[ROM][vk810][altev][KK][4.4.2][UNOFFICIAL] Cyanogenmod 11 (CM11) [20140601] - G Pad 8.3 Android Development

[ROM][vk810][altev] Cyanogenmod 11 (CM11)
Code:
*** Disclamer
This is only for the vk810 Verizon LTE model (product name altev)
Introduction
I'm basically just curious and willing to learn, and fill in the gap when there is a gap (eg no one compiling a custom ROM/kernel for a device, and sources/device-tree/kernel are available, I'll try to do it)
I try to post steps/sources so that other people can learn/follow as well.
If someone wants to take over compiling this ROM, go ahead.
If I don't update the build for a long time, PM me to remind me.
Click to expand...
Click to collapse
Installation instructions
Need latest custom recovery (TWRP, ...?). You can use towelroot or this offline root or Kingo online-root (nor preferred) to root from stock ROM
Do nandroid backup in recovery
Wipe dalvik/cache/system
This ROM is only for vk810 verizon LTE-version only.
Flash this CM11 4.4.2 ROM. boot.img will be LOKI-patched during flash.
(optional) Flash gapps-4.4 (find it yourself), flash SuperSU (find it yourself)
reboot to ROM
Click to expand...
Click to collapse
Download
Current ROMs:
[20140601] pure CM11: http://d-h.st/XcF
Changes: Fixed sensors (rotation, gyroscope, magnetic, light, acceleration,...)
Older ROMs:
[20140522] pure CM11: http://d-h.st/FDP
Click to expand...
Click to collapse
Bugs?
What doesn't work?
- Anything that's broken on the wifi-version of CM11 is broken here too
--- (Knock on works, knock off doesn't)
--- IR sensor broken
- Broken on vk810:
--- LTE/mobile data
--- GPS
--- Sensors: Gyroscope for autorotate, compass, light sensor, ... Fixed in 20140601 build
--- date/time isn't updated properly on first boot, but updates across subsequent reboots/shutdowns
- You tell me
Click to expand...
Click to collapse
Thanks To/Credits
Code:
cyanogenmod dev team for source/kernel build-up
omni team for omni source
drgravy for TWRP
anyone else who contributed to the development of v500/v510/vk810
Sources:
https://github.com/ngvincent/vendor_lge.git (branch=kk4.4), forked from cmbroms
https://github.com/ngvincent/android_kernel_lge_vk810.git (branch=cm-11.0), default CM11.0 kernel with some vk810-specific changes
https://github.com/ngvincent/android_device_lge_v500.git (branch=cm-11.0, default CM11.0 devicetree with common config pulled out
https://github.com/ngvincent/android_device_lge_vk810.git (branch=cm-11.0, default CM11.0 devicetree with some vk810-specific changes
Click to expand...
Click to collapse

Reserved

Reserved 2

So glad to see someone made a Rom for this thing. I'm probably not going to flash it because of thy multiple issues but it's nice to see development finally. Thank you
Sent from my VK810 4G using Tapatalk

Yes thank you
Sent from my VK810 4G using XDA Premium 4 mobile app

So, I rooted, got TWRP installed and everything and finally got to flash the rom. When I flash it, this rom gives me an error E: Error executing updater binary in zip ' /sdcard/Download/.....
Does this mean the file I downloaded was messed up or what?

Pokestory1 said:
So, I rooted, got TWRP installed and everything and finally got to flash the rom. When I flash it, this rom gives me an error E: Error executing updater binary in zip ' /sdcard/Download/.....
Does this mean the file I downloaded was messed up or what?
Click to expand...
Click to collapse
Oh, you need the latest twrp http://forum.xda-developers.com/showpost.php?p=52689335&postcount=60

Many thanks for getting the ball rolling on these, im sure many gotta have this device, as Verizon was practically throwing them at people.
Sent from my VK810 4G using XDA Premium HD app

Random issues
So, I installed the rom and it's so much better.
2 problems
1. When turning the device on, it sets the date to 1970....
2. Auto-Rotation doesn't want to work.

Thank you so much for this, PaperWastage!

Fantastic! So good to finally see some development for this guy. And how ironic, I just came to xda to see if there's another 8 incher with good development to consider selling the G Pad
Sent from my VK810 4G using Tapatalk

Great
Good to see LG Pad 8.3 getting some ROM love. Thanks for getting it rolling and i'm flashing it now.

Error
E:Error executing updater binary in zip '/external_sd/cm-11-20140522-UNOFFICIAL-vk810.zip'
Error flashing zip '/external_sd/cm-11-20140522-UNOFFICIAL-vk810.zip'
Updating partition details...
Installing '/external_sd/cm-11-20140522-UNOFFICIAL-vk810.zip'...
Checking for MD5 file...
Skipping MD5 check: no MD5 file found.
This package is for "vk810" devices; this is a "altev".
What did I do wrong?

drifter3179 said:
E:Error executing updater binary in zip '/external_sd/cm-11-20140522-UNOFFICIAL-vk810.zip'
Error flashing zip '/external_sd/cm-11-20140522-UNOFFICIAL-vk810.zip'
Updating partition details...
Installing '/external_sd/cm-11-20140522-UNOFFICIAL-vk810.zip'...
Checking for MD5 file...
Skipping MD5 check: no MD5 file found.
This package is for "vk810" devices; this is a "altev".
What did I do wrong?
Click to expand...
Click to collapse
You need the latest "fixed" twrp. I posted the link a few posts up

It's data working yet
Sent from my VK810 4G using XDA Premium 4 mobile app

scotthall1515 said:
It's data working yet
Sent from my VK810 4G using XDA Premium 4 mobile app
Click to expand...
Click to collapse
WiFi working but not 4G, no auto rotate, bluetooth working, Date and time was still correct when flashing Rom The second time but not the first. Otherwise the ui is good clean so far no bugs pretty smooth
---------- Post added at 11:23 AM ---------- Previous post was at 11:17 AM ----------
I wish I knew how to compile code to help out with the issues for this rom...
---------- Post added at 11:44 AM ---------- Previous post was at 11:23 AM ----------
So interestingly enough my verizon messages still send and i recieve them as well
---------- Post added at 11:54 AM ---------- Previous post was at 11:44 AM ----------
Thank you paper wastage and every one else that is helping further this rom

Does anyone know how to use text messages on this tablet and I use this on the go so 4g is important to me . I love that this verizon tablet is finally getting some love
Sent from my VK810 4G using XDA Premium 4 mobile app

drifter3179 said:
[/COLOR]So interestingly enough my verizon messages still send and i recieve them as well
Click to expand...
Click to collapse
does verizon messages work on other devices with just wifi (no mobile data)?
what happens when you eject the sim card?

paperWastage said:
Oh, you need the latest twrp http://forum.xda-developers.com/showpost.php?p=52689335&postcount=60
Click to expand...
Click to collapse
I just moved it to the OP of the TWRP thread

