Summery:
Hboot 1.55 - S-Off attempted with Runrunner. Stock RUU; unlocked boot loader. Failed due to lack of unsecured kernel and root. Fastboot commands crash Hboot. Can't install recovery, can't relock bootloader.
Details:
After researching for a few days how to properly S-Off, trying to be absolutely certain to execute it properly, my S-Off attempt failed leaving me with an Hboot that crashes when using Fastboot.
What I did, and why:
I had been installing and using TN's GE 4.4 roms. When it updated to 4.4.2 S-Off was required in order to update.
Began to research Rumrunners S-Off solution. Learned a Sense based ROM would be required. Attempted to flash Viper but for some reason touch was unresponsive.
I read all the instructions and prerequisites for rumrunner and learned/assumed that you only need to be unlocked.
From rumrunner.us:
"5. Your device must be HTCDEV unlocked or rooted unless using rumrunner with a device blocked by htcdev (e.g. m7wlv)"
So, I relocked the bootloader, flashed HTC's RUU exe, then re-unlocked bootloader. Assumed that would be sufficient.
Got Fastboot and ADB working properly and ran runrunner. About 5-10 mins in to the process it returned an error that said process had failed due to lack of root and lack of an unsecured kernel.
After that, I attempted to reinstall TWRP. Fastboot starts to send the img and halts Hboot. Any and all fastboot commands sent to Hboot crashes it. OS still boots and works, but I'm stuck as far as flashing anything custom. And I'm stuck unlocked, "fastboot oem lock" crashes Hboot to.
I'm I permanently stuck?
Sent from my HTCONE using xda app-developers app
Related
I am trying to return my HTC One to stock (practice run just in case). I have an all stock rom and recovery. I try booting into CWM temporarily with
Code:
fastboot boot recovery.img
where recovery.img is the CWM recovery partition image. This should allow me to flash a root zip for temp root.
It indicates that flashing was successful and that the device will reboot. It doesn't reboot however and also no longer responds to the physical buttons (volume up/down and power). I can reset the device and it then goes on as if nothing happened.
I have HBOOT 1.54 and OS 2.24.401.3. I suspect it has something to do with the HBOOT version. This would also explain the segfaults with revone I'm getting.
Can I downgrade my bootloader to a lower version so it becomes vulnerable for revone?
bloodsplatter said:
I am trying to return my HTC One to stock (practice run just in case). I have an all stock rom and recovery. I try booting into CWM temporarily with
Code:
fastboot boot recovery.img
where recovery.img is the CWM recovery partition image. This should allow me to flash a root zip for temp root.
It indicates that flashing was successful and that the device will reboot. It doesn't reboot however and also no longer responds to the physical buttons (volume up/down and power). I can reset the device and it then goes on as if nothing happened.
I have HBOOT 1.54 and OS 2.24.401.3. I suspect it has something to do with the HBOOT version. This would also explain the segfaults with revone I'm getting.
Can I downgrade my bootloader to a lower version so it becomes vulnerable for revone?
Click to expand...
Click to collapse
1- "fastboot boot recovery.img" no longer works in hboot 1.54, HTC remove that
2- when it hangs, to "unhang" it, just unplug the USB cable and bootloader should return to normal (did for me)
3- downgrading is only possible if you're S-Off
nkk71 said:
1- "fastboot boot recovery.img" no longer works in hboot 1.54, HTC remove that
2- when it hangs, to "unhang" it, just unplug the USB cable and bootloader should return to normal (did for me)
3- downgrading is only possible if you're S-Off
Click to expand...
Click to collapse
****e
I tried a hard reset, will try that as well
Can I get S-Off? Moonshine didn't work because it couldn't reboot from fastboot
bloodsplatter said:
****e
I tried a hard reset, will try that as well
Can I get S-Off? Moonshine didn't work because it couldn't reboot from fastboot
Click to expand...
Click to collapse
Unfortunately, for 1.54 there is no s-off atm, hopefully in the future, but nobody knows.
So I'm stuck at the moment? Crud
bloodsplatter said:
So I'm stuck at the moment? Crud
Click to expand...
Click to collapse
For S-Off, yes.
But you can still flash stock rom (since you have a nandroid), and then flash the corresponding stock recovery, and finally relock bootloader.
Though be careful with the stock rom, if it's 1.xx and your firmware is already on 2.x that render your touchscreen unresponsive and you'll have to use an OTG cable + mouse to get the OTAs to 2.x
nkk71 said:
For S-Off, yes.
But you can still flash stock rom (since you have a nandroid), and then flash the corresponding stock recovery, and finally relock bootloader.
