Bypass Google's Signature Checkmod any Google application on your own and bypass Google GMS' signature checks!
Hello everyone,
After the Pixel Launcher Backport success, today I wanted to share a little bit more on how I bypassed Google's Signature Check, in order to get it working after modding and re-signing it with my own key. Please, do keep in mind that Google's signature checks have nothing to do with standard Android systems keychecking, as those just validate the package is using a valid signature. However, Google's signature check is based on GMS, the commonly named Google Play Services framework, and ensures the application hasn't been previously tampered. For now, this is something (as far as I could see) only present in Google's own apps, but I see it could easily extend to other apps in the future.
However, be warned that by doing the following, the app you're using will believe there's no Google Account linked to your device, and thus will ask you to add it. And even if you add it, it will still not work, since this breaks the link between GMS and the app that's being modded. Keep also in mind that it won't work with all apps providing this reason.
This thread will be composed of: a brief explanation on what's going on, what knowledge you need, what we will do, explained in a brief way (which will be the first post), and many, MANY examples I've prepared for you to understand it, as I've seen it's not enough with just two.
Code:
#include <std/disclaimer.h>
/* No, your warranty doesn't need to be voided!
* The following tutorial will be used exclusively for educational purposes.
* It shall never be used to modify legitimate apps in malicious ways,
* to distribute malware, spyware and such.
*
* The intention is to open the doors to small developers that want to
* theme or add functionality to other apps, but face the Google Signature
* Check problem. Feel free to add suggestions in the comments.
* Oh, and... Sorry Google :P
*/
What you will need:
Medium knowledge of Android's SMALI: Control structures, methods, classes... (basically Java, but ugly ), decompilation of applications, signing applications, etc.
A work environment: Java JDK, APKtool by @iBotPeaches or any other similar tool that supplies baksmali and smali functionality (you can use vanilla JesusFreke's tools too, if you really want to).
Knowledge of Android's logcat: You'll be working with stacktraces and apps giving FCs (Force close) during the tutorial, so you need to know how to find/grab, open, interpret them, and know how to locate something in them.
An application that presents the Google Signature Check crash when you try to open after tampering it. For example:
Code:
05-18 10:57:13.561 9540 9540 E AndroidRuntime: java.lang.SecurityException: Signature check failed for com.google.android.apps.nexuslauncher
05-18 10:57:13.561 9540 9540 E AndroidRuntime: at android.os.Parcel.readException(Parcel.java:1620)
05-18 10:57:13.561 9540 9540 E AndroidRuntime: at android.os.Parcel.readException(Parcel.java:1573)
05-18 10:57:13.561 9540 9540 E AndroidRuntime: at com.google.android.gms.common.internal.o.zza(Unknown Source)
05-18 10:57:13.561 9540 9540 E AndroidRuntime: at com.google.android.gms.common.internal.x.fs(Unknown Source)
05-18 10:57:13.561 9540 9540 E AndroidRuntime: at com.google.android.gms.internal.cy.yQ(Unknown Source)
05-18 10:57:13.561 9540 9540 E AndroidRuntime: at com.google.android.gms.internal.bQ.run(Unknown Source)
05-18 10:57:13.561 9540 9540 E AndroidRuntime: at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:423)
05-18 10:57:13.561 9540 9540 E AndroidRuntime: at java.util.concurrent.FutureTask.run(FutureTask.java:237)
05-18 10:57:13.561 9540 9540 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1113)
05-18 10:57:13.561 9540 9540 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:588)
05-18 10:57:13.561 9540 9540 E AndroidRuntime: at com.google.android.gms.internal.bk.run(Unknown Source)
05-18 10:57:13.561 9540 9540 E AndroidRuntime: at java.lang.Thread.run(Thread.java:818)
05-18 10:57:13.562 2070 2952 W ActivityManager: Force finishing activity com.google.android.apps.nexuslauncher/.NexusLauncherActivity
A WERKIN BRAIN ECKSDEE Meeting the above, I'm sure you already had that.
What are the steps? (briefly explained):
Decompile the application, then tamper it by resigning it with our own key or by adding any modifications you need to it.
Grab a log of what went wrong. Read it and locate the first class after the readException errors. The submethod reference is the one we need to "destroy" in order to know what class is actually invoking the signature verification.
Destroy the method in a way that it's still compilable, but will refuse to work on our phone.
Recompile, sign, install and check the logs it throws. Go to the class/method that is referenced right after the class rejection error, edit it in a way that makes it not to check the signature of the package.
Restore the "destroyed" method to it's original state. Recompile, sign, push, test, test and test a trillion times. If it works, then feel free to publish it.
However, during these steps you can find different situations. For instance:
The classes appear in the root of the smali folder named alphabetically, instead of their respective folders. This happens in: Gmail, YouTube...
The first method (the one you needed to "destroy") that you located in the stacktrace is present in that class over a million times, so you need to check the previous classes in the stacktrace to see the full header of the method where it's actually calling. This happens in: Pixel Launcher, Android Messages...
Once the class is destroyed, the first method that appears in the stacktrace is a onServiceConnected, which is harder to mod than if there was any other before it. This happens in: Gmail, YouTube...
Classification of the thread's posts
2nd post: Pixel Launcher O-3743572
3rd post: Android Messages 2.2.075 (4023518-30.phone)
4th post: Gmail 7.5.7.156101332.release
5th post: YouTube 12.19.56
And a few last words before getting to the thing:
I ain't asking for donations, because I really don't need them this time. This is (one of) my hobby, and I don't mind spending time (endless hours) on making high quality threads and explanations. However, if you really feel like I deserve it, you're free to donate, here. (Or you can also leave Thanks!)
Pixel Launcher O-3743572
Tamper the app with a new signature and/or code modifications you need, preferably using latest Google's Framework, if possible. This will make the app crash (forced by Google Play Services).
Grab a logcat of the crash. It'll show a code similar to this.
Code:
05-18 22:23:14.104 13300 13300 E AndroidRuntime: java.lang.SecurityException: Signature check failed for com.google.android.apps.nexuslauncher
05-18 22:23:14.104 13300 13300 E AndroidRuntime: at android.os.Parcel.readException(Parcel.java:1620)
05-18 22:23:14.104 13300 13300 E AndroidRuntime: at android.os.Parcel.readException(Parcel.java:1573)
05-18 22:23:14.104 13300 13300 E AndroidRuntime: [B]at com.google.android.gms.common.internal.p.zza(Unknown Source)[/B]
05-18 22:23:14.104 13300 13300 E AndroidRuntime: [B]at com.google.android.gms.common.internal.y.eU(Unknown Source)[/B]
05-18 22:23:14.104 13300 13300 E AndroidRuntime: at com.google.android.gms.internal.cr.wV(Unknown Source)
05-18 22:23:14.104 13300 13300 E AndroidRuntime: at com.google.android.gms.internal.bO.run(Unknown Source)
05-18 22:23:14.104 13300 13300 E AndroidRuntime: at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:423)
05-18 22:23:14.104 13300 13300 E AndroidRuntime: at java.util.concurrent.FutureTask.run(FutureTask.java:237)
05-18 22:23:14.104 13300 13300 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1113)
05-18 22:23:14.104 13300 13300 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:588)
05-18 22:23:14.104 13300 13300 E AndroidRuntime: at com.google.android.gms.internal.bj.run(Unknown Source)
05-18 22:23:14.104 13300 13300 E AndroidRuntime: at java.lang.Thread.run(Thread.java:818)
05-18 22:23:14.105 2070 3515 W ActivityManager: Force finishing activity com.google.android.apps.nexuslauncher/.NexusLauncherActivity
Pay attention to the first two lines that mention com.google.android.gms inside the stacktrace, as we will need to check them later. We need to check those two since the first one presents many references called zza.
Now, we are going to locate the part of the code we need to "destroy" in order to locate the class that calls those functions. This is needed because, as explained, there are many methods called the same way in our code, but with different headers. If the method only appeared once, like in Gmail example, we don't need to do this. But, since it does,
Navigate to the folder that contains the mentioned files. According to the stacktrace, the route should be something like smali/com/google/android/gms/common/internal. With an advanced text editor, like Atom, Notepad++, Kate, etc., open the file mentioned in the second line that contains com.google.android.gms inside the stacktrace. In this case, y.smali.
The part that goes after the last dot inside the stacktrace lines are called methods. Inside the file you've opened, try to search for the method that is referenced in the first line in the stacktrace that mentions com.google.android.gms, which in this case is "zza".
You'll see that, right after the method we've searched for, there is another class mentioned in it, between parenthesis (in fact, it's the header of the method we're trying to find). Copy everything until you see the semicolon that means the end of it. In this case looks like this
Code:
Lcom/google/android/gms/common/internal/zzt;Lcom/google/android/gms/common/internal/GetServiceRequest
Now open the file mentioned in the first line that contains com.google.android.gms inside the stacktrace, which in this case is p.smali.
Inside the file you've just opened, try to search for the method header that you just copied from the other class. There should appear 1 single result.
Once you're finally in this method, you have to "destroy" it. What I did was just changing a const/4 value I found in it from 0x0 to 0x1, and it was more than enough to make my phone reject the class (which is what we're looking for). In case there aren't any const/4 values, you can also cut and paste some portions of the code to a new text document and that will also make our phone reject the class (but, if you do so, please be careful not to lose them and remember the exact spot they were located, since we will need to put them back later).
Using Apktool, build the application, sign it and install it in your device. If Apktool rejects to build the code, try changing other parts as explained in the point above.
Grab a new logcat of the crash. It will look something like this.
Code:
05-18 22:38:13.749 13541 13541 E AndroidRuntime: java.lang.VerifyError: Rejecting class com.google.android.gms.common.internal.p because it failed compile-time verification (declaration of 'com.google.android.gms.common.internal.p' appears in /data/app/com.google.android.apps.nexuslauncher-1/base.apk)
05-18 22:38:13.749 13541 13541 E AndroidRuntime: at [B]com.google.android.gms.common.internal.zzu$zza.zzha[/B](Unknown Source)
05-18 22:38:13.749 13541 13541 E AndroidRuntime: at com.google.android.gms.common.internal.f.onServiceConnected(Unknown Source)
05-18 22:38:13.749 13541 13541 E AndroidRuntime: at com.google.android.gms.common.internal.A.onServiceConnected(Unknown Source)
05-18 22:38:13.749 13541 13541 E AndroidRuntime: at android.app.LoadedApk$ServiceDispatcher.doConnected(LoadedApk.java:1224)
05-18 22:38:13.749 13541 13541 E AndroidRuntime: at android.app.LoadedApk$ServiceDispatcher$RunConnection.run(LoadedApk.java:1241)
05-18 22:38:13.749 13541 13541 E AndroidRuntime: at android.os.Handler.handleCallback(Handler.java:739)
05-18 22:38:13.749 13541 13541 E AndroidRuntime: at android.os.Handler.dispatchMessage(Handler.java:95)
05-18 22:38:13.749 13541 13541 E AndroidRuntime: at android.os.Looper.loop(Looper.java:148)
05-18 22:38:13.749 13541 13541 E AndroidRuntime: at android.app.ActivityThread.main(ActivityThread.java:5461)
05-18 22:38:13.749 13541 13541 E AndroidRuntime: at java.lang.reflect.Method.invoke(Native Method)
05-18 22:38:13.749 13541 13541 E AndroidRuntime: at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:726)
05-18 22:38:13.749 13541 13541 E AndroidRuntime: at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:616)
05-18 22:38:13.751 2070 3026 W ActivityManager: Force finishing activity com.google.android.apps.nexuslauncher/.NexusLauncherActivity
Pay attention to the first line of the stacktrace that mentions com.google.android.gms. Thankfully, there was another class/method just before onServiceConnected, so we are lucky to edit it.
