Database Develop

Don't care about this thread , please close it !

This thread was something , now it is not so please close it !

Ohh , Just found out that I built a universal tutorial i will add it to General android hacking and stuff

Reserved !

seaskyways said:
Ohh , Just found out that I built a universal tutorial i will add it to General android hacking and stuff
Click to expand...
Click to collapse
Theres already a tool out that does this for you :lol
Sent from my HTC Sensation XL with Beats Audio X315e using Tapatalk 2

That tool created by simon , it is only for the MTD based devices , where as this is for the eMMC based devices !

just tried the commands 4a & 4b, dont see anything mentioning mmcblk:
C:\Users\Shami\nb>fastboot oem listpartitions
...
(bootloader) [ERR] Command error !!!
OKAY [ 0.000s]
finished. total time: 0.000s
C:\Users\Shami\nb>fastboot oem boot
...
(bootloader) setup_tag addr=0xC0000100 cmdline add=0x8D0C4094
(bootloader) TAG:Ramdisk OK
(bootloader) TAG:smi ok, size = 0
(bootloader) TAG:hwid 0x0
(bootloader) TAG:skuid 0x2DD01
(bootloader) TAG:hero panel = 0x89003A
(bootloader) TAG:engineerid = 0x1
(bootloader) MCP dual-die
(bootloader) MCP dual-die
(bootloader) TAG:mono-die = 0x0
(bootloader) TAG: PS ID = 0x0
(bootloader) Device CID is not super CID
(bootloader) CID is super CID
(bootloader) Backup CID is HTC__001
(bootloader) setting->cid::HTC__001
(bootloader) serial number: HT1BVVZ03075
(bootloader) commandline from head: no_console_suspend=1
(bootloader) command line length =634
(bootloader) active commandline: board_runnymede.disable_uart2=0 board_ru
(bootloader) nnymede.usb_h2w_sw=0 board_runnymede.disable_sdcard=0 diag.e
(bootloader) nabled=0 board_runnymede.debug_uart=0 smisize=0 userdata_sel
(bootloader) =0 androidboot.emmc=true androidboot.pagesize=4096 skuid=0 d
(bootloader) dt=20 androidboot.lb=1 androidboot.baseband=3822.10.10.12_M
(bootloader) androidboot.cid=HTC__001 androidboot.devicerev=2 androidboo
(bootloader) t.batt_poweron=good_battery androidboot.carrier=HTC-WWE andr
(bootloader) oidboot.mid=PI3920000 androidboot.keycaps=qwerty androidboot
(bootloader) .dq=PASS androidboot.mode=normal androidboot.serialno=HT1BVV
(bootloader) Z03075 androidboot.bootloader=1.25.0004 androidboot.nledhw=0
(bootloader) zygote_oneshot=off kmemleak=off no_console_suspend=1
(bootloader) aARM_Partion[0].name=misc
(bootloader) aARM_Partion[1].name=recovery
(bootloader) aARM_Partion[2].name=boot
(bootloader) aARM_Partion[3].name=system
(bootloader) aARM_Partion[4].name=cache
(bootloader) aARM_Partion[5].name=userdata
(bootloader) aARM_Partion[6].name=devlog
(bootloader) aARM_Partion[7].name=pdata
(bootloader) aARM_Partion[8].name=modem_st1
(bootloader) aARM_Partion[9].name=modem_st2
(bootloader) partition number=10
(bootloader) Valid partition num=10
(bootloader) jump_to_kernel: machine_id(3597), tags_addr(0x14400100), ker
(bootloader) nel_addr(0x14408000)
(bootloader) -------------------hboot boot time:22891 msec
FAILED (status read failed (Too many links))
finished. total time: 10.920s
C:\Users\Shami\nb>

http://forum.xda-developers.com/showthread.php?t=1619986
edit:
Well, I've got some comments on that..
For whom is interested of knowing the OEM commands, in fastboot write "fastboot oem h".
"adb pull /dev/block/"""mmcblock123""" misc.img" won't work as this is a partition, not a folder.
I suggest using this:
Code:
adb shell
su
dd if=/dev/block/mmcblk0p17 of=/sdcard/misc.img
exit
exit
adb pull /sdcard/misc.img misc.img
adb shell rm /sdcard/misc.img
Well, basically, my bootloader is locked, but for some reason, I have "HTCUUpdate", so it's kinda strange.
It would be great if anybody could post his misc.img of his unlocked bootloader so I can compare and tell what's wrong.
Cheers!

Thanks claudenegm ! will add the code !

I doubt if this works, the unlock_status flag is stored in radio NVRAM and what is stored in misc partition is for RUUs to check it.
Since I don't have a locked device, I can't test it but what claudenegm said kinda confirms this.
EDIT
I can confirm patching the misc partition doesn't have any effects on unlock status.

Hi.....seaskyways i am follow the step by step to done it extract misc.img from my htc sensation xl...but i can't get the part,
'9- Around the 10th line you will find at the right HTC.......... , now edit this and type after the C :
U , so that it is HTCU....... , for Unlocking the bootloader .
R , so that it is HTCR....... , for ReLocking the bootloader .
. , that it is HTC....... , for reversing the bootloader to original state ***LOCKED OOW***"
HTCxxxxx.......it is HTC_044,behind HTCU_044?
Sorry that my poor english hope you understand what i ask and thanks for reply ^^

kenny_chai_2071 said:
Hi.....seaskyways i am follow the step by step to done it extract misc.img from my htc sensation xl...but i can't get the part,
'9- Around the 10th line you will find at the right HTC.......... , now edit this and type after the C :
U , so that it is HTCU....... , for Unlocking the bootloader .
R , so that it is HTCR....... , for ReLocking the bootloader .
. , that it is HTC....... , for reversing the bootloader to original state ***LOCKED OOW***"
HTCxxxxx.......it is HTC_044,behind HTCU_044?
Sorry that my poor english hope you understand what i ask and thanks for reply ^^
Click to expand...
Click to collapse
First of all, this method ain't gonna work since the locked flag is stored in Radio NVRAM and what is stored in misc partition is for RUUs.
Second, "OOW" in "LOCKED OOW" means "Out Of Warranty"!

Oh i.c thanks fardjad , it mean it is still need to using Htc Dev to unlocking bootloader for done all?

kenny_chai_2071 said:
Oh i.c thanks fardjad , it mean it is still need to using Htc Dev to unlocking bootloader for done all?
Click to expand...
Click to collapse
If you need warranty, you shouldn't unlock your bootloader at all.
You can also S-OFF your device by flashing unlimited.io HBOOTs. For doing so, you only need to temp-root your device.
There is also a detailed guide in Sensation XL General Section that might help.