Though be careful with the stock rom, if it's 1.xx and your firmware is already on 2.x that render your touchscreen unresponsive and you'll have to use an OTG cable + mouse to get the OTAs to 2.x
Click to expand...
Click to collapse
I already flashed stock rom through nandroid, one with all the OTA's in it, but I can't remove the tampered mark in the bootloader? Or am I still getting it because I'm using the wrong RUU? My CID is HTC_E11, I always picked one of the RUU's that goes for WWE, but recently S-On is preventing me from flashing them since all of them are older than the software version of the phone.
To remove the Tampered warning you need to install stock recovery.
Sent from my HTC One using XDA Premium 4 mobile app
Hi,
Trying to install TWRP on my phone after gotten it back from service.
The bootloader is locked, the phone IS S-OFF, hboot 1.44.
When I'm trying to flash the recovery.img, i get Remote Denied when running the fastboot command.. I guess this is because the bootloader is locked?
Is there a way to unlock the bootloader WITHOUT using the htcdev method? The solutions i have found requires root, and i don't have that.. but to get root i need the recovery to flash superuser in right?
raysv said:
Hi,
Trying to install TWRP on my phone after gotten it back from service.
The bootloader is locked, the phone IS S-OFF, hboot 1.44.
When I'm trying to flash the recovery.img, i get Remote Denied when running the fastboot command.. I guess this is because the bootloader is locked?
Is there a way to unlock the bootloader WITHOUT using the htcdev method? The solutions i have found requires root, and i don't have that.. but to get root i need the recovery to flash superuser in right?
Click to expand...
Click to collapse
use revone with hboot 1.44: http://forum.xda-developers.com/showthread.php?t=2314582
I think it's "revone -l" (lowercase L)
EDIT: but with s-off you should be able to flash it, can you copy/paste your command prompt
The other way is to create a ZIP to flash in rebootRUU mode to flash a customer recovery. Can't remember off the top of my head how to do it, though
fastboot flash recovery recovery.img
Then I'm getting "FAILED (remote: not allowed)
I can't use revone since i don't have superuser and therfor can't "su"
Yeah creating a zip file would be a way to go, but don't know how.. But if anyone have a guide for that it would be appriciated
You can't flash in ruu mode without s-off.
So if revone doesn't work you, you don't have any other choice.
Also revone won't work if your hboot is newer than June
As i said, i do have S-OFF so flashing in ruu mode should work
I would suggest to try... download the 1.44 Hboot RUU package (we need the android file from it) and twrp or clockworkmod
Unzip 1.44hboot zip, remove the hboot file, and move twrp/cwm and rename to recovery.img. Edit the android-info.txt to match your specifics (see MID changing thread to get an idea) and zip it back up. Flash in fastboot!
No guarentee of this process working is implied.
raysv said:
As i said, i do have S-OFF so flashing in ruu mode should work
Click to expand...
Click to collapse
revone has temproot exploit, so should work.
Guys, I'm in a bit of a dilemma. I was trying to flash an RUU to downgrade but unfortunately it gave me an error code, so now I'm stuck at the fastboot which is RELOCKED and S-ON, with no Recovery or Rom. What are my options? I'm unable to install any recovery as I'm S-on. My HBOOT is 1.44.
Unlock bootloader (yes you can with S-On)
Install custom recovery (yes you can with S-On)
Adb push or adb sideload or use OTG cable to install a 4.2.x based rom.. Do NOT install 4.3 or higher sense.
Good luck!
Could you please give me details of how I can unlock the bootloader? As per my knowleddge, Revone & Moonshine wont work. How else can I unlock the re-locked bootloader?
http://bit.ly/1jBYwXW
Trying to return my one back to stock (unlocked, s-off) to send in for purple tint repair.
I tried a few different methods involving the RUUs but never had any luck:
1. The RUU.exe for my specific phone (telus), always crashed when htc_fastboot.exe stopped responding.
2. Since there was no RUU.zip for the Telus version I extracted it out of the exe and tried flashing manually, but again fastboot stops responding.
3. Tried changing the CID to CWS__001 and using the matching RUU.exe, and while fastboot didn't crash it wasn't able to complete either (can't remember the exact error).
So I decided to use the Telus Guru Reset from htc1guru, which worked fine.
Now I need to get rid of the tampered flag and lock bootloader/s-on, but I can't boot a custom recovery with fastboot boot recovery.img.
I need to boot into recovery to either use the guru bootloader reset tool or to temporarily install superuser, so that I can manually remove the tampered flag.
