45 KB) OKAY [ 0.185s]
Writing 'partition' (bootloader) Validating 'gpt.default.xml'
(bootloader) Committing 'gpt.default.xml'
(bootloader) - flashing 'gpt_main0.bin' to 'partition:0'
(bootloader) Flashing primary GPT image...
(bootloader) Flashing backup GPT image...
(bootloader) Failed to write EFI backup GPT header.
(bootloader) Failed to program partition table
FAILED (remote: '')
fastboot: error: Command failed

Doing the same on linux gives a similar error:

$fastboot flash partition gpt.bin
(bootloader) is-logical:partition: not found
Sending 'partition' (45 KB) OKAY [ 0.185s]
Writing 'partition' (bootloader) Validating 'gpt.default.xml'
(bootloader) Committing 'gpt.default.xml'
(bootloader) - flashing 'gpt_main0.bin' to 'partition:0'
(bootloader) Flashing primary GPT image...
(bootloader) Flashing backup GPT image...
(bootloader) Failed to write EFI backup GPT header.
(bootloader) Failed to program partition table
fastboot: error: Command failed

Unlocking the bootloader

Sadly the phone requires you to go into the android and change a switch in the settings to unlock the bootloader, but i can't do this because I can't get into android..

Checking the storage chip can still be changed

> fastboot erase userdata
Erasing 'userdata' OKAY [ 0.055s]
Finished. Total time: 0.067s

Loading TWRP instead of flashing it

> fastboot boot .\twrp-3.5.2_9-0-cedric.img
Sending 'boot.img' (15822 KB) OKAY [ 0.517s]
Booting (bootloader) permission denied!
FAILED (remote: '')
fastboot: error: Command failed

Hard Brick

One of the last ditch attempts I tried was to hardbrick the phone, sadly due to the fact the bootloader is locked, you can't flash old firmware or broken firmware.. This meant it just booted into the same area and never went into either EDL or SD CARD mode

EDL Cable

Following this image I made my own EDL cable from an Old samsung one, but I could not get into EDL mode because the phone always boots into fastboot whenever it is plugged into a charger, so I could never get into EDL mode :///

I hope that somebody can find a way to help me, because I have tried a lot and nothing seems to work.. Even more so, whenever you search online for anyone with a similar issue, the solution is always to send it back to the manufacturer :// And one guide for a different moto phone said to try and get into EDL mode, but I could not get into this mode on my phone ://

Thanks very much in advance :)

Stay Safe,

- Jim

P.S. Sorry I don't know if this is the right place to post this :( My apologies if this is the wrong place to reply :(