Navigate to the folder in which the file is located. In this case, it'll look something like smali/com/google/android/gms/common/internal. Now, open the file mentioned in the stacktrace, which in this case is zzu$zza.smali (as you can see in this example, it can contain a dollar symbol in it).
Find the method referenced in the stacktrace (which could be the first method in the entire class, or even the only one). In my case, it's "zzha".
Inside the method, there are conditional tags, that look something like :cond_X, where X is a number. Find the conditional tag that, right below it, has just a return-object v0, in case it exist. In my case it exists, and it's :cond_1. Inside the method, you will see that there are sentences like if-eqz and if-nez, which make the application jump inside to a :cond_X tag if a variable contains zero in the first case, of if it doesn't contain a zero, like in the second case. Find the if-eqz or if-nez sentence that involves jumping to the :cond_X tag you just located. In my case the line looks something like this
Code:
if-eqz p0, :cond_1
Now that the line is located, change the kind of operation it does. If it's doing a if-eqz like in my case, change it to a if-nez. If it's doing a if-nez, change it to if-eqz. This will make the application jump and exit the code
(As another solution, you can remove the entire method, and just leave the generation of const/4 v0, 0x0 and the return-object v0. I'm not sure if, at this point, it will reject the class or not, but it can also be a solution if the above doesn't work).
Undo the changes you did before you recompiled the code, so you need to go back to the class you "destroyed" and put it back just as it was before (if you didn't close the text editor before, you can always Control+Z it )
Recompile, sign and try if it works. I hope it does
The workspace with the changes made is attached as reference.
Android Messages 2.2.075 (4023518-30.phone)
If you didn't understand quite well the procedure for the Pixel Launcher, here's a similar one.
Tamper the app and grab a log as explained for the Pixel Launcher, above.
Code:
06-01 11:12:09.077 17538 17538 E AndroidRuntime: java.lang.SecurityException: Signature check failed for com.google.android.apps.messaging
06-01 11:12:09.077 17538 17538 E AndroidRuntime: at android.os.Parcel.readException(Parcel.java:1620)
06-01 11:12:09.077 17538 17538 E AndroidRuntime: at android.os.Parcel.readException(Parcel.java:1573)
06-01 11:12:09.077 17538 17538 E AndroidRuntime: at [B]com.google.android.gms.common.internal.zzv$zza$a.zza[/B](Unknown Source)
06-01 11:12:09.077 17538 17538 E AndroidRuntime: at [B]com.google.android.gms.common.internal.zzf.a[/B](Unknown Source)
06-01 11:12:09.077 17538 17538 E AndroidRuntime: at com.google.android.gms.internal.cn$c.a(Unknown Source)
06-01 11:12:09.077 17538 17538 E AndroidRuntime: at com.google.android.gms.internal.cn$f.run(Unknown Source)
06-01 11:12:09.077 17538 17538 E AndroidRuntime: at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:423)
06-01 11:12:09.077 17538 17538 E AndroidRuntime: at java.util.concurrent.FutureTask.run(FutureTask.java:237)
06-01 11:12:09.077 17538 17538 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1113)
06-01 11:12:09.077 17538 17538 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:588)
06-01 11:12:09.077 17538 17538 E AndroidRuntime: at com.google.android.gms.internal.o.run(Unknown Source)
If you have a glance at the first class mentioned that contains com.google.android.gms in it's name, you will see, like in the Pixel launcher, the first class that appears in the stacktrace presents various methods named the same way, in this case there are only two but we have no idea which one is used, so we will find it via the second class mentioned in the stacktrace.
Just like for the Pixel Launcher, we are going to locate the method we need to destroy by using the second file that appears in the stacktrace.
Navigate to the folder that contains the mentioned files. According to the stacktrace, the route should be something like smali/com/google/android/gms/common/internal. With an advanced text editor, like Atom, Notepad++, Kate, etc., open the file mentioned in the second line that contains com.google.android.gms inside the stacktrace. In this case, zzf.smali.
The part that goes after the last dot inside the stacktrace lines are called methods. Inside the file you've opened, try to search for the method that is referenced in the first line in the stacktrace that mentions com.google.android.gms, which in this case is "zzv".
However, unlike in the Pixel Launcher example, there are many references to zzv in our class, so we need to find the ones that are calling to zza (if you remember, the class is called "zzv$zza$a", so we will take advantage of that).
Now, try to find the occurrence in the search that has in the same line both "zzv" and "zza". You'll see they are joined by a ";->", so to short things out, you can search for "zzv;->zza".
You'll see that, right after the method we've searched for, there is another class mentioned in it, between parenthesis (in fact, it's the header of the method we're trying to find). Copy everything until you see the semicolon that means the end of it. In this case looks like this
Code:
Lcom/google/android/gms/common/internal/zzu;Lcom/google/android/gms/common/internal/r
Now open the file mentioned in the first line that contains com.google.android.gms inside the stacktrace, which in this case is zzv$zza$a.smali.
Inside the file you've just opened, try to search for the method header that you just copied from the other class. There should appear 1 single result.
Once you're finally in this method, you have to "destroy" it. In this case, the file fqn.smali, method zza(Lcom/google/android/gms/common/internal/zzu;Lcom/google/android/gms/common/internal/r;). Since there aren't any const/4 values, you can also cut and paste some portions of the code to a new text document and that will also make our phone reject the class (but, if you do so, please be careful not to lose them and remember the exact spot they were located, since we will need to put them back later).
Using Apktool, build the application, sign it and install it in your device. If Apktool rejects to build the code, try changing other parts as explained in the point above.
Grab a new logcat of the crash. It will look something like this.
Code:
06-01 11:17:25.822 18229 18229 E AndroidRuntime: java.lang.VerifyError: Rejecting class com.google.android.gms.common.internal.zzv$zza$a because it failed compile-time verification (declaration of 'com.google.android.gms.common.internal.zzv$zza$a' appears in /data/app/com.google.android.apps.messaging-2/base.apk)
06-01 11:17:25.822 18229 18229 E AndroidRuntime: at [B]com.google.android.gms.common.internal.zzv$zza.zzdf[/B](Unknown Source)
06-01 11:17:25.822 18229 18229 E AndroidRuntime: at com.google.android.gms.common.internal.zzf$g.onServiceConnected(Unknown Source)
06-01 11:17:25.822 18229 18229 E AndroidRuntime: at com.google.android.gms.common.internal.w$b$a.onServiceConnected(Unknown Source)
06-01 11:17:25.822 18229 18229 E AndroidRuntime: at android.app.LoadedApk$ServiceDispatcher.doConnected(LoadedApk.java:1224)
06-01 11:17:25.822 18229 18229 E AndroidRuntime: at android.app.LoadedApk$ServiceDispatcher$RunConnection.run(LoadedApk.java:1241)
06-01 11:17:25.822 18229 18229 E AndroidRuntime: at android.os.Handler.handleCallback(Handler.java:739)
06-01 11:17:25.822 18229 18229 E AndroidRuntime: at android.os.Handler.dispatchMessage(Handler.java:95)
06-01 11:17:25.822 18229 18229 E AndroidRuntime: at android.os.Looper.loop(Looper.java:148)
06-01 11:17:25.822 18229 18229 E AndroidRuntime: at android.app.ActivityThread.main(ActivityThread.java:5461)
06-01 11:17:25.822 18229 18229 E AndroidRuntime: at java.lang.reflect.Method.invoke(Native Method)
06-01 11:17:25.822 18229 18229 E AndroidRuntime: at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:726)
06-01 11:17:25.822 18229 18229 E AndroidRuntime: at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:616)
Pay attention to the first line of the stacktrace that mentions com.google.android.gms. Thankfully, and just like for the Pixel Launcher, there was another class/method just before onServiceConnected, so we are lucky to edit it. Rest of the steps proceed just as the Pixel Launcher.
Navigate to the folder in which the file is located. In this case, it'll look something like smali/com/google/android/gms/common/internal. Now, open the file mentioned in the stacktrace, which in this case is zzv$zza.smali.
Find the method referenced in the stacktrace (which could be the first method in the entire class, or even the only one). In my case, it's "zzdf".
Inside the method, there are conditional tags, that look something like :cond_X, where X is a number. Find the conditional tag that, right below it, has just a return-object v0, in case it exist. In my case it exists, and it's :cond_1. Inside the method, you will see that there are sentences like if-eqz and if-nez, which make the application jump inside to a :cond_X tag if a variable contains zero in the first case, of if it doesn't contain a zero, like in the second case. Find the if-eqz or if-nez sentence that involves jumping to the :cond_X tag you just located. In my case the line looks something like this
Code:
if-eqz p0, :cond_1
Now that the line is located, change the kind of operation it does. If it's doing a if-eqz like in my case, change it to a if-nez. If it's doing a if-nez, change it to if-eqz. This will make the application jump and exit the code
(As another solution, you can remove the entire method, and just leave the generation of const/4 v0, 0x0 and the return-object v0. I'm not sure if, at this point, it will reject the class or not, but it can also be a solution if the above doesn't work).
Undo the changes you did before you recompiled the code, so you need to go back to the class you "destroyed" and put it back just as it was before (if you didn't close the text editor before, you can always Control+Z it )
Recompile, sign and try if it works. I hope it does
The workspace with the changes made is attached as reference.
Gmail 7.5.7.156101332.release
The procedure was very similar to the Pixel Launcher one, but some small parts changed.
Keep in mind, you won't be able to log-in with your Google account, but you can still use it for IMAP/POP3, Exchange and ActiveSync accounts.
Tamper the app and grab a log as explained for the Pixel Launcher.
Code:
05-18 23:47:35.127 14275 14275 E AndroidRuntime: java.lang.SecurityException: Signature check failed for com.google.android.gm
05-18 23:47:35.127 14275 14275 E AndroidRuntime: at android.os.Parcel.readException(Parcel.java:1620)
05-18 23:47:35.127 14275 14275 E AndroidRuntime: at android.os.Parcel.readException(Parcel.java:1573)
05-18 23:47:35.127 14275 14275 E AndroidRuntime: at [B]fqn.a[/B](Unknown Source)
05-18 23:47:35.127 14275 14275 E AndroidRuntime: at fox.a(Unknown Source)
05-18 23:47:35.127 14275 14275 E AndroidRuntime: at gpd.a(Unknown Source)
05-18 23:47:35.127 14275 14275 E AndroidRuntime: at gph.run(Unknown Source)
05-18 23:47:35.127 14275 14275 E AndroidRuntime: at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:423)
05-18 23:47:35.127 14275 14275 E AndroidRuntime: at java.util.concurrent.FutureTask.run(FutureTask.java:237)
05-18 23:47:35.127 14275 14275 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1113)
05-18 23:47:35.127 14275 14275 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:588)
05-18 23:47:35.127 14275 14275 E AndroidRuntime: at gah.run(Unknown Source)
05-18 23:47:35.127 14275 14275 E AndroidRuntime: at java.lang.Thread.run(Thread.java:818)
05-18 23:47:35.128 2070 2951 W ActivityManager: Force finishing activity com.google.android.gm/.welcome.SetupAddressesActivity
05-18 23:47:35.132 2070 2951 W ActivityManager: Force finishing activity com.google.android.gm/.welcome.WelcomeTourActivity
As you can see, the files are not in folders but left outside, in the root of the Smali folder, which probably happens due to a missing framework in Apktool. That however, won't affect the rest of the tutorial.