stock vk810 ROM, logcat w/ "sensor" grep
Code:
I/QCameraHAL( 339): Camera sensor 0 info:
I/QCameraHAL( 339): sensor_mount_angle: 90
I/QCameraHAL( 339): Camera sensor 1 info:
I/QCameraHAL( 339): sensor_mount_angle: 270
E/Sensors ( 640): sns_fsa_la.c(271):fflush failed, 9
E/Sensors ( 640): sns_fsa_la.c(271):fflush failed, 9
W/Sensors ( 640): sns_smr_la.c(452):smr_la: smr_apps_la_thread_main is starting, fd=15, sns_smr.en_rx_msg_ptr=40111300
D/LocSvc_utils_cfg( 599): D/loc_set_config_entry: PARAM SENSOR_USAGE = 1
D/LocSvc_utils_cfg( 599): D/loc_set_config_entry: PARAM SENSOR_PROVIDER = 1
E/gsiff_dmn( 599): I/main: Sensor usage disabled!
W/Sensors ( 640): sns_sam_app.c(6350):sns_sam_reg_algo: Registering algo service 16, err 0
E/Sensors ( 640): sns_debug_main.c(569):Debug Config File missing in EFS!
D/SensorService( 762): nuSensorService starting...
D/qcom_sensors_hal( 762): _hal_sensors_open: name=poll
E/qcom_sensors_hal( 762): hal_load_oem_lib: ERROR: Could not open OEM HAL library
E/qcom_sensors_hal( 762): hal_init: No native sensors linux driver found in /system/lib/hw/sensors.oem.so
I/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list
I/qcom_sensors_hal( 762): Sensor1 open: 0 41
D/qcom_sensors_hal( 762): hal_wait_for_response: timeout=10000
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: T 1
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: Sn 0, I 5
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: msg_type 1 for svc id 0 txn id 0
D/qcom_sensors_hal( 762): hal_process_smgr_resp: 5
D/qcom_sensors_hal( 762): hal_process_all_sensor_info_resp: 4
D/qcom_sensors_hal( 762): hal_single_sensor_info_request: 0
D/qcom_sensors_hal( 762): hal_single_sensor_info_request: Requesting single sensor info: 0
D/qcom_sensors_hal( 762): hal_single_sensor_info_request: 10
D/qcom_sensors_hal( 762): hal_single_sensor_info_request: Requesting single sensor info: 10
D/qcom_sensors_hal( 762): hal_single_sensor_info_request: 20
D/qcom_sensors_hal( 762): hal_single_sensor_info_request: Requesting single sensor info: 20
D/qcom_sensors_hal( 762): hal_single_sensor_info_request: 40
D/qcom_sensors_hal( 762): hal_single_sensor_info_request: Requesting single sensor info: 40
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: T 1
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: Sn 0, I 6
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: msg_type 1 for svc id 0 txn id 0
D/qcom_sensors_hal( 762): hal_process_smgr_resp: 6
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: 1
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: txn: 0, ns: 4, nss: 0
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: Accel, DTy: 0
I/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: name: LGE Accelerometer Sensor, vendor: InvenSense, maxRange: 2570754, res: 78, power: 450, max_freq: 200
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: name: LGE Accelerometer Sensor, vendor: InvenSense, maxRange: 39.226593, res: 0.001190, power: 0.450000, max_freq: 100.000000
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: txn: 0, ns: 4, nss: 1, ss_resp: 1
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: T 1
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: Sn 0, I 6
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: msg_type 1 for svc id 0 txn id 1
D/qcom_sensors_hal( 762): hal_process_smgr_resp: 6
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: 2
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: txn: 1, ns: 4, nss: 1
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: GYRO DTy: 0
I/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: name: LGE Gyroscope Sensor, vendor: InvenSense, maxRange: 285955, res: 70, power: 3200, max_freq: 200
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: name: LGE Gyroscope Sensor, vendor: InvenSense, maxRange: 4.363327, res: 0.001068, power: 3.200000, max_freq: 100.000000
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: txn: 1, ns: 4, nss: 2
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: GYRO DTy: 1
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: txn: 1, ns: 4, nss: 2, ss_resp: 2
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: T 1
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: Sn 0, I 6
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: msg_type 1 for svc id 0 txn id 2
D/qcom_sensors_hal( 762): hal_process_smgr_resp: 6
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: 1
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: txn: 2, ns: 4, nss: 2
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: MAG DTy: 0
I/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: name: LGE Magnetometer Sensor, vendor: AKM, maxRange: 3219128, res: 98, power: 5000, max_freq: 50
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: name: LGE Magnetometer Sensor, vendor: AKM, maxRange: 4911.999512, res: 0.149536, power: 5.000000, max_freq: 50.000000
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: txn: 2, ns: 4, nss: 3, ss_resp: 3
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: T 1
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: Sn 0, I 6
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: msg_type 1 for svc id 0 txn id 3
D/qcom_sensors_hal( 762): hal_process_smgr_resp: 6
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: 1
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: txn: 3, ns: 4, nss: 3
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: ALS DTy: 1
I/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: name: LGE Light Sensor, vendor: Avago, maxRange: 655360000, res: 655, power: 175, max_freq: 20
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: name: LGE Light Sensor, vendor: Avago, maxRange: 10000.000000, res: 0.009995, power: 0.175000, max_freq: 20.000000
D/qcom_sensors_hal( 762): hal_process_single_sensor_info_resp: txn: 3, ns: 4, nss: 4, ss_resp: 4
I/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: Received Response
W/qcom_sensors_hal( 762): hal_sam_add_sensors: SCRN ORTN add sensors called!
D/qcom_sensors_hal( 762): hal_add_oem_sensors
D/qcom_sensors_hal( 762): hal_sam_add_sensor_fusion_sensors: Adding Orientation
D/qcom_sensors_hal( 762): hal_sam_add_gestures_sensors: gestures enabled
E/qcom_sensors_hal( 762): hal_sam_add_qmd_sensors: QMD disabled!
D/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: minDelay: 10000, max_freq: 100.000000
D/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: minDelay: 20000, max_freq: 50.000000
D/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: minDelay: 10000, max_freq: 100.000000
D/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: minDelay: 50000, max_freq: 20.000000
D/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: minDelay: 10000, max_freq: 100.000000
D/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: minDelay: 10000, max_freq: 100.000000
D/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: minDelay: 10000, max_freq: 100.000000
D/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: minDelay: 10000, max_freq: 100.000000
D/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: minDelay: 10000, max_freq: 100.000000
D/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: minDelay: 10000, max_freq: 100.000000
I/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: Number of sensors: 10:
W/qcom_sensors_hal( 762): _hal_sensors_activate: handle=0, enabled=0
I/qcom_sensors_hal( 762): Sensor1 open: 0 40
D/qcom_sensors_hal( 762): hal_wait_for_response: timeout=1000
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: T 1
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: Sn 24, I 2
D/qcom_sensors_hal( 762): hal_sensor1_data_cb: msg_type 1 for svc id 24 txn id 1
E/qcom_sensors_hal( 762): hal_process_time_resp: Resetting rollover count from 0 to 0
D/qcom_sensors_hal( 762): hal_process_time_resp: Apps: 1400992173082747003; DSPS: 507794; Offset: 1400992157586103937
I/qcom_sensors_hal( 762): Sensor1 open: 0 41
D/qcom_sensors_hal( 762): _hal_sensors_activate: No change required: Ac: 0, New: 0
W/qcom_sensors_hal( 762): _hal_sensors_activate: handle=1, enabled=0
D/qcom_sensors_hal( 762): _hal_sensors_activate: No change required: Ac: 0, New: 0
W/qcom_sensors_hal( 762): _hal_sensors_activate: handle=2, enabled=0
D/qcom_sensors_hal( 762): _hal_sensors_activate: No change required: Ac: 0, New: 0
W/qcom_sensors_hal( 762): _hal_sensors_activate: handle=5, enabled=0
D/qcom_sensors_hal( 762): _hal_sensors_activate: No change required: Ac: 0, New: 0
W/qcom_sensors_hal( 762): _hal_sensors_activate: handle=6, enabled=0
D/qcom_sensors_hal( 762): _hal_sensors_activate: No change required: Ac: 0, New: 0
W/qcom_sensors_hal( 762): _hal_sensors_activate: handle=8, enabled=0
D/qcom_sensors_hal( 762): _hal_sensors_activate: No change required: Ac: 0, New: 0
W/qcom_sensors_hal( 762): _hal_sensors_activate: handle=9, enabled=0
D/qcom_sensors_hal( 762): _hal_sensors_activate: No change required: Ac: 0, New: 0
W/qcom_sensors_hal( 762): _hal_sensors_activate: handle=16, enabled=0
D/qcom_sensors_hal( 762): _hal_sensors_activate: No change required: Ac: 0, New: 0
W/qcom_sensors_hal( 762): _hal_sensors_activate: handle=20, enabled=0
D/qcom_sensors_hal( 762): _hal_sensors_activate: No change required: Ac: 0, New: 0
W/qcom_sensors_hal( 762): _hal_sensors_activate: handle=22, enabled=0
D/qcom_sensors_hal( 762): _hal_sensors_activate: No change required: Ac: 0, New: 0
I/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list
I/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: Already have the list of sensors
I/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: Number of sensors: 10:
I/SensorService( 762): LGE Accelerometer Sensor
I/SensorService( 762): LGE Magnetometer Sensor
I/SensorService( 762): LGE Orientation Sensor
I/SensorService( 762): LGE Light Sensor
I/SensorService( 762): LGE Gyroscope Sensor
I/SensorService( 762): LGE Gravity Sensor
I/SensorService( 762): LGE Linear Acceleration Sensor
I/SensorService( 762): LGE Rotation Vector Sensor
I/SensorService( 762): LGE Tilt Gesture Sensor
I/SensorService( 762): LGE Motion Accelerometer Sensor
I/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list
I/qcom_sensors_hal( 762): Sensor1 open: 0 40
I/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: Already have the list of sensors
I/qcom_sensors_hal( 762): _hal_sensors_get_sensors_list: Number of sensors: 10:
I/ServiceManager( 326): add_service('sensorservice',0xb,!allow_isolated) uid=1000
D/SensorService( 762): nuSensorService thread starting...
D/qcom_sensors_hal( 762): _hal_sensors_data_poll: cnt: 16
D/qcom_sensors_hal( 762): hal_wait_for_response: timeout=0
I/ServiceManager( 326): check_service('sensorservice') ptr = 0xb
V/WindowManager( 762): Screen status=true, current orientation=-1, SensorEnabled=false
W/SensorManager( 762): LGE Motion Accelerometer Sensor registered by [email protected]257e780
W/qcom_sensors_hal( 762): _hal_sensors_activate: handle=22, enabled=1
W/qcom_sensors_hal( 762): _hal_sensors_activate: active_sensors mask=0x400000 handle=22
W/qcom_sensors_hal( 762): _hal_sensors_set_delay: ns=200000000 ms: 200 Hndl: 136 handle: 22
W/qcom_sensors_hal( 762): _hal_sensors_set_delay: ns=66667000 ms: 66 Hndl: 136 handle: 22
V/WindowManager( 762): Screen status=true, current orientation=-1, SensorEnabled=true
D/LocSvc_utils_cfg( 762): D/loc_set_config_entry: PARAM SENSOR_USAGE = 1
V/WindowManager( 762): Screen status=true, current orientation=5, SensorEnabled=true
D/KeyguardViewManager( 762): [LGE_UICC_SECURITY] VZW Rotation sensor for lock screen On!
V/WindowManager( 762): Screen status=true, current orientation=2, SensorEnabled=true
D/KeyguardViewManager( 762): [LGE_UICC_SECURITY] VZW Rotation sensor for lock screen On!
I/ServiceManager( 326): check_service('sensorservice') ptr = 0xb
I/ServiceManager( 326): check_service('sensorservice') ptr = 0xb
E/ThermalEngine( 2084): sensors_manager_init: Init
E/ThermalEngine( 2084): ADC sensor found for pa_therm0
E/ThermalEngine( 2084): adc_sensors_setup: Error opening /sys/devices/platform/msm_ssbi.0/pm8921-core/pm8xxx-adc/pa_therm1
E/ThermalEngine( 2084): QMI TS sensor found for pa_therm1
I/ThermalDaemon( 2083): Sensor setup:[pa_therm0]
I/ThermalDaemon( 2083): ADC sensor found for pa_therm0
I/ThermalDaemon( 2083): Sensor setup:[tsens_tz_sensor0]
I/ThermalDaemon( 2083): Sensor setup:[tsens_tz_sensor1]
I/ThermalDaemon( 2083): Sensor setup:[tsens_tz_sensor2]
E/ThermalEngine( 2084): sensors_setup: tm_cnt 14
E/ThermalEngine( 2084): sensors_setup: TM Id CPU3_MONITOR Sensor cpu3 num_thresholds 1
E/ThermalEngine( 2084): sensors_setup: TM Id CPU2_MONITOR Sensor cpu2 num_thresholds 1
E/ThermalEngine( 2084): sensors_setup: TM Id CPU1_MONITOR Sensor cpu1 num_thresholds 1
E/ThermalEngine( 2084): sensors_setup: TM Id CPU0_MONITOR Sensor cpu0 num_thresholds 5
E/ThermalEngine( 2084): sensors_setup: TM Id PM8821-MONITOR Sensor pm8821_tz num_thresholds 2
E/ThermalEngine( 2084): sensors_setup: TM Id HYBRID-POPMEM-POLLING Sensor pop_mem num_thresholds 1
E/ThermalEngine( 2084): sensors_setup: TM Id HYBRID-CPU3-POLLING Sensor cpu3 num_thresholds 1
E/ThermalEngine( 2084): sensors_setup: TM Id HYBRID-CPU2-POLLING Sensor cpu2 num_thresholds 1
E/ThermalEngine( 2084): sensors_setup: TM Id HYBRID-CPU1-POLLING Sensor cpu1 num_thresholds 1
E/ThermalEngine( 2084): sensors_setup: TM Id HYBRID-CPU0-POLLING Sensor cpu0 num_thresholds 1
E/ThermalEngine( 2084): sensors_setup: TM Id HYBRID-THRESH Sensor tsens_tz_sensor0 num_thresholds 1
E/ThermalEngine( 2084): sensors_setup: TM Id HOTPLUG-CPU3 Sensor cpu3 num_thresholds 1
E/ThermalEngine( 2084): sensors_setup: TM Id HOTPLUG-CPU2 Sensor cpu2 num_thresholds 1
E/ThermalEngine( 2084): sensors_setup: TM Id HOTPLUG-CPU1 Sensor cpu1 num_thresholds 1
I/ThermalDaemon( 2083): Sensor setup:[tsens_tz_sensor3]
I/ThermalDaemon( 2083): Sensor setup:[tsens_tz_sensor4]
E/ThermalEngine( 2084): enable_threshold: tsens_tz_sensor0 (/sys/devices/virtual/thermal/thermal_zone0/trip_point_1_type)
E/ThermalEngine( 2084): enable_threshold: tsens_tz_sensor0 (/sys/devices/virtual/thermal/thermal_zone0/trip_point_2_type)
I/ThermalDaemon( 2083): Sensor setup:[tsens_tz_sensor5]
E/ThermalEngine( 2084): enable_threshold: tsens_tz_sensor0 (/sys/devices/virtual/thermal/thermal_zone0/trip_point_1_type)
E/ThermalEngine( 2084): enable_threshold: tsens_tz_sensor0 (/sys/devices/virtual/thermal/thermal_zone0/trip_point_2_type)
E/ThermalEngine( 2084): enable_threshold: tsens_tz_sensor0 (/sys/devices/virtual/thermal/thermal_zone0/trip_point_1_type)
E/ThermalEngine( 2084): enable_threshold: tsens_tz_sensor0 (/sys/devices/virtual/thermal/thermal_zone0/trip_point_2_type)
I/ThermalDaemon( 2083): Sensor setup:[tsens_tz_sensor6]
I/ThermalDaemon( 2083): Sensor setup:[tsens_tz_sensor7]
I/ThermalDaemon( 2083): Sensor setup:[tsens_tz_sensor8]
I/ThermalDaemon( 2083): Sensor setup:[tsens_tz_sensor9]
I/ThermalDaemon( 2083): Sensor setup:[tsens_tz_sensor10]
I/ThermalDaemon( 2083): Sensor setup:[pm8821_tz]
I/ThermalDaemon( 2083): Sensor setup:[batt_therm]
I/ThermalDaemon( 2083): ADC sensor found for batt_therm
E/ThermalEngine( 2084): enable_threshold: tsens_tz_sensor0 (/sys/devices/virtual/thermal/thermal_zone0/trip_point_1_type)
E/ThermalEngine( 2084): enable_threshold: tsens_tz_sensor0 (/sys/devices/virtual/thermal/thermal_zone0/trip_point_2_type)
I/ThermalDaemon( 2083): Modem thermal sensor service available.
E/ThermalEngine( 2084): Modem thermal sensor service available.
E/ThermalEngine( 2084): qmi_ts_update_temperature: unknown sensor xo
I/ThermalDaemon( 2083): Sensor 'tsens_tz_sensor0' - alarm raised 1 at 52.0 degC
initial CM-11.0 build using v500 proprietary libs, logcat w/ "sensor" grep
looks like sensor hal couldn't even init the sensors
Code:
E/Sensors ( 245): sns_fsa_la.c(271):fflush failed, 9
E/Sensors ( 245): sns_fsa_la.c(271):fflush failed, 9
W/Sensors ( 245): sns_smr_la.c(452):smr_la: smr_apps_la_thread_main is starting, fd=15, sns_smr.en_rx_msg_ptr=b6f2c2fc
E/Sensors ( 245): sns_fsa_la.c(66):realpath failed 2
E/Sensors ( 245): sns_reg.c(1137):Error creating registry file
W/Sensors ( 245): sns_reg.c(1228):init: file init failed, 5
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
I/QCameraHAL( 234): Camera sensor 0 info:
I/QCameraHAL( 234): sensor_mount_angle: 90
I/QCameraHAL( 234): Camera sensor 1 info:
I/QCameraHAL( 234): sensor_mount_angle: 270
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
W/Sensors ( 245): sns_sam_app.c(6350):sns_sam_reg_algo: Registering algo service 16, err 0
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_fsa_la.c(66):realpath failed 2
E/Sensors ( 245): sns_debug_main.c(1068):Sensors DIAG Init: can't init debug file
E/Sensors ( 245): sns_debug_main.c(569):Debug Config File missing in EFS!
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
D/SensorService( 640): nuSensorService starting...
E/Sensors ( 245): sns_reg.c(387):reg write: reg file not open
E/sensor_reg( 640): sensor_reg_process_resp: Error in RESP result: 1
E/sensor_reg( 640): sensor_reg_write: error in message
E/qcom_sensors_hal( 640): hal_init: Error in sensor_reg_write(): -3
I/SensorService( 640): Orientation
I/SensorService( 640): Uncalibrated
I/SensorService( 640): Uncalibrated
I/SensorService( 640): Gravity
I/SensorService( 640): Linear Acceleration
I/SensorService( 640): Rotation Vector
I/SensorService( 640): Game Rotation Vector
D/SensorService( 640): Max socket buffer size 1048576
D/SensorService( 640): nuSensorService thread starting...
E/Sensors ( 245): sns_reg.c(301):reg_read: reg file not open
E/qcom_sensors_hal( 640): hal_process_reg_resp: Received 'Failed' in response result
E/qcom_sensors_hal( 640): hal_process_report_resp: Result: 1, Error: 5
E/qcom_sensors_hal( 640): hal_process_report_resp: 0 Error: 4 Reason: 16
E/qcom_sensors_hal( 640): hal_acquire_resources, hal_smgr_report_add() failed, handle=0
D/LocSvc_utils_cfg( 640): D/loc_set_config_entry: PARAM SENSOR_CONTROL_MODE = 0
D/LocSvc_utils_cfg( 640): D/loc_set_config_entry: PARAM SENSOR_USAGE = 1
I/ThermalDaemon( 239): Sensor setup:[pa_therm0]
I/ThermalDaemon( 239): ADC sensor found for pa_therm0
I/ThermalDaemon( 239): Sensor setup:[tsens_tz_sensor0]
I/ThermalDaemon( 239): Sensor setup:[tsens_tz_sensor1]
I/ThermalDaemon( 239): Sensor setup:[tsens_tz_sensor2]
I/ThermalDaemon( 239): Sensor setup:[tsens_tz_sensor3]
I/ThermalDaemon( 239): Sensor setup:[tsens_tz_sensor4]
I/ThermalDaemon( 239): Sensor setup:[tsens_tz_sensor5]
I/ThermalDaemon( 239): Sensor setup:[tsens_tz_sensor6]
I/ThermalDaemon( 239): Sensor setup:[tsens_tz_sensor7]
I/ThermalDaemon( 239): Sensor setup:[tsens_tz_sensor8]
I/ThermalDaemon( 239): Sensor setup:[tsens_tz_sensor9]
I/ThermalDaemon( 239): Sensor setup:[tsens_tz_sensor10]
I/ThermalDaemon( 239): Sensor setup:[pm8821_tz]
I/ThermalDaemon( 239): Sensor setup:[batt_therm]
I/ThermalDaemon( 239): ADC sensor found for batt_therm
I/ThermalDaemon( 239): Sensor 'tsens_tz_sensor0' - alarm raised 1 at 57.0 degC
I/ThermalDaemon( 239): Sensor 'pa_therm0' - alarm raised 1 at 44.0 degC
I/ThermalDaemon( 239): Sensor 'pa_therm0' - alarm cleared 1 at 39.0 degC

Related

[logcat]Constant rebooting -- Hardware failure?

