[CLOSED] Deleted - Sony Xperia 1 II Guides, News, & Discussion

Here was a Guide. Someone said people don't care about Me or My Work so...​

does it need unlock bl and will it break the drm?

lenchan139 said:
does it need unlock bl and will it break the drm?
Click to expand...
Click to collapse
Like i said on other Places before. DRMs will get lost after unlocking but only the Ones for the Display Colors, Xperia Services and Netflix 4K. They will get restored after locking and flashing a Firmware again and it's already handled Like that from SONY since the Xperia 1 & 5.
And Sure, You need to be unlocked to modify anything on a Android Device persistently.
Br

Would anyone please make a patched boot.img for XQ-AT52?
Attach the file link.
https://mega.nz/file/sVgj3IjT#bkWnWs8TQhwI-dp9mtXC5FLcNVxXD613qzTmblX_tnk
I installed Magisk Manager on a non-rooted Xperia 1 Ii and did the following, but the patched boot.img is not created.
Magisk Install-Install-Select and Patch a File
Select XQ-AT52 boot.img
got this message
-Device platform: arm64-v8a
-Processing tar file
--Writing: ./xbl_config_43.mbn
--Writing: ./tzxflattest_43.mbn
--Writing: ./xbl_43.mbn
--Writing: ./xfl_43.mbn
--Writing: ./qupfw_43.mbn
--Writing: ./aop_43.mbn
--Writing: ./cmnlib_43.mbn
--Writing: ./devcfg_43.mbn
--Writing: ./abl_43.mbn
--Writing: ./uefisecapp_43.mbn
--Writing: ./keymaster_43.mbn
--Writing: ./hyp_43.mbn
--Writing: ./tz_43.mbn
--Writing: ./cmnlib64_43.mbn
--Writing: ./tzxfl_43.mbn
! No boot image found
!Process error
!Installation failed

alphonsezero said:
Would anyone please make a patched boot.img for XQ-AT52?
Attach the file link.
https://mega.nz/file/sVgj3IjT#bkWnWs8TQhwI-dp9mtXC5FLcNVxXD613qzTmblX_tnk
I installed Magisk Manager on a non-rooted Xperia 1 Ii and did the following, but the patched boot.img is not created.
Magisk Install-Install-Select and Patch a File
Select XQ-AT52 boot.img
got this message
-Device platform: arm64-v8a
-Processing tar file
--Writing: ./xbl_config_43.mbn
--Writing: ./tzxflattest_43.mbn
--Writing: ./xbl_43.mbn
--Writing: ./xfl_43.mbn
--Writing: ./qupfw_43.mbn
--Writing: ./aop_43.mbn
--Writing: ./cmnlib_43.mbn
--Writing: ./devcfg_43.mbn
--Writing: ./abl_43.mbn
--Writing: ./uefisecapp_43.mbn
--Writing: ./keymaster_43.mbn
--Writing: ./hyp_43.mbn
--Writing: ./tz_43.mbn
--Writing: ./cmnlib64_43.mbn
--Writing: ./tzxfl_43.mbn
! No boot image found
!Process error
!Installation failed
Click to expand...
Click to collapse
You can use this Old version of Canary Magisk to make a patched boot.img straight from the boot.sin file:
https://drive.google.com/file/d/10xY6I2tmeq0TXy7Oe0FRxEOkBZ1ASB3y/view?usp=drivesdk
Then use this Canary Magisk to update the boot.img to the latest version :
https://drive.google.com/file/d/116Nk7xgUl1Idz0JYLfmGxRnnJHbRFdo5/view?usp=drivesdk
Need any help with anything or if you keep failing just upload and send us your boot.sin file ??
Edit: I just noticed your link, your using the wrong file you need the boot one (boot_X-FLASH-ALL-2389) it's not inside the boot folder it's in the root directory, I would've downloaded it for you but I'm not sure which region you need.

Thanks to you, we were able to root the XQ-AT52.
Question, is it possible to modify the system files?
please tell me.

Miustone said:
Like i said on other Places before. DRMs will get lost after unlocking but only the Ones for the Display Colors, Xperia Services and Netflix 4K. They will get restored after locking and flashing a Firmware again and it's already handled Like that from SONY since the Xperia 1 & 5.
And Sure, You need to be unlocked to modify anything on a Android Device persistently.
Br
Click to expand...
Click to collapse
Are you sure that it is possible to relock the bootloader? This ia not possible for Xperia 10.

tobos said:
Thanks to you, we were able to root the XQ-AT52.
Question, is it possible to modify the system files?
please tell me.
Click to expand...
Click to collapse
The Xperias are using System-as-root so no TWRP but You can do it with Magisk like i do with My MARS_SOM Systemlessly. OR You can make own GSIs based on Stock or AOSP...
chortya said:
Are you sure that it is possible to relock the bootloader? This ia not possible for Xperia 10.
Click to expand...
Click to collapse
YES, I also heard even the Xperia 10 and 10 Plus can do that but they are no Flagships and May don't even have Special DRMs. I never touched the Firmwares of them but possible that they got that Option with Android 10 Updates...

system mont
Sorry for the repeated occurrences.
When I run the adb command, everything is disabled.
Can you give me the detailed steps to mount the system?

wrong magisk image xperia 1 II
Miustone said:
This Guide includes the Kernel for the EU Models of the XPERIA 1, 5 and 1 MARK 2. If You have another Model, please get Your own Kernel like explained on the bottom of this Post.
-Turn Off Your Device
-Hold Volume Up (Louder) while connecting to USB
-Do You see the Blue LED on Your Device? If Yes are You in Fastboot Mode!
-Download the Boot Image for Your Device from HERE and place it into Your fastboot Folder
-Use fastboot with this commands:
Code:
fastboot flash boot_a magisk_patched.img
fastboot flash boot_b magisk_patched.img
fastboot reboot
DIY - How to get Your own Kernel / Boot Image:
Download XperiFirm from XDA
Download UnSin from XDA
Download a Firmware with XperiFirm
Extract the File boot_X-FLASH-ALL*** with Unsin (By drag and drop)
You will get a .img File which You can patch with Magisk Manager
If i helped You, leave a Thanks <3
Click to expand...
Click to collapse
Man , your file corupted my phone....shame to you..

daphix said:
Man , your file corupted my phone....shame to you..
Click to expand...
Click to collapse
Thanks for the additional Infos like what Model You have. Is it the Single SIM one (EU?)? An Xperia Z or a Galaxy S2? What have You done? Which Firmware are You on? Don't blame Me for My Work, blame You for not giving even a Single info, No one can Help You Like this....

Miustone said:
Thanks for the additional Infos like what Model You have. Is it the Single SIM one (EU?)? An Xperia Z or a Galaxy S2? What have You done? Which Firmware are You on? Don't blame Me for My Work, blame You for not giving even a Single info, No one can Help You Like this....
Click to expand...
Click to collapse
i think in this general root topic you provided wrong files from another image, for your rom, marsom, who is in another section;
that's why was bricked, sorry for telling you all of this; here you have to tell clearly what image you used as source for magisk;
your work is good, but the details in this post are limited for simple users like me;
my version is single sim EU; XQ-AT51; 58.0.A.3.39; customized EU 1321-7706 R13A;
i suceed to repair, after digging on more sites, but i have to recognize that one of your instructions from other post also helped me ; by extracting the File boot_X-FLASH-ALL-2389.sin from ftf image (downloaded previously with flashtool) with Unsin and converting into img and flashing back;
Have attentions, your magisk boot image (link to drive) from this topic are wrong, even as file size.
Also your refference to the command of flashing 2 partitions is wrong, is not applicable (simple rooting of Xperia 1 II EU single Sim version, in my case); you need only one:
fastboot flash boot magisk_patched.img
I reacted because this lack of information and confusion is spread all over the topics, and even a little mistake conduct to risk of bricking the phones;
the people who post solutions, images, should be aware - here is not instagram, is not beauty contest.

daphix said:
i think in this general root topic you provided wrong files from another image, for your rom, marsom, who is in another section;
that's why was bricked, sorry for telling you all of this; here you have to tell clearly what image you used as source for magisk;
your work is good, but the details in this post are limited for simple users like me;
my version is single sim EU; XQ-AT51; 58.0.A.3.39; customized EU 1321-7706 R13A;
Click to expand...
Click to collapse
Don't flash things randomly if you don't know how they work. The DIY section also describes pretty well the simple steps you need to do. Which would've saved you from this entire situation.
daphix said:
Have attentions, your magisk boot image (link to drive) from this topic are wrong, even as file size.
Also your refference to the command of flashing 2 partitions is wrong, is not applicable (simple rooting of Xperia 1 II EU single Sim version, in my case); you need only one:
fastboot flash boot magisk_patched.img
Click to expand...
Click to collapse
Learn how A/B partitions work to realize why you need to flash both partitions.
daphix said:
I reacted because this lack of information and confusion is spread all over the topics, and even a little mistake conduct to risk of bricking the phones;
the people who post solutions, images, should be aware - here is not instagram, is not beauty contest.
Click to expand...
Click to collapse
Again, don't mod your phone if you don't have the knowledge of basic workings of Android. Flashing a bad boot image won't brick your phone, and as you have discovered is recoverable. There is no reason to overreact. You merely flashed a boot image for a different firmware.

