Develop Bugs

[APP/PROJECT] Porting Xperia Arc Music App to SGS / Idea stage / Need skills !!

Hi all, i start a little project, trying to port xperia arc's Music Player to our SGS, i'm not a dev, just a "bidouilleur".
Apk's installation is fine, but app FC.
So, here is log of FC :
Code:
I/ActivityManager( 3260): Starting activity: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] flg=0x10200000 cmp=com.sonyericsson.music/.PlayerActivity }
W/WindowManager( 3260): HistoryRecord{48d2b2d8 com.sonyericsson.music/.PlayerActivity} failed creating starting window
W/WindowManager( 3260): android.view.InflateException: Binary XML file line #2: Error inflating class <unknown>
W/WindowManager( 3260): at android.view.LayoutInflater.createView(LayoutInflater.java:513)
W/WindowManager( 3260): at com.android.internal.policy.impl.PhoneLayoutInflater.onCreateView(PhoneLayoutInflater.java:56)
W/WindowManager( 3260): at android.view.LayoutInflater.createViewFromTag(LayoutInflater.java:563)
W/WindowManager( 3260): at android.view.LayoutInflater.inflate(LayoutInflater.java:385)
W/WindowManager( 3260): at android.view.LayoutInflater.inflate(LayoutInflater.java:320)
W/WindowManager( 3260): at android.view.LayoutInflater.inflate(LayoutInflater.java:276)
W/WindowManager( 3260): at com.android.internal.policy.impl.PhoneWindow.generateLayout(PhoneWindow.java:2217)
W/WindowManager( 3260): at com.android.internal.policy.impl.PhoneWindow.installDecor(PhoneWindow.java:2272)
W/WindowManager( 3260): at com.android.internal.policy.impl.PhoneWindow.getDecorView(PhoneWindow.java:1459)
W/WindowManager( 3260): at com.android.internal.policy.impl.PhoneWindowManager.addStartingWindow(PhoneWindowManager.java:1042)
W/WindowManager( 3260): at com.android.server.WindowManagerService$H.handleMessage(WindowManagerService.java:9144)
W/WindowManager( 3260): at android.os.Handler.dispatchMessage(Handler.java:99)
W/WindowManager( 3260): at android.os.Looper.loop(Looper.java:123)
W/WindowManager( 3260): at com.android.server.WindowManagerService$WMThread.run(WindowManagerService.java:583)
W/WindowManager( 3260): Caused by: java.lang.reflect.InvocationTargetException
W/WindowManager( 3260): at android.widget.FrameLayout.<init>(FrameLayout.java:79)
W/WindowManager( 3260): at java.lang.reflect.Constructor.constructNative(Native Method)
W/WindowManager( 3260): at java.lang.reflect.Constructor.newInstance(Constructor.java:446)
W/WindowManager( 3260): at android.view.LayoutInflater.createView(LayoutInflater.java:500)
W/WindowManager( 3260): ... 13 more
W/WindowManager( 3260): Caused by: android.content.res.Resources$NotFoundException: Resource is not a Drawable (color or path): TypedValue{t=0x2/d=0x1010059 a=-1}
W/WindowManager( 3260): at android.content.res.Resources.loadDrawable(Resources.java:1681)
W/WindowManager( 3260): at android.content.res.TypedArray.getDrawable(TypedArray.java:601)
W/WindowManager( 3260): at android.widget.FrameLayout.<init>(FrameLayout.java:91)
W/WindowManager( 3260): ... 17 more
I/ActivityManager( 3260): Start proc com.sonyericsson.music for activity com.sonyericsson.music/.PlayerActivity: pid=10147 uid=10090 gids={3003, 1015, 3002}
I/Zygote (10147): Zygote: pid 10147 has INTERNET permission, then set capability for CAP_NET_RAW
I/ActivityThread(10147): Publishing provider com.sonyericsson.provider.youtube: com.sonyericsson.music.artistbook.youtube.YouTubePluginProvider
W/ResourceType(10147): Entry identifier 0x120 is larger than entry count 0xa3
W/ResourceType(10147): getEntry failing because entryIndex 254 is beyond type entryCount 163
W/ResourceType(10147): Failure getting entry for 0x010300fe (t=2 e=254) in package 0: 0x80000001
W/ResourceType(10147): Entry identifier 0xfe is larger than entry count 0xa3
W/ResourceType(10147): getEntry failing because entryIndex 244 is beyond type entryCount 163
W/ResourceType(10147): Failure getting entry for 0x010300f4 (t=2 e=244) in package 0: 0x80000001
W/ResourceType(10147): Entry identifier 0xf4 is larger than entry count 0xa3
W/ResourceType(10147): getEntry failing because entryIndex 253 is beyond type entryCount 163
W/ResourceType(10147): Failure getting entry for 0x010300fd (t=2 e=253) in package 0: 0x80000001
W/ResourceType(10147): Entry identifier 0xfd is larger than entry count 0xa3
E/dalvikvm(10147): Could not find class 'android.drm.DrmManagerClient', referenced from method com.sonyericsson.music.common.DrmUtils.<init>
W/dalvikvm(10147): VFY: unable to resolve new-instance 52 (Landroid/drm/DrmManagerClient;) in Lcom/sonyericsson/music/common/DrmUtils;
D/dalvikvm(10147): VFY: replacing opcode 0x22 at 0x0005
D/dalvikvm(10147): VFY: dead code 0x0007-0013 in Lcom/sonyericsson/music/common/DrmUtils;.<init> (Landroid/content/Context;)V
I/dalvikvm(10147): Could not find method android.drm.DrmManagerClient.unloadPlugIns, referenced from method com.sonyericsson.music.common.DrmUtils.close
W/dalvikvm(10147): VFY: unable to resolve virtual method 215: Landroid/drm/DrmManagerClient;.unloadPlugIns ()V
D/dalvikvm(10147): VFY: replacing opcode 0x6e at 0x0002
D/dalvikvm(10147): VFY: dead code 0x0005-0005 in Lcom/sonyericsson/music/common/DrmUtils;.close ()V
I[B]/dalvikvm(10147): Could not find method android.drm.DrmManagerClient.canHandle, referenced from method com.sonyericsson.music.common.DrmUtils.hasValidRights
W/dalvikvm(10147): VFY: unable to resolve virtual method 212: Landroid/drm/DrmManagerClient;.canHandle (Ljava/lang/String;Ljava/lang/String;)Z
D/dalvikvm(10147): VFY: replacing opcode 0x6e at 0x0006
D/dalvikvm(10147): VFY: dead code 0x0009-0014 in Lcom/sonyericsson/music/common/DrmUtils;.hasValidRights (Ljava/lang/String;)Z
D/AndroidRuntime(10147): Shutting down VM
W/dalvikvm(10147): threadid=1: thread exiting with uncaught exception (group=0x4001d7d0)
E/AndroidRuntime(10147): FATAL EXCEPTION: main
E/AndroidRuntime(10147): java.lang.NoClassDefFoundError: android.drm.DrmManagerClient
E/AndroidRuntime(10147): at com.sonyericsson.music.common.DrmUtils.<init>(DrmUtils.java:49)[/B]
E/AndroidRuntime(10147): at com.sonyericsson.music.PlayerActivity.onCreate(PlayerActivity.java:349)
E/AndroidRuntime(10147): at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1049)
E/AndroidRuntime(10147): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2627)
E/AndroidRuntime(10147): at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2679)
E/AndroidRuntime(10147): at android.app.ActivityThread.access$2300(ActivityThread.java:125)
E/AndroidRuntime(10147): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2033)
E/AndroidRuntime(10147): at android.os.Handler.dispatchMessage(Handler.java:99)
E/AndroidRuntime(10147): at android.os.Looper.loop(Looper.java:123)
E/AndroidRuntime(10147): at android.app.ActivityThread.main(ActivityThread.java:4627)
E/AndroidRuntime(10147): at java.lang.reflect.Method.invokeNative(Native Method)
E/AndroidRuntime(10147): at java.lang.reflect.Method.invoke(Method.java:521)
E/AndroidRuntime(10147): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:858)
E/AndroidRuntime(10147): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:616)
E/AndroidRuntime(10147): at dalvik.system.NativeStart.main(Native Method)
Seems to miss a "method" about DRMs... Any IDEAS ?

Sorry i guess i read this thread too late yet i will reply...
check values folder within that styles.xml
your app must be referencing to a theme from SEMCUxpres.apk so the error...

quite intresting....

so...any new news about this thread?

copy the drm class from sony framework into the app.
Then you still have to fix the ressource error.

