[Fire HD 8 and HD 10 Original Android Development] chaosl0rd:
Hi Guys,

first of all thanks for all the hard work.

Im trying to unlock my douglas Tablet with Firmware 5.7.0.0.

And i cant get it to work , i always get the following error:

<WSRoot><InitResource>0</InitResource></WSRoot>

Decrypt Success: /data/local/tmp/fileWork

Output File Name: /data/local/tmp/fileWork.

<WSRoot><Decrypt>0</Decrypt></WSRoot>

extracting: /data/local/tmp/Bridge_wsroot.sh

extracting: /data/local/tmp/krdirtyCow32

extracting: /data/local/tmp/krdirtyCow64

extracting: /data/local/tmp/libsupol.so

extracting: /data/local/tmp/my.sh

extracting: /data/local/tmp/mysupolicy

extracting: /data/local/tmp/patch_script.sh

extracting: /data/local/tmp/root3

<WSRoot><Decompression>0</Decompression></WSRoot>

execute string: /data/local/tmp/root3 /data/local/tmp/ 2

WARNING: linker: /data/local/tmp/root3: unused DT entry: type 0x6ffffffe arg 0x600

WARNING: linker: /data/local/tmp/root3: unused DT entry: type 0x6fffffff arg 0x1

ro.build.version.sdk :22

ro.product.cpu.abi :arm64-v8a

is x64

execute string: /data/local/tmp/krdirtyCow64 /data/local/tmp/ 2

WARNING: linker: /data/local/tmp/krdirtyCow64: unused DT entry: type 0x6ffffffe arg 0xd30

WARNING: linker: /data/local/tmp/krdirtyCow64: unused DT entry: type 0x6fffffff arg 0x1

path : /data/local/tmp/

path : /data/local/tmp

[*] path_script:/data/local/tmp/patch_script.sh /data/local/tmp

rm: /data/local/tmp/sepolicy: No such file or directory

rm: /data/local/tmp/load: No such file or directory

supolicy v2.76 (ndk:armeabi) - Copyright (C) 2014-2016 - Chainfire

Patching policy [/data/local/tmp/sepolicy] --> [/data/local/tmp/load] ...

-permissive:zygote=ok

-permissive:kernel=ok

-permissive:init=ok

-permissive:su=ok

-permissive:init_shell=ok

-permissive:shell=ok

-permissive:servicemanager=ok

- Success

find_opcode offset:2d0 opcode:aaffbbee

find ok star:7fb214a008 end:7fb214a2d8 size:2d0

sh : /data/local/tmp/my.sh /data/local/tmp 2 fwrite is count 213148 /data/local/tmp/load1

fwrite is count 54816 /data/local/tmp/load2

find_opcode offset:2b4 opcode:eaeaeaea

find_opcode offset:2b8 opcode:ebebebeb

find_opcode offset:22d opcode:abababab

load = 416bc load1 = 3409c load2 = d620

find_opcode offset:2b0 opcode:efefefef

find_opcode offset:24d opcode:cdcdcdcd

find_opcode offset:2bc opcode:acacacac

init_shellcode

loadsize:267964

loadpath:/data/local/tmp/load

shpath:/data/local/tmp/my.sh /data/local/tmp 2

shpath:2bc

open /proc

PID:188

find logd pid : bc

_inject_start_s:0x7fb214a008

Copying /sepolicy to /data/local/tmp/cp_sepolicy

cow_exploit_mv_file_init: Overriding /sepolicy from /data/local/tmp/load1

size: 213148

[*] mmap 0x7fb1f3b000;

[*] exploit (patch)

[*] currently 0x7fb1f3b000=8f97cff8c

sched_setaffinity: Invalid argument[*] madvise = 0x7fb1f3b000 213148

checking the patch ... exploit

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

sleep 1s

exit fork(), loop time more then 30s

<WSRoot><Exploit>0x00000332</Exploit></WSRoot>

check done

sched_setaffinity: Invalid argument<WSRoot><Exploit>0x00000382</Exploit></WSRoot>

FAIL : load1 --> /sepolicy

<WSRoot><Exploit>0x00000341</Exploit></WSRoot>

<WSRoot><Exploit>0x00000881</Exploit></WSRoot>

<WSRoot><Done>0x00000172</Done></WSRoot>

Any Help would be appreciated.