Winrahr said:
Don't flash things randomly if you don't know how they work. The DIY section also describes pretty well the simple steps you need to do. Which would've saved you from this entire situation.
Learn how A/B partitions work to realize why you need to flash both partitions.
Again, don't mod your phone if you don't have the knowledge of basic workings of Android. Flashing a bad boot image won't brick your phone, and as you have discovered is recoverable. There is no reason to overreact. You merely flashed a boot image for a different firmware.
Click to expand...
Click to collapse
Thanks for Your Reply! Couldn't say it any better... :highfive:
To be honest: "This Guide includes the Kernel for the EU Models of the XPERIA 1, 5 and 1 MARK 2. If You have another Model, please get Your own Kernel like explained on the bottom of this Post."
This is the first Sentence of this Thread. What People can blame Me for is that i don't tell the Model Numbers i got the Images from, but if You take a look on XperiFirm... There is only one EU Model of each Xperia (Except the 2019 Xperias but that would be EU3 in this case instead of EU and is still Dual SIM). Besides that are all Images just fine. The Image Sizes are based on Magisk and is different (smaller) as the OG Image, totally normal so far...
"Don't flash things randomly" Is the smartest Thing to say. I would clearly ask on the Thread if I'm not sure what i do. I just have made many Threads this Year and i need to maintain all of them besides doing Overlays, My Website, MARS, Images and all that. Sorry if not everything is always that good described, but at the End is the Work important, not the Threads with Cool Pics/Banners and fancy Words. We are not on Instagram nor on a Beauty Contest (already said). But i'm always open for critics if it is constructive... In this case, i will just add Model Numbers to the Threads to avoid confusion of People who never touched XperiFirm before.
Thanks again and best Regards!

Winrahr said:
Don't flash things randomly if you don't know how they work. The DIY section also describes pretty well the simple steps you need to do. Which would've saved you from this entire situation.
Click to expand...
Click to collapse
@Winrahr: look at the title of topic: Xperia 1 II root guide; not flashed randomly, i falshed for XQ-AT51, as the author named in his post; but his image is wrong;
You try now to escuse your friend saying that is general topic; it is not, it is reffering dedicated models;
if he post a rooting guide, should be clear, indicating the source of image; or better without reffering any image, if he want only to stay on general flashing instructions.
Winrahr said:
Learn how A/B partitions work to realize why you need to flash both partitions.
Click to expand...
Click to collapse
@Winrahr: Really? so this topic is a school, how to root any phone? Even In this case beign general instructions, as you try to escuse him now, are a totally mess; moreover he are indicating: "flash this images, from this drive location"; they are clearly named by author in written : xperia 1 mark 2, XQ-AT51; it was my mistake to download them thinking that i have to do with professionals;
Winrahr said:
Again, don't mod your phone if you don't have the knowledge of basic workings of Android. Flashing a bad boot image won't brick your phone, and as you have discovered is recoverable. There is no reason to overreact. You merely flashed a boot image for a different firmware.
Click to expand...
Click to collapse
@Winrahr: I repaired myself the phone after bricking due his instructions; The errors belong to author, who indicated: "flash there from this drive image, is for xperia 1 mark 2", XQ-AT51; but the boot image source is wrong; he linked to another moded image, this i discovered later; he posted in this general topic the firmware for another modded rom, marsom, who is in another section;
What he posted here is far ayaw of the basics, is kindergarden; better avoid to post; when adress a topic, should be clear & complete; not by posting wrong file image and wrong flashing instructions.
Not try to escuse him by weak argumention as he wanted to present generalities, even those are incomplete.
Contrary of what is expected from a advanced user, he provided only wrong information and confusion;
---------- Post added at 07:31 AM ---------- Previous post was at 07:09 AM ----------
Miustone said:
Thanks for Your Reply! Couldn't say it any better... :highfive:
To be honest: "This Guide includes the Kernel for the EU Models of the XPERIA 1, 5 and 1 MARK 2. If You have another Model, please get Your own Kernel like explained on the bottom of this Post."
This is the first Sentence of this Thread. What People can blame Me for is that i don't tell the Model Numbers i got the Images from, but if You take a look on XperiFirm... There is only one EU Model of each Xperia (Except the 2019 Xperias but that would be EU3 in this case instead of EU and is still Dual SIM). Besides that are all Images just fine. The Image Sizes are based on Magisk and is different (smaller) as the OG Image, totally normal so far...
"Don't flash things randomly" Is the smartest Thing to say. I would clearly ask on the Thread if I'm not sure what i do. I just have made many Threads this Year and i need to maintain all of them besides doing Overlays, My Website, MARS, Images and all that. Sorry if not everything is always that good described, but at the End is the Work important, not the Threads with Cool Pics/Banners and fancy Words. We are not on Instagram nor on a Beauty Contest (already said). But i'm always open for critics if it is constructive... In this case, i will just add Model Numbers to the Threads to avoid confusion of People who never touched XperiFirm before.
Thanks again and best Regards!
Click to expand...
Click to collapse
@Miustone: I don't blame you, but for you would be better not to justify, you should recognize and be a Man. You have another topic , when you present your moded rom; this topic is a general one, and you simply pasted the wrong link to your moded rom, this i discovered after bricking the phone.
Another mistake you did is that you posted wrong instructions, of flashing two boot partitions, instead of one.
Now you try to be escused by weak arguments of that you wanted to present generalities, even those beign inclomplete. Maybe you had good intentions but (possible due speed), you pasted wrong link to modded image, not to the rooted one; or you not have own rooted image of XQ- AT51; aslo you continue errors by posting wrong instructions of flashing two partitions instead one;
You try now to justify yourself, but what's your point? What are the meaning of your post, of "general instructions" if is incomplete, non-aplicable to this topic and generating problems?
When you adress a topic, you should be clear & complete; not by posting wrong file image and wrong flashing instructions, in a specific , named phone thread.
Don't continue to defend yourself, maybe you have knowledge, but you posted in hurry, with lack of informations, full of confusions.
Sorry for others readers, i written too much just to highlight this lesson learned: pay attentions to those called "experts" who try to use this forum as a place for beauty contest.
---------- Post added at 08:07 AM ---------- Previous post was at 07:31 AM ----------
Miustone said:
This Guide includes the Kernel for the EU Models of the XPERIA 1, 5 and 1 MARK 2. If You have another Model, please get Your own Kernel like explained on the bottom of this Post.
-Turn Off Your Device or reboot to fastboot from ADB
-Hold Volume Up (Louder) while connecting to USB if Your Device is Off
-Do You see the Blue LED on Your Device? If so, are You in Fastboot Mode!
-Download the Boot Image for Your Device from HERE and place it into Your fastboot Folder
-Use fastboot with this commands for Treble A/B Devices:
Code:
fastboot flash boot_a magisk_patched.img
fastboot flash boot_b magisk_patched.img
fastboot continue
Done. You will be rooted now, just install the Magisk Manager and enjoy! The Provided Images are from the J9110, J9210 and XQ-AT51...
DIY - How to get Your own Kernel / Boot Image:
Download XperiFirm from XDA
Download UnSin from XDA
Download a Firmware with XperiFirm
Extract the File boot_X-FLASH-ALL*** with Unsin (By drag and drop)
You will get a .img File which You can patch with Magisk Manager
If i helped You, leave a Thanks <3
Click to expand...
Click to collapse
Sorry to tell this, advice for another readers: the provided image is wrong, is not for XQ-AT51, have different size, better build your own using Magisk - check other posts to learn how to do this; also not need to flash two boot partitions, is enough one: fastboot flash boot magisk_patched.img

I still don't get what your big rant about beauty contests is about but I have to reply because you are giving incorrect information.
daphix said:
look at the title of topic: Xperia 1 II root guide; not flashed randomly, i falshed for XQ-AT51, as the author named in his post; but his image is wrong;
You try now to escuse your friend saying that is general topic; it is not, it is reffering dedicated models;
if he post a rooting guide, should be clear, indicating the source of image; or better without reffering any image, if he want only to stay on general flashing instructions.
Click to expand...
Click to collapse
I don't know the guy. I can't comment on whether his image was correct or not because I never used the image.
daphix said:
Really? so this topic is a school, how to root any phone? Even In this case beign general instructions, as you try to escuse him now, are a totally mess; moreover he are indicating: "flash this images, from this drive location"; they are clearly named by author in written : xperia 1 mark 2, XQ-AT51; it was my mistake to download them thinking that i have to do with professionals;
Click to expand...
Click to collapse
I don't know what you're trying to say here. I was telling you to go read up on it to realize why your statement was wrong. On an A/B device such as the Xperia 1 II, you should flash both _a and _b partitions to save yourself the hassle of wondering why your phone wont boot when it switches to slot B and you only flashed slot A, and you'll come back crying about how the instructions are wrong and we aren't professionals and this isn't a beauty contest. Which by the way, we aren't professionals, we are hobbyists. So your assumption led to your own demise.
daphix said:
I repaired myself the phone after bricking due his instructions; The errors belong to author, who indicated: "flash there from this drive image, is for xperia 1 mark 2", XQ-AT51; but the boot image source is wrong; he linked to another moded image, this i discovered later; he posted in this general topic the firmware for another modded rom, marsom, who is in another section;
What he posted here is far ayaw of the basics, is kindergarden; better avoid to post; when adress a topic, should be clear & complete; not by posting wrong file image and wrong flashing instructions.
Not try to escuse him by weak argumention as he wanted to present generalities, even those are incomplete.
Contrary of what is expected from a advanced user, he provided only wrong information and confusion;
Click to expand...
Click to collapse
I laughed at this part because I had no idea what it meant but it was funny.
daphix said:
[rant removed for brevity]
Now you try to be escused by weak arguments of that you wanted to present generalities, even those beign inclomplete. Maybe you had good intentions but (possible due speed), you pasted wrong link to modded image, not to the rooted one; or you not have own rooted image of XQ- AT51; aslo you continue errors by posting wrong instructions of flashing two partitions instead one;
Click to expand...
Click to collapse
I don't have an issue with you ranting with all of this. But I have to stop you here because you are complaining about wrong info that could cause damage to other users, when you yourself are posting wrong and dangerous information. Your anecdotal evidence is not enough to claim someone's instructions wrong.
daphix said:
Sorry for others readers, i written too much just to highlight this lesson learned: pay attentions to those called "experts" who try to use this forum as a place for beauty contest.
Click to expand...
Click to collapse
Yes you have written too much. This is not a beauty contest. You are not an expert. Please stop.
daphix said:
Sorry to tell this, advice for another readers: the provided image is wrong, is not for XQ-AT51, have different size, better build your own using Magisk - check other posts to learn how to do this; also not need to flash two boot partitions, is enough one: fastboot flash boot magisk_patched.img
Click to expand...
Click to collapse
I don't have comments on if the provided image is correct or not, but the instructions to building your own is literally in the post that you have just quoted, you don't need to check other posts. But the issue I have with you is your adamant claim that you only need to flash the active partition.
Yes, you can get away by just flashing the active boot partition. But there is no reason to not flash both A and B partitions at the same time when you flash anything to guarantee that the partitions always match. Again, please learn how A/B partitions work to know why your advice can be dangerous.

