• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

[DEV][Bootloader] u-boot / omap4boot for P920/P720/P940 and its variant

Search This thread

wkpark

Senior Member
Jan 2, 2012
255
1,357
Seoul
cross post from http://forum.xda-developers.com/showpost.php?p=33627806&postcount=43

I have only KU5400(the same hardware spec of SU540)
but I can port the omap4boot / u-boot for SU760/SU870 with others help.

LG Prada 3.0 is very similar with the P920/SU760 and P720/P725/SU870
So I cross post it in this dev section.

Now SU540/SU760/SU870 are unbrickable with this omap4boot + u-boot,
and with the new ported u-boot you can even change your kernel too!


thanks for the headsup. any of such is much appreciated (as many stuff for the prada is in korean, chinese, etc.) ;)

these are the opensource gpl components for the ku5400 (which essentially is the p940 for the eastern market). you can get the zips for the p940 here http://www.lg.com/global/support/opensource/opensource-detail.jsp?detailCustomerModelCode=LGP940

this includes the kernel sourcecode which allowed me to build e.g. the cifs. module.
unfortunately we are still st(r)uck with an encrypted bootloader. therefore it is not possible to boot any custom kernel atm.

Now it is possible :)

from http://forum.xda-developers.com/showpost.php?p=32885643&postcount=23

Currently Im working on "Unbrickable Optimus 3D"

LG accidently leaked the RSA keys of the P920/SU760 and the signing tool
in the GB source.
http://www.lg.com/global/support/opensource/opensource-detail.jsp?detailCustomerModelCode=LGSU760
(I guess the leaked RSA keys could be the reference keys of the TI signing tool)

so I can signing it's x-loader / u-boot etc.
the leaked RSA keys are used by Prada3.0(SU540 model), P920, SU760, SU870(Korean version of Optimus 3D Cube known as P720)

and the omap4boot port of the Prada3.0 working nicely with the new u-boot based on the SU760/SU870 u-boot source.
http://cafe.naver.com/androidhacker/406 (written in Korean)

Finally, the omap4boot port of SU760/SU870 + u-boot port of SU760/SU870 works nicely!!

http://cafe.naver.com/androidhacker/406 (written in Korean)

Instruction
Please see also
http://forum.xda-developers.com/showthread.php?t=1244490
(this method does not recover from broken bootloader at all)

1. Install OMAP4430 USB driver

If you plug your Phone on PC without battery, OMAP4430 device appeared for seconds and then disappeared.

2. start start_fastboot.bat using the omap4boot + u-boot (win32 port of omap4boot included)

1. Turn off your Phone, pull out battery.
2. start "start_fastboot.bat" (it will waiting until phone connected)
3. connect USB cable, the usbboot will start
4. insert battery while the usbboot is waiting
5. unplug USB cable the LG logo will appeard and the fastboot started.

If you have some time please test it with your phone.

Im not sure It is working for P940

just test it and report about it. it is almost there to unlock change your bootloader(lk bootloader) to the new u-boot bootloader
to circumvent locked booloader.

original post from http://cafe.naver.com/androidhacker/406 (in Korean)
you can get the latest omap4boot + signed u-boot from.

ChangeLog
●P940 signed u-boot added (11/12) muxtable dumped by milaq
●P920 signed u-boot added (11/12) muxtable dumped by iodak (v1.17a or v1.17b)
●P920: replace mux table with new one (11/28) dumped by kidkoala_uk (v1.18)
- script rewritten
- fixed p920-u-boot_fastboot.bin (v1.18a)

●P920/SU760: revert charging mode support to fix 0% battery (v1.21)
- SU870/SU540/P720 fixup to support charging mode and reboot/poweroff
 

Attachments

  • omap4boot-for_optimus-v1.16a.7z
    5.3 MB · Views: 13,130
  • omap4boot-for_optimus-v1.17a.7z
    5.3 MB · Views: 3,532
  • omap4boot-for_optimus-v1.17b.7z
    5.3 MB · Views: 4,355
  • omap4boot-for_optimus-v1.18.7z
    5.7 MB · Views: 3,068
  • omap4boot-for_optimus-v1.18a.7z
    5.7 MB · Views: 6,306
  • omap4boot-for_optimus-v1.21.7z
    5.7 MB · Views: 67,323
Last edited:

CptK

Member
Aug 30, 2009
37
9
p725 is pretty much the same as p720 so yea it should boot into recovery/fastboot. I'm presuming kernel is kernel.img from a dump or some sort.
 