Thanks fardjab i am get my devices s-off with every thing.

fardjad said:
First of all, this method ain't gonna work since the locked flag is stored in Radio NVRAM and what is stored in misc partition is for RUUs.
Second, "OOW" in "LOCKED OOW" means "Out Of Warranty"!
Click to expand...
Click to collapse
It worked for me on my previous Wildfire S , all I did is take mtd0 as misc.img , edit it , flash it with flash_image , all done , i have my bootloader Unlocked without HTC ! Anyways it misses alot , I will just delete it ...

seaskyways said:
It worked for me on my previous Wildfire S , all I did is take mtd0 as misc.img , edit it , flash it with flash_image , all done , i have my bootloader Unlocked without HTC ! Anyways it misses alot , I will just delete it ...
Click to expand...
Click to collapse
I didn't mean to offense or anything , just wanted to report that it's not working on SXL and tried to explain why.
I my self really like to try and discuss these things...
And if I were you I'd rather not to delete it. It may be useful for many people in many ways...

[Q] Corrupted partitions?

Hello, I have a problem with my razr i xt890 and I can't find out the solution.
I had omar's rom (sept 2013 versions) on my phone (unlocked bootloader) and I tried to flash a new version using twrp but it stops/freezes when I wipe /system or /cache.
Also I can't mount /data.
I've tried with all recovery images from this thread [RECOVERY] New Installer for CWM / TouchCWM / TWRP / STOCK Recovery, but no luck.
I can get into fastboot and in recovery without problems, but I can't wipe the partitions.
Right now I'm trying to wipe /system, /data & /cache using cwm but it can't mount /data and it's stuck on formatting /cache.
Do you have any ideas?
Thank you.
[Details from fastboot]
AP Fastboot flash mode (secure boot)
20.25 (sha - )
IFWI Info: 42.26
eMMC Info: Size 8GB
Barcode: N/A
Battery (Okay): 4.09v
Transfer Mode: USB Connected
ROM-Key: Motorola-key
Modem Status: NA
C:\>fastboot getvar all
(bootloader) version-bootloader: 0x2025
(bootloader) product: smi
(bootloader) secure: yes
(bootloader) rom-key: motorola-key
(bootloader) model-id: 0268
(bootloader) cid: 7
(bootloader) version: 0.5
(bootloader) uid:
(bootloader) max-download-size: 104857600
(bootloader) emmc-size: 8GB
(bootloader) qe: qe 1/1
(bootloader) unlocked: yes
(bootloader) is-warranty-void: yes
(bootloader) ifwi: 42.26
(bootloader) cpu: Intel(R) Atom(TM) CPU Z2480 @ 2.00GHz
(bootloader) kernel: droidboot
(bootloader) battery: capacity: 73, voltage: 4053750, temperature: 290
(bootloader) modem-status: n/a

U could try to wipe the partitions through fastboot

I can't erase partitions from fastboot.
Output from device (fastboot)
read from /dev/block/mmcblk0 failed: I/O error
E:read_intel_version_from_mmc: Failed to read OSIP header from sector0!
E:Failed to read version for bos
read from /dev/block/mmcblk0 failed: I/O error
E:Failed to read partition gpt_main
I tried to flash the original rom from motorola with rsd lite but still no luck.
Can't write to mmc
I have also tried the solution from this thread http://forum.xda-developers.com/showthread.php?t=2184877, but still no luck
Is the internal sd card damaged/broken?

U did use JB versions of ifwi, motoboot and the other file? If so and it won't flash through the xfstk flasher, we can't help u. Sorry.

maybe you have to flash a stock rom with RSD lite, maybe with that, it'll be resolve...

I did flash with xfstk flasher successfully, but when i'm in fastboot the phone can't read or write to internal sd.
I have tried with rsd lite to flash the original but failed since the device can't write to the internal sd.
Any suggestions (or may I have to give up)?

Phone write protected? Or freezed?

So in a preview attepmt to fix my phone , i discovered that dont mater what rom i flash, ether its via fastboot, or regular recovery or TWRP, phone always comes to the same state, even if i use the erase comands on fastboot, or try to format partitions on twrp, once i reboot the phone, it comes back to the original state, even pictures or music, stay there intact after delete them....
Wich leads me here to ask for some help again
My phone its an xt1063 ,the latest build, runing Blur_Version.21.11.23.titan_retug wich stops me from flashing another rom via stock recovery as there are no builds for 21.11.23. Its there something i can check to see if my phone its write protected or freezed? Thanks for your time and help .
Code:
C:\mfastboot-v2>fastboot getvar all > command.txt
(bootloader) version: 0.5
(bootloader) version-bootloader: 4807(*)
(bootloader) product: titan
(bootloader) secure: yes
(bootloader) hwrev: 0x8400
(bootloader) radio: 0x1
(bootloader) emmc: 8GB Sandisk REV=06 PRV=07 TYPE=17
(bootloader) ram: 1024MB Elpida S4 SDRAM DIE=4Gb
(bootloader) cpu: MSM8226 CS
(bootloader) serialno: ZX1D3239LM
(bootloader) cid: 0x0009
(bootloader) channelid: 0x8d
(bootloader) uid: D59CBB060F000000000000000000
(bootloader) unlocked: yes
(bootloader) iswarrantyvoid: yes
(bootloader) mot_sst: 3
(bootloader) max-download-size: 536870912
(bootloader) reason: Volume down key pressed
(bootloader) imei: Why its emei so important?
(bootloader) meid:
(bootloader) date: 10-23-2014
(bootloader) sku: XT1063
(bootloader) iccid:
(bootloader) cust_md5:
(bootloader) max-sparse-size: 268435456
(bootloader) current-time: "Tue Dec 2 3:44:40 UTC 2014"
(bootloader) ro.build.fingerprint[0]: motorola/titan_retuglb/titan_umts:
(bootloader) ro.build.fingerprint[1]: 4.4.4/KXB21.85-23/21:user/release-
(bootloader) ro.build.fingerprint[2]: keys
(bootloader) ro.build.version.full[0]: Blur_Version.21.11.23.titan_retug
(bootloader) ro.build.version.full[1]: lb.retuglb.en.US
(bootloader) ro.build.version.qcom[0]: AU_LINUX_ANDROID_LNX.LA.3.5.1_RB1
(bootloader) ro.build.version.qcom[1]: .04.04.02.048.045
(bootloader) version-baseband:
(bootloader) kernel.version[0]: Linux version 3.4.42-g668a77b ([email protected]
(bootloader) kernel.version[1]: ilclbld53) (gcc version 4.7 (GCC) ) #1 S
(bootloader) kernel.version[2]: MP PREEMPT Tue Aug 26 20:21:50 CDT 2014
(bootloader) sdi.git: git=MBM-NG-V48.07-0-gdc5aeaf
(bootloader) sbl1.git: git=MBM-NG-V48.07-0-g683cb0c
(bootloader) rpm.git: git=MBM-NG-V48.07-0-g71b1aae-dirty
(bootloader) tz.git: git=MBM-NG-V48.07-0-ga27c415
(bootloader) aboot.git: git=MBM-NG-V48.07-0-ge875a20
(bootloader) partition-type: raw
(bootloader) partition-size:
(bootloader) qe: qe 0/0
(bootloader) productid: ZX1D3239LM
(bootloader) sutinfo:
all: listed above
finished. total time: 0.088s

so, am i doing it wrong? its there something i can do for someone to help me? are there anyone whos interested in such a weird problem? i know it dosnt happen often and at the same time, cant find nothing here or in google, thats why i dare to ask for help in here.
Thanks for your attention, but can anyone explain to me why im not getting any help? so i can fix it,thanks again.