So out of nowhere today my DNA just starts rebooting constantly over and over and over when booting roms. It's getting faster and faster with reboots, wont even get 3 seconds into the boot animation. I've flashed 3 different known working roms that I've flashed in the past that were on my SDCard. I can get into bootloader and recovery, can factory reset/wipe fine.
I managed to get a logcat, but the thing I don't get is why it's rebooting the same way on different roms with different kernels.
Here's the best logcat I was able to retrieve. Any help would be great.
From what I am able to see it looks like it's rebooting on temp errors. This makes me wonder if it's a kernel issue or if it's a hardware issue.
Code:
E/HtcBootAnimation( 433): sqlite3_open error, sqlite result: 14, errno: 2, No such file or directory
D/libc ( 207): pt_debug : pthread_create->start_routine=0x404a8509, tls=0x41b1df00, arg=0x40997588
D/libc ( 207): pt_debug : __thread_entry->func=0x404a8509
D/libc ( 207): , tls=0x41b1df00, arg=0x40997588
D/libc ( 208): pt_debug : pthread_create->start_routine=0x4052a509, tls=0x41b7ef00, arg=0x41d71128
D/libc ( 208): pt_debug : __thread_entry->func=0x4052a509
D/libc ( 208): , tls=0x41b7ef00, arg=0x41d71128
D/libc ( 208): pt_debug : pthread_create->start_routine=0x4052a509, tls=0x41cc5f00, arg=0x41d712c8
D/libc ( 208): pt_debug : __thread_entry->func=0x4052a509
D/libc ( 208): , tls=0x41cc5f00, arg=0x41d712c8
W/MediaPlayer( 208): info/warning (1, 902)
D/libc ( 208): pt_debug : pthread_create->start_routine=0x40c9de41, tls=0x41e71f00, arg=0x41d6f53c
D/libc ( 208): pt_debug : __thread_entry->func=0x40c9de41
D/libc ( 208): , tls=0x41e71f00, arg=0x41d6f53c
I/Adreno200-EGL( 433): <qeglDrvAPI_eglInitialize:294>: EGL 1.4 QUALCOMM build: (Merge)
I/Adreno200-EGL( 433): Build Date: 12/09/12 Sun
I/Adreno200-EGL( 433): Local Branch: case_1021867
I/Adreno200-EGL( 433): Remote Branch:
I/Adreno200-EGL( 433): Local Patches:
I/Adreno200-EGL( 433): Reconstruct Branch:
E/Trace ( 433): error opening trace file: No such file or directory (2)
D/libc ( 433): pt_debug : pthread_create->start_routine=0x401e7e95, tls=0x41084f00, arg=0x414b6ff0
D/libc ( 433): pt_debug : __thread_entry->func=0x401e7e95
D/libc ( 433): , tls=0x41084f00, arg=0x414b6ff0
D/memalloc( 197): ion: Allocated buffer base:0x466cf000 size:8355840 fd:36
D/memalloc( 197): ion: Allocated buffer base:0x46f5c000 size:4096 fd:38
D/memalloc( 433): ion: Mapped buffer base:0x414f7000 size:8355840 offset:0 fd:23
D/memalloc( 433): ion: Mapped buffer base:0x40058000 size:4096 offset:0 fd:25
D/libc ( 208): pt_debug : pthread_create->start_routine=0x4052a509, tls=0x41f71f00, arg=0x400e7058
D/libc ( 208): pt_debug : pthread_create->start_routine=0x4052a509, tls=0x42094f00, arg=0x400e7390
D/libc ( 208): pt_debug : __thread_entry->func=0x4052a509
D/libc ( 208): , tls=0x42094f00, arg=0x400e7390
D/libc ( 208): pt_debug : __thread_entry->func=0x4052a509
D/libc ( 208): , tls=0x41f71f00, arg=0x400e7058
W/MediaPlayer( 208): info/warning (1, 902)
D/libc ( 208): pt_debug : pthread_create->start_routine=0x4052a509, tls=0x42370f00, arg=0x400f1f28
D/libc ( 208): pt_debug : __thread_entry->func=0x4052a509
D/libc ( 208): , tls=0x42370f00, arg=0x400f1f28
D/libc ( 208): pt_debug : pthread_create->start_routine=0x4052a509, tls=0x42503f00, arg=0x400f1fb0
D/libc ( 208): pt_debug : __thread_entry->func=0x4052a509
D/libc ( 208): , tls=0x42503f00, arg=0x400f1fb0
E/ ( 208): [ACDB RTC]->rtc init done!->result [0]
E/ ( 208): actp_diag_init: call diag init function with 409476F5
E/ ( 208): Diag_LSM_Init: Failed to open handle to diag driver, error = 13
E/ ( 208): actp_diag_init: diag init failed
E/ ( 208): [ACDB ACPH]->actp diag init done!
E/ACDB-LOADER( 208): Error opening MBHC file 2
E/ACDB-LOADER( 208): Error opening anc file 2
D/memalloc( 197): ion: Allocated buffer base:0x46f7e000 size:8355840 fd:41
D/memalloc( 197): ion: Allocated buffer base:0x477ba000 size:4096 fd:42
D/memalloc( 433): ion: Mapped buffer base:0x44b4e000 size:8355840 offset:0 fd:28
D/memalloc( 433): ion: Mapped buffer base:0x453ce000 size:4096 offset:0 fd:30
D/libc ( 197): pt_debug : pthread_create->start_routine=0x400f4509, tls=0x47998f00, arg=0x4552dda8
D/libc ( 197): pt_debug : __thread_entry->func=0x400f4509
D/libc ( 197): , tls=0x47998f00, arg=0x4552dda8
D/memalloc( 197): ion: Allocated buffer base:0x47a21000 size:8355840 fd:45
D/memalloc( 197): ion: Allocated buffer base:0x482a0000 size:4096 fd:48
D/memalloc( 433): ion: Mapped buffer base:0x4740e000 size:8355840 offset:0 fd:32
D/memalloc( 433): ion: Mapped buffer base:0x47c88000 size:4096 offset:0 fd:34
E/kickstart-htc( 199): mycat: fopen /vendor/firmware//dev/block/mmcblk0p30 failed! Error 2: No such file or directory
D/libc ( 208): pt_debug : pthread_create->start_routine=0x423837b0, tls=0x4271ef00, arg=0x4032a6f0
D/libc ( 208): pt_debug : __thread_entry->func=0x423837b0
D/libc ( 208): , tls=0x4271ef00, arg=0x4032a6f0
E/alsa_ucm( 208): Invalid current verb value: Inactive - -1
E/alsa_ucm( 208): No valid device Speaker found
E/kickstart( 495): Requested ID 21, file "/vendor/firmware/sbl1.mbn"
E/ACDB-LOADER( 208): Error: ACDB AFE returned = -8
E/ThermalDaemon( 198): Sensor 'tsens_tz_sensor0' - alarm raised 1 at 55.0 degC
E/ThermalDaemon( 198): Sensor 'tsens_tz_sensor7' - alarm raised 3 at 66.0 degC
E/ThermalDaemon( 198): Sensor 'tsens_tz_sensor7' - alarm raised 2 at 66.0 degC
E/ThermalDaemon( 198): Sensor 'tsens_tz_sensor7' - alarm raised 1 at 66.0 degC
E/ThermalDaemon( 198): ACTION: CPU - Setting CPU[0] to 1026000
E/ThermalDaemon( 198): notify PnPMgr CPU0 frequency limit to 1026000(temp reaches 66.0 degC)
E/ThermalDaemon( 198): ACTION: CPU - Setting CPU[1] to 1026000
E/ThermalDaemon( 198): notify PnPMgr CPU1 frequency limit to 1026000(temp reaches 66.0 degC)
E/ThermalDaemon( 198): ACTION: HOTPLUG CPU 1 critical failsafe cleared - Sensor 'tsens_tz_sensor8' - temperature 67, mpdecision_active 0
E/ThermalDaemon( 198): ACTION: CPU - Setting CPU[2] to 1026000
E/ThermalDaemon( 198): notify PnPMgr CPU2 frequency limit to 1026000(temp reaches 66.0 degC)
E/ThermalDaemon( 198): ACTION: CPU - Setting CPU[3] to 1026000
E/ThermalDaemon( 198): notify PnPMgr CPU3 frequency limit to 1026000(temp reaches 66.0 degC)
E/ThermalDaemon( 198): Sensor 'tsens_tz_sensor8' - alarm raised 3 at 67.0 degC
E/ThermalDaemon( 198): Sensor 'tsens_tz_sensor8' - alarm raised 2 at 67.0 degC
E/ThermalDaemon( 198): Sensor 'tsens_tz_sensor8' - alarm raised 1 at 67.0 degC
E/ThermalDaemon( 198): ACTION: HOTPLUG CPU 3 critical failsafe cleared - Sensor 'tsens_tz_sensor10' - temperature 59, mpdecision_active 0
E/ThermalDaemon( 198): Sensor 'tsens_tz_sensor10' - alarm raised 1 at 59.0 degC
E/ThermalDaemon( 198): ACTION: HOTPLUG CPU 2 critical failsafe cleared - Sensor 'tsens_tz_sensor9' - temperature 59, mpdecision_active 0
E/ThermalDaemon( 198): Sensor 'tsens_tz_sensor9' - alarm raised 1 at 59.0 degC
E/kickstart( 495): 117492 bytes transferred in 0.015s (7.39 MBps)
E/kickstart( 495): Requested ID 23, file "/vendor/firmware/rpm.mbn"
E/kickstart( 495): 106124 bytes transferred in 0.018s (5.68 MBps)
E/kickstart( 495): Requested ID 22, file "/vendor/firmware/sbl2.mbn"
E/kickstart( 495): 241852 bytes transferred in 0.027s (8.63 MBps)
E/kickstart( 495): Requested ID 12, file "/vendor/firmware/dsp2.mbn"
E/HTC Acoustic( 208): @@##loadSpeakerFile /data/audio/tcoefA.speaker size 0x0 NOT match!!
E/HTC Acoustic( 208): @@##loadSpeakerFile /etc/tfa/tcoef.speaker fopen NULL,No such file or directory
E/HTC Acoustic( 208): @@## line 1266: Status = 0x885f, mtp:0x1, systcl:0x25c
E/ThermalDaemon( 198): ACTION: HOTPLUG CPU 1 critical failsafe cleared - Sensor 'tsens_tz_sensor8' - temperature 61, mpdecision_active 0
E/ThermalDaemon( 198): Sensor 'tsens_tz_sensor8' - alarm cleared 3 at 61.0 degC
E/ThermalDaemon( 198): Sensor 'tsens_tz_sensor7' - alarm cleared 3 at 59.0 degC
E/ThermalDaemon( 198): ACTION: CPU - Setting CPU[0] to 1134000
E/ThermalDaemon( 198): notify PnPMgr CPU0 frequency limit to 1134000(temp reaches 59.0 degC)
E/ThermalDaemon( 198): ACTION: CPU - Setting CPU[1] to 1134000
E/ThermalDaemon( 198): notify PnPMgr CPU1 frequency limit to 1134000(temp reaches 59.0 degC)
E/ThermalDaemon( 198): ACTION: CPU - Setting CPU[2] to 1134000
E/ThermalDaemon( 198): ACTION: HOTPLUG CPU 3 critical failsafe cleared - Sensor 'tsens_tz_sensor10' - temperature 62, mpdecision_active 0
E/ThermalDaemon( 198): notify PnPMgr CPU2 frequency limit to 1134000(temp reaches 59.0 degC)
E/ThermalDaemon( 198): ACTION: CPU - Setting CPU[3] to 1134000
E/ThermalDaemon( 198): Sensor 'tsens_tz_sensor10' - alarm raised 2 at 62.0 degC
E/ThermalDaemon( 198): notify PnPMgr CPU3 frequency limit to 1134000(temp reaches 59.0 degC)
E/ThermalDaemon( 198): ACTION: HOTPLUG CPU 2 critical failsafe cleared - Sensor 'tsens_tz_sensor9' - temperature 65, mpdecision_active 0
E/ThermalDaemon( 198): Sensor 'tsens_tz_sensor9' - alarm raised 3 at 65.0 degC
E/ThermalDaemon( 198): Sensor 'tsens_tz_sensor9' - alarm raised 2 at 65.0 degC
E/ThermalDaemon( 198): ACTION: CPU - Setting CPU[0] to 1026000
E/ThermalDaemon( 198): notify PnPMgr CPU0 frequency limit to 1026000(temp reaches 65.0 degC)
E/ThermalDaemon( 198): ACTION: CPU - Setting CPU[1] to 1026000
E/ThermalDaemon( 198): notify PnPMgr CPU1 frequency limit to 1026000(temp reaches 65.0 degC)
E/ThermalDaemon( 198): ACTION: CPU - Setting CPU[2] to 1026000
E/ThermalDaemon( 198): notify PnPMgr CPU2 frequency limit to 1026000(temp reaches 65.0 degC)
E/ThermalDaemon( 198): ACTION: CPU - Setting CPU[3] to 1026000
E/ThermalDaemon( 198): notify PnPMgr CPU3 frequency limit to 1026000(temp reaches 65.0 degC)
full logcat attached
yutsoku said:
So out of nowhere today my DNA just starts rebooting constantly over and over and over when booting roms. It's getting faster and faster with reboots, wont even get 3 seconds into the boot animation. I've flashed 3 different known working roms that I've flashed in the past that were on my SDCard. I can get into bootloader and recovery, can factory reset/wipe fine.
I managed to get a logcat, but the thing I don't get is why it's rebooting the same way on different roms with different kernels.
Here's the best logcat I was able to retrieve. Any help would be great.
From what I am able to see it looks like it's rebooting on temp errors. This makes me wonder if it's a kernel issue or if it's a hardware issue.
full logcat attached
Click to expand...
Click to collapse
Have you tried flashing a stock kernel? It looks like your phone is getting hot which might be related to an overclocked kernel.

