Xperia X10 Rooting and Custom ROM Development

Search This thread
M

Mr_Bartek

Guest
I will have a look. Do you need them decrypted? Filenames preserved?

@dejanet - could you send me the files you sent to jerpelea? I need the two SEUS files containing R1EA018 to decrypt.
 
Last edited:

JamesBarnes

Senior Member
Jul 17, 2009
378
28
Is anyone working on cracking the boot loader so we can start flashing custom roms? I'd like to help. What communication channels are available?

Thanks.
 

chandyperry

Senior Member
Jan 14, 2008
123
3
Achères

goroh_kun

Senior Member
Apr 24, 2010
85
162
Tokyo,Japan or HongKong
nand raw image dump with extra nand module

hi, all

I modified original msm_nand driver to access X10 nand non-public area.
kernel module binary and source code is here.

http://hotfile.com/dl/51628399/a786944/mtd_nand_ex.tgz.html

it is built for japanese version kernel, so if you want to use this.
maybe you should re-build driver module.

I uploaded mtd dump program for xperia with my mtd_nand_ex module.

It includes souce code, and static linked binary.
http://hotfile.com/dl/52240500/a1a6e72/mtd_raw_dump.zip.html

With normal mtd-utils(nand-dump), you can't rip complete nand image.
so I have to change mtd mode to RAW MODE.

the raw image includes OOB(Out Of Band) area, so we have to
calculate ECC(Error Correction Code) to get its executable image.
;)
 

ddewbofh

Senior Member
Jun 9, 2009
632
1
Göteborg
I uploaded mtd dump program for xperia with my mtd_nand_ex module.

It includes souce code, and static linked binary.
http://hotfile.com/dl/52240500/a1a6e72/mtd_raw_dump.zip.html

With normal mtd-utils(nand-dump), you can't rip complete nand image.
so I have to change mtd mode to RAW MODE.

the raw image includes OOB(Out Of Band) area, so we have to
calculate ECC(Error Correction Code) to get its executable image.
;)

Impressive work, that should help out. :)
 

MarylandCookie

Senior Member
May 13, 2010
1,318
351
Birmingham, UK
^The Sony PS3 also uses a similar method to boot Linux, in this case a custom kernel/initramfs is located into firmware. This kernel then boot the "real" Linux system using kexec.
 
Last edited:

sabianadmin

Senior Member
Jul 30, 2009
566
183
Straffan
ok cool, so then lets start talking about what needs be done to patch the boot loader because that will make it easier to flash on a per rom basis
 

rosco16

Senior Member
Mar 13, 2008
146
3
Great!!!

If you had flashed NAND ...is it correct to say that x10 is root 100% already ??


cheers
 

ddewbofh

Senior Member
Jun 9, 2009
632
1
Göteborg
Great!!!

If you had flashed NAND ...is it correct to say that x10 is root 100% already ??


cheers

Not necessarily. Just because you can write the software to nand that doesn't mean you have something ready to write. It's an important step on the way but it's not the final solution. We still need a bootloader that doesn't check the ramdisk and since we haven't heard anything about that yet I presume it's not ready.
 

zephyrix

Senior Member
Apr 18, 2010
256
2
NO
- we can dump and flash nand (tested tools)
- SE boot (kernel is signed like .sin files) and our boot is not signed so it will not boot

WE need kexec to load our kernel or patch bootloader not to check for signed kernel

@custom rom Cyanogen V6 alpha is compiled but we can not boot it

Dump the bootloader, patch it, then rewrite.
 

strix75

Senior Member
Aug 2, 2009
1,101
115
Gothenburg
i just don't understand all people that demands all devs to fix custom rom hack bootloader, don't you understand that they are doing all they can. if you are not happy what the devs are trying to do fix it yourself then and stop crying like a baby over the progress. this take time to do and there is no magic formula, just hard work.
so please just stop naging.
Sent from my X10i using XDA App