Since the very first file that appears in logcat's crash only contains 1 single method, we don't need to locate it like we did on the Pixel Launcher, so we can go to it directly.
Open the file mentioned in the stacktrace and then, "destroy" the method that is referenced in it. In this case, the file fqn.smali, method a. (This time, there was no const/4 to change but removing the two first invoke-static and move-result-object lines totally did the trick for me).
Recompile, sign and install. Grab a log and check the first line where it crashes.
Code:
05-18 23:49:59.857 14406 14406 E AndroidRuntime: java.lang.VerifyError: Rejecting class fqn because it failed compile-time verification (declaration of 'fqn' appears in /data/app/com.google.android.gm-1/base.apk)
05-18 23:49:59.857 14406 14406 E AndroidRuntime: at [B]fpf.onServiceConnected[/B](Unknown Source)
05-18 23:49:59.857 14406 14406 E AndroidRuntime: at fpz.onServiceConnected(Unknown Source)
05-18 23:49:59.857 14406 14406 E AndroidRuntime: at android.app.LoadedApk$ServiceDispatcher.doConnected(LoadedApk.java:1224)
05-18 23:49:59.857 14406 14406 E AndroidRuntime: at android.app.LoadedApk$ServiceDispatcher$RunConnection.run(LoadedApk.java:1241)
05-18 23:49:59.857 14406 14406 E AndroidRuntime: at android.os.Handler.handleCallback(Handler.java:739)
05-18 23:49:59.857 14406 14406 E AndroidRuntime: at android.os.Handler.dispatchMessage(Handler.java:95)
05-18 23:49:59.857 14406 14406 E AndroidRuntime: at android.os.Looper.loop(Looper.java:148)
05-18 23:49:59.857 14406 14406 E AndroidRuntime: at android.app.ActivityThread.main(ActivityThread.java:5461)
05-18 23:49:59.857 14406 14406 E AndroidRuntime: at java.lang.reflect.Method.invoke(Native Method)
05-18 23:49:59.857 14406 14406 E AndroidRuntime: at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:726)
05-18 23:49:59.857 14406 14406 E AndroidRuntime: at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:616)
As you can see, unfortunately there is no class preceding the onServiceConnected methods, like there was in the Pixel Launcher, so we need to edit them directly.
Open the first file mentioned in the stacktrace, and locate the onServiceConnected method.
Inside it, we need to find where it calls the class we "destroyed" before, which in this case is named "fqn".
Check the name of the conditional tag :cond_X that appears right above. In this case, it is under :cond_2.
Find all the if-eqz and if-nez sentences that do redirect to the :cond_X you've found, and invert them, from if-eqz to if-nez, and from if-nez to if-eqz.
If the class name appears several times, repeat this for all the conditional tags that contain it.
Undo the changes you did to the "destroyed" class (in this case, fqn.smali).
Recompile, sign and try if it works. I hope it does
The workspace with the changes made is attached as reference.
YouTube 12.19.56-1219563300
Another one, very similar to Gmail example above.
Keep in mind, you won't be able to log-in with your Google account, but you can still play back any videos you want.
Tamper the app and grab a log as explained for the Pixel Launcher.
Code:
06-01 10:56:51.180 16805 16805 E AndroidRuntime: java.lang.SecurityException: Signature check failed for com.google.android.youtube
06-01 10:56:51.180 16805 16805 E AndroidRuntime: at android.os.Parcel.readException(Parcel.java:1620)
06-01 10:56:51.180 16805 16805 E AndroidRuntime: at android.os.Parcel.readException(Parcel.java:1573)
06-01 10:56:51.180 16805 16805 E AndroidRuntime: at [B]jsb.a[/B](Unknown Source)
06-01 10:56:51.180 16805 16805 E AndroidRuntime: at jqo.a(Unknown Source)
06-01 10:56:51.180 16805 16805 E AndroidRuntime: at kgs.a(Unknown Source)
06-01 10:56:51.180 16805 16805 E AndroidRuntime: at kgw.run(Unknown Source)
06-01 10:56:51.180 16805 16805 E AndroidRuntime: at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:423)
06-01 10:56:51.180 16805 16805 E AndroidRuntime: at java.util.concurrent.FutureTask.run(FutureTask.java:237)
06-01 10:56:51.180 16805 16805 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1113)
06-01 10:56:51.180 16805 16805 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:588)
06-01 10:56:51.180 16805 16805 E AndroidRuntime: at kiu.run(Unknown Source)
06-01 10:56:51.180 16805 16805 E AndroidRuntime: at java.lang.Thread.run(Thread.java:818)
06-01 10:56:51.181 6035 6346 W ActivityManager: Force finishing activity com.google.android.youtube/com.google.android.apps.youtube.app.WatchWhileActivity
As you can see, once again the files are not in folders but left outside, in the root of the Smali folder, which probably happens due to a missing framework in Apktool.
Since the very first file that appears in logcat's crash only contains 1 single method, we don't need to locate it like we did on the Pixel Launcher, so we can go to it directly.
Open the file mentioned in the stacktrace and then, "destroy" the method that is referenced in it. In this case, the file jsb.smali, method a. (Once again, there was no const/4 to change but removing the two first invoke-static and move-result-object lines totally did the trick for me).
Recompile, sign and install. Grab a log and check the first line where it crashes.
Code:
06-01 11:00:57.877 16985 16985 E AndroidRuntime: java.lang.VerifyError: Rejecting class jsb because it failed compile-time verification (declaration of 'jsb' appears in /data/app/com.google.android.youtube-2/base.apk)
06-01 11:00:57.877 16985 16985 E AndroidRuntime: at [B]jqw.onServiceConnected[/B](Unknown Source)
06-01 11:00:57.877 16985 16985 E AndroidRuntime: at jrq.onServiceConnected(Unknown Source)
06-01 11:00:57.877 16985 16985 E AndroidRuntime: at android.app.LoadedApk$ServiceDispatcher.doConnected(LoadedApk.java:1224)
06-01 11:00:57.877 16985 16985 E AndroidRuntime: at android.app.LoadedApk$ServiceDispatcher$RunConnection.run(LoadedApk.java:1241)
06-01 11:00:57.877 16985 16985 E AndroidRuntime: at android.os.Handler.handleCallback(Handler.java:739)
06-01 11:00:57.877 16985 16985 E AndroidRuntime: at android.os.Handler.dispatchMessage(Handler.java:95)
06-01 11:00:57.877 16985 16985 E AndroidRuntime: at android.os.Looper.loop(Looper.java:148)
06-01 11:00:57.877 16985 16985 E AndroidRuntime: at android.app.ActivityThread.main(ActivityThread.java:5461)
06-01 11:00:57.877 16985 16985 E AndroidRuntime: at java.lang.reflect.Method.invoke(Native Method)
06-01 11:00:57.877 16985 16985 E AndroidRuntime: at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:726)
06-01 11:00:57.877 16985 16985 E AndroidRuntime: at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:616)
06-01 11:00:57.878 6035 8017 W ActivityManager: Force finishing activity com.google.android.youtube/com.google.android.apps.youtube.app.WatchWhileActivity
As you can see, once again there is no class preceding the onServiceConnected methods, like there was in the Pixel Launcher, so we need to edit them directly.
Open the first file mentioned in the stacktrace, "jqw.smali", and locate the onServiceConnected method.
Inside it, we need to find where it calls the class we "destroyed" before, which in this case is named "jsb".
Check the name of the conditional tag :cond_X that appears right above. In this case, it is under :cond_2.
Find all the if-eqz and if-nez sentences that do redirect to the :cond_X you've found, and invert them, from if-eqz to if-nez, and from if-nez to if-eqz.
If the class name appears several times, repeat this for all the conditional tags that contain it.
Undo the changes you did to the "destroyed" class (in this case, jsb.smali).
Recompile, sign and try if it works. I hope it does
The workspace with the changes made is attached here as reference.
After over a year, some people said they found my tutorial useful (up to today's APKs even) and that I should consider on leaving it opened for any kind of doubt or comment someone would like to say here. So I'll keep it opened.
Hello, do you have a solution to get around the waze signature?
Thank you
I have a Oneplus One that constantly crashes because of hardware issues. I have made a TWRP backup of that phone.
So I bought a new OnePlus One inserted my SIM card and using TWRP I installed the backup that I made on the old phone using the 'Recover' button in TWRP.
I also copied over everything that was in '/sdcard' on my old phone into '/sdcard' on my new phone. (before that I deleted everything from that folder besides TRWP)
The backup seems to be fully restored on the new phone and I can use it.
But I have 'No service'. It did ask me for my SIM card PIN, but that's it. I can't make call, send SMS oder use mobile data.
Could this be somehow related to the fact that some IDs in the phone changed? IMEI maybe? What can I do about it?
Device: OnePlus One
Recovery: Latest TWRP for my device
ROM: Cyanogenmod 13.0-2016-08-19
Android: 6.0.1
Tweaks: Xposed Framework v86, Xprivacy 3.6.19 (481), AFWall+ 2.9.7, MicroG instead of GAPPS, Autostarts 1.9.7
Aps like calendar, weather service etc disabled
Google Maps and Google heavily restricted and without Internet
Here is my logcat *:E (Please keep in mind most of these errors already occured on my old device, the software didn't change after all.)
