T-Mobile McLaren 5G OTA: 10.0.19.HD61CB

[LLStarks]

We need captures of the OTA payload, URL, metadata, etc. Anything we can get. We also need to study how our partitions change and which have changed. We also need a sound method to accept OTA when rooted (Temp Magisk revert, accept OTA, reinstall Magisk to other slot, reboot?) or revert to stock (restore both sets of boot and dtbo slots?).

Only lead I have is from our NSG friends. Action happens in /data/ota_package. Not sure if anything ends up in /cache.

This OTA includes fixes for GPS, December security level, and "general bugs fixed". n41 5G does not appear to be included, but recent FCC filings suggest that it's at least being tested.

https://fccid.io/2ABZ2-EE143/Test-Report/I19Z62071-WMD01-Part27-NR-Rev0-4569370
https://fccid.io/2ABZ2-EE143/Letter/FCC-cover-letter-C2PC-letter-template-rev1-4569357

It would be a really good time to bring back a Telegram or Discord channel.

Edit: OTA package snagged! https://android.googleapis.com/pack.../aa21536ec572b3c15ab76c49160441f041cf6a27.zip
Credit to xian from the NSG Telegram

<Mod edit>

 

[kirschdog1]

Can I take this update if I was once rooted but have now flashed back to original boot.img? Obviously once updated I'll run the partition script to pull new partitions so I have virgin partitions on the new build.

 

[ntzrmtthihu777]

OTA Direct Link
Not sure if it will take for me because of my haxing about.

---------- Post added at 12:13 ---------- Previous post was at 12:06 ----------

OTA Direct Link
Not sure if it will take for me because of my haxing about.

Didn't take. Investigating.

---------- Post added at 13:05 ---------- Previous post was at 12:13 ----------

Bad vbmeta_a hash.

---------- Post added at 13:07 ---------- Previous post was at 13:05 ----------

Can I take this update if I was once rooted but have now flashed back to original boot.img? Obviously once updated I'll run the partition script to pull new partitions so I have virgin partitions on the new build.

apparently you need all stock partition. I need a good vbmeta_a apparently

 

[omariscal1019]

OTA Direct Link
Not sure if it will take for me because of my haxing about.

---------- Post added at 12:13 ---------- Previous post was at 12:06 ----------



Didn't take. Investigating.

---------- Post added at 13:05 ---------- Previous post was at 12:13 ----------

Bad vbmeta_a hash.

---------- Post added at 13:07 ---------- Previous post was at 13:05 ----------

apparently you need all stock partition. I need a good vbmeta_a apparently

U want mine from the read back so i can upload

 

[ntzrmtthihu777]

U want mine from the read back so i can upload

Vbmeta_a? Sure. At class so I can't do anything with it yet.

 

[Trevaryn]

Good news guys, Looks like we will be getting our MSM Tool in about a week

 

[LLStarks]

By creating our own ops or the kindness of OnePlus and leakers?

I'm not sure how that would change our situation with the new protections OnePlus is using on MSM tools. We'd have a good rescue method at the very least, but likely not a conversion method.

The only undisclosed exploit I know of is for the Sprint OnePlus 7 Pro 5G and that's purely for a bootloader and/or SIM unlock.

Edit: Saw your post in the other thread. I really hope the tech isn't full of crap like the others promising remote sessions that they never follow up on or provide the wrong files.

 

[omariscal1019]

Vbmeta_a? Sure. At class so I can't do anything with it yet.

In a bit ill upload

 

[Bildo41383]

So i shouldn't accept this update if rooted then?

 

[ntzrmtthihu777]

In a bit ill upload

Cool. Looks like both sides have to be how TMobile
expects them to be in order for the update to work.

 

[omariscal1019]

Cool. Looks like both sides have to be how TMobile
expects them to be in order for the update to work.

Yeah that **** happ n on the moto z2f back like two years ago couldnt update if u werent stock on both slots

 

[ntzrmtthihu777]

So i shouldn't accept this update if rooted then?

Think it won't work anyway. It checks hashes of the
other side before applying, and if they don't match
it can't apply the update (brotli diff format, not a
full update.zip style update which just replaces
everything).

 

[LLStarks]

But what's the end state of the slots after an update?

A on 16, B on 19? Is 13/14 gone?

 

[ntzrmtthihu777]

But what's the end state of the slots after an update?

A on 16, B on 19? Is 13/14 gone?

Yeah. My understanding is that 19 installs over 13. I'm
not one hindered percent sure though.

 

[LLStarks]

Partition hashes are going to be important. I think we still have our backups and whatever was documented in TEK's thread.

 

[ntzrmtthihu777]

Partition hashes are going to be important. I think we still have our backups and whatever was documented in TEK's thread.

Note that these hashes may be deep dm-verity
hashes not plain sha256 and so on.

 

[jimmyray1990]

i know i can't get the update to actually update it fails i have tried going back to stock from my backed-up images locked the bootloader seems i cant get it to update

 

[BallCity]

Yeah I'm having the same problem. All I did was root by flashing Magisk. I have since uninstalled the root/Magisk etc and I still get install problem at the very end of the OTA install . Thoughts?

 

[jhofseth]

I haven't updated to the new OTA yet, because I now have to restore from a backup so that it doesn't error again. I was curious how many partitions changed since January 2nd, 2020, and since rooting and using the phone for two weeks from the time of that 02 JAN backup the SHA-1 checksum of 43 different partitions have changed. I'll have to look at logs to where the error is from (i.e., because it happened even after I flashed back original unmodified boot_b), or I could just restore everything back.

 

[yenkoPR]

adb sideload says it flashed it but phone stays the same...