[Q] Copilot Live Premium Nordics 9.1.0.119

Anyone else having problems using this? For me the previous version (9.1.0.93) worked just fine, but after updating to the newest, it force closes on launch. Regardless of ROM. Tried several bot Sense and AOSP ROMs, and it didn't work on any of them.
Also tried contacting customer support, but they don't reply to any of my inquiries. And after a bit of reading at their forum, I found out that it is close to impossible to get any support from them. Just take a read here:
http://getsatisfaction.com/copilotlive/topics
If anyone have the apk for 9.1.0.93, it would really help me out, as I would be able to get it working again.

For anyone with the proper knowledge, here is the logcat of the FC.
Code:
I/ActivityManager( 917): Starting activity: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] flg=0x10200000 cmp=com.alk.copilot.eumarket.premiumeumaj/com.alk.copilot.Copilot } from pid 3741
V/HtcAppUsageStats( 917): (launch app, package): (CoPilot Live EU Major, com.alk.copilot.eumarket.premiumeumaj)
D/PhoneWindow( 3741): couldn't save which view has focus because the focused view [email protected] has no id.
I/ActivityManager( 917): Start proc com.alk.copilot.eumarket.premiumeumaj for activity com.alk.copilot.eumarket.premiumeumaj/com.alk.copilot.Copilot: pid=15507 uid=10085 gids={3003, 1015}
D/Sensors ( 917): Enable akm: en = 1
D/AK8973 ( 655): Compass Start
D/SensorService( 917): noteStartSensor: uid = 0x3e8, handle = 0x0
D/StatusBarPolicy( 2930): onSignalStrengthsChanged
I/htcfs-main(15506): main()
I/htcfs-main(15506): ############# HTC FS - START ##################
V/CommonCopilotActivity(15507): Copilot onCreate com.alk.copilot.eumarket.premiumeumaj
I/ggheart ( 3741): onStop
I/htcfs-main(15506): ############# HTC FS - END 1 ##################
V/CoPilot (15507): onCreate
D/dalvikvm( 3741): GC_EXPLICIT freed 97K, 51% free 4243K/8583K, external 6521K/8123K, paused 126ms
E/AssetExtraction(15507): IO error occurred reading user.cfg: java.io.FileNotFoundException: /mnt/sdcard/com.alk.copilot.eumarket.premiumeumaj/user.cfg (No such file or directory)
W/System.err(15507): java.io.FileNotFoundException: /mnt/sdcard/com.alk.copilot.eumarket.premiumeumaj/deviceoverrides.xml (No such file or directory)
W/System.err(15507): at org.apache.harmony.luni.platform.OSFileSystem.open(Native Method)
W/System.err(15507): at dalvik.system.BlockGuard$WrappedFileSystem.open(BlockGuard.java:232)
W/System.err(15507): at java.io.FileInputStream.<init>(FileInputStream.java:80)
W/System.err(15507): at java.io.FileInputStream.<init>(FileInputStream.java:132)
W/System.err(15507): at java.io.FileReader.<init>(FileReader.java:66)
W/System.err(15507): at com.alk.copilot.util.CopilotDeviceListHandler.ParseXMLDeviceList(CopilotDeviceListHandler.java:45)
W/System.err(15507): at com.alk.copilot.util.CopilotDeviceListHandler.GetOverride(CopilotDeviceListHandler.java:116)
W/System.err(15507): at com.alk.copilot.CommonCopilotActivity.getViewPixelFormat(CommonCopilotActivity.java:374)
W/System.err(15507): at com.alk.copilot.NativeRenderer.setPixelFormat(NativeRenderer.java:76)
W/System.err(15507): at com.alk.copilot.NativeRenderer.setup(NativeRenderer.java:68)
W/System.err(15507): at com.alk.copilot.NativeRenderer.<init>(NativeRenderer.java:54)
W/System.err(15507): at java.lang.reflect.Constructor.constructNative(Native Method)
W/System.err(15507): at java.lang.reflect.Constructor.newInstance(Constructor.java:415)
W/System.err(15507): at android.view.LayoutInflater.createView(LayoutInflater.java:505)
W/System.err(15507): at android.view.LayoutInflater.createViewFromTag(LayoutInflater.java:570)
W/System.err(15507): at android.view.LayoutInflater.rInflate(LayoutInflater.java:623)
W/System.err(15507): at android.view.LayoutInflater.inflate(LayoutInflater.java:408)
W/System.err(15507): at android.view.LayoutInflater.inflate(LayoutInflater.java:320)
W/System.err(15507): at android.view.LayoutInflater.inflate(LayoutInflater.java:276)
W/System.err(15507): at com.android.internal.policy.impl.PhoneWindow.setContentView(PhoneWindow.java:224)
W/System.err(15507): at android.app.Activity.setContentView(Activity.java:1702)
W/System.err(15507): at com.alk.copilot.Copilot.initView(Copilot.java:208)
W/System.err(15507): at com.alk.copilot.Copilot.onCreate(Copilot.java:195)
W/System.err(15507): at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1093)
W/System.err(15507): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:1780)
W/System.err(15507): at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:1837)
W/System.err(15507): at android.app.ActivityThread.access$1500(ActivityThread.java:132)
W/System.err(15507): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1033)
W/System.err(15507): at android.os.Handler.dispatchMessage(Handler.java:99)
W/System.err(15507): at android.os.Looper.loop(Looper.java:143)
W/System.err(15507): at android.app.ActivityThread.main(ActivityThread.java:4196)
W/System.err(15507): at java.lang.reflect.Method.invokeNative(Native Method)
W/System.err(15507): at java.lang.reflect.Method.invoke(Method.java:507)
W/System.err(15507): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:839)
W/System.err(15507): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:597)
W/System.err(15507): at dalvik.system.NativeStart.main(Native Method)
V/CommonCopilotActivity(15507): pixel format: null
D/StatusBarService( 2930): addNotification notification = StatusBarNotification(package=com.alk.copilot.eumarket.premiumeumaj id=0 tag=null notification=Notification(vibrate=null,sound=null,defaults=0x0,flags=0x0)), key = [email protected], fullScreenIntent = null, contentIntent = PendingIntent{40710098: [email protected]}
V/CoPilot (15507): onResume
W/dalvikvm(15507): threadid=9: thread exiting with uncaught exception (group=0x4001d5a0)
E/AndroidRuntime(15507): FATAL EXCEPTION: Copilot StartUp Thread
E/AndroidRuntime(15507): java.lang.NullPointerException
E/AndroidRuntime(15507): at com.alk.copilot.tts.TTSHandler.CheckVoiceData(TTSHandler.java:103)
E/AndroidRuntime(15507): at com.alk.copilot.StartupThread.run(StartupThread.java:37)
W/ActivityManager( 917): Force finishing activity com.alk.copilot.eumarket.premiumeumaj/com.alk.copilot.Copilot
I/NativeRenderer(15507): calling setMeasuredDimensions with 480, 762
V/CoPilot (15507): CoPilot onPause1
V/CoPilot (15507): CoPilot onPause2
D/Sensors ( 917): Enable akm: en = 0
D/SensorService( 917): noteStopSensor: uid = 0x3e8, handle = 0x0
I/DemoService( 3741): DiyScheduer.onStart
I/ggheart ( 3741): onStart
I/ActivityManager( 917): Process com.dasur.slideit:dasur.process.update (pid 15356) has died.
V/CoPilot (15507): onStop
V/CoPilot (15507): onDestroy
E/JavaBinder(15507): Unknown binder error code. 0xfffffff7
I/Process (15507): Sending signal. PID: 15507 SIG: 9
I/ActivityManager( 917): Process com.alk.copilot.eumarket.premiumeumaj (pid 15507) has died.
I/WindowManager( 917): WIN DEATH: Window{40c64fc0 com.alk.copilot.eumarket.premiumeumaj/com.alk.copilot.Copilot paused=false}
D/InputManagerService( 917): Window already focused, ignoring focus gain of: [email protected]
D/AK8973 ( 655): Compass CLOSE
I/wpa_supplicant( 3098): Reset vh_switch_counter due to receive LINKSPEED cmd
D/ConnectivityService( 917): getMobileDataEnabled returning true

