[DEV] S-OFF (wirte permission to NAND)

booyaga · 12:30 AM

[DEV] S-OFF (wirte permission to NAND)

i started, this in the dev section, to have a CLEAN THREAD, with ONLY RELEVANT info.

if mod gives me permission i will clean this thread several times each day (if someone posts nonsense)

FOR DEVS ONLY! theres alot of other threads about this for Q&A etc..

thanks to orb3000 for making it a stickie..

booyaga · 14th February 2012, 09:05 PM

reserved for later

booyaga · 09:13 PM

What we got so far:

Quote:

fastboot oem h
...
(bootloader) command list
(bootloader) get_identifier_token
(bootloader) keytest
(bootloader) heap
(bootloader) boot
(bootloader) reset
(bootloader) powerdown
(bootloader) rebootRUU
(bootloader) heap_test
(bootloader) gotohboot
(bootloader) rtask
(bootloader) task
(bootloader) enableqxdm
(bootloader) gencheckpt
(bootloadre) lock
(bootloader) list_partition_emmc
(bootloader) load_emmc
(bootloader) check_emmc
(bootloader) check_emmc_mid
(bootloader) read_mmc
(bootloader) get_wp_info_emmc
(bootloader) send_wp_info_emmc
(bootloader) get_ext_csd_emmc
(bootloader) get_sector_info_emmc
OKAY [ 0.031s]
finished. total time: 0.031s

fastboot oem writesecureflag 0
...
(bootloader) [ERR] Command error !!!
OKAY [ -0.000s]
finished. total time: -0.000s

Quote:

C:\Users\Turkish>fastboot oem rebootRUU
...
(bootloader) erase sector 163328 ~ 163839 (512)
OKAY [ 0.484s]
finished. total time: 0.484s

C:\Users\Turkish>fastboot oem h
...
(bootloader) command list
(bootloader) get_identifier_token
(bootloader) keytest
(bootloader) heap
(bootloader) boot
(bootloader) reset
(bootloader) powerdown
(bootloader) rebootRUU
(bootloader) heap_test
(bootloader) gotohboot
(bootloader) rtask
(bootloader) task
(bootloader) enableqxdm
(bootloader) gencheckpt
(bootloader) lock
(bootloader) list_partition_emmc
(bootloader) load_emmc
(bootloader) check_emmc
(bootloader) check_emmc_mid
(bootloader) read_mmc
(bootloader) get_wp_info_emmc
(bootloader) send_wp_info_emmc
(bootloader) get_ext_csd_emmc
(bootloader) get_sector_info_emmc
OKAY [ 0.031s]
finished. total time: 0.031s

C:\Users\Turkish>fastboot writesecureflag 0
usage: fastboot [ <option> ] <command>

commands:
update <filename> reflash device from update.zip
flashall flash boot + recovery + system
flash <partition> [ <filename> ] write a file to a flash partition
erase <partition> erase a flash partition
getvar <variable> display a bootloader variable
boot <kernel> [ <ramdisk> ] download and boot kernel
flash:raw boot <kernel> [ <ramdisk> ] create bootimage and flash it
devices list all connected devices
continue continue with autoboot
reboot reboot device normally
reboot-bootloader reboot device into bootloader
help show this help message

options:
-w erase userdata and cache
-s <serial number> specify device serial number
-p <product> specify product name
-c <cmdline> override kernel commandline
-i <vendor id> specify a custom USB vendor id
-b <base_addr> specify a custom kernel base address
-n <page size> specify the nand page size. default:
2048

C:\Users\Turkish>fastboot reboot
rebooting...

finished. total time: 0.312s

Quote:

We have tested to do these commands on the s-offed device of jammysunny.

cd/
cd SDK
cd platform-tools
adb devices
adb shell
su
dd if=/dev/block/mmcblk0p18 of=/sdcard/backup.img

This worked successfully and we got an hboot.img file of his Device on the SD.

On the next step i tried to install his s-off hboot.img to my s-on device with the following commands:

cd/
cd SDK
cd platform-tools
adb devices
adb shell
su
dd if=/sdcard/hboot.img of=/dev/block/mmcblk0p18

This worked successfully too, but my bootloader is the same as before. Its s-on

Quote:

hboot is useless from S-off device, as our bootloaders are unlocked.

What needs to be done is: get rid of Nand write protection, so we can flash radio's