yashsingh1/xdaforums huggingface dataset:
[Droid Eris Android Development] binny1007:
Shouldn't the source be available? I mean technicalaly this is open source, does somone want to email HTC and see if they will release the source code to us? If not I will email them after work today.
[Droid Eris Android Development] ataranine:
Wouldn't Google have that, instead of HTC? Since it's their OS?
[Droid Eris Android Development] tbaker077:
I think we would have to email both as Sense UI that is built on top of Android is an HTC exclusive.
[Droid Eris Android Development] jmanley69:
Ok... see... this is the tricky part.

Google wrote the Android OS... the stuff that's in /system. And that's available directly from Google....

Assuming HTC hasn't modified anything there... they aren't required to give you source code for that. Only the items in /system that are under the GNU license, that they've modified.

Now... HTC is not required to give you the source for their programs. Even though they run under the Android OS, which falls under the GNU license because it's based on a modified Linux kernel.... Their programs are copyrighted to them and those programs (like Rosie) aren't covered under any GNU license.

So... the only thing that HTC is required to give you is the kernel. Eventually, they will. That's the tricky part. You have to submit in writing to HTC for the kernel that is on your phone. They must provide that under the GNU license. If they don't, you have to contact the owner of the GNU license, which I think has been turned over to GNU.org by the original license owner Linus. Then... GNU.org will decide what to do next and may or may not sue HTC. After all this goes down (which may take years), HTC will eventually release the source. I think it took them 6-8 months to release the source for the GSM Hero.

Once HTC releases the source, it's usually incorporated into the kernel available from Google, but that's not necessarily a requirement. If HTC has modified files in a branch of the repository too much, then Google will not accept the changes into the main trunk. That's when you get a split (which has happened many times in the Linux community).

Hope this clears it up.

The short is... HTC gives you the source for the kernel, Google gives you the source for Android (everything in /system). If you want the source for the kernel to your phone, you will need to write HTC a letter requesting the source code.
[Droid Eris Android Development] ataranine:
I say we all write them! :D
[Droid Eris Android Development] zifnab06:
Already on it. Customer support, here I come.

Edit - Attached letter

Hi,

I recently purchased the Droid Eris from Verizon, aka HTC Desire. I'm looking for the source code for the linux kernel that comes on the phone. I'm having some problems finding your modified kernel. The original linux kernel was released under the GPL (GNU Public License) license. This license states that any software that uses code from a GPL project must, in turn, either be given out with source code, or have some sort of way to obtain it, AND be licensed under the GPL. I'd like to point out, also, that the entire android project is released under the GPL, so any derivatives of their code must also be released under the GPL.

I'm looking for the source code for the Desire's kernel. I'd appreciate information on how to download it. If you don't have access to it, I'll gladly contact the GNU Violation department, and see what they have to say, and also contact Google, as they are the copyright holders for the original Android GPL.

Thank you!

Tom Powell
[Droid Eris Android Development] jmanley69:
Been there... done that.... email... call.. called corporate... no dice. The terms of gnu require written words ... real mail...

Email support will tell you to ask Google. Then you say no... the kernel that you guys wrote.... then they say check android community. Then they say they don't have the source for 3rd party apps. Then they say Google.... it goes around and around q few times until they realize you want the kernel (which is what you asked for In the first place) then they say they don't have that information but they will forward your request (which they don't) and tell you to call the phone support.

Phone support says they only do tech support and don't have access to development stuff like source.

In the end all your left with is legal recourse that they know will take so long that by the time its done they have released a new kernel. They will gladly release the source after your phone is already rooted... out of the kindness of their hearts.

They have been playing this game a long time.

Go ahead if you like... but search the interwebs.. the story is the same wherever you look.
[Droid Eris Android Development] zifnab06:
Sadly, I'm going to be putting a violation in with the GNU in a few minutes. They violated a few of the terms as I can tell :D Mine as well. Meh.
[Droid Eris Android Development] binny1007:
Just got my first email back refering me to developer.HTC.com sent one back saying the Eris source code is not on there. So this should be fun.
[Droid Eris Android Development] jmanley69:
Sounds good. Keep in mind that gnu.org requires you to have made every attempt first and give them all correspondence and registered mail records. This will turn into a law suit and they must have enough to win before they get involved. Read their site very carefully or they'll just throw away your complaint.