"Unfortunately, Gallery has stopped." Persists after Factory Restore

I recently tried to apply a series of updates (Rom, radios, kernel, Crossbreeder Mod) to my Verizon Galaxy Nexus SCH i515 and ran into a snag. Everytime I opened the camera application I would receive the message "Unfortunately, Gallery has stopped." I will also get this message upon a reboot of the phone. I first thought I had improperly wiped before applying the rom or done something out of order. So I began troubleshooting.... I will save the narrative for brevity sake and give you a list of what I have done.
Rewiped the phone using TWRP 2.6 and performing a full wipe of all options including sdcard
Using TWRP, I installed the latest (8.22) ShinyROM. Rebooted. (Got Error)
ShinyROM Author suggests CWRM over TWRP so I fastboot applied the latest Toro build of CWRM. I then proceeded to do an additional Wipe of all components and then Install the ShinyROM zip. Rebooted (Got Error)
This is my primary phone and I had now run out of time to mess with a new ROM and knowing I had wiped everything, I had to give up for the time being and get a working phone again
I proceeded to flash the 4.2.2 Factory img file using WugsFresh Root Toolkit. Hashes Verified. Factory Img applied. Reboot. (Got Error)
At this point I am starting to think a hardware component has failed but I am also unsure if perhaps the factory restore does not overwrite every sinngle bit of the device so I begin researching the issue further and since most people stated that if I run into this error and I have applied a factory restore then it must be hardware.
I heed the advice and since my wife has the exact same phone I disassemble both phones and proceed to remove both fully functioning cameras (front ) and (back) from my wife's phone.
I test for the error as follows:
orig Back + func Front = (Got Error)
func Back + orig Front = (Got Error)
func Back + func Front = (Got Error)
I am now fairly certain that it is something software related which follows logically as nothing had physically occurred to my phone that would have led me to think a hardware component would fail. So everything I have found seems to state clearly that a factory img wipes all components of a phone, which on some level I assume is not the whole story because a factory restore is technically overwriting certain partitions with their original contents and not performing a bit for bit copy of what was originally on the phone. Just to be sure I though maybe the latest factory restore does not include ALL of these components but the original 4.0.2 img would so I roll back all the way to the first factory image available for the toro. Rebooted (Got Error) I let the OS OTA update all the way to 4.2.2 receiving errors at each intermediate step.
That is where my phone currently is....
Model: Samsung Galaxy Nexus SCH-i515
Carrier: Verizon
Version:4.2.2 OTA'd from the original Factory Image
Radio: FK01/FK02
Build: JDQ39
I can produce the error from the gallery, the camera app, and a I downloaded a third party camera app too. Here are the logcat captures that I found.
Logcat of opening Camera
Code:
I/ActivityManager( 373): START u0 {act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] flg=0x10200000 cmp=com.google.android.gallery3d/com.android.camera.Camera bnds=[40,785][200,985]} from pid 3990
I/ActivityManager( 373): Start proc com.google.android.gallery3d for activity com.google.android.gallery3d/com.android.camera.Camera: pid=10044 uid=10020 gids={50020, 1006, 3003, 1015, 1028}
D/dalvikvm(10044): GC_CONCURRENT freed 316K, 4% free 9017K/9364K, paused 2ms+3ms, total 30ms
D/dalvikvm(10044): GC_CONCURRENT freed 178K, 3% free 9246K/9464K, paused 3ms+5ms, total 26ms
D/dalvikvm(10044): GC_FOR_ALLOC freed 40K, 2% free 9469K/9644K, paused 16ms, total 17ms
D/dalvikvm(10044): GC_FOR_ALLOC freed 6K, 2% free 9689K/9872K, paused 14ms, total 14ms
D/dalvikvm(10044): GC_FOR_ALLOC freed 3K, 2% free 10026K/10220K, paused 15ms, total 15ms
V/StateManager(10044): startState class com.android.gallery3d.app.FilmstripPage
E/CameraHAL( 127): Couldn't get camera properties
W/dalvikvm(10044): threadid=20: thread exiting with uncaught exception (group=0x41f34700)
E/AndroidRuntime(10044): FATAL EXCEPTION: Thread-558
E/AndroidRuntime(10044): java.lang.RuntimeException: Fail to get camera info
E/AndroidRuntime(10044): at android.hardware.Camera._getCameraInfo(Native Method)
E/AndroidRuntime(10044): at android.hardware.Camera.getCameraInfo(Camera.java:202)
E/AndroidRuntime(10044): at com.android.camera.CameraHolder.<init>(CameraHolder.java:169)
E/AndroidRuntime(10044): at com.android.camera.CameraHolder.instance(CameraHolder.java:123)
E/AndroidRuntime(10044): at com.android.camera.Util.openCamera(Util.java:316)
E/AndroidRuntime(10044): at com.android.camera.PhotoModule$CameraStartUpThread.run(PhotoModule.java:294)
W/ActivityManager( 373): Force finishing activity com.google.android.gallery3d/com.android.camera.Camera
I/WindowManager( 373): Screenshot max retries 4 of Token{428b1940 ActivityRecord{42978b58 u0 com.google.android.gallery3d/com.android.camera.Camera}} appWin=Window{42ca4760 u0 Starting com.google.android.gallery3d} drawState=4
W/WindowManager( 373): Screenshot failure taking screenshot for (720x1280) to layer 21030
D/dalvikvm(10044): GC_CONCURRENT freed 202K, 3% free 10321K/10564K, paused 3ms+3ms, total 42ms
D/dalvikvm(10044): WAIT_FOR_CONCURRENT_GC blocked 23ms
W/ActivityManager( 373): Activity pause timeout for ActivityRecord{42978b58 u0 com.google.android.gallery3d/com.android.camera.Camera}
D/i ( 9605): scheduled task [GmmLocationControllerStatus Update]
I/GAV2 (10044): Thread[GAThread,5,main]: No campaign data found.
D/dalvikvm(10044): GC_CONCURRENT freed 378K, 5% free 10356K/10824K, paused 9ms+3ms, total 39ms
I/Process (10044): Sending signal. PID: 10044 SIG: 9
W/InputDispatcher( 373): channel '430845e8 com.google.android.gallery3d/com.android.camera.Camera (server)' ~ Consumer closed input channel or an error occurred. events=0x9
E/InputDispatcher( 373): channel '430845e8 com.google.android.gallery3d/com.android.camera.Camera (server)' ~ Channel is unrecoverably broken and will be disposed!
I/ActivityManager( 373): Process com.google.android.gallery3d (pid 10044) has died.
W/InputDispatcher( 373): Attempted to unregister already unregistered input channel '430845e8 com.google.android.gallery3d/com.android.camera.Camera (server)'
I/WindowState( 373): WIN DEATH: Window{430845e8 u0 com.google.android.gallery3d/com.android.camera.Camera}
W/InputMethodManagerService( 373): Window already focused, ignoring focus gain of: [email protected] attribute=null, token = [email protected]
Logcat of opening Camera from within the Gallery
Code:
I/ActivityManager( 370): START u0 {act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] flg=0x10200000 cmp=com.google.android.gallery3d/com.android.camera.CameraLauncher
bnds=[200,585][360,785]} from pid 596
D/dalvikvm( 6164): GC_FOR_ALLOC freed 102K, 4% free 9003K/9324K, paused 12ms, total 14ms
I/dalvikvm-heap( 6164): Grow heap (frag case) to 9.036MB for 230416-byte allocation
D/dalvikvm( 6164): GC_FOR_ALLOC freed 1K, 4% free 9227K/9552K, paused 18ms, total 18ms
D/dalvikvm( 6164): GC_FOR_ALLOC freed 6K, 4% free 9222K/9552K, paused 12ms, total 13ms
I/dalvikvm-heap( 6164): Grow heap (frag case) to 9.249MB for 230416-byte allocation
D/dalvikvm( 6164): GC_FOR_ALLOC freed <1K, 4% free 9446K/9780K, paused 16ms, total 16ms
E/CameraHAL( 129): Couldn't get camera properties
W/dalvikvm( 6164): threadid=15: thread exiting with uncaught exception (group=0x4196b930)
E/AndroidRuntime( 6164): FATAL EXCEPTION: Thread-248
E/AndroidRuntime( 6164): java.lang.RuntimeException: Fail to get camera info
E/AndroidRuntime( 6164): at android.hardware.Camera._getCameraInfo(Native Method)
E/AndroidRuntime( 6164): at android.hardware.Camera.getCameraInfo(Camera.java:201)
E/AndroidRuntime( 6164): at com.android.camera.CameraHolder.<init>(CameraHolder.java:169)
E/AndroidRuntime( 6164): at com.android.camera.CameraHolder.instance(CameraHolder.java:123)
E/AndroidRuntime( 6164): at com.android.camera.Util.openCamera(Util.java:315)
E/AndroidRuntime( 6164): at com.android.camera.PhotoModule$CameraStartUpThread.run(PhotoModule.java:316)
W/ActivityManager( 370): Force finishing activity com.google.android.gallery3d/com.android.camera.CameraLauncher
D/dalvikvm( 6164): GC_FOR_ALLOC freed 57K, 4% free 9672K/9980K, paused 17ms, total 18ms
