[DEBUG] Calling all (AT&T) 0x1000 'hard' bricks! - Atrix 4G Android Development

UPDATE
It is clear from many users now that the 2.3.4 / 4.5.91 OTA burns a fuse, specifically in ReservedOdm[1], which switched from:
Code:
old: 0000 0000 0000 0001 0000 0000 0000 00[B]0[/B]1
new: 0000 0000 0000 0001 0000 0000 0000 00[B]1[/B]1
So, if you see something in /sys/firmware/fuse/ReservedOdm like:
Code:
10000000000010001000[B][U]3[/U][/B]00004000
You *should not* SBF to anything except PUDDING or an SBF with PUDDING, or AT&T 4.5.91.
Any official motorola .sbf, EXCEPT 4.5.91, will leave you in hard-brick nvflash land...
(I will make a new post and call for more data for Chinese 0x1000 errors)
Here is an AT&T specific putative explination for their 0x1000 issues:
Our phones have a fuse, a set of one-time-programmable bits, called 'ReservedOdm' (reserved for the original design manufacturer, Motorola.) Using a fuse in this set, the unreleased 2.3.3 bootloader implemented 'fastboot oem unlock' which burns a bit in ReservedOdm[0] and sets these 32 bits (represented as 8 hex values) to 0x00004000. There are 8 ReservedOdm[] 32bit values, or 8x32 (256) fuses. Once one is burned (set to 1) it cannot be un-burned. Hence, a 'fuse'.
You can view the state of your ReservedOdm by looking at /sys/firmware/fuse/ReservedOdm, if you are root. Mine looks like this:
10000000000010001000100004000
(before unlock:
10000000000010001000100000000)
Broken down (Odm as short for ReservedOdm):
Code:
Odm[3] | Odm[2] | Odm[1] | Odm[0]
00010000 | 00000001 | 00010001 | 00004000
We don't really understand Odm[3], but it likely gets burned by flashing an .sbf or some other process, not everyone has a 1 there. You don't see Odm[7] through [4] because leading zeros are dropped from the printf output. Also, some people (pre-first-sbf?) seem to have 00000001 not 00010001 in Odm[1].
Why discuss unlocking? Because although downgrade bricking is not directly related to unlocking, in the end it is caused by another fuse, in ReservedOdm[1].
Talented dev nothize has disassembled bootloaders and determined that AT&T 1.8.3 and earlier, and most chinese bootloaders, expect that only the last bit of Odm[1] is 1. By burning the next-to-last bit, Moto broke ability to downgrade.
Basically, SVF:105:1:2 means, at lower word (16bits) of Odm[1], (called "105" dunno why) we expect the first '1' to be in position '1' but we found it at position '2', barf. Ie, for AT&T bricking case, we wanted Odm[1] should have been 0x????0001 (binary 0001 for last 4 bits) but we got 0x????0003 (last 4 bits, binary 0011) instead. By barf I mean drop to nvflash mode which only motorola service can use, since only they have our 'secure boot key' which nvflash requires. Thus, the hard brick when certain (older and/or chinese) bootloaders find this unexpected fuse burned.
Now although 4.5.91 OTA & sbf burn a fuse, you only brick if you run a bootloader that expects it not to be burned (ie, stock 1.8.3 or below.) Similarly, you can burn the Odm[0] fuse to get 0x00004000, but it won't do you any good unless your bootloader cares. So far there is one bootloader which cares, from 2.3.3, 4.5.47 (unreleased build) and lets you 'oem unlock', burning that Odm[0] fuse, and if it's burned, lets you fastboot, skips signature checks, etc.
If you run any other bootloader besides 'Pudding', it doesn't matter if your fuse is burned, you're 'effectively' locked (other BLs don't care to give you permissions.) But since fuse burning is irreversible, once you go back to the unlockable bootloader, it will notice you burned that fuse, and print 'Unlocked' in the corner. So although your fuse is burned, you don't get the benefits of it, unless you flash 'Pudding' (4.5.47) or an sbf with 'Pudding' in it.
Pudding/4.5.47-BL is also a special for another reason. Although it also does not like Odm[1] to be 0x00010003 (like 1.8.3/pre) and displays error 0x1000, it lets you escape. It gives you a really nice menu of options so you can flash something higher (only 4.5.91 right now) if you want to stay locked, or it lets you enter fastboot and 'oem unlock.' Then, in the future, even if it notices this 'bad' fuse is burned in Odm[1], because you have the Unlocked fuse burned in Odm[0] it gives you a pass, and boots anyway. So flashing Pudding or something+Pudding after 4.5.91 might give you a little heart attack, but in the end it should be harmless.
Preserved for posterity below (if you have a Chinese/Korean/Hong Kong Atrix please continue to post your ReservedOdm plus model, location, carrier, current build/sbf please, until I start a new thread.)
ATTENTION
The purpose of this thread is to assist currently 'hard' bricked users seeing 0x1000 on boot, and to understand why this happens. People who have un-bricked please skip to the end of the post. Talented dev nothize has disassembled some bootloaders and thinks perhaps this is a fuse check failure. Also, he has been able to glean some info from the chinese-language threads about this same error some weeks ago. It has been very hard to try to make sense of this issue after being away by combing through hundreds of posts. Let's keep this thread uncluttered.
HOW TO HELP
Everyone who has seen 0x1000:
Post a short description of how you got there, what you see (ie, do you boot loop?) For example, ATT users: Did you OTA from 1.8.3 to 4.5.40 or 4.5.91? Had you flashed 'Pudding' before OTA? Were you locked or unlocked? Did you see any messages about 'BP' during any RSD flash or OTA upgrades? If you recovered, exactly how (full Pudding+1.8.3 or just Pudding. If you were locked, did you have to unlock? etc.) INCLUDE SVF STRING (if any.) Be concise and specific.
If you managed to un-brick:
0. (Root your phone, see: here)
1. As root, cd to /sys/firmware/fuse
2. Run: "for i in * ; do echo $i `cat $i`; done"
3. Post output here, especially of "ReservedOdm" fuse
(Include: carrier, previous .sbfs & bootloaders used, if unlocked, current BL)
(The following is depreciated, probably not worth doing... 0x1000 on 1.8.3 bootloader [or older] is different to the Hong Kong/China 0x1000, and also different for users lucky enough to flash 2.3.3/Pudding after OTA)
If you are currently bricked:
[Note, this is not a fix, but we'd like to know if you can 'see' your device on your PC's USB. If you have, or can make, a factory cable this test will be more conclusive, especially if you see any sort of 'Nvflash' message]
0. (Be sure your battery is charged!!)
1. Unplug phone, remove battery, leave disconnected for at least 10s
2. Hold down the volume-up before and during battery insertion
3. Continue to hold down volume-up (never release it!) and connect to PC
(If you've held volume-up more that 30s after inserting battery, you can release)
4. Try to see your device in RSD
5. If Step #4 fails, try to see your device in linux 'lsusb' (like: "watch -n .1 lsusb" before connecting phone to PC)
6. Post your results in this thread!
(PM me if you use windows freeware lsusb or usbview. I don't run windows and can't test, but would gladly post instructions)

Good thread for our bricked friends. Nice one!

Ronaldo_9 said:
Good thread for our bricked friends. Nice one!
Click to expand...
Click to collapse
This is exactly the kind of spam I do not want on this thread. If this starts to happen I will close this thread.
Please respect the big red underlined request in the first post and do not post in this thread unless you have experienced 0x1000 yourself, and have something useful to contribute.
Thanks in advance for valuing our time.

Six step plan is a no go for me. I tried it quite a few times with two different batteries.
One battery is low-ish on charge and it reads the following under the traditional error:
Code:
Entering NVFlash recovery mode
Battery is too low to flash
The other battery is full. It reads the error for about three seconds and then quickly flashes the "NVFlash recovery mode" line before it turns blank. The screen just goes dark. Still, the device must be on, because it won't let me reboot without battery pull.

@kenneth that's exactly what happened with me.
I have already gotten a new atrix and dumped the busted one back to AT&T (on the pretense of a battery dying while doing an OTA update.) So unfortunately I cannot help figure this out.
But for my two cents, im still a firm believer that using a factory cable to connect the phone w/o a battery to a PC holds the solution we seek.
I attempted to make my own, but at 7am after going all day at work (im in the US Marine Corps Infantry ) I was falling asleep while soldering. Im going to work on it again this weekend though.
Sent from my MB860 using XDA App

I had the 0x1000 error yesterday morning by flashing pudding. I don't think was a hard brick due too the fact that I was able to recover.
Sent from my MB860 using XDA Premium App

Same issue as jakew02, how ever I still have my bricked atrix. I will get a fully charged battery and try to get some results but I have the same symptoms as Kenneth as well as in phone starts for about 3 seconds and immediatley needs a battery pull. I'm off work in a few hours and will post results then.
Sent from my MB860 using XDA App

Sthony said:
I had the 0x1000 error yesterday morning by flashing pudding. I don't think was a hard brick due too the fact that I was able to recover.
Sent from my MB860 using XDA Premium App
Click to expand...
Click to collapse
Please guys... the more descriptive the better.
Sthony, you OTAd to 4.5.91 from 1.8.3 by putting the .zip in /sdcard and fastboot menu into Recovery? Then, you flashed Pudding and soft-bricked. How did you recover? Were you unlocked before OTA? Or you only unlocked after flashing pudding?
Can those of you who recovered please cat /sys/firmware/fuse/ReservedOdm ? (as root)
We would like to determine what prevents you all from downgrading (and maybe, possibly, get the still-bricked out of nvflash mode, but this will probably require cable + SBK). So it will help knowing exactly what versions you went FROM and TO (with OTA inbetween) and the type of 0x1000 you got (bootloop with RSD option using battery during volume-up method, VS. nvflash, VS. fastboot menu) including the SVF (usually 105:1:2) message if possible.

kennethpenn said:
Six step plan is a no go for me. I tried it quite a few times with two different batteries.
One battery is low-ish on charge and it reads the following under the traditional error:
Code:
Entering NVFlash recovery mode
Battery is too low to flash
The other battery is full. It reads the error for about three seconds and then quickly flashes the "NVFlash recovery mode" line before it turns blank. The screen just goes dark. Still, the device must be on, because it won't let me reboot without battery pull.
Click to expand...
Click to collapse
Kenneth, same here.
the 6-step thing is a no go for me. It flashes the NV thing very quickly, then goes dark. At least I know what I did wrong, and quite stupidly so
- On 2.3.4 stock
- tried to push a de-odexed services.jar , deleting the services.odex (stupid in hindsight)
- pushed kenneth's boot.img and system.img (without reading that the system needs to be UNLOCKED)
- since the only thing left was RSD, tried to flash 1.2.6, which failed. BOOM. hard brick.
I only hope my stupidity helps people not make the same mistakes.
Will try to give it to a moto service center tomorrow, see if they can fix it.
*EDIT* doing the steps in the first posts without battery but plugged into wall outlet leaves the phone in "starting nvflash... battery too low to flash." If you push in the battery, and then pull out the cable, the screen stays on. Not sure if that helps anything, since I don't know how to do nvflash, and don't have the right tools to begin with.

Please fill out and use the following template when posting to this thread:
1. Before the 2.3.4 (4.5.91) OTA upgrade, did you flash a fresh install of 1.8.3 .sbf from RSD?
2. If the answer to #1 was no, what mods (if any) did you have installed at the time of your 2.3.4 (4.5.91) OTA flash (cwm, pudding, root, et cetera...), also what version of software were you on if not 1.8.3?
3. After flashing the 2.3.4 (4.5.91) OTA by putting the update.zip in the root of your /sdcard-ext/ and booting into the stock recovery, did you install any mods (cwm, pudding, root, et cetera...)?
NOTE: If you did not flash the 2.3.4 (4.5.91) OTA by putting the update.zip in the root of your /sdcard-ext/ and booting into a stock recovery, please detail what method you used to get to the 2.3.4 (4.5.91) OTA. This thread is only for users who flashed with this method.
4. Did you use RSD to flash anything else while on the 2.3.4 (4.5.91) OTA, such as pudding?
5. Did you use fastboot to flash anything else while on the 2.3.4 (4.5.91) OTA, such as cwm or preinstall root?
6. Did you then try to flash back to the stock 1.8.3 .sbf via RSD? If so, what version of RSD Lite did you use?
7. If the answer to #6 was no, what version of .sbf did you flash via RSD, also what version of RSD Lite did you use?
8. Did you encounter the 0x1000 error after trying to downgrade to a lower version .sbf?
9. Have you been able to recover from the 0x1000 error and resume normal functionality? If so, what software version are you currently on?
10. Please detail below exactly what had occurred during and after the downgrade to a lower version .sbf via from the 2.3.4 (4.5.91) OTA. If you were able to recover, please detail the steps that led up to your recovery. Also what type of 0x1000 you got (bootloop with RSD option using battery during volume-up method, VS. nvflash, VS. fastboot menu) including the SVF (usually 105:1:2) message if possible.
Also include everything required from the first post of this thread. This is very important.
If you can also provide filenames for the files you've flashed, that would be optimal.

