Gingerbread and USSD QuD fix

Search This thread

TheManii

Wiki Admin / Inactive RC
Dec 8, 2010
3,585
1,651
I packaged it up into a flashable zip


Requirements:
  1. A custom recovery:
    • Streakmod
    • Clockwork Mod [Untested]
    • Team Win Recovery Project [Untested]
  2. A compatable rom (see below)

Compatable devices and roms:
  • Streak 5
    • 407 based roms
      • Stock/deodexed 407
      • DSC 0.74
    • MIUI
      • 2.2.1.7
      • 2.3.2
    • CM7
  • Venue
    • 408 based roms
      • Stock/deodexed 408 (untested)
      • SD4 250 (untested)

Install instructions:
  1. Download: update-USSDfix-2.zip
  2. Copy update zip to SD card
  3. Reboot into custom recovery mod
  4. Select "update from update.zip"
  5. Navigate to superuser.zip
  6. Flash
  7. Finished

Credit:
  • hunderteins for making the mod

(Original post)
TheManii said:

Could you make a new summary of how the patch works? I remember seeing the explaniation of it in the other thread, but it would be better if it was posted again here so we dont have to dig though it to find the techincal details.

I'm gonna package it up as a flashable zip if you dont mind, who should be listed in the credits? Anyone besides you?

Finally I'm gonna also release it for the venue, as it uses the same libril-qc-1.so (it's byte identical) and could benefit from the same fix
 
Last edited:

ramski

Senior Member
Feb 13, 2011
52
9
Viet nam
Confirm it works in CM7 "copy/paste in root explorer"

screenshot_1332348656395.png


regards from VN
ramski
 
Last edited:

hunderteins

Senior Member
Sep 7, 2009
192
349
Could you make a new summary of how the patch works? I remember seeing the explaniation of it in the other thread, but it would be better if it was posted again here so we dont have to dig though it to find the techincal details.

That was just analysing the bug: GB-roms on the 5treak send only the first 4
bytes of a USSD-code you put into the dialer. This fix is done directly in the
libril-qc-1.so of 407. Just replace the binary-files. There is only one byte
changed. The fixed length of 0x04 -> 0x20. Look into the original post.

I'm gonna package it up as a flashable zip if you dont mind, who should be listed in the credits? Anyone besides you?

Good idea. Thank you. Credits got to TheManii for his file-space and the
deodexed roms. They are very useful. Than there is the gnu-gcc collection
especially objdump and strace. And my mommy of course.
All the rom-cooks for making the 5treak useful. And qualcomm for beeing
such dickheads with qmi so I was forced to play needle in a haystack in arm
assembler.

Finally I'm gonna also release it for the venue, as it uses the same libril-qc-1.so (it's byte identical) and could benefit from the same fix

I keep my fingers crossed for you and the venue.

Reg,
hunderteins
 

TheManii

Wiki Admin / Inactive RC
Dec 8, 2010
3,585
1,651
Does anyone know if this would work on the MIUI 2.3.2 rom?

You can always make a nandroid and see if it works/breaks stuff, you could also check what the file hash is for the libril-qc-1.so included in it is.

The one it should be replacing is:
MD5: A93DBCBCB846286A8808344A7536F1FA
SHA-1: 7E4A9D57 9E717985 4445FB15 65D07763 2859515F

If your current one matches that it should replace it safely
 
  • Like
Reactions: (InsertNameHere)

(InsertNameHere)

Senior Member
Jan 11, 2010
997
319
You can always make a nandroid and see if it works/breaks stuff, you could also check what the file hash is for the libril-qc-1.so included in it is.

The one it should be replacing is:
MD5: A93DBCBCB846286A8808344A7536F1FA
SHA-1: 7E4A9D57 9E717985 4445FB15 65D07763 2859515F

If your current one matches that it should replace it safely

Brilliant, checksum is the same as checked with Root Explorer, so i am gonna have this patch, its been such a long wait to have USSD codes working!!!
 

Agent5150

Senior Member
Mar 6, 2008
389
23
I am getting the following error in streakmod recovery:

Error in /sdcard/update-USSDFix-1.zip
(Status 6)
Installation aborted.

Used root explorer to copy libril-qc-1.so.

USSD codes working on MIUI v2.3.2 !!
 
Last edited:

Top Liked Posts

  • There are no posts matching your filters.
  • 23
    TL;DR: It works for me. Try it. If it works, good for you.

    I patched libril-qc-1.so in a way, that it sends a fixed length of 32 bytes instead of 4. (position 0xa8fc2).

    Good luck,
    hunderteins
    7
    I packaged it up into a flashable zip


    Requirements:
    1. A custom recovery:
      • Streakmod
      • Clockwork Mod [Untested]
      • Team Win Recovery Project [Untested]
    2. A compatable rom (see below)

    Compatable devices and roms:
    • Streak 5
      • 407 based roms
        • Stock/deodexed 407
        • DSC 0.74
      • MIUI
        • 2.2.1.7
        • 2.3.2
      • CM7
    • Venue
      • 408 based roms
        • Stock/deodexed 408 (untested)
        • SD4 250 (untested)

    Install instructions:
    1. Download: update-USSDfix-2.zip
    2. Copy update zip to SD card
    3. Reboot into custom recovery mod
    4. Select "update from update.zip"
    5. Navigate to superuser.zip
    6. Flash
    7. Finished

    Credit:
    • hunderteins for making the mod

    (Original post)
    TheManii said:

    Could you make a new summary of how the patch works? I remember seeing the explaniation of it in the other thread, but it would be better if it was posted again here so we dont have to dig though it to find the techincal details.

    I'm gonna package it up as a flashable zip if you dont mind, who should be listed in the credits? Anyone besides you?

    Finally I'm gonna also release it for the venue, as it uses the same libril-qc-1.so (it's byte identical) and could benefit from the same fix
    3
    2
    I just used super user mode and I got this:


    D/QCRIL ( 95): [qcril_cm_ons.c 795] Lookup NITZ info
    D/QCRIL ( 95): [qcril_cm_ons.c 944] ONS info from MCCMNC

    that's what I feared. At the moment I've no idea to add providers to the UE memorylist without the source.

    How do I start the update action with the right paraneters?

    just type that line, that I wrote, into your superuser/root shell:

    Code:
    am broadcast -a android.provider.Telephony.SPN_STRINGS_UPDATED --ez showSpn true -e spn ECONET

    that will show ECONET into your statusbar. But only until the next boot/flight-mode
    2
    Could you make a new summary of how the patch works? I remember seeing the explaniation of it in the other thread, but it would be better if it was posted again here so we dont have to dig though it to find the techincal details.

    That was just analysing the bug: GB-roms on the 5treak send only the first 4
    bytes of a USSD-code you put into the dialer. This fix is done directly in the
    libril-qc-1.so of 407. Just replace the binary-files. There is only one byte
    changed. The fixed length of 0x04 -> 0x20. Look into the original post.

    I'm gonna package it up as a flashable zip if you dont mind, who should be listed in the credits? Anyone besides you?

    Good idea. Thank you. Credits got to TheManii for his file-space and the
    deodexed roms. They are very useful. Than there is the gnu-gcc collection
    especially objdump and strace. And my mommy of course.
    All the rom-cooks for making the 5treak useful. And qualcomm for beeing
    such dickheads with qmi so I was forced to play needle in a haystack in arm
    assembler.

    Finally I'm gonna also release it for the venue, as it uses the same libril-qc-1.so (it's byte identical) and could benefit from the same fix

    I keep my fingers crossed for you and the venue.

    Reg,
    hunderteins