How To Guide [EU model] Unlock bootloader of European model

Search This thread
Yes. To make sure, run adb getprop ro.product.name and confirm it's RMX3301.
OK, I changed adb, has this output, but phone rebooting and productname doesn't changing.

1654808935158.png
 

manu81cba

Member
Nov 15, 2021
35
0
What the future with SafetyNe... Finish customs rooms? I can unlock the boatloader but then change android with safe and problem with all app bank and no accept root... What you say?

Other question... What app for back up use before unlock boatloader ?
 

Rapper_skull

Senior Member
Apr 21, 2011
337
186
Naples
Xiaomi Mi Mix 2S
Realme GT 2 Pro
What the future with SafetyNe... Finish customs rooms? I can unlock the boatloader but then change android with safe and problem with all app bank and no accept root... What you say?

Other question... What app for back up use before unlock boatloader ?
It's better if you ask these questions in a more relevant thread. For now there's no custom rom available for the GT2 Pro, and for SafetyNet you can use https://github.com/kdrag0n/safetynet-fix/
 
  • Like
Reactions: manu81cba

lutherkingmartin

Senior Member
Dec 13, 2007
225
58
thank you so much for this tool !!! It work for me.
If I submit deep testing application and then it is approuved, can I unlock with fastboot later (in next days) even after restarting the phone and go back to EEA productname ?
 
  • Like
Reactions: criszz

Rapper_skull

Senior Member
Apr 21, 2011
337
186
Naples
Xiaomi Mi Mix 2S
Realme GT 2 Pro
thank you so much for this tool !!! It work for me.
If I submit deep testing application and then it is approuved, can I unlock with fastboot later (in next days) even after restarting the phone and go back to EEA productname ?
Yes, the app should remember that you're approved. Even if it doesn't, you can just repeat the procedure.
 
  • Like
Reactions: lutherkingmartin

TommyQuid

Member
Sep 5, 2020
14
0
I assume this works if I you flash the European ROM on the Chinese model, right? How are the prospects of a custom ROM looking for this phone
 

admirdante

Senior Member
Oct 25, 2014
94
24
Can anyone say if by unlocking the bootloader (and rooting?) they got to fix the annoying bugs in the system? For example, how the notifications disappear on the lockscreen (but stay in general) once the device has been unlocked? Or the late notifications for almost every app. Stuff like that. Or
 

BLUuuE83

Senior Member
Dec 21, 2013
83
10
Realme GT 2 Pro
Does this mean that you could theoretically unlock any Realme phone just by changing the model name?

For example, the GT Neo3?
 
Last edited:

Rapper_skull

Senior Member
Apr 21, 2011
337
186
Naples
Xiaomi Mi Mix 2S
Realme GT 2 Pro
Can anyone say if by unlocking the bootloader (and rooting?) they got to fix the annoying bugs in the system? For example, how the notifications disappear on the lockscreen (but stay in general) once the device has been unlocked? Or the late notifications for almost every app. Stuff like that. Or
Unlocking the bootloader (and rooting) will not magically solve any bug. That is a problem with the software that only Realme can fix. However, when the kernel sources will be released, maybe someone will create a custom ROM that fixes the bugs and adds new functionalities.
 
  • Like
Reactions: shivrajsingh

admirdante

Senior Member
Oct 25, 2014
94
24
Unlocking the bootloader (and rooting) will not magically solve any bug. That is a problem with the software that only Realme can fix. However, when the kernel sources will be released, maybe someone will create a custom ROM that fixes the bugs and adds new functionalities.
Well I thought maybe there are some root specific fixes that could be applied, but I guess that's not the case. The software is the only thing keeping me from actually buying the phone (had one from amazon and sent it back).
 

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    OK. Nothing in life is for sure. True that. Now I'm seriously considering this phone. Shame theres's not much attention for development at the moment. Hope it improves.
    Yes, that's unfortunate. I would love to see a custom ROM for the phone.
    1
    Oh okay that makes sense.