mainboard replaced - No cellular network

Hello,
My i9100 died some months ago, it was impossible to boot (Tested different batteries, SIM-cards and chargers). I think it was overheating when I used it for the last time.
I bought a used mainboard from China and build it into my phone. It had Stock Gingerbread installed and was used in Iran.
An IMEI-analysis says that the board is a european version
Information on IMEI xxxxxx
Type Allocation Holder Samsung
Mobile Equipment Type Samsung GT-i9100 Galaxy S II
GSM Implementation Phase 2/2+
IMEI Validity Assessment Very likely
Information on range assignment
Est. Date of Range Issuance Around Q2 2011
Reporting Body British Approvals Board of Telecommunications (BABT)
Primary Market Europe
Legal Basis for Allocation EU R&TTE Directive
Information on number format
Full IMEI Presentation 35xxxxxx
Reporting Body Identifier 35
Type Allocation Code xxxxxx
Serial Number xxxxx
Check Digit 0
Click to expand...
Click to collapse
I use cm12.1 (12.1-20150430-UNOFFICIAL-i9100) but I also don't have cellular network with other ROMs. GPS, Wifi, BT etc. are working
Search for mobile networks is not successful and I can't execute USSD-Codes. The efs-partition is not corrupted. Most files are from 2010, last changes 2013.
Do you have any idea how to solve this?
Best regards
Have you checked which baseband software version is showing under "about phone"? This is stored in /dev/block/mmcblk0p8, and would not be updated by installing CM. I think I9100XXMS4 was the last European one. Rather than messing around with installing this, you can simply install Sale's NeatROM (modified Samsung 4.1), before installing CM etc.
---------- Post added at 03:53 PM ---------- Previous post was at 03:52 PM ----------
Another thing to consider, but I not sure how you'd check or fix:
http://forum.xda-developers.com/galaxy-s2/general/external-antenna-socket-warning-t1273292
This would mean the radio modem is booted & working OK, but no antenna = no signal = no networks.
My baseband was XXKI4. I installed XXMS4 but that didn't change anything.
The antenna socket is not damaged or anything but i don't know how to check the functionality without destroying the coonnection to the internal antenna (provided it works at all).
Hmmm @tgb456
Install stock 2.3.3 and root it.
Connect your phone to PC into ADB. Start logcating and make log:
--restarting phone
-Searching to network (manual)
-USSD codes excutions
Wysłane ze Slim-fonika 9.0 powered by DorimanX v008 kernel
Still with CM12.1:
After reboot:
Code:
W/ServiceWatcher( 2225): com.google.android.gms not found
W/ServiceWatcher( 2225): com.google.android.gms not found
W/LocationManagerService( 2225): no network location provider found
W/ServiceWatcher( 2225): com.google.android.gms not found
W/ServiceWatcher( 2225): com.google.android.gms not found
D/NuPlayerDriver( 1862): reset(0x41c34040)
D/NuPlayerDriver( 1862): notifyResetComplete(0x41c34040)
E/LocationManagerService( 2225): no geocoder provider found
E/FlpHardwareProvider( 2225): Error hw_get_module 'flp': -2
E/LocationManagerService( 2225): FLP HAL not supported
W/ServiceWatcher( 2225): com.google.android.gms not found
E/LocationManagerService( 2225): Unable to bind FLP Geofence proxy.
E/ActivityRecognitionHardware( 2225): Error hw_get_module: -2
E/LocationManagerService( 2225): Hardware Activity-Recognition not supported.
I/FFmpegExtractor( 1862): android-source:0x415b14c0
...
I/Telecom ( 2225): TelecomGlobals: CallsManager initialized
W/ContextImpl( 2225): Calling a method in the system process without a qualified user: android.app.ContextImpl.startService:1732 android.content.ContextWrapper.startService:522 com.android.server.telecom.BluetoothPhoneService.start:468 com.android.server.telecom.TelecomGlobals.initialize:101 com.android.server.telecom.TelecomService.onCreate:164
....
D/Telephony( 2743): TtyManager: setTTYMode exception: com.android.internal.telephony.CommandException: RADIO_NOT_AVAILABLE
W/BassBoost( 2667): WARNING: attaching a BassBoost to global output mix is deprecated!
V/OtaStartupReceiver( 2743): onOtaspChanged: mOtaspMode=1
W/Virtualizer( 2667): WARNING: attaching a Virtualizer to global output mix is deprecated!
D/GpsLocationProvider( 2225): received SIM realted action:
D/GpsLocationProvider( 2225): SIM MCC/MNC is still not available
D/Telephony( 2743): TtyManager: queryTTYMode exception: com.android.internal.telephony.CommandException: RADIO_NOT_AVAILABLE
I/MmsService( 2743): MmsConfigManager.loadInBackground(): mcc/mnc: 0/0
E/MmsService( 2743): MmsConfigManager.load -- empty getActiveSubInfoList
D/Telephony( 2743): TelecomAccountRegistry: Found 1 phones. Attempting to register.
D/Telephony( 2743): TelecomAccountRegistry: Phone with subscription id 5000
E/PhoneInterfaceManager( 2743): [PhoneIntfMgr] getIccId: No UICC
D/Telephony( 2743): AccountEntry: Registered phoneAccount: [PhoneAccount: ComponentInfo{com.android.phone/com.android.services.telephony.TelephonyConnectionService}, [f8237xxxxxxxxxxx], UserHandle{0} Capabilities: 54 Schemes: tel voicemail ] with handle: ComponentInfo{com.android.phone/com.android.services.telephony.TelephonyConnectionService}, [f8237xxxxxxxxxxxxxxxxxx], UserHandle{0}
I/Telephony( 2743): PstnIncomingCallNotifier: Registering: Handler (com.android.internal.telephony.gsm.GSMPhone) {8e4d5bd}
D/Telephony( 2743): PstnPhoneCapabilitiesNotifier: Registering: Handler (com.android.internal.telephony.gsm.GSMPhone) {8e4d5bd}
D/CallNotifier( 2743): onReceive...
D/Telephony( 2743): PstnPhoneCapabilitiesNotifier: handleVideoCapabilitesChanged. Video capability - false
D/PhoneStatusBarPolicy( 2382): updateSimState for subId :5000
D/GpsLocationProvider( 2225): received SIM realted action:
D/PhoneStatusBarPolicy( 2382): updateSimState for phoneId :0
D/PhoneStatusBarPolicy( 2382): updateSimState for Slot :0
D/GpsLocationProvider( 2225): SIM MCC/MNC is still not available
....
D/MmsSmsDatabaseHelper( 2743): [MmsSmsDb] tableName: threads hasAutoIncrement: CREATE TABLE threads (_id INTEGER PRIMARY KEY AUTOINCREMENT,date INTEGER DEFAULT 0,message_count INTEGER DEFAULT 0,recipient_ids TEXT,snippet TEXT,snippet_cs INTEGER DEFAULT 0,read INTEGER DEFAULT 1,archived INTEGER DEFAULT 0,type INTEGER DEFAULT 0,error INTEGER DEFAULT 0,has_attachment INTEGER DEFAULT 0) result: true
D/MmsSmsDatabaseHelper( 2743): [MmsSmsDb] tableName: canonical_addresses hasAutoIncrement: CREATE TABLE canonical_addresses (_id INTEGER PRIMARY KEY AUTOINCREMENT,address TEXT) result: true
D/MmsSmsDatabaseHelper( 2743): [MmsSmsDb] tableName: part hasAutoIncrement: CREATE TABLE part (_id INTEGER PRIMARY KEY AUTOINCREMENT,mid INTEGER,seq INTEGER DEFAULT 0,ct TEXT,name TEXT,chset INTEGER,cd TEXT,fn TEXT,cid TEXT,cl TEXT,ctt_s INTEGER,ctt_t TEXT,_data TEXT,text TEXT) result: true
D/MmsSmsDatabaseHelper( 2743): [MmsSmsDb] tableName: pdu hasAutoIncrement: CREATE TABLE pdu (_id INTEGER PRIMARY KEY AUTOINCREMENT,thread_id INTEGER,date INTEGER,date_sent INTEGER DEFAULT 0,msg_box INTEGER,read INTEGER DEFAULT 0,m_id TEXT,sub TEXT,sub_cs INTEGER,ct_t TEXT,ct_l TEXT,exp INTEGER,m_cls TEXT,m_type INTEGER,v INTEGER,m_size INTEGER,pri INTEGER,rr INTEGER,rpt_a INTEGER,resp_st INTEGER,st INTEGER,tr_id TEXT,retr_st INTEGER,retr_txt TEXT,retr_txt_cs INTEGER,read_status INTEGER,ct_cls INTEGER,resp_txt TEXT,d_tm INTEGER,d_rpt INTEGER,locked INTEGER DEFAULT 0,sub_id INTEGER DEFAULT -1, phone_id INTEGER DEFAULT -1, seen INTEGER DEFAULT 0,creator TEXT,text_only INTEGER DEFAULT 0) result: true
D/MmsSmsDatabaseHelper( 2743): [getWritableDatabase] hasAutoIncrementThreads: true hasAutoIncrementAddresses: true hasAutoIncrementPart: true hasAutoIncrementPdu: true
---
I/ActivityManager( 2225): Start proc 3598:com.android.cellbroadcastreceiver/u0a5 for broadcast com.android.cellbroadcastreceiver/.CellBroadcastReceiver
D/CellBroadcastReceiver( 3598): onReceive Intent { act=android.intent.action.SERVICE_STATE flg=0x10 cmp=com.android.cellbroadcastreceiver/.CellBroadcastReceiver (has extras) }
D/CellBroadcastReceiver( 3598): Intent ACTION_SERVICE_STATE_CHANGED
D/CellBroadcastReceiver( 3598): Service state changed! 3 Full: 3 3 voice home data home null null null null null null Unknown Unknown CSS not supported -1 -1 RoamInd=-1 DefRoamInd=-1 EmergOnly=false Current state=-1
I/ActivityManager( 2225): Killing 2826:android.process.acore/u0a6 (adj 15): empty #17
D/CellBroadcastReceiver( 3598): onReceive Intent { act=android.intent.action.ACTION_SUBINFO_RECORD_UPDATED flg=0x10 cmp=com.android.cellbroadcastreceiver/.CellBroadcastReceiver }
D/SIP ( 2743): [SipSharedPreferences] isReceivingCallsEnabled, option not set; use default value, exception: android.provider.Settings$SettingNotFoundException: sip_receive_calls
E/PhoneInterfaceManager( 2743): [PhoneIntfMgr] getIccId: No UICC
...
D/Yamaha-MC1N2-Audio( 1862): yamaha_mc1n2_audio_route_start()
E/WhisperPush( 3531): GcmRecurringRegistration
E/WhisperPush( 3531): java.io.IOException: SERVICE_NOT_AVAILABLE
E/WhisperPush( 3531): at com.google.android.gms.gcm.GoogleCloudMessaging.register(Unknown Source)
E/WhisperPush( 3531): at org.whispersystems.whisperpush.gcm.GcmHelper.getRegistrationId(GcmHelper.java:65)
E/WhisperPush( 3531): at org.whispersystems.whisperpush.WhisperPush$1.doInBackground(WhisperPush.java:52)
E/WhisperPush( 3531): at org.whispersystems.whisperpush.WhisperPush$1.doInBackground(WhisperPush.java:48)
E/WhisperPush( 3531): at android.os.AsyncTask$2.call(AsyncTask.java:292)
E/WhisperPush( 3531): at java.util.concurrent.FutureTask.run(FutureTask.java:237)
E/WhisperPush( 3531): at android.os.AsyncTask$SerialExecutor$1.run(AsyncTask.java:231)
E/WhisperPush( 3531): at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1112)
E/WhisperPush( 3531): at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:587)
E/WhisperPush( 3531): at java.lang.Thread.run(Thread.java:818)
W/ActivityManager( 2225): Unable to start service Intent { act=com.google.android.gms.analytics.service.START cmp=com.google.android.gms/.analytics.service.AnalyticsService (has extras) } U=0: not found
W/GAV3 ( 3553): Thread[GAThread,5,main]: Service unavailable (code=1), will retry.
I/GAV3 ( 3553): Thread[GAThread,5,main]: No campaign data found.
I/GlobalDismissManager( 3437): no sender configured
...
W/ActivityManager( 2225): Unable to start service Intent { act=com.google.android.gms.analytics.service.START cmp=com.google.android.gms/.analytics.service.AnalyticsService (has extras) } U=0: not found
W/GAV3 ( 3553): Thread[Service Reconnect,5,main]: Service unavailable (code=1), using local store.
USSD-Codes:
Code:
D/Yamaha-MC1N2-Audio( 1862): yamaha_mc1n2_audio_output_start()
D/Yamaha-MC1N2-Audio( 1862): yamaha_mc1n2_audio_route_start()
D/Yamaha-MC1N2-Audio( 1862): (yamaha_mc1n2_audio_params_route_find): device = 2, direction = 0
W/AudioTrack( 2225): AUDIO_OUTPUT_FLAG_FAST denied by client
E/AudioTrack( 2225): AudioTrack::set : Exit
I/ActivityManager( 2225): START u0 {act=android.intent.action.CALL_PRIVILEGED dat=tel:xxxxx cmp=com.android.server.telecom/.PrivilegedCallActivity (has extras)} from uid 10008 on display 0
V/WindowManager( 2225): addAppToken: AppWindowToken{3e3087eb token=Token{534ff3a ActivityRecord{d949665 u0 com.android.server.telecom/.PrivilegedCallActivity t77}}} to stack=1 task=77 at 1
E/SpannableStringBuilder( 3876): SPAN_EXCLUSIVE_EXCLUSIVE spans cannot have a zero length
I/Telecom ( 2225): CallReceiver: onReceive - isUnknownCall: false
I/Telecom ( 2225): Call: setTargetPhoneAccount ComponentInfo{com.android.phone/com.android.services.telephony.TelephonyConnectionService}, [f8237xxxxxxxxxxxxxxx], UserHandle{0}
V/GpsNetInitiatedHandler( 2225): ACTION_NEW_OUTGOING_CALL - false
I/Telecom ( 2225): Call: CallerInfo received for *****: [email protected] { name null, phoneNumber non-null }
W/InputMethodManagerService( 2225): Window already focused, ignoring focus gain of: [email protected] [email protected], token = [email protected]
D/DialpadFragment( 3876): Displaying normal Dialer UI.
D/DialpadFragment( 3876): Displaying normal Dialer UI.
I/Telecom ( 2225): CallsManager: Creating a new outgoing call with handle: *****
I/Telecom ( 2225): CallsManager: updateLchStatus subInConversation: 5000
I/Telecom ( 2225): CreateConnectionProcessor: Trying attempt CallAttemptRecord(ComponentInfo{com.android.phone/com.android.services.telephony.TelephonyConnectionService}, [f8237xxxxxxxxxxxxxxxxxxxx], UserHandle{0},ComponentInfo{com.android.phone/com.android.services.telephony.TelephonyConnectionService}, [f8237xxxxxxxxxxxxxxxxxx], UserHandle{0})
I/Telecom ( 2225): CreateConnectionProcessor: Attempting to call from ComponentInfo{com.android.phone/com.android.services.telephony.TelephonyConnectionService}
I/Telecom ( 2225): ServiceBinderConnection: Service bound ComponentInfo{com.android.phone/com.android.services.telephony.TelephonyConnectionService}
I/Telephony( 2743): TelephonyConnectionService: onCreateOutgoingConnection, request: ConnectionRequest xxxxxxxxxxx Bundle[mParcelledData.dataSize=96]
I/Telecom ( 2225): ConnectionServiceWrapper: Service unbound ComponentInfo{com.android.phone/com.android.services.telephony.TelephonyConnectionService}, from unbind.
I/Telecom ( 2225): CallsManager: setCallState CONNECTING -> DISCONNECTED, call: [881702855, CONNECTING, null, *****, 0, childs(0), has_parent(false), [[Capabilities:]], false, ComponentInfo{com.android.phone/com.android.services.telephony.TelephonyConnectionService}, [f8237xxxxxxxxxxxxxxxxxxxxxxx], UserHandle{0} 0]
I/Telecom ( 2225): CallsManager: entered manageMSimInCallTones
I/Telecom ( 2225): CallsManager: updateLchStatus subInConversation: null
I/Telecom ( 2225): CallsManager: setActiveSubscription = null
I/Telecom ( 2225): CallsManager: entered manageMSimInCallTones
I/Timeline( 3876): Timeline: Activity_idle id: [email protected] time:1476741
Searching for networks:
Code:
D/Yamaha-MC1N2-Audio( 1862): yamaha_mc1n2_audio_output_start()
D/Yamaha-MC1N2-Audio( 1862): yamaha_mc1n2_audio_route_start()
D/Yamaha-MC1N2-Audio( 1862): (yamaha_mc1n2_audio_params_route_find): device = 2, direction = 0
V/WindowManager( 2225): not Base app: Adding window Window{a3df74b u0 com.android.phone/com.android.phone.NetworkSetting} at 6 of 9
I/NotificationService( 2225): cancelToast pkg=com.android.phone [email protected]
W/NotificationService( 2225): Toast already cancelled. pkg=com.android.phone [email protected]
W/InputMethodManagerService( 2225): Window already focused, ignoring focus gain of: [email protected] attribute=null, token = [email protected]
Maybe this is a problem with the /efs - partition. hxxp://redmine.replicant.us/boards/9/topics/8841?r=9483 . The owner of most files in /efs is root or system, not radio
Code:
[email protected]:/ # ls -la /efs/
ls -la /efs/
-rw-r--r-- root root 1 2011-01-01 01:00 .nv_state
drwxrwxr-x radio system 2000-01-01 01:09 bluetooth
-rw-r--r-- system system 9 2010-12-31 22:02 cryptprop_applied_result
-rw-r--r-- root root 1 2010-12-31 22:00 cryptprop_rebootMode
drwx------ system system 2010-12-31 22:01 dmp
-rw-rw-rw- system system 256 2014-06-06 10:33 edk_p
-rw-r--r-- root root 2354 2011-01-01 01:00 nv.log
-rw-r--r-- root root 32 2010-12-31 22:13 nv_data.bin.md5
-rw-r--r-- root root 880 2010-12-31 16:02 redata.bin
-rw-r--r-- root root 1 2013-02-12 07:00 upgaddr
drwxrwxr-x radio system 2000-01-01 01:13 wifi
Activation of mobile network in settings:
Code:
D/Yamaha-MC1N2-Audio( 1861): yamaha_mc1n2_audio_route_start()
D/MccTable( 2753): updateMccMncConfiguration mccmnc='null' fromServiceState=true
D/MccTable( 2753): WIFI_COUNTRY_CODE set to
I/WifiService( 2226): WifiService trying to set country code to with persist set to true
E/WifiStateMachine( 2226): Ignoring resetting of country code
D/KeyguardUpdateMonitor( 2369): ACTION_SERVICE_STATE_CHANGED on sub: 5000 mServiceState: 1 1 voice home data home null null null null null null Unknown Unknown CSS not supported -1 -1 RoamInd=-1 DefRoamInd=-1 EmergOnly=false
D/GpsLocationProvider( 2226): received SIM realted action:
D/GpsLocationProvider( 2226): SIM MCC/MNC is still not available
W/sh ( 4104): type=1400 audit(0.0:237): avc: denied { write } for name="log" dev=mmcblk0p10 ino=73730 scontext=u:r:rild:s0 tcontext=u:object_r:system_data_file:s0 tclass=dir
I/MmsService( 2753): MmsConfigManager.loadInBackground(): mcc/mnc: 262/3
I/Telephony( 2753): PstnIncomingCallNotifier: Unregistering: Handler (com.android.internal.telephony.gsm.GSMPhone) {2f88d477}
D/Telephony( 2753): PstnPhoneCapabilitiesNotifier: Unregistering: Handler (com.android.internal.telephony.gsm.GSMPhone) {2f88d477}
E/MmsService( 2753): MmsConfigManager.load -- empty getActiveSubInfoList
D/Telephony( 2753): TelecomAccountRegistry: Found 1 phones. Attempting to register.
D/Telephony( 2753): TelecomAccountRegistry: Phone with subscription id 5000
E/PhoneInterfaceManager( 2753): [PhoneIntfMgr] getIccId: ICC ID is null or empty.
D/Telephony( 2753): AccountEntry: Registered phoneAccount: [PhoneAccount: ComponentInfo{com.android.phone/com.android.services.telephony.TelephonyConnectionService}, [f8237xxxxxxxxxxxxxxxxxxxx], UserHandle{0} Capabilities: 54 Schemes: tel voicemail ] with handle: ComponentInfo{com.android.phone/com.android.services.telephony.TelephonyConnectionService}, [f8237xxxxxxxxxxxxxxxxxxxxxxxx], UserHandle{0}
I/Telephony( 2753): PstnIncomingCallNotifier: Registering: Handler (com.android.internal.telephony.gsm.GSMPhone) {2f88d477}
D/Telephony( 2753): PstnPhoneCapabilitiesNotifier: Registering: Handler (com.android.internal.telephony.gsm.GSMPhone) {2f88d477}
D/CallNotifier( 2753): onReceive...
D/PhoneStatusBarPolicy( 2369): updateSimState for subId :5000
D/PhoneStatusBarPolicy( 2369): updateSimState for phoneId :0
D/PhoneStatusBarPolicy( 2369): updateSimState for Slot :0
D/Telephony( 2753): PstnPhoneCapabilitiesNotifier: handleVideoCapabilitesChanged. Video capability - false
D/CellBroadcastReceiver( 3604): onReceive Intent { act=android.intent.action.SERVICE_STATE flg=0x10 cmp=com.android.cellbroadcastreceiver/.CellBroadcastReceiver (has extras) }
D/CellBroadcastReceiver( 3604): Intent ACTION_SERVICE_STATE_CHANGED
D/CellBroadcastReceiver( 3604): Service state changed! 1 Full: 1 1 voice home data home null null null null null null Unknown Unknown CSS not supported -1 -1 RoamInd=-1 DefRoamInd=-1 EmergOnly=false Current state=-1
D/CellBroadcastReceiver( 3604): onReceive Intent { act=android.intent.action.ACTION_SUBINFO_RECORD_UPDATED flg=0x10 cmp=com.android.cellbroadcastreceiver/.CellBroadcastReceiver }
E/PhoneInterfaceManager( 2753): [PhoneIntfMgr] getIccId: ICC ID is null or empty.
I/art ( 2226): Background partial concurrent mark sweep GC freed 21767(1433KB) AllocSpace objects, 6(196KB) LOS objects, 20% free, 15MB/19MB, paused 2.154ms total 179.409ms
D/GpsLocationProvider( 2226): received SIM realted action:
D/GpsLocationProvider( 2226): SIM MCC/MNC is still not available
I/MediaFocusControl( 2226): AudioFocus abandonAudioFocus() from [email protected][email protected]
I/HeadsetService( 2686): Audio session removed: 18
I/MediaFocusControl( 2226): AudioFocus abandonAudioFocus() from [email protected][email protected]