You actually might have better luck by contacting the better business bureau and your state's attorney general and the attorney general in the state where they list their American headquarters.
[Droid Eris Android Development] dovo:
well sh!t

This is really beginning to bother me. I originally bought HTC products because they made it accessible. If this is what it will be like from this point on, maybe I should have just bought the Motorola crap instead.

If these a-holes can't understand what it is we're looking for, well we're left with the only other option. We settle for the garbage that we can make to work the way we want, versus the quality product that is so locked down and difficult to customize it's not worth owning.

HTC you failed me and now I'm considering never buying your crap again

-a once loyal customer
[Droid Eris Android Development] jmanley69:
I understand your frustration 100%. I think the CDMA Hero went unrooted for a month and a half... not sure exactly. I took that time to learn how to write programs for Android, and learn everything I could about my phone (as well as try to find a root method). Fortunately for me, but unfortunately for Eris owners... the flaw in the kernel was demonstrated early on (before HTC released your phone... so they were able to fix it in your phones).

So... I do understand that it's tough using a phone that you know can be so much more. But... and I mean this with 100% compassion... b!tch!ng and moaning about it won't root the phone. Not to say you shouldn't be able to do so, I'm just saying... let's take that energy and direct that toward scouring the interwebs for a vulnerability. Everybody search out people that have released SSPL's and HardSPL's for various phones and platforms... find out if any one of them can give us instructions on writing our own.... Look under every digital rock and in every e-corner to find a 0day vulnerability in the Linux kernel. I'm willing to use all my programming godness to help you guys out... I know that the answer is out there someplace. If we can just find a "how to" on creating an SSPL or HardSPL for the Eris... I'll put it into play.
[Droid Eris Android Development] apreichner:
If the Kernel was really under GNU Public License, shouldn't we be allow to modify it and place it on our devices? So couldn't we sue over not allowing us to modify GNU code to our liking on OUR device?
[Droid Eris Android Development] apreichner:
This speech got me almost as energized as the speech Mel Gibson made in Braveheart! *starts looking*
[Droid Eris Android Development] jmanley69:
The only thing preventing you from doing so is that HTC has written drivers for the radio on your phone. Without those files to compile into the kernel, it won't compile.

I can take the GSM source, and take the /proc/config.gz from my phone and it errors out with just 1 piece of hardware causing the problem.

The difference between my phone's config, and the "default" config is about 20-30 items, but I can switch all those items back from the default config to what's on my phone and it compiles fine each time. It's not until I change the radio to what's on my phone (CDMA on the Sprint network which is different than CDMA on Verizon... let's not get into those specifics right now though). The kernel that HTC released for the Hero is very complete for the GSM Hero, but is missing the CDMA files (and who knows what other things they may have changed along the way).

So... Yes... if you had a kernel that compiled, and a way to put it on your phone, you could modify the source and turn things on like ext4 (which I wouldn't recommend), and put it on your phone.

If you had the driver specific files (which are most certainly covered by the GNU license since it's compiled into the kernel's binary), then you'd be able to compile your kernel just fine (actually, you'd be able to compile the Hero kernel with the asroot and asroot2 vulnerability - since you don't have the recently modified kernel source).
[Droid Eris Android Development] jmanley69:
They can take away our su... but they can't take away our freedom!

Rudy! Rudy! Rudy! Rudy!

<insert other inspirational movie quotes here>
[Droid Eris Android Development] eroxb:
rooting

well certainly there must be something to exploit on the eris. I mean im getting glitches and bugs all the time. for instance when getting a text message and starting an application or any number of scenarios where you make it do 2 or 3 things back to back. Or is that not something that can be exploited?:confused:
[Droid Eris Android Development] apreichner:
*plays theme song from Rudy- Then skips to Rocky Soundtrack*

YO ADRIAN!!!!
[Droid Eris Android Development] JTF2007:
Will the Verizon CDMA radio drivers from the Motorola Droid work or at least give us a starting place? How about modifying radio drivers from other HTC Verizon phones that might have the same hardware but need an Android driver instead of a WinMobile driver?
[Droid Eris Android Development] jmanley69:
unlikely, but possible. Has Motorola released the kernel source for the Droid yet?