HTML:
11-05 00:29:22.232 1778 1778 E ConnectivityService: Ignoring protectedNetwork 15
11-05 00:29:22.599 1778 1778 E AppSgstMgrService: no app suggest provider found
11-05 00:29:22.612 1778 1778 E BrokerableCMSystemService: Setting brokered service connection [email protected]829f3
11-05 00:29:22.612 1778 1778 E BrokerableCMSystemService: Setting brokered service connection [email protected]416b0
11-05 00:29:22.614 1778 1778 E BrokerableCMSystemService: Setting brokered service connection or[email protected]ec77929
11-05 00:29:22.614 1778 1778 E BrokerableCMSystemService: Setting brokered service connection or[email protected]8f44ae
11-05 00:29:22.617 1778 1778 E BrokerableCMSystemService: Setting brokered service connection [email protected]81724f
11-05 00:29:22.618 1778 1778 E BrokerableCMSystemService: Setting brokered service connection [email protected]beddc
11-05 00:29:22.666 1778 1778 E LockSettingsStorage: Cannot read file java.io.FileNotFoundException: /data/system/password.key: open failed: ENOENT (No such file or directory)
11-05 00:29:22.696 1778 1778 E WifiService: Invoking mWifiStateMachine.setWifiEnabled
11-05 00:29:23.847 1778 1778 E NetdConnector: NDC Command {2 bandwidth enable} took too long (561ms)
11-05 00:29:24.021 1778 2760 E NetdConnector: NDC Command {3 softap fwreload wlan0 STA} took too long (716ms)
11-05 00:29:24.773 1778 1778 E NetdConnector: NDC Command {4 strict enable} took too long (925ms)
11-05 00:29:24.774 1778 2760 E NetdConnector: NDC Command {5 interface getcfg wlan0} took too long (752ms)
11-05 00:29:26.448 1778 1778 E BrokerableCMSystemService: Failed to bind to implementation ComponentInfo{org.cyanogenmod.weatherservice/org.cyanogenmod.weatherservice.WeatherManagerService}
11-05 00:29:26.583 1778 1778 E InputMethodManagerService: Ignoring updateSystemUiLocked due to an invalid token. uid:1000 token:null
11-05 00:29:26.801 1778 1778 E LocationManagerService: Unable to bind FusedProxy.
11-05 00:29:26.803 1778 1778 E LocationManagerService: Unable to bind FLP Geofence proxy.
11-05 00:29:26.834 1778 1778 E LocationManagerService: Unable to bind ActivityRecognitionProxy.
11-05 00:29:27.539 1778 1778 E ActivityThread: Failed to find provider info for com.android.calendar
11-05 00:29:27.539 1778 1778 E ActivityThread: Failed to find provider info for com.android.calendar
11-05 00:29:27.938 1778 2762 E ConnectivityService: Failed to find Messenger in unregisterNetworkFactory
11-05 00:29:28.634 3610 3610 E ActivityThread: Service org.microg.nlp.geocode.GeocodeServiceV1 has leaked ServiceConnection [email protected] that was originally bound here
11-05 00:29:28.634 3610 3610 E ActivityThread: android.app.ServiceConnectionLeaked: Service org.microg.nlp.geocode.GeocodeServiceV1 has leaked ServiceConnection [email protected] that was originally bound here
11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.LoadedApk$ServiceDispatcher.<init>(LoadedApk.java:1093)
11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.LoadedApk.getServiceDispatcher(LoadedApk.java:987)
11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.ContextImpl.bindServiceCommon(ContextImpl.java:1313)
11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.ContextImpl.bindService(ContextImpl.java:1296)
11-05 00:29:28.634 3610 3610 E ActivityThread: at android.content.ContextWrapper.bindService(ContextWrapper.java:610)
11-05 00:29:28.634 3610 3610 E ActivityThread: at org.microg.nlp.AbstractBackendHelper.bind(AbstractBackendHelper.java:94)
11-05 00:29:28.634 3610 3610 E ActivityThread: at org.microg.nlp.geocode.BackendFuser.bind(BackendFuser.java:41)
11-05 00:29:28.634 3610 3610 E ActivityThread: at org.microg.nlp.geocode.GeocodeProviderV1.<init>(GeocodeProviderV1.java:32)
11-05 00:29:28.634 3610 3610 E ActivityThread: at org.microg.nlp.geocode.GeocodeServiceV1.getProvider(GeocodeServiceV1.java:30)
11-05 00:29:28.634 3610 3610 E ActivityThread: at org.microg.nlp.geocode.GeocodeServiceV1.getProvider(GeocodeServiceV1.java:19)
11-05 00:29:28.634 3610 3610 E ActivityThread: at org.microg.nlp.AbstractProviderService.onBind(AbstractProviderService.java:38)
11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.ActivityThread.handleBindService(ActivityThread.java:2938)
11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.ActivityThread.-wrap2(ActivityThread.java)
11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1451)
11-05 00:29:28.634 3610 3610 E ActivityThread: at android.os.Handler.dispatchMessage(Handler.java:102)
11-05 00:29:28.634 3610 3610 E ActivityThread: at android.os.Looper.loop(Looper.java:148)
11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.ActivityThread.main(ActivityThread.java:5461)
11-05 00:29:28.634 3610 3610 E ActivityThread: at java.lang.reflect.Method.invoke(Native Method)
11-05 00:29:28.634 3610 3610 E ActivityThread: at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:726)
11-05 00:29:28.634 3610 3610 E ActivityThread: at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:616)
11-05 00:29:28.634 3610 3610 E ActivityThread: at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:102)
11-05 00:29:30.411 3947 4139 E ActivityThread: Failed to find provider info for com.android.exchange.directory.provider
11-05 00:29:32.403 4576 4765 E ActivityThread: Failed to find provider info for com.google.android.partnersetup.rlzappprovider
11-05 00:29:34.299 1778 4935 E ActivityThread: Failed to find provider info for downloads
11-05 00:29:34.299 1778 4935 E BootReceiver: Can't remove old update packages
11-05 00:29:34.299 1778 4935 E BootReceiver: java.lang.IllegalArgumentException: Unknown URL content://downloads/my_downloads
11-05 00:29:34.299 1778 4935 E BootReceiver: at android.content.ContentResolver.delete(ContentResolver.java:1328)
11-05 00:29:34.299 1778 4935 E BootReceiver: at android.provider.Downloads.removeAllDownloadsByPackage(Downloads.java:810)
11-05 00:29:34.299 1778 4935 E BootReceiver: at com.android.server.BootReceiver.removeOldUpdatePackages(BootReceiver.java:93)
11-05 00:29:34.299 1778 4935 E BootReceiver: at com.android.server.BootReceiver.-wrap2(BootReceiver.java)
11-05 00:29:34.299 1778 4935 E BootReceiver: at com.android.server.BootReceiver$1.run(BootReceiver.java:82)
--------- beginning of main
11-05 00:29:38.000 6082 6163 E Parcel : Reading a NULL string not supported here.
11-05 00:29:38.007 6082 6163 E Parcel : Reading a NULL string not supported here.
11-05 00:29:38.101 6082 6163 E Parcel : Reading a NULL string not supported here.
11-05 00:29:38.107 6082 6163 E Parcel : Reading a NULL string not supported here.
11-05 00:29:38.247 6098 6098 E Parcel : Reading a NULL string not supported here.
11-05 00:29:38.254 6098 6098 E Parcel : Reading a NULL string not supported here.
11-05 00:29:38.259 6098 6098 E Parcel : Reading a NULL string not supported here.
11-05 00:29:38.265 6098 6098 E Parcel : Reading a NULL string not supported here.
11-05 00:29:38.271 6098 6098 E Parcel : Reading a NULL string not supported here.
11-05 00:29:44.057 5016 5016 E Parcel : Reading a NULL string not supported here.
11-05 00:29:44.065 5016 5016 E Parcel : Reading a NULL string not supported here.
11-05 00:29:44.246 1778 2762 E ConnectivityService: Unexpected mtu value: 0, wlan0
11-05 00:29:44.410 1778 1778 E BrokerableCMSystemService: Failed to bind to implementation ComponentInfo{org.cyanogenmod.weatherservice/org.cyanogenmod.weatherservice.WeatherManagerService}
11-05 00:29:44.532 5222 5222 E Volley : [1] UpdateCheckService.onErrorResponse: Error:
11-05 00:29:44.532 5222 5222 E Volley : [1] UpdateCheckService.onErrorResponse: Error type: com.android.volley.NoConnectionError: java.net.ConnectException: failed to connect to download.cyanogenmod.org/172.217.22.115 (port 443) after 5000ms: isConnected failed: ECONNREFUSED (Connection refused)
11-05 00:29:46.164 3781 4250 E PhoneInterfaceManager: [PhoneIntfMgr] getIccId: ICC ID is null or empty.
11-05 00:29:46.179 3781 4278 E PhoneInterfaceManager: [PhoneIntfMgr] getIccId: ICC ID is null or empty.
11-05 00:29:46.203 3781 4250 E PhoneInterfaceManager: [PhoneIntfMgr] getIccId: ICC ID is null or empty.
11-05 00:29:46.213 3781 6642 E PhoneInterfaceManager: [PhoneIntfMgr] getIccId: ICC ID is null or empty.
11-05 00:29:46.219 3781 4608 E PhoneInterfaceManager: [PhoneIntfMgr] getIccId: ICC ID is null or empty.
11-05 00:29:46.226 3781 4278 E PhoneInterfaceManager: [PhoneIntfMgr] getIccId: ICC ID is null or empty.
11-05 00:29:46.240 3781 3802 E PhoneInterfaceManager: [PhoneIntfMgr] getIccId: ICC ID is null or empty.
11-05 00:29:47.211 6669 6720 E ActivityThread: Failed to find provider info for com.google.android.partnersetup.rlzappprovider
11-05 00:29:48.017 6757 6757 E Parcel : Reading a NULL string not supported here.
11-05 00:29:48.028 6757 6757 E Parcel : Reading a NULL string not supported here.
11-05 00:29:48.038 6757 6757 E Parcel : Reading a NULL string not supported here.