Failed to install system updates in recovery

My Samsung SM-G920F (duos) suddenly encountered general sensor failure.
Not a single sensor works except GPS and Heart Rate sensor.
When I boot into the recovery it shows me a blue screen with message "Installing system updates" shortly followed by a dead android with a yellow triangle, which I suspect is the cause of the problem.
I tried to flash it with Odin several times (using single-file and 4-files service firmware, current and the previous one) with no luck.
Recovery still tries to install something and fails.
Is this normal? How can I reset my phone to make it stop trying to install these unknown updates, which it fails to complete?
Any help would be very appreciated!
Prontiol said:
My Samsung SM-G920F (duos) suddenly encountered general sensor failure.
Not a single sensor works except GPS and Heart Rate sensor.
When I boot into the recovery it shows me a blue screen with message "Installing system updates" shortly followed by a dead android with a yellow triangle, which I suspect is the cause of the problem.
I tried to flash it with Odin several times (using single-file and 4-files service firmware, current and the previous one) with no luck.
Recovery still tries to install something and fails.
Is this normal? How can I reset my phone to make it stop trying to install these unknown updates, which it fails to complete?
Any help would be very appreciated!
Click to expand...
Click to collapse
Boot into download mode and try installing the latest Stock image through Odin. Forget about installing all the supposed updates. Then perform a full wipe. Make sure it is the latest Stock firmware, and nothing older
Snowby123 said:
Boot into download mode and try installing the latest Stock image through Odin. Forget about installing all the supposed updates. Then perform a full wipe. Make sure it is the latest Stock firmware, and nothing older
Click to expand...
Click to collapse
Did this several times, wiped cache/data, installed latest firmware available via Odin - no luck.
I tried adb logcat and there are some interesting entries in it (grepped by "sensor"):
07-04 01:16:12.960 3075 3075 D SensorHubService: nuSensorHubService starting...
07-04 01:16:12.980 3075 3075 I SensorHubService: HardwareSensorHub
07-04 01:16:12.980 3075 3075 I SensorHubService: HardwareSensorHub
07-04 01:16:12.980 3075 3075 I sensorhubservice: SensorHubService is starting now........................................
07-04 01:16:12.990 3075 3119 D SensorHubService: nuSensorHubService thread starting...
07-04 01:16:13.220 3095 3095 V lhd : SetCfgValue: LHD config "LheBbdSensor"="/dev/bbd_sensor"
07-04 01:16:13.230 3095 3095 E lhd : getCustPatchVersion: Can't open patch file /fw/SensorPatch. 2(No such file or directory)
07-04 01:16:13.230 3095 3095 D lhd : LheBbdSensor=/dev/bbd_sensor
07-04 01:16:13.230 3095 3095 D lhd : LheSensorIpc=true
07-04 01:16:17.110 3066 3066 D ExynosCameraUtils: DEBUG(getSensorIdFromFile[1920]):Sensor name is 10
07-04 01:16:17.110 3066 3066 I ExynosCamera3SensorInfo: createCamera3SensorInfo[39] sensor ID(10)
07-04 01:16:17.110 3066 3066 D ExynosCameraUtils: DEBUG(getSensorIdFromFile[1920]):Sensor name is 21
07-04 01:16:17.110 3066 3066 I ExynosCamera3SensorInfo: createCamera3SensorInfo[39] sensor ID(21)
07-04 01:16:22.120 3512 3512 D SensorService: nuSensorService starting...
07-04 01:16:22.120 3512 3512 I Sensors : getName:gyro_sensor name = MPU6500.
07-04 01:16:22.120 3512 3512 I Sensors : Proximity old sensor_state 0, new sensor_state : 128 en : 1
07-04 01:16:22.120 3512 3512 E Sensors : ProximitySensor write failed. ret = -1, sensor_state = 128
07-04 01:16:22.120 3512 3512 I Sensors : Light old sensor_state 0, new sensor_state : 512 en : 1
07-04 01:16:22.120 3512 3512 E Sensors : LightSensor write failed. ret = -1, sensor_state = 512
07-04 01:16:22.120 3512 3512 I Sensors : Light_IR old sensor_state 0, new sensor_state : 16777216 en : 1
07-04 01:16:22.120 3512 3512 E Sensors : Light_IR_Sensor write failed. ret = -1, sensor_state = 16777216
07-04 01:16:22.130 3512 3512 I Sensors : SigMotionSensor old sensor_state 0, new sensor_state : 16384 en : 1
07-04 01:16:22.130 3512 3512 E Sensors : SigMotionSensor write failed. ret = -1, sensor_state = 16384
07-04 01:16:22.130 3512 3512 I Sensors : getName:gyro_sensor name = MPU6500.
07-04 01:16:22.130 3512 3512 I Sensors : StepCounterSensor old sensor_state 0, new sensor_state : 262144 en : 1
07-04 01:16:22.130 3512 3512 E Sensors : StepCounterSensor write failed. ret = -1, sensor_state = 262144
07-04 01:16:22.130 3512 3512 I Sensors : Int.Gyro old sensor_state 0, new sensor_state : 33554432 en : 1
07-04 01:16:22.130 3512 3512 E Sensors : Int.GyroSensor write failed. ret = -1, sensor_state = 33554432
07-04 01:16:22.130 3512 3512 I Sensors : getName:gyro_sensor name = MPU6500.
07-04 01:16:22.130 3512 3512 I Sensors : HrmSpO2Sensor:: part type = 3.
07-04 01:16:22.130 3512 3512 D Sensors : HrmSpO2Sensor::type:3, prox threshold:2000
07-04 01:16:22.130 3512 3512 D Sensors : HrmSpO2Sensor::handle:0 ,en:1
07-04 01:16:22.130 3512 3512 D Sensors : HrmSpO2Sensor::HrmSpO2Sensor: Shared version Registered
07-04 01:16:22.130 3512 3512 D Sensors : HrmLedSensor enable: mEnabled 0, handle 20, en 1
07-04 01:16:22.130 3512 3512 D Sensors : HRMSensor led enabled:1, en:1
07-04 01:16:22.130 3512 3512 I Sensors : getVendor:hrm_sensor vendor = MAXIM.
07-04 01:16:22.130 3512 3512 I Sensors : HrmLedSensor: HrmLedSensor vendor = MAXIM.
07-04 01:16:22.140 3512 3512 D Sensors : HRMSensor_LED::libhr open start!!
07-04 01:16:22.140 3512 3512 I Sensors : Grip old sensor_state 0, new sensor_state : 2048 en : 1
07-04 01:16:22.140 3512 3512 E Sensors : GripSensor write failed. ret = -1, sensor_state = 2048
07-04 01:16:22.140 3512 3512 D Sensors : HrmSpO2Sensor::handle:19 ,en:0
07-04 01:16:22.140 3512 3512 D Sensors : HrmSpO2Sensor::isEnabled:0 ,en:0, mEn:0
07-04 01:16:22.140 3512 3512 D Sensors : HrmSpO2Sensor::handle:28 ,en:0
07-04 01:16:22.140 3512 3512 D Sensors : HrmSpO2Sensor::isEnabled:0 ,en:0, mEn:0
07-04 01:16:22.140 3512 3512 D Sensors : HrmLedSensor enable: mEnabled 1, handle 20, en 0
07-04 01:16:22.140 3512 3512 D Sensors : HRMSensor_LED::enable
07-04 01:16:22.140 3512 3512 E Sensors : HRMSensor_LED::close_agc
07-04 01:16:22.140 3512 3512 D Sensors : HRMSensor led enabled:0, en:0
07-04 01:16:22.140 3512 3512 D Sensors : HrmLedSensor enable: mEnabled 0, handle 21, en 0
07-04 01:16:22.140 3512 3512 D Sensors : HrmLedSensor isEnabled:0 ,en:0
07-04 01:16:22.140 3512 3512 D Sensors : HrmSpO2Sensor::handle:18 ,en:0
07-04 01:16:22.140 3512 3512 D Sensors : HrmSpO2Sensor::isEnabled:0 ,en:0, mEn:0
07-04 01:16:22.140 3512 3512 D SensorService: [SO] ScreenOrientationSensor Registered!
07-04 01:16:22.140 3512 3512 D SensorService: HRMFusion :: libhr opened
07-04 01:16:22.140 3512 3512 D SensorService: HRMFusion_maxim::HRMFusion_maxim: Shared version Registered
07-04 01:16:22.140 3512 3512 D SensorService: HRMSensor::can not find Cal_HR
07-04 01:16:22.140 3512 3512 D SensorService: HRMSensor::can not find setModelNumber
07-04 01:16:22.140 3512 3512 D SensorService: HRMFusion_adi::HRMFusion_adi: Shared version Registered
07-04 01:16:22.140 3512 3512 D SensorService: OrientationSensor2 Registered!!!!
07-04 01:16:22.140 3512 3512 D SensorService: GravitySensor2 Registered!!!!
07-04 01:16:22.140 3512 3512 D SensorService: GravitySensor2 Registered!!!!
07-04 01:16:22.140 3512 3512 D SensorService: LinearAccelerationSensor2 Registered!!!!
07-04 01:16:22.140 3512 3924 D SensorService: nuSensorService thread starting...
07-04 01:16:22.140 3512 3923 D SensorService: new thread SensorEventAckReceiver
07-04 01:16:22.690 3512 3512 D SensorHubManager: sensorhubs_module_init()
07-04 01:16:22.690 3512 3512 E SensorHubManager: JNI: sensorhubs_get_next_module: getSensorHubList: count= 2
07-04 01:16:22.690 3512 3512 D SensorHubManager: Num SensorHub= 1
07-04 01:16:22.690 3512 3512 D SensorHubManager: found sensorhub= SensorHub, handle=0
07-04 01:16:22.690 3512 3512 E SensorHubManager: JNI: sensorhubs_get_next_module: getSensorHubList: count= 2
07-04 01:16:22.690 3512 3512 D SensorHubManager: Num SensorHub= 0
07-04 01:16:22.690 3512 3512 D SensorHubManager: found sensorhub= Gesture Sensor, handle=1
07-04 01:16:22.690 3512 3512 D SensorHubManager: registerListener: handle= 0 delay= 0 Listener= com.samsung.android.contex[email protected]7958a3
07-04 01:16:22.690 3512 3958 D SensorHubManager: =======>>> SensorHubManager Thread RUNNING <<<=======
07-04 01:16:22.690 3512 3512 E SensorHubManager: JNI: sensorhubs_enabledisable: delay= 0
07-04 01:16:22.690 3075 3075 D SensorHubService: SensorHubEventConnection: setEventRate : ns= 0
07-04 01:16:22.690 3075 3075 D SensorHubService: setEventRate: minDelay before ns= 0
07-04 01:16:22.690 3075 3075 D SensorHubService: setEventRate: ns= 1000000
07-04 01:16:22.740 3512 3965 E MotionRecognitionService: ASensorManager_getInstance
07-04 01:16:22.740 3512 3965 D SensorService: SensorEventConnection::SocketBufferSize, SystemSocketBufferSize - 102400, 2097152
07-04 01:17:00.737 3512 4555 E SensorService: getSensorList a sensor (HRM Ambient Light Canceling) without holding its required permission: com.samsung.permission.HRM_EXT
07-04 01:17:00.737 3512 4555 I SensorService: Skipped sensor HRM Ambient Light Canceling because it requires permission com.samsung.permission.HRM_EXT and app op -1
07-04 01:17:00.737 3512 4555 E SensorService: getSensorList a sensor (HRM Proximity detecting) without holding its required permission: com.samsung.permission.HRM_EXT
07-04 01:17:00.737 3512 4555 I SensorService: Skipped sensor HRM Proximity detecting because it requires permission com.samsung.permission.HRM_EXT and app op -1
07-04 01:17:00.737 3512 4555 E SensorService: getSensorList a sensor (HRMLED IR) without holding its required permission: android.permission.BODY_SENSORS
07-04 01:17:00.737 3512 4555 I SensorService: Skipped sensor HRMLED IR because it requires permission android.permission.BODY_SENSORS and app op 56
07-04 01:17:00.737 3512 4555 E SensorService: getSensorList a sensor (HRMLED RED) without holding its required permission: android.permission.BODY_SENSORS
07-04 01:17:00.737 3512 4555 I SensorService: Skipped sensor HRMLED RED because it requires permission android.permission.BODY_SENSORS and app op 56
07-04 01:17:00.737 3512 4555 E SensorService: getSensorList a sensor (MAX86900) without holding its required permission: com.samsung.permission.SSENSOR
07-04 01:17:00.737 3512 4555 I SensorService: Skipped sensor MAX86900 because it requires permission com.samsung.permission.SSENSOR and app op -1
07-04 01:17:00.737 3512 4555 E SensorService: getSensorList a sensor (HRM Sensor) without holding its required permission: com.samsung.permission.SSENSOR
07-04 01:17:00.737 3512 4555 I SensorService: Skipped sensor HRM Sensor because it requires permission com.samsung.permission.SSENSOR and app op -1
07-04 01:17:00.737 3512 4555 E SensorService: getSensorList a sensor (HeartRate Sensor) without holding its required permission: android.permission.BODY_SENSORS
07-04 01:17:00.737 3512 4555 I SensorService: Skipped sensor HeartRate Sensor because it requires permission android.permission.BODY_SENSORS and app op 56
07-04 01:17:00.957 3095 3095 E lhd : <EswCrash Assert="C:\p4view\Zero_BRCM_M_upgrade\MCU\Project\SSP_SensorHub\SH_Main.c" line="76" Arg2="0x82838E" Arg3="0x0" Arg4="0x0" ts="1426781">
It appears that all the sensors are failing at once, according to the log cat. I am out of ideas on how to fix it. If it is still under warranty I would replace it. Maybe someone else has alternative ideas?
I am currently very far from home and can't replace it by warranty, so trying to fix it by myself somehow.
What I found out currently:
*#2663# shows:
SensorHub MCU FW Version: BRO010
SensorHUB BIN FW Version: BRO116040600
I believe they should be the same. I checked this on the brand new phone in the local store and they are the same.
There is a button "SensorHub FW Update" but it is greyed out, so I don't know, how to update it manually.
Also, looks like entering into the recovery starts SensorHub update via i2c bus, but failed with this which causes the problem.
So, looking for a way to forcibly update SensorHub Firmware via adb or secret code or whatever else I could find.
Prontiol said:
I am currently very far from home and can't replace it by warranty, so trying to fix it by myself somehow.
What I found out currently:
*#2663# shows:
SensorHub MCU FW Version: BRO010
SensorHUB BIN FW Version: BRO116040600
I believe they should be the same. I checked this on the brand new phone in the local store and they are the same.
There is a button "SensorHub FW Update" but it is greyed out, so I don't know, how to update it manually.
Also, looks like entering into the recovery starts SensorHub update via i2c bus, but failed with this which causes the problem.
So, looking for a way to forcibly update SensorHub Firmware via adb or secret code or whatever else I could find.
Click to expand...
Click to collapse
Please let me know if you managed to fix this, as I have the very same problem here
CpaoV said:
Please let me know if you managed to fix this, as I have the very same problem here
Click to expand...
Click to collapse
So, its 2018 now, and i have the same problem(exactly the same actualy) on my brand new s7, any news? did you take it to warranty service?
Prontiol said:
Did this several times, wiped cache/data, installed latest firmware available via Odin - no luck.
I tried adb logcat and there are some interesting entries in it (grepped by "sensor"):
07-04 01:16:12.960 3075 3075 D SensorHubService: nuSensorHubService starting...
07-04 01:16:12.980 3075 3075 I SensorHubService: HardwareSensorHub
07-04 01:16:12.980 3075 3075 I SensorHubService: HardwareSensorHub
07-04 01:16:12.980 3075 3075 I sensorhubservice: SensorHubService is starting now........................................
07-04 01:16:12.990 3075 3119 D SensorHubService: nuSensorHubService thread starting...
07-04 01:16:13.220 3095 3095 V lhd : SetCfgValue: LHD config "LheBbdSensor"="/dev/bbd_sensor"
07-04 01:16:13.230 3095 3095 E lhd : getCustPatchVersion: Can't open patch file /fw/SensorPatch. 2(No such file or directory)
07-04 01:16:13.230 3095 3095 D lhd : LheBbdSensor=/dev/bbd_sensor
07-04 01:16:13.230 3095 3095 D lhd : LheSensorIpc=true
07-04 01:16:17.110 3066 3066 D ExynosCameraUtils: DEBUG(getSensorIdFromFile[1920]):Sensor name is 10
07-04 01:16:17.110 3066 3066 I ExynosCamera3SensorInfo: createCamera3SensorInfo[39] sensor ID(10)
07-04 01:16:17.110 3066 3066 D ExynosCameraUtils: DEBUG(getSensorIdFromFile[1920]):Sensor name is 21
07-04 01:16:17.110 3066 3066 I ExynosCamera3SensorInfo: createCamera3SensorInfo[39] sensor ID(21)
07-04 01:16:22.120 3512 3512 D SensorService: nuSensorService starting...
07-04 01:16:22.120 3512 3512 I Sensors : getName:gyro_sensor name = MPU6500.
07-04 01:16:22.120 3512 3512 I Sensors : Proximity old sensor_state 0, new sensor_state : 128 en : 1
07-04 01:16:22.120 3512 3512 E Sensors : ProximitySensor write failed. ret = -1, sensor_state = 128
07-04 01:16:22.120 3512 3512 I Sensors : Light old sensor_state 0, new sensor_state : 512 en : 1