D/dalvikvm( 6164): GC_FOR_ALLOC freed 4K, 3% free 9902K/10188K, paused 18ms, total 18ms
V/StateManager( 6164): startState class com.android.gallery3d.app.PhotoPage
D/dalvikvm( 6164): GC_CONCURRENT freed 152K, 2% free 10216K/10400K, paused 2ms+4ms, total 25ms
I/GmsClient( 6164): connect: bindService returned true for Intent { act=com.google.android.gms.panorama.service.START }
W/SensorService( 370): sensor 00000001 already enabled in connection 0x5cebd048 (ignoring)
W/ActivityManager( 370): Activity pause timeout for ActivityRecord{42769938 u0 com.google.android.gallery3d/com.android.camera.CameraLauncher}
D/ConnectivityService( 370): handleInetConditionChange: no active default network - ignore
W/ActivityManager( 370): Activity destroy timeout for ActivityRecord{42769938 u0 com.google.android.gallery3d/com.android.camera.CameraLauncher}
D/LightsService( 370): Excessive delay setting light: 66ms
D/LightsService( 370): Excessive delay setting light: 67ms
D/LightsService( 370): Excessive delay setting light: 66ms
D/LightsService( 370): Excessive delay setting light: 65ms
I/PowerManagerService( 370): Going to sleep due to screen timeout...
D/SurfaceFlinger( 126): Screen released, type=0 flinger=0x41f96318
D/YouTube MDX( 5878): Recieved intent android.intent.action.SCREEN_OFF
D/dalvikvm( 370): GC_CONCURRENT freed 1576K, 22% free 17170K/21996K, paused 4ms+10ms, total 95ms
D/ConnectivityService( 370): NetTransition Wakelock for WifiStateMachine released by timeout
D/PhoneStatusBar( 447): disable: < expand icons alerts ticker system_info back home RECENT* clock search >
V/TAG ( 370): bug 7643792: fitSystemWindows([0,50][0,0])
D/PhoneStatusBar( 447): disable: < expand icons alerts ticker system_info BACK* HOME* RECENT clock search >
Logcat of opening "Mobile Hidden Camera" App
Code:
I/ActivityManager( 370): Start proc com.zecurisoft.mhc1202 for activity com.zecurisoft.mhc1202/.StartupActivity: pid=6740 uid=10003 gids={50003, 1006, 1015, 1028}
I/ActivityManager( 370): START u0 {cmp=com.zecurisoft.mhc1202/.HomeActivity} from pid 6740
D/dalvikvm( 6740): GC_CONCURRENT freed 137K, 2% free 8993K/9160K, paused 4ms+1ms, total 25ms
D/dalvikvm( 6740): WAIT_FOR_CONCURRENT_GC blocked 10ms
E/CameraHAL( 129): Couldn't get camera properties
E/CameraService( 129): Invalid camera id 0
W/System.err( 6740): java.lang.RuntimeException: Fail to connect to camera service
W/System.err( 6740): at android.hardware.Camera.native_setup(Native Method)
W/System.err( 6740): at android.hardware.Camera.<init>(Camera.java:340)
W/System.err( 6740): at android.hardware.Camera.open(Camera.java:302)
W/System.err( 6740): at com.zecurisoft.lib.YMFEJKSSOH.OVAFYFREZH.ITCSKMNHDY(Unknown Source)
W/System.err( 6740): at com.zecurisoft.lib.YMFEJKSSOH.OVAFYFREZH.BKCWSUWTIG(Unknown Source)
W/System.err( 6740): at com.zecurisoft.lib.YMFEJKSSOH.OVAFYFREZH.WCWYHBYAHQ(Unknown Source)
W/System.err( 6740): at com.zecurisoft.lib.YMFEJKSSOH.OVAFYFREZH.BKCWSUWTIG(Unknown Source)
W/System.err( 6740): at com.zecurisoft.mhc1202.HomeActivity.MBBUADLEVG(Unknown Source)
W/System.err( 6740): at com.zecurisoft.mhc1202.HomeActivity.onCreate(Unknown Source)
W/System.err( 6740): at android.app.Activity.performCreate(Activity.java:5104)
W/System.err( 6740): at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1080)
W/System.err( 6740): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2144)
W/System.err( 6740): at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2230)
W/System.err( 6740): at android.app.ActivityThread.access$600(ActivityThread.java:141)
W/System.err( 6740): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1234)
W/System.err( 6740): at android.os.Handler.dispatchMessage(Handler.java:99)
W/System.err( 6740): at android.os.Looper.loop(Looper.java:137)
W/System.err( 6740): at android.app.ActivityThread.main(ActivityThread.java:5041)
W/System.err( 6740): at java.lang.reflect.Method.invokeNative(Native Method)
W/System.err( 6740): at java.lang.reflect.Method.invoke(Method.java:511)
W/System.err( 6740): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:793)
W/System.err( 6740): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:560)
W/System.err( 6740): at dalvik.system.NativeStart.main(Native Method)
D/AndroidRuntime( 6740): Shutting down VM
W/dalvikvm( 6740): threadid=1: thread exiting with uncaught exception (group=0x4196b930)
E/AndroidRuntime( 6740): FATAL EXCEPTION: main
E/AndroidRuntime( 6740): java.lang.RuntimeException: Unable to start activity ComponentInfo{com.zecurisoft.mhc1202/com.zecurisoft.mhc1202.HomeActivity}: java.lang.NullPointerException
E/AndroidRuntime( 6740): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2180)
E/AndroidRuntime( 6740): at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2230)
E/AndroidRuntime( 6740): at android.app.ActivityThread.access$600(ActivityThread.java:141)
E/AndroidRuntime( 6740): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1234)
E/AndroidRuntime( 6740): at android.os.Handler.dispatchMessage(Handler.java:99)
E/AndroidRuntime( 6740): at android.os.Looper.loop(Looper.java:137)
E/AndroidRuntime( 6740): at android.app.ActivityThread.main(ActivityThread.java:5041)
E/AndroidRuntime( 6740): at java.lang.reflect.Method.invokeNative(Native Method)
E/AndroidRuntime( 6740): at java.lang.reflect.Method.invoke(Method.java:511)
E/AndroidRuntime( 6740): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:793)
E/AndroidRuntime( 6740): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:560)
E/AndroidRuntime( 6740): at dalvik.system.NativeStart.main(Native Method)
E/AndroidRuntime( 6740): Caused by: java.lang.NullPointerException
E/AndroidRuntime( 6740): at com.zecurisoft.lib.YMFEJKSSOH.OVAFYFREZH.BKCWSUWTIG(Unknown Source)
E/AndroidRuntime( 6740): at com.zecurisoft.lib.YMFEJKSSOH.OVAFYFREZH.WCWYHBYAHQ(Unknown Source)
E/AndroidRuntime( 6740): at com.zecurisoft.lib.YMFEJKSSOH.OVAFYFREZH.BKCWSUWTIG(Unknown Source)
E/AndroidRuntime( 6740): at com.zecurisoft.mhc1202.HomeActivity.MBBUADLEVG(Unknown Source)
E/AndroidRuntime( 6740): at com.zecurisoft.mhc1202.HomeActivity.onCreate(Unknown Source)
E/AndroidRuntime( 6740): at android.app.Activity.performCreate(Activity.java:5104)
E/AndroidRuntime( 6740): at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1080)
E/AndroidRuntime( 6740): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2144)
E/AndroidRuntime( 6740): ... 11 more
W/ActivityManager( 370): Force finishing activity com.zecurisoft.mhc1202/.HomeActivity
W/ActivityManager( 370): Force finishing activity com.zecurisoft.mhc1202/.StartupActivity
W/ActivityManager( 370): Activity pause timeout for ActivityRecord{42209040 u0 com.zecurisoft.mhc1202/.HomeActivity}
W/CellInfoLte( 564): getCellSignalStrength: CellSignalStrengthLte: ss=2 rsrp=-116 rsrq=-16 rssnr=-80 cqi=7 ta=2147483647
W/CellInfoLte( 564): getCellIdentity: LteCellIdentitiy:[email protected] mMcc=311 mMnc=480 mCi=29261057 mPci=162 mTac=882
W/CellInfoLte( 564): writeToParcel(Parcel, int): CellInfoLte: mRegistered=YES mTimeStampType=java_ril mTimeStamp=29733390000ns, LteCellIdentitiy:[email protected]
mMcc=311 mMnc=480 mCi=29261057 mPci=162 mTac=882, CellSignalStrengthLte: ss=2 rsrp=-116 rsrq=-16 rssnr=-80 cqi=7 ta=2147483647
W/CellInfoLte( 370): CellInfoLte(Parcel): CellInfoLte: mRegistered=YES mTimeStampType=java_ril mTimeStamp=29733390000ns, LteCellIdentitiy:[email protected] mMcc=3
11 mMnc=480 mCi=29261057 mPci=162 mTac=882, CellSignalStrengthLte: ss=2 rsrp=-116 rsrq=-16 rssnr=-80 cqi=7 ta=2147483647
W/CellInfoLte( 370): writeToParcel(Parcel, int): CellInfoLte: mRegistered=YES mTimeStampType=java_ril mTimeStamp=29733390000ns, LteCellIdentitiy:[email protected]20154
mMcc=311 mMnc=480 mCi=29261057 mPci=162 mTac=882, CellSignalStrengthLte: ss=2 rsrp=-116 rsrq=-16 rssnr=-80 cqi=7 ta=2147483647
W/SystemClock( 703): time going backwards: prev 29733394254571(ioctl) vs now 29733393949395(ioctl), tid=1044
W/CellInfoLte( 703): CellInfoLte(Parcel): CellInfoLte: mRegistered=YES mTimeStampType=java_ril mTimeStamp=29733390000ns, LteCellIdentitiy:[email protected] mMcc=3
11 mMnc=480 mCi=29261057 mPci=162 mTac=882, CellSignalStrengthLte: ss=2 rsrp=-116 rsrq=-16 rssnr=-80 cqi=7 ta=2147483647
W/ActivityManager( 370): Activity destroy timeout for ActivityRecord{42ad6690 u0 com.zecurisoft.mhc1202/.StartupActivity}
W/ActivityManager( 370): Activity destroy timeout for ActivityRecord{42209040 u0 com.zecurisoft.mhc1202/.HomeActivity}
I appreciate any help or direction that can be provided.