Sorry man,I have no clue what is happening with your phone. Maybe it´s got something to do with writeprotection. Replying just to push your thread for some of the cracks around here can check this out?
All the best to you!

Wolfcity said:
Sorry man,I have no clue what is happening with your phone. Maybe it´s got something to do with writeprotection. Replying just to push your thread for some of the cracks around here can check this out?
All the best to you!
Click to expand...
Click to collapse
Glad is a problem thats not easy to fix than thinking im just being ignored im still trying things to see if i can fix it.
edit: i might be out of luck, i have the exact same problem as this guy http://forum.xda-developers.com/showthread.php?t=1967620 he did not found a solution, probably a hardware problem, but ill keep looking.

Same here

what have you tried?

I tried wiping everything through recovery, fixing permissions, formating partitions, wiping through bootloader, flashing stock kk with no result. When I first saw the problem I was like nah not big deal but no one has managed to solve it

Did you try?
adb shell
getprop ro.boot.write_protect
What is returned from this command 0 or 1?

Tonal4Nagual said:
Did you try?
adb shell
getprop ro.boot.write_protect
What is returned from this command 0 or 1?
Click to expand...
Click to collapse
i get
0

Then your system partition is not write protected.
Sent from my XT1068 using XDA Free mobile app

so for me, the only thing i was not being able to try, is to flash an original rom , even better, but i think it dosnt exists, flash the rom that the phone is asking for
Code:
phone has (motorola/titan_retuglb/titan_umts:4.4.4/KXB23)
i really have no idea wich original phone rom comes after that one. I tried to modify an original 5.0.2 rom
Code:
Blur_Version.21.11.17.titan_retuaws.retuaws.en.US
modify the updater-script script to acept the current rom i have or even erase the part that checks it, but neither work, i get installation aborted. So if someone knows how to modify original roms ,pack them back again , and be able to flash via original recovery, that would be awsome so i can try one more thing.

You propably can't flash anything not original through stock recovery.
Sent from my XT1068 using XDA Free mobile app

i tried to unpack , found the string that checks for the version installed on the phone, modifed that in 3 files , metadata.gpb,metadata , and updater-script, repacked, and when i try to install, i get installation aborted.....

ried to format partitions as per instructed here http://android-revolution-hd.blogspot.mx/2013/10/fix-data-htc-one.html no luck...

so today i tried to install RETLA_XT1063_4.4.4_KXB21.85-24_cid12_CFC_SVC.xml via fastboot, and no go, i couldnt fin an origial rom for the same so i could try to install via original recovery, i also tried the philz recovery and tried to format partitions with it, and instal varius roms, with no luck. im running out of ideas at this point, but tomorrow maight get more, its just frustating that its been 5 days trying to resurect this phone.... any help or feedback from other members with the same problem would be apreciated,

looks like im along on this boat.....i tried a couple of more roms, no good outcome ...will keep looking...

abispac said:
looks like im along on this boat.....i tried a couple of more roms, no good outcome ...will keep looking...
Click to expand...
Click to collapse
do you have a twrp of original rom (even if it doesnt flash) i can figure out original rom from it and then find full firmware and TRY to make a easy installer for you - but i'm thinking this may fail too as im thinking corrupted partiton thats gonna need linux to fix

reefuge said:
do you have a twrp of original rom (even if it doesnt flash) i can figure out original rom from it and then find full firmware and TRY to make a easy installer for you - but i'm thinking this may fail too as im thinking corrupted partiton thats gonna need linux to fix
Click to expand...
Click to collapse
Do you have any suggestion for the storage? When I thry to format using fastboot I get tha raw format is not supported

xGiorgos said:
Do you have any suggestion for the storage? When I thry to format using fastboot I get tha raw format is not supported
Click to expand...
Click to collapse
what are you trying to format /system /cache /userdata ?

reefuge said:
what are you trying to format /system /cache /userdata ?
Click to expand...
Click to collapse
all of them

Can't Get USB Debugging / ADB to work WiN 7 32bit

Hi All not to sure what is going on but i'll try to explain as much as best as i can hopefully someone help i can get my phone to show up with usb debugging enabled windows device manager just shows it as R1 HD with a yellow " ! " forcing it to install as ADB interface does do much it installs but does not show in adb with "adb devices" phone has debugging turned on and ive installed android aio driver pack from androidmtk.com didn't help though im at a loss my computer recognizes the phone in mtp or ptp if i turn off usb debugging but like i said just shows up as R1 HD with an exclamation mark either way in device manager so im guessing its driver related but i can't find the right driver so i really would be grateful to get some help.
phone version : BLU_R0011UU_V17_GENERIC 15-11-2016 14:41
Build Number: MRA58K

Are you running Windows 7 or 10, 32 bits or 64 bits ? running MTK's usb drivers ? using the OEM Blu usb cable ? tried a different usb port ? Is your Settings > Security > Unknown Sources enabled or disabled - toggle it and reconnect, any difference ?
Check for possible usb drivers conflict, uninstall those & reboot and then try a fresh install, on a different port, with a different PS and/or OS, or a Linux machine (gotta loved my old Dell Laptop D410 with new life, as good as a Chromebook.) Look under Device Manager & check for hidden/unknown devices.

Letitride said:
Are you running Windows 7 or 10, 32 bits or 64 bits ? running MTK's usb drivers ? using the OEM Blu usb cable ? tried a different usb port ? Is your Settings > Security > Unknown Sources enabled or disabled - toggle it and reconnect, any difference ?
Check for possible usb drivers conflict, uninstall those & reboot and then try a fresh install, on a different port, with a different PS and/or OS, or a Linux machine (gotta loved my old Dell Laptop D410 with new life, as good as a Chromebook.) Look under Device Manager & check for hidden/unknown devices.
Click to expand...
Click to collapse
windows 7 32bit. mtk drivers and unknown sources are already enabled also for some reason oem unlock is not in the developer options it should be i thought on my current firm version..

darkensx said:
windows 7 32bit. mtk drivers and unknown sources are already enabled also for some reason oem unlock is not in the developer options it should be i thought on my current firm version..
Click to expand...
Click to collapse
Hmmm, is your bootloader locked or somehow got relocked after an OTA update/flash ?? How long have you owned this - rooted or not, rolled back the firmware ??
Do a manual reboot into bootloader (without using ADB) and post what those values are - especially about firmware, bootloader & unlock status ? pre-loader version ?
Backup any settings & important files on your R1 HD first, pull out any storage mSD card, do a factory reset - and - if you are sure that it is not bootloader LOCKED - download & run one of the dirty-cow-batch file (don't use the newest one as it didn't work on my other R1 HD now on the modified non-Prime version, was getting an error message when I tried to unlock & root it - one of the older one with the Linux option is what I used)
I then installed TWRP, flashed the modified factory rom, ran the debloat batch file also and flashed the latest SuperUser for good measure along with Busybox.