07-04 01:16:22.120 3512 3512 E Sensors : LightSensor write failed. ret = -1, sensor_state = 512
07-04 01:16:22.120 3512 3512 I Sensors : Light_IR old sensor_state 0, new sensor_state : 16777216 en : 1
07-04 01:16:22.120 3512 3512 E Sensors : Light_IR_Sensor write failed. ret = -1, sensor_state = 16777216
07-04 01:16:22.130 3512 3512 I Sensors : SigMotionSensor old sensor_state 0, new sensor_state : 16384 en : 1
07-04 01:16:22.130 3512 3512 E Sensors : SigMotionSensor write failed. ret = -1, sensor_state = 16384
07-04 01:16:22.130 3512 3512 I Sensors : getName:gyro_sensor name = MPU6500.
07-04 01:16:22.130 3512 3512 I Sensors : StepCounterSensor old sensor_state 0, new sensor_state : 262144 en : 1
07-04 01:16:22.130 3512 3512 E Sensors : StepCounterSensor write failed. ret = -1, sensor_state = 262144
07-04 01:16:22.130 3512 3512 I Sensors : Int.Gyro old sensor_state 0, new sensor_state : 33554432 en : 1
07-04 01:16:22.130 3512 3512 E Sensors : Int.GyroSensor write failed. ret = -1, sensor_state = 33554432
07-04 01:16:22.130 3512 3512 I Sensors : getName:gyro_sensor name = MPU6500.
07-04 01:16:22.130 3512 3512 I Sensors : HrmSpO2Sensor:: part type = 3.
07-04 01:16:22.130 3512 3512 D Sensors : HrmSpO2Sensor::type:3, prox threshold:2000
07-04 01:16:22.130 3512 3512 D Sensors : HrmSpO2Sensor::handle:0 ,en:1
07-04 01:16:22.130 3512 3512 D Sensors : HrmSpO2Sensor::HrmSpO2Sensor: Shared version Registered
07-04 01:16:22.130 3512 3512 D Sensors : HrmLedSensor enable: mEnabled 0, handle 20, en 1
07-04 01:16:22.130 3512 3512 D Sensors : HRMSensor led enabled:1, en:1
07-04 01:16:22.130 3512 3512 I Sensors : getVendor:hrm_sensor vendor = MAXIM.
07-04 01:16:22.130 3512 3512 I Sensors : HrmLedSensor: HrmLedSensor vendor = MAXIM.
07-04 01:16:22.140 3512 3512 D Sensors : HRMSensor_LED::libhr open start!!
07-04 01:16:22.140 3512 3512 I Sensors : Grip old sensor_state 0, new sensor_state : 2048 en : 1
07-04 01:16:22.140 3512 3512 E Sensors : GripSensor write failed. ret = -1, sensor_state = 2048
07-04 01:16:22.140 3512 3512 D Sensors : HrmSpO2Sensor::handle:19 ,en:0
07-04 01:16:22.140 3512 3512 D Sensors : HrmSpO2Sensor::isEnabled:0 ,en:0, mEn:0
07-04 01:16:22.140 3512 3512 D Sensors : HrmSpO2Sensor::handle:28 ,en:0
07-04 01:16:22.140 3512 3512 D Sensors : HrmSpO2Sensor::isEnabled:0 ,en:0, mEn:0
07-04 01:16:22.140 3512 3512 D Sensors : HrmLedSensor enable: mEnabled 1, handle 20, en 0
07-04 01:16:22.140 3512 3512 D Sensors : HRMSensor_LED::enable
07-04 01:16:22.140 3512 3512 E Sensors : HRMSensor_LED::close_agc
07-04 01:16:22.140 3512 3512 D Sensors : HRMSensor led enabled:0, en:0
07-04 01:16:22.140 3512 3512 D Sensors : HrmLedSensor enable: mEnabled 0, handle 21, en 0
07-04 01:16:22.140 3512 3512 D Sensors : HrmLedSensor isEnabled:0 ,en:0
07-04 01:16:22.140 3512 3512 D Sensors : HrmSpO2Sensor::handle:18 ,en:0
07-04 01:16:22.140 3512 3512 D Sensors : HrmSpO2Sensor::isEnabled:0 ,en:0, mEn:0
07-04 01:16:22.140 3512 3512 D SensorService: [SO] ScreenOrientationSensor Registered!
07-04 01:16:22.140 3512 3512 D SensorService: HRMFusion :: libhr opened
07-04 01:16:22.140 3512 3512 D SensorService: HRMFusion_maxim::HRMFusion_maxim: Shared version Registered
07-04 01:16:22.140 3512 3512 D SensorService: HRMSensor::can not find Cal_HR
07-04 01:16:22.140 3512 3512 D SensorService: HRMSensor::can not find setModelNumber
07-04 01:16:22.140 3512 3512 D SensorService: HRMFusion_adi::HRMFusion_adi: Shared version Registered
07-04 01:16:22.140 3512 3512 D SensorService: OrientationSensor2 Registered!!!!
07-04 01:16:22.140 3512 3512 D SensorService: GravitySensor2 Registered!!!!
07-04 01:16:22.140 3512 3512 D SensorService: GravitySensor2 Registered!!!!
07-04 01:16:22.140 3512 3512 D SensorService: LinearAccelerationSensor2 Registered!!!!
07-04 01:16:22.140 3512 3924 D SensorService: nuSensorService thread starting...
07-04 01:16:22.140 3512 3923 D SensorService: new thread SensorEventAckReceiver
07-04 01:16:22.690 3512 3512 D SensorHubManager: sensorhubs_module_init()
07-04 01:16:22.690 3512 3512 E SensorHubManager: JNI: sensorhubs_get_next_module: getSensorHubList: count= 2
07-04 01:16:22.690 3512 3512 D SensorHubManager: Num SensorHub= 1
07-04 01:16:22.690 3512 3512 D SensorHubManager: found sensorhub= SensorHub, handle=0
07-04 01:16:22.690 3512 3512 E SensorHubManager: JNI: sensorhubs_get_next_module: getSensorHubList: count= 2
07-04 01:16:22.690 3512 3512 D SensorHubManager: Num SensorHub= 0
07-04 01:16:22.690 3512 3512 D SensorHubManager: found sensorhub= Gesture Sensor, handle=1
07-04 01:16:22.690 3512 3512 D SensorHubManager: registerListener: handle= 0 delay= 0 Listener= com.samsung.android.contex[email protected]7958a3
07-04 01:16:22.690 3512 3958 D SensorHubManager: =======>>> SensorHubManager Thread RUNNING <<<=======
07-04 01:16:22.690 3512 3512 E SensorHubManager: JNI: sensorhubs_enabledisable: delay= 0
07-04 01:16:22.690 3075 3075 D SensorHubService: SensorHubEventConnection: setEventRate : ns= 0
07-04 01:16:22.690 3075 3075 D SensorHubService: setEventRate: minDelay before ns= 0
07-04 01:16:22.690 3075 3075 D SensorHubService: setEventRate: ns= 1000000
07-04 01:16:22.740 3512 3965 E MotionRecognitionService: ASensorManager_getInstance
07-04 01:16:22.740 3512 3965 D SensorService: SensorEventConnection::SocketBufferSize, SystemSocketBufferSize - 102400, 2097152
07-04 01:17:00.737 3512 4555 E SensorService: getSensorList a sensor (HRM Ambient Light Canceling) without holding its required permission: com.samsung.permission.HRM_EXT
07-04 01:17:00.737 3512 4555 I SensorService: Skipped sensor HRM Ambient Light Canceling because it requires permission com.samsung.permission.HRM_EXT and app op -1
07-04 01:17:00.737 3512 4555 E SensorService: getSensorList a sensor (HRM Proximity detecting) without holding its required permission: com.samsung.permission.HRM_EXT
07-04 01:17:00.737 3512 4555 I SensorService: Skipped sensor HRM Proximity detecting because it requires permission com.samsung.permission.HRM_EXT and app op -1
07-04 01:17:00.737 3512 4555 E SensorService: getSensorList a sensor (HRMLED IR) without holding its required permission: android.permission.BODY_SENSORS
07-04 01:17:00.737 3512 4555 I SensorService: Skipped sensor HRMLED IR because it requires permission android.permission.BODY_SENSORS and app op 56
07-04 01:17:00.737 3512 4555 E SensorService: getSensorList a sensor (HRMLED RED) without holding its required permission: android.permission.BODY_SENSORS
07-04 01:17:00.737 3512 4555 I SensorService: Skipped sensor HRMLED RED because it requires permission android.permission.BODY_SENSORS and app op 56
07-04 01:17:00.737 3512 4555 E SensorService: getSensorList a sensor (MAX86900) without holding its required permission: com.samsung.permission.SSENSOR
07-04 01:17:00.737 3512 4555 I SensorService: Skipped sensor MAX86900 because it requires permission com.samsung.permission.SSENSOR and app op -1
07-04 01:17:00.737 3512 4555 E SensorService: getSensorList a sensor (HRM Sensor) without holding its required permission: com.samsung.permission.SSENSOR
07-04 01:17:00.737 3512 4555 I SensorService: Skipped sensor HRM Sensor because it requires permission com.samsung.permission.SSENSOR and app op -1
07-04 01:17:00.737 3512 4555 E SensorService: getSensorList a sensor (HeartRate Sensor) without holding its required permission: android.permission.BODY_SENSORS
07-04 01:17:00.737 3512 4555 I SensorService: Skipped sensor HeartRate Sensor because it requires permission android.permission.BODY_SENSORS and app op 56
07-04 01:17:00.957 3095 3095 E lhd : <EswCrash Assert="C:\p4view\Zero_BRCM_M_upgrade\MCU\Project\SSP_SensorHub\SH_Main.c" line="76" Arg2="0x82838E" Arg3="0x0" Arg4="0x0" ts="1426781">
Click to expand...
Click to collapse
ViniciusSilvestre said:
So, its 2018 now, and i have the same problem(exactly the same actualy) on my brand new s7, any news? did you take it to warranty service?
Click to expand...
Click to collapse
That is odd that they would do that all at once though. Sounds like a bad OTA. Sounds like someone slipped in a modded FOTA. It's been known to happen, and been known to completly break devices like this as well. Very Interesting indeed. Not even the Combination Firmware Helps?
Did this start happening after an Update or after you flashed a new firmware? Or did it start just by simply entering recovery mode with no modifications done previously?
Delgoth said:
That is odd that they would do that all at once though. Sounds like a bad OTA. Sounds like someone slipped in a modded FOTA. It's been known to happen, and been known to complete break devices like this as well. Very Interesting indeed. Not even the Combination Firmware Helps?
Did this start happening after an Update or after you flashed a new firmware? Or did it start just by simply entering recovery mode with no modifications done previously?
Click to expand...
Click to collapse
In my case it was after an ota update (not so much) I updated, everything went fine until i rebooted it a few days later, the same blue screen the op described popped up, and failed to update.
When i noticed the problem, i flashed the stock firmware using odin, (it didnt trip knox since it was a bone stock firmware downloaded from sammobile) to see if the problem would go away, needless to say it didnt. After 4 hard resets, 3 firmware flashes and an oreo update (all official, trying to preserve warranty) still the same
Combination Firmware: sorry for noob, but i didint catch this one
ViniciusSilvestre said:
In my case it was after an ota update (not so much) I updated, everything went fine until i rebooted it a few days later, the same blue screen the op described popped up, and failed to update.
When i noticed the problem, i flashed the stock firmware using odin, (it didnt trip knox since it was a bone stock firmware downloaded from sammobile) to see if the problem would go away, needless to say it didnt. After 4 hard resets, 3 firmware flashes and an oreo update (all official, trying to preserve warranty) still the same
Combination Firmware: sorry for noob, but i didint catch this one
Click to expand...
Click to collapse
Combination Firmware, or Factory Binaries, are signed by the OEM, they do not trip Knox. They are official builds, albeit factory builds without all the normal phone capabilities. they are normally used in phone repairs. They can fix all kinds of DRK, DM-Verity, and APN errors. After flashing it successfully and having it boot up initially. Reinstall a stock official rom fresh. Use the repartition and nand erase all options in ODIN when flashing the factory binary if you can. In addition to F.Reset Time and Autoreboot.
PS> I would steer very clear of that OTA build, and the one before it. You don't want that OTA even if you can get it to flash successfully.
Delgoth said:
Combination Firmware, or Factory Binaries, are signed by the OEM, they do not trip Knox. They are official builds, albeit factory builds without all the normal phone capabilities. they are normally used in phone repairs. They can fix all kinds of DRK, DM-Verity, and APN errors. After flashing it successfully and having it boot up initially. Reinstall a stock official rom fresh. Use the repartition and nand erase all options in ODIN when flashing the factory binary if you can. In addition to F.Reset Time and Autoreboot.
PS> I would steer very clear of that OTA build, and the one before it. You don't want that OTA even if you can get it to flash successfully.
Click to expand...
Click to collapse
I didint even know this existed, it might actually fix it , i will try today and get back here when im done.
Yep, never flash that ota ever again
Thank's
Little update, i couldnt find a new combination firmware, and the one that i found allways spits out an error due to sboot bin, i think im just gonna send it to samsung and see what they will do
ViniciusSilvestre said:
I didint even know this existed, it might actually fix it , i will try today and get back here when im done.
Yep, never flash that ota ever again
Thank's
Little update, i couldnt find a new combination firmware, and the one that i found allways spits out an error due to sboot bin, i think im just gonna send it to samsung and see what they will do
Click to expand...
Click to collapse
What build did you have Installed before trying to flash the combination?
Delgoth said:
What build did you have Installed before trying to flash the combination?
Click to expand...
Click to collapse
Now i have G930FXXU2ERD5 (oreo from uk). I think most likely it is not alowing me because it is a downgrade, combination is 6.0
ViniciusSilvestre said:
Now i have G930FXXU2ERD5 (oreo from uk). I think most likely it is not alowing me because it is a downgrade, combination is 6.0
Click to expand...
Click to collapse
It is the bootloader version installed. you have Revision 2. That's normally the problem when it errors on the sboot.
Did you try to install The Combination Firmware: G930FXXU2ARA2?
Delgoth said:
It is the bootloader version installed. you have Revision 2. That's normally the problem when it errors on the sboot.
Did you try to install The Combination Firmware: G930FXXU2ARA2?
Click to expand...
Click to collapse
The only places i found that version, were behind a paywall, i though it wouldnt matter but i was wrong
ViniciusSilvestre said:
The only places i found that version, were behind a paywall, i though it wouldnt matter but i was wrong
Click to expand...
Click to collapse
It might be out there somewhere else still. But you will need a revision 2 factory binary, since that's what's installed right now.
EDIT: I did find it for free. Hope it helps.
Delgoth said:
It might be out there somewhere else still. But you will need a revision 2 factory binary, since that's what's installed right now.
EDIT: I did find it for free. Hope it helps.
Click to expand...
Click to collapse
Well, you deserve an update, i ended up taking it to samsung, they say they are replacing the mobo ("basicaly" a new device i guess) i didnt try the combination firmware, i think it might still work as a potential fix, but seeing that sammy themselves are going to replace the mobo i dont know
I really thank you for all your help
ViniciusSilvestre said:
Well, you deserve an update, i ended up taking it to samsung, they say they are replacing the mobo ("basicaly" a new device i guess) i didnt try the combination firmware, i think it might still work as a potential fix, but seeing that sammy themselves are going to replace the mobo i dont know
I really thank you for all your help
Click to expand...
Click to collapse
I would say sad times, but if you actually have the F version of the device, then it's actually a good thing Samsung is fixing it. At least The S6 F Versions are unlocked fully.
Delgoth said:
I would say sad times, but if you actually have the F version of the device, then it's actually a good thing Samsung is fixing it. At least The S6 F Versions are unlocked fully.
Click to expand...
Click to collapse
Thats one good thing about brazil laws, a few years ago, carriers were prohibited to lock any phone, all phones are fully unlocked, i havent seen any phone that you cant unlock the bootloader and you can pop any sim card in and it will work