=>
Well, I had this issue some days ago following the Pudding stickied topic.
I had 4.1.8.3 with old Tenfar's CWM so following the steps in that topic flashed 4.1.8.3 again with RSD Lite. It was a service SBF.
Then I booted in Android recovery mode and flashed the OTA. Everything went fine, I had 4.5.9.1 with all my data and apps.
Then I flashed Pudding.
Instantly after RSD rebooted my phone, I had this 0x1000 error. I didn't know what to do, I followed the guide step by step and I was confused. So I tought "Maybe I need to unlock my bootloader". So I booted the phone in fastboot mode and unlocked my bootloader through fastboot.
Then I did a fastboot reboot and voila, the phone booted again in 4.5.9.1.
I notice I have a "Unlocked" text in the Motorola boot screen.
Well, I hope this info helps someone.
Let me know how it went.

Failed to boot 0x1000
I have the same issue that you guys have...
I did the update to Gingerbread 2.3.4 and then I tried to roll back to froyo so I used RDSlite 5.3.1 and this .sbf: OLYFR_U4_1.2.6_SIGNED_OLPSATTSPE_P012_HWolympus_1g_1FF.sbf and the phone got hard bricked...
I left it with the battery inside yesterday and today the phone drain the battery completely... I took it off, charge it for 2 or 3 minutes and put it back, connect it to my pc and it displays:
SVF: 105: 1:2
Failed to boot 0x1000
Entering nvflash recovery mode
Battery is to low to flash
But if i take the battery from my other atrix, fully charged it just turn on, display the error and for a second "Entering in nvflash recovery mode" and then Black Screen.

Just going to point this out in a new post for everyone to see on unbricking transformer: http://forum.xda-developers.com/showthread.php?t=1123429
I am wondering if sth like this could work (with the right .cfg and .sbf). I am going to take a look at the nvflash package in any case.

bl0wf1sh said:
Just going to point this out in a new post for everyone to see on unbricking transformer: http://forum.xda-developers.com/showthread.php?t=1123429
I am wondering if sth like this could work (with the right .cfg and .sbf). I am going to take a look at the nvflash package in any case.
Click to expand...
Click to collapse
You would need your SBK which is why the NVFlash issue is a 'hard' brick in the first place.

First i would like to apologize if this post is not of much use to you guys as I have not hard bricked my device. However I have flashed the 4.5.91 OTA and I noticed something intersting.
1 I unlocked my bl the night pudding was released.
2 I flashed a fresh 1.83 sbf
4 OTAd form android recovery to 4.5.91
5 on the very first reboot after OTA I entered into RSD protocol and once I connected to RSD lite 5.3.1 I noticed RSD identified my device as SE-Olympus insted of the normal NF-Olympus.
6. I flashed zomgunlock-lite.sbf. After it completed SE-Olympus changed back to NF-Olympus.
I may be wrong but i dont ever recall RSD seeing my device as SE-Olympus.
Anyways I hope this may useful and good luck!

kennethpenn said:
Six step plan is a no go for me. I tried it quite a few times with two different batteries.
One battery is low-ish on charge and it reads the following under the traditional error:
Code:
Entering NVFlash recovery mode
Battery is too low to flash
The other battery is full. It reads the error for about three seconds and then quickly flashes the "NVFlash recovery mode" line before it turns blank. The screen just goes dark. Still, the device must be on, because it won't let me reboot without battery pull.
Click to expand...
Click to collapse
On my bricked Atrix, it just shows the error, and stays there until a battery pull (no other text shows up)

When you see the LOW battery warning, it's a false warning. On Olympus, NvFlash can only be accessed with external power from the factory cable (without ANY battery inserted). That's why your devices are "flashing" and powering themselves down. It's a "protection" implemented by Moto (as factory cable should be only built by Moto for repairing bricked devices).
Anyway, why are you hardbricking your devices flashing an old bootloader?
...At least, do you know why your device isn't relockable?
The new bootloader writes a bit into a fuse (in the ODM Reserved set) that isn't already blown. When it reads it back, if it's set to 1, it shows the "Unlocked" message and disables security checks.
Still, why can't I relock the device?
As you might know, when a fuse is blown, its programming power ramp is literally blown, so, you can't reprogram a fuse that has been burned.
And still, so, after so many hours of boring reading of your post, can you tell me why the **** my device is bricking with an old bootloader?
...The bootloader reads the entire ODM Reserved fuse set. When it reads it, it won't read fuse 1,2,3,4.... but the ENTIRE set.
If another fuse is blown, the old bootloader can't recognize why the damn there's an 1. It doesn't know what it is.... so boot fails, MotoBoot stops its execution and passes it to the Emergency NV3p Server (Emergency NvFlash Mode, from nVidia MicroBoot).
I think those infos should clear some doubts in your mind.
Cheers!

very nice of you I offered to possibly fix some bricks but with out knowing actual facts as to what is going on with their devices it would be hard . have you talked to any of them ? you know they dont talk to me , do they actually have access granted to NV3p server or nvflash or are they still locked out?
as per the first post, the OTA DOES CHANGE YOUR BP, THIS IS NOT A ?, as i was graceful enough to enter irc under another handle and post earlier in the week.
on a side note the irony of this entire situation is that i was booted from #moto-atrix after arguing the subject of blindly flashing back to older versions with a sbf, true at the time i was concerned with 1.84 - 1.29 , but now just a short time later ...
Regardless a fix maybe possible but need to know exactly what access you have once powering on device
*edit* for the sake of giving you what you asked here is my output , I am unlocked, rooted, I did use OTA I never bricked , I am now running my own stuff after flashing a CWM and building
Code:
DeviceKey FFFFFFFF
JtagDisable 0
KeyProgrammed 1
OdmProduction 1
ReservedOdm 10000000000010001000300004000
SecBootDeviceConfig 0
SecBootDeviceSelect 7
SecBootDeviceSelectRaw 0
SecureBootKey
SkipDevSelStraps 0
SpareBits
SwReserved 0
kfuse_raw ��j�s��Q��'��[email protected]�C��%57�ܠ� ��.�޴�܏��fm���vp��^����D}�G������K�*^V��w�+�����6:��YяmTq���;bH9�٩$M��nT&�7����4.�ŷX{�J������[�;N{�,(Ay���V��K=tTD���!$�{%�f��y;v��~�\�C:L-|��w���)�g#�!mv���+W�T�����(����|�3LNP�HV�J��|q��b�Wfa��/
�.���^df�6�6�e�n��U�Sj��j}�_g��i��c�i�h��0$ bz)�ߋ�Cd|ge-G���oU�GF��w���YLn2E,�rU����5�V��3.�V��NjY�m�v*Bt�����2�[email protected]�?��ؘ��#w��&6�+rdb;TK_r��� �,�F_���vQ�NJ
�2��}(�8mg�ȯ#nv������M$�Oǹ=E��I�v��E�9tP"�[`�'�a#X�E��S+�4 �u/�ö4�B|y�1bd��*��N��/"U��p���� F���%4>X�0H�xx�����
sku F

So here is my basic info now that I am home.
I was on stock att 1.83, flashed 2.3.4 via zip through sd card. Tried to install pudding, phone went into bootloop then flashed the red led. upon reboot showed error and message of "no os available cannot boot."
After panicking a bit, I loaded the 1.26 sbf, got to the moto boot screen and the phone shut off, no led, no message, nothing. I pulled the battery and restarted, then all I got was the 0x1000 message for 3 seconds, then the NVflash message and immediately a blank screen.
Now that I am home I have tried the steps provided and haven't been able to see the phone through rsd lite, and it still has the same symptoms. If you need any other info, or if i have forgot anything please let me know I will help where I can since I now have a paperweight and a brand new functioning atrix, thank god my mother-in-law was due for an upgrade.

They're still locked out. No SBK no party.
"No OS to boot" implies that you need to repartition/reflash without absolutely touching the MotoBoot. So, someone make a recovery SBF that won't flash the bootloader or you'll see plenty of bricked devices.
They can't recover with NvFlash.