Also... and this is a big also... you MUST remember. You can write your own kernel till you're blue in the fingers, but you have absolutely no way to apply it to your phone. period.
[Droid Eris Android Development] binny1007:
From HTC

Hello Mike,

Thank you for your reply regarding the source code for the DROID ERIS by HTC. I will be more than happy to assist you with that information.

I wish to apologize for any misconception you may have inferred from my previous response. HTC has not modified the Google Android source code in any way. We have added the HTC Sense User Interface (U/I), an application the HTC Sense User Interface (U/I), an application proprietary to HTC that does not modify the original source code. Examples of other applications are the Verizon Wireless radio codes, which were obtained from the Federal Communications Commission (FCC) and are proprietary. In all cases, the original source code remains intact. Wireless radio codes, which were obtained from the Federal Communications Commission (FCC) and are proprietary. In all cases, the original source code remains intact.

I hope we have answered your question in detail, Mike. Feel free to contact us again if you have any further questions. You may also visit us at www.htc.com and our user forum website www.htcwiki.com for further assistance. In order to improve our service, I would like to invite you to participate in a survey on the worldwide HTC website at http:// in a survey on the worldwide HTC website at http:// survey.htc.com/worldwide.

HTC Technical Support

http://www.htc.com

http://www.htcwiki.com
[Droid Eris Android Development] binny1007:
If that was true than asroot2 would work.
[Droid Eris Android Development] FireSokar:
asroot2 may of been patched by google, and just not "released" yet. I do not believe they have to provide the source for patches.
[Droid Eris Android Development] crax0r:
But if we found the patch files, could we like, change it back?

We really need a chat room for everyone in here so it doesn't crowd up the forum. ;)
[Droid Eris Android Development] jmanley69:
The patch file is the mmap_min_addr file that exists (we talked about that on page 90something) in whatever directory.

Unfortunately, only root has access to write to that file, so you can't change it without root.

We tried an exploit that was supposed to let us write to files that we didn't have access to, but apparently the exploit really only lets you write to files you can write to that are in directories that you can't get to but only after you got to that directory and referenced the file before the permissions on the directory got changed to deny you access.
[Droid Eris Android Development] crax0r:
Yah, sorry, I wasn't here until about page 96 and I didn't get to re-read everything, I've been busy.
[Droid Eris Android Development] tbaker077:
I have seen people getting their HTC Touch and 6800 on VZW working with Android on a SD card. You think we can get CDMA radio drivers off those ports?
[Droid Eris Android Development] jmanley69:
NO harm.... I do remember reading some hole that lets you do stuff with files in C that you're not supposed to be able to... maybe you guys can find that vulnerability someplace.

I think I remember seeing that it would let you overwrite a file in C if the file already exists but you don't have access to write to the file... I'm not sure though.
[Droid Eris Android Development] jmanley69:
But what are you going to do with them when you get them? Remember... you have no way to put your custom kernel on your phone.

I'm running with the stock kernel and the only thing it doesn't do is ext4. But I don't care because ext4 is not stable in our version of the kernel... Even if it where, we don't have an SD card large enough to benefit from ext4. and even if we did, we don't have any files large enough to benefit from ext4 because our phone is such small memory (comparatively), that it would be pointless to have very large files.
[Droid Eris Android Development] binny1007:
Oh boy jman I have looked through so many expliots that I don't even know were to start... do you remember any other details?
[Droid Eris Android Development] jmanley69:
I'm sorry I don't remember much. It had something to do with a function that opened a file or wrote to a file or copied... maybe that's it... copied a file. But, whatever it was... somehow you tricked the kernel into giving you access to that file. I didn't think anything of it because basically everything on the phone is locked down through /system as ro. But wherever you guys found mmap_min_addr, that was under /proc I believe.

If... somehow... you could modify mmap_min_addr (as root) to contain 0, then you should be able to run asroot or asroot2, and get root access. Maybe not though C, but somehow, someway.

