yashsingh1/xdaforums huggingface dataset:
[JASJAR, XDA Exec, MDA Pro General] zx6r2004:
HI can any one help me out with racing thunder for my m5000 iv search all over cannot find it any where.. seen it on youtube on another one looks mint

any help please ;)
[Android Head-Units] blegend25:
I have 9" DW H MTK8227 1+16GB IPS auto android ,and it stuck in boot logo .

I want to hard reset it using sp flash tool . But my problem I can identify my firmware.

I tried to find it in xyauto website but am confuse.

Please help.

My android version is 10
[Samsung Galaxy A52s 5G] dimabelk:
Hello! Recently I've bought Galaxy A52s and noticed one issue. During the audio playback or calls on low volume, and for a few seconds after the call or video has ended, there is some static and slightly crackling sound coming from the speaker and earpiece. Has anybody encountered that issue and is it a defect or it's just how speakeres work on? Should I return it or just ignore it?
[Samsung Galaxy A52s 5G] BlueChris:
Return it, never experienced this in 3 A52s
[Samsung Galaxy A52s 5G] DeblaGaming:
Return it, not an issue with my unit.

Cheers
[XPERIA X1 General] comeradealexi:
I got a tiny scratch on my xperia x1 screen today i dunno if this started before or after because i wouldnt have noticed but there is a non responsive sector on my screen!

at the bottom when i am using the keyboard I literally cannot press the "n" key if i try it goes randomly to other letters!!

or other letters around the "n" key

MY X1 IS BROKEN!!! :'(

:mad::mad::mad::mad:
[XPERIA X1 General] Pyrojester:
Should be covered by your warranty, good luck!
[XPERIA X1 General] Ves:
Well actually screens aren't. That's the one thing that I was always told by HTC.
[Android Head-Units] prodeuce13:
Hey y’all,

I’ve been searching for hours and I’m trying to figure out what type of head unit I have? I did read somewhere that someone suggested that I take a look at the board itself to see the model number, but I’m apprehensive about taking my unit apart. Any help is much appreciated!
[Introductions] xidius:
I'm an android curious guy, trying to help other people.
[Introductions] orb3000:
Hi welcome aboard
[Introductions] xidius:
thank you :)
[Android Head-Units] FRZ1010:
Hi! I just bought and installed a 8227L Android Navi on my car. Everything worked fine until it crashed,rebooted itself and now it doesn't recognize the volume knob on the unit. I can set the volume but only from my steering wheel. I tried to set it within factory settings at key study, but it does not recognize, it says key study fail. Other buttons I can remap.

Any tips to fix the issue??

Android: 9211B_00020_V001

Android os: Android 11.0 XY AUTO: F7.3 (X2)

CAN Pro: 9.0.3 (connect): jotan / Sagitar / Jetta / Bora / Tic

DDR: 2G

FLASH: 16G

cpu: A7 1.3GHZ x 4

display: 1024+600

MCU: 4.0 (X2)

Attached you have some pics with more info about the unit. Thanks in advance!
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
Edit-- after studying a couple days I understand why no modification to the images would work, which is due to AVB. I have a lot more studying to do and I will explain better. This thread is currently a mess of notes from a noob picking a kind lady's brain

Hello All~!

This is an effort to understand what exactly is going on with the files contained in the boot.img from our shield --edit to understand this on the shield, we must understand the other images as well (dtb, vbmeta. and the "staging blob" that comes with the shield)

ImgUtil

Miss @Renate has developed a wonderful tool to allow us to see the contents of our boot.img by placing her tool in the same folder as the boot.img and running this code:

imgutil.exe /v /l boot.img

Spoiler content hidden.

This was only possible Thanks to Renate.