Bump?
Sent from my Galaxy Nexus using XDA Premium 4 mobile app

I had also the same problem. So should i assume that there's no solution to this
Sent from my GT-I9070 using Tapatalk now Free

New root method?

Some folks are trying to find an exploit for another Android device. I tried to apply it to the Fire TV stick, but the exploitServiceApp.apk won't install.
http://forum.xda-developers.com/not...t-progress-t2961974/post58464146#post58464146

Sizzlechest said:
Some folks are trying to find an exploit for another Android device. I tried to apply it to the Fire TV stick, but the exploitServiceApp.apk won't install.
http://forum.xda-developers.com/not...t-progress-t2961974/post58464146#post58464146
Click to expand...
Click to collapse
exploitServiceApp.apk was built with a minimum sdk version of 18. The Fire TV and Fire TV Stick run sdk version 17. That's why it wont install. It also seems to require mock locations to be enabled, which may prove to be a chore on the AFTV/S. Of Course this all assumes the AFTV/S is vulnerable to begin with.
Root sources seem to be:
http://forum.xda-developers.com/mate-7/general/wip-mate-7-root-bl-unlock-t2995086/
and
http://forum.xda-developers.com/crossdevice-dev/sony/giefroot-rooting-tool-cve-2014-4322-t3011598

What would happen, if you would try to rebuild it with APK Tool and change the min sdk to 17?
I just did it with the Advanced APK Tool and attatched it to this posting. I'm not at home right now so I can't test it on my own.
APK-Info.exe says its a valid apk and the minimum sdk version is 17.
Important note: I'm not responsible for damaging your device if this somehow does.

It depends on the exploit, I read on another topic that it's based on a specific location in memory (or something like that).
That's presuming that it's even possible.
In regards to mock locations, is it possible to set it using the aosp settings apk?

It does install, but it goes straight to home after loading. Maybe it does work if it's possible to enable mock locations.

tech3475 said:
In regards to mock locations, is it possible to set it using the aosp settings apk?
Click to expand...
Click to collapse
Trying to access developer options (which is where the mock location setting is) causes settings.apk to crash.
bigwillie1 said:
It does install, but it goes straight to home after loading. Maybe it does work if it's possible to enable mock locations.
Click to expand...
Click to collapse
Odd, on a Fire TV Stick (running latest OS version) @androidyeah's app launches fine. However, it just displays the message "Note: Your device seems not vulnerable!" in the upper right corner.

AFTVnews.com said:
Trying to access developer options (which is where the mock location setting is) causes settings.apk to crash.
Click to expand...
Click to collapse
Anyone tried any debugging yet on that part?
AFTVnews.com said:
Odd, on a Fire TV Stick (running latest OS version) @androidyeah's app launches fine. However, it just displays the message "Note: Your device seems not vulnerable!" in the upper right corner.
Click to expand...
Click to collapse
I guess if FTV Stick + FTV using similar base firmwares, it is already patched or something :/

androidyeah said:
Anyone tried any debugging yet on that part?
Click to expand...
Click to collapse
Code:
V/AudioFlinger( 329): Audio hardware entering standby, mixer 0x40100008, suspend count 0
D/AudioStreamOutALSA( 329): AudioStreamOut: standby()
V/AudioFlinger( 329): releaseWakeLock_l() AudioOut_2
V/AudioFlinger( 329): thread 0x40100008 type 0 TID 712 going to sleep
V/AudioFlinger( 329): createTrack() sessionId: 0
V/AudioFlinger( 329): createTrack() lSessionId: 99
V/AudioFlinger( 329): AUDIO_OUTPUT_FLAG_FAST denied: isTimed=0 sharedBuffer=0x0 frameCount=3763 mFrameCount=256 format=1 isLinear=1 channelMask=0x1 sampleRate=44100 mSampleRate=48000 hasFastMixer=1 tid=7528 fastTrackAvailMask=0xfe
V/AudioFlinger( 329): Track constructor name 4100, calling pid 691
V/AudioFlinger( 329): acquiring 99 from 691
V/AudioFlinger( 329): added new entry for 99
V/AudioFlinger( 329): start(4100), calling pid 691 session 99
V/AudioFlinger( 329): ? => ACTIVE (4100) on thread 0x40f9a808
V/AudioFlinger( 329): mWaitWorkCV.broadcast
V/AudioFlinger( 329): thread 0x40100008 type 0 TID 712 waking up
V/AudioFlinger( 329): acquireWakeLock_l() AudioOut_2 status 0
V/AudioFlinger( 329): releasing 98 from 691
V/AudioFlinger( 329): decremented refcount to 0
V/AudioFlinger( 329): purging stale effects
V/AudioFlinger( 329): remove track (4098) and delete from mixer
V/AudioFlinger( 329): PlaybackThread::Track destructor
I/ActivityManager( 691): START u0 {act=android.intent.action.MAIN cmp=com.android.settings/.SubSettings (has extras)} from pid 7424
D/dalvikvm( 691): GC_FOR_ALLOC freed 957K, 30% free 8019K/11344K, paused 37ms, total 39ms
I/ViewRootImpl( 7424): Slow KeyEvent in com.android.settings/com.android.settings.Settings device=8 action=Up latency=3ms processing=54ms
I/Activity( 7424): No ActvityExender defined. Proceed with default activity behavior.
D/AndroidRuntime( 7424): Shutting down VM
W/dalvikvm( 7424): threadid=1: thread exiting with uncaught exception (group=0x40dc2af8)
V/AudioFlinger( 329): getNextBuffer() no more data for track 4100 on thread 0x40100008
V/AudioFlinger( 329): stop(4100), calling pid 691
V/AudioFlinger( 329): not stopping/stopped => stopping/stopped (4100) on thread 0x40100008
E/AndroidRuntime( 7424): FATAL EXCEPTION: main
E/AndroidRuntime( 7424): java.lang.RuntimeException: Unable to start activity ComponentInfo{com.android.settings/com.android.settings.SubSettings}: java.lang.SecurityException: Only package verification agents can read the verifier device identity: Neither user 10001 nor current process has android.permission.PACKAGE_VERIFICATION_AGENT.
E/AndroidRuntime( 7424): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2206)
E/AndroidRuntime( 7424): at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2258)
E/AndroidRuntime( 7424): at android.app.ActivityThread.access$600(ActivityThread.java:146)
E/AndroidRuntime( 7424): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1243)
E/AndroidRuntime( 7424): at android.os.Handler.dispatchMessage(Handler.java:99)
E/AndroidRuntime( 7424): at android.os.Looper.loop(Looper.java:137)
E/AndroidRuntime( 7424): at android.app.ActivityThread.main(ActivityThread.java:5129)
E/AndroidRuntime( 7424): at java.lang.reflect.Method.invokeNative(Native Method)
E/AndroidRuntime( 7424): at java.lang.reflect.Method.invoke(Method.java:511)
E/AndroidRuntime( 7424): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:793)
E/AndroidRuntime( 7424): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:560)
E/AndroidRuntime( 7424): at dalvik.system.NativeStart.main(Native Method)
E/AndroidRuntime( 7424): Caused by: java.lang.SecurityException: Only package verification agents can read the verifier device identity: Neither user 10001 nor current process has android.permission.PACKAGE_VERIFICATION_AGENT.
E/AndroidRuntime( 7424): at android.os.Parcel.readException(Parcel.java:1426)
E/AndroidRuntime( 7424): at android.os.Parcel.readException(Parcel.java:1380)
E/AndroidRuntime( 7424): at android.content.pm.IPackageManager$Stub$Proxy.getVerifierDeviceIdentity(IPackageManager.java:3381)
E/AndroidRuntime( 7424): at android.app.ApplicationPackageManager.getVerifierDeviceIdentity(ApplicationPackageManager.java:1295)
E/AndroidRuntime( 7424): at com.android.settings.DevelopmentSettings.onCreate(DevelopmentSettings.java:143)
E/AndroidRuntime( 7424): at android.app.Fragment.performCreate(Fragment.java:1673)
E/AndroidRuntime( 7424): at android.app.FragmentManagerImpl.moveToState(FragmentManager.java:854)
E/AndroidRuntime( 7424): at android.app.FragmentManagerImpl.moveToState(FragmentManager.java:1057)
E/AndroidRuntime( 7424): at android.app.BackStackRecord.run(BackStackRecord.java:682)
E/AndroidRuntime( 7424): at android.app.FragmentManagerImpl.execPendingActions(FragmentManager.java:1435)
E/AndroidRuntime( 7424): at android.app.Activity.performStart(Activity.java:5220)
E/AndroidRuntime( 7424): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2179)
E/AndroidRuntime( 7424): ... 11 more
V/AudioFlinger( 329): presentationComplete() reset: mPresentationCompleteFrames 8192 audioHalFrames 3072
W/ActivityManager( 691): Force finishing activity com.android.settings/.SubSettings
I/Process ( 7424): Sending signal. PID: 7424 SIG: 9
W/ActivityManager( 691): Force finishing activity com.android.settings/.Settings
I/ActivityManager( 691): Process com.android.settings (pid 7424) has died.
I/WindowState( 691): WIN DEATH: Window{414bef98 u0 com.android.settings/com.android.settings.Settings}
D/FIRED-TV( 2488): Settings Loaded from /data/data/com.altusapps.firedtvlauncher/files/settings2.json
V/AudioFlinger( 329): presentationComplete() session 99 complete: framesWritten 8192
V/AudioFlinger( 329): TrackBase::reset
W/ContextImpl( 691): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1353 com.android.server.am.ActivityManagerService.activityResumed:4547 android.app.ActivityManagerNative.onTransact:420 com.android.server.am.ActivityManagerService.onTransact:1716 android.os.Binder.execTransact:351
W/InputMethodManagerService( 691): Got RemoteException sending setActive(false) notification to pid 7424 uid 10001
W/ContextImpl( 691): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1353 com.amazon.internal.policy.impl.AmazonPhoneWindowManager$SendTopWindowChanged.run:3297 android.os.Handler.handleCallback:725 android.os.Handler.dispatchMessage:92 android.os.Looper.loop:137
D/Bluetooth HS/HF( 1355): HandleMessage9
D/Bluetooth HS/HF( 1355): Battery State Changed, send update100Scale: 100
D/FIRED-TV( 2488): Settings Saved to /data/data/com.altusapps.firedtvlauncher/files/settings2.json
V/AudioFlinger( 329): Audio hardware entering standby, mixer 0x40100008, suspend count 0
D/AudioStreamOutALSA( 329): AudioStreamOut: standby()
V/AudioFlinger( 329): releaseWakeLock_l() AudioOut_2
V/AudioFlinger( 329): thread 0x40100008 type 0 TID 712 going to sleep
I/ThermalDaemon( 336): Sensor[tmp105_2_pwrs] Temperature : 35.0
I/TemperatureSensorObserver( 691): read new temperature 35500
I/abtfilt ( 1775): all HID in sniff mode!
I/abtfilt ( 1775): BT Action
I/abtfilt ( 1775): WMI Cmd: 145 Len: 16
maybe someone finds this useful...