I know I saw it in one of the links I gave you guys at one point (you know... somewhere between pages 20 and 95). I'd say... use The Google, but I wouldn't know too much to tell you other than what I've already said.
[Droid Eris Android Development] crax0r:
Here's the chat room link: http://widget.meebo.com/mcr.swf?id=OvbWEWXLtR

Well our main problem is that we don't have root access, right. So what if we could somehow, someway, BYPASS the rom checking??? Would it be possible?
[Droid Eris Android Development] binny1007:
Haha ok ill do my best and search like heck.
[Droid Eris Android Development] crax0r:
Good, because I think the pulseaudio was a failure. There is no folder. :| So could it possibly be a way to bypass the rom checking?
[Droid Eris Android Development] binny1007:
If you can bypass the Rom check than you cam do whatever you want.
[Droid Eris Android Development] powerpup118:
Hi guys!

Could someone possibly link me to some information on the keys used for the updates?

what kind of encryption?

It has to be decryptable.

If the keys where unique and each phone checked for say "blabla663" then HTC would have to either get another update of theirs to read "blabla663" or change what the phone is looking for?

Can someone explain more on this? wikipedia links?
[Droid Eris Android Development] crax0r:
Just one problem, if we root the Eris BEFORE the 2.0 update... could they patch it. Becuase I know there are spys in here... Should we wait for the 2.0 update, and if we wait, they could fix a exploit we didn't even see...

So here's everone's homework:

1. Try and find the 2.0 firmware.

2. Try and find ROM bypass exploits

3. Try and get root access
[Droid Eris Android Development] binny1007:
Jman could this be it.

http://www.arnes.si/si-cert/cve/pokazi.shtml?id=CVE-2009-3725
[Droid Eris Android Development] JTF2007:
Would any of these help?

Atmel Corporation, a member of the ARM Connected Community, has announced the availability of the latest Linux mainline release, v2.6.27, for its 400 MHz ARM926EJ-S-based AT91SAM9G20 embedded microprocessor, and for other members of the AT91SAM9 family. http://www.arm.com/iqonline/news/partnernews/23797.html

This link looks like a Linix kernel USB driver database and there are a few lines with "6200" as the product. http://cateee.net/lkddb/web-lkddb/USB.html

What about the radio file for 1.5, ota-radio-2_22_19_26I.zip. It seems to be available all over the web.

Name: kernel-tmb-source-2.6.27.29-2mdv

http://fr2.rpmfind.net/linux/RPM/ma...-source-2.6.27.29-2mdv-1-1mdv2009.0.i586.html

Just my $.02 worth of efforts.
[Droid Eris Android Development] FireSokar:
Full proof method to root your droid eris:

1) Someone setup a paypal account for donations

2) if you want your device rooted donate

3) First person who roots the device gets the money.
[Droid Eris Android Development] ataranine:
The day I have to "pay" in any way for root, is the day I don't want it anymore.

This should not even be a resort of any kind.. all the other phones were rooted without that kind of incentive.
[Droid Eris Android Development] apreichner:
They could have already fixed the exploit with the update that was pushed out a while ago. Although, I think even if they did, we could just flash the older update image. What we need is a way to flash ROMs without being root if this is at all possible. It was for Winmo devices, by methods such as HardSPL and USPL (SoftSPL). If we find a way to do this for our device, we can do anything pretty much, including root.

EDIT: Although what we can hope for is they'll use the same Kernel and Patches as they do for the Hero 2.0/2.1 update coming.
[Droid Eris Android Development] FireSokar:
They were cracked because they were popular, theyre not enough people who are devs and have this phone. Also who said you had to donate? Those wanting it quick could donate... and if you dont donate o well hack still goes out. just like the rom devs get donations...
[Droid Eris Android Development] rigamrts:
that's where the rom cookers comes in. he'll replace the patched kernel with his make some tweaks and then we have 2.0 without having to update from HTC.
[Droid Eris Android Development] Aciddrag0n:
Anything a VZ employee can help with? I'd do anything that doesn't risk my job haha.
[Droid Eris Android Development] FireSokar:
Sure remove the data package from my contract :D that would help alot!
[Droid Eris Android Development] crax0r:
Come talk to me in my chat room. http://widget-cdn.meebo.com/mcr.swf...il.live.com/mail/InboxLight.aspx?n=1143595460
[Droid Eris Android Development] jmanley69:
If you root your phone before 2.0, you can apply the ROM on your own terms (i.e. keeping root).,
[Droid Eris Android Development] jmanley69:
Yes, I believe that's it... I'll have to take a look at it later though.
[Droid Eris Android Development] crax0r:
I LOVE PhotoShop! :D