Winrahr said:
I still don't get what your big rant about beauty contests is about but I have to reply because you are giving incorrect information.
I don't know the guy. I can't comment on whether his image was correct or not because I never used the image.
I don't know what you're trying to say here. I was telling you to go read up on it to realize why your statement was wrong. On an A/B device such as the Xperia 1 II, you should flash both _a and _b partitions to save yourself the hassle of wondering why your phone wont boot when it switches to slot B and you only flashed slot A, and you'll come back crying about how the instructions are wrong and we aren't professionals and this isn't a beauty contest. Which by the way, we aren't professionals, we are hobbyists. So your assumption led to your own demise.
I laughed at this part because I had no idea what it meant but it was funny.
I don't have an issue with you ranting with all of this. But I have to stop you here because you are complaining about wrong info that could cause damage to other users, when you yourself are posting wrong and dangerous information. Your anecdotal evidence is not enough to claim someone's instructions wrong.
Yes you have written too much. This is not a beauty contest. You are not an expert. Please stop.
I don't have comments on if the provided image is correct or not, but the instructions to building your own is literally in the post that you have just quoted, you don't need to check other posts. But the issue I have with you is your adamant claim that you only need to flash the active partition.
Yes, you can get away by just flashing the active boot partition. But there is no reason to not flash both A and B partitions at the same time when you flash anything to guarantee that the partitions always match. Again, please learn how A/B partitions work to know why your advice can be dangerous.
Click to expand...
Click to collapse
@Winrahr:
Thx for replying; my reply was not for you; you not have to reply in the name of author;
By other hand, in few lines you written more clear and complete than him; this prove my point, you are more experienced member than him. all my statements remains;
He not provided correct image and his instructions are incomplete; following his instructions help nobody to build a boot image, here you are wrong - he pointed out only how to upload a file, not how to generate one. This can be found on other threads.
You drop too many accuses against victim, stop laughing of regular users, otherwise you prove that you understand nothing. i just highlighted the risk of flashing images from so called experts;
Instead of fighting with me and defending so much in others name, better you provide a link to a good thread;
I pointed in my last reply that is enough to flash only one partition, if you know when is applicable.
You pointed well the differences of flashing 2 partitions, he misses even this. I bet that he did only a copy & paste from other sources.
Actual thread Is a simple one with few & incomplete instructions, my point is to avoid "fake experts"- well known people who only try to be first, by posting copy& paste from other sources, whitout understaning well what they do and the risk for others; for them only image it counts, quality of information being the last;
This people are called "cloners". Avoid them and reply when you find such cases.
If you give me advices, please allow me one for you: try yourself to be promoter of correct way to do the job, by structured & clear information and highlight the risk of posting wrong images & inaccurate info;
You should assume also to reply to such types of people and improve their posts, otherwise you are wrong if you post only against regular users.

daphix said:
-snip-
Click to expand...
Click to collapse
I don't care. Just don't tell people to only flash the active boot partition because that's wrong. Instructions in OP are fine. This will be my last reply.

Winrahr said:
I don't care. Just don't tell people to only flash the active boot partition because that's wrong. Instructions in OP are fine. This will be my last reply.
Click to expand...
Click to collapse
Check this, carefully;
"https://www.xda-developers.com/how-a-b-partitions-and-seamless-updates-affect-custom-development-on-xda/"
"https://www.droidwin.com/flash-roms-magisk-twrp-kernels-a-b-partition-devices/"
I never sayd to flash Active; i said that is not good to flash both partitions and author's instructions in first post are wrong;
Flashing one partition is less risky; A & B partion are existing for more reasons; one of them is to remain always a back-up in one partition for recovery; when you flash one partition and at restart OS found eventualy an error, Android will try to restore from other partition;
If you flash both partitions with a corupted boog image, you almost sure brick the phone, because will enter in bootloop, without chance to start the good image from back-up partition.
This was the case who generated all debate. And people who pose in experts by "hearing things" have to be avoided;
If you flash one partition, it remains the existing flashed to be used for recovery.
You not need to point out A or B when flash only one, will be written corectly because Android know what partition is active and what not, at the moment of flashing and it will flash corectly;
Check the articles.
Otherwise I almost thought that we'll become friends, you replied me more often than to your girlfriend
Cheers mate!

I also think that it is better to refresh only one partition, so that the fault tolerance rate will provide no direct bricking of the phone. I would like to ask friends, can this phone be used for third-party recovery? Do I need to backup TA before unlocking

Related

[25.01.2011] WARNING! Do not flash JM*,KA*... README! [Patch released, L/N supported]