Stuck with no touchscreen without any errors to guide

I am working on a CM 12.1 tree for the Dragontouch X10. I can now boot CM, however the touchscreen is not working. It appears to register a touch as it will keep the screen from sleeping if I continue to tap it, and if the screen dims then a tap will light it back up. However it cannot click or scroll, just get the display response.
In addition if I use getevent and touch the screen, all sorts of input shows up under my touchscreen input (dev/input/event5).
The device is an allwinner sunxi device. I am using the stock kernel as allwinner never released a full kernel source. The dmesg log shows the module loading properly:
Code:
<6>[ 24.509611] +++++++++++++++++++++++++++++++++
<6>[ 24.509616] ++++++ GSLX680 new used +++++++++
<6>[ 24.509621] +++++++++++++++++++++++++++++++++
<4>[ 24.534586] GSLX680 Enter gsl_ts_probe
<4>[ 24.539043] [GSLX680] Enter gsl_ts_init_ts
<4>[ 24.900617] read 0xfc = 80 36 0 0
<4>[ 24.904415] =============gsl_load_fw start==============
<4>[ 25.489788] =============gsl_load_fw end==============
<6>[ 25.600178] CPU Budget: Temperature: 60 Limit state:1 item[1608000,4,1608000,4 0]
<6>[ 25.608771] CPU Budget:update CPU 0 cpufreq max to 1608000 min to 480000
<6>[ 25.618860] CPU Budget:update CPU 0 cpufreq max to 1608000 min to 480000
<4>[ 25.640704] #########check mem read 0xb0 = 5a 5a 5a 5a #########
<4>[ 25.647791] [GSLX680] End gsl_ts_probe
<4>[ 25.652195] ****************************************************************
logcat also shows the touchscreen driver being identified and loaded:
Code:
I/EventHub( 489): New device: id=1, fd=85, path='/dev/input/event5', name='gslX680', classes=0x15, configuration='/system/usr/idc/gslX680.idc', keyLayout='/system/usr/keylayout/Generic.kl', keyCharacterMap='/system/usr/keychars/Generic.kcm', builtinKeyboard=false, wakeMechanism=EVIOCSSUSPENDBLOCK, usingClockIoctl=true
I/InputReader( 489): Touch device 'gslX680' could not query the properties of its associated display. The device will be inoperable until the display size becomes available.
I/InputReader( 489): Device added: id=1, name='gslX680', sources=0x00001103
I/InputReader( 489): Reconfiguring input devices. changes=0x00000004
I/InputReader( 489): Device reconfigured: id=1, name='gslX680', size 1366x768, orientation 0, mode 1, display id 0
I/ActivityManager( 489): Config changes=8 {1.0 ?mcc?mnc en_US ?layoutDir sw768dp w1366dp h695dp 160dpi xlrg long land ?uimode ?night finger -keyb/v/h -nav/h s.4 themeResource=null}
Note: the line saying it could not query properties shows up in the stock logcat as well. It seems to be finding the right configuration a few lines down when it says Device reconfigured.
It also shows up properly if with dumpsys input
Code:
1: gslX680
Classes: 0x00000015
Path: /dev/input/event5
Descriptor: 7d7eeb71ea7765ef9584a43b6c32b201b90835d3
Location:
ControllerNumber: 0
UniqueId:
Identifier: bus=0x0018, vendor=0x0000, product=0x0000, version=0x0000
KeyLayoutFile: /system/usr/keylayout/Generic.kl
KeyCharacterMapFile: /system/usr/keychars/Generic.kcm
ConfigurationFile: /system/usr/idc/gslX680.idc
HaveKeyboardLayoutOverlay: false
Device 1: gslX680
Generation: 12
IsExternal: false
Sources: 0x00001103
KeyboardType: 1
Motion Ranges:
X: source=0x00001002, min=0.000, max=1365.000, flat=0.000, fuzz=0.000, resolution=0.000
Y: source=0x00001002, min=0.000, max=767.000, flat=0.000, fuzz=0.000, resolution=0.000
PRESSURE: source=0x00001002, min=0.000, max=1.000, flat=0.000, fuzz=0.000, resolution=0.000
SIZE: source=0x00001002, min=0.000, max=1.000, flat=0.000, fuzz=0.000, resolution=0.000
TOUCH_MAJOR: source=0x00001002, min=0.000, max=1567.093, flat=0.000, fuzz=0.000, resolution=0.000
TOUCH_MINOR: source=0x00001002, min=0.000, max=1567.093, flat=0.000, fuzz=0.000, resolution=0.000
TOOL_MAJOR: source=0x00001002, min=0.000, max=1567.093, flat=0.000, fuzz=0.000, resolution=0.000
TOOL_MINOR: source=0x00001002, min=0.000, max=1567.093, flat=0.000, fuzz=0.000, resolution=0.000
Keyboard Input Mapper:
Parameters:
HasAssociatedDisplay: true
OrientationAware: true
HandlesKeyRepeat: false
KeyboardType: 1
Orientation: 0
KeyDowns: 0 keys currently down
MetaState: 0x0
DownTime: 0
Touch Input Mapper:
Parameters:
GestureMode: spots
DeviceType: touchScreen
AssociatedDisplay: hasAssociatedDisplay=true, isExternal=false
OrientationAware: true
Raw Touch Axes:
X: min=0, max=1366, flat=0, fuzz=0, resolution=0
Y: min=0, max=768, flat=0, fuzz=0, resolution=0
Pressure: unknown range
TouchMajor: min=0, max=255, flat=0, fuzz=0, resolution=0
TouchMinor: unknown range
ToolMajor: min=0, max=200, flat=0, fuzz=0, resolution=0
ToolMinor: unknown range
Orientation: unknown range
Distance: unknown range
TiltX: unknown range
TiltY: unknown range
TrackingId: min=0, max=11, flat=0, fuzz=0, resolution=0
Slot: unknown range
Calibration:
touch.size.calibration: diameter
touch.size.scale: 10.000
touch.size.bias: 0.000
touch.size.isSummed: false
touch.pressure.calibration: none
touch.pressure.scale: 0.005
touch.orientation.calibration: none
touch.distance.calibration: none
touch.coverage.calibration: none
Affine Transformation:
X scale: 1.000
X ymix: 0.000
X offset: 0.000
Y xmix: 0.000
Y scale: 1.000
Y offset: 0.000
Viewport: displayId=0, orientation=0, logicalFrame=[0, 0, 1366, 768], physicalFrame=[0, 0, 1366, 768], deviceSize=[1366, 768]
SurfaceWidth: 1366px
SurfaceHeight: 768px
SurfaceLeft: 0
SurfaceTop: 0
SurfaceOrientation: 0
Translation and Scaling Factors:
XTranslate: 0.000
YTranslate: 0.000
XScale: 0.999
YScale: 0.999
XPrecision: 1.001
YPrecision: 1.001
GeometricScale: 0.999
PressureScale: 0.000
SizeScale: 0.004
OrientationScale: 0.000
DistanceScale: 0.000
HaveTilt: false
TiltXCenter: 0.000
TiltXScale: 0.000
TiltYCenter: 0.000
TiltYScale: 0.000
Last Button State: 0x00000000
Last Raw Touch: pointerCount=1
[0]: id=0, x=0, y=0, pressure=0, touchMajor=0, touchMinor=0, toolMajor=0, toolMinor=0, orientation=0, tiltX=0, tiltY=0, distance=0, toolType=1, isHovering=true
Last Cooked Touch: pointerCount=1
[0]: id=0, x=0.000, y=0.000, pressure=0.000, touchMajor=0.000, touchMinor=0.000, toolMajor=0.000, toolMinor=0.000, orientation=0.000, tilt=0.000, distance=0.000, toolType=1, isHovering=true
There are only 2 differences I can find:
First within the stock firmware the idc file is named tp.idc and is correctly picked up by the kernel module (gslX680new.ko). In my build if I do not rename the file to gslX680.idc it will not pick it up and load this configuration. Files are identical however so I don't know how this should change anything.
Second the parameters HasAssociatedDisplay and OrientationAware are both true for all devices (including the touchscreen) in dumpsys input under KeyboardMapper. In my stock dump they are false. I do not know where these parameters are set and if they have anything to do with the touchscreen device.
As I am not getting any errors, I am somewhat stuck to figure out where this is all going wrong. It seems the touchscreen may in fact be working, however the builds interpretation of where the touch is happening and delivering a "click" is not working. Any help is appreciated.

Xperia 1 - DRM keys back after locking the bootloader ?