AVB NOTES:

Finally figured out how to actually use the avb tool.. I feel stupid. Copy this script and make a new file called avbtool

Per this link I learned how to make an empty vbmeta with the tool, i had to add "python" to the front

python avbtool make_vbmeta_image --flags 2 --padding_size 4096 --output vbmeta_disabled.img

That allowed me to generate an empty vbmeta

The avbtool help menu:

View attachment 5792745

Signing boot images for Android Verified Boot (AVB) [v8]

Various Android devices support Android Verified Boot (AVB). A part of this is more commonly known as dm-verity, which verifies system (and vendor) partition integrity. AVB can however also verify boot images, and stock firmwares generally...

xdaforums.com

super helpful

Boot Flow | Android Open Source Project

source.android.com
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] Renate:
There can be image signing with vbmeta and/or AVB on the image itself.

Whether these are enforced is another question and can most easily be determined by experimenting.

Most people grab a boot image out of a partition. The whole partition.

In the days before AVB0 signing this meant you might copy a 64M partition and get 24M of actual image and 40M of zeroes.

In the days after AVB0 signing this meant you get 24M of actual image, 2k of signing, 40M of zeroes and an itty-bitty AVB0 footer.

That AVB0 footer is a pesky detail.

You can see it if you have the whole partition and use a hex editor at the very end (size-4096).

As Magisk deals with boot images I should double check what they do. I believe they don't modify the AVB0 footer at all.

Using my EDL client edl.exe there is the /t option to trim an image to the real ~24M live bit.

In imgutil.exe there is the /p option to strip padding.

If your fastboot works fine, you have a nice recovery and you feel confident you can experiment.

You can trim your stock boot image of its padding using imgutil.exe (which I believe leaves the AVB0 header intact), then:

fastboot erase boot
fastboot flash boot mytrimmedstock.img

You can even trim away the AVB0 header (using the address shown in imgutil.exe) and see if that works with erase, flash.

Then there is the vbmeta. That is a check on things too, whether enforced or not is also a question.

You can often replace it with an disabled vbmeta image.

Your dtb is in a separate partition.

On my main device it's on the kernel. I modify (in hex instead of dtc round-tripping) it to not verify /vendor.
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
@Renate Thank You, Seriously For Your Time. I was Just Looking at your EDL tool! I am going to play with all of this now. I cannot even begin to tell you how happy this has made me.

This is the link to her edl tool

EDL Utility
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
i deleted the vbmeta link that was originally listed here. ordinarily i would leave the comment up for knowledge, but I don't want anyone to get off the path. We need to learn the avb tools and generate our own, not use others due to the cryptographic hashes associated with each image that chains to the "staging" blob
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
Hi @Renate May I bother you again? I am stuck on two parts,

You mention editing the dtb to not verify /vendor could you help me to understand how to do that?

I threw my dtb.img into HXD and searched for "vendor" and it brought up this

Spoiler content hidden.

but I am unsure if this is what I need or what to change it to?

Also I wanted to try to do what you say here "You can even trim away the AVB0 header (using the address shown in imgutil.exe) and see if that works with erase, flash."

I took that to mean use imgutil.exe to /d the Header1 file? Is that wrong? I tried all these but I cannot figure out on my own how to do it

Spoiler content hidden.

>.> i at least figured out the padding part
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] Renate:
No, I'm not saying that you have to change dtb.

In today's world you can "modify" things by using Magisk modules (and not modifying /system) or by burning your bridges and just modifying /system.

If you do that you'll have to get rid of all verification (and FEC if present) and you it make updates impossible without reverting back to stock.

Your choices are influenced by what the OEM offers for updates and how much you want to sink your teeth into swamp critters.

Looking at a dtb in raw hex will make you go blind.

You should use dtc to disassemble/assemble.

It's probably not on your device but it is in any Linux.

I use my own dtbview.exe (not ready for prime-time) to get a dump with addresses.

If you like (for learning) post your dtb.
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
@Renate this is the dtb image, and thank you for telling me about dtc LOL I will get that installed in my ubuntu VM.
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
Also @Renate is this the right tool?

Spoiler content hidden.
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] Renate:
Yeah, that's the right tool.

I don't know if the mysterious new header on Android is part of Linux or not.

So your dtb partition is 2M

The end of actual data is 7c394, so basically 1/4 of the partition.