  • Like
Reactions: wkpark

Dexter_nlb

Senior Member
Feb 12, 2009
5,459
4,549
Copenhagen
I can boot into fastboot, but not get u-boot binary to work and boot unsigned boot/recovery.

got P920 with SU760 ics port edition here
 
  • Like
Reactions: wkpark

xbsall

Senior Member
Feb 14, 2012
1,787
2,922
Home
Thank You

Nice to see you are still working with the omap4boot project wkpark. :good:
Believe me your tool has helped me in so many cases (apart from porting ICS) that it really is priceless.

Once again THANK YOU for your hard work on this and most of all because i am not afraid to brick my phone anymore.
It's your hard work that made me come back to the O3D party and try new stuff.
You are great.
 

defcomg

Senior Member
Dec 10, 2006
3,852
3,299
31
where is his recorgnized DEv/Contributer imo he Deserves it MOds?
 

wkpark

Senior Member
Jan 2, 2012
255
1,357
Seoul
Hi, great you are.
Btw, I wonder how can get signed file, example: p920-u-boot_fastboot-signed.bin while p920-u-boot_fastboot.bin maybe can get from LG opensources files.
And after extract files from KDZ, which file is uboot, x-loader, gpt.....

http://forum.xda-developers.com/attachment.php?attachmentid=1451220&d=1351868951

Please read the original post first.
LG leaked their RSA signing keys and the signing tool
Thats why it can be born

Sent from my LG-KU5400 using xda app-developers app
 
  • Like
Reactions: kuma82 and josvince

wkpark

Senior Member
Jan 2, 2012
255
1,357
Seoul
I can boot into fastboot, but not get u-boot binary to work and boot unsigned boot/recovery.

got P920 with SU760 ics port edition here

LG changed their RSA sign keys for the ICS firmware except the root RSA key.
so we have to re-sign its x-loader(1st bootloader) to work with this u-boot
for SU760/SU870 devices and I guess P920/P720 too.

attached file include resigned x-loader (LG no more use x-loader/u-boot, LG changed their bootloader to the LK bootloader) for SU760 ICS.

you can try this attached resigned x-loader with the new u-boot.
(or dump your x-loader/u-boot/boot.img and attach it for resigning)
 

Attachments

  • su760-ics-signed-fixed.zip
    5.3 MB · Views: 8,851

Dexter_nlb

Senior Member
Feb 12, 2009
5,459
4,549
Copenhagen
you can try this attached resigned x-loader with the new u-boot.
(or dump your x-loader/u-boot/boot.img and attach it for resigning)
thanks, i will send you the files after work, since i already extracted them at home, but i could not use them for much.
i will include a recovery.img if you can sign that, so we have a 100% solution for ClockWorkMod on p920.

and thanks again for work put into this on your side :)
 
  • Like
Reactions: josvince and wkpark

Dexter_nlb

Senior Member
Feb 12, 2009
5,459
4,549
Copenhagen
LG changed their RSA sign keys for the ICS firmware except the root RSA key.
so we have to re-sign its x-loader(1st bootloader) to work with this u-boot
for SU760/SU870 devices and I guess P920/P720 too.

attached file include resigned x-loader (LG no more use x-loader/u-boot, LG changed their bootloader to the LK bootloader) for SU760 ICS.

you can try this attached resigned x-loader with the new u-boot.
(or dump your x-loader/u-boot/boot.img and attach it for resigning)

confirmed working.
if i use your xloader,uboot and boot.img it starts normally.

would it mean its possible to make workaround so it can boot unsigned boot/recovery then?
 
  • Like
Reactions: josvince and wkpark

Dexter_nlb

Senior Member
Feb 12, 2009
5,459
4,549
Copenhagen
here is the recovery img i made for p920, i could only test its not working, using "adb reboot recovery" and it starts looping.
i seem not able to start from any key combo here? and regular shell "reboot recovery" did not trigger it either.

but anyways it bootloops when this image is used.
can you try and sign it and lets see how it works. ( i assume you are not uploading your compiled binaries+rsa used for signing, so we can experiment and make changes faster) (i did download lg release but do not see any rsa keys included)
 

Attachments

  • recovery.zip
    6.7 MB · Views: 660
  • Like
Reactions: wkpark

Thanh_GSM

Member
Mar 9, 2006
48
3
Hà Nội
LG changed their RSA sign keys for the ICS firmware except the root RSA key.
so we have to re-sign its x-loader(1st bootloader) to work with this u-boot
for SU760/SU870 devices and I guess P920/P720 too.

attached file include resigned x-loader (LG no more use x-loader/u-boot, LG changed their bootloader to the LK bootloader) for SU760 ICS.

you can try this attached resigned x-loader with the new u-boot.
(or dump your x-loader/u-boot/boot.img and attach it for resigning)

Anyone pls share me Flashtool for Su870, I use flashtool 1.1 when choose SU870.dll soft crash. Use omap tool phone has SW download mode but can't find tool to up Ap.bin to have stabel bootloader.