11-05 00:29:54.222 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=0
11-05 00:29:54.225 4719 4792 E MessagingApp: MmsUtils: SMS temporary failure
11-05 00:30:29.388 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=0
11-05 00:30:29.388 4719 6977 E MessagingApp: MmsUtils: SMS temporary failure
11-05 00:30:45.247 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=0
11-05 00:30:45.247 4719 7098 E MessagingApp: MmsUtils: SMS temporary failure
11-05 00:31:13.891 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=0
11-05 00:31:13.891 4719 7153 E MessagingApp: MmsUtils: SMS temporary failure
11-05 00:31:55.143 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=0
11-05 00:31:55.147 4719 7656 E MessagingApp: MmsUtils: SMS temporary failure
11-05 00:33:16.409 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=0
11-05 00:33:16.410 4719 7793 E MessagingApp: MmsUtils: SMS temporary failure
11-05 00:36:01.640 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=0
11-05 00:36:01.640 4719 8273 E MessagingApp: MmsUtils: SMS temporary failure
11-05 00:37:46.284 3781 3781 E Xposed : java.lang.NoSuchMethodError: com.android.settings.location.SettingsInjector#parseServiceInfo(android.content.pm.ResolveInfo,android.content.pm.PackageManager)#exact
11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.XposedHelpers.findMethodExact(XposedHelpers.java:337)
11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.XposedHelpers.findAndHookMethod(XposedHelpers.java:178)
11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.XposedHelpers.findAndHookMethod(XposedHelpers.java:253)
11-05 00:37:46.284 3781 3781 E Xposed : at be.r3w6.intika.xposedunifiednlp.UnifiedNlp.handleLoadPackage(UnifiedNlp.java:31)
11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.IXposedHookLoadPackage$Wrapper.handleLoadPackage(IXposedHookLoadPackage.java:34)
11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.callbacks.XC_LoadPackage.call(XC_LoadPackage.java:61)
11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.callbacks.XCallback.callAll(XCallback.java:106)
11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.XposedInit$4.afterHookedMethod(XposedInit.java:172)
11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.XposedBridge.handleHookedMethod(XposedBridge.java:348)
11-05 00:37:46.284 3781 3781 E Xposed : at android.app.LoadedApk.<init>(<Xposed>)
11-05 00:37:46.284 3781 3781 E Xposed : at android.app.ActivityThread.getPackageInfo(ActivityThread.java:1858)
11-05 00:37:46.284 3781 3781 E Xposed : at android.app.ActivityThread.getPackageInfoNoCheck(ActivityThread.java:1820)
11-05 00:37:46.284 3781 3781 E Xposed : at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1361)
11-05 00:37:46.284 3781 3781 E Xposed : at android.os.Handler.dispatchMessage(Handler.java:102)
11-05 00:37:46.284 3781 3781 E Xposed : at android.os.Looper.loop(Looper.java:148)
11-05 00:37:46.284 3781 3781 E Xposed : at android.app.ActivityThread.main(ActivityThread.java:5461)
11-05 00:37:46.284 3781 3781 E Xposed : at java.lang.reflect.Method.invoke(Native Method)
11-05 00:37:46.284 3781 3781 E Xposed : at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:726)
11-05 00:37:46.284 3781 3781 E Xposed : at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:616)
11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:102)
11-05 00:38:04.278 383 2771 E bt_a2dp_hw: adev_set_parameters: ERROR: set param called even when stream out is null
11-05 00:38:05.039 383 2770 E bt_a2dp_hw: adev_set_parameters: ERROR: set param called even when stream out is null
11-05 00:46:22.314 4719 8980 E MessagingApp: MmsUtils: sending SMS timed out
11-05 00:46:22.563 4719 9272 E SpannableStringBuilder: SPAN_EXCLUSIVE_EXCLUSIVE spans cannot have a zero length
11-05 08:50:42.257 2838 2838 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 0
11-05 08:50:42.258 2838 2838 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 0
11-05 08:50:42.272 2838 2838 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 0
11-05 08:50:42.272 2838 2838 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 0
11-05 08:50:42.491 383 2770 E bt_a2dp_hw: adev_set_parameters: ERROR: set param called even when stream out is null
11-05 08:50:51.099 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=0
11-05 08:50:51.099 4719 4719 E MessagingApp: SmsSender: ignoring sent result. requestId=content://sms/137 partId=0 resultCode=4
11-05 08:51:01.757 5440 5440 E ProcessUtils: XPrivacy
11-05 08:51:01.757 5440 5440 E ProcessUtils: java.io.FileNotFoundException: XPrivacy
11-05 08:51:01.757 5440 5440 E ProcessUtils: at biz.bokhorst.xprivacy.XIoBridge.a(SourceFile:136)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at biz.bokhorst.xprivacy.XPrivacy$XMethodHook.beforeHookedMethod(SourceFile:628)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at de.robv.android.xposed.XposedBridge.handleHookedMethod(XposedBridge.java:314)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at libcore.io.IoBridge.open(<Xposed>)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at java.io.FileInputStream.<init>(FileInputStream.java:76)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at java.io.FileInputStream.<init>(FileInputStream.java:103)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at java.io.FileReader.<init>(FileReader.java:66)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.android.gms.common.util.e.a(Unknown Source)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.android.gms.common.util.e.a(Unknown Source)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.android.gms.measurement.internal.p.N(Unknown Source)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.android.gms.measurement.internal.ab.<init>(Unknown Source)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.android.gms.measurement.internal.aj.<init>(Unknown Source)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.android.gms.measurement.internal.aj.a(Unknown Source)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.android.gms.measurement.AppMeasurement.getInstance(Unknown Source)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at java.lang.reflect.Method.invoke(Native Method)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.firebase.a.a(Unknown Source)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.firebase.a.a(Unknown Source)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.firebase.a.a(Unknown Source)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.firebase.provider.FirebaseInitProvider.onCreate(Unknown Source)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.content.ContentProvider.attachInfo(ContentProvider.java:1748)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.content.ContentProvider.attachInfo(ContentProvider.java:1723)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.firebase.provider.FirebaseInitProvider.attachInfo(Unknown Source)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.app.ActivityThread.installProvider(ActivityThread.java:5197)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.app.ActivityThread.installContentProviders(ActivityThread.java:4792)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.app.ActivityThread.handleBindApplication(ActivityThread.java:4732)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at de.robv.android.xposed.XposedBridge.invokeOriginalMethodNative(Native Method)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at de.robv.android.xposed.XposedBridge.handleHookedMethod(XposedBridge.java:334)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.app.ActivityThread.handleBindApplication(<Xposed>)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.app.ActivityThread.-wrap1(ActivityThread.java)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1424)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.os.Handler.dispatchMessage(Handler.java:102)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.os.Looper.loop(Looper.java:148)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.app.ActivityThread.main(ActivityThread.java:5461)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at java.lang.reflect.Method.invoke(Native Method)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:726)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:616)
11-05 08:51:01.757 5440 5440 E ProcessUtils: at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:102)
11-05 08:51:02.937 5440 5440 E RecyclerView: No adapter attached; skipping layout
11-05 08:51:03.094 5440 5440 E RecyclerView: No adapter attached; skipping layout
11-05 08:52:19.980 5440 5828 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 0
11-05 08:52:19.980 5440 5828 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 0
11-05 08:52:20.037 383 5834 E OMXNodeInstance: setConfig(39:google.aac.decoder, ConfigPriority(0x6f800002)) ERROR: Undefined(0x80001001)
11-05 08:52:20.069 383 2323 E ACDB-LOADER: Error: ACDB AudProc vol returned = -19
11-05 08:52:20.069 383 2323 E ACDB-LOADER: Error: ACDB AFE returned = -19
11-05 08:54:31.993 5440 6091 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 0
11-05 08:54:31.993 5440 6091 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 0
11-05 08:54:32.049 383 6097 E OMXNodeInstance: setConfig(3a:google.aac.decoder, ConfigPriority(0x6f800002)) ERROR: Undefined(0x80001001)
11-05 08:54:32.074 383 2323 E ACDB-LOADER: Error: ACDB AudProc vol returned = -19
11-05 08:54:32.074 383 2323 E ACDB-LOADER: Error: ACDB AFE returned = -19
11-05 08:54:54.329 4719 4719 E ApkAssets: Error while loading asset assets/natives_blob_64.bin: java.io.FileNotFoundException: assets/natives_blob_64.bin
11-05 08:54:54.329 4719 4719 E ApkAssets: Error while loading asset assets/snapshot_blob_64.bin: java.io.FileNotFoundException: assets/snapshot_blob_64.bin
11-05 08:57:48.994 383 2329 E bt_a2dp_hw: adev_set_parameters: ERROR: set param called even when stream out is null
11-05 09:00:11.154 383 2771 E bt_a2dp_hw: adev_set_parameters: ERROR: set param called even when stream out is null
11-05 09:00:46.880 383 2770 E bt_a2dp_hw: adev_set_parameters: ERROR: set param called even when stream out is null
11-05 09:03:07.713 383 383 E bt_a2dp_hw: adev_set_parameters: ERROR: set param called even when stream out is null
ferivon said:
I have a Oneplus One that constantly crashes because of hardware issues. I have made a TWRP backup of that phone.
So I bought a new OnePlus One inserted my SIM card and using TWRP I installed the backup that I made on the old phone using the 'Recover' button in TWRP.
I also copied over everything that was in '/sdcard' on my old phone into '/sdcard' on my new phone. (before that I deleted everything from that folder besides TRWP)
The backup seems to be fully restored on the new phone and I can use it.
But I have 'No service'. It did ask me for my SIM card PIN, but that's it. I can't make call, send SMS oder use mobile data.
Could this be somehow related to the fact that some IDs in the phone changed? IMEI maybe? What can I do about it?
Device: OnePlus One
Recovery: Latest TWRP for my device
ROM: Cyanogenmod 13.0-2016-08-19
Android: 6.0.1
Tweaks: Xposed Framework v86, Xprivacy 3.6.19 (481), AFWall+ 2.9.7, MicroG instead of GAPPS, Autostarts 1.9.7
Aps like calendar, weather service etc disabled
Google Maps and Google heavily restricted and without Internet
Here is my logcat *:E (Please keep in mind most of these errors already occured on my old device, the software didn't change after all.)