But it's also AVB signed, look at offset 7d000

And its silly footer at 1fffc0

Here's the listing for your edification
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
@Renate Hi, I'm going to probably bother you till you block me...

But could you explain to me how you were able to take that dtb image I shared with you to turn it into the text file? I tried to use the dtc tool in linux and on windows but I cannot figure out how to get the listing like you did.

Here's what I was trying View attachment 5756879
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] Renate:
Yeah, it does!

That's what I've been fighting about. They decided to add some header.

Some dtb's have multiple separate models built in. Why? I have no idea.

Instead of ye olde fashioned "a dtb is that period" they decided to put in a header.

I'm sure that's it's documented somewhere.

If you are just doing this for your own amusement, knock the first 128 bytes off the file and it can be disassembled.
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
@Renate I Really Am doing this for my own fun. But For A Total Noob, can you explain what this means? "knock the first 128 bytes off the file and it can be disassembled" I'm so very sorry. I have always been intrigued with disassembly but I do not know very much :(
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] Renate:
Somebody at Android decided for whatever reason to extend the Linux DTB by putting another header before it.

Obviously Linux doesn't know or care what Android does.

If you look at offset 0x80 you'll see the normal signature of 0xd00feed (in bigend).

We can discuss whether that's politically questionable, but that's the way it is.
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
@Renate I guess what I am having trouble understanding, is where are these offsets that you are pointing me to with all this valuable information? Like you said here "If you look at offset 0x80 you'll see the normal signature of 0xd00feed (in bigend)."

When I look at the offsets in the text file I don't see anything called 0x80 it's the same trouble for me to fully understand what you were telling me earlier

Spoiler content hidden.

"But it's also AVB signed, look at offset 7d000

And its silly footer at 1fffc0"

How do I see these offsets that you so awesomely took the time to point out?
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] Renate:
When you look at something like this you're looking at a raw chunk of memory.

As such, every bit of it, err, every byte of it has an address.

The first byte is zero and it goes up from there.

"0x80" is hex 80, (i.e. 128 bytes) into the file.
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
Does that mean these first 8 lines of offsets are the the first bytes? Is this what I would want to blank out to remove the header? View attachment 5756937
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] Renate:
So, look at the line with 00000080: d0 0d fe ed, "doodfeed"!

It's not a question of "blanking" it's a question of "skipping".

Although I don't o-fish-ally release it, here is modfile.exe: modfile

C:\>copy dtb dtb-short
C:\>modfile dtb-short /s 80
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
Gosh, Thank You. "d0 0d fe ed, "doodfeed"!" This, this did it for me to Understand. Haha. Thank You for the modfile tool as Well@@!

I got to get some sleep, but rest assured I will be back tomorrow to bother you even more!
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
@Renate Good Morning!! THANK YOU for helping me to learn how to "Skip" the erroneous header! This is something I Literally would never have learned Without You! Your modfile tool is so Neat! Also appreciate the Semantics!!

FIRST QUESTION! How do I produce a text output file similar to the one you shared with me? As in one that has all the offsets at the beginning of the line?

I ran this command after the skip (It finally worked yay!! No magic number problem!!):

dtc-tool.exe -I dtb -o dtb.txt dtb.img

I got this output text, which is noticeably missing the offsets that your copy provided.

Spoiler content hidden.

Spoiler content hidden.

Spoiler content hidden.

SECOND QUESTION! Theoretically, if I wanted to add a new Bootloader to be able to run windows, Would that be done in here? Or more specifically, somewhere in the DTS? We don't have to go into technical specifics yet... unless you want to :devilish: but is it possible?

THIRD QUESTION! When I was learning how to flash the images onto the Shield, Nvidia made mentions to use this command to flash the "staging blob" I have always wondered Why and What is this, is it needed do you know?

Spoiler content hidden.

Thank you as always for your time
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] Renate:
Well, it's not really erroneous. It's just a new wrinkle that Android has thrown at us. It needs to be there.

I haven't looked for documentation. Sometimes the header is 64 bytes, somethimes 128.

The size is in the header at offset 0x24 (big-endian).