AFTVnews.com said:
Trying to access developer options (which is where the mock location setting is) causes settings.apk to crash.
Odd, on a Fire TV Stick (running latest OS version) @androidyeah's app launches fine. However, it just displays the message "Note: Your device seems not vulnerable!" in the upper right corner.
Click to expand...
Click to collapse
If you want to enable mock locations or change any other settings this is the way to go (does not require root):
http://forum.xda-developers.com/fire-tv/general/guide-change-settings-firetv-via-adb-t3015522
thought i would share this as people keep using on how manipulate the settings.db
I have done some root app development and stumbled across this binary a while ago.
Have fun!

superkoal said:
If you want to enable mock locations or change any other settings this is the way to go (does not require root):
http://forum.xda-developers.com/fire-tv/general/guide-change-settings-firetv-via-adb-t3015522
thought i would share this as people keep using on how manipulate the settings.db
I have done some root app development and stumbled across this binary a while ago.
Have fun!
Click to expand...
Click to collapse
That's a great tip, thanks.
Running "settings get secure allow_mock_location" returns "null". I went ahead and ran "settings put secure allow_mock_location 1" and "settings put secure ALLOW_MOCK_LOCATION 1" but it doesn't seem to have done anything. The exploitServiceApp APK still gives the same message. I sideloaded some location spoofing app from the Play Store and it complained that mock locations were not enabled.