Related

[Q] Xperia T soft brick - HELP GREATLY APPRECIATED

Hi there
I am encountering an issue with my Sony Xperia T (FW: 9.1.A.1.141) which I am certain can be resolved with the correct tools and knowhow, but having spent the last week following what feels like every related link on the internet, I am no further forward - sleeping badly as a result - and very much in need of some help.
I'd prefer to avoid a torrent of potential fixes that I may already have tried at length so please forgive me if I go into too much detail. I just want to be very clear exactly where I am and what I have done so far to try and fix the issue. My PC is running Windows 7 64-bit (no issues).
This is my first proper smartphone so after a few months getting to grips with the underlying nature of the Android OS, I decided it was now time to root the phone and try out different ROMs etc. After reading what I could about the process, I finally used DooMLoRD's Easy Rooting Toolkit 17 (For Sony Xperia Devices) and was amazed by how easy it was to unroot my device. After installing Titanium Backup and fully backing up my files, I then installed ClockWorkMod Recovery 6.0.4.6 (For Sony Xperia Devices), and was able to boot into the recovery environment without issue (I also made an additional backup of the system at this point). So far, so good.
I then copied two ROMS to my SD card - Android 4.4.2 (KitKat) For Sony Xperia T (AOKP Build) & CyanogenMod 11.20140127 (Nightly) For Sony Xperia T - and tried to flash the CyanogenMod ROM from within the ClockWorkMod Recovery Environment, however I received a Status 7 Error, preventing me from flashing the ROM, then tried the same with Android 4.4.2 (KitKat) ROM, but again I received a Status 7 Error. As I attempted to leave the recovery environment to research the Status 7 Error, the program flashed a popup saying the phone was not rooted and would I like to root it. At this point, I assumed I had lost root as a result of the Status 7 Error, but didn't want to make any more changes, so chose no to the root option and restarted my Xperia T.
At this point the Sony logo went into a loop and despite restarting the phone using power and volume up many times, I was unable to boot back into the ClockWorkMod Recovery Environment nor connect the phone to my PC, although I could see the drivers appear for a few seconds in Windows before disappearing. It took me a good couple of days to realise that I had to fully charge my phone, so when I began the operation again with a fully charged phone I was able to update the driver in Device Manager from Sony Ericsson Seehcri Control Device (yellow exclamation mark) to Sony ADB Device (although the Sony Ericsson Seehcri Control Device with exclamation mark later returned so I am unable to assess how successful this actually was).
From here, I tried to update the phone using the already installed and up to date PC Companion, but the phone will not connect in flash mode, so it is not possible to connect the phone. I also tried the latest Sony Update Service (2.13.4.16), then Sony Emma Flash Tool (For Sony Xperia Devices), but none of these recognise the phone because I cannot get the phone into flash mode. Using the Android Flash Tool 0.9.13.0 (For Sony Xperia Devices), I am able to connect to the phone in fastboot mode, but when I try to install a stock kernel or any other variant, the Flash Tool states that I can't make any changes because the phone is not rooted.
Thinking I could root my phone again with DooMLoRD's Easy Rooting Toolkit 17, this time it no longer works, I assume because my phone cannot enter flash mode, even though it is recognised in Android Flash Tool 0.9.13.0 in fastboot mode (blue light).
Now, it is conceivable since my phone is no longer rooted that I may well be able to have my phone fixed under warranty and returned to me, however I would thereafter be scared to try and install a custom ROM, and would never really feel comfortable with the phone again, so I would much prefer to learn how to fix the problem myself. I am convinced the phone is salvageable because I have no issue recharging the phone, the screen is lighting up to display the Sony logo without issue and I am able to connect to my PC so that Sony ADB Device is recognised in Device Manager and via the Android Flash Tool 0.9.13.0, but can make no other changes.
My suspicion is that it has something to do with the ADB drivers, (which I linked to my Android Developer Tools Bundle 20131030 64-bit via the Windows Environment Variables), since no devices are recognised when I connect the phone and run the ADB Devices command in the Windows Command Prompt even when Windows is otherwise able to identify the device in Device Manager.
If anyone would be willing to talk me through this, I would be most grateful and would follow up all advice up so this information might be useful to others in the future as I can't see this being an isolated case. Likewise, if I am simply wasting my time and need to get the phone replaced or repaired, at least it would be good to know that I have exhausted all other options.
FYI Prior to the soft brick, I had USB debugging enabled and was in Mass Storage Mode (since this was more stable than Media Transfer Mode).
Hi. I don't see any mention of bootloader status. Did you go through the process of unlocking your bootloader? Or have you checked to see if your phone is "bootloader unlock allowed: yes"? The reason I ask is because the 2 roms you want to try seem to be AOSP-based / Cyanogen, which run on custom kernels. If your bootloader is locked, you are not allowed to flash custom kernels. That might explain the failure code you say in CWM - or it might not (since my bootloader cannot be unlocked, I don't have much experience with those kinds of ROMs).
Moving on to the recovery you flashed - Which recovery did you install? I have been reading that Clockworkmod recovery (v9) is quite buggy. You can get v8 in this thread: http://forum.xda-developers.com/showthread.php?t=2609997
The peeps in this forum are pretty good problem solvers (and creators ;D) - we'll get you going again hopefully!
is your bootloader unlocked dude?i mean if you have a locked bootlader you are not supposed to install custom roms. and if your boot loader is unlocked sony update engine and pc companion wont solve the issue. you have to try with flashtool .firstly you gotta install the flashtool drivers fot xt .and then run flashtool x64. hold the vol down button and connect it using usb. i had this problem many times. and that above procedure may solve your issue
Hi there
First of all thank you so much for replying. These forums are quite daunting at times and it is good to know someone with some clout is listening. Apologies again for going into yet more detail, but it should help me reach a resolution sooner rather than later.
As re the bootloader, I was under the impression that DooMLoRD's Easy Rooting Toolkit 17 would root my stock Xperia T while leaving the bootloader untouched - that is to say locked (as far as I am aware) - should I wish to revert the rooting process at a later date. Now, I obviously lost root somewhere along the line, but has the bootloader also been changed to unlocked? I don't know, but I wouldn't imagine so, so I can only assume it is still locked.
I have recharged my phone ready to make some fresh attempts at this, but to confirm the current state of my Windows 7 connection, I can only connect to the PC in fastboot (with the blue light turned on after connecting to the machine while pressing volume down). There is definitely an issue with some aspect of the drivers since the Sony ADB Device is recognised as working in Device Manager as soon as I connect the phone, however the bothersome Sony Ericsson Seehcri Control Device is also present with a yellow exclamation mark indicating a problem.
Now, whether this is actually affecting my use of the Android Flash Tool 0.9.13.0 and the other flash tools, I can't actually say. When I open the Android Flash Tool with the phone connected, the two options available to me are flashmode or fast boot mode. When I try to use the flashmode with the (as far as I am aware) Xperia T stock firmware LT30P_9.1.A.1.141_PL.ftf, I simply cannot connect in flashmode when prompted. I am asked to remove the phone then reattach it, but no green light ever shows indicating flashmode, only the blue light indicating fast boot mode. When I try to use fast boot mode on the other hand, firstly I am not sure which of the various methods to use - I have of course tried them all, and also I should say both the 32-bit and 64-bit versions of the Flash Tool - but when I do, I am always told that the device needs to be rooted first.
Now, this may have something to do with the kernels/firmware/ROMs that I am using (there's no question all the variations confuse me a little) as I assumed it simply wasn't possible to flash via fastboot yet further reading suggests that it should be possible to flash a stock kernel without root access. The kernels/firmware I have tried are: stock-7.0.A.3.223-twrp-2.3.3.0.elf; 15102012.img; Sony Xperia T Kernel (Stock) With CWM602; Sony Xperia T Kernel (Stock) With TWRP2500. So perhaps I am not using the correct firmware or kernel (I would like to try the LT30P_9.1.A.1.141_PL.ftf, but cannot see an option to do so via fast boot mode). If this is the case and I am able to identify the correct kernel, then perhaps this "device must be rooted first" notification would no longer happen and the state of the ADB drivers would be largely irrelevant.
On the other hand if the flash tool in fast boot mode is always going to ask me to root first, wouldn't it make more sense to focus my attention on being able to connect to DooMLoRD's Easy Rooting Toolkit 17 in order to root the device so I can then use the Flash Tool in fast boot mode without any further issues. But that being the case, perhaps I should focus on working out what is happening with the problem Sony Ericsson Seehcri Control Device in Device Manager. Perhaps when that is resolved I will be able to connect to any of the available flash tools.
As far as ROMs and Recovery Environments are concerned, I truly appreciate your advice - and believe me when I resolve this problem I will be sure to run through my rooting plans BEFORE executing them on these very forums - but for now I need to focus on flashing the phone back to stock or somehow connecting the phone to one of the Sony Flash Tools.
Thanks again for your patience and assistance so far and I look forward any more ideas now I have provided a bit more detail.
My sanity hangs in the balance!
BTW, I imagine you are both quite right about what went went wrong in the first instance - I did not appreciate you couldn't flash any ROM once the Xperia T had been rooted. Again, when I resolve this issue, I will describe my exact plans before proceeding. Thanks for clearing that up. I'm learning all the time.
pfhastie said:
BTW, I imagine you are both quite right about what went went wrong in the first instance - I did not appreciate you couldn't flash any ROM once the Xperia T had been rooted. Again, when I resolve this issue, I will describe my exact plans before proceeding. Thanks for clearing that up. I'm learning all the time.
Click to expand...
Click to collapse
Try unlocking bootloader, fastboot flashing boot.img of the rom you want. (before hand get the rom you want on sd or something) And then you should flash without error.
First of all thank you so much for replying. These forums are quite daunting at times and it is good to know someone with some clout is listening. Apologies again for going into yet more detail, but it should help me reach a resolution sooner rather than later.
Click to expand...
Click to collapse
Detail is always good - much better than a "i rooted my phone and now it doesn't work" post. I agree, information is in many different places - very easy for that to happen.
As re the bootloader, I was under the impression that DooMLoRD's Easy Rooting Toolkit 17 would root my stock Xperia T while leaving the bootloader untouched - that is to say locked (as far as I am aware)
Click to expand...
Click to collapse
Yes - that is, if your bootloader was Locked when you started this whole adventure.
Now, I obviously lost root somewhere along the line
Click to expand...
Click to collapse
- Maybe but maybe not!,
but has the bootloader also been changed to unlocked? I don't know, but I wouldn't imagine so, so I can only assume it is still locked.
Click to expand...
Click to collapse
No - the bootloader unlock is a whole process in itself. DoomLord's (fantastic) root kit will root your phone - meaning, it will root your phone's current system, to allow read/write access to the system's files. When you unlock the bootloader, that allows you to write to partitions (kernel aka boot, radio/baseband? etc.)
I have recharged my phone ready to make some fresh attempts at this, but to confirm the current state of my Windows 7 connection, I can only connect to the PC in fastboot (with the blue light turned on after connecting to the machine while pressing volume down). There is definitely an issue with some aspect of the drivers since the Sony ADB Device is recognised as working in Device Manager as soon as I connect the phone, however the bothersome Sony Ericsson Seehcri Control Device is also present with a yellow exclamation mark indicating a problem.
Click to expand...
Click to collapse
Since right now, what you need to be able to do is flash a stock FTF (to get your phone working again), make sure your phone is disconnected from the PC. Drivers --- all you should need is Sony PC Companion installed (which installs base drivers for the phone), and Flashtool (http://forum.xda-developers.com/showthread.php?t=1943886). After you install Flashtool, you will need to go into its folder - inside of there is a "drivers" folder. go in there and run the EXE. On the left side, make sure to click/check the driver for your phone (xperia T or TL or LT30p or whatever), plus the Fastboot driver, plus the Flashmode driver. Let it do the install. **NOTE** i dont know if Win7 has "driver signature enforcement" - if you notice the drivers are failing to install, that could be why. Look into how to temporarily disable driver signature enforcement and try these 3 drivers again. You will need them!!
Now, whether this is actually affecting my use of the Android Flash Tool 0.9.13.0 and the other flash tools, I can't actually say. When I open the Android Flash Tool with the phone connected, the two options available to me are flashmode or fast boot mode.
Click to expand...
Click to collapse
Stop here for a second - For the purpose of flashing an FTF (i.e. getting your phone back to working state), do not connect the phone yet.
When I try to use the flashmode with the (as far as I am aware) Xperia T stock firmware LT30P_9.1.A.1.141_PL.ftf, I simply cannot connect in flashmode when prompted. I am asked to remove the phone then reattach it, but no green light ever shows indicating flashmode, only the blue light indicating fast boot mode.
Click to expand...
Click to collapse
When using Flashmode, don't connect the phone at all - Choose flashmode, then choose the FTF, then wait for it to process the files, then it will pop up to tell you when to connect the phone. And this is very important - make sure the phone is fully OFF, then, hold the VOLDOWN button, then plug the usb cable in - when you see Flashmode start moving along, you can let go of the VOLDOWN button... and put the phone down gently .. you dont want to distrub this delicate process .
When I try to use fast boot mode on the other hand, firstly I am not sure which of the various methods to use - I have of course tried them all, and also I should say both the 32-bit and 64-bit versions of the Flash Tool - but when I do, I am always told that the device needs to be rooted first.
Click to expand...
Click to collapse
This may all depend on your bootloader - if your bootloader is locked, you likely cannot get the phone into Fastboot mode.
Now, this may have something to do with the kernels/firmware/ROMs that I am using (there's no question all the variations confuse me a little) as I assumed it simply wasn't possible to flash via fastboot yet further reading suggests that it should be possible to flash a stock kernel without root access.
Click to expand...
Click to collapse
Right - flashing via fastboot may not be possible right now if your bootloader is locked.
The kernels/firmware I have tried are: stock-7.0.A.3.223-twrp-2.3.3.0.elf; 15102012.img; Sony Xperia T Kernel (Stock) With CWM602; Sony Xperia T Kernel (Stock) With TWRP2500. So perhaps I am not using the correct firmware or kernel (I would like to try the LT30P_9.1.A.1.141_PL.ftf, but cannot see an option to do so via fast boot mode). If this is the case and I am able to identify the correct kernel, then perhaps this "device must be rooted first" notification would no longer happen and the state of the ADB drivers would be largely irrelevant.
Click to expand...
Click to collapse
Yes - let's skip the kernels for now - and get you flashing a fresh FTF so you can start over. I suggest that once the FTF is flashed, and the phone can boot normally, you dial the Service Menu number and look to see if your phone has "Bootloader Unlock Allowed: Yes" or "Bootloader Unlock Allowed: No". -If it says NO, it means NO! There is currently (as of Feb3/2014) no way to get around this. This means your bootloader cannot be unlocked, which means no custom kernels, and no fastboot! Custom ROMS can still be flashed - just those that are Locked Bootloader-friendly (meaning, the custom rom operates just fine/is based on the Stock kernel - whatever version is preferred will be mentioned in the dev's first post of the thread). There are a few.. like XperimenT and T-Hybrid. I like those.
I'm going to be safe and assume yours says No (like mine, because everyone should suffer with me!! ) You can then ROOT the system like you did, then install CWM Recovery for locked bootloaders (v8!! dont use v9 for now), then you can flash a rom or do whatever. If the custom rom you're installing is based on a stock kernel whose version number is different from your phone's base, then you may be able to find kernel zips that are flashable via CWM - since they are stock kernels, the flash will be allowed because they are signed or whatever. Example: Since you're going for LT30p .141 FTF, you're on the 141 kernel. If the rom you're installing says it recommends the .145 kernel, find the LT30P .145 kernel zip. You can flash that right after flashing the ROM. I think that the 141/145 kernels are similar to each other so in this case, you may not even have to flash from 141 to 145. But you will - because you will become addicted to flashing like the rest of us and you will want to observe/compare how the ROM behaves on each.
On the other hand if the flash tool in fast boot mode is always going to ask me to root first, wouldn't it make more sense to focus my attention on being able to connect to DooMLoRD's Easy Rooting Toolkit 17 in order to root the device so I can then use the Flash Tool in fast boot mode without any further issues.
Click to expand...
Click to collapse
I think what it's really asking you is to Unlock Your Bootloader. Unlocking the bootloader is kind of considered a global root (because it allows writing to any partition on the phone.
But that being the case, perhaps I should focus on working out what is happening with the problem Sony Ericsson Seehcri Control Device in Device Manager. Perhaps when that is resolved I will be able to connect to any of the available flash tools.
Click to expand...
Click to collapse
Yes - hopefully above we have tackled that.
As far as ROMs and Recovery Environments are concerned, I truly appreciate your advice - and believe me when I resolve this problem I will be sure to run through my rooting plans BEFORE executing them on these very forums - but for now I need to focus on flashing the phone back to stock or somehow connecting the phone to one of the Sony Flash Tools.
Thanks again for your patience and assistance so far and I look forward any more ideas now I have provided a bit more detail.
My sanity hangs in the balance!
Click to expand...
Click to collapse
Agreed!! Good luck!
Thanks for the considered responses. hhamzah49, I have tried to use the bootloader unlock in the flash tool, but it simply waits for me to connect in flash mode, which is what I am unable to do. There is not even an opportunity of using a SD card since I cannot start the phone either normally or in a recovery environment.
LaZiODROID, you're the man for going into so much detail, and yes I am looking forward to trying out loads of ROMs if possible, however I can't consider such luxuries until I've flashed the phone back to stock! It seems the bootloader probably has a lot to do with it, and I wish I could confirm one way or another if it is locked or not, but I don't see a way to do that in the phone's current state. I bought it from Amazon UK in October or thereabouts, so perhaps that might give you a clue - I would assume it is locked for now, but happy to try the process working on the assumption that it is unlocked if that is likely to help.
I am already using the Flash Tool you suggested and have OKed the drivers signature on Windows 7. I understand about not connecting the phone prior to preparing the flash tool (in flashmode) - and making sure it is fully off by pressing power and volume down until I feel the three vibrations indicating the phone is fully off - but all this seems to be immaterial as I am never able to connect in flash mode. Only the blue light ever appears, never the green one.
You say it is likely that I will not be able to connect the phone in fast boot mode because my bootloader is locked, however I am ONLY able to connect in fast boot mode so if I am not able to flash via fast boot, I am not sure what other course of action to take.
I think I understand now about the unlocked bootloader and having to source suitable ROMs when the time comes, but not quite there yet.
I have uploaded several images of my current connection via Command Prompt, Device Manager, Android Flash Tool 0.9.13.0 & DooMLoRD's Easy Rooting Toolkit 17. I also noticed that when I start DooMLoRD's Easy Rooting Toolkit 17 with no ADB drivers running in Windows Task Manager Processes, two instances of the ADB driver appear, each leading back to DooMLoRD's Easy Rooting Toolkit 17 and each a slightly different size. When I try to run the Rooting Toolkit, the command prompt simply says "daemon started successfully", but nothing happens after this. If I kill one of the two ADB processes, this seems to start the program off, but to no avail since "device not found" is displayed repeatedly.