Thanks much.
 

wkpark

Senior Member
Jan 2, 2012
255
1,357
Seoul
...

(i did download lg release but do not see any rsa keys included)

RSA keys and the ift signing tools found at the old GB tarball of SU760

Iwill post or edit the exact site again~!

http://www.lg.com/global/support/opensource/opensource-detail.jsp?detailCustomerModelCode=LGSU760

download SU760(Optimus3D)_Android_GingerBread_SU760V20c.zip
extract it => Optimus3D_KR-SKT_Android.tar.gz =>
●OSLT/LGE_SU760_Gingerbread/SU760(Optimus3D)i_Android_Gingerbread/Optimus3D_KR-SKT_Android/bootable/bootloader/x-loader/ift : the ift tool + RSA keys
●reference : reference settings used by the ift tool

Sent from my LG-KU5400 using xda app-developers app
 
Last edited:

Dexter_nlb

Senior Member
Feb 12, 2009
5,459
4,549
Copenhagen
RSA keys and the ift signing tools found at the old GB tarball of SU760

Iwill post or edit the exact site again~!

http://www.lg.com/global/support/opensource/opensource-detail.jsp?detailCustomerModelCode=LGSU760

download SU760(Optimus3D)_Android_GingerBread_SU760V20c.zip
extract it => Optimus3D_KR-SKT_Android.tar.gz =>
●OSLT/LGE_SU760_Gingerbread/SU760(Optimus3D)i_Android_Gingerbread/Optimus3D_KR-SKT_Android/bootable/bootloader/x-loader/ift : the ift tool + RSA keys
●reference : reference settings used by the ift tool

Sent from my LG-KU5400 using xda app-developers app

thanks,
and i just downloaded "SU760(Optimus 3D)_Android_froyo_SKT" :( so thats why i failed finding anything.
i am on it, and hope to be able to continue testing here.

---------- Post added at 08:43 PM ---------- Previous post was at 07:54 PM ----------

you seem to have done some digging into the ift parameters to use for "boot.img"? right :)
do i really need to configure new files setting offsets and chosing specific sigs here?

only reference settings i see are those for MLO which is not boot.img based.

can you help with the command line parameters used here?
 

Top Liked Posts

  • There are no posts matching your filters.
  • 84
    cross post from http://forum.xda-developers.com/showpost.php?p=33627806&postcount=43

    I have only KU5400(the same hardware spec of SU540)
    but I can port the omap4boot / u-boot for SU760/SU870 with others help.

    LG Prada 3.0 is very similar with the P920/SU760 and P720/P725/SU870
    So I cross post it in this dev section.

    Now SU540/SU760/SU870 are unbrickable with this omap4boot + u-boot,
    and with the new ported u-boot you can even change your kernel too!


    thanks for the headsup. any of such is much appreciated (as many stuff for the prada is in korean, chinese, etc.) ;)

    these are the opensource gpl components for the ku5400 (which essentially is the p940 for the eastern market). you can get the zips for the p940 here http://www.lg.com/global/support/opensource/opensource-detail.jsp?detailCustomerModelCode=LGP940

    this includes the kernel sourcecode which allowed me to build e.g. the cifs. module.
    unfortunately we are still st(r)uck with an encrypted bootloader. therefore it is not possible to boot any custom kernel atm.

    Now it is possible :)

    from http://forum.xda-developers.com/showpost.php?p=32885643&postcount=23

    Currently Im working on "Unbrickable Optimus 3D"

    LG accidently leaked the RSA keys of the P920/SU760 and the signing tool
    in the GB source.
    http://www.lg.com/global/support/opensource/opensource-detail.jsp?detailCustomerModelCode=LGSU760
    (I guess the leaked RSA keys could be the reference keys of the TI signing tool)

    so I can signing it's x-loader / u-boot etc.
    the leaked RSA keys are used by Prada3.0(SU540 model), P920, SU760, SU870(Korean version of Optimus 3D Cube known as P720)

    and the omap4boot port of the Prada3.0 working nicely with the new u-boot based on the SU760/SU870 u-boot source.
    http://cafe.naver.com/androidhacker/406 (written in Korean)

    Finally, the omap4boot port of SU760/SU870 + u-boot port of SU760/SU870 works nicely!!

    http://cafe.naver.com/androidhacker/406 (written in Korean)

    Instruction
    Please see also
    http://forum.xda-developers.com/showthread.php?t=1244490
    (this method does not recover from broken bootloader at all)

    1. Install OMAP4430 USB driver

    If you plug your Phone on PC without battery, OMAP4430 device appeared for seconds and then disappeared.