superkoal said:
If you want to enable mock locations or change any other settings this is the way to go (does not require root):
http://forum.xda-developers.com/fire-tv/general/guide-change-settings-firetv-via-adb-t3015522
thought i would share this as people keep using on how manipulate the settings.db
I have done some root app development and stumbled across this binary a while ago.
Have fun!
Click to expand...
Click to collapse
thanks, i tried it using
Code:
settings put secure mock_location 1
but the app still goes directly to the home screen...
Code:
V/AudioFlinger( 329): Audio hardware entering standby, mixer 0x40100008, suspend count 0
D/AudioStreamOutALSA( 329): AudioStreamOut: standby()
V/AudioFlinger( 329): releaseWakeLock_l() AudioOut_2
V/AudioFlinger( 329): thread 0x40100008 type 0 TID 712 going to sleep
I/ActivityManager( 691): START u0 {act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] flg=0x10000000 pkg=org.keenteam cmp=org.keenteam/.ServiceExploitActivity} from pid 18589
D/dalvikvm( 691): GC_FOR_ALLOC freed 521K, 23% free 10295K/13204K, paused 40ms, total 40ms
I/ViewRootImpl(18589): Slow KeyEvent in com.amazon.tv.settings/com.amazon.tv.settings.tv.BuellerApplicationDetailSettingsActivity device=10 action=Up latency=1ms processing=61ms
I/ActivityManager( 691): Start proc org.keenteam for activity org.keenteam/.ServiceExploitActivity: pid=19348 uid=10007 gids={50007, 1028}
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnStop:1303 android.app.Activity.performStop:5412 android.app.ActivityThread.performStopActivityInner:3197
W/ContextImpl( 691): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1353 com.amazon.internal.policy.impl.AmazonPhoneWindowManager$SendTopWindowChanged.run:3297 android.os.Handler.handleCallback:725 android.os.Handler.dispatchMessage:92 android.os.Looper.loop:137
E/Trace (19348): error opening trace file: No such file or directory (2)
D/ProfileManager(19348): Create ProfileManager instance
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnStop:1303 android.app.Activity.performStop:5412 android.app.ActivityThread.performStopActivityInner:3197
I/Activity(19348): No ActvityExender defined. Proceed with default activity behavior.
D/dalvikvm(19348): Trying to load lib /data/app-lib/org.keenteam-1/libexploitHelper.so 0x4109cdf0
D/dalvikvm(19348): Added shared lib /data/app-lib/org.keenteam-1/libexploitHelper.so 0x4109cdf0
D/dalvikvm(19348): No JNI_OnLoad found in /data/app-lib/org.keenteam-1/libexploitHelper.so 0x4109cdf0, skipping init
I/System.out(19348): 1 inner classes found
D/AndroidRuntime(19348): Shutting down VM
W/dalvikvm(19348): threadid=1: thread exiting with uncaught exception (group=0x40dc2af8)
E/AndroidRuntime(19348): FATAL EXCEPTION: main
E/AndroidRuntime(19348): java.lang.RuntimeException: Unable to start activity ComponentInfo{org.keenteam/org.keenteam.ServiceExploitActivity}: java.lang.RuntimeException: java.lang.NoSuchFieldException: TRANSACTION_setApplicationRestrictions
E/AndroidRuntime(19348): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2206)
E/AndroidRuntime(19348): at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2258)
E/AndroidRuntime(19348): at android.app.ActivityThread.access$600(ActivityThread.java:146)
E/AndroidRuntime(19348): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1243)
E/AndroidRuntime(19348): at android.os.Handler.dispatchMessage(Handler.java:99)
E/AndroidRuntime(19348): at android.os.Looper.loop(Looper.java:137)
E/AndroidRuntime(19348): at android.app.ActivityThread.main(ActivityThread.java:5129)
E/AndroidRuntime(19348): at java.lang.reflect.Method.invokeNative(Native Method)
E/AndroidRuntime(19348): at java.lang.reflect.Method.invoke(Method.java:511)
E/AndroidRuntime(19348): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:793)
E/AndroidRuntime(19348): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:560)
E/AndroidRuntime(19348): at dalvik.system.NativeStart.main(Native Method)
E/AndroidRuntime(19348): Caused by: java.lang.RuntimeException: java.lang.NoSuchFieldException: TRANSACTION_setApplicationRestrictions
E/AndroidRuntime(19348): at org.keenteam.exploit_CVE_2014_7911.do_exploit(exploit_CVE_2014_7911.java:106)
E/AndroidRuntime(19348): at org.keenteam.ServiceExploitActivity.onCreate(ServiceExploitActivity.java:34)
E/AndroidRuntime(19348): at android.app.Activity.performCreate(Activity.java:5202)
E/AndroidRuntime(19348): at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1088)
E/AndroidRuntime(19348): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2170)
E/AndroidRuntime(19348): ... 11 more
E/AndroidRuntime(19348): Caused by: java.lang.NoSuchFieldException: TRANSACTION_setApplicationRestrictions
E/AndroidRuntime(19348): at java.lang.Class.getDeclaredField(Class.java:631)
E/AndroidRuntime(19348): at org.keenteam.exploit_CVE_2014_7911.do_exploit(exploit_CVE_2014_7911.java:80)
E/AndroidRuntime(19348): ... 15 more
W/ActivityManager( 691): Force finishing activity org.keenteam/.ServiceExploitActivity
D/dalvikvm( 691): GC_FOR_ALLOC freed 1713K, 24% free 10123K/13204K, paused 51ms, total 51ms
I/Process (19348): Sending signal. PID: 19348 SIG: 9
W/ActivityManager( 691): Force finishing activity com.amazon.tv.settings/.tv.BuellerApplicationDetailSettingsActivity
I/ActivityManager( 691): Process org.keenteam (pid 19348) has died.
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnStart:1212 android.app.Activity.performStart:5223 android.app.Activity.performRestart:5291
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnStart:1212 android.app.Activity.performStart:5223 android.app.Activity.performRestart:5291
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnResume:1265 android.app.Activity.performResume:5313 android.app.ActivityThread.performResumeActivity:2761
I/AudioManager(18589): Cleared FLAG_SHOW_UI in setStreamVolume
I/AudioManager(18589): Cleared FLAG_SHOW_UI in setStreamVolume
E/MM_OSAL ( 329): ValidateAACFile failed
D/MediaExtractor( 329): returning default extractor
D/ ( 329): MPQ Mime Type: audio/raw, getMPQObjectsAlive = 0
I/ ( 329): MPQ Audio Enabled - MPQ Audio Player
D/ ( 329): Use tunnel player only for AUDIO_STREAM_MUSIC
D/ ( 329): Set Audio Track as Audio Source
D/ ( 329): MPQ Audio Player
D/ ( 329): MPQ Audio player created for mime audio/raw duration 342083
W/ ( 329): Trying to create tunnel player mIsTunnelAudio 0, LPAPlayer::objectsAlive 0, TunnelPlayer::mTunnelObjectsAlive = 0, (mAudioPlayer == NULL) 0
E/ ( 329): Audio Player set source
W/MPQAudioPlayer( 329): Sw Decoder
E/MM_OSAL ( 329): ValidateAACFile failed
D/MediaExtractor( 329): returning default extractor
D/ ( 329): MPQ Mime Type: audio/raw, getMPQObjectsAlive = 0
I/ ( 329): MPQ Audio Enabled - MPQ Audio Player
D/ ( 329): Use tunnel player only for AUDIO_STREAM_MUSIC
D/ ( 329): Set Audio Track as Audio Source
D/ ( 329): MPQ Audio Player
D/ ( 329): MPQ Audio player created for mime audio/raw duration 54833
W/ ( 329): Trying to create tunnel player mIsTunnelAudio 0, LPAPlayer::objectsAlive 0, TunnelPlayer::mTunnelObjectsAlive = 0, (mAudioPlayer == NULL) 0
E/ ( 329): Audio Player set source
W/MPQAudioPlayer( 329): Sw Decoder
W/ContextImpl( 691): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1353 com.android.server.am.ActivityManagerService.activityResumed:4547 android.app.ActivityManagerNative.onTransact:420 com.android.server.am.ActivityManagerService.onTransact:1716 android.os.Binder.execTransact:351
E/MM_OSAL ( 329): ValidateAACFile failed
D/MediaExtractor( 329): returning default extractor
D/ ( 329): MPQ Mime Type: audio/raw, getMPQObjectsAlive = 0
I/ ( 329): MPQ Audio Enabled - MPQ Audio Player
D/ ( 329): Use tunnel player only for AUDIO_STREAM_MUSIC
D/ ( 329): Set Audio Track as Audio Source
D/ ( 329): MPQ Audio Player
D/ ( 329): MPQ Audio player created for mime audio/raw duration 259854
W/ ( 329): Trying to create tunnel player mIsTunnelAudio 0, LPAPlayer::objectsAlive 0, TunnelPlayer::mTunnelObjectsAlive = 0, (mAudioPlayer == NULL) 0
E/ ( 329): Audio Player set source
W/MPQAudioPlayer( 329): Sw Decoder
W/ContextImpl( 691): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1353 com.amazon.internal.policy.impl.AmazonPhoneWindowManager$SendTopWindowChanged.run:3297 android.os.Handler.handleCallback:725 android.os.Handler.dispatchMessage:92 android.os.Looper.loop:137
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnStop:1303 android.app.Activity.performStop:5412 android.app.ActivityThread.performDestroyActivity:3468
I/abtfilt ( 1775): all HID in sniff mode!
I/abtfilt ( 1775): BT Action
I/abtfilt ( 1775): WMI Cmd: 145 Len: 16

AFTVnews.com said:
That's a great tip, thanks.
Running "settings get secure allow_mock_location" returns "null". I went ahead and ran "settings put secure allow_mock_location 1" and "settings put secure ALLOW_MOCK_LOCATION 1" but it doesn't seem to have done anything. The exploitServiceApp APK still gives the same message. I sideloaded some location spoofing app from the Play Store and it complained that mock locations were not enabled.
Click to expand...
Click to collapse
The constant value is just "mock_location", you can see it if you click the constant name in the android docs.
So try "settings put secure mock_location 1"
If you try to get the value first and it doesn't return null it means your parameter name is right. I recommend not to insert values in the table that are not there before.

On another note,
https://access.redhat.com/articles/1332213
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235
Wonder if that glibc bug could be used to gain root on certain Android devices.

freezer2k said:
On another note,
https://access.redhat.com/articles/1332213
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235
Wonder if that glibc bug could be used to gain root on certain Android devices.
Click to expand...
Click to collapse
Android doesn't use glibc.

freezer2k said:
On another note,
https://access.redhat.com/articles/1332213
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235
Wonder if that glibc bug could be used to gain root on certain Android devices.
Click to expand...
Click to collapse
Haha, had a follow-up meeting about that same vulnerability at work today!

This was posted today: http://forum.xda-developers.com/showpost.php?p=58510300&postcount=641

[Q] Smart Face Unlock For Lollipop

Hello,
i have a problem with Trusted Face Lock
every time i open it it just Pop up a new window and then it closes
no force close no anything ..
try it a clean flash and flashed "tk_gapps"
also i have flashed the file in this topic http://forum.xda-developers.com/google-nexus-5/themes-apps/gapps-smart-unlock-android-5-0-t2962765 and no luck .. still the same problem ..
So i have took a log cat for the problem.. i need a dev too look at it

MINA.T.T said:
Hello,
i have a problem with Trusted Face Lock
every time i open it it just Pop up a new window and then it closes
no force close no anything ..
try it a clean flash and flashed "tk_gapps"
also i have flashed the file in this topic http://forum.xda-developers.com/google-nexus-5/themes-apps/gapps-smart-unlock-android-5-0-t2962765 and no luck .. still the same problem ..
So i have took a log cat for the problem.. i need a dev too look at it
Click to expand...
Click to collapse
i cant see an error with ur logcat.. u may try this GApps .https://github.com/cgapps/vendor_google/tree/builds/arm im also using that GApss and all working fine