DO NOT USE THIS ON THE GINGERBREAD RELEASES ! THE SAMSUNG GINGERBREAD RELEASES DO HAVE SIGNED BOOTLOADERS, BUT THEY ARE NOT LOCKED. In other words, you can still flash custom kernels and such, and the bootloader patch will only break things, not fix them.
To read the history of this problem, see the 2nd post of this thread (scroll down).
A number of new firmwares for the Samsung Galaxy Tab come with "signed / protected" bootloaders. These new bootloaders prevent you from flashing custom or otherwise unsigned kernels on the device. Trying to do so anyway will result in errors and usually requires you to reflash your ROM completely.
I hope everybody here has learned the lesson not to just flash anything that SamFirmware releases
The patch
After a great many hours of researching, testing and coding, myself (Chainfire) and Rotohammer have come up with a patch that works on most devices (currently all known GSM Tab variants), and flashes back unprotected JJ4 (T-Mobile ?) bootloaders, or the original P1000N bootloaders for the Latin models. The app only patches when it finds protected bootloaders, and you have to press a button for that, so the app can also be used to look at your current status.
The patch has been tested repeatedly and with success on (0 bricks so far):
- GT-P1000 Euro/International/Unbranded Galaxy Tab
- SGH-I987 AT&T Galaxy Tab
- SGH-I987 Rogers Galaxy Tab
- SGH-T849 T-Mobile Galaxy Tab
- GT-P1000L Latin Galaxy Tab (use LATIN version!)
- GT-P1000N Latin Galaxy Tab (use LATIN version!)
Additional thanks to: koush, neldar, richardtrip, AColwill, farahbolsey, deezid, wgery, tmaurice, rmanaudio, crisvillani, alterbridge86, ivannw, themartinohana, luisfer691 (in no particular order!)
Please note that even though there have not been any bricks so far, replacing bootloaders is a very dangerous operation that may BRICK your device, and you should think twice before using the patch. Using the patch is completely AT YOUR OWN RISK!
Instructions
Download the attached APK, install it on your device, and run it. It will show you a status screen, and if your device is compatible and you have protected bootloaders, the bottom entry "Patch bootloaders" will become available. Tapping it will start the patch procedure.
Note that the patch requires root !
Mini-FAQ
--- After the fix, my "zImage" still shows signed ! Is this a problem ?
No, this is perfectly fine! What matters is that "PBL", "SBL" and "SBL_Backup" are not signed. If "zImage" is signed, it means this ROM can be flashed onto a device that has signed bootloaders. UNsigned "zImage"s can NOT be flashed on signed bootloaders. This is the origin of the problem, because custom kernels are always UNsigned "zImage"s !
--- Can I now flash any ROM and just use this application to fix the bootloaders ?
Technically yes. But it would be stupid to do so. Flashing bootloaders (what this app does) is VERY dangerous, it is the only way to really brick a Tab. If you want to flash a new ROM, make sure it DOES NOT contain bootloaders. Remove them yourself, or wait for somebody else (like Rotohammer) to remove the bootloaders and post the "safe" ROM. Even though this patch is available, if at all possible, you should always try to avoid having to use it.
CDMA tabs
There is currently no support for CDMA Galaxy Tabs, nor do we know if support is needed at this time.
LINKING
You are expressly forbidden to repost the APK elsewhere. If you post about this, post a link to this thread, not to the download (or a repost of the download).
Download
Don't forget to donate and/or press the thanks button!
For non-XDA members who cannot access the attachment, here are multiupload links:
Euro / International / Unbranded / AT&T / Rogers / T-Mo: http://www.multiupload.com/EMOCU1S0V2
Latin (P1000L and P1000N): http://www.multiupload.com/3TJ3YWMWJR
MAKE SURE TO SELECT THE RIGHT DOWNLOAD!
WARNING! Do not flash JM6/9/A/C/D/E/F... Before reading this !
THIS POST, #2 OF THIS THREAD, IS HISTORICAL AND LEFT HERE "FOR THE RECORD". SEE THE FIRST POST FOR WHAT IS CURRENT!
BREAKING NEWS / JAN 15: A fix has been found ! See this post. Also see the bounty thread: http://forum.xda-developers.com/showthread.php?t=906464.
This really applies to other ROMs as well, but the "new" JM6/9/A/C/D/E/F ROMs specifically.
Some of these ROMs include new bootloaders. These bootloaders check checksums/signatures in various parts of the firmwares. The "normal" Samsung ROMs, nor custom ROMs and kernels, have these checksums.
The result is that once flashed, you cannot revert to older/official/custom Samsung ROMs, and you are pretty much stuck using one of these four ROMs, as they are the only ones containing the right checksums.
At least TRIPLE CHECK if you want to flash one of these ROMs, that what you are flashing DOES NOT include the new bootloaders ( boot.bin and sbl.bin ). I know from the CF-Root thread that a fair number of you are already too late, but I thought to warn new users anyways. Some modders (like rotohammer) already usually remove these parts, but still triple check everything to make sure.
There is no known fix. I know, I've tried all of them some people suggested in other threads. None of them really works. Sure, with some effort, you can get a different firmware to somewhat run, but you'll still be using the "checksum" bootloaders and the kernel will not be modified. You will still be running the kernel from the "checksum" firmware you loaded earlier. You will not be able to do full flashes, nor will KIES updates work.
Hopefully somebody will find a real solution for this issue for those already affected. If so, please post it in this thread.
Are you affected ?
NEW DEC 28: See SGTBootloaderCheck script below!
It is hard to say for sure without actually trying to flash a non-JM6/A/C/D kernel without the correct checksum. Here's a screenshot of the error you'll get:
If you still have the original files for the ROM you flashed, but do not want to try flashing a non-Samsung-stock kernel, there are some indicators:
- Rename all .tar.md5 files to .tar
- Extract all the .tar files with WinRAR
- Look at the resulting files:
--- Includes "boot.bin" (primary bootloader)
--- Includes "sbl.bin" (secondary bootloader)
If one or both are present, this indicates new bootloaders are being flashed. That does not make it certain if they are "protected" or not, though. But if a large zImage is also present (see the next item), it is very likely they are.
- Look at the resulting files:
--- "zImage" (kernel)
If zImage is about 7800 kb (as opposed to 4000 - 5500 kb that is normal), it is very likely this kernel includes a checksum. If you want to be 100% sure, open zImage in a hex editor, and go all the way to the end. There will be a few mb of 0's, followed by 128 bytes checksum - the very last 128 bytes in the file.
Such a zImage can be flashed both on "original" and the new "protected" bootloaders. The "protected" bootloaders can only flash these zImage, not the smaller variants.
If you have boot.bin, sbl.bin and a 7800 kb zImage, it is 99% likely flashing this ROM will give you a "protected" bootloader.
Some tech
Once these ROMs are flashed, it is required updates to "boot", "sbl", "zImage" have a 128-byte checksum/signature. In boot.bin and sbl.bin these are near the end, in zImage (7800 kb files) they are the very last 128 bytes. Only firmwares with a zImage that have this signature will be flashable (which at the time of this writing are only JM6/A/C/D).
I have no idea how this signature is generated as of yet, so "faking it" is also not an option. If somebody figures that out, please post it in this thread. Then we could just insert the signatures in the older bootloaders and flash them back (still a dangerous effort by itself).
I think, and possible others will correct me on this, the verification goes as follows, on a running device:
- PBL ( boot.bin ) checks SBL ( sbl.bin ) signature
- SBL checks kernel ( zImage ) signature
While flashing, I think it's the SBL that verifies the PBL/SBL/kernel flash, and refuses to write if the signature isn't correct.
Possible solutions
Flashing back "unprotected" bootloaders from older ROMs through either Odin or Heimdall does not work. These older bootloaders do not have the required signatures/checksums and thus the flash will fail.
A possible solution would be rooting the device, using Koush' bmlunlock, and dd'ing back bml1 and bml4 from backups, complete bypassing the flash checks. This is a very very dangerous to be trying out though, and unless you really know what you are doing, I wouldn't attempt it. Maybe someone has Samsung repair center contacts or a JTAG unit close by ?
Personal note