Letitride said:
Hmmm, is your bootloader locked or somehow got relocked after an OTA update/flash ?? How long have you owned this - rooted or not, rolled back the firmware ??
Do a manual reboot into bootloader (without using ADB) and post what those values are - especially about firmware, bootloader & unlock status ? pre-loader version ?
Backup any settings & important files on your R1 HD first, pull out any storage mSD card, do a factory reset - and - if you are sure that it is not bootloader LOCKED - download & run one of the dirty-cow-batch file (don't use the newest one as it didn't work on my other R1 HD now on the modified non-Prime version, was getting an error message when I tried to unlock & root it - one of the older one with the Linux option is what I used)
I then installed TWRP, flashed the modified factory rom, ran the debloat batch file also and flashed the latest SuperUser for good measure along with Busybox.
Click to expand...
Click to collapse
this phone i got second hand guy only had it 4 days i got it yesterday it was factory reset and afaik the phone was not ever modded, unlocked, rooted etc. is reconized in adb on my win 10 64 bit pc
as far as bootloader status these are the values produced from " fastboot getvar all " :
(bootloader) max-download-size: 0x8000000
(bootloader) partition-size:flashinfo: 1000000
(bootloader) partition-type:flashinfo: raw data
(bootloader) partition-size:userdata: 32000000
(bootloader) partition-type:userdata: ext4
(bootloader) partition-size:cache: 19000000
(bootloader) partition-type:cache: ext4
(bootloader) partition-size:system: a7000000
(bootloader) partition-type:system: ext4
(bootloader) partition-size:metadata: 2500000
(bootloader) partition-type:metadata: raw data
(bootloader) partition-size:nvdata: 2000000
(bootloader) partition-type:nvdata: ext4
(bootloader) partition-size:frp: 100000
(bootloader) partition-type:frp: raw data
(bootloader) partition-size:tee2: 500000
(bootloader) partition-type:tee2: raw data
(bootloader) partition-size:tee1: 500000
(bootloader) partition-type:tee1: raw data
(bootloader) partition-size:keystore: 800000
(bootloader) partition-type:keystore: raw data
(bootloader) partition-size:secro: 600000
(bootloader) partition-type:secro: raw data
(bootloader) partition-sizeemkeystore: 200000
(bootloader) partition-typeemkeystore: raw data
(bootloader) partition-size:seccfg: 80000
(bootloader) partition-type:seccfg: raw data
(bootloader) partition-size:expdb: a00000
(bootloader) partition-type:expdb: raw data
(bootloader) partition-size:logo: 800000
(bootloader) partition-type:logo: raw data
(bootloader) partition-size:recovery: 1000000
(bootloader) partition-type:recovery: raw data
(bootloader) partition-size:boot: 1000000
(bootloader) partition-type:boot: raw data
(bootloader) partition-sizeara: 80000
(bootloader) partition-typeara: raw data
(bootloader) partition-size:lk: 80000
(bootloader) partition-type:lk: raw data
(bootloader) partition-sizerotect2: a00000
(bootloader) partition-typerotect2: ext4
(bootloader) partition-sizerotect1: a00000
(bootloader) partition-typerotect1: ext4
(bootloader) partition-size:nvram: 500000
(bootloader) partition-type:nvram: raw data
(bootloader) partition-sizeroinfo: 300000
(bootloader) partition-typeroinfo: raw data
(bootloader) partition-sizereloader: 40000
(bootloader) partition-typereloader: raw data
(bootloader) off-mode-charge: 1
(bootloader) warranty: yes
(bootloader) unlocked: no
(bootloader) secure: yes
(bootloader) kernel: lk
(bootloader) product: P6601
(bootloader) version-preloader: 0.1.00
(bootloader) version: 0.5
all: Done!!
finished. total time: 0.202s

darkensx said:
this phone i got second hand guy only had it 4 days i got it yesterday it was factory reset and afaik the phone was not ever modded, unlocked, rooted etc. is reconized in adb on my win 10 64 bit pc
as far as bootloader status these are the values produced from " fastboot getvar all " :
(bootloader) partition-sizereloader: 40000
(bootloader) partition-typereloader: raw data
(bootloader) off-mode-charge: 1
(bootloader) warranty: yes
(bootloader) unlocked: no
(bootloader) secure: yes
(bootloader) kernel: lk
(bootloader) product: P6601
(bootloader) version-preloader: 0.1.00
(bootloader) version: 0.5
all: Done!!
finished. total time: 0.202s
Click to expand...
Click to collapse
OK, from the last few lines - it indicated your device has an unlockable preloader/bootloader (yet to be done) and once it is, you can root it and install TWRP, and flash the "modified" stock ROM, i.e V2.85
See this thread/post - read the first page & last few pages about some of the discussion, use V10 of the tool - it worked on mine, and if it doesn't - try V8 also.
Make sure you installed & have working ADB and the MTK usb drivers (uninstall & reinstall)
https://forum.xda-developers.com/r1-hd/how-to/unlock-tool-t3561333
See this about running the batch file.
https://forum.xda-developers.com/r1-hd/how-to/blu-r1-hd-v6-6-dirtycowed-f-amazon-root-t3490882
Make a note of any error messages on screen. Have fun.