Anyway, my comatose phone and I remain on standby ready to try whatever it takes.
LaZiODROID said:
Detail is always good - much better than a "i rooted my phone and now it doesn't work" post. I agree, information is in many different places - very easy for that to happen.
Yes - that is, if your bootloader was Locked when you started this whole adventure. - Maybe but maybe not!, No - the bootloader unlock is a whole process in itself. DoomLord's (fantastic) root kit will root your phone - meaning, it will root your phone's current system, to allow read/write access to the system's files. When you unlock the bootloader, that allows you to write to partitions (kernel aka boot, radio/baseband? etc.)
Since right now, what you need to be able to do is flash a stock FTF (to get your phone working again), make sure your phone is disconnected from the PC. Drivers --- all you should need is Sony PC Companion installed (which installs base drivers for the phone), and Flashtool (http://forum.xda-developers.com/showthread.php?t=1943886). After you install Flashtool, you will need to go into its folder - inside of there is a "drivers" folder. go in there and run the EXE. On the left side, make sure to click/check the driver for your phone (xperia T or TL or LT30p or whatever), plus the Fastboot driver, plus the Flashmode driver. Let it do the install. **NOTE** i dont know if Win7 has "driver signature enforcement" - if you notice the drivers are failing to install, that could be why. Look into how to temporarily disable driver signature enforcement and try these 3 drivers again. You will need them!!
Stop here for a second - For the purpose of flashing an FTF (i.e. getting your phone back to working state), do not connect the phone yet.
When using Flashmode, don't connect the phone at all - Choose flashmode, then choose the FTF, then wait for it to process the files, then it will pop up to tell you when to connect the phone. And this is very important - make sure the phone is fully OFF, then, hold the VOLDOWN button, then plug the usb cable in - when you see Flashmode start moving along, you can let go of the VOLDOWN button... and put the phone down gently .. you dont want to distrub this delicate process .
This may all depend on your bootloader - if your bootloader is locked, you likely cannot get the phone into Fastboot mode.
Right - flashing via fastboot may not be possible right now if your bootloader is locked.
Yes - let's skip the kernels for now - and get you flashing a fresh FTF so you can start over. I suggest that once the FTF is flashed, and the phone can boot normally, you dial the Service Menu number and look to see if your phone has "Bootloader Unlock Allowed: Yes" or "Bootloader Unlock Allowed: No". -If it says NO, it means NO! There is currently (as of Feb3/2014) no way to get around this. This means your bootloader cannot be unlocked, which means no custom kernels, and no fastboot! Custom ROMS can still be flashed - just those that are Locked Bootloader-friendly (meaning, the custom rom operates just fine/is based on the Stock kernel - whatever version is preferred will be mentioned in the dev's first post of the thread). There are a few.. like XperimenT and T-Hybrid. I like those.
I'm going to be safe and assume yours says No (like mine, because everyone should suffer with me!! ) You can then ROOT the system like you did, then install CWM Recovery for locked bootloaders (v8!! dont use v9 for now), then you can flash a rom or do whatever. If the custom rom you're installing is based on a stock kernel whose version number is different from your phone's base, then you may be able to find kernel zips that are flashable via CWM - since they are stock kernels, the flash will be allowed because they are signed or whatever. Example: Since you're going for LT30p .141 FTF, you're on the 141 kernel. If the rom you're installing says it recommends the .145 kernel, find the LT30P .145 kernel zip. You can flash that right after flashing the ROM. I think that the 141/145 kernels are similar to each other so in this case, you may not even have to flash from 141 to 145. But you will - because you will become addicted to flashing like the rest of us and you will want to observe/compare how the ROM behaves on each.
I think what it's really asking you is to Unlock Your Bootloader. Unlocking the bootloader is kind of considered a global root (because it allows writing to any partition on the phone.
Yes - hopefully above we have tackled that.
Agreed!! Good luck!
Click to expand...
Click to collapse
man . you got some real patience to write all those. its just what i wrote in twoo lines :silly:
---------- Post added at 01:48 AM ---------- Previous post was at 01:41 AM ----------
pfhastie said:
Thanks for the considered responses. hhamzah49, I have tried to use the bootloader unlock in the flash tool, but it simply waits for me to connect in flash mode, which is what I am unable to do. There is not even an opportunity of using a SD card since I cannot start the phone either normally or in a recovery environment.
LaZiODROID, you're the man for going into so much detail, and yes I am looking forward to trying out loads of ROMs if possible, however I can't consider such luxuries until I've flashed the phone back to stock! It seems the bootloader probably has a lot to do with it, and I wish I could confirm one way or another if it is locked or not, but I don't see a way to do that in the phone's current state. I bought it from Amazon UK in October or thereabouts, so perhaps that might give you a clue - I would assume it is locked for now, but happy to try the process working on the assumption that it is unlocked if that is likely to help.
I am already using the Flash Tool you suggested and have OKed the drivers signature on Windows 7. I understand about not connecting the phone prior to preparing the flash tool (in flashmode) - and making sure it is fully off by pressing power and volume down until I feel the three vibrations indicating the phone is fully off - but all this seems to be immaterial as I am never able to connect in flash mode. Only the blue light ever appears, never the green one.
You say it is likely that I will not be able to connect the phone in fast boot mode because my bootloader is locked, however I am ONLY able to connect in fast boot mode so if I am not able to flash via fast boot, I am not sure what other course of action to take.
I think I understand now about the unlocked bootloader and having to source suitable ROMs when the time comes, but not quite there yet.
I have uploaded several images of my current connection via Command Prompt, Device Manager, Android Flash Tool 0.9.13.0 & DooMLoRD's Easy Rooting Toolkit 17. I also noticed that when I start DooMLoRD's Easy Rooting Toolkit 17 with no ADB drivers running in Windows Task Manager Processes, two instances of the ADB driver appear, each leading back to DooMLoRD's Easy Rooting Toolkit 17 and each a slightly different size. When I try to run the Rooting Toolkit, the command prompt simply says "daemon started successfully", but nothing happens after this. If I kill one of the two ADB processes, this seems to start the program off, but to no avail since "device not found" is displayed repeatedly.
Anyway, my comatose phone and I remain on standby ready to try whatever it takes.
Click to expand...
Click to collapse
bro we got two buttons vol up and vol down. while connecting to flashtool ,holding the vol up key enters fastboot mode, and holding vol down key enters flashmode. if even holding vol down key makes u enter fastboot mode!!! try vol up key. i m just not sure about it. just give it a shot
rough map
romeoofair said:
man . you got some real patience to write all those. its just what i wrote in twoo lines :silly:
Click to expand...
Click to collapse
Pretty much. You can tell it's doing my head in surely ("Don't call me Shirley").
Anyway, the devil is in the details. I am convinced this can be done once all the parameters are crystal clear.
pfhastie said:
Pretty much. You can tell it's doing my head in surely ("Don't call me Shirley").
Anyway, the devil is in the details. I am convinced this can be done once all the parameters are crystal clear.
Click to expand...
Click to collapse
anyway flashtool is the best sol for your issue bro. hope your device gets back on track soon. sorry i was too lazy to write a long post. so i gave it roughly
pfhastie said:
Pretty much. You can tell it's doing my head in surely ("Don't call me Shirley").
Anyway, the devil is in the details. I am convinced this can be done once all the parameters are crystal clear.
Click to expand...
Click to collapse
try to do a hard reset; (while NOT connected via usb or something) hold power+vol up, it will vibrate 1 time, and then 3 times quick. After that try to connect the usb (NOT while pressing any buttons) and press vol down+power
That should connect it into flashmode.
romeoofair said:
man . you got some real patience to write all those. its just what i wrote in twoo lines :silly:
---------- Post added at 01:48 AM ---------- Previous post was at 01:41 AM ----------
bro we got two buttons vol up and vol down. while connecting to flashtool ,holding the vol up key enters fastboot mode, and holding vol down key enters flashmode. if even holding vol down key makes u enter fastboot mode!!! try vol up key. i m just not sure about it. just give it a shot
Click to expand...
Click to collapse
OK, I'm totally aware that this seems to be the main clincher, if I can somehow get it into flash mode (with green light), but I have tried connecting it pressing every combination of button I can think of, but it only ever connects in fast boot (with blue light). I'm just gonna grab a bite just now, but will try this some more right after and let you know (turning the phone off with one vibration, then three, up and down buttons etc). Thanks again for now.
romeoofair said:
man . you got some real patience to write all those.
Click to expand...
Click to collapse
Thank you. A patient attitude and thorough reply from others is what has kept me coming back to this forum.
its just what i wrote in twoo lines :silly:
Click to expand...
Click to collapse
I disagree.
pfhastie said:
You say it is likely that I will not be able to connect the phone in fast boot mode because my bootloader is locked,
Click to expand...
Click to collapse
I believe I said "if", not "because". The status was unknown to me. I couldn't say anything certain about your device.
I have uploaded several images of my current connection via Command Prompt, Device Manager, Android Flash Tool 0.9.13.0 & DooMLoRD's Easy Rooting Toolkit 17. I also noticed that when I start DooMLoRD's Easy Rooting Toolkit 17 with no ADB drivers running in Windows Task Manager Processes, two instances of the ADB driver appear, each leading back to DooMLoRD's Easy Rooting Toolkit 17 and each a slightly different size. When I try to run the Rooting Toolkit, the command prompt simply says "daemon started successfully", but nothing happens after this. If I kill one of the two ADB processes, this seems to start the program off, but to no avail since "device not found" is displayed repeatedly.
Click to expand...
Click to collapse
Since your phone doesn't boot into a system, I'm not sure if DoomLord's rooting kit will help you. What is there to root? There's no Android system running yet for it to root (right?).
Great news
You beautiful, beautiful people!
I managed to get the phone into flash mode by following your exact instructions to turn the phone fully off when disconnected from the PC (by pressing power & volume up until I felt three vibrations following a single vibration), then connected the phone again WITHOUT pressing the volume down button (as I had always been doing before), then, after the red light came on and the Sony logo appeared, pressing power & volume up again until suddenly the beautiful green light lit up and I was able to flash the phone back to stock firmware (LT30P_9.1.A.1.141_PL.ftf). I lost flashmode the first time because I was so shocked, and there doesn't seem to be time to hang around, but the second time I connected it again the firmware flashed immediately, fairly quickly and without any issues and I am now looking at my freshly started phone and the virgin Sony Android screen.
I have to say this process is unquestionably difficult to explain over the internet, probably because there is no universal implementation of the buttons, but at least once you know how, you are sorted for future problems (of this type at least).
I swear to god, I feel about a stone lighter as this was really hanging over me - not only am I too skint to be worrying about dead phones and warranty issues, but now I feel more secure testing things out, and might even be able to help others in the same predicament in future. I'm not sure if all the excessive detail was warranted, but better to err on the side of caution as a general principle I believe.
My sincere thanks to everyone for helping me out! You have given me a great introduction to the site and I look forward to any and all future communications.
Sadly, I have a pile of crap to attend to, now I know the phone is working, so I will regather my strength for a fresh attempt at rooting the phone (with DooMLoRD Easy Rooting Toolkit 18 For Sony Xperia Devices), installing a recovery environment (CWM v8 as opposed to v9), then flashing a suitable ROM tomorrow evening. I checked my service menu and it states, "Rooting status: Bootloader unlock allowed: Yes," which I trust opens my options a bit more. The two ROMs I am initially wishing to try are CyanogenMod and KitKat, but would be nice to know I could try others without more problems. I am now also aware to backup the TA Partition via the Android Flash Tool 0.9.13.0 before rooting the phone and assume I should hold off reinstalling my Titanium Backups until I am happy with a particular ROM.
I expect this isn't the place to go over these things (although I am quite happy to do so), so I will start a new thread tomorrow to go over my best plan of action.
Thanks again, and I hope this helps out someone else in the same position!
Wicked! Happy flashing. I'm jealous of your unlockable bootloader!
LaZiODROID said:
Wicked! Happy flashing. I'm jealous of your unlockable bootloader!
Click to expand...
Click to collapse
Thank you, LaZiODROID. You've been more than helpful so I trust you don't mind my quickly confirming what I now understand about the bootloader now you have so succinctly brought it to my attention.
I previously hadn't taken into account the state of the bootloader when I tried to flash a ROM, so my failure (Status 7 Error) probably suggests that the bootloader must currently be locked, although it is possible to unlock it on my particular handset (but not yours), is that correct?
All I knew when I used Doomlord's Rooting Kit was that the bootloader would not be affected thus preserving my warranty status, however it would be advisable for me to unlock the bootloader using the Android Flash Tool 0.9.13.0 so I can install custom ROMs without having to worry about special packages like XperimenT & T-Hybrid, is that also correct?
The only final query I have is, if I do unlock the bootloader (using the Android Flash Tool) in order to flash custom ROMs, can I then lock it again for the purposes of my warranty?
I shall assume the bootloader should be unlocked AFTER rooting the device, but BEFORE installing the CWM Recovery Environment.
Thanks again! I will rest easier tonight.
I think hhamzah49 is the hero who got you going with that nice trick (to get you into flashmode)! I guess it turned out that you didn't have driver issues after all.
pfhastie said:
I previously hadn't taken into account the state of the bootloader when I tried to flash a ROM, so my failure (Status 7 Error) probably suggests that the bootloader must currently be locked, although it is possible to unlock it on my particular handset (but not yours), is that correct?
Click to expand...
Click to collapse
Yes. If you're gonna do it, read up (re: backing up your TA, etc.) I have read with bootloader unlocking, you also lose DRM apps like TrackID and the Bravia engine? If you dont use those then you probably won't mind.
All I knew when I used Doomlord's Rooting Kit was that the bootloader would not be affected thus preserving my warranty status
Click to expand...
Click to collapse
Right.
however it would be advisable for me to unlock the bootloader using the Android Flash Tool 0.9.13.0 so I can install custom ROMs without having to worry about special packages like XperimenT & T-Hybrid, is that also correct?
Click to expand...
Click to collapse
There is also the official Sony method of unlocking your bootloader (see the all-in-one thread). Re: ROMS... I guess it's not so much "worrying" about roms like XperimenT/T-Hybrid - they are good roms and they install via CWM recovery just like any other custom ROM, and they will run on an unlocked bootloader. You just have more ROM selection with an unlocked bootloader because you can use the kernels that ROMS like Cyaongen needs.
The only final query I have is, if I do unlock the bootloader (using the Android Flash Tool) in order to flash custom ROMs, can I then lock it again for the purposes of my warranty?
Click to expand...
Click to collapse
Read up to be sure - but I see in Flashtool that there is an FTF for bootloader re-locking (but more importantly it is linked in the all-in-one thread also)... so it sounds like it won't be too hard to re-lock if you need to.
I shall assume the bootloader should be unlocked AFTER rooting the device,
Click to expand...
Click to collapse
Yes so you can back up your TA after rooting?
but BEFORE installing the CWM Recovery Environment.
Click to expand...
Click to collapse
That I'm not certain of. I think that recovery can be installed whether your bootloader is locked or unlocked. For unlocked bootloaders, there are kernels that have recovery built in so you can just fastboot flash one of them.
pfhastie said:
You beautiful, beautiful people!
I managed to get the phone into flash mode by following your exact instructions to turn the phone fully off when disconnected from the PC (by pressing power & volume up until I felt three vibrations following a single vibration), then connected the phone again WITHOUT pressing the volume down button (as I had always been doing before), then, after the red light came on and the Sony logo appeared, pressing power & volume up again until suddenly the beautiful green light lit up and I was able to flash the phone back to stock firmware (LT30P_9.1.A.1.141_PL.ftf). I lost flashmode the first time because I was so shocked, and there doesn't seem to be time to hang around, but the second time I connected it again the firmware flashed immediately, fairly quickly and without any issues and I am now looking at my freshly started phone and the virgin Sony Android screen.
I have to say this process is unquestionably difficult to explain over the internet, probably because there is no universal implementation of the buttons, but at least once you know how, you are sorted for future problems (of this type at least).
I swear to god, I feel about a stone lighter as this was really hanging over me - not only am I too skint to be worrying about dead phones and warranty issues, but now I feel more secure testing things out, and might even be able to help others in the same predicament in future. I'm not sure if all the excessive detail was warranted, but better to err on the side of caution as a general principle I believe.
My sincere thanks to everyone for helping me out! You have given me a great introduction to the site and I look forward to any and all future communications.
Sadly, I have a pile of crap to attend to, now I know the phone is working, so I will regather my strength for a fresh attempt at rooting the phone (with DooMLoRD Easy Rooting Toolkit 18 For Sony Xperia Devices), installing a recovery environment (CWM v8 as opposed to v9), then flashing a suitable ROM tomorrow evening. I checked my service menu and it states, "Rooting status: Bootloader unlock allowed: Yes," which I trust opens my options a bit more. The two ROMs I am initially wishing to try are CyanogenMod and KitKat, but would be nice to know I could try others without more problems. I am now also aware to backup the TA Partition via the Android Flash Tool 0.9.13.0 before rooting the phone and assume I should hold off reinstalling my Titanium Backups until I am happy with a particular ROM.
I expect this isn't the place to go over these things (although I am quite happy to do so), so I will start a new thread tomorrow to go over my best plan of action.
Thanks again, and I hope this helps out someone else in the same position!
Click to expand...
Click to collapse
so my idea about vol up button instead of vol down button worked !!!!!!!! . its usually for entering fastboot mode. i just gave a try :silly:
LaZiODROID said:
I think hhamzah49 is the hero who got you going with that nice trick (to get you into flashmode)! I guess it turned out that you didn't have driver issues after all.
Yes. If you're gonna do it, read up (re: backing up your TA, etc.) I have read with bootloader unlocking, you also lose DRM apps like TrackID and the Bravia engine? If you dont use those then you probably won't mind.
Right. There is also the official Sony method of unlocking your bootloader (see the all-in-one thread). Re: ROMS... I guess it's not so much "worrying" about roms like XperimenT/T-Hybrid - they are good roms and they install via CWM recovery just like any other custom ROM, and they will run on an unlocked bootloader. You just have more ROM selection with an unlocked bootloader because you can use the kernels that ROMS like Cyaongen needs.
Read up to be sure - but I see in Flashtool that there is an FTF for bootloader re-locking (but more importantly it is linked in the all-in-one thread also)... so it sounds like it won't be too hard to re-lock if you need to.
Yes so you can back up your TA after rooting? That I'm not certain of. I think that recovery can be installed whether your bootloader is locked or unlocked. For unlocked bootloaders, there are kernels that have recovery built in so you can just fastboot flash one of them.
Click to expand...
Click to collapse
i feel awesome! Good luck trying roms and stuff!