Yeah, that's from my own dtb dumper that I wrote. The regular Linux dtb doesn't show that info.

Usually it's of no interest to anybody unless they want to modify the file without dtc/dtc'ing the file.

I've sometimes ended up writing dumpers/disassemblers like existing ones except that they show the actual location.

This is a snippet from a disassembly of an .apk:

C:\>dexdump classes2.dex /cKeyboardEntryMap /mgenerateMap
KeyboardEntryMap
002eebec generateMap
002eebfc const-string/jumbo
002eec02 invoke-static
002eec08 move-result-object
002eec0a if-nez
002eec0e return-void

While the normal apktool/baksmali generates the more comprehensive:

.method private blacklist generateMap(Ljava/lang/String;Ljava/util/Map;)V
.locals 6
const-string/jumbo v0, "keypad"
invoke-static {p1, v0}, Landroid/onyx/util/KeyboardJSONUtil;->getKeyboardEntryList(Ljava/lang/String;Ljava/lang/String;)Landroid/onyx/util/KeyboardManager$KeyboardEntryList;
move-result-object v0
if-nez v0, :cond_0
return-void

I've never looked into how Windows boots on a phone. The normal Android boot process is:

ROM bootloader -> xbl -> abl -> boot.img -> init -> zygote -> launcher -> app

Windows doesn't use Linux device trees or dtb.

I presume that Windows would use the xbl but the abl would be different.

I've never run into a "staging" partition. You could pull it and see what is there.

# dd if=/dev/block/by-name/staging of=/sdcard/staging.img
# ^D
C:\>adb pull /sdcard/staging.img
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
Thank you! I thought about my wording there and wasn't sure but I put it anyway. I appreciate you explaining. I am going to pull the staging image now! I kept seeing all these guides saying to use dd and now it's time to get some real world practice.
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
@Renate I will be honest I couldn't get the dd if command to work, but I went ahead and just tried to dtc the blob and interestingly it did the same thing as the dtb.img

Spoiler content hidden.

So I threw it in HXD and noticed right away it mentions VBMETA and AVB0

Spoiler content hidden.

For other noobs, if you want to customize your HxD open Tools and select Format

Spoiler content hidden.

If you have time, could I get your Expert opinion on what this image is? I had to rename it from blob to blob.img to share

Also I am trying to catch up from yesterday. I want to make sure I am understanding how to lookup the offsets you mentioned yesterday pertaining to the dtb partition:

Spoiler content hidden.

Is this how I would look at what you are talking about?
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] Renate:
No, you'd use some command at the top menu bar to "goto 7d000".

Or else you'd just scroll down until the address on the left says 7d000.

As you figured out, this is a "NVIDIA__BLOB__V2", i.e. some custom NVidia thing unknown to the rest of the civilized world.

It packs up a bunch of stuff that apparently will be used by something to patch various partitions.

It contains one DTB at offset b5274 and another chunk of three appended DTBs at offset 502F7C.

Plus a bunch of other stuff, some ARM 32 bit code it looks like.
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
Facepalm. She was correct. Select "Search" then "Go To" to view the offsets.

Spoiler content hidden.

Now I am finally at a point where I can start to experiment and sort of understand what I am trying. It also helps that Renate provided everything one could hope for as far as search terminology! Wish me luck :)
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] penguinsaregreat:
Good luck !(y)
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
The repository for AVB

platform/external/avb - Git at Google

Spoiler content hidden.

Spoiler content hidden.

Spoiler content hidden.