HTML:
11-05 00:29:22.232 1778 1778 E ConnectivityService: Ignoring protectedNetwork 1511-05 00:29:22.599 1778 1778 E AppSgstMgrService: no app suggest provider found11-05 00:29:22.612 1778 1778 E BrokerableCMSystemService: Setting brokered service connection [email protected]829f311-05 00:29:22.612 1778 1778 E BrokerableCMSystemService: Setting brokered service connection [email protected]416b011-05 00:29:22.614 1778 1778 E BrokerableCMSystemService: Setting brokered service connection or[email protected]ec7792911-05 00:29:22.614 1778 1778 E BrokerableCMSystemService: Setting brokered service connection or[email protected]8f44ae11-05 00:29:22.617 1778 1778 E BrokerableCMSystemService: Setting brokered service connection [email protected]81724f11-05 00:29:22.618 1778 1778 E BrokerableCMSystemService: Setting brokered service connection [email protected]beddc11-05 00:29:22.666 1778 1778 E LockSettingsStorage: Cannot read file java.io.FileNotFoundException: /data/system/password.key: open failed: ENOENT (No such file or directory)11-05 00:29:22.696 1778 1778 E WifiService: Invoking mWifiStateMachine.setWifiEnabled11-05 00:29:23.847 1778 1778 E NetdConnector: NDC Command {2 bandwidth enable} took too long (561ms)11-05 00:29:24.021 1778 2760 E NetdConnector: NDC Command {3 softap fwreload wlan0 STA} took too long (716ms)11-05 00:29:24.773 1778 1778 E NetdConnector: NDC Command {4 strict enable} took too long (925ms)11-05 00:29:24.774 1778 2760 E NetdConnector: NDC Command {5 interface getcfg wlan0} took too long (752ms)11-05 00:29:26.448 1778 1778 E BrokerableCMSystemService: Failed to bind to implementation ComponentInfo{org.cyanogenmod.weatherservice/org.cyanogenmod.weatherservice.WeatherManagerService}11-05 00:29:26.583 1778 1778 E InputMethodManagerService: Ignoring updateSystemUiLocked due to an invalid token. uid:1000 token:null11-05 00:29:26.801 1778 1778 E LocationManagerService: Unable to bind FusedProxy.11-05 00:29:26.803 1778 1778 E LocationManagerService: Unable to bind FLP Geofence proxy.11-05 00:29:26.834 1778 1778 E LocationManagerService: Unable to bind ActivityRecognitionProxy.11-05 00:29:27.539 1778 1778 E ActivityThread: Failed to find provider info for com.android.calendar11-05 00:29:27.539 1778 1778 E ActivityThread: Failed to find provider info for com.android.calendar11-05 00:29:27.938 1778 2762 E ConnectivityService: Failed to find Messenger in unregisterNetworkFactory11-05 00:29:28.634 3610 3610 E ActivityThread: Service org.microg.nlp.geocode.GeocodeServiceV1 has leaked ServiceConnection [email protected] that was originally bound here11-05 00:29:28.634 3610 3610 E ActivityThread: android.app.ServiceConnectionLeaked: Service org.microg.nlp.geocode.GeocodeServiceV1 has leaked ServiceConnection [email protected] that was originally bound here11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.LoadedApk$ServiceDispatcher.<init>(LoadedApk.java:1093)11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.LoadedApk.getServiceDispatcher(LoadedApk.java:987)11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.ContextImpl.bindServiceCommon(ContextImpl.java:1313)11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.ContextImpl.bindService(ContextImpl.java:1296)11-05 00:29:28.634 3610 3610 E ActivityThread: at android.content.ContextWrapper.bindService(ContextWrapper.java:610)11-05 00:29:28.634 3610 3610 E ActivityThread: at org.microg.nlp.AbstractBackendHelper.bind(AbstractBackendHelper.java:94)11-05 00:29:28.634 3610 3610 E ActivityThread: at org.microg.nlp.geocode.BackendFuser.bind(BackendFuser.java:41)11-05 00:29:28.634 3610 3610 E ActivityThread: at org.microg.nlp.geocode.GeocodeProviderV1.<init>(GeocodeProviderV1.java:32)11-05 00:29:28.634 3610 3610 E ActivityThread: at org.microg.nlp.geocode.GeocodeServiceV1.getProvider(GeocodeServiceV1.java:30)11-05 00:29:28.634 3610 3610 E ActivityThread: at org.microg.nlp.geocode.GeocodeServiceV1.getProvider(GeocodeServiceV1.java:19)11-05 00:29:28.634 3610 3610 E ActivityThread: at org.microg.nlp.AbstractProviderService.onBind(AbstractProviderService.java:38)11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.ActivityThread.handleBindService(ActivityThread.java:2938)11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.ActivityThread.-wrap2(ActivityThread.java)11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1451)11-05 00:29:28.634 3610 3610 E ActivityThread: at android.os.Handler.dispatchMessage(Handler.java:102)11-05 00:29:28.634 3610 3610 E ActivityThread: at android.os.Looper.loop(Looper.java:148)11-05 00:29:28.634 3610 3610 E ActivityThread: at android.app.ActivityThread.main(ActivityThread.java:5461)11-05 00:29:28.634 3610 3610 E ActivityThread: at java.lang.reflect.Method.invoke(Native Method)11-05 00:29:28.634 3610 3610 E ActivityThread: at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:726)11-05 00:29:28.634 3610 3610 E ActivityThread: at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:616)11-05 00:29:28.634 3610 3610 E ActivityThread: at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:102)11-05 00:29:30.411 3947 4139 E ActivityThread: Failed to find provider info for com.android.exchange.directory.provider11-05 00:29:32.403 4576 4765 E ActivityThread: Failed to find provider info for com.google.android.partnersetup.rlzappprovider11-05 00:29:34.299 1778 4935 E ActivityThread: Failed to find provider info for downloads11-05 00:29:34.299 1778 4935 E BootReceiver: Can't remove old update packages11-05 00:29:34.299 1778 4935 E BootReceiver: java.lang.IllegalArgumentException: Unknown URL content://downloads/my_downloads11-05 00:29:34.299 1778 4935 E BootReceiver: at android.content.ContentResolver.delete(ContentResolver.java:1328)11-05 00:29:34.299 1778 4935 E BootReceiver: at android.provider.Downloads.removeAllDownloadsByPackage(Downloads.java:810)11-05 00:29:34.299 1778 4935 E BootReceiver: at com.android.server.BootReceiver.removeOldUpdatePackages(BootReceiver.java:93)11-05 00:29:34.299 1778 4935 E BootReceiver: at com.android.server.BootReceiver.-wrap2(BootReceiver.java)11-05 00:29:34.299 1778 4935 E BootReceiver: at com.android.server.BootReceiver$1.run(BootReceiver.java:82)--------- beginning of main11-05 00:29:38.000 6082 6163 E Parcel : Reading a NULL string not supported here.11-05 00:29:38.007 6082 6163 E Parcel : Reading a NULL string not supported here.11-05 00:29:38.101 6082 6163 E Parcel : Reading a NULL string not supported here.11-05 00:29:38.107 6082 6163 E Parcel : Reading a NULL string not supported here.11-05 00:29:38.247 6098 6098 E Parcel : Reading a NULL string not supported here.11-05 00:29:38.254 6098 6098 E Parcel : Reading a NULL string not supported here.11-05 00:29:38.259 6098 6098 E Parcel : Reading a NULL string not supported here.11-05 00:29:38.265 6098 6098 E Parcel : Reading a NULL string not supported here.11-05 00:29:38.271 6098 6098 E Parcel : Reading a NULL string not supported here.11-05 00:29:44.057 5016 5016 E Parcel : Reading a NULL string not supported here.11-05 00:29:44.065 5016 5016 E Parcel : Reading a NULL string not supported here.11-05 00:29:44.246 1778 2762 E ConnectivityService: Unexpected mtu value: 0, wlan011-05 00:29:44.410 1778 1778 E BrokerableCMSystemService: Failed to bind to implementation ComponentInfo{org.cyanogenmod.weatherservice/org.cyanogenmod.weatherservice.WeatherManagerService}11-05 00:29:44.532 5222 5222 E Volley : [1] UpdateCheckService.onErrorResponse: Error:11-05 00:29:44.532 5222 5222 E Volley : [1] UpdateCheckService.onErrorResponse: Error type: com.android.volley.NoConnectionError: java.net.ConnectException: failed to connect to download.cyanogenmod.org/172.217.22.115 (port 443) after 5000ms: isConnected failed: ECONNREFUSED (Connection refused)11-05 00:29:46.164 3781 4250 E PhoneInterfaceManager: [PhoneIntfMgr] getIccId: ICC ID is null or empty.11-05 00:29:46.179 3781 4278 E PhoneInterfaceManager: [PhoneIntfMgr] getIccId: ICC ID is null or empty.11-05 00:29:46.203 3781 4250 E PhoneInterfaceManager: [PhoneIntfMgr] getIccId: ICC ID is null or empty.11-05 00:29:46.213 3781 6642 E PhoneInterfaceManager: [PhoneIntfMgr] getIccId: ICC ID is null or empty.11-05 00:29:46.219 3781 4608 E PhoneInterfaceManager: [PhoneIntfMgr] getIccId: ICC ID is null or empty.11-05 00:29:46.226 3781 4278 E PhoneInterfaceManager: [PhoneIntfMgr] getIccId: ICC ID is null or empty.11-05 00:29:46.240 3781 3802 E PhoneInterfaceManager: [PhoneIntfMgr] getIccId: ICC ID is null or empty.11-05 00:29:47.211 6669 6720 E ActivityThread: Failed to find provider info for com.google.android.partnersetup.rlzappprovider11-05 00:29:48.017 6757 6757 E Parcel : Reading a NULL string not supported here.11-05 00:29:48.028 6757 6757 E Parcel : Reading a NULL string not supported here.11-05 00:29:48.038 6757 6757 E Parcel : Reading a NULL string not supported here.11-05 00:29:54.222 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=011-05 00:29:54.225 4719 4792 E MessagingApp: MmsUtils: SMS temporary failure11-05 00:30:29.388 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=011-05 00:30:29.388 4719 6977 E MessagingApp: MmsUtils: SMS temporary failure11-05 00:30:45.247 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=011-05 00:30:45.247 4719 7098 E MessagingApp: MmsUtils: SMS temporary failure11-05 00:31:13.891 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=011-05 00:31:13.891 4719 7153 E MessagingApp: MmsUtils: SMS temporary failure11-05 00:31:55.143 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=011-05 00:31:55.147 4719 7656 E MessagingApp: MmsUtils: SMS temporary failure11-05 00:33:16.409 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=011-05 00:33:16.410 4719 7793 E MessagingApp: MmsUtils: SMS temporary failure11-05 00:36:01.640 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=011-05 00:36:01.640 4719 8273 E MessagingApp: MmsUtils: SMS temporary failure11-05 00:37:46.284 3781 3781 E Xposed : java.lang.NoSuchMethodError: com.android.settings.location.SettingsInjector#parseServiceInfo(android.content.pm.ResolveInfo,android.content.pm.PackageManager)#exact11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.XposedHelpers.findMethodExact(XposedHelpers.java:337)11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.XposedHelpers.findAndHookMethod(XposedHelpers.java:178)11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.XposedHelpers.findAndHookMethod(XposedHelpers.java:253)11-05 00:37:46.284 3781 3781 E Xposed : at be.r3w6.intika.xposedunifiednlp.UnifiedNlp.handleLoadPackage(UnifiedNlp.java:31)11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.IXposedHookLoadPackage$Wrapper.handleLoadPackage(IXposedHookLoadPackage.java:34)11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.callbacks.XC_LoadPackage.call(XC_LoadPackage.java:61)11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.callbacks.XCallback.callAll(XCallback.java:106)11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.XposedInit$4.afterHookedMethod(XposedInit.java:172)11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.XposedBridge.handleHookedMethod(XposedBridge.java:348)11-05 00:37:46.284 3781 3781 E Xposed : at android.app.LoadedApk.