[Q] Dead in the water, unless a miracle comes along...

Well I decided to sell this Atrix HD I just recently acquired and of course because I have no luck at all not even 5 mins after posting the ad on craigslist I ended up potentially bricking it, sadly. I've spent the better part of the past 2 hours scouring threads and posts hoping for a solution but so far I've had no luck so I'll take this last step and ask if anyone might have any advice or solutions. Here's the situation:
- Atrix HD, originally with JB 4.1.1 on it (pre-final AT&T update, mind you)
- rooted with motochopper then bootloader unlocked with motopocalypse, no issues over the past 10 days or so that I've owned this AHD at all)
- was running CM11 nightly without issues (installed with CWM 6.0.5.1, had flashed several ROMs over the past 10 days including CM12, the Mexican retail ROM, and then back to pure AT&T several times, actually
- about 2 hours before making this post I listed it on craigslist and then used Myth Tools to go back to stock (stock being MB886_att-user-4.1.1-9.8.0Q-97_MB886_FFW-20-27)
- no issues with the flashing process, booted up as expected, worked fine for a few mins then I connected to Wi-Fi and grabbed the final JB update released by AT&T, when it finished I clicked "Install now" to do the reboot and install it
- rebooted into the install and seemed to finish ok, didn't glitch or error out in any respect
- somewhere in the middle of the final reboot after the upgrade it crapped out and then went into the bootloader loop to AP Fastboot (S) mode
- got the following error (which is known to a few other members in the past based on postings I located):
Code:
(typical info at the top of the screen)
Device is LOCKED. Status Code: 0
Battery OK
Connect USB
Data Cable
downgraded security version
update gpt_main version failed
failed to hab check for gpt_backup:0x35
failed to load GPT
CID Read Failure
Invalid CID status 0x69
No SP partition found
Fastboot Reason: Invalid GPT
usb connected
As stated, this AHD was bootloader unlocked without any issues but for whatever is now showing as LOCKED. The thing that concerns me is that if I use fastboot devices it doesn't show the proper info as it used to (the typical TA00etcetcetc model number) - it's showing an 8 digit alphanumeric number I've never seen before so that's a big red flag right there.
I've attempted every process I can locate so far and had zero success at all - only one single fastboot command gives me an OKAY message and that's fastboot oem fb_mode_clear. Every other fastboot command offers up a FAILED (remote failure) error, all of them and I've tried pretty much all of them.
I cannot flash anything to the AHD it seems so I'm guessing that means it's 100% "bricked" in the sense that it's powering up, can be seen from the PC/laptop using fastboot devices, but that's it just not actually there at all for whatever reason.
I've attempted to use 2 different laptops, 1 desktop, multiple various USB ports, cables, you name it I'm pretty confident I've attempted to use it in some respect and still nada, zip, zilch, nothing has come from my efforts. If it's totally bricked then so be it, I'll live, but I keep holding out hope that something I missed will help but it's starting to look like this is beating a dead horse now.
I've attempted using RSD Lite to push the Mexican retail ROM to it (with the edited xml file), the AT&T retail ROM, etc - I can't locate any FXZ files at all so that might still be an option but I simply cannot find any of them if they exist.
So apparently for whatever reason the final JB update pooched this device (even in spite of it not doing it in the past week when I rolled back to stock at least 3 prior times in testing). I'm suspecting - but can't say for certain - that potentially the CWM 6.0.5.1 which I just installed like 2 days ago could be the culprit here; previously using 6.0.4.4 I had no issues whatsoever and that is the only variable that's changed in my flashing process that I can recall.
Anyway, that pretty much covers the situation - if anyone has any advice that might bring this AHD back to life I'm definitely interested in hearing it. I don't have JTAG hardware, don't have a factory cable (if one is required), don't have anyone in the area that does that I'm aware of, etc. Basically if I can't get it resolved on my own then it's a dead device I'll toss in a drawer till that miracle comes along...
Thanks for reading, regardless.
br0adband said:
Well I decided to sell this Atrix HD I just recently acquired and of course because I have no luck at all not even 5 mins after posting the ad on craigslist I ended up potentially bricking it, sadly. I've spent the better part of the past 2 hours scouring threads and posts hoping for a solution but so far I've had no luck so I'll take this last step and ask if anyone might have any advice or solutions. Here's the situation:
- Atrix HD, originally with JB 4.1.1 on it (pre-final AT&T update, mind you)
- rooted with motochopper then bootloader unlocked with motopocalypse, no issues over the past 10 days or so that I've owned this AHD at all)
- was running CM11 nightly without issues (installed with CWM 6.0.5.1, had flashed several ROMs over the past 10 days including CM12, the Mexican retail ROM, and then back to pure AT&T several times, actually
- about 2 hours before making this post I listed it on craigslist and then used Myth Tools to go back to stock (stock being MB886_att-user-4.1.1-9.8.0Q-97_MB886_FFW-20-27)
- no issues with the flashing process, booted up as expected, worked fine for a few mins then I connected to Wi-Fi and grabbed the final JB update released by AT&T, when it finished I clicked "Install now" to do the reboot and install it
- rebooted into the install and seemed to finish ok, didn't glitch or error out in any respect
- somewhere in the middle of the final reboot after the upgrade it crapped out and then went into the bootloader loop to AP Fastboot (S) mode
- got the following error (which is known to a few other members in the past based on postings I located):
Code:
(typical info at the top of the screen)
Device is LOCKED. Status Code: 0
Battery OK
Connect USB
Data Cable
downgraded security version
update gpt_main version failed
failed to hab check for gpt_backup:0x35
failed to load GPT
CID Read Failure
Invalid CID status 0x69
No SP partition found
Fastboot Reason: Invalid GPT
usb connected
As stated, this AHD was bootloader unlocked without any issues but for whatever is now showing as LOCKED. The thing that concerns me is that if I use fastboot devices it doesn't show the proper info as it used to (the typical TA00etcetcetc model number) - it's showing an 8 digit alphanumeric number I've never seen before so that's a big red flag right there.
I've attempted every process I can locate so far and had zero success at all - only one single fastboot command gives me an OKAY message and that's fastboot oem fb_mode_clear. Every other fastboot command offers up a FAILED (remote failure) error, all of them and I've tried pretty much all of them.
I cannot flash anything to the AHD it seems so I'm guessing that means it's 100% "bricked" in the sense that it's powering up, can be seen from the PC/laptop using fastboot devices, but that's it just not actually there at all for whatever reason.
I've attempted to use 2 different laptops, 1 desktop, multiple various USB ports, cables, you name it I'm pretty confident I've attempted to use it in some respect and still nada, zip, zilch, nothing has come from my efforts. If it's totally bricked then so be it, I'll live, but I keep holding out hope that something I missed will help but it's starting to look like this is beating a dead horse now.
I've attempted using RSD Lite to push the Mexican retail ROM to it (with the edited xml file), the AT&T retail ROM, etc - I can't locate any FXZ files at all so that might still be an option but I simply cannot find any of them if they exist.
So apparently for whatever reason the final JB update pooched this device (even in spite of it not doing it in the past week when I rolled back to stock at least 3 prior times in testing). I'm suspecting - but can't say for certain - that potentially the CWM 6.0.5.1 which I just installed like 2 days ago could be the culprit here; previously using 6.0.4.4 I had no issues whatsoever and that is the only variable that's changed in my flashing process that I can recall.
Anyway, that pretty much covers the situation - if anyone has any advice that might bring this AHD back to life I'm definitely interested in hearing it. I don't have JTAG hardware, don't have a factory cable (if one is required), don't have anyone in the area that does that I'm aware of, etc. Basically if I can't get it resolved on my own then it's a dead device I'll toss in a drawer till that miracle comes along...
Thanks for reading, regardless.
Click to expand...
Click to collapse
Did you edit the script when flashing the stock JB with Mythtools or RSD lite?
Sent from my ATRIX-RAZR HD using XDA Free mobile app
Yep, it even states that in my post:
I've attempted using RSD Lite to push the Mexican retail ROM to it (with the edited xml file), the AT&T retail ROM, etc - I can't locate any FXZ files at all so that might still be an option but I simply cannot find any of them if they exist.
Click to expand...
Click to collapse
Nothing will flash to the device which is the biggest issue of all; if I could flash the gpt_main0.bin file I'd be getting somewhere (since as I understand it that sets the partition layout for the partition img's that will follow in the flashing process).
As stated, the only thing that works in terms of a fastboot command is fb_mode_clear which gets an OKAY response (although fb_mode_set does too, actually). But no other fastboot commands are functional - I tried fastboot -w and get:
Code:
D:\motopocalypse\motopocalypse>fastboot -w
erasing 'userdata'...
Invalid partition name userdata
FAILED (remote failure)
finished. total time: 0.140s
so then I try:
Code:
D:\motopocalypse\motopocalypse>fastboot erase userdata
erasing 'userdata'...
Invalid partition name userdata
FAILED (remote failure)
finished. total time: 0.141s
and so on and so forth. No attempts to erase data nor write it in any manner are successful. RSD Lite basically is useless as well (pic attached below). Since I can't write any data to the device at all then as I've said, it's dead in the water unless a miracle comes along. Was looking at eBay in the hopes of finding a busted/broken AHD (damaged glass, etc) and swapping the mobo from that one back into my housing but they're a bit expensive for busted ones at the moment, guess I'll just keep hoping for that miracle.
I've never used a JTAG or factory cable on any devices I've ever owned but I have to wonder if such a contraption might get this back to a working state. Suppose I'll need to do some research into things - I tried to contact Motorola about it but of course since the AHD is so old now and I'm not the original owner, even though I registered the device in my name they won't honor the warranty without a proof of purchase (meaning the retail one years ago when it was new).
Out of over 100 smartphones and other devices I've owned over the decades this is the first time one's actually up and died on me and go figure: it died when doing an OTA update on a clean stock ROM installation.
How ironic...
Have you tried this http://forum.xda-developers.com/showthread.php?t=2259661
Sent from my LG-D850 using XDA Free mobile app
bmatney said:
Have you tried this http://forum.xda-developers.com/showthread.php?t=2259661
Sent from my LG-D850 using XDA Free mobile app
Click to expand...
Click to collapse
Yep, it's all the same basic process whether it's done scripted or manually, same result: as stated, nothing will flash to the AHD and kicks back the same error each time (partition errors). I have no idea what that damned OTA did but it totally wrecked the whole thing...
Even tried doing this under Linux - the issue isn't with fastboot or the builds, it's with the AHD itself because it's not writing anything I'm trying to flash to the device and I'm confident it's because the partition structure is pooched for whatever reason.
I'm still wondering about using a factory cable (will have to buy one off eBay I suppose) will make any difference at all, I just have no experience using them and if the phone isn't flashing/writing data to the device because the partitions are pooched, I can't imagine using a different albeit specific cable will make that much of a difference.
Bleh... I hate it when crap goes wrong, I really do.