    2. start start_fastboot.bat using the omap4boot + u-boot (win32 port of omap4boot included)

    1. Turn off your Phone, pull out battery.
    2. start "start_fastboot.bat" (it will waiting until phone connected)
    3. connect USB cable, the usbboot will start
    4. insert battery while the usbboot is waiting
    5. unplug USB cable the LG logo will appeard and the fastboot started.

    If you have some time please test it with your phone.

    Im not sure It is working for P940

    just test it and report about it. it is almost there to unlock change your bootloader(lk bootloader) to the new u-boot bootloader
    to circumvent locked booloader.

    original post from http://cafe.naver.com/androidhacker/406 (in Korean)
    you can get the latest omap4boot + signed u-boot from.

    ChangeLog
    ●P940 signed u-boot added (11/12) muxtable dumped by milaq
    ●P920 signed u-boot added (11/12) muxtable dumped by iodak (v1.17a or v1.17b)
    ●P920: replace mux table with new one (11/28) dumped by kidkoala_uk (v1.18)
    - script rewritten
    - fixed p920-u-boot_fastboot.bin (v1.18a)

    ●P920/SU760: revert charging mode support to fix 0% battery (v1.21)
    - SU870/SU540/P720 fixup to support charging mode and reboot/poweroff
    9
    I can boot into fastboot, but not get u-boot binary to work and boot unsigned boot/recovery.

    got P920 with SU760 ics port edition here

    LG changed their RSA sign keys for the ICS firmware except the root RSA key.
    so we have to re-sign its x-loader(1st bootloader) to work with this u-boot
    for SU760/SU870 devices and I guess P920/P720 too.

    attached file include resigned x-loader (LG no more use x-loader/u-boot, LG changed their bootloader to the LK bootloader) for SU760 ICS.

    you can try this attached resigned x-loader with the new u-boot.
    (or dump your x-loader/u-boot/boot.img and attach it for resigning)
    7
    Thank You

    Nice to see you are still working with the omap4boot project wkpark. :good:
    Believe me your tool has helped me in so many cases (apart from porting ICS) that it really is priceless.

    Once again THANK YOU for your hard work on this and most of all because i am not afraid to brick my phone anymore.
    It's your hard work that made me come back to the O3D party and try new stuff.
    You are great.
    5
    the x-loader for cosmopolitan is out based on the LG x-loader

    https://github.com/wkpark/x-loader-cosmo

    • FOTA feature disabled (lack of source code)
    • a signed or unsigned u-boot can be used.

    and now, the source code repo. of the u-boot for Optimus omap4430 series out
    it is based off of the LG u-boot source.

    https://github.com/wkpark/u-boot-omap4-optimus

    Latest Changes of src.
    • fixed battery charging mode on P920/SU760 and SU870
    • support u-boot style Multi-Image like as the old GB bootloader
    • support GB boot partition "kernel" (renamed as "boot" in the ICS)
    ----
    Edit: i got a p920 EMU device. It is signed with different RSA key but with the another Root RSA key included in the leaked ift signing tool ;)

    Compiled binary will be uploaded soon.
    5
    ...

    (i did download lg release but do not see any rsa keys included)

    RSA keys and the ift signing tools found at the old GB tarball of SU760

    Iwill post or edit the exact site again~!

    http://www.lg.com/global/support/opensource/opensource-detail.jsp?detailCustomerModelCode=LGSU760

    download SU760(Optimus3D)_Android_GingerBread_SU760V20c.zip
    extract it => Optimus3D_KR-SKT_Android.tar.gz =>
    ●OSLT/LGE_SU760_Gingerbread/SU760(Optimus3D)i_Android_Gingerbread/Optimus3D_KR-SKT_Android/bootable/bootloader/x-loader/ift : the ift tool + RSA keys
    ●reference : reference settings used by the ift tool

    Sent from my LG-KU5400 using xda app-developers app