I kinda got distracted today trying to get wimlib to run in termux, but I cannot get any of the packages hosted by termux to work natively. So then I learned about the proot-distro package and figured out how to install a full version of linux using it, and now I have to learn how to install the packages and wimlib inside the ubuntu machine inside termux o.e

Turned out to be a huge waste of time as QEMU would have the same functionality. I am back to figuring how to understand these partition schemes
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
I had read this share earlier but it didn't quite make sense. Now thanks to Renate I understand better what he is doing here

https://blogwifi.fr/box-android-x96-sous-linux/ this would not work step by step bc they are using a kernel for a different device, but with some more studying maybe we can take the shield kernel and do the same? I think I have everything needed except the knowledge, so I will just keep reading and adding links and if anyone is able to shed any light on anything in this thread not necessarily this tangent I am on, that would be awesome :) I just think I don't have a full understanding of my kernel and it's partition scheme, and especially since the staging blob is encrypted, I need to decrypt that so I can see the full picture. Maybe time to figure out how to make AVB script work

original thread:

https://xdaforums.com/t/linux-on-tv-box.4503781/

Spoiler content hidden.
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
New day new notes.

Spoiler content hidden.
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
This was one of the best talks I ever heard on UART and well hardware hacking in general. Valerio Di Giampietro has really inspired me to get the cables and multimeter I have been thinking about. I have seen so many people using these but I didn't know where to start. This Brilliant man made it so easy to Learn, idk about the practice part yet but we will find out one day

https://www.youtube.com/playlist?list=PLoFdAHrZtKkhcd9k8ZcR4th8Q8PNOx7iU

Valerio is your "friendly italian hacker neighbor" and gosh I love the way he speaks :)
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] Renate:
Looks good, I'm watching the JTAG one.

When you get a USB UART interface, make sure that it works on both 1.8V and 3.3V.
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
@Renate Thank You again as always. You better believe I will have some questions when I get things up and running! I have a spare room to turn into a lab this week and I'm ordering the stuff now so the only limitations will be the shipping speed. Thank you seriously. I would have never found him without you even telling me about "the avb headers" and it made me wonder what the heck was that and so forth. Haha. I hope you enjoyed him as much as I did. He is adorable.
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] Renate:
I like UART connections. That's why I install connectors on my devices.
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
@Renate that is a Beautiful Device!! Is that your phone or something you are building?

Could I also ask? Besides the board, I see on amazon where they have the "Jumper wires" or "Ribbon cables" so I know I need those two things but would there be anything else I would need?

Spoiler content hidden.

Or even anything you could suggest related to this stuff? I heard about some folks playing with a heating plate to do things that sounded like magic. I want to do that too but I was literally listening and idk what it is. Or if related. Haha. Trying to do better to save these things now.

Is this the reason some of the computer folks use Microscopes? Or why do they have microscopes in their labs?
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] Renate:
This is a better choice, it also does 1.8V which is what most things now use. https://www.amazon.com/DSD-TECH-SH-U09C5-Converter-Support/dp/B07WX2DSVB/

That photo is my Onyx Poke3 ereader. Ereaders have plenty of internal space, so bigger PCBs and they can make things more accessible.

Many UART holes are laid out for 0.1" pitch connectors, like the JST XH series which is what I have in the photo.

For test purposes you can stick a pin in a PCB hole and give it a bit of side pressure (like taping the wire down) to give it a good contact.

You pretty much never want to connect to any pin that says "Vcc". (You might measure it to double check what the logic voltage is.)
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
Gosh @Renate Thank You, you have saved me a lot of likely future Grief. Would you happen to have a recommendation for a multimeter? Or may I ask what do you use? If you don't mind sharing
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] Renate:
I wouldn't go too crazy on a DVM, You really don't need too much accuracy, but you don't want junk.

It's hard to pick one on the low end of the scale because there are so many of them.

I saw one at Amazon that looked popular, but then a review said the continuity beeper had too much lag.

Also, it gets into preferences. I prefer a manual range meter. Auto range is also popular.

This says it's "Amazon's Choice": https://www.amazon.com/Etekcity-Multimeter-MSR-R500-Electronic-Multimeters/dp/B01N9QW620/

Bottom line, the DC accuracy is plenty good, how convenient to use on continuity is unknown.

The probes are never really nice on cheap meters.
[Nvidia Shield TV & Shield TV Pro (2019) Guides, Ne] jenneh:
Thank you. I figured one of the Amazon choices would be a good buy but I wouldn't have gotten all these nuances or differences as you have described. Now I can make my purchase and not have that nagging feeling of "What if"