<init>(<Xposed>)11-05 00:37:46.284 3781 3781 E Xposed : at android.app.ActivityThread.getPackageInfo(ActivityThread.java:1858)11-05 00:37:46.284 3781 3781 E Xposed : at android.app.ActivityThread.getPackageInfoNoCheck(ActivityThread.java:1820)11-05 00:37:46.284 3781 3781 E Xposed : at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1361)11-05 00:37:46.284 3781 3781 E Xposed : at android.os.Handler.dispatchMessage(Handler.java:102)11-05 00:37:46.284 3781 3781 E Xposed : at android.os.Looper.loop(Looper.java:148)11-05 00:37:46.284 3781 3781 E Xposed : at android.app.ActivityThread.main(ActivityThread.java:5461)11-05 00:37:46.284 3781 3781 E Xposed : at java.lang.reflect.Method.invoke(Native Method)11-05 00:37:46.284 3781 3781 E Xposed : at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:726)11-05 00:37:46.284 3781 3781 E Xposed : at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:616)11-05 00:37:46.284 3781 3781 E Xposed : at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:102)11-05 00:38:04.278 383 2771 E bt_a2dp_hw: adev_set_parameters: ERROR: set param called even when stream out is null11-05 00:38:05.039 383 2770 E bt_a2dp_hw: adev_set_parameters: ERROR: set param called even when stream out is null11-05 00:46:22.314 4719 8980 E MessagingApp: MmsUtils: sending SMS timed out11-05 00:46:22.563 4719 9272 E SpannableStringBuilder: SPAN_EXCLUSIVE_EXCLUSIVE spans cannot have a zero length11-05 08:50:42.257 2838 2838 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 011-05 08:50:42.258 2838 2838 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 011-05 08:50:42.272 2838 2838 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 011-05 08:50:42.272 2838 2838 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 011-05 08:50:42.491 383 2770 E bt_a2dp_hw: adev_set_parameters: ERROR: set param called even when stream out is null11-05 08:50:51.099 4719 4719 E MessagingApp: SmsSender: failure in sending message part. requestId=content://sms/137 partId=0 resultCode=4 errorCode=011-05 08:50:51.099 4719 4719 E MessagingApp: SmsSender: ignoring sent result. requestId=content://sms/137 partId=0 resultCode=411-05 08:51:01.757 5440 5440 E ProcessUtils: XPrivacy11-05 08:51:01.757 5440 5440 E ProcessUtils: java.io.FileNotFoundException: XPrivacy11-05 08:51:01.757 5440 5440 E ProcessUtils: at biz.bokhorst.xprivacy.XIoBridge.a(SourceFile:136)11-05 08:51:01.757 5440 5440 E ProcessUtils: at biz.bokhorst.xprivacy.XPrivacy$XMethodHook.beforeHookedMethod(SourceFile:628)11-05 08:51:01.757 5440 5440 E ProcessUtils: at de.robv.android.xposed.XposedBridge.handleHookedMethod(XposedBridge.java:314)11-05 08:51:01.757 5440 5440 E ProcessUtils: at libcore.io.IoBridge.open(<Xposed>)11-05 08:51:01.757 5440 5440 E ProcessUtils: at java.io.FileInputStream.<init>(FileInputStream.java:76)11-05 08:51:01.757 5440 5440 E ProcessUtils: at java.io.FileInputStream.<init>(FileInputStream.java:103)11-05 08:51:01.757 5440 5440 E ProcessUtils: at java.io.FileReader.<init>(FileReader.java:66)11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.android.gms.common.util.e.a(Unknown Source)11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.android.gms.common.util.e.a(Unknown Source)11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.android.gms.measurement.internal.p.N(Unknown Source)11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.android.gms.measurement.internal.ab.<init>(Unknown Source)11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.android.gms.measurement.internal.aj.<init>(Unknown Source)11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.android.gms.measurement.internal.aj.a(Unknown Source)11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.android.gms.measurement.AppMeasurement.getInstance(Unknown Source)11-05 08:51:01.757 5440 5440 E ProcessUtils: at java.lang.reflect.Method.invoke(Native Method)11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.firebase.a.a(Unknown Source)11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.firebase.a.a(Unknown Source)11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.firebase.a.a(Unknown Source)11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.firebase.provider.FirebaseInitProvider.onCreate(Unknown Source)11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.content.ContentProvider.attachInfo(ContentProvider.java:1748)11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.content.ContentProvider.attachInfo(ContentProvider.java:1723)11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.google.firebase.provider.FirebaseInitProvider.attachInfo(Unknown Source)11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.app.ActivityThread.installProvider(ActivityThread.java:5197)11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.app.ActivityThread.installContentProviders(ActivityThread.java:4792)11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.app.ActivityThread.handleBindApplication(ActivityThread.java:4732)11-05 08:51:01.757 5440 5440 E ProcessUtils: at de.robv.android.xposed.XposedBridge.invokeOriginalMethodNative(Native Method)11-05 08:51:01.757 5440 5440 E ProcessUtils: at de.robv.android.xposed.XposedBridge.handleHookedMethod(XposedBridge.java:334)11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.app.ActivityThread.handleBindApplication(<Xposed>)11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.app.ActivityThread.-wrap1(ActivityThread.java)11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1424)11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.os.Handler.dispatchMessage(Handler.java:102)11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.os.Looper.loop(Looper.java:148)11-05 08:51:01.757 5440 5440 E ProcessUtils: at android.app.ActivityThread.main(ActivityThread.java:5461)11-05 08:51:01.757 5440 5440 E ProcessUtils: at java.lang.reflect.Method.invoke(Native Method)11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:726)11-05 08:51:01.757 5440 5440 E ProcessUtils: at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:616)11-05 08:51:01.757 5440 5440 E ProcessUtils: at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:102)11-05 08:51:02.937 5440 5440 E RecyclerView: No adapter attached; skipping layout11-05 08:51:03.094 5440 5440 E RecyclerView: No adapter attached; skipping layout11-05 08:52:19.980 5440 5828 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 011-05 08:52:19.980 5440 5828 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 011-05 08:52:20.037 383 5834 E OMXNodeInstance: setConfig(39:google.aac.decoder, ConfigPriority(0x6f800002)) ERROR: Undefined(0x80001001)11-05 08:52:20.069 383 2323 E ACDB-LOADER: Error: ACDB AudProc vol returned = -1911-05 08:52:20.069 383 2323 E ACDB-LOADER: Error: ACDB AFE returned = -1911-05 08:54:31.993 5440 6091 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 011-05 08:54:31.993 5440 6091 E MediaPlayer-JNI: JNIMediaPlayerFactory: bIsQCMediaPlayerPresent 011-05 08:54:32.049 383 6097 E OMXNodeInstance: setConfig(3a:google.aac.decoder, ConfigPriority(0x6f800002)) ERROR: Undefined(0x80001001)11-05 08:54:32.074 383 2323 E ACDB-LOADER: Error: ACDB AudProc vol returned = -1911-05 08:54:32.074 383 2323 E ACDB-LOADER: Error: ACDB AFE returned = -1911-05 08:54:54.329 4719 4719 E ApkAssets: Error while loading asset assets/natives_blob_64.bin: java.io.FileNotFoundException: assets/natives_blob_64.bin11-05 08:54:54.329 4719 4719 E ApkAssets: Error while loading asset assets/snapshot_blob_64.bin: java.io.FileNotFoundException: assets/snapshot_blob_64.bin11-05 08:57:48.994 383 2329 E bt_a2dp_hw: adev_set_parameters: ERROR: set param called even when stream out is null11-05 09:00:11.154 383 2771 E bt_a2dp_hw: adev_set_parameters: ERROR: set param called even when stream out is null11-05 09:00:46.880 383 2770 E bt_a2dp_hw: adev_set_parameters: ERROR: set param called even when stream out is null11-05 09:03:07.713 383 383 E bt_a2dp_hw: adev_set_parameters: ERROR: set param called even when stream out is null
Click to expand...
Click to collapse
You most likely corrupted the efs partition. If that is the case you will have to send it back in for a new board. The only thing you should ha E restored was user apps and data.
zelendel said:
You most likely corrupted the efs partition. If that is the case you will have to send it back in for a new board. The only thing you should ha E restored was user apps and data.
Click to expand...
Click to collapse
Wait what? Why would I buy a new board? I just bought a new phone. All I did was flash the backup of my old phone to it.
I do have a TWRP backup of the new phone that I created just before restoring the one from my old phone. The original efs partition of that phone would have to be in that backup, right?
Looking at the original backup of the new phone TWRP offers me to restore [Boot], [System], [Data (excl. storage)] and [Cache].
What steps should I take now?
I found an interesting article about the topic: https://www.theandroidsoul.com/fix-...d-wifibluetooth-issues-restoring-twrp-backup/
It says that you should simply completely delete the efs partition in order to fix the issue.
e.g.
Code:
dd if=/dev/zero of=/dev/block/bootdevice/by-name/modemst1
dd if=/dev/zero of=/dev/block/bootdevice/by-name/modemst2
or
Code:
fastboot erase modemst1
fastboot erase modemst2
Is that actually true? Should I do this?
No one?
When restoring to the original backup of the new phone, I do get service again.
So if this is really related to the efs partition, then it gets lost/corrupted while flashing the backup of the old phone to the new one.
I tried to flash the backup of the old phone to the new one again and this time I unchecked `boot`, but again -> No service.
Any ideas? Anyone?
The only thing you "maybe" able to restore is user apps. Do it try to restore anything else.
Hi Guys,
Friend asked me for help with his Mi10T Pro.
With no reason phone started to restart MIUI (12) after couple seconds (~10-15secs.) from turning it on.
I got home screen and suddenly it shows "5G MIUI" logo and launcher starts again.
Is there any way to recover the data? I tried using ADB pull - it lets me download around ~100 photos until connections drops.
Maybe there is a way to hold this restarts and let ADB to copy the data? I managed to collect some crash logs.
Any help will be much appreciated. Thx in advance!
09-08 10:49:05.937 1337 1337 F libc : Fatal signal 6 (SIGABRT), code -1 (SI_QUEUE) in tid 1337 (init), pid 1337 (init)
09-08 10:49:06.006 1337 1337 F libc : crash_dump helper failed to exec
09-08 10:50:15.442 2041 3482 E AndroidRuntime: *** FATAL EXCEPTION IN SYSTEM PROCESS: AsyncTask #2
09-08 10:50:15.442 2041 3482 E AndroidRuntime: android.util.proto.WireTypeMismatchException: Current wire type Fixed32 does not match expected wire type Length Delimited at offset 0x1
09-08 10:50:15.442 2041 3482 E AndroidRuntime: mFieldNumber : 0xc
09-08 10:50:15.442 2041 3482 E AndroidRuntime: mWireType : 0x5
09-08 10:50:15.442 2041 3482 E AndroidRuntime: mState : 0x1
09-08 10:50:15.442 2041 3482 E AndroidRuntime: mDiscardedBytes : 0x0
09-08 10:50:15.442 2041 3482 E AndroidRuntime: mOffset : 0x1
09-08 10:50:15.442 2041 3482 E AndroidRuntime: mExpectedObjectTokenStack : null
09-08 10:50:15.442 2041 3482 E AndroidRuntime: mDepth : 0xffffffff
09-08 10:50:15.442 2041 3482 E AndroidRuntime: mBuffer : [[email protected]
09-08 10:50:15.442 2041 3482 E AndroidRuntime: mBufferSize : 0x2000
09-08 10:50:15.442 2041 3482 E AndroidRuntime: mEnd : 0x665
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at android.util.proto.ProtoInputStream.assertWireType(ProtoInputStream.java:929)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at android.util.proto.ProtoInputStream.start(ProtoInputStream.java:494)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at com.android.server.usage.UsageStatsProto.loadCountAndTime(UsageStatsProto.java:157)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at com.android.server.usage.UsageStatsProto.read(UsageStatsProto.java:537)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.readLocked(UsageStatsDatabase.java:887)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.readLocked(UsageStatsDatabase.java:859)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.readLocked(UsageStatsDatabase.java:850)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.queryUsageStats(UsageStatsDatabase.java:659)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at com.android.server.usage.UserUsageStatsService.queryStats(UserUsageStatsService.java:350)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at com.android.server.usage.UserUsageStatsService.queryUsageStats(UserUsageStatsService.java:377)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at com.android.server.usage.UsageStatsService.queryUsageStats(UsageStatsService.java:631)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at com.android.server.usage.UsageStatsService$LocalService.queryUsageStatsForUser(UsageStatsService.java:1810)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at com.android.server.storage.CacheQuotaStrategy.getUnfulfilledRequests(CacheQuotaStrategy.java:178)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at com.android.server.storage.CacheQuotaStrategy.access$200(CacheQuotaStrategy.java:74)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at com.android.server.storage.CacheQuotaStrategy$1$1.run(CacheQuotaStrategy.java:136)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at android.os.AsyncTask$SerialExecutor$1.run(AsyncTask.java:289)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1167)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:641)