    Maybe you can answer this cuz I can't find one anywhere but when trying to do the dd command I messed up and idk if it did something I should be worried about. I typed "adb shell su dd" then I accidentally hit enter so then I thought I could just type "exit" and hit enter to back out but that didn't work and honestly idk what it did. I searched and found that I should have done "ctrl + c" to back out and that's what I did. Everything seems fine but people call dd "disk destroyer" which doesn't sound too good lol.
    Don't worry you didn't destroy anything.
  • 8
    As you may know, at the time of writing it's not possible to unlock the bootloader of the European model. Fortunately there's a workaround. To know how it works, scroll to the end of the post.

    First of all, this is only for the European RMX3301, but you can try on any other global model that doesn't allow the unlocking of the bootloader. I'm not talking about temporary errors, but of the infamous This phone model does not support deep testing error message.

    Before starting I would like to thank polygraphene for their implementation of the Dirty Pipe vulnerability on Android. Without that, this would not have been possible.

    Requirements:

    • The phone with a decent charge. Do not attempt this procedure with the phone at 10% and then cry if something goes wrong
    • A compatible build, read below
    • A Windows or Linux PC with adb and fastboot drivers installed

    Check if your build is compatible:

    • Go to Settings -> About device -> Version and check Build number:
      • If your build is between RMX3301_11_A.14 and RMX3301_11_A.17, go to the procedure below
      • If your build is lower than RMX3301_11_A.14, or higher than RMX3301_11_A.17, install this OTA package to downgrade (or upgrade) to RMX3301_11_A.14

    Procedure:

    1. Make sure under Developer options you have OEM unlocking and USB debugging enabled
    2. Download and extract the attached gt2pro_eu_unlock_dirtypipe_v0.2.zip file
    3. Open a terminal in the folder of the extracted files
    4. Connect the phone to the PC and select the File transfer option
    5. Run the script:
      • On Windows, type run.bat and press enter
      • On Linux, type ./run.sh and press enter
    6. Now the phone is temporarily rooted and the phone model is changed to RMX3301. Do not reboot or you will lose this status.
    • At this point you can follow the procedure on the official forum to unlock the bootloader of the global model. If you already have the Deeptesting app installed, clear its data to make sure it will update.

    Changelog:

    v0.2:
    • Show more info about device for better debug
    • Show the model at the end to check if it worked

    For technical people: how does it work?

    The script abuses a vulnerability of the Linux kernel called Dirty Pipe (or CVE-2022-0847). For further details, you can visit the official website. This allows us to gain temporary root and overwrite the ro.product.name property, the only one checked by the Deeptesting app. The vulnerability is present in Android and it has been fixed, at least for the Pixel 6, in the may 2022 security update. At the time of writing, the latest build for the GT2 Pro is RMX3301_11_A.17, and it's still vulnerable. I have tested the procedure personally up to build RMX3301_11_A.16. If you're on a newer build and it doesn't work, please report it in the comments.

    If you have further questions about the procedure, please post them below.
    3
    I attached a new version of the script to the OP. This new versions shows more info do better debug problems, and waits 30 seconds before getting the model again to show if everything worked.
    2
    I wonder if we can use this temporary root to do some modifications on system.
    Theoretically you can do everything you can do on a rooted phone (Magisk, but without modules and Zygisk). In practice I never got Magisk to work properly, so I just limited myself to change the property. My goal was to unlock the bootloader, so I did it and installed Magisk.
    1
    When you try the procedure... delete al date of phone? whe finish---- type run.bat and press enter ---- erase all?
    My procedure will not delete any data, but after that you have to follow the official procedure to unlock the bootloader, and that will factory reset your phone.
    1
    What the future with SafetyNe... Finish customs rooms? I can unlock the boatloader but then change android with safe and problem with all app bank and no accept root... What you say?

    Other question... What app for back up use before unlock boatloader ?
    It's better if you ask these questions in a more relevant thread. For now there's no custom rom available for the GT2 Pro, and for SafetyNet you can use https://github.com/kdrag0n/safetynet-fix/