I have tried to flash back older bootloaders and kernels several times and in several ways (from for example JJ4) but this fails. Odin said it succeeded the very last time I tried, however it really didn't, as my device is now a full (user-wise) brick. It doesn't even turn on to show me the "phone --- | --- pc" error screen. So I guess I need to make a trip to the nearest Samsung repair center (200 miles away). Too bad my car also broke down today Guess it'll be some time (and money) before I have a working Tab again. Note that the brick was a problem with Odin, probably, not directly caused by the protected bootloaders themselves.
Update: Tab is back and working Replaced mobo, so I no longer have the signed bootloaders myself.
NEW DEC. 28: SGTBootloaderCheck
Attached is also SGTBootloaderCheck. This is a script run on your Windows PC through ADB to check your bootloaders. It requires root, SuperUser, and a working ADB connection.
Just unzip the archive to a new folder, and double-click "check.bat". That should dump your bootloaders and kernel, copy them to your computer, check the content for signatures, and let you know the result.
I can't guarantee it works, but it should
Attached
An archive with some relevant files for those who want to do some research. DON'T FLASH THESE FILES !!!
( 467, 909 )
I'm sorry about your Tab man.
After flashing JM6, I have "zImage" and "Sbl.bin" but no "boot.bin" in my internal SD. Am I affected?
Also, is it safe to delete these files from my internal SD? I'm guessing they were put there temporarily and are now stored somewhere else already?
hey chainfire,
i'm sorry about the brick :/
my english seems to be very bad... could u explain me why ur tab is bricked now?
i think i understood why its not possible to flash to another firmware but why ur tab is bricked now? yesterday i flashed to jm6 from an old arabic fw (i think it was JJ1) with pit p1 and code, modem and csc file with re-part. on. so is anything there i have to look out now?
codewisp said:
After flashing JM6, I have "zImage" and "Sbl.bin" but no "boot.bin" in my internal SD. Am I affected?
Also, is it safe to delete these files from my internal SD? I'm guessing they were put there temporarily and are now stored somewhere else already?
Click to expand...
Click to collapse
You could be affected, I can't say for sure. The only way to be sure is trying to flash a custom kernel and see if Odin gives an error. See the CF-Root thread for screenshots of the error that is produced if you are affected. If there's no error and it boots, you have probably not been affected. Note that you can flash back the original JM6 kernel with both the "protected" as well as the "original" bootloaders.
I'll update the first post to add a bit more information.
Also yes, those files on your internal SD are temporary, you can delete them.
DubZyy said:
hey chainfire,
i'm sorry about the brick :/
my english seems to be very bad... could u explain me why ur tab is bricked now?
i think i understood why its not possible to flash to another firmware but why ur tab is bricked now? yesterday i flashed to jm6 from an old arabic fw (i think it was JJ1) with pit p1 and code, modem and csc file with re-part. on. so is anything there i have to look out now?
Click to expand...
Click to collapse
The brick is a result of a bad bootloader flash... it's not something any of you are likely to encounter (unless you are trying to fix this issue).
If you successfully flashed to JJ1 - Odin did not produce any errors - you are probably safe!
Thanks for the information, but a little bit late for me --> bricked
My luck: Next samsung repair center is 5 kilometers away.
But I don't know what i should tell him.
The truth?
@chainfire
Have your tried hexediting the version of the SBL to a "fake" newer version? or does the check only care about the checksum ? on older phone we used to be able to do this....
I'm unpacking my dev. tab as we speak so I hope to have some time to play between x-mas dinners
chinchen said:
Thanks for the information, but a little bit late for me --> bricked
My luck: Next samsung repair center is 5 kilometers away.
But I don't know what i should tell him.
The truth?
Click to expand...
Click to collapse
Damned lucky the repair center is close!
You wouldn't happen to be living near me and I just never heard of this service center, would ya ?
How exactly is it a brick ? It's only a brick if it doesn't turn on at all anymore (like mine). If you can get anything on screen, you can bring it back to life (although maybe with protected bootloaders).
Jesterz said:
@chainfire
Have your tried hexediting the version of the SBL to a "fake" newer version? or does the check only care about the checksum ? on older phone we used to be able to do this....
I'm unpacking my dev. tab as we speak so I hope to have some time to play between x-mas dinners
Click to expand...
Click to collapse
As far as I have been able to deduce (I have not done a full decompile yet, and not sure if I'm going to) it's only the checksum that matters. But I could be wrong there.
I'll upload some files for you in a minute, so you can look at them yourself as well.
chinchen said:
Thanks for the information, but a little bit late for me --> bricked
My luck: Next samsung repair center is 5 kilometers away.
But I don't know what i should tell him.
The truth?
Click to expand...
Click to collapse
Anything besides truth - tell them that you turn off Tab at evevning, and at the morning he doesnt start... they believe
Chainfire - my condolence... i also cannot flash CF-Root on JMC so i think i have new bootloader - im waiting for next steps when yours Galaxy Tab alive
sorry for my english
@Jesterz:
Some files you might want to look at attached to first post.
Is there any way to check what version of bootloader i have installed? I cannot install CF-Root on JMC -its enough to say i upgrade bootloader in my Tab?
faust86 said:
Is tehere any way to check what version of bootloader i have installed? I cannot install CF-Root on JMC -its enough to say i upgrade bootloader in my Tab?
Click to expand...
Click to collapse
If you get the same error as in the screenshot linked to in the first post, yes, you have the protected bootloaders.
good to know i am not effected. and for people who has effected roms i think as we know the reason there will be a quick solution for this.
Chainfire said:
If you get the same error as in the screenshot linked to in the first post, yes, you have the protected bootloaders.
Click to expand...
Click to collapse
So i install this *** bootloader... maybe i brick my Tab and take it to service point... i have 100 meters :>
Me too
Chainfire said:
If you get the same error as in the screenshot linked to in the first post, yes, you have the protected bootloaders.
Click to expand...
Click to collapse
I have the error and I cant change ROM (a part from switching between JM6, JMA and JMC)... Hope someone soon find a fix!
My tab some ago was in a similar state (complete black and didnt show in ODIN).
My luck was that it was stuck in some kind of download mode. Leaving it connected to the computer has made a miracle: after more than 15 minutes it has appeared as connected in ODIN and was possible to flash back a ROM).
patomas said:
I have the error and I cant change ROM (a part from switching between JM6, JMA and JMC)... Hope someone soon find a fix!
My tab some ago was in a similar state (complete black and didnt show in ODIN).
My luck was that it was stuck in some kind of download mode. Leaving it connected to the computer has made a miracle: after more than 15 minutes it has appeared as connected in ODIN and was possible to flash back a ROM).
Click to expand...
Click to collapse
I'll just try that. I have no hope of it working, but hey, it's not like I'm using the Tab for anything else right now
patomas said:
My tab some ago was in a similar state (complete black and didnt show in ODIN).
My luck was that it was stuck in some kind of download mode. Leaving it connected to the computer has made a miracle: after more than 15 minutes it has appeared as connected in ODIN and was possible to flash back a ROM).
Click to expand...
Click to collapse
While the Tab was at a black screen, did you ever press the power button or did you just leave it alone for Odin to eventually find it?
rotohammer said:
While the Tab was at a black screen, did you ever press the power button or did you just leave it alone for Odin to eventually find it?
Click to expand...
Click to collapse
While you're here... any chance of both STL and BML dumps of your (hopefully proper) PBL and SBL ?
Chainfire said:
While you're here... any chance of both STL and BML dumps of your (hopefully proper) PBL and SBL ?
Click to expand...
Click to collapse
Of course. I have dumps of everything. I'm just about to run some diffs to make sure my current bootloaders are ok, I can't remember what Ive flashed