issues with fastboot

Just got a used xz1 compact. I've been rooting and flashing android phones for years, so I'm not a total noob. Nevertheless, I find myself a bit stuck on an issue I've never experienced before.
So, first step to me was to unlock the bootloader so that i can flash twrp and the unofficial lineage 16 from modpunk. So I do the usual thing of getting the code from the sony website, opening the dev-settings in the stock android and clicking "allow unlock", rebooting to fastboot mode and then:
Code:
$ fastboot oem unlock 0xCODEHERE
Well, so I didn't get what I expected. Instead of a success message, I got a message that said "command failed". But then, on a subsequent try, I got the message "already unlocked". Then, I tried a reboot, and I see a warning screen saying "device cannot be checked for for corruption, please lock bootloader". Then it enters the Xperia splash screen and never progresses. Well, that's not too big of an issue since I don't really want the stock ROM anyway. So I go ahead and try to flash twrp (modpunk's version for xz1 compact) and I get:
Code:
$ fastboot flash -v recovery twrp-3.3.1-0-lilac-pie-5.img
fastboot: verbose: target didn't report max-download-size
Sending 'recovery' (34548 KB) FAILED (remote: 'unknown command')
fastboot: error: Command failed
So that's a bit discouraging. I also tried to see what I could find with "fastboot getvar all", and I was surprised that I couldn't even get any debugging info. The `devices` command seems normal, tho:
Code:
$ fastboot devices
XXXXXXXXX fastboot
$ fastboot getvar all
getvar:all FAILED (remote: 'GetVar Variable Not found')
Finished. Total time: 0.002s
Also related, I tried the sony flashtool, which I'm already familiar with because my old phone is a Z3 Compact (see, not my first rodeo). When I try to connect in fastboot mode with flashtool, the flashtool menu says "device connected in fastboot mode" followed immediately by "device disconnected". I notice that in the stderr from flashtool there's a message from libusb which is associated:
Code:
libusb_get_string_descriptor_ascii : I/O Errors
So, that's not encouraging. So, I wonder if the unlocking command ended up failing in a partially done way, leaving things broken. Let me know if you have ideas on what I might try next. One other note, I'm using the same laptop and usb ports that have worked in the past for flashing my z3 compact. The cable is a bit of an unknown though. I'm using the usb->usbc cable that came with the phone. But I've also just tried some of other usb cables I have around the house with an adapter for usbc.
A heads up, I'm on linux with no Windows machine available. I'm technically competent and I'd prefer detailed hypotheses to "try x". But I'm all ears. Anyone have ideas?
-----
Update:
I realized that there was a chance at least some of my issue was due to usb-c support in my kernel. So I built a 5.0 kernel and rebooted. The nice thing is that now `fastboot getvar all` is working. That's very encouraging. Here are the details:
Code:
(bootloader) hw-revision:20001
(bootloader) unlocked:yes
(bootloader) off-mode-charge:0
(bootloader) charger-screen-enabled:0
(bootloader) battery-soc-ok:yes
(bootloader) battery-voltage:4269
(bootloader) version-baseband:1308-8921_47.2.A.10.107
(bootloader) version-bootloader:1306-5035_X_Boot_MSM8998_LA2.0_P_114
(bootloader) erase-block-size: 0x1000
(bootloader) logical-block-size: 0x1000
(bootloader) variant:MSM UFS
(bootloader) partition-type:xblbak:raw
(bootloader) partition-size:xblbak: 0x3F5000
(bootloader) partition-type:xbl:raw
(bootloader) partition-size:xbl: 0x3F5000
(bootloader) partition-type:userdata:ext4
(bootloader) partition-size:userdata: 0x587D76000
(bootloader) partition-type:system:ext4
(bootloader) partition-size:system: 0x138800000
(bootloader) partition-type:vendor:raw
(bootloader) partition-size:vendor: 0x60000000
(bootloader) partition-type:oem:raw
(bootloader) partition-size:oem: 0x19000000
(bootloader) partition-type:rdimage:raw
(bootloader) partition-size:rdimage: 0x2000000
(bootloader) partition-type:fsmetadata:raw
(bootloader) partition-size:fsmetadata: 0x101000
(bootloader) partition-type:Qnovo:raw
(bootloader) partition-size:Qnovo: 0x1800000
(bootloader) partition-type:diag:raw
(bootloader) partition-size:diag: 0x2000000
(bootloader) partition-type:appslog:raw
(bootloader) partition-size:appslog: 0x1000000
(bootloader) partition-type:vbmeta:raw
(bootloader) partition-size:vbmeta: 0x10000
(bootloader) partition-type:frp:raw
(bootloader) partition-size:frp: 0x80000
(bootloader) partition-type:keystore:raw
(bootloader) partition-size:keystore: 0x80000
(bootloader) partition-type:misc:raw
(bootloader) partition-size:misc: 0x100000
(bootloader) partition-type:cache:ext4
(bootloader) partition-size:cache: 0x17C00000
(bootloader) partition-type:ssd:raw
(bootloader) partition-size:ssd: 0x2000
(bootloader) partition-type:fsc:raw
(bootloader) partition-size:fsc: 0x1000
(bootloader) partition-type:modemst2:raw
(bootloader) partition-size:modemst2: 0x200000
(bootloader) partition-type:modemst1:raw
(bootloader) partition-size:modemst1: 0x200000
(bootloader) partition-type:ddr:raw
(bootloader) partition-size:ddr: 0x100000
(bootloader) partition-type:FOTAKernel:raw
(bootloader) partition-size:FOTAKernel: 0x4000000
(bootloader) partition-type:logfs:raw
(bootloader) partition-size:logfs: 0x800000
(bootloader) partition-type:toolsfv:raw
(bootloader) partition-size:toolsfv: 0x100000
(bootloader) partition-type:limits:raw
(bootloader) partition-size:limits: 0x1000
(bootloader) partition-type:splash:raw
(bootloader) partition-size:splash: 0x20A4000
(bootloader) partition-type:dpo:raw
(bootloader) partition-size:dpo: 0x1000
(bootloader) partition-type:msadp:raw
(bootloader) partition-size:msadp: 0x40000
(bootloader) partition-type:apdp:raw
(bootloader) partition-size:apdp: 0x40000
(bootloader) partition-type:bluetooth:raw
(bootloader) partition-size:bluetooth: 0x100000
(bootloader) partition-type:boot:raw
(bootloader) partition-size:boot: 0x4000000
(bootloader) partition-type:dsp:raw
(bootloader) partition-size:dsp: 0x1000000
(bootloader) partition-type:modem:raw
(bootloader) partition-size:modem: 0x6E00000
(bootloader) partition-type:sec:raw
(bootloader) partition-size:sec: 0x4000
(bootloader) partition-type:fsg:raw
(bootloader) partition-size:fsg: 0x180000
(bootloader) partition-type:persist:raw
(bootloader) partition-size:persist: 0x2000000
(bootloader) partition-type:xflkeystorebak:raw
(bootloader) partition-size:xflkeystorebak: 0x20000
(bootloader) partition-type:xflkeystore:raw
(bootloader) partition-size:xflkeystore: 0x20000
(bootloader) partition-type:tzxflbak:raw
(bootloader) partition-size:tzxflbak: 0x80000
(bootloader) partition-type:tzxfl:raw
(bootloader) partition-size:tzxfl: 0x80000
(bootloader) partition-type:tzxflattestbak:raw
(bootloader) partition-size:tzxflattestbak: 0x80000
(bootloader) partition-type:tzxflattest:raw
(bootloader) partition-size:tzxflattest: 0x80000
(bootloader) partition-type:xflbak:raw
(bootloader) partition-size:xflbak: 0x1E00000
(bootloader) partition-type:xfl:raw
(bootloader) partition-size:xfl: 0x1E00000
(bootloader) partition-type:storsecbak:raw
(bootloader) partition-size:storsecbak: 0x20000
(bootloader) partition-type:storsec:raw
(bootloader) partition-size:storsec: 0x20000
(bootloader) partition-type:devcfgbak:raw
(bootloader) partition-size:devcfgbak: 0x20000
(bootloader) partition-type:devcfg:raw
(bootloader) partition-size:devcfg: 0x20000
(bootloader) partition-type:sti:raw
(bootloader) partition-size:sti: 0x200000
(bootloader) partition-type:cmnlib64bak:raw
(bootloader) partition-size:cmnlib64bak: 0x80000
(bootloader) partition-type:cmnlib64:raw
(bootloader) partition-size:cmnlib64: 0x80000
(bootloader) partition-type:cmnlibbak:raw
(bootloader) partition-size:cmnlibbak: 0x80000
(bootloader) partition-type:cmnlib:raw
(bootloader) partition-size:cmnlib: 0x80000
(bootloader) partition-type:keymasterbak:raw
(bootloader) partition-size:keymasterbak: 0x80000
(bootloader) partition-type:keymaster:raw
(bootloader) partition-size:keymaster: 0x80000
(bootloader) partition-type:devinfo:raw
(bootloader) partition-size:devinfo: 0x1000
(bootloader) partition-type:ablbak:raw
(bootloader) partition-size:ablbak: 0x180000
(bootloader) partition-type:abl:raw
(bootloader) partition-size:abl: 0x180000
(bootloader) partition-type:pmicbak:raw
(bootloader) partition-size:pmicbak: 0x80000
(bootloader) partition-type:pmic:raw
(bootloader) partition-size:pmic: 0x80000
(bootloader) partition-type:hypbak:raw
(bootloader) partition-size:hypbak: 0x80000
(bootloader) partition-type:hyp:raw
(bootloader) partition-size:hyp: 0x80000
(bootloader) partition-type:tzbak:raw
(bootloader) partition-size:tzbak: 0x200000
(bootloader) partition-type:tz:raw
(bootloader) partition-size:tz: 0x200000
(bootloader) partition-type:rpmbak:raw
(bootloader) partition-size:rpmbak: 0x80000
(bootloader) partition-type:rpm:raw
(bootloader) partition-size:rpm: 0x80000
(bootloader) partition-type:LTALabel:raw
(bootloader) partition-size:LTALabel: 0x1000000
(bootloader) partition-type:TA:raw
(bootloader) partition-size:TA: 0x200000
(bootloader) secure:no
(bootloader) serialno:XXXXXXXX
(bootloader) serial:1a322f75
(bootloader) product:G8441
(bootloader) max-download-size:536870912
(bootloader) kernel:uefi
So that seems like I did succeed at the unlocking. Now, I still can't seem to flash twrp:
Code:
$ fastboot -v flash recovery twrp-3.3.1-0-lilac-pie-5.img
fastboot: verbose: target reported max download size of 536870912 bytes
Sending 'recovery' (34548 KB) FAILED (Status read failed (No such device))
fastboot: error: Command failed
But things look normalish otherwise (max download size actually reported). And I still get libusb I/O error messages from flashtool when I tried to connect the device in fastboot mode while running flashtool. So, now my question has really morphed into help with this specific error. Why would it say "no such device"?
---
One more note: tailing /var/log/kern.log while doing the above (trying to flash recovery with fastboot), I can see that the device does reconnect. So I'm assuming that the "no such device" message is due to the disconnection. It's not clear to me if my troubles are due to kernel version, libusb version, cables/cable-types or something else. Looking forward to any advice.