Rommel Espinosa said:
i cant see an error with ur logcat.. u may try this GApps .https://github.com/cgapps/vendor_google/tree/builds/arm im also using that GApss and all working fine
Click to expand...
Click to collapse
Thank you for replying
here its the error starts.. "Activity_launch_request id:com.android.facelock time:1394829"
PS: lots of people have "tk_gapps" .. the facelock work for them..
Code:
06-08 16:07:16.648 I/Timeline(501): Timeline: Activity_windows_visible id: ActivityRecord{3ea6352d u0 com.google.android.gms/.auth.trustagent.GoogleTrustAgentPersonalUnlockingSettings t128} time:1393527
06-08 16:07:16.688 I/art (4538): Explicit concurrent mark sweep GC freed 1287(54KB) AllocSpace objects, 0(0B) LOS objects, 25% free, 3MB/4MB, paused 518us total 55.725ms
06-08 16:07:17.218 W/ResourceType(661): No package identifier when getting value for resource number 0x00000000
06-08 16:07:17.218 W/PackageManager(661): Failure retrieving resources for com.android.settings: Resource ID #0x0
06-08 16:07:17.258 I/art (661): Background sticky concurrent mark sweep GC freed 33783(2MB) AllocSpace objects, 1(16KB) LOS objects, 16% free, 10MB/12MB, paused 6.683ms total 29.235ms
06-08 16:07:17.949 I/Timeline(4418): Timeline: Activity_launch_request id:com.android.facelock time:1394829
06-08 16:07:17.959 I/ActivityManager(501): START u0 {cmp=com.android.facelock/.SetupIntro (has extras)} from uid 10020 on display 0
06-08 16:07:17.959 E/AudioTrack(501): AudioTrack::set : Exit
06-08 16:07:17.959 D/AudioStreamOutALSA(156): Preparing the playback device @ rate 48000 deep = 0, wait for mLock_voiceOn...
06-08 16:07:17.959 D/AudioStreamOutALSA(156): Prepare success result=0
06-08 16:07:17.959 V/WindowManager(501): addAppToken: AppWindowToken{3a843ce token=Token{27f680c9 ActivityRecord{3831f8d0 u0 com.android.facelock/.SetupIntro t128}}} to stack=1 task=128 at 1
06-08 16:07:18.059 V/WindowManager(501): Adding window Window{1105d1fc u0 com.android.facelock/com.android.facelock.SetupIntro} at 7 of 13 (after Window{3037b1c5 u0 com.google.android.gms/com.google.android.gms.auth.trustagent.GoogleTrustAgentPersonalUnlockingSettings})
06-08 16:07:18.089 I/OpenGLRenderer(4599): Initialized EGL, version 1.4
06-08 16:07:18.089 W/egl_server(4599): Allocating storage 1x1 surface type 0x1
06-08 16:07:18.099 W/khrn_client(4599): init_window num_buffers 3 min undequeued buffers 1
06-08 16:07:18.099 W/khrn_client(4599): init_window window 0x41f15010, 480x800 hintTransform 0x0 do_pre 1
06-08 16:07:18.389 I/ActivityManager(501): Displayed com.android.facelock/.SetupIntro: +410ms
06-08 16:07:18.419 I/Timeline(4599): Timeline: Activity_idle id: [email protected] time:1395294
06-08 16:07:18.590 W/SurfaceFlinger(142): couldn't log to binary event log: overflow.
06-08 16:07:18.670 I/Timeline(501): Timeline: Activity_windows_visible id: ActivityRecord{3831f8d0 u0 com.android.facelock/.SetupIntro t128} time:1395547
06-08 16:07:19.020 E/AudioTrack(501): AudioTrack::set : Exit
06-08 16:07:19.150 I/Timeline(4599): Timeline: Activity_launch_request id:com.android.facelock time:1396028
06-08 16:07:19.150 E/AudioTrack(501): AudioTrack::set : Exit
06-08 16:07:19.150 I/ActivityManager(501): START u0 {flg=0x2000000 cmp=com.android.facelock/.SetupFaceLock (has extras)} from uid 10031 on display 0
06-08 16:07:19.160 V/WindowManager(501): addAppToken: AppWindowToken{1b546494 token=Token{40b30e7 ActivityRecord{33b4fea6 u0 com.android.facelock/.SetupFaceLock t128}}} to stack=1 task=128 at 2
06-08 16:07:19.290 F/libc (4599): Fatal signal 4 (SIGILL), code 1, fault addr 0x4b7a5908 in tid 4599 (ndroid.facelock)
06-08 16:07:19.290 F/libc (4599): Unable to open connection to debuggerd: Permission denied
06-08 16:07:19.300 I/WindowState(501): WIN DEATH: Window{1105d1fc u0 com.android.facelock/com.android.facelock.SetupIntro}
06-08 16:07:19.370 I/Zygote (169): Process 4599 exited due to signal (4)
06-08 16:07:19.370 I/ActivityManager(501): Process com.android.facelock (pid 4599) has died
06-08 16:07:19.390 V/WindowManager(501): Adding window Window{2c905d56 u0 Starting com.android.facelock} at 8 of 14 (after Window{1105d1fc u0 com.android.facelock/com.android.facelock.SetupIntro EXITING})
06-08 16:07:19.400 I/brcm-gr (501): [gralloc_lock]: new usage 0x933
06-08 16:07:19.420 I/ActivityManager(501): Start proc 5197:com.android.facelock/u0a31 for activity com.android.facelock/.SetupFaceLock
06-08 16:07:19.460 I/brcm-gr (501): [gralloc_lock]: new usage 0x903
06-08 16:07:19.460 I/brcm-gr (501): [gralloc_lock]: new usage 0x930
06-08 16:07:19.480 I/brcm-gr (501): [gralloc_lock]: new usage 0x933
06-08 16:07:19.661 F/libc (5197): Fatal signal 4 (SIGILL), code 1, fault addr 0x4b2af908 in tid 5197 (ndroid.facelock)
06-08 16:07:19.671 F/libc (5197): Unable to open connection to debuggerd: Permission denied
06-08 16:07:19.721 I/Zygote (169): Process 5197 exited due to signal (4)
06-08 16:07:19.731 I/ActivityManager(501): Process com.android.facelock (pid 5197) has died
06-08 16:07:19.771 I/ActivityManager(501): Start proc 5213:com.android.facelock/u0a31 for activity com.android.facelock/.SetupFaceLock
06-08 16:07:20.021 F/libc (5213): Fatal signal 4 (SIGILL), code 1, fault addr 0x4b3ad908 in tid 5213 (ndroid.facelock)
06-08 16:07:20.021 F/libc (5213): Unable to open connection to debuggerd: Permission denied
06-08 16:07:20.081 I/ActivityManager(501): Process com.android.facelock (pid 5213) has died
06-08 16:07:20.081 W/ActivityManager(501): Force removing ActivityRecord{33b4fea6 u0 com.android.facelock/.SetupFaceLock t128}: app died, no saved state
06-08 16:07:20.081 I/Zygote (169): Process 5213 exited due to signal (4)
06-08 16:07:20.091 W/WindowManager(501): Failed looking up window
06-08 16:07:20.091 W/WindowManager(501): java.lang.IllegalArgumentException: Requested window [email protected] does not exist
06-08 16:07:20.091 W/WindowManager(501): at com.android.server.wm.WindowManagerService.windowForClientLocked(WindowManagerService.java:8764)
06-08 16:07:20.091 W/WindowManager(501): at com.android.server.wm.WindowManagerService.windowForClientLocked(WindowManagerService.java:8755)
06-08 16:07:20.091 W/WindowManager(501): at com.android.server.wm.WindowManagerService.removeWindow(WindowManagerService.java:2679)
06-08 16:07:20.091 W/WindowManager(501): at com.android.server.wm.Session.remove(Session.java:187)
06-08 16:07:20.091 W/WindowManager(501): at android.view.ViewRootImpl.dispatchDetachedFromWindow(ViewRootImpl.java:3015)
06-08 16:07:20.091 W/WindowManager(501): at android.view.ViewRootImpl.doDie(ViewRootImpl.java:5502)
06-08 16:07:20.091 W/WindowManager(501): at android.view.ViewRootImpl$ViewRootHandler.handleMessage(ViewRootImpl.java:3321)
06-08 16:07:20.091 W/WindowManager(501): at android.os.Handler.dispatchMessage(Handler.java:102)
06-08 16:07:20.091 W/WindowManager(501): at android.os.Looper.loop(Looper.java:135)
06-08 16:07:20.091 W/WindowManager(501): at android.os.HandlerThread.run(HandlerThread.java:61)
06-08 16:07:20.091 W/WindowManager(501): at com.android.server.ServiceThread.run(ServiceThread.java:46)
06-08 16:07:20.111 I/OpenGLRenderer(4418): Initialized EGL, version 1.4
06-08 16:07:20.111 W/egl_server(4418): Allocating storage 1x1 surface type 0x1
06-08 16:07:20.121 W/khrn_client(4418): init_window num_buffers 3 min undequeued buffers 1
06-08 16:07:20.121 W/khrn_client(4418): init_window window 0x420333c0, 480x800 hintTransform 0x0 do_pre 1
06-08 16:07:20.141 I/Coffee - VoiceUnlockTrustlet(4418): GSA is not installed.
06-08 16:07:20.141 W/InputMethodManagerService(501): Got RemoteException sending setActive(false) notification to pid 4599 uid 10031
06-08 16:07:20.331 I/Timeline(4418): Timeline: Activity_idle id: [email protected] time:1397207
06-08 16:07:20.632 I/Timeline(501): Timeline: Activity_windows_visible id: ActivityRecord{3ea6352d u0 com.google.android.gms/.auth.trustagent.GoogleTrustAgentPersonalUnlockingSettings t128}