HELP! HTC M9 ROM update help

Ok so in the last thread I started I learned how flashing ROMS works, with the matching firmware, CID's, and other stuff, but now I have another issue... The ROM that I was able to flash was the TeamVenom Viper One ROM for Android L (Lolipop)....The ROM version I used was Viper 3.5.0, but now I would like to upgrade to Viper 6.1.0, but it requires Android M (HTC Firmware 3.x).... I do not have a stock ROM to go back to update, and the HTCDev RUU.exe to update gives error code 132 (similar to error code 12, Thanks for the ReadMe page btw @Flippy498), which is a signature error (which is odd because it is straight from HTCDev) and I cannot find a zip file of 3.xx.502.xx to flash that isn't A) corrupted upon download, or B) has a working link... I don't think I can update Viper because it says "Flashing the new Android M firmware is a must, else your phone won’t boot!!" (trust me it doesn't boot, I've tried)... But I read somewhere that having a Team Venom account will allow you to receive OTA updates, yet when I check for OTA updates through the Venom app in the app drawer it doesn't find any available updates, which I know is incorrect because as I said I'm still on Android L (5.1)... What would I need to do from here, how would I A)fix HTC installer, or B) does anybody have a WORKING flashable stock android zip to update from Lollipop to Marshmallow...
Thanks in advanced!
Forum N00b,
qwsderter
qwsderter said:
but now I would like to upgrade to Viper 6.1.0, but it requires Android M (HTC Firmware 3.x)
Click to expand...
Click to collapse
It's actually recommended to use firmware 4.x for Viper 6.1.0 (although the rom boots on 3.x, as well).
qwsderter said:
I do not have a stock ROM to go back to update, and the HTCDev RUU.exe to update gives error code 132 (similar to error code 12, Thanks for the ReadMe page btw @Flippy498), which is a signature error (which is odd because it is straight from HTCDev)
Click to expand...
Click to collapse
It's not odd at all. Re-read the explanation of the error or the RUU section. Both explain why the flash fails.
qwsderter said:
I cannot find a zip file of 3.xx.502.xx to flash that isn't A) corrupted upon download, or B) has a working link
Click to expand...
Click to collapse
I checked the link in the ReadMe thread. It'sworking fine. If the file gets corrupted during the download then it's due to your setup (e.g. an interruption of your internet connection during the download, etc.).
qwsderter said:
But I read somewhere that having a Team Venom account will allow you to receive OTA updates, yet when I check for OTA updates through the Venom app in the app drawer it doesn't find any available updates, which I know is incorrect because as I said I'm still on Android L (5.1)
Click to expand...
Click to collapse
There is no OTA for updating Venom 3.5.0. Custom roms can't update your firmware. Therefore, you need to update it on your own and to flash a full rom whenever the rom's base get's changed. The OTAs only update the rom (e.g. from 3.0.0 to 3.1.0). That's why there isn't an OTA for 6.0.0 -> 6.1.0, either. 6.1.0 is based on a different firmware than 6.0.0. You might want to read the article that is labeled as "The difference between rom and firmware" in the further reading section of the ReadMe thread.
Flippy498 said:
It's actually recommended to use firmware 4.x for Viper 6.1.0 (although the rom boots on 3.x, as well).
It's not odd at all. Re-read the explanation of the error or the RUU section. Both explain why the flash fails.
I checked the link in the ReadMe thread. It'sworking fine. If the file gets corrupted during the download then it's due to your setup (e.g. an interruption of your internet connection during the download, etc.).
There is no OTA for updating Venom 3.5.0. Custom roms can't update your firmware. Therefore, you need to update it on your own and to flash a full rom whenever the rom's base get's changed. The OTAs only update the rom (e.g. from 3.0.0 to 3.1.0). That's why there isn't an OTA for 6.0.0 -> 6.1.0, either. 6.1.0 is based on a different firmware than 6.0.0. You might want to read the article that is labeled as "The difference between rom and firmware" in the further reading section of the ReadMe thread.
Click to expand...
Click to collapse
Hey thanks Flippy you are the clutch, but I can verify that the files ARE corrupt.... I have downloaded it twice, and I have google fiber so I can guarantee that the connection was consistent. Winrar said the file was corrupted, along with when trying to flash TWRP would flash.... Any other ideas, you are the master at this Flippy, there must be another way...
qwsderter said:
Hey thanks Flippy you are the clutch, but I can verify that the files ARE corrupt.... I have downloaded it twice, and I have google fiber so I can guarantee that the connection was consistent. Winrar said the file was corrupted, along with when trying to flash TWRP would flash....
Click to expand...
Click to collapse
You should re-read the ReadMe thread. They're not corrupt. I thought that with "corrupt" you meant the MD5 checksum wouldn't match after the download. That WinRar error message is expected behaviour.
Flippy498 said:
You should re-read the ReadMe thread. They're not corrupt. I thought that with "corrupt" you meant the MD5 checksum wouldn't match after the download. That WinRar error message is expected behaviour.
Click to expand...
Click to collapse
Ah gotcha... So I used the decryption tool to make a SD flashable zip, and what do you know, TWRP crashes when I swipe to flash... How come I can flash other ROMs but I can't flash stock roms without it crashing (Device turns off)
Please don't tinker around without knowing what you're doing and (as said before) read what got written in the FAQ and the RUU section. Extracting the *.zip wasn't needed at all since there already is a download link for an extracted *.zip. In addition, there are step by step instructions how RUUs can/need to get flashed.
Sent from my HTC One M9 using XDA Labs
Flippy498 said:
Please don't tinker around without knowing what you're doing and (as said before) read what got written in the FAQ and the RUU section. Extracting the *.zip wasn't needed at all since there already is a download link for an extracted *.zip. In addition, there are step by step instructions how RUUs can/need to get flashed.
Sent from my HTC One M9 using XDA Labs
Click to expand...
Click to collapse
Ok thank you "again" I have officially read your ENTIRE guide 3 times now, Not trying to offend you or make shame of your work, but the problem is I "THINK" that I am following your work.... I download the RUU for my phone (in this case SKU: 502 - CID: CWS__001 VERSION 2.11.502 (I have also tried 3.38.502.41 to no avail)) and everything is going as planned, I have verified that BOTH the CID and MID are matching that of my phone.... But when I plug SD card into Phone in download mode I get no such asked if I want to flash the file (as your guide says to do).... Ok so if I try to flash through TWRP it crashes, and if I try to Fastboot Flash the file I get what is seen in the picture attachment, and then nothing happens, except the bootloader page says "Under flash" and adds another line saying Under flash everytime I press the power button... My phone is S-OFF, is there another possible way to do this.... I swear to go I have read your ReadMe thread and I'm not just being arrogant, but my phone WILL not flash to ANY STOCK ROM downloaded anywhere from the Internet... @Flippy498 I promise there has to be something I missed in your ReadMe (I HAVE NO IDEA HOW I COULD) or i'm getting damaged ROMs... I'm sorry that you have to put up with me and help me thus far, and let me say the XDA community deserves people like you, and less people like me who think they know what they are doing until something breaks...
EDIT: It seems the phone is missing a located at /dev/fastboot_download_j in the CMD screenshot. Should that be said issue how would I go about fixing that...
Your SD card isn't bigger than 32gb and formatted to fat32? The file is placed in the root directory of the card and renamed to 0PJAIMG.zip (not 0PJAIMG.zip.zip and not OPJAIMG.zip)? The SD card method as it is written there already got used by a lot of users without any issues. The problem in this case must be on your end. What kind of error is stated at the bottom of your download mode? The M9 always tells you what's wrong. Either the SD card isn't mounted correctly (in other words you're using an unsupported format) or the 0PJAIMG.zip file is missing (in other words either non-existent on your sd card, placed in the wrong direction or renamed wrongly).
And of course TWRP crashes. Not every *.zip file can get flashed via TWRP just because it's a *.zip. (Just like not every *.zip can/should get unzipped just because it's a *.zip.) The only methods that can be used for flashing a RUU are mentioned in the ReadMe thread. And that's what I meant with "don't tinker around". You're doing things with files they're not meant to be done with.
The fastboot flash on the other hand can't work with the commands shown in your screenshot. That's a mistake in my guide. :silly: And it's even explained in the text above the instructions. I'm wondering why nobody (including me) noticed that before. I can only assume that it's because fastboot flashing doesn't get used that often for RUUS. The commands need to start with "htc_fastboot" not "fastboot". The normal fastboot isn't able to flash RUUs. I've fixed that part. Thanks for making me aware of that.
And in regard to the "damaged roms": The ReadMe thread explains how to check whether your downloads are fine (key word: md5).
Flippy498 said:
Your SD card isn't bigger than 32gb and formatted to fat32? The file is placed in the root directory of the card and renamed to 0PJAIMG.zip (not 0PJAIMG.zip.zip and not OPJAIMG.zip)? The SD card method as it is written there already got used by a lot of users without any issues. The problem in this case must be on your end. What kind of error is stated at the bottom of your download mode? The M9 always tells you what's wrong. Either the SD card isn't mounted correctly (in other words you're using an unsupported format) or the 0PJAIMG.zip file is missing (in other words either non-existent on your sd card, placed in the wrong direction or renamed wrongly).
And of course TWRP crashes. Not every *.zip file can get flashed via TWRP just because it's a *.zip. (Just like not every *.zip can/should get unzipped just because it's a *.zip.) The only methods that can be used for flashing a RUU are mentioned in the ReadMe thread. And that's what I meant with "don't tinker around". You're doing things with files they're not meant to be done with.
The fastboot flash on the other hand can't work with the commands shown in your screenshot. That's a mistake in my guide. :silly: And it's even explained in the text above the instructions. I'm wondering why nobody (including me) noticed that before. I can only assume that it's because fastboot flashing doesn't get used that often for RUUS. The commands need to start with "htc_fastboot" not "fastboot". The normal fastboot isn't able to flash RUUs. I've fixed that part. Thanks for making me aware of that.
And in regard to the "damaged roms": The ReadMe thread explains how to check whether your downloads are fine (key word: md5).
Click to expand...
Click to collapse
Once again Thank you for helping me out, the htc_flashboot command was what I needed, I was able to flash the stock rom through the command.... May I just say, you sir know what you are doing, and I wish you continue to help other people on this forms just like you've helped me.... I Installed the 2.x rom, but the OTA update didn't work for some reason... so I'm gonna flash the 4.x and then install ViperOne again...
And when I was saying "Damaged Roms" I was not implying that it was corrupted over the internet, but rather that they were never working in the first place...
Oh, that microSD card I had is in the trash now, since the only device that recognizes it is my pc, I assume it is on the brink of death...
Thanks again,
qwsderter
qwsderter said:
I Installed the 2.x rom, but the OTA update didn't work for some reason
Click to expand...
Click to collapse
That's probably like that due to AT&T denying OTAs to phones that currently aren't using an AT&T sim card. You wouldn't be the first user that isn't able to receive AT&T updates for the M9. Don't ask me why they're allowed to do so. Something like that wouldn't be possible in the EU.
qwsderter said:
so I'm gonna flash the 4.x and then install ViperOne again
Click to expand...
Click to collapse
Don't forget that you need to flash one of Sneakyghost's firmware packs if you want to be able to flash 4.x RUUs. (Keyword: encryption keys)
qwsderter said:
And when I was saying "Damaged Roms" I was not implying that it was corrupted over the internet, but rather that they were never working in the first place
Click to expand...
Click to collapse
That's actually the difference between my ReadMe thread and most of the RUU collections on other websites. The files only get linked if they're known to be working whereas other sites link every RUU they can find. There are a lot more RUUs for the M9 out there than the ones I listed. However, these RUUs either aren't able to get flashed successfully or their roms aren't able to receive any OTAs - e.g. there's a second RUU for firmware 1.32.401.15 than the one that is linked in my thread and if you flash that other RUU you're stuck on its firmware version until you flash a different RUU.
qwsderter said:
Oh, that microSD card I had is in the trash now, since the only device that recognizes it is my pc, I assume it is on the brink of death
Click to expand...
Click to collapse
If it's really broken you should thank whichever god you believe in that your phone wasn't able to recognize the card. Since your phone is S-OFF all security checks on your phone are disabled. That means if a file gets corrputed on the SD card due to its partition being messed up your phone would still accept the broken RUU, nonetheless. This would most likely lead to unrecoverable damages. In other words, chances are high in such situations that you create a fancy but expensive paperweigth.
Flippy498 said:
That's probably like that due to AT&T denying OTAs to phones that currently aren't using an AT&T sim card. You wouldn't be the first user that isn't able to receive AT&T updates for the M9. Don't ask me why they're allowed to do so. Something like that wouldn't be possible in the EU.
Click to expand...
Click to collapse
Funny, I thought the same thing, until I realized it was ATT who I am paying every month to rip my girlfriend and I off. Well oh well, I know you are in Germany (From your profile) but if you ever come to the United States, I will say from my personal experience (my opinion, not facts) ATT has seemed to have the broadest coverage, but also is the (2nd) most constrictive (Verizon seems very constraining), to me ATT feels premium but they are also (in my opinion) the most likely to royally screw up... Oh well, no OTA time to flash!!!
Flippy498 said:
If it's really broken you should thank whichever god you believe in that your phone wasn't able to recognize the card. Since your phone is S-OFF all security checks on your phone are disabled. That means if a file gets corrputed on the SD card due to its partition being messed up your phone would still accept the broken RUU, nonetheless. This would most likely lead to unrecoverable damages. In other words, chances are high in such situations that you create a fancy but expensive paperweigth.
Click to expand...
Click to collapse
Trust me, when I tried the SD card in the phone I thought, "That is a little odd", then both of my ASUS MemoPads didn't detect it either EVEN THOUGH THEY WERE RUNNING, I just assumed that they didn't work because MemoPads are the most budget friendly tablets ever and something broke, so I go to my Nexus 7 and realize it doesn't have an SD card slot so I couldn't test, so I popped the card in our Camera... Low and behold it doesnt detect.... Now the true question, why did my desktop detect it, eh whatever not worth my time.... The gods were looking down on me, they broke my $10 microSD and not my more than 10$ phone.....
Once again thank you for the help Flippy, you have no idea how much it hurt using my iPhone 5 for 2 days, I felt so inferior