Update (a second state acheived)
I managed to get the phone into some other mode (I guess what was called "flash mode" in other xperia devices). The indicator here is that the led is green instead of blue (fastboot). Well, it still seems to be some sort of fastboot mode, although quite a bit is different. For one thing, the device doesn't send its serial. In /var/log/kern.log I see:
Code:
Sep 22 21:53:11 kernel: [25251.575770] usb 1-1: Product: Android
Sep 22 21:53:11 kernel: [25251.575772] usb 1-1: Manufacturer: Sony
Sep 22 21:56:50 kernel: [25470.553359] usb 1-1: USB disconnect, device number 40
Sep 22 21:56:57kernel: [25477.008071] usb 1-1: new high-speed USB device number 41 using xhci_hcd
Sep 22 21:56:57 kernel: [25477.158020] usb 1-1: New USB device found, idVendor=0fce, idProduct=b00b, bcdDevice= 4.04
Sep 22 21:56:57 kernel: [25477.158025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
Then, fastboot itself says that the serial is a bunch of question marks:
Code:
$ fastboot devices
???????????? fastboot
Most interesting, now I get farther along the 'flash' command, instead of failing on 'Sending' with no such device, I see that the sending is "OKAY", but then the command to write fails as "unauthenticated".
Code:
$ fastboot flash recovery recovery.img
Sending 'recovery' (34548 KB) OKAY [ 1.314s]
Writing 'recovery' FAILED (remote: 'Command not authenticated')
fastboot: error: Command failed
Also, now `getvar all` has different info:
Code:
fastboot getvar all
(bootloader) version:0.4-SONY-0.31
(bootloader) max-download-size:104857600
(bootloader) Version-sony:0.31
(bootloader) Loader-version:XFL-MSM8998-N-47
(bootloader) serialno:YYYYYYYY
(bootloader) version-bootloader:1306-5035_X_Boot_MSM8998_LA2.0_P_114
(bootloader) version-baseband:1308-8921_47.2.A.10.107
(bootloader) product:G8441
(bootloader) Phone-id:0000:XXXXXXXX
(bootloader) Rooting-status:ROOTED
(bootloader) Device-id:EDF6B4C3
(bootloader) Platform-id:2005E0E1
(bootloader) Frp-partition:frp
(bootloader) secure:no
(bootloader) Sector-size:4096
(bootloader) Ufs-info:SKhynix,H28U62301AMR,D003
(bootloader) Keystore-counter:1
(bootloader) Sake-root:D159
(bootloader) Default-security:eek:N
(bootloader) S1-root:S1_Root_e69c
(bootloader) Security-state:162509AE6B4B54D487F2496DDC4D4B6C6747A73B
(bootloader) USB-version:0x0200
(bootloader) slot-count:0
(bootloader) slot-suffixes:<empty>
(bootloader) current-slot:<empty>
all:
Finished. Total time: 0.107s
Also, in this mode, instead of just hanging if I retry the `oem unlock` command, it promptly replies that it's already unlocked.
Code:
$ fastboot oem unlock 0xBADHEAD
FAILED (remote: 'Bootloader already unlocked')
fastboot: error: Command failed
These seem like important clues. I'm looking for any tips parsing them

Rooting is not worth it anymore.
With any flashing there is the risk to damage the memory chips (because, you know, manufacturing defects, wearing out, etc). With old device the risk is even higher - and you won't have warranty anymore.
What I am saying is that you may have a (now) defective device.

bookworth said:
Rooting is not worth it anymore.
With any flashing there is the risk to damage the memory chips (because, you know, manufacturing defects, wearing out, etc). With old device the risk is even higher - and you won't have warranty anymore.
What I am saying is that you may have a (now) defective device.
Click to expand...
Click to collapse
Sure. It's possible that the device is defective. The purpose of this thread is to determine that. Do you have any experience which is relevant?
This is not about "rooting" in the traditional sense of owning uid 0 in Android. This is about installing a system which I'm comfortable using.

apexofservice said:
Sure. It's possible that the device is defective. The purpose of this thread is to determine that. Do you have any experience which is relevant?
This is not about "rooting" in the traditional sense of owning uid 0 in Android. This is about installing a system which I'm comfortable using.
Click to expand...
Click to collapse
I think you can obviously see that the device is old and both the offial and unofficial support has faded. It is just like flashing a Nokia E6 from 2011 today - noone cares. I know because I just did the Nokia thing.