Tried the latest version of both TWRP and CWM Touch, and also tried fastboot erase cache before each.
Every time fastboot succesfully pushes the img to the phone and outputs booting..., OKAY, and finished, but the phone gets stuck at the bootloader and never actually boots to the recovery (have to force power off).
Any ideas/help would be greatly appreciated.
xerockz said:
Trying to return my one back to stock (unlocked, s-off) to send in for purple tint repair.
I tried a few different methods involving the RUUs but never had any luck:
1. The RUU.exe for my specific phone (telus), always crashed when htc_fastboot.exe stopped responding.
2. Since there was no RUU.zip for the Telus version I extracted it out of the exe and tried flashing manually, but again fastboot stops responding.
3. Tried changing the CID to CWS__001 and using the matching RUU.exe, and while fastboot didn't crash it wasn't able to complete either (can't remember the exact error).
So I decided to use the Telus Guru Reset from htc1guru, which worked fine.
Now I need to get rid of the tampered flag and lock bootloader/s-on, but I can't boot a custom recovery with fastboot boot recovery.img.
I need to boot into recovery to either use the guru bootloader reset tool or to temporarily install superuser, so that I can manually remove the tampered flag.
Tried the latest version of both TWRP and CWM Touch, and also tried fastboot erase cache before each.
Every time fastboot succesfully pushes the img to the phone and outputs booting..., OKAY, and finished, but the phone gets stuck at the bootloader and never actually boots to the recovery (have to force power off).
Any ideas/help would be greatly appreciated.
Click to expand...
Click to collapse
boot recover has not worked sense hboot 1.44
clsA said:
boot recover has not worked sense hboot 1.44
Click to expand...
Click to collapse
I guess that explains the problem as I am on 1.57. Just re-flashed that guru reset, and checked the option to install superuser and busybox this time so now I should be able to fix the tampered flag and lock, without having to worry about booting to a custom recovery.
Okay so I got it locked and tampered removed, however I cannot remove Superuser.apk, the su binary, or busybox now that my bootloader is locked (using adb shell, su, rm -r /system/app/Superuser.apk). Tried factory reseting and the files are still there, not sure how I can get rid of them!
edit: I've found this old post, not sure if it's still relevant, or exactly what it's doing.
xerockz said:
Okay so I got it locked and tampered removed, however I cannot remove Superuser.apk, the su binary, or busybox now that my bootloader is locked (using adb shell, su, rm -r /system/app/Superuser.apk). Tried factory reseting and the files are still there, not sure how I can get rid of them!
edit: I've found this old post, not sure if it's still relevant, or exactly what it's doing.
Click to expand...
Click to collapse
Why not just run the Guru Reset again and select stock recovery and no root.
@xerockz try to install SuperSU app from Play Store. Open it and let update the binaries (normal!) and if successfull, you will after reboot get able to unroot for good in the app.
tetakpatalked from N7100
Hey guys, thanks for the suggestions. I ended up getting it all back to stock.
I believe the reason the RUUs weren't working was because I was on hboot 1.57.
I flashed 1.44 and then was unable to get fastboot to recognize the device under windows 8.1 (common driver issue apparently). I couldn't be bothered to try to fix the driver issue so I booted into a live Fedora usb which then let me use fastboot and flash the appropriate ruu.zip.
Now the ruu had hboot 1.55 so I was once again unable to fastboot boot recovery.img.
I ended up flashing TWRP again, trying the guru bootloader reset over and over, (for tampered and lock) wiped cache/dalvik, still wouldn't work.
Finally got it to work after fastboot format cache.
Now I was locked and no tampered flag, but still had TWRP flashed.
Tried pulling the signed_recovery.img out of the RUU zip and flashing it but obviously that doesn't work since I was locked at this point.
So I just flashed the entire RUU again, which fortunately worked even though I was locked.
Now I just had to S-ON, update OTA, and factory reset (through sense settings) and I'm completely back to stock.
14 hours of headache later and I finally got this thing reset.
It's unfortunate the return to stock guides fail to mention the RUUs don't work if you are on a newer hboot, and also that you need/can flash the RUU AFTER fixing tampered/locking.
xerockz said:
It's unfortunate the return to stock guides fail to mention the RUUs don't work if you are on a newer hboot, and also that you need/can flash the RUU AFTER fixing tampered/locking.
Click to expand...
Click to collapse
beg to differ [GUIDE] [02-MAR-2014] nkk71's SuperGUIDE to returning 100% back to stock
but glad you got everything sorted out :good: :good:
Hi all,
i was s-off and unlocked and need to go back to stock.