[SOLVED] PLEASE HELP - HardBricked my OnePlus 5T

Dear Community,
I just searched the past 2 days for a solution but I've not been lucky
Therefore I'd like to ask for help in this forum and hope there is some additional hint or hack I could try...:
So here's the situation:
OnePlus 5T (8/128) with a non booting or not "useful" OS (see last point what I've tried)
No TWRP or CWM
Stock Recovery present
Bootloader Locked
Allow Bootloader to be unlocked = FALSE
What I've already tried yet:
Flashing TWRP --> Not possible Bootloader Locked
Flashing regarding any other kinds like "update" or "flash all" as provided with TOOL_ALL_IN_ONE
ADB Sideload any available ROMS (Original "full" OP5T / FreedomOS / Omni8) --> ADB stops at 47% in Stock Recovery regardless of size of the ZIP file
Tried different versions of ADB (32 & 64 Bit / older & new / also with the LargeAddressAware approach / and on multiple PC's) --> Always same error (47%)
Stumbled upon the possibility to EmergencyDownload a factory flash due to Qualcomm chipset using the MSM-Download-Tool --> Only OnePlus 5 ROM available (no "T")
Mentioned EDL procedure works and OS is booting BUT neither Touchscreen nor USB OTG (for external mouse support) is working --> So I can't navigate and allow Bootloader to be unlocked again
Unfortunately I'm now stuck and have no more idea how to unbrick my phone again
What would help:
Any source to MSM-Download-Tool packed with a correct ROM for the OnePlus 5T
A Workaround to just flash TWRP via MSM-Download-Tool or Qualcomm's QFIL application in EDL mode
Some "hack" to bypass the locked Bootloader situation
Every appreciated Input you might have that I'm currently not aware of...
So PLEASE let me know of any approach that I could try or if you might have found a link or something else to a solution that might help me out of this disaster...
Many thanks in advance!
Tryouts due to your feedback:
@dreinulldrei - "fastboot boot recovery.img" tried with the original 5T Recovery.img also with blu_spark TWRP --> no luck...
SOLVED SOLUTION:
As the EDL factory flash ROM is currently not (or will never officially be) available public getting in contact with the OnePlus support team is required.
They have such a recovery tool (MSM-Download-Tool) with an appropriate ROM and are able to flash the device during a remote support session conducted via chat.
So by starting a chat on the OnePlus Support page and describing your situation will lead to scheduled time slot where a Level-2 technician will do all required steps remotely.
(All files are password protected and the technician ensures they are deleted at the end of the session so I'm unfortunately not able to provide the sources for DIY purposes...)
Following. I would think there would be some way to flash some sort of signed image via fastboot...
U flashed a 5 os to it, using the msmtool try to extract those files from 5t os, I will do it when I get home and so u can try it, i can't guarantee anything though, would u like me to do that for u
Bradl79 said:
U flashed a 5 os to it, using the msmtool try to extract those files from 5t os, I will do it when I get home and so u can try it, i can't guarantee anything though, would u like me to do that for u
Click to expand...
Click to collapse
Thanks for your input - I'm really not aware of how to generate such *.ops ROM files as this is what the MSM Tool expects...
But if there is a way and you are able to extract and produce a MSM flashable file I would be very happy to try!
I would recommend trying to boot a OP5T recovery, you might have flashed some OP5 rom including OP5 recovery. Just go into fastboot (power on with volume up pressed down), then via cmd:
fastboot boot recovery.img
Since OP does not offer the recovery to be downloaded, it will need to be downloaded from a working device. Lacking the cable right where I am, but I am sure someone else can help out.
crakerjac said:
Following. I would think there would be some way to flash some sort of signed image via fastboot...
Click to expand...
Click to collapse
Thanks for the input - I forgot to mention I also tried the 2 original available OP5T "full" ZIP ROM's (think they should be signed...)
Will add this to the initial Post but I assume also no chance here...
dreinulldrei said:
I would recommend trying to boot a OP5T recovery, you might have flashed some OP5 rom including OP5 recovery. Just go into fastboot (power on with volume up pressed down), then via cmd:
fastboot boot recovery.img
Since OP does not offer the recovery to be downloaded, it will need to be downloaded from a working device. Lacking the cable right where I am, but I am sure someone else can help out.
Click to expand...
Click to collapse
Ohhh good point - I also think there is the "wrong" recovery (from 5) currently on my phone (because also there the touchscreen behaves unexpectedly...)
But unfortunately with your command I get the "Your device is corrupted. It can't be trusted and will not boot" message.
Tried this with the original 5T Recovery.img I managed to obtain and also with the blu_spark TWRP - no luck...
Edit: Ignore, misread previous post.
U may have to make a call to oneplus so they can restore for u
Submit a ticket to One Plus
You are going to have to submit a ticket, they will arrange a time to help you by unbricking the phone remotely.
I just had to do this myself this week, and it got done today.
I do have the 5t unbricking files but I cannot access the archive because it's password protected.
One important this you didn't mention is how this happened.
OnePlus may be able to help with this one, but all root guides explicitly include the phrase "at your own risk."
blackknightavalon said:
OnePlus may be able to help with this one, but all root guides explicitly include the phrase "at your own risk."
Click to expand...
Click to collapse
Bradl79 said:
U may have to make a call to oneplus so they can restore for u
Click to expand...
Click to collapse
WMerkens said:
You are going to have to submit a ticket, they will arrange a time to help you by unbricking the phone remotely.
I just had to do this myself this week, and it got done today.
I do have the 5t unbricking files but I cannot access the archive because it's password protected.
Click to expand...
Click to collapse
Thanks for all your advice - so I will arrange a support chat/ticket as soon as possible and inform about the result in this thread.
Didn't thought that OnePlus Support Team would even care about such bricks (no warranty / own risk / "playing" with root / etc...)
But as indeed they seem to help like @WMerkens experienced I would be very happy to have a working device again
CodeXter said:
Thanks for all your advice - so I will arrange a support chat/ticket as soon as possible and inform about the result in this thread.
Didn't thought that OnePlus Support Team would even care about such bricks (no warranty / own risk / "playing" with root / etc...)
But as indeed they seem to help like @WMerkens experienced I would be very happy to have a working device again
Click to expand...
Click to collapse
don't know why you would think that OP wouldn't help...they have said from day one that unlocking/rooting does not void your warranty. Heck they encourage it. I assume you are the same person on the OP forum w/ this problem. Hopefully after you get this resolved you will have learned to NEVER EVER RELOCK your phone unless you do the whole factory image qualcomm recovery tool bit. and experienced OP folks on this forum know any claims of a "hardbricked" OP phone is ALWAYS not true.
Yeah oneplus used to be good about and does a remote session to restore, this was back in the one plus one days though, but I think they still do it
---------- Post added at 03:25 AM ---------- Previous post was at 02:54 AM ----------
WMerkens said:
You are going to have to submit a ticket, they will arrange a time to help you by unbricking the phone remotely.
I just had to do this myself this week, and it got done today.
I do have the 5t unbricking files but I cannot access the archive because it's password protected.
Click to expand...
Click to collapse
Awwww I wish we could get them, do they use the msmtool too?
How I bricked a 5t
I got the phone and I had installed twrp, that went fine. I was looking at magick systemless rooter when the phone then kicked in with a OTA update, I chose to ignore it the first time. It occurred again a few minutes and in my haste I let it do it's job but it did not complete correctly. I rebooted and the phone complained about corruption to the OS, I got in again but made the dumb mistake of re enabling the OEM lock and because I thought that might be causing the problem. I rebooted again but now I could not boot any more into the OS, it complained I was corrupted and go to google to see what to do.
So I was left with a bricked phone.
I could do bootloader but not recovery and I could not unlock the bootloader.
I could not get in via adb usb debug, So after much research I download the OnePlus 5 unbricking pack and learned a whole lot about qualicom and EDL mode, plus I learned a lot about the QFIL tools and restoring a phone. I did the 5 unbrick but my screen ended up upside down but the touch was right side up, which resulted in a very hard to use phone.
I tried the QFIL method but I was missing a mdb file to be able to talk to the phone.
So I gave up submitted a ticket and after much bad co-ordination on their part got a level 2 tech to debrick the phone remotely.
They do a reverse VPN and connect to your computer, they tell you to have 2 files archive ready in a folder on your desktop (they supply the links). They install the EDL driver and unpack the debrick archive. The archives are password protected, they run the tool and restore the phone
back to factory.
They erase the unpacked archives after they are done.
jerrywmilton said:
don't know why you would think that OP wouldn't help...they have said from day one that unlocking/rooting does not void your warranty. Heck they encourage it. I assume you are the same person on the OP forum w/ this problem. Hopefully after you get this resolved you will have learned to NEVER EVER RELOCK your phone unless you do the whole factory image qualcomm recovery tool bit. and experienced OP folks on this forum know any claims of a "hardbricked" OP phone is ALWAYS not true.
Click to expand...
Click to collapse
Oh yes I've learned my lesson on this :angel: --> Never ever set OEM to be unlocked to NO again
Obviously I do not exactly know what wrong procedure made me stuck in this situation but I just wanted to revert every single step back one by one to see which element brings me back to a valid SafetyNet situation...
I've been with the OnePlus "family" since the OP1 but never needed any direct support from the vendor - so every time there's a first time and so for me now...
Thus I really didn't know OP staff is actively doing remote support for their devices - but thumbs up for that! :good:
(BTW: I'm not the guy from the OP forum)
Bradl79 said:
Yeah oneplus used to be good about and does a remote session to restore, this was back in the one plus one days though, but I think they still do it
---------- Post added at 03:25 AM ---------- Previous post was at 02:54 AM ----------
Awwww I wish we could get them, do they use the msmtool too?
Click to expand...
Click to collapse
Yes basically it's the same archive as the 5 unbrick pack but it's for 5t, OnePlus 5T OxygenOS 4.7.2-171116.zip is the archive and you can look in it and you see the ops file is for dumpling not cheesburger, which is the code name for 5t. I saw the MsmDownloadTool is 4.0.8
Bradl79 said:
Yeah oneplus used to be good about and does a remote session to restore, this was back in the one plus one days though, but I think they still do it
---------- Post added at 03:25 AM ---------- Previous post was at 02:54 AM ----------
Awwww I wish we could get them, do they use the msmtool too?
Click to expand...
Click to collapse
I just had a chat with them before and got mailed a link to the MSMTool incl. ROM for the OP5T (dumpling)
But unfortunatley support files from OnePlus are password protected Nevertheless here the original vendor link:
https://onepluscn-my.sharepoint.com/personal/sheva_liu_oneplus_net/_layouts/15/guestaccess.aspx?docid=0fde9596c72744b4fb9c073ca5d87edbe&authkey=AQPXKRi7pdIzZX-5WH_pwWg&e=1030aa0046da4d1aa9189020027d9c93
So I have to wait for my remote support schedule on Saturday to have the L2 technician entering the password and do the rest.
Would be able to do this myself but OnePlus obviously wants to protect their sources what I have to accept, respect and be patient for...
So, never turn off the OEM Unlocking?