@apexofservice, for flashing twrp image you need fastboot mode - blue led light (vol+ held while connecting to usb).
The other mode - green led light - is flash mode (Sony Service Mode) - there you can flash only sony signed stock firmware (like with newflasher all those .sin files).
I guess you troubles are most likely caused by some old version of 'fastboot' utility in your linux distro - are you using the version you've installed for modding your previous sony phone?
Or did you follow the sony unlocking guide and really installed the recommended fastboot utility version (as part of some android devel pack)?
To rule out flash error, you may try to just boot twrp without flashing it:
Code:
fastboot reboot bootloader
fastboot boot twrp.img
I wonder why so many people just unlock the phone without reading first?
You might have noticed, there is a drm keys backup method and do that first before unlocking...

j4nn said:
@apexofservice, for flashing twrp image you need fastboot mode - blue led light (vol+ held while connecting to usb).
The other mode - green led light - is flash mode (Sony Service Mode) - there you can flash only sony signed stock firmware (like with newflasher all those .sin files).
I guess you troubles are most likely caused by some old version of 'fastboot' utility in your linux distro - are you using the version you've installed for modding your previous sony phone?
Or did you follow the sony unlocking guide and really installed the recommended fastboot utility version (as part of some android devel pack)?
To rule out flash error, you may try to just boot twrp without flashing it:
Code:
fastboot reboot bootloader
fastboot boot twrp.img
I wonder why so many people just unlock the phone without reading first?
You might have noticed, there is a drm keys backup method and do that first before unlocking...
Click to expand...
Click to collapse
@j4nn: thanks so much for picking up the conversation. I realized what you said about green vs blue led and fastboot vs Sony Service mode sometime after my last post. But I didn't want to keep updating and just talking to myself so I held off. Still it's interesting that sony service mode is clearly based at least partially on the fastboot protocol.
In terms of which fastboot binary, I started by using the one I had installed from previous work with my z3c, that one is:
Code:
fastboot version 28.0.1-4986621
It was new enough not to have the -i $vendor_id option which is quoted in a bunch of guides for xperia stuff, and that's one of the things which lead me to try upgrading fastboot. Nowadays, it turns out, you can get the platform-tools without downloading the Sdk. So that download was quite convenient and I downloaded this version:
Code:
$ ./platform-tools/fastboot --version
fastboot version 29.0.4-5871666
I believe that's the latest fastboot, but let me know if it's not and if I should try to find something more recent. Actually, regarding fastboot, I ended up turning up the source code repo and found the README quite fascinating. I actually started using pyUSB to make a python version of fastboot, but that's a bit of an aside. In any case, I guess I could just compile fastboot from source. However, I suspect that the fastboot version isn't actually my issue.
Regarding booting from twrp using fastboot: Alas, that fails too. And, interestingly (perhaps), it fails in a similar way to the flash command. The phone seems to restart during or after the data send part:
Code:
./fastboot boot twrp-3.3.1-0-lilac-pie-5.img
Sending 'boot.img' (34548 KB) FAILED (Write to device failed (Cannot send after transport endpoint shutdown))
fastboot: error: Command failed
So then, given that the Green LED is Sony Mode, I thought maybe I should try to use FlashTool to try to reflash a working ROM/boot/kernel. So, I downloaded a stock ROM (same major version, Android 9 in my case), and then used the bundle command to prepare an FTF package.
Unfortunately, the version of FlashTool that I have doesnt' seem to be able to recognize the "flash mode" (green LED) that this phone provides. After preparing the firmware for flashing, it just says "phone connected with usb debugging disabled" when I connect it with Green LED. So, I figured that I needed to upgrade FlashTool. I found the lastest FlashTool and then tried to run it. But the jvm that comes with it seems to have been linked dynamically against a newer GLIBC than the one I have on this distro, so I started compiling a newer GLIBC into /opt but haven't gotten any farther before it was time to go work and set this aside for a while.
In terms of why I went straight to bootloader unlock instead of doing the firmware exploit to backup the TA keys, the main reason is as follows. The first is that I went through that exercise twice with my Z3C (I had two Z3Cs over the last 4 years), and it never ended up being useful. I never wanted to go back to stock, I never ended up caring about the DRM keys on the TA partition. So, I didn't really want to go through a bunch of hoops just to backup some keys that at this point it's clear that I'm not going to be using---I just wanted to get to the business of getting lineage up.
Please do post any further ideas or suggestions. I'd love any advice. Thanks in advance!

@apexofservice, instead of flashtool, just use newflasher to try to flash stock fw.
In linux you can ignore the pre-built binaries and just compile from source.
You may ignore even the prepared makefile and just use
gcc -o newflasher newflasher.c -lz -lexpat -ggdb
in order to use your system libs instead of those bundled.
Just do not use -O2 as that seams to cause flashtool segfault if compiled with -O2 with some recent gcc versions (there is probably a bug somewhere), -O0 resolves the segfault if it happens.

@apexofservice, xz1c sony flash mode init script contains this
Code:
# Increase min_free_kbytes to reduce risk of getting out of memory when doing USB read.
# The value 56766 was created by adding 12*4096 to the default value of 7614. I.e. we
# add 12 4MB buffers and this seems to be big enough for our use case.
write /proc/sys/vm/min_free_kbytes 56766
Maybe it is related also to your linux setup?
Could you test
Code:
echo 56766 > /proc/sys/vm/min_free_kbytes
before testing fastboot or newflasher?

Last update for now. I upgraded glibc and got to try out the lastest FlashTool. It's very cool that they've got XperiFirm integrated now. However, my situation is unchanged. When I go ServiceMode (Green LED), FlashTool says "Device connected with usb debugging disabled". When I connect with fastboot mode (Blue LED), i see a libusb error in stderr which says "libusb_get_string_descriptor_ascii : I/O Errors".
So, I guess I've tried all the tools now, and the device really is responding surprisingly to commands, it seems. I think I'm down to USB ports/cables. Unless people have other ideas.