Although this one was crappy and fast...but would be a sight to see.
[Droid Eris Android Development] ataranine:
Lol? Is that an ironic picture? :P
[Droid Eris Android Development] redman213:
So did the exploit Binny find work?
[Droid Eris Android Development] zifnab06:
a note (from me). donations go to /dev/null. if you don't get what that means, look it up :D

anyways. i was looking through the link binny put up a few pages ago. we just need someone now to write the code, and we might have root. i haven't been able to find an exploit that's been written using those holes yet, but it seems like it should work. the patch for it was pretty simple overall....

@@ -855,6 +855,11 @@ static void cn_dst_callback(struct cn_msg *msg, struct netlink_skb_parms *nsp)
struct dst_node *n = NULL, *tmp;
unsigned int hash;

+	if (!cap_raised(nsp->eff_cap, CAP_SYS_ADMIN)) {
+	err = -EPERM;
+	goto out;
+	}
+
if (msg->len < sizeof(struct dst_ctl)) {
err = -EBADMSG;
goto out;

check for permission, deny permission, stop. and woot! they used a goto! (bad programming practices, but really really useful). now we just need someone to write the code to do it. i don't have the know how to do it sadly, my C is a little lacking...

anyways. it appears that the hole is there, just no one has bothered writing any code to exploit that hole.

sorry for the lack of caps. my pinky is tired and i'm too lazy to press the shift button. I GUESS I COULD JUST USE CAPS THE WHOLE TIME? just kidding.
[Droid Eris Android Development] FireSokar:
Nevermind I re-read your post. I can only manage on VB.net wish i would of struggled on c atleast.
[Droid Eris Android Development] powerpup118:
I'll attempt

I know a bit of C, it's on my less known languages list, but I also know c++, php and python...

C++ and php and C are all very simaler...

and I've had plenty of accessing C with python, lmao.

but... looking at this I'm confused on how we intend to exploit it?

// I know it's taking a msg.... most likely from terminal, but where is it passed in?

static void cn_dst_callback(struct cn_msg *msg, struct netlink_skb_parms *nsp)
struct dst_node *n = NULL, *tmp;
unsigned int hash;

//the +'s are added code, so I assume our kernel was before this code was added?
//or is the kernel we are on AFTER this patch?

+	if (!cap_raised(nsp->eff_cap, CAP_SYS_ADMIN)) {
+	err = -EPERM;
+	goto out;
+	}
+
//if the message length is less than the sizeof the struct then.. error is now "EBADMSG"
//goto whatever out is...
if (msg->len < sizeof(struct dst_ctl)) {
err = -EBADMSG;
goto out;

I'd need to know what I was doing first... haha!
[Droid Eris Android Development] FireSokar:
It looks like hes trying to crash the kernel with it then inject code through another method
[Droid Eris Android Development] eroxb:
htc eris rooting

hey guys has or does anyone know what the port on the back of the eris is for?? it's right next to the camera with a rubber plug in it.. possibly direct access??:eek:
[Droid Eris Android Development] ataranine:
I assume that's for flashing the phone in the store. And I can't get the little rubber thingy out for the life of me...

EDIT: Got that little bastard out.. it appears it's for flashing in the store, like I said. Could be wrong.
[Droid Eris Android Development] powerpup118:
it's only two metal plates for connection... I assume it is for power while they're testing them.
[Droid Eris Android Development] redman213:
Lol i cant get it off either and wow my phone still smells brand new!!! haha :p
[Droid Eris Android Development] R-T-B:
Just so you know guys I've already done a complete teardown of the eris for you and looked for flashable chips/interfaces of any sort. It's a no-go, to say the least. Don't waste time on it. This exploit is probably our best bet... I don't know C though... more of a hardware guy to be honest. Best of luck to whoever takes it on though!
[Droid Eris Android Development] ataranine:
Let's cross our fingers then. :(
[Droid Eris Android Development] binny1007:
It's my birthday today and the only thing I want is to root my phone. The big 28 today, boy do I feel like a old man.