Phone bricked, won't turn on. Help please!

Hi. So I decided it was time to move to EMUI 9 and after looking at various posts on here I believe the easiest way was to you EMUI Flasher to flash the ROM (coming from 8.1 rooted).
The phone restarted and went to EMUI installer but after 10% or so I got an error. It asked if I wanted to go to erecovery or reboot the device (I think). As far as I was concerned it was only checked that the ROM was OK and hadn't installed anything so I selected reboot. Now the phone won't come on. I've tried holding the power button for an inordinate period of time but it's not happening.
Is there anything I can do?
EDIT - I've tried a different USB port on my PC and can see something in the device manager now ---- Kedacom USB Device > Android Bootloader Interface ---- which gives me a sliver of hope this can be fixed.
EDIT2 - I could send img files through fastboot all day (phone was recognised even though it wouldn't turn on) but couldn't fix this. Gave DC Phoenix a try but no luck there either. Think I've killed it.
EDIT3 - Just in case anyone ever comes across this. I tried below but nothing would work so I contacted someone on Telegram who said the only option was to open the phone up and short it out. No way I was attempting that so I eventually contacted Huawei UK and told them it had died during an update, never let on that it was MY fault! Anyway, they sent out a prepaid envelope to send to a their repair partner. I won't name them here but they have terrible reviews on Yelp so I was a bit apprehensive. I know the phone arrived with them last Friday as I checked the post tracking but I never heard anything from them. Today out of the blue my phone has come back to me in full working order, repaired under warranty! Considering there was only one thing I was really using root for and it was only a slight convenience, I think I'll just leave it as is.
Are you able to flash anything in fastboot?
Are you able to boot to recovery via fastboot? Disconnect the cable after you give the reboot recovery command in fastboot.
You may be able to flash each component of emui, system, vendor, oeminfo, kernel etc. Seems that it's missing most or all of it.
Bootloader sounds like it's intact.
Btw. The easiest way to update to emui would be to wait for an OTA from Huawei.
Personally I don't see a point, pie is not as efficient as Oreo nor does it have any features to merit an upgrade, in fact you would lose features (4k zooming, functional TWRP)

bricked, loop, whatever but can still boot to fastboot - try lmsa

--> From Motorola, but do at your own risk, as always! <---
Lenovo Motorola Smart Assistant - "lmsa"
I've played with, and done some more research on lmsa.
I am wondering if this would help some folks here.
Please report back success or failure and your particular symptom so others will know.
NOTE: my phone is bootloader unlocked XT1900-1 One fi which OTA'ed itself up from 8.1 to 9 Oct 1 '19 security.
If you are able to back anything up, do so before you do this - if successful, it will flash your phone.
go here
https://www.motorola.com/us/lenovo-motorola-smart-assistant
and download it.
Watch the video for software issues(lower left of that page).
Install it.
Start it up.
You want flash/ rescue.
follow the instructions and put your phone into fastboot mode and connect to PC via USB.
If it offers you something(takes a minute), click the little download arrow and when it's downloaded, click rescue.
This is what it looks like for me before I would click the download arrow.
I believe this tool is for people who have a locked bootloader, never unlocked? LMSA won't recognize my device. RSD lite won't either.
Persistent memory has some value that is not overwritten by Wipe All twrp? Of course I will never relock.... just a heads up to others.
I am one of the few.... 1900-1 Fi working fine on Aug Pie factory and wanted to try ionOS. Flashed fine and working good. Now 3 carriers in my area only US Cellular has service. T-Mob--, Sprin- coverage area 10 - 0% Found as I have before No ROM other than stock for ME can get Data services to work on all three carriers in my area. So for data services trying to reflash back to stock. NO factory image successfully flashed will have modems working. For me. Tried many forms of flash modems only via fastboot, nope.
Different flavors of ADB don't help. Now I haven't tried "Hardware tools loader" style because if wrong will brick it. Unless some one has? Various forms of flashing modems, flash all scripts, ADB versions, Hardware only flash from two ROMs (which is why I am here I think) the Wipe All needed for those two roms some how did it? No blame, just for some reason can't flash back to stock. Others have but....I can't. So hoping a forward update by Motorola Factory Image will do a complete modem working Flash.
kkjb said:
I believe this tool is for people who have a locked bootloader, never unlocked? LMSA won't recognize my device. RSD lite won't either....
Click to expand...
Click to collapse
My phone IS bootloader unlocked - I bought it used(ebay) and it came to me that way with a fresh 8.1 It gives the usual bootloader unlocked error message on boot. It has OTA updated itself to 9 Oct 1 '19 security. I have not tried to modify it because that would prevent me from getting future OTAs.
RSDlite latest (6.2.4) does not recognize my phone. That is RSDlite's fault. I don't think it is yet capable of an A/B phone, let alone a full Treble (ours, on 9, are not full Treble, only partial but DO have A/B sets of partitions).
From the attached pic you can see it was ready to flash my phone with the latest stock ROM appropriate for my device which is a 1900-1 One fi, even though it was unlocked.
I am guessing that Motorola invented lmsa to stem the flow of trashed phones to Moto factory repair. It wouldn't surprise me if it would auto blankflash if necessary.
Try it - it only takes a minute or 2 to test! The worst it can say is "no"!
Understand, tried all the options and LMSA needs I think a stock recovery, boot, fastboot flash mode. The various options show "phone not recognized" no mode available with twrp installed to goto Factory Flash as LMSA appears to wait for in Bootloader Mode. So the drop down box screen will not appear since not recognized.
This post was just a update as you had asked for others to give their results. So going to do hand flash of factory images again, see if try many times... and some how one works
kkjb said:
Understand, tried all the options and LMSA needs I think a stock recovery, boot, fastboot flash mode. The various options show "phone not recognized" no mode available with twrp installed to goto Factory Flash as LMSA appears to wait for in Bootloader Mode. So the drop down box screen will not appear since not recognized.
This post was just a update as you had asked for others to give their results. So going to do hand flash of factory images again, see if try many times... and some how one works
Click to expand...
Click to collapse
Thanks.
Bummer this didn't work for you.
Yeah phone definitely needs to be in fastboot mode.
Hopefully it will help others.
Yeah, back when RSDlite worked you could "sledge hammer" just about anything if it would boot to fastboot! Hopefully they will upgrade it...
No Thank You, you gave me some ideas about the a/b devices thoughts. We have the odd ball not 9.0 at release device so the a/b script is different than some devices. So with the newest ROMs using fastboot "flash all zip scripts" for a/b boot slots I think the problem is factory images want something else for the modems. Oddly the factory images flash fine with no errors just that no modems...imei, wifi, blutooth. 8.0,8.1,9.0 all. Its a weird problem.
kkjb said:
No Thank You, you gave me some ideas about the a/b devices thoughts. We have the odd ball not 9.0 at release device so the a/b script is different than some devices. So with the newest ROMs using fastboot "flash all zip scripts" for a/b boot slots I think the problem is factory images want something else for the modems. Oddly the factory images flash fine with no errors just that no modems...imei, wifi, blutooth. 8.0,8.1,9.0 all. Its a weird problem.
Click to expand...
Click to collapse
Yeah I was thinking a-/b prob
If you ran the "flash all fi bat" to install ionOS it would have worked well since, with Aug 9, you were in a 2 file system phone. so i am guessing
a) you would only have success flashing a 9 stock (fi or not)
b) you would probably have to do a preliminary flash with just the stock 9 bootloader etc (the stuff before the ping. as well as maybe the 2 modem erases later in the command stack - some playing needed there...) tons of guesswork and luck needed here!
c) I found it humorous that ionOS script made b active but I hope the dev knew what he/she were doing.
edit d) so what partitions set is active after you flash your tests? ie you flash something, but what are you then booting to - unless you set something active... I don't believe there is a default - just last successful - though I assume if one fails it will try the other. Perhaps endlessly.
But, yeah, I can see why that flash went well. But of course you are then stuck with the modems they flashed and how that particular opsys planed to use them. US cellular is apparently known to be iffy on the X4 since I saw that caveat on a number of ebay x4 sales - "not guaranteed for...". And Sprint, of course is cdma but is supposedly accessible as LTE by fi??? I have zero knowledge there!!!
WARNING WHEN DEALING WITH ME - I TEND TO MAKE A POST AND THEN KEEP EDITING IT ENDLESSLY>>> SORRY!