Hello,
I just have a question, my Xperia 1 was unlocked and rooted (magisk) on Android 10.
Yesterday, I decided to lock the bootloader, everything was erased from the phone after that. The new Android installation was buggy so I tried to restore the phone using Xperia Companion.
After the restore using Xperia Companion, Now everything is working fine and I was really surprised, my DRM keys are back, I have "L1" using the DRM info app and I can watch Netflix HD content and Amazon Prime Video HD content.
How is that possible ? I thought that by unlocking the bootloader, the DRM keys are lost forever ?
Hmmm do you have any proof?
Hello,
Yes, please see my old messages, I succesfully unlocked ans rooted the device. Now see the screenshot below.
https://ibb.co/7RH2ZdG
Check with *#*#7378423#*#*
Then service info>security
Then see if any ........XXXXX error and share the screenshot.
Thanks
Hello, thanks for your Reply.
It seems that there is No error, but I have confirmation that thé device has already be unlocked
https://imgshare.io/image/screenshot-20200412-1650532.4yP8t
By thé way, i also recieved an OTAsoftware uppgrade. So this is now working too.
titigunner01 said:
By thé way, i also recieved an OTAsoftware uppgrade. So this is now working too.
Click to expand...
Click to collapse
You can receive OTA if you have just locked the bootloader.
But the things in Screenshot looks great. It was a previous way of checking the DRM keys and I don't know if only these things verify the DRM keys in latest versions too.
Is it a matter that the phone restores the DRM under locked bootloader again in Sony or did they remove the DRMs?
But what it matters is you are using apps and things like you have the DRM so may be thats good.:good:
So, after you restored stock ROM, also the boot message "can't be checked for corruption" is gone?
Yes, no message when booting.
Very strange, i wanted to know if everyone else noticed thé same thing.
titigunner01 said:
Yes, no message when booting.
Very strange, i wanted to know if everyone else noticed thé same thing.
Click to expand...
Click to collapse
Eventually I will try on my Xperia 10 II. Hope I have the same luck, thanks!
titigunner01 said:
Hello,
I just have a question, my Xperia 1 was unlocked and rooted (magisk) on Android 10.
Yesterday, I decided to lock the bootloader, everything was erased from the phone after that. The new Android installation was buggy so I tried to restore the phone using Xperia Companion.
After the restore using Xperia Companion, Now everything is working fine and I was really surprised, my DRM keys are back, I have "L1" using the DRM info app and I can watch Netflix HD content and Amazon Prime Video HD content.
How is that possible ? I thought that by unlocking the bootloader, the DRM keys are lost forever ?
Click to expand...
Click to collapse
did you lock the bootloader with flashtool?
I just want to do it too, but can`t I find a guide for xperia 1
No i locked the bootloader using command lines.
Maybe this will work also using Flashtool, Im not sure.
titigunner01 said:
No i locked the bootloader using command lines.
Maybe this will work also using Flashtool, Im not sure.
Click to expand...
Click to collapse
you using this commands?
fastboot oem lock
fastboot flashing lock
fastboot oem relock
fastboot reboot
if not, can you describe step by step how you did it?
I will
thankful to you!
Hello,
Yes, if I remember well, on fastboot mode, i used fastboot oem lock.
After the reboot of the phone, everything was reased. The new installation was really buggy so after that I recovered using Xperia Companion.
interesting - I am wondering if sony still uses the device key in TA 66667 unit and if it gets erased with the first unlock or not.
Deleted
Relock the bootloader, repair with xperia companion and drm keys are back.
Only on xperia 1, 5 and up !
Beware: even though it may look all keys are back, it is still questionable if some function/feature is not permanently missing.
I did some research and it seems xperia 1 bootloader ABL does erase device key, i.e. TA 66667 (0x1046b) unit, on unlock.
So in my opinion even though you can relock and everything looks normal, the device key gets never back.
The question is what (drm) functions are connected to it.
Here more details:
Just extracted abl from J9110_10_55.1.A.0.748_PLUSPL, posted it here:
xperia-1-J9110-55.1.A.0.748-LA2_0_Q_114-ABL-LinuxLoader.zip
Just observing the strings in it, I am not trusting SONY at all with the re-lock of xperia-1:
Code:
$ strings -a LA2_0_Q_114-ABL-LinuxLoader.pe | grep -i 'device key\|[ _]dk'
Size of device key is too large (%d > %d)
Device key is not set, setting to zero
get_dk returned err=%d
Unable to delete dk
get_hwconf_dk returned err=%d
Device Key MiscTA unit size is zero
Failed to allocate memory for Device Key
Device keys not of equal length!
hwconf_x_parser_get_hwc_dk returned err=%d
Device Key length in HWConfig is zero
Failed to get size of TA_DK_NUMBER_UNIT
Failed to delete DK
This looks very similar to stuff implemented in xz1c ABL related to unlock and TA unit 66667 (0x1046b) containing the device key erased with bootloader unlock!
You may also observe if the message "Device key is not set, setting to zero" is present in bootloader log that is stored in 0x802 TA unit (and few other following units containing older boots).
It would be interesting to test TA backup, unlock, relock, TA restore, so that device key would be back.
This tells everything:
From i d a can't see 1046b but see the same function at the bottom (ghidra output)
Code:
void sub_4DDE4()
{
int v0; // w0
__int64 v1; // x3
__int64 v2; // x4
__int64 v3; // x5
__int64 v4; // x6
__int64 v5; // x7
__int64 v6; // x0
__int64 v7; // x1
const char *v8; // x0
__int64 v9; // x2
__int64 v10; // x0
char v11; // zf
int v12; // w0
__int64 v13; // x0
__int64 v14; // x0
unsigned int v15; // w1
__int64 v16; // x2
__int64 v17; // x3
_DWORD *v18; // x4
__int64 v19; // x5
__int64 v20; // x6
__int64 v21; // x7
signed int v22; // [xsp+4h] [xbp-2Ch]
sub_440B4();
if ( v0 )
{
sub_4DF70();
v7 = v6;
v8 = "[ERROR @ %s:%d]:\nFailed to get size of TA_DK_NUMBER_UNIT\n";
v9 = 303i64;
}
else
{
if ( v22 < 1 )
goto LABEL_4;
sub_44318();
if ( !v12 )
goto LABEL_4;
sub_4DF70();
v7 = v13;
v8 = "[ERROR @ %s:%d]:\nFailed to delete DK\n";
v9 = 310i64;
}
sub_589A0(v8, v7, v9, v1, v2, v3, v4, v5);
LABEL_4:
sub_4DF5C();
if ( !v11 )
{
sub_14468(v10);
sub_4DE94(v14, v15, v16, v17, v18, v19, v20, v21);
}
}
Code:
sub_4110C();
[B][COLOR="Red"]sub_4DDE4();[/COLOR][/B]
if ( v0 )
{
sub_41100();
sub_589A0("[ERROR @ %s:%d]:\nUnable to delete dk\n", v1, 1438i64, v2, v3, v4, v5, v6);
goto LABEL_10;
}
sub_3ED48();
if ( !v7 )
{
sub_41100();
sub_589A0("[ERROR @ %s:%d]:\nFailed to delete user sensitive partitions\n", v18, 1443i64, v19, v20, v21, v22, v23);
goto LABEL_10;
}
sub_3EE20();
if ( v8 )
{
sub_41100();
v15 = v14;
v16 = "[ERROR @ %s:%d]:\nFailed to reset rollback counters, error:%d\n";
v17 = 1451i64;
}
else
{
sub_3EDF0();
if ( !v24 )
goto LABEL_10;
sub_41100();
v15 = v25;
v16 = "[ERROR @ %s:%d]:\n[B][COLOR="Red"]Failed to lock the bootloader: [/COLOR][/B]%d\n";
v17 = 1457i64;
}
ghidra
Code:
ulonglong FUN_0005dde4(void)
{
bool in_ZR;
undefined uVar1;
ulonglong uVar2;
undefined8 extraout_x0;
undefined8 local_28;
undefined8 extraout_x0_00;
undefined8 uVar3;
undefined *puVar4;
undefined uVar5;
undefined8 in_x3;
undefined7 uVar6;
undefined uVar7;
undefined8 in_x4;
undefined7 uVar8;
undefined uVar9;
undefined8 in_x5;
undefined7 uVar10;
undefined uVar11;
undefined8 in_x6;
undefined7 uVar12;
undefined uVar13;
undefined8 in_x7;
undefined7 uVar14;
ulonglong uVar15;
undefined in_stack_ffffffffffffffd0;
undefined uVar16;
int local_2c;
uVar14 = (undefined7)((ulonglong)in_x7 >> 8);
uVar13 = (undefined)in_x7;
uVar12 = (undefined7)((ulonglong)in_x6 >> 8);
uVar11 = (undefined)in_x6;
uVar10 = (undefined7)((ulonglong)in_x5 >> 8);
uVar9 = (undefined)in_x5;
uVar8 = (undefined7)((ulonglong)in_x4 >> 8);
uVar7 = (undefined)in_x4;
uVar6 = (undefined7)((ulonglong)in_x3 >> 8);
uVar5 = (undefined)in_x3;
puVar4 = &stack0xffffffffffffffd4;
uVar3 = 0x1046b;
local_28 = DAT_000a90c0;
uVar2 = FUN_000540b4(2);
uVar16 = (undefined)local_2c;
uVar1 = (undefined)uVar2;
if ((int)uVar2 == 0) {
in_ZR = local_2c == 1;
if (local_2c < 1) {
uVar15 = 0;
goto LAB_0005de34;
}
[COLOR="Blue"][B] uVar3 = 0x1046b; // drm key unit[/B][/COLOR]
[COLOR="Red"] uVar2 = FUN_00054318(2); // partition 2
uVar1 = (undefined)uVar2;
uVar15 = uVar2 & 0xffffffff;
if ((int)uVar2 == 0) goto LAB_0005de34;
FUN_0005df70(uVar2,uVar3,puVar4,CONCAT71(uVar6,uVar5),CONCAT71(uVar8,uVar7),
CONCAT71(uVar10,uVar9),CONCAT71(uVar12,uVar11),CONCAT71(uVar14,uVar13));
_uVar1 = "[ERROR @ %s:%d]:\nFailed to delete DK\n";[/COLOR]
puVar4 = (undefined *)0x136;
uVar3 = extraout_x0_00;
}
else {
uVar15 = uVar2 & 0xffffffff;
FUN_0005df70(uVar2,uVar3,puVar4,CONCAT71(uVar6,uVar5),CONCAT71(uVar8,uVar7),
CONCAT71(uVar10,uVar9),CONCAT71(uVar12,uVar11),CONCAT71(uVar14,uVar13));
_uVar1 = "[ERROR @ %s:%d]:\nFailed to get size of TA_DK_NUMBER_UNIT\n";
puVar4 = (undefined *)0x12f;
uVar3 = extraout_x0;
}
uVar1 = FUN_000689a0(_uVar1,uVar3,puVar4,CONCAT71(uVar6,uVar5),CONCAT71(uVar8,uVar7),
CONCAT71(uVar10,uVar9),CONCAT71(uVar12,uVar11),CONCAT71(uVar14,uVar13));
LAB_0005de34:
local_28 = FUN_0005df5c(uVar1,(char)uVar3,(char)puVar4,uVar5,uVar7,uVar9,uVar11,uVar13,
in_stack_ffffffffffffffd0,uVar16,local_28);
if (in_ZR) {
return uVar15;
}
// WARNING: Subroutine does not return
FUN_00024468(local_28,uVar3,puVar4,CONCAT71(uVar6,uVar5),CONCAT71(uVar8,uVar7),
CONCAT71(uVar10,uVar9),CONCAT71(uVar12,uVar11),CONCAT71(uVar14,uVar13));
}
Its very evidently that function sub_4DDE4 is called at the start of lock function, I can tell that drm key is bye bye after you unlock phone, curently I'm unable to figure out what is done with oem lock command & why widevine keys is back but definitelly drm key is lost forever, indication for that is message inside service menu "is even unlocked = yes" !
So how lock is done, in short:
1. drm key bye bye
2. user sensitive partitions deleted (thats why device no more boot & must use sony pc companion in order to repair)
3. rollback counter reset
4. bootloader locked
Some good news for bootloader unlocked xperia 10 owners! I'm managed to get all back after patching secd
Code:
07-25 17:10:29.745 8470 8471 I [email protected]: start init_thread
07-25 17:10:29.745 8470 8471 I [email protected]: listeners registered
07-25 17:10:29.745 8470 8471 D QSEECOMAPI: QSEECom_get_handle sb_length = 0x200
07-25 17:10:29.746 8470 8471 D QSEECOMAPI: App is already loaded QSEE and app id = 131074
07-25 17:10:29.746 579 579 I SELinux : avc: received setenforce notice (enforcing=0)
07-25 17:10:29.747 579 579 W hwservicemanager: Detected instance of [email protected]::IDeviceSecurity (pid: 8470) registering over instance of or with base of [email protected]::IDeviceSecurity (pid: 879).
07-25 17:10:29.751 8470 8471 D QSEECOMAPI: QSEECom_dealloc_memory
07-25 17:10:29.751 8470 8471 D QSEECOMAPI: QSEECom_shutdown_app, app_id = 131074
07-25 17:10:29.752 8470 8471 I libdevice_security_static: get_rooting_status.cpp:80 rooting_status 0
07-25 17:10:29.752 8470 8471 I [email protected]: the bootloader is OK, try to init suntory
07-25 17:10:29.752 8470 8471 I libsuntory_static: utils_blob.cpp:462 process miscTA unit 2022
07-25 17:10:29.754 8470 8471 I libsuntory_static: utils_blob.cpp:497 found blob CKB
07-25 17:10:29.754 8470 8471 I libsuntory_static: utils_blob.cpp:521 match found at index 0
07-25 17:10:29.755 8470 8471 D QSEECOMAPI: QSEECom_get_handle sb_length = 0x4100
07-25 17:10:29.755 8470 8471 D QSEECOMAPI: App is not loaded in QSEE
07-25 17:10:29.755 8470 8471 D QSEECOMAPI: app_arch = 2, total_files = 9
07-25 17:10:29.788 8470 8471 D QSEECOMAPI: Loaded image: APP id = 1179652
07-25 17:10:29.789 8470 8471 D QSEECOMAPI: QSEECom_get_handle sb_length = 0xc00
07-25 17:10:29.789 8470 8471 D QSEECOMAPI: App is already loaded QSEE and app id = 131074
07-25 17:10:29.793 8470 8471 D QSEECOMAPI: QSEECom_dealloc_memory
07-25 17:10:29.793 8470 8471 D QSEECOMAPI: QSEECom_shutdown_app, app_id = 131074
07-25 17:10:29.798 8470 8471 D QSEECOMAPI: QSEECom_dealloc_memory
07-25 17:10:29.798 8470 8471 D QSEECOMAPI: QSEECom_shutdown_app, app_id = 1179652
07-25 17:10:29.798 8470 8471 I libsuntory_static: utils_blob.cpp:121 blob verisfication status: Blob OK
07-25 17:10:29.798 8470 8471 I libsuntory_static: utils_blob.cpp:462 process miscTA unit 2023
07-25 17:10:29.801 8470 8471 I libsuntory_static: utils_blob.cpp:497 found blob WIDEVINE
07-25 17:10:29.801 8470 8471 I libsuntory_static: utils_blob.cpp:521 match found at index 1
07-25 17:10:29.801 8470 8471 D QSEECOMAPI: QSEECom_get_handle sb_length = 0x4100
07-25 17:10:29.801 8470 8471 D QSEECOMAPI: App is not loaded in QSEE
07-25 17:10:29.801 8470 8471 D QSEECOMAPI: app_arch = 2, total_files = 9
07-25 17:10:29.835 8470 8471 D QSEECOMAPI: Loaded image: APP id = 1245188
07-25 17:10:29.835 8470 8471 D QSEECOMAPI: QSEECom_get_handle sb_length = 0xc00
07-25 17:10:29.835 8470 8471 D QSEECOMAPI: App is already loaded QSEE and app id = 131074
07-25 17:10:29.838 8470 8471 D QSEECOMAPI: QSEECom_dealloc_memory
07-25 17:10:29.838 8470 8471 D QSEECOMAPI: QSEECom_shutdown_app, app_id = 131074
07-25 17:10:29.843 8470 8471 D QSEECOMAPI: QSEECom_dealloc_memory
07-25 17:10:29.843 8470 8471 D QSEECOMAPI: QSEECom_shutdown_app, app_id = 1245188
07-25 17:10:29.844 8470 8471 I libsuntory_static: utils_blob.cpp:121 blob verisfication status: Blob OK
07-25 17:10:29.844 8470 8471 I libsuntory_static: utils_blob.cpp:462 process miscTA unit 2024
07-25 17:10:29.846 8470 8471 E libsuntory_static: utils_blob.cpp:477 invalid blob size 1
07-25 17:10:29.846 8470 8471 I libsuntory_static: utils_blob.cpp:462 process miscTA unit 2025
07-25 17:10:29.848 8470 8471 E libsuntory_static: utils_blob.cpp:477 invalid blob size 0
07-25 17:10:29.848 8470 8471 I libsuntory_static: utils_blob.cpp:462 process miscTA unit 2026
07-25 17:10:29.849 8470 8471 E libsuntory_static: utils_blob.cpp:477 invalid blob size 0
07-25 17:10:29.849 8470 8471 I libsuntory_static: utils_blob.cpp:462 process miscTA unit 2027
07-25 17:10:29.850 8470 8471 E libsuntory_static: utils_blob.cpp:477 invalid blob size 0
07-25 17:10:29.850 8470 8471 I libsuntory_static: utils_blob.cpp:462 process miscTA unit 2028
07-25 17:10:29.851 8470 8471 E libsuntory_static: utils_blob.cpp:477 invalid blob size 0
07-25 17:10:29.851 8470 8471 I libsuntory_static: utils_blob.cpp:462 process miscTA unit 2029
07-25 17:10:29.852 8470 8471 E libsuntory_static: utils_blob.cpp:477 invalid blob size 0
07-25 17:10:29.852 8470 8471 I libsuntory_static: utils_blob.cpp:462 process miscTA unit 2030
07-25 17:10:29.853 8470 8471 E libsuntory_static: utils_blob.cpp:477 invalid blob size 0
07-25 17:10:29.853 8470 8471 I libsuntory_static: utils_blob.cpp:462 process miscTA unit 2031
07-25 17:10:29.855 8470 8471 E libsuntory_static: utils_blob.cpp:477 invalid blob size 0
07-25 17:10:29.855 8470 8471 I libsuntory_static: utils_blob.cpp:462 process miscTA unit 2032
07-25 17:10:29.856 8470 8471 E libsuntory_static: utils_blob.cpp:477 invalid blob size 0
07-25 17:10:29.856 8470 8471 I libsuntory_static: utils_blob.cpp:462 process miscTA unit 2033
07-25 17:10:29.857 8470 8471 E libsuntory_static: utils_blob.cpp:477 invalid blob size 0
07-25 17:10:29.857 8470 8471 I libsuntory_static: utils_blob.cpp:462 process miscTA unit 2034
07-25 17:10:29.858 8470 8471 E libsuntory_static: utils_blob.cpp:477 invalid blob size 0
07-25 17:10:29.858 8470 8471 D QSEECOMAPI: QSEECom_get_handle sb_length = 0xa000
07-25 17:10:29.858 8470 8471 D QSEECOMAPI: App is already loaded QSEE and app id = 65537
07-25 17:10:29.862 8470 8471 E KeymasterUtils: TA API Major Version: 4
07-25 17:10:29.862 8470 8471 E KeymasterUtils: TA API Minor Version: 0
07-25 17:10:29.862 8470 8471 E KeymasterUtils: TA Major Version: 4
07-25 17:10:29.862 8470 8471 E KeymasterUtils: TA Minor Version: 162
07-25 17:10:29.866 622 628 D DrmLibTime: got the req here! ret=0
07-25 17:10:29.866 622 628 D DrmLibTime: command id, time_cmd_id = 770
07-25 17:10:29.866 622 628 D DrmLibTime: time_getutcsec starts!
07-25 17:10:29.866 622 628 D DrmLibTime: QSEE Time Listener: time_getutcsec
07-25 17:10:29.866 622 628 D DrmLibTime: QSEE Time Listener: get_utc_seconds
07-25 17:10:29.866 622 628 D DrmLibTime: QSEE Time Listener: time_get_modem_time
07-25 17:10:29.866 622 628 D DrmLibTime: QSEE Time Listener: Checking if ATS_MODEM is set or not.
07-25 17:10:29.866 622 628 D QC-time-services: Lib:time_genoff_operation: pargs->base = 13
07-25 17:10:29.866 622 628 D QC-time-services: Lib:time_genoff_operation: pargs->operation = 2
07-25 17:10:29.866 622 628 D QC-time-services: Lib:time_genoff_operation: pargs->ts_val = 0
07-25 17:10:29.866 622 628 D QC-time-services: Lib:time_genoff_operation: Send to server passed!!
07-25 17:10:29.866 792 800 D QC-time-services: Daemon: Connection accepted:time_genoff
07-25 17:10:29.867 792 8472 D QC-time-services: Daemon:Received base = 13, unit = 1, operation = 2,value = 0
07-25 17:10:29.867 792 8472 D QC-time-services: Daemon:genoff_opr: Base = 13, val = 0, operation = 2
07-25 17:10:29.867 792 8472 D QC-time-services: offset is: 1 for base: 13
07-25 17:10:29.867 622 628 E QC-time-services: Receive Passed == base = 13, unit = 1, operation = 2, result = 0
07-25 17:10:29.867 622 628 D DrmLibTime: QSEE Time Listener: ATS_MODEM is set. Try to retrieve it.
07-25 17:10:29.867 792 800 E QC-time-services: Daemon: Time-services: Waiting to acceptconnection
07-25 17:10:29.867 792 800 D QC-time-services: Daemon: Connection accepted:time_genoff
07-25 17:10:29.867 792 8473 D QC-time-services: Daemon:Received base = 13, unit = 1, operation = 1,value = 0
07-25 17:10:29.868 792 8473 D QC-time-services: Daemon:genoff_opr: Base = 13, val = 0, operation = 1
07-25 17:10:29.868 792 8473 D QC-time-services: Daemon: genoff get for 13
07-25 17:10:29.868 792 8473 D QC-time-services: Daemon:Value read from QTimer mseconds = 1307648
07-25 17:10:29.868 792 8473 D QC-time-services: Daemon:Value read from RTC mseconds on boot = 48462179000
07-25 17:10:29.868 792 8473 D QC-time-services: Daemon:Value read from QTimer mseconds = 1307648
07-25 17:10:29.868 792 8473 D QC-time-services: Daemon:Value read from generic offset = 1547226365549
07-25 17:10:29.868 792 8473 D QC-time-services: Daemon:Delta read on boot mseconds = 48462155118
07-25 17:10:29.868 792 8473 D QC-time-services: Daemon:Final Time = 1595689828315
07-25 17:10:29.868 622 628 D DrmLibTime: QSEE Time Listener: Time GenOff - seconds: 1595689828
07-25 17:10:29.868 622 628 D DrmLibTime: time_getutcsec returns 0, sec = 1595689828; nsec = 0
07-25 17:10:29.868 622 628 D DrmLibTime: time_getutcsec finished!
07-25 17:10:29.868 622 628 D DrmLibTime: iotcl_continue_command finished! and return 0
07-25 17:10:29.868 622 628 D DrmLibTime: before calling ioctl to read the next time_cmd
07-25 17:10:29.868 792 800 E QC-time-services: Daemon: Time-services: Waiting to acceptconnection
07-25 17:10:29.887 8470 8471 D QSEECOMAPI: QSEECom_get_handle sb_length = 0x200
07-25 17:10:29.888 8470 8471 D QSEECOMAPI: App is already loaded QSEE and app id = 131074
07-25 17:10:29.889 8470 8471 D QSEECOMAPI: QSEECom_dealloc_memory
07-25 17:10:29.889 8470 8471 D QSEECOMAPI: QSEECom_shutdown_app, app_id = 131074
07-25 17:10:29.889 8470 8471 I libdevice_security_static: get_imei.cpp:180 imei STR munjeni edited, size 15
07-25 17:10:29.899 8470 8471 E KeyMasterHalDevice: Attest key send cmd failed
07-25 17:10:29.899 8470 8471 E KeyMasterHalDevice: ret: 0
07-25 17:10:29.899 8470 8471 E KeyMasterHalDevice: resp->status: -10003
07-25 17:10:29.906 8470 8471 D QSEECOMAPI: QSEECom_dealloc_memory
07-25 17:10:29.906 8470 8471 D QSEECOMAPI: QSEECom_shutdown_app, app_id = 65537
07-25 17:10:29.906 8470 8471 I [email protected]: key id ANDROID_ATTEST status PROVISIONED
07-25 17:10:29.907 587 587 I tad : MiscTA Unit 2021:
07-25 17:10:29.907 587 587 I tad : WRITTEN (Size 20)
07-25 17:10:29.930 587 587 I tad : Actual erase/write to flash done (count 4, time 1595689829).
07-25 17:10:29.930 587 587 I tad : MiscTA: Write of unit 2021 completed - OK
07-25 17:10:29.930 8470 8471 I [email protected]: suntory initialized
07-25 17:10:29.930 8470 8471 I [email protected]: wait for post_fs proprty
07-25 17:10:29.930 8470 8471 I [email protected]: post_fs property triggered
07-25 17:10:29.930 8470 8471 D QSEECOMAPI: QSEECom_get_handle sb_length = 0x200
07-25 17:10:29.930 8470 8471 D QSEECOMAPI: App is already loaded QSEE and app id = 131074
07-25 17:10:29.932 8470 8471 D QSEECOMAPI: QSEECom_dealloc_memory
07-25 17:10:29.932 8470 8471 D QSEECOMAPI: QSEECom_shutdown_app, app_id = 131074
07-25 17:10:29.932 8470 8471 I libdevice_security_static: get_rooting_status.cpp:80 rooting_status 2
07-25 17:10:29.935 8470 8471 D QSEECOMAPI: QSEECom_get_handle sb_length = 0x200
07-25 17:10:29.935 8470 8471 D QSEECOMAPI: App is already loaded QSEE and app id = 131074
07-25 17:10:29.936 8470 8471 D QSEECOMAPI: QSEECom_dealloc_memory
07-25 17:10:29.936 8470 8471 D QSEECOMAPI: QSEECom_shutdown_app, app_id = 131074
07-25 17:10:29.936 8470 8471 I libdevice_security_static: get_security_config.cpp:68 security configuration 1
07-25 17:10:29.936 8470 8471 D QSEECOMAPI: QSEECom_get_handle sb_length = 0x83c0
07-25 17:10:29.936 8470 8471 D QSEECOMAPI: App is not loaded in QSEE
07-25 17:10:29.936 8470 8471 D QSEECOMAPI: app_arch = 2, total_files = 9
07-25 17:10:29.973 8470 8471 D QSEECOMAPI: Loaded image: APP id = 1310724
07-25 17:10:29.974 8470 8471 D QSEECOMAPI: QSEECom_get_handle sb_length = 0xc00
07-25 17:10:29.974 8470 8471 D QSEECOMAPI: App is already loaded QSEE and app id = 131074
07-25 17:10:29.977 8470 8471 D QSEECOMAPI: QSEECom_dealloc_memory
07-25 17:10:29.977 8470 8471 D QSEECOMAPI: QSEECom_shutdown_app, app_id = 131074
07-25 17:10:29.980 8470 8471 D QSEECOMAPI: QSEECom_dealloc_memory
07-25 17:10:29.980 8470 8471 D QSEECOMAPI: QSEECom_shutdown_app, app_id = 1310724
07-25 17:10:29.982 8470 8471 D QSEECOMAPI: QSEECom_get_handle sb_length = 0x83c0
07-25 17:10:29.982 8470 8471 D QSEECOMAPI: App is not loaded in QSEE
07-25 17:10:29.982 8470 8471 D QSEECOMAPI: app_arch = 2, total_files = 9
07-25 17:10:30.016 8470 8471 D QSEECOMAPI: Loaded image: APP id = 1376260
07-25 17:10:30.016 8470 8471 D QSEECOMAPI: QSEECom_get_handle sb_length = 0xc00
07-25 17:10:30.016 8470 8471 D QSEECOMAPI: App is already loaded QSEE and app id = 131074
07-25 17:10:30.020 8470 8471 D QSEECOMAPI: QSEECom_dealloc_memory
07-25 17:10:30.020 8470 8471 D QSEECOMAPI: QSEECom_shutdown_app, app_id = 131074
07-25 17:10:30.023 8470 8471 D QSEECOMAPI: QSEECom_dealloc_memory
07-25 17:10:30.023 8470 8471 D QSEECOMAPI: QSEECom_shutdown_app, app_id = 1376260
07-25 17:10:30.024 8470 8471 I [email protected]: credmgr initialized
07-25 17:10:30.025 8470 8471 I [email protected]: "vendor.keyprovd.suntory.prov" property set
07-25 17:10:33.798 853 853 I [email protected]: type=1400 audit(0.0:2107): avc: denied { search } for name="kgsl" dev="sysfs" ino=28936 scontext=u:r:hal_memtrack_default:s0 tcontext=u:object_r:sysfs_kgsl:s0 tclass=dir permissive=1 ppid=1 pcomm="init" pgid=1 pgcomm="init"
07-25 17:10:36.689 8372 8372 W adbd : timeout expired while flushing socket, closing
Edit:
Now all ready https://forum.xda-developers.com/xp...m-fix-drm-fix-unlocked-bootloader-53-t4138269

Categories

Resources