Questions about developpement

Hello there !
I got the RN8Pro, last week and i unlocked it today. I naturally started to look how to root/install TWRP. I found numerous threads with instructions on how to do it but i also found a lot of warnings that it may brick the device, and that if that happens i need a special account to be able to unbrick it. It seems that some methods will work for the Chinese version while bricking others and vice versa. I have the Global ROM version 11.0.3.0(PGGEUXM) and the model of my phone is M1906G7G. Do you think it's safe for me to try flashing TWRP or at least root through ADB ?
I have also searched for custom ROMs and did not find any. The phone is relatively new so i wouldn't mind if i had to wait a bit, but i have also read that people just don't want to develop for it because of the Mediatek chip. Everyone says that development is not possible because there is no source code the the Mediatek chip. But here it says that the sources have been released partially here and the rest here. Is there something that's missing from these repos that makes development impossible ?
I also would like to become more than just a user and learn how to make custom roms. I found this thread that compiles some guides but a lot of them seem a bit outdated and I'm lost. Is that a good starting point or i should i go elsewhere ?
Thanks ^^
TheBolshe said:
Hello there !
I got the RN8Pro, last week and i unlocked it today. I naturally started to look how to root/install TWRP. I found numerous threads with instructions on how to do it but i also found a lot of warnings that it may brick the device, and that if that happens i need a special account to be able to unbrick it. It seems that some methods will work for the Chinese version while bricking others and vice versa. I have the Global ROM version 11.0.3.0(PGGEUXM) and the model of my phone is M1906G7G. Do you think it's safe for me to try flashing TWRP or at least root through ADB ?
I have also searched for custom ROMs and did not find any. The phone is relatively new so i wouldn't mind if i had to wait a bit, but i have also read that people just don't want to develop for it because of the Mediatek chip. Everyone says that development is not possible because there is no source code the the Mediatek chip. But here it says that the sources have been released partially here and the rest here. Is there something that's missing from these repos that makes development impossible ?
I also would like to become more than just a user and learn how to make custom roms. I found this thread that compiles some guides but a lot of them seem a bit outdated and I'm lost. Is that a good starting point or i should i go elsewhere ?
Thanks ^^
Click to expand...
Click to collapse
Can't you look at guides section we need Testers for POSP :crying:
girishjangir7 said:
Can't you look at guides section we need Testers for POSP :crying:
Click to expand...
Click to collapse
I did, but what is said there doesn't apply to me. I don't live near a center and I bought it on AliExpress, so I don't tink that I have a guarantee that I could use.
TheBolshe said:
I did, but what is said there doesn't apply to me. I don't live near a center and I bought it on AliExpress, so I don't tink that I have a guarantee that I could use.
Click to expand...
Click to collapse
No problem then wait for someone to test:laugh:
TheBolshe said:
I did, but what is said there doesn't apply to me. I don't live near a center and I bought it on AliExpress, so I don't tink that I have a guarantee that I could use.
Click to expand...
Click to collapse
I would love to help though. But your post is quite cryptic. More details could be nice like what are the risks, what is need to be done, what to do in case of a problem. Plus, it's my only phone ATM and I am poor ^^
It Is Safe As Well As Not Safe.
I Had Bricked My Redmi Note 8 Pro(8GB) And I Had To Visit Mi Service Centre As I Required Xiaomi Authorised Account Which I Don't Have.
Some Peoples Bricked Their Phone After Flashing TWRP And Some After Flashing Wrong Boot.img
I Flashed TWRP Successfully But When I Rooted My Phone, I Faced Bootloop Problem Then To Solve That Problem I Accidently Flashed Wrong Boot.img File( 10.0.4 Boot File Into 11.0.3) Which Resulted Into Bootloop
But If You Follow All The Steps Carefully Then It Is Absolutely Safe.
Hemant Singh Rajput said:
I Had Bricked My Redmi Note 8 Pro(8GB) And I Had To Visit Mi Service Centre As I Required Xiaomi Authorised Account Which I Don't Have.
Some Peoples Bricked Their Phone After Flashing TWRP And Some After Flashing Wrong Boot.img
I Flashed TWRP Successfully But When I Rooted My Phone, I Faced Bootloop Problem Then To Solve That Problem I Accidently Flashed Wrong Boot.img File( 10.0.4 Boot File Into 11.0.3) Which Resulted Into Bootloop
But If You Follow All The Steps Carefully Then It Is Absolutely Safe.
Click to expand...
Click to collapse
Mine has 6gb ram. Which TWRP img did you use?
When it's in bootloop, all I need to do is hold power up to get to fastboot so I can flash boot.img right?
TheBolshe said:
Mine has 6gb ram. Which TWRP img did you use?
When it's in bootloop, all I need to do is hold power up to get to fastboot so I can flash boot.img right?
Click to expand...
Click to collapse
I Flashed This TWRP Through CMD
https://forum.xda-developers.com/re...overy-unofficial-twrp-recovery-redmi-t4002397
You Need To Press&Hold Power+Vol Down Button To Enter Into Fastboot Mode.
When TWRP Flashed Successfully Through CMD You Have To Immediately Disconnect Your Phone From PC Otherwise Your Phone Will Load Stock Recovery.
---------- Post added at 12:45 PM ---------- Previous post was at 12:42 PM ----------
TheBolshe said:
Mine has 6gb ram. Which TWRP img did you use?
When it's in bootloop, all I need to do is hold power up to get to fastboot so I can flash boot.img right?
Click to expand...
Click to collapse
I Think You Shouldn't Take Risk As Your Phone Has No Warranty

Question Anyone bricked/EDL/9008 their ROG 6?

Follow and complain here.
Let ASUS know their bootloader implementation is VERY NOT FRIENDLY to us. I've been modding my Android devices since the Android 2 era and this is the first time I encountered an UNOFFICIALLY UNRECOVERABLE state which is a HORRIBLE experience.
Me? Have played with
Samsung(S5 to S9 and Tab/Odin is a good thing)
XiaomiRedmiPoco(Main device for me today, very modder friendly and robust)
Huawei(Remember when they allow applying for BL unlock?)
Apple(LOL jailbreak from A4 SoC until iPhone X(meantime Samsung S8 looks gorgeous) lost my interest)
And various small brands or exited market big brands(honorable mention Lenovo LePhone C101. My first smart device/Android and received big community support at the good old time)
ASUS. Fix your buggy BL. Fix your policy. Release everything we need to fix OUR DEVICES of OURSELVES. Just ONE step closer to perfect.
Just imagine how stupid is this:
Everytime you want to update you operating system, your UEFI/BIOS firmware might break.
And worse, that you don't have free official resources to fix it?
And can it be worse? Yes! Your Warranty is maybe void because you may unlocked bootloader, now supposedly only ASUS service center have the file to fix it.
Ha now it's interesting. That's the era of ANTITRUST. Even Apple won't do it(Worst case DFU, easily fixable using OFFICIAL iTunes).
WT*?
yeah dude i'm bricked up rn
Paid here, paid there.
Yeah sure.
Exploit people.
Perhaps instead of ranting about asus, you could tell us what you have done exactly to brick your device, and someone might be able to help you ? can you get into fastboot at all?
EDIT: quoted content removed.
Never use this firmware, because it has not been modified, 100% of fingerprints and IMEI will be lost after use. You need to modify the firmware before you can flash it.
mahdibassam said:
Perhaps instead of ranting about asus, you could tell us what you have done exactly to brick your device, and someone might be able to help you ? can you get into fastboot at all?
Click to expand...
Click to collapse
Trying to flash img unpacked from update zip. Which you should NOT do. Because Android 12 dynamic partition.
iMoc said:
Trying to flash img unpacked from update zip. Which you should NOT do. Because Android 12 dynamic partition.
Click to expand...
Click to collapse
Ok, yes you definitely should not do that
So just wondering, you went and grabbed some img files and made the decision to flash them, why is this any fault of asus?
mahdibassam said:
Ok, yes you definitely should not do that
So just wondering, you went and grabbed some img files and made the decision to flash them, why is this any fault of asus?
Click to expand...
Click to collapse
1\ The fastboot code in their bootloader have bugs, any CORRECT command you type can easily break bootloader then stuck you in 9008.
2\ The normal update method failed because THEIR UPDATER did do things wrong.
3\ They refuse to provide official ROM to let yourself fix it. SEND IT TO ME TO FIX IT, AND I MIGHT CHARGE YOU SOME.
....\
N\ You go talk to Apple about it because they are experts about saying YOU USED IT WRONG.
Anyone asked for help gets it for free so far.
All devs on my chat group agree at least fastboot flashable should be available on the official download page.
MOD EDIT: off topic content removed
Did you manage to unbrick your phone?
I managed to semi hard brick my phone. Can get into fastboot but unable to start recovery mode from fast boot and phone doesn't show up from adb devices.
I guess I'll start a new thread but any tips?
insideoft said:
Did you manage to unbrick your phone?
I managed to semi hard brick my phone. Can get into fastboot but unable to start recovery mode from fast boot and phone doesn't show up from adb devices.
I guess I'll start a new thread but any tips?
Click to expand...
Click to collapse
If you can boot into fastboot you can just flash the RAW ROM file available a few days ago. It's not bricked in this case.
Moderator Information
Hello everyone,
I have cleaned the thread from off topic contents and posts. Please focus on problem solving related discussion, not finger pointing or flaming each other. We all come here to solve the issues and learn some new stuffs.
Thanks.
iMoc said:
If you can boot into fastboot you can just flash the RAW ROM file available a few days ago. It's not bricked in this case.
Click to expand...
Click to collapse
Sorry long time ago since I was into this stuff previosly.
That fixed it, thanks for the help!
same here

Categories

Resources