Question Phone bricked, stuck in fastboot mode

Hi.
Updated my Pixel5a to latest android 13.
After unlocking bootloader and rooting the the phone with magisk the phone worked ok for a few days.
When suddenly after reboot it got to fastboot mode with failed to load/verify boot images error.
Tried to flash new image but every command I try now I get the "FAILED (remote: 'error getting device locked state Not Ready')" error
To make things worse i cannot switch the phone to recovery or rescue mode it always reboots to fastboot.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Please help
Nobody encountered something similar?
First time since for me since I use smartphones(10+ years), a phone gets bricked so easily without a chance to revive it.
Here is your answer brother
Sorry I missed this.
Unfortunately, it looks like your bootloader is corrupted or malfunctioning, and the only way to fix this is by replacing the mainboard. There are special software tools that can perform a low level reflash, but they are not publicly available.
I have the same issue. After a broken screen replacement, my 5a would often freeze and turn off when these two conditions were met: Not connected to power + screen turned on.
I'm not 100% sure if it was connected to the screen replacement, given the problems only started occurring ~2 weeks later.
The phone would only turn on again when connected to power, even when the battery was already at 100%.
Unfortunately, I thought it was a software issue and didn't get it fixed immediately, so after one of the crashes I was greeted by the fastboot screen from the original poster above. Mine looks exactly the same (except for serial numbers etc.).
Current status:
Locked, unrooted, vanilla Android 13. Assume it's the January OTA, but could be December.
Recovery/Rescue modes don't work, I can only get into Fastboot. Selecting recovery will reboot into Fastboot.
Questions:
Is there a way to restore Android and how? Would it require a mainboard replacement like @V0latyle suggested?
Is the user data on the phone lost, or could it be saved in the process (no recent backups)?
What's the best way to back up an unrooted+locked+vanilla Pixel phone (without Google Cloud backup, given that's not E2E encrypted, afaik)?
Thank you!
niscy said:
I have the same issue. After a broken screen replacement, my 5a would often freeze and turn off when these two conditions were met: Not connected to power + screen turned on.
I'm not 100% sure if it was connected to the screen replacement, given the problems only started occurring ~2 weeks later.
The phone would only turn on again when connected to power, even when the battery was already at 100%.
Unfortunately, I thought it was a software issue and didn't get it fixed immediately, so after one of the crashes I was greeted by the fastboot screen from the original poster above. Mine looks exactly the same (except for serial numbers etc.).
Current status:
Locked, unrooted, vanilla Android 13. Assume it's the January OTA, but could be December.
Recovery/Rescue modes don't work, I can only get into Fastboot. Selecting recovery will reboot into Fastboot.
Questions:
Is there a way to restore Android and how? Would it require a mainboard replacement like @V0latyle suggested?
Is the user data on the phone lost, or could it be saved in the process (no recent backups)?
What's the best way to back up an unrooted+locked+vanilla Pixel phone (without Google Cloud backup, given that's not E2E encrypted, afaik)?
Thank you!
Click to expand...
Click to collapse
1. If I was current when the OP happened, I would've suggested powering on with the button combo to try and get into recovery -- Hold the Power and Volume Down; make sure to try and hold it down for as long as more than a minute. If that doesn't work, I might try Android Flash Tool as Noexcusses once suggested, but that usually requires an unlocked bootloader. Still...since it's officially from Google (the phone's maker), it might have some special "magic" that it can pull of, but don't get your hopes up on that...
3. The currently accepted best method is the Swift Backup app, My Backup Pro is an old and good staple, but without root, there's not much it will be able to save. I believe Swift (can) locks it to your Google account and/or you can password protect the backups, but I'm not totally sure if they encrypt it as well as locking it in such manner; I don't believe My Backup Pro does anything like this. There's always adb commands that might be able to save a little bit more, but again, not by much without root access. And I don't think any unrooted backup method bothers to back up the non-system internal storage.
Sorry for your troubles and hopefully you get it all back up and running! And not to be to "scoldy", but it's always a good idea to back things up (I usually do when I manually update the firmware & security updates each month); I know it's a bit harder to remember when it's an update OTA because it's a lot less involved, but it can be a good trigger to remind to...
simplepinoi177 said:
And not to be to "scoldy", but it's always a good idea to back things up
Click to expand...
Click to collapse
I agree... I had it on my todo list forever, but I just couldn't find a good way to back it up without root. And I didn't want root, because in the past that has prevented certain apps from working (e.g., some banking apps would see it as a security issue and refuse to start) and it has created trouble with OTAs.
Will look into this "Swift" app then. It's a shame, this is so trivial with iPhones (fully encrypted iTunes backups).
simplepinoi177 said:
Hold the Power and Volume Down
Click to expand...
Click to collapse
That combo takes me to Fastboot, but when I select "Recovery" from there, the phone just reboots into Fastboot again with the same errors. I can see the phone in "fastboot devices", though.
simplepinoi177 said:
Android Flash Tool as Noexcusses once suggested
Click to expand...
Click to collapse
Android Flash Tool = the thing that you run in the browser, by clicking the "Flash" link on the Google website? Is that better than adb/fastboot?
Also, do you mean for side-loading the OTA (see https://developers.google.com/android/ota)? I thought that required access to recovery?
Or are you talking about flashing the factory image (https://developers.google.com/android/images#barbet)? I haven't tried that, yet, but I assumed it would wipe my user data?
EDIT: I see the device in the Android Flash Tool, says "connected". It's in Fastboot mode and showing OP's screen. Let's see what I can do from here.
EDIT2: OUCH.
niscy said:
I have the same issue. After a broken screen replacement, my 5a would often freeze and turn off when these two conditions were met: Not connected to power + screen turned on.
I'm not 100% sure if it was connected to the screen replacement, given the problems only started occurring ~2 weeks later.
The phone would only turn on again when connected to power, even when the battery was already at 100%.
Unfortunately, I thought it was a software issue and didn't get it fixed immediately, so after one of the crashes I was greeted by the fastboot screen from the original poster above. Mine looks exactly the same (except for serial numbers etc.).
Current status:
Locked, unrooted, vanilla Android 13. Assume it's the January OTA, but could be December.
Recovery/Rescue modes don't work, I can only get into Fastboot. Selecting recovery will reboot into Fastboot.
Questions:
Is there a way to restore Android and how? Would it require a mainboard replacement like @V0latyle suggested?
Click to expand...
Click to collapse
With a locked bootloader, the only thing you can try to do is sideload an OTA, but if you can't get into recovery mode, I'm not sure there's anything you can do - a locked bootloader will reject commands such as boot, which would be useful in this case to live boot a good image...but if the bootloader was unlocked, you'd just be able to reflash /boot anyway
niscy said:
Is the user data on the phone lost, or could it be saved in the process (no recent backups)?
Click to expand...
Click to collapse
Unfortunately I believe nothing can be done to save it or back it up. If you could get into recovery and sideload an OTA, user data would be preserved, but since you can't get into recovery, that point is moot, because it looks like your only option to get the device working again is to have it repaired, which would most likely involve mainboard replacement and complete loss of all user data (except what was already backed up into the Google cloud)
niscy said:
What's the best way to back up an unrooted+locked+vanilla Pixel phone (without Google Cloud backup, given that's not E2E encrypted, afaik)?
Click to expand...
Click to collapse
There is none. Google cloud backup is the best way, but even this can't back up app data, and there is no way to back up app data without root, because of Scoped Storage - no app can access any other app's "private" data without root permissions.
simplepinoi177 said:
1. If I was current when the OP happened, I would've suggested powering on with the button combo to try and get into recovery -- Hold the Power and Volume Down; make sure to try and hold it down for as long as more than a minute. If that doesn't work, I might try Android Flash Tool as Noexcusses once suggested, but that usually requires an unlocked bootloader. Still...since it's officially from Google (the phone's maker), it might have some special "magic" that it can pull of, but don't get your hopes up on that...
Click to expand...
Click to collapse
Actually the only thing that is required is that OEM Unlocking be enabled in developer options. If it is not, the Flash Tool won't work.
simplepinoi177 said:
3. The currently accepted best method is the Swift Backup app, My Backup Pro is an old and good staple, but without root, there's not much it will be able to save. I believe Swift (can) locks it to your Google account and/or you can password protect the backups, but I'm not totally sure if they encrypt it as well as locking it in such manner; I don't believe My Backup Pro does anything like this. There's always adb commands that might be able to save a little bit more, but again, not by much without root access. And I don't think any unrooted backup method bothers to back up the non-system internal storage.
Click to expand...
Click to collapse
Again, due to scoped storage, root permissions would be required to access any other app's private data to effect a "full" backup.
niscy said:
Will look into this "Swift" app then. It's a shame, this is so trivial with iPhones (fully encrypted iTunes backups).
Click to expand...
Click to collapse
If you can boot into system, you'd be better off using Google Cloud Storage because at least that would back up device settings. Swift Backup won't do this, and is otherwise only able to access "generic" data - phone logs, texts, external storage, etc.
niscy said:
That combo takes me to Fastboot, but when I select "Recovery" from there, the phone just reboots into Fastboot again with the same errors. I can see the phone in "fastboot devices", though.
Click to expand...
Click to collapse
I think you're toast, bud.
niscy said:
Android Flash Tool = the thing that you run in the browser, by clicking the "Flash" link on the Google website? Is that better than adb/fastboot?
Click to expand...
Click to collapse
No, it's just a GUI alternative that only flashes official images. As I mentioned above this only works if OEM unlocking is enabled, or the bootloader is unlocked. A locked bootloader rejects commands like flash, boot, and update, so the flash tool unlocks the bootloader first (if not already unlocked) before proceeding with the flash.
niscy said:
Also, do you mean for side-loading the OTA (see https://developers.google.com/android/ota)? I thought that required access to recovery?
Click to expand...
Click to collapse
Yes, it does.
niscy said:
Or are you talking about flashing the factory image (https://developers.google.com/android/images#barbet)? I haven't tried that, yet, but I assumed it would wipe my user data?
Click to expand...
Click to collapse
You can only do this with an unlocked bootloader. Even though it's the factory image, as I mentioned a couple times already, the commands necessary to flash the image are rejected by a locked bootloader.
As for wiping data, this only happens if you use the included script without editing out the -w. Some people with unlocked bootloaders prefer to update using the script, they just change it so it doesn't wipe data. I personally prefer updating using the factory image but I do everything manually through fastboot and ADB because I'm stubbornly old fashioned.
niscy said:
I agree... I had it on my todo list forever, but I just couldn't find a good way to back it up without root. And I didn't want root, because in the past that has prevented certain apps from working (e.g., some banking apps would see it as a security issue and refuse to start) and it has created trouble with OTAs.
Click to expand...
Click to collapse
Just so you know, there are ways & methods to keep apps from detecting root; I would say (as far as Pixel 2XL, Pixel 5, and Pixel 7's are concerned) about 95% of apps could be made to hide root from; I get Wallet, 3 banking apps, Netflix, Xfinity apps, & certain games which all shouldn't work with a rooted device to work. And, usually, if for some reason hidden detection stops working, it usually is worked on and works again within a short amount of time.
niscy said:
Android Flash Tool = the thing that you run in the browser, by clicking the "Flash" link on the Google website? Is that better than adb/fastboot?
Click to expand...
Click to collapse
Surprisingly, it is a thing you run from the browser...! It surprised the heck out of me too! I would've thought it was a tool you actually download and run... Be aware you most likely need like 3-4GB+ free on your system (usually C drive...
niscy said:
Also, do you mean for side-loading the OTA (see https://developers.google.com/android/ota)? I thought that required access to recovery?
Or are you talking about flashing the factory image (https://developers.google.com/android/images#barbet)? I haven't tried that, yet, but I assumed it would wipe my user data?
Click to expand...
Click to collapse
I am talking about neither of those as they require you to have access to recovery mode and/or require an unlocked bootloader...
niscy said:
EDIT: I see the device in the Android Flash Tool, says "connected". It's in Fastboot mode and showing OP's screen. Let's see what I can do from here.
EDIT2: OUCH.
View attachment 5813733
Click to expand...
Click to collapse
Hey! At least that's something! And hopefully, at least it's not a total loss...could be worse; you might've/could've had to wait while a repair shop completely replaced the motherboard.
If you end up having to wipe the device to recover, consider the worst case scenario where they replace the motherboard...it would mean a wiped device anyway....
Okay guys, thank you for the help so far @V0latyle @simplepinoi177
This is where I'm now:
It only gives me the "wipe" warning when I select the "Lock Bootloader" box, otherwise it directly proceeds to download the image without giving the warning.
How come I'm getting this far while I'm in Fastboot? Am I on the right path?
The image download failed a few times due to supposedly insufficient disk space (a lie). Turns out the problem was Incognito mode, seems that has restrictions that break the flash tool.
But now I'm getting the below instead after the image downloaded. Does that mean that the tool won't work, because my device is locked?
Flash Failed
Fastboot command (flash:bootloader_b) failed: 'error getting device locked state Not Ready'
niscy said:
Okay guys, thank you for the help so far @V0latyle @simplepinoi177
This is where I'm now:
View attachment 5813743
It only gives me the "wipe" warning when I select the "Lock Bootloader" box, otherwise it directly proceeds to download the image without giving the warning.
How come I'm getting this far while I'm in Fastboot? Am I on the right path?
Click to expand...
Click to collapse
See if you can get away with not checking "wipe device" or "lock[ing] bootloader"...
It automatically downloads the factory image -- that's why I said you have to have 3-4GB free on your hard drive...
You get that far because the AFT works in fastboot, and you luckily are still able to see fastboot in your device manager & be in fastboot mode...
I'd say you are on the right path....at least a lot more hopeful than replacing your mobo. But if all doesn't work, you may be required to wipe the device and/or lock the bootloader as well...