Just saw your posts. Thanks for the quick reply.
j4nn said:
@apexofservice, xz1c sony flash mode init script contains this
Code:
# Increase min_free_kbytes to reduce risk of getting out of memory when doing USB read.
# The value 56766 was created by adding 12*4096 to the default value of 7614. I.e. we
# add 12 4MB buffers and this seems to be big enough for our use case.
write /proc/sys/vm/min_free_kbytes 56766
Maybe it is related also to your linux setup?
Could you test
Code:
echo 56766 > /proc/sys/vm/min_free_kbytes
before testing fastboot or newflasher?
Click to expand...
Click to collapse
FWIW, my system currently has 67584, so technically 56766 is a *decrease*. In any case, I tried it. Unfortunately, same output as previous:
Code:
./platform-tools/fastboot flash recovery twrp-3.3.1-0-lilac-pie-5.img
Sending 'recovery' (34548 KB) FAILED (remote: 'unknown command')
fastboot: error: Command failed
Btw, where are you reading the source of that sony init script from?

j4nn said:
@apexofservice, instead of flashtool, just use newflasher to try to flash stock fw.
In linux you can ignore the pre-built binaries and just compile from source.
You may ignore even the prepared makefile and just use
gcc -o newflasher newflasher.c -lz -lexpat -ggdb
in order to use your system libs instead of those bundled.
Just do not use -O2 as that seams to cause flashtool segfault if compiled with -O2 with some recent gcc versions (there is probably a bug somewhere), -O0 resolves the segfault if it happens.
Click to expand...
Click to collapse
Cool, I actually did try newflasher already. I had compiled it from source (I had to change the source minimally because it has a hard-coded device id). After I changed that (to 0x0dde), I built it with `make`. I recompiled using your suggested `gcc` invocation and alas, same error as what I saw last time I tried it.
Code:
$ ./newflasher
--------------------------------------------------------
newflasher v18 by Munjeni @ 2017/2019
--------------------------------------------------------
Determining available free space:
Available space to caller = 114642 MB
Total space on current drive = 471964 MB
Free space on drive = 138685 MB
found device with vid:0x0fce pid:0x0dde.
Optional step! Type 'y' and press ENTER if you want dump trim area, or type 'n' and press ENTER to skip.
Do in mind this doesn't dump drm key since sake authentifiction is need for that!
n
- Error, no DATA reply!
End. You can disconnect your device when you close newflasher
I read in the fastboot README that that DATA reply is what's supposed to happen when the device reports that it's ready to read after and OKAY.
In fact, it was pretty easy to add the line `printf("%s\n", tmp_reply);" to the source code right after the line which is printing
"no DATA reply" and then I recompile and see:
Code:
- Error, no DATA reply!
FAILunknown command
So that's the same "unknown command" message that I'm seeing from the fastboot tool too. Shucks.

@apexofservice, your change of "hardcoded" device id does not make sense. The original device id in newflasher is all right.
Changing it to 0x0dde means you are trying to use newflasher in fastboot mode (i.e. idVendor=0fce, idProduct=0dde) which is indicated by blue led light. That will not work.
You need to use flash mode (green led light: idVendor=0fce, idProduct=b00b) with newflasher - no change in source needed.

apexofservice said:
In terms of why I went straight to bootloader unlock instead of doing the firmware exploit to backup the TA keys, the main reason is as follows. The first is that I went through that exercise twice with my Z3C (I had two Z3Cs over the last 4 years), and it never ended up being useful. I never wanted to go back to stock, I never ended up caring about the DRM keys on the TA partition. So, I didn't really want to go through a bunch of hoops just to backup some keys that at this point it's clear that I'm not going to be using---I just wanted to get to the business of getting lineage up.
Click to expand...
Click to collapse
You should know that even LOS16 is depending on stock heavily - my (a bit outdated) source build tree contains 467MB of stock fw proprietary binary blobs. Those blobs might still contain functions that depend on drm, like for example stock camera.
Another discussion about this topic with interesting links is in this thread:
j4nn said:
@Didgesteve, that "no one else seems to have noticed" - a rather big assumption of yours. There are many users complaining about xzp/xz1/xz1c camera quality in general.
But just with regard to oreo vs pie, read the xzp thread from here: post#27, particularly post#30 contains very interesting internal stuff.
I would like to believe sony stopped conditioning camera with keeping bootloader locked with pie but somehow I am not sure about that at all considering all the circumstances and my linked camera quality comparison test.
Thanks for your advice, luckily I do not need janjan's kernels as I've implemented the TA backup exploit, so both my phones can have drm keys restored (in fact one of them is still locked on purpose).
I (and anybody who saved TA-unlocked.img together with TA-locked.img) can switch easily between "drm keys restored" and "drm keys lost" states for testing/comparisons.
Click to expand...
Click to collapse

j4nn said:
@apexofservice, for flashing twrp image you need fastboot mode - blue led light (vol+ held while connecting to usb).
The other mode - green led light - is flash mode (Sony Service Mode) - there you can flash only sony signed stock firmware (like with newflasher all those .sin files).
I guess you troubles are most likely caused by some old version of 'fastboot' utility in your linux distro - are you using the version you've installed for modding your previous sony phone?
Or did you follow the sony unlocking guide and really installed the recommended fastboot utility version (as part of some android devel pack)?
To rule out flash error, you may try to just boot twrp without flashing it:
Code:
fastboot reboot bootloader
fastboot boot twrp.img
I wonder why so many people just unlock the phone without reading first?
You might have noticed, there is a drm keys backup method and do that first before unlocking...
Click to expand...
Click to collapse
Good news here is that I managed to finally properly use newflasher to flash a stock ROM (android 9) and boot into it. Hooray. Bad news is that I still get the same behavior as reported above when I try to flash twrp. As above, I can't even boot into it with `fastboot boot twrp.img`. Since I'm really not interested in using the stock ROM, I'd love advice on what I may need to try next in order to get a custom recovery working (and eventually, obviously, a custom ROM).

Had very similar issues - could only get to fastboot devices. Nothing else worked. Then I read that connecting through USB hub could work. Now fastboot getvar all works as well, managed to unlock the bootloader and flash TWRP...

bookworth said:
Rooting is not worth it anymore.
With any flashing there is the risk to damage the memory chips (because, you know, manufacturing defects, wearing out, etc). With old device the risk is even higher - and you won't have warranty anymore.
What I am saying is that you may have a (now) defective device.
Click to expand...
Click to collapse
Go take this garbage elsewhere, rooting and custom roms are very much worth it unless you like a crappy bloated stock rom. The devices are not defective nor is there any risk really as long as you're able to read. Way to waste the OP's time too and mine.
apexofservice said:
Good news here is that I managed to finally properly use newflasher to flash a stock ROM (android 9) and boot into it. Hooray. Bad news is that I still get the same behavior as reported above when I try to flash twrp. As above, I can't even boot into it with `fastboot boot twrp.img`. Since I'm really not interested in using the stock ROM, I'd love advice on what I may need to try next in order to get a custom recovery working (and eventually, obviously, a custom ROM).
Click to expand...
Click to collapse
Still having issues or did you figure it out?

Same for me after flashing the firmware. Issue solved.
I got the latest TWRP here: https://forum.xda-developers.com/xp...t/recovery-twrp-3-1-1-stock-security-t3706704
Then I activated flash mode. (Phone off, volume down, then connect USB. The green LED is lit, otherwise black screen.)
Code:
fastboot reboot-bootloader
fastboot boot twrp-3.xxx.img
I Copied the TWRP image to the phone, then I used TWRP to install the TWRP image. (There is an option to install ZIP, which is default, or image.)

R3xXDA said:
Had very similar issues - could only get to fastboot devices. Nothing else worked. Then I read that connecting through USB hub could work. Now fastboot getvar all works as well, managed to unlock the bootloader and flash TWRP...
Click to expand...
Click to collapse
Using a USB hub was also the fix for me on an Xperia XA2 when flashing AOSP 9.0.