I flashed RUU Zip M7_UL_JB_50_HTC_Europe_1.20.401.1_Radio_4A.13.3227.06_10.27.1127.01_release_308001_signed_2_4.zip from fastboot,
then installed TWRP and rooted, then used revone to lock boot loader, and then i did
fastboot oem writesecureflag 3
to s-on.
at this point i expected to be able to use an RUU exe to clear up the recovery and then do OTA updates.
But, the RUU fails each time with an unknown error.
So i have rooted again and attempted to s-off again with revone, but revone fails with error -1.
My boot loader screen now shows TAMPERED and UNLOCKED, and i have boot 1.43
Im not sure how to proceed. I've now got an old rom, s-on and am unable to update to anything newer.
Anyone have any ideas please?
thanks
slippyr4 said:
Hi all,
i was s-off and unlocked and need to go back to stock.
I flashed RUU Zip M7_UL_JB_50_HTC_Europe_1.20.401.1_Radio_4A.13.3227.06_10.27.1127.01_release_308001_signed_2_4.zip from fastboot,
then installed TWRP and rooted, then used revone to lock boot loader, and then i did
fastboot oem writesecureflag 3
to s-on.
at this point i expected to be able to use an RUU exe to clear up the recovery and then do OTA updates.
But, the RUU fails each time with an unknown error.
So i have rooted again and attempted to s-off again with revone, but revone fails with error -1.
My boot loader screen now shows TAMPERED and UNLOCKED, and i have boot 1.43
Im not sure how to proceed. I've now got an old rom, s-on and am unable to update to anything newer.
Anyone have any ideas please?
thanks
Click to expand...
Click to collapse
Lock the bootloader and flash this RUU
http://www.androidruu.com/getdownlo...31.27_10.31.1131.05_release_310878_signed.exe
slippyr4 said:
Hi all,
i was s-off and unlocked and need to go back to stock.
I flashed RUU Zip M7_UL_JB_50_HTC_Europe_1.20.401.1_Radio_4A.13.3227.06_10.27.1127.01_release_308001_signed_2_4.zip from fastboot,
then installed TWRP and rooted, then used revone to lock boot loader, and then i did
fastboot oem writesecureflag 3
to s-on.
at this point i expected to be able to use an RUU exe to clear up the recovery and then do OTA updates.
But, the RUU fails each time with an unknown error.
So i have rooted again and attempted to s-off again with revone, but revone fails with error -1.
My boot loader screen now shows TAMPERED and UNLOCKED, and i have boot 1.43
Im not sure how to proceed. I've now got an old rom, s-on and am unable to update to anything newer.
Anyone have any ideas please?
thanks
Click to expand...
Click to collapse
1- do NOT use the 1.20 ruu "Note: M7_UL .401. users don't use 1.20.401.1, use 1.28.401.7 instead"
2- http://forum.xda-developers.com/showthread.php?t=2541082
3- s-off on old hboots http://forum.xda-developers.com/showpost.php?p=48955645&postcount=251
4- signed ruu (only needed if already LOCKED and S-ON): http://androidruu.com/getdownload.p...31.27_10.31.1131.05_release_310878_signed.exe
5- FAQs http://forum.xda-developers.com/showpost.php?p=52135024&postcount=2
nkk71 said:
1- do NOT use the 1.20 ruu "Note: M7_UL .401. users don't use 1.20.401.1, use 1.28.401.7 instead"
2- http://forum.xda-developers.com/showthread.php?t=2541082
3- s-off on old hboots http://forum.xda-developers.com/showpost.php?p=48955645&postcount=251
4- signed ruu (only needed if already LOCKED and S-ON): http://androidruu.com/getdownload.p...31.27_10.31.1131.05_release_310878_signed.exe
5- FAQs http://forum.xda-developers.com/showpost.php?p=52135024&postcount=2
Click to expand...
Click to collapse
Thanks for the help. Will that RUU give me HBOOT 1.44 then?
slippyr4 said:
Thanks for the help. Will that RUU give me HBOOT 1.44 then?
Click to expand...
Click to collapse
yes 1.28.401.7 is hboot 1.44
I;ve managed to flash that RUU ok, but:-
revone still didn't work (-1 error), so I want to try to follow the instructions i was linked to above (flashing android revolution).
However, my boot loader is now RELOCKED. I've tried to unlock it again with fastboot flash unlocktoken Unlock_codebin and it appears to work, i.e. i get the warning screen and choose "YES" but when i reboot back into HBOOT, it's still RELOCKED>
any ideas?