Seems the next thing I would have to try is re-running the Flash Tool with the "Wipe device" and "Lock bootloader" boxes checked?
Just to confirm, would the motherboard replacement require a user data wipe? If yes, then I guess I have nothing to lose at this point.
niscy said:
The image download failed a few times due to supposedly insufficient disk space (a lie). Turns out the problem was Incognito mode, seems that has restrictions that break the flash tool.
But now I'm getting the below instead after the image downloaded. Does that mean that the tool won't work, because my device is locked?
Flash Failed
Fastboot command (flash:bootloader_b) failed: 'error getting device locked state Not Ready'
View attachment 5813745
Click to expand...
Click to collapse
Yes, unfortunately this is bad news...
Most likely, I imagine and maybe @V0latyle can concur and/or elaborate, but it is most likely due to you not having OEM unlock ticked in the Developer Mode and an unlocked bootloader -- I stated before, but wasn't exactly sure as I've never tried it not on an unlocked bootloader, but that tool most likely doesn't work without having an unlocked bootloader (& thus also having OEM unlocked ticked as well)...I was just holding out hope that, since it was an official Google tool, it might've been able to do something for you (especially considering you could still see it as a fastboot device in your device manager)....
niscy said:
Seems the next thing I would have to try is re-running the Flash Tool with the "Wipe device" and "Lock bootloader" boxes checked?
Just to confirm, would the motherboard replacement require a user data wipe? If yes, then I guess I have nothing to lose at this point.
Click to expand...
Click to collapse
Yes, motherboard replacement requires a user data wipe. I'm unsure if the technician either does this just as policy/practice, or if after installing the new mobo, the Android OS requires it...but I imagine it is the latter...
It might be worth a try to check those boxes, but most likely will not work. Your bootloader is already locked, so "lock[ing] bootloader" is kinda redundant and wouldn't be necessary for it to work...
Okay guys, I think I'm officially ****ed. No matter what boxes I check, I get the error mentioned above ("Fastboot command (flash:bootloader_b) failed: 'error getting device locked state Not Ready'").
But even worse, I checked with some repair shop and they told me they won't even do motherboard replacements for out-of-warranty devices (because thieves would often use this service to "refurbish" stolen phones).
So I can't even get the motherboard replaced, unless I do it myself? **** my life.
niscy said:
Okay guys, I think I'm officially ****ed. No matter what boxes I check, I get the error mentioned above ("Fastboot command (flash:bootloader_b) failed: 'error getting device locked state Not Ready'").
But even worse, I checked with some repair shop and they told me they won't even do motherboard replacements for out-of-warranty devices (because thieves would often use this service to "refurbish" stolen phones).
So I can't even get the motherboard replaced, unless I do it myself? **** my life.
Click to expand...
Click to collapse
Sorry to hear that it didn't work out...was a long shot...
Is there a uBreakiFix anywhere near you (they are the official repair company for Google)? If not, would it be possible to ship them the unit? Talk to Google versus talking to "some repair shop" (unless that repair shop you talked to was uBreakiFix, then that might be the policy; but I doubt it. Doesn't sound reasonable. I might try another store; even if you have to ship it to a distant one)...
Or course this all means you will have to spend $$$ to get it repaired, so be prepared for that...
niscy said:
Seems the next thing I would have to try is re-running the Flash Tool with the "Wipe device" and "Lock bootloader" boxes checked?
Click to expand...
Click to collapse
That would have no effect on whether the tool works
niscy said:
Just to confirm, would the motherboard replacement require a user data wipe? If yes, then I guess I have nothing to lose at this point.
Click to expand...
Click to collapse
All the storage lives in the flash devices, which live on the mainboard. A new mainboard would be preloaded with firmware, and would have to be programmed with your IMEI, but it would be like getting a brand new phone - no user data whatsoever.
simplepinoi177 said:
Yes, unfortunately this is bad news...
Click to expand...
Click to collapse
Well, hold on. We've got a lot of people all responding at once. @niscy if you could, hold off for a bit until we can get to the bottom of what your device state is and what you can and can't do.
simplepinoi177 said:
Most likely, I imagine and maybe @V0latyle can concur and/or elaborate, but it is most likely due to you not having OEM unlock ticked in the Developer Mode and an unlocked bootloader
Click to expand...
Click to collapse
Yes, one of these is required to use the Android Flash Tool (although if the bootloader is unlocked, OEM Unlocking is default "on"
simplepinoi177 said:
-- I stated before, but wasn't exactly sure as I've never tried it not on an unlocked bootloader, but that tool most likely doesn't work without having an unlocked bootloader (& thus also having OEM unlocked ticked as well)...
Click to expand...
Click to collapse
The bootloader doesn't have to start unlocked; as long as OEM Unlocking is enabled, the Flash Tool will automatically unlock the bootloader and perform the flash. I'm pretty sure this results in a data wipe.
simplepinoi177 said:
I was just holding out hope that, since it was an official Google tool, it might've been able to do something for you (especially considering you could still see it as a fastboot device in your device manager)....
Click to expand...
Click to collapse
Negative, the Flash Tool is simply a GUI interface for ADB Platform Tools and uses the same commands. Since, as I have explained multiple times, a locked bootloader rejects several commands required to flash the device, OEM Unlocking would have to be enabled at the very least to use the tool, which would then unlock the bootloader so that the commands will work.
The only "Google approved" way to update ALL devices regardless of OEM lock or bootloader lock is via OTA, because either update_engine in Android system, or the recovery kernel, is able to verify the update package. The bootloader is not capable of verifying packages applied externally; it can only compare certain partitions (such as /boot) against reference hashes (vbmeta images), which is why it's designed to reject all flashing and booting commands while locked
To be able to perform a complete factory reflash on a locked bootloader, the bootloader would have to have the ability to analyze and verify the entire update package, and it simply does not have the resources to do this. Bootloader only has three jobs:
Verify boot images
Load boot images
Provide USB interface (and must be unlocked to flash anything)
simplepinoi177 said:
Yes, motherboard replacement requires a user data wipe. I'm unsure if the technician either does this just as policy/practice, or if after installing the new mobo, the Android OS requires it...but I imagine it is the latter...
It might be worth a try to check those boxes, but most likely will not work. Your bootloader is already locked, so "lock[ing] bootloader" is kinda redundant and wouldn't be necessary for it to work...
Click to expand...
Click to collapse
As I explained, it's because you'd essentially be getting a brand new phone that has never had user data on it. Wiping data on the old mainboard is unnecessary, but most repair centers don't have a way to transfer user data.
@niscy Before you go any further, let's establish where exactly "Square One" is. Please answer these questions:
Are you able to boot into Android system? Is recovery the only thing not working?
What have you tried to get into recovery mode?
When you attempt to boot into recovery, do you see an error message at the bottom of the bootloader screen?
Do you have any particular issue with backing up your data to Google Cloud if that option is possible?
V0latyle said:
1) Are you able to boot into Android system? Is recovery the only thing not working?
2) What have you tried to get into recovery mode?
3) When you attempt to boot into recovery, do you see an error message at the bottom of the bootloader screen?
4) Do you have any particular issue with backing up your data to Google Cloud if that option is possible?
Click to expand...
Click to collapse
1) Can't get into Android system, just Fastboot.
2) Select recovery from Fastboot mode with the volume keys. I also tried "fastboot reboot recovery" (doesn't seem to work on the 5a). It doesn't make a difference how I get into fastboot (just turning it on vs. voldown + power key combo).
3) Screen just goes black and stays black for 30-60 seconds or so. Then it goes back to the fastboot screen.
4) While setting it up, the explanations in Android suggested that it was not fully end-to-end encrypted. However, I found some articles online that say the opposite. So maybe I just got confused by ambiguous language.
EDIT: flashing without the Android Flash Tool fails too, obviously...
barbet-tq1a.230105.001 % ./flash-all.sh
Sending 'bootloader_b' (8762 KB) OKAY [ 0.350s]
Writing 'bootloader_b' FAILED (remote: 'error getting device locked state Not Ready')
fastboot: error: Command failed
Rebooting into bootloader OKAY [ 0.080s]
Finished. Total time: 0.080s
EDIT2: Seems there's enough E2E encryption in Google backups ... see https://blog.elcomsoft.com/2021/01/...n-apple-icloud-google-and-microsoft-accounts/
V0latyle said:
As I explained, it's because you'd essentially be getting a brand new phone that has never had user data on it. Wiping data on the old mainboard is unnecessary, but most repair centers don't have a way to transfer user data.
Click to expand...
Click to collapse
Interesting...I am aware that, for computers, replacing the motherboard doesn't necessarily touch data because that's usually stored on the hard drive. I figure the internal storage on a smartphone might be set up similarly and have it separated in something the same way (i.e. I imagine it's something similar to a microsd internal circuitry), and thus might not be touched simply by replacing the mobo. I wasn't insinuating that the repair centers would wipe old data that they were going to toss anyway; thought it was separate from the mobo and could possibly survive the exchange.
Thanks for clarifying! Also, I posted this here instead of PMing it because it is somewhat useful information that might help someone else understand things better (like me)...but I do apologize for the off-topic...
I just went back and read your first post. Failure to load/verify boot images means there's a dm-verity issue - as I mentioned previously, the bootloader verifies the integrity of the boot image as it's loaded; this prevents things like persistent rootkits. In this case, it's coming up against an error - the hash of the boot image does not match the verification hash in /vbmeta, probably because it somehow got corrupted during the update. With an unlocked bootloader this would be a fairly simple fix - just reflash /boot - but with a locked bootloader, this is pretty much impossible to fix.
niscy said:
1) Can't get into Android system, just Fastboot.
Click to expand...
Click to collapse
Yeah, because as described above, the boot image is corrupted, and unfortunately, the boot image also contains recovery.
niscy said:
2) Select recovery from Fastboot mode with the volume keys. I also tried "fastboot reboot recovery" (doesn't seem to work on the 5a). It doesn't make a difference how I get into fastboot (just turning it on vs. voldown + power key combo).
3) Screen just goes black and stays black for 30-60 seconds or so. Then it goes back to the fastboot screen.
Click to expand...
Click to collapse
Not sure why the screen goes black for a while, it should just recycle back to the bootloader screen immediately
niscy said:
4) While setting it up, the explanations in Android suggested that it was not fully end-to-end encrypted. However, I found some articles online that say the opposite. So maybe I just got confused by ambiguous language.
Click to expand...
Click to collapse
Yeah. I won't be one of those people who advocates for using a product you don't believe in, but you also have to consider benefit vs risk - in this case, you really don't want to use your data, but you didn't implement an alternative for backups.
niscy said:
EDIT: flashing without the Android Flash Tool fails too, obviously...
barbet-tq1a.230105.001 % ./flash-all.sh
Sending 'bootloader_b' (8762 KB) OKAY [ 0.350s]
Writing 'bootloader_b' FAILED (remote: 'error getting device locked state Not Ready')
fastboot: error: Command failed
Rebooting into bootloader OKAY [ 0.080s]
Finished. Total time: 0.080s
EDIT2: Seems there's enough E2E encryption in Google backups ... see https://blog.elcomsoft.com/2021/01/...n-apple-icloud-google-and-microsoft-accounts/
Click to expand...
Click to collapse
Yeah. At this point, I think you're pretty much limited to two options:
Pay for a repair (expensive)
Buy a new device (even more expensive)
I'm sorry there's no better answer. If OEMs like Google (or in this case, Foxconn as the manufacturer) made a point of providing low level flash tools and training to repair stations, then it might be possible to reflash the boot image. But, they don't do this for a litany of reasons, ranging from "it's cheaper to replace than to fix" to "tools like this could be used for major exploits in the wrong hands".
simplepinoi177 said:
Interesting...I am aware that, for computers, replacing the motherboard doesn't necessarily touch data because that's usually stored on the hard drive. I figure the internal storage on a smartphone might be set up similarly and have it separated in something the same way (i.e. I imagine it's something similar to a microsd internal circuitry), and thus might not be touched simply by replacing the mobo. I wasn't insinuating that the repair centers would wipe old data that they were going to toss anyway; thought it was separate from the mobo and could possibly survive the exchange.
Thanks for clarifying! Also, I posted this here instead of PMing it because it is somewhat useful information that might help someone else understand things better (like me)...but I do apologize for the off-topic...
Click to expand...
Click to collapse
Yeah, mobile mainboards are generally "all in one", with the SoC, modem, and storage all located on the same board. There are sometimes small daughterboards for things like camera modules and microSD/SIM card slots but for the most part everything is on the same board. All flashable storage is located on the same memory devices - this includes the most basic things such as the bootloader itself and the baseband image, as well as the system partitions, and of course the "userspace" data. Imagine if your hard drive was built into your motherboard, and also hosted your BIOS/UEFI.
There is only one more thing I can advise trying, and it will most likely not work: Try to switch back to the A slot. You can do this through fastboot: fastboot --set-active=a
Again, this is not likely to work because I believe the bootloader will reject this command as well.
An interesting note that isn't of much help right now: The whole point of A/B slots (and seamless system updates) is not just being able to update "on the fly" without booting into recovery and waiting 5-10 minutes for an update to finish, but also a "fail safe" so that if an update fails for whatever reason, the system should recycle back to the last working configuration.
Spoiler: It works like this:
Let's assume for the sake of argument you're on slot A, running the January update.
When the February update becomes available, update_engine downloads the update package, extracts it, and writes it to the inactive slot - in this case, slot B.
The bootloader is then commanded to boot slot B on the next reboot
When user reboots device, bootloader marks slot B as active and attempts to boot from that slot. There are a couple of markers here - a slot can be marked active, bootable, and successful.
Once boot proceeds past a certain point, the slot is now marked bootable. Once loaded into Android system, the boot is marked successful.
If for any reason slot B fails to boot, or crashes at a certain point, the device should automatically reboot back to slot A, and upon successful boot of Android, notify the user that the update failed.
I don't know why it failed to do that in this case. Apparently it thought slot B was both bootable and successful, and the failure didn't occur early enough to recycle back to slot A.

Categories

Resources