09-08 10:50:15.442 2041 3482 E AndroidRuntime: at java.lang.Thread.run(Thread.java:919)
09-08 10:50:15.569 3227 3227 E AndroidRuntime: FATAL EXCEPTION: main
09-08 10:50:15.569 3227 3227 E AndroidRuntime: Process: com.google.android.gms.persistent, PID: 3227
09-08 10:50:15.569 3227 3227 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:50:15.569 4269 6891 E AndroidRuntime: FATAL EXCEPTION: [com.google.android.gms.chimera.GmsIntentOperationService$ChimeraService-Executor] idle
09-08 10:50:15.569 4269 6891 E AndroidRuntime: Process: com.google.android.gms, PID: 4269
09-08 10:50:15.569 4269 6891 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:50:15.575 4269 7662 E AndroidRuntime: FATAL EXCEPTION: [com.google.android.gms.chimera.GmsIntentOperationService$ChimeraService-Executor] idle
09-08 10:50:15.575 4269 7662 E AndroidRuntime: Process: com.google.android.gms, PID: 4269
09-08 10:50:15.575 4269 7662 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:50:15.587 4269 7765 E AndroidRuntime: FATAL EXCEPTION: [com.google.android.gms.chimera.GmsIntentOperationService$ChimeraService-Executor] idle
09-08 10:50:15.587 4269 7765 E AndroidRuntime: Process: com.google.android.gms, PID: 4269
09-08 10:50:15.587 4269 7765 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:50:15.591 4269 7566 E AndroidRuntime: FATAL EXCEPTION: [com.google.android.gms.chimera.GmsIntentOperationService$ChimeraService-Executor] idle
09-08 10:50:15.591 4269 7566 E AndroidRuntime: Process: com.google.android.gms, PID: 4269
09-08 10:50:15.591 4269 7566 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:50:15.604 2751 3175 E AndroidRuntime: FATAL EXCEPTION: ToggleManager
09-08 10:50:15.604 2751 3175 E AndroidRuntime: Process: com.android.systemui, PID: 2751
09-08 10:50:15.604 2751 3175 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:50:15.613 4313 7779 E AndroidRuntime: FATAL EXCEPTION: GoogleApiClient
09-08 10:50:15.613 4313 7779 E AndroidRuntime: Process: com.google.android.googlequicksearchbox:search, PID: 4313
09-08 10:50:15.613 4313 7779 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:50:15.621 3227 7684 E AndroidRuntime: FATAL EXCEPTION: lowpool[8]
09-08 10:50:15.621 3227 7684 E AndroidRuntime: Process: com.google.android.gms.persistent, PID: 3227
09-08 10:50:15.621 3227 7684 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:50:15.638 7442 7514 E AndroidRuntime: FATAL EXCEPTION: AsyncTask #2
09-08 10:50:15.638 7442 7514 E AndroidRuntime: Process: com.google.android.gm, PID: 7442
09-08 10:50:15.638 7442 7514 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:50:50.103 7956 9254 E AndroidRuntime: *** FATAL EXCEPTION IN SYSTEM PROCESS: AsyncTask #2
09-08 10:50:50.103 7956 9254 E AndroidRuntime: android.util.proto.WireTypeMismatchException: Current wire type Fixed32 does not match expected wire type Length Delimited at offset 0x1
09-08 10:50:50.103 7956 9254 E AndroidRuntime: mFieldNumber : 0xc
09-08 10:50:50.103 7956 9254 E AndroidRuntime: mWireType : 0x5
09-08 10:50:50.103 7956 9254 E AndroidRuntime: mState : 0x1
09-08 10:50:50.103 7956 9254 E AndroidRuntime: mDiscardedBytes : 0x0
09-08 10:50:50.103 7956 9254 E AndroidRuntime: mOffset : 0x1
09-08 10:50:50.103 7956 9254 E AndroidRuntime: mExpectedObjectTokenStack : null
09-08 10:50:50.103 7956 9254 E AndroidRuntime: mDepth : 0xffffffff
09-08 10:50:50.103 7956 9254 E AndroidRuntime: mBuffer : [[email protected]
09-08 10:50:50.103 7956 9254 E AndroidRuntime: mBufferSize : 0x2000
09-08 10:50:50.103 7956 9254 E AndroidRuntime: mEnd : 0x665
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at android.util.proto.ProtoInputStream.assertWireType(ProtoInputStream.java:929)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at android.util.proto.ProtoInputStream.start(ProtoInputStream.java:494)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at com.android.server.usage.UsageStatsProto.loadCountAndTime(UsageStatsProto.java:157)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at com.android.server.usage.UsageStatsProto.read(UsageStatsProto.java:537)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.readLocked(UsageStatsDatabase.java:887)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.readLocked(UsageStatsDatabase.java:859)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.readLocked(UsageStatsDatabase.java:850)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.queryUsageStats(UsageStatsDatabase.java:659)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at com.android.server.usage.UserUsageStatsService.queryStats(UserUsageStatsService.java:350)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at com.android.server.usage.UserUsageStatsService.queryUsageStats(UserUsageStatsService.java:377)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at com.android.server.usage.UsageStatsService.queryUsageStats(UsageStatsService.java:631)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at com.android.server.usage.UsageStatsService$LocalService.queryUsageStatsForUser(UsageStatsService.java:1810)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at com.android.server.storage.CacheQuotaStrategy.getUnfulfilledRequests(CacheQuotaStrategy.java:178)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at com.android.server.storage.CacheQuotaStrategy.access$200(CacheQuotaStrategy.java:74)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at com.android.server.storage.CacheQuotaStrategy$1$1.run(CacheQuotaStrategy.java:136)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at android.os.AsyncTask$SerialExecutor$1.run(AsyncTask.java:289)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1167)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:641)
09-08 10:50:50.103 7956 9254 E AndroidRuntime: at java.lang.Thread.run(Thread.java:919)
09-08 10:50:50.224 9987 9987 E AndroidRuntime: FATAL EXCEPTION: main
09-08 10:50:50.224 9987 9987 E AndroidRuntime: Process: com.google.android.googlequicksearchbox:search, PID: 9987
09-08 10:50:50.224 9987 9987 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:50:50.234 13966 13966 E AndroidRuntime: FATAL EXCEPTION: main
09-08 10:50:50.234 13966 13966 E AndroidRuntime: Process: com.miui.core, PID: 13966
09-08 10:50:50.234 13966 13966 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:50:50.239 9928 12978 E AndroidRuntime: FATAL EXCEPTION: [com.google.android.gms.chimera.GmsIntentOperationService$ChimeraService-Executor] idle
09-08 10:50:50.239 9928 12978 E AndroidRuntime: Process: com.google.android.gms, PID: 9928
09-08 10:50:50.239 9928 12978 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:50:50.241 8825 8825 E AndroidRuntime: FATAL EXCEPTION: main
09-08 10:50:50.241 8825 8825 E AndroidRuntime: Process: com.google.android.gms.persistent, PID: 8825
09-08 10:50:50.241 8825 8825 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:50:50.243 13860 13860 E AndroidRuntime: FATAL EXCEPTION: main
09-08 10:50:50.243 13860 13860 E AndroidRuntime: Process: com.miui.cloudservice, PID: 13860
09-08 10:50:50.243 13860 13860 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:50:50.254 13910 13910 E AndroidRuntime: FATAL EXCEPTION: main
09-08 10:50:50.254 13910 13910 E AndroidRuntime: Process: com.xiaomi.simactivate.service, PID: 13910
09-08 10:50:50.254 13910 13910 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:50:50.255 8825 8943 E AndroidRuntime: FATAL EXCEPTION: lowpool[0]
09-08 10:50:50.255 8825 8943 E AndroidRuntime: Process: com.google.android.gms.persistent, PID: 8825
09-08 10:50:50.255 8825 8943 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:51:23.411 14173 19696 E AndroidRuntime: *** FATAL EXCEPTION IN SYSTEM PROCESS: AsyncTask #6
09-08 10:51:23.411 14173 19696 E AndroidRuntime: android.util.proto.WireTypeMismatchException: Current wire type Fixed32 does not match expected wire type Length Delimited at offset 0x1
09-08 10:51:23.411 14173 19696 E AndroidRuntime: mFieldNumber : 0xc
09-08 10:51:23.411 14173 19696 E AndroidRuntime: mWireType : 0x5
09-08 10:51:23.411 14173 19696 E AndroidRuntime: mState : 0x1
09-08 10:51:23.411 14173 19696 E AndroidRuntime: mDiscardedBytes : 0x0
09-08 10:51:23.411 14173 19696 E AndroidRuntime: mOffset : 0x1
09-08 10:51:23.411 14173 19696 E AndroidRuntime: mExpectedObjectTokenStack : null
09-08 10:51:23.411 14173 19696 E AndroidRuntime: mDepth : 0xffffffff
09-08 10:51:23.411 14173 19696 E AndroidRuntime: mBuffer : [[email protected]
09-08 10:51:23.411 14173 19696 E AndroidRuntime: mBufferSize : 0x2000
09-08 10:51:23.411 14173 19696 E AndroidRuntime: mEnd : 0x665
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at android.util.proto.ProtoInputStream.assertWireType(ProtoInputStream.java:929)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at android.util.proto.ProtoInputStream.start(ProtoInputStream.java:494)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at com.android.server.usage.UsageStatsProto.loadCountAndTime(UsageStatsProto.java:157)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at com.android.server.usage.UsageStatsProto.read(UsageStatsProto.java:537)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.readLocked(UsageStatsDatabase.java:887)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.readLocked(UsageStatsDatabase.java:859)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.readLocked(UsageStatsDatabase.java:850)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.queryUsageStats(UsageStatsDatabase.java:659)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at com.android.server.usage.UserUsageStatsService.queryStats(UserUsageStatsService.java:350)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at com.android.server.usage.UserUsageStatsService.queryUsageStats(UserUsageStatsService.java:377)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at com.android.server.usage.UsageStatsService.queryUsageStats(UsageStatsService.java:631)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at com.android.server.usage.UsageStatsService$LocalService.queryUsageStatsForUser(UsageStatsService.java:1810)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at com.android.server.storage.CacheQuotaStrategy.getUnfulfilledRequests(CacheQuotaStrategy.java:178)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at com.android.server.storage.CacheQuotaStrategy.access$200(CacheQuotaStrategy.java:74)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at com.android.server.storage.CacheQuotaStrategy$1$1.run(CacheQuotaStrategy.java:136)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at android.os.AsyncTask$SerialExecutor$1.run(AsyncTask.java:289)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1167)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:641)
09-08 10:51:23.411 14173 19696 E AndroidRuntime: at java.lang.Thread.run(Thread.java:919)
09-08 10:51:23.524 15040 15040 E AndroidRuntime: FATAL EXCEPTION: main
09-08 10:51:23.524 15040 15040 E AndroidRuntime: Process: com.google.android.gms.persistent, PID: 15040
09-08 10:51:23.524 15040 15040 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:51:56.668 20329 21438 E AndroidRuntime: *** FATAL EXCEPTION IN SYSTEM PROCESS: AsyncTask #2
09-08 10:51:56.668 20329 21438 E AndroidRuntime: android.util.proto.WireTypeMismatchException: Current wire type Fixed32 does not match expected wire type Length Delimited at offset 0x1
09-08 10:51:56.668 20329 21438 E AndroidRuntime: mFieldNumber : 0xc
09-08 10:51:56.668 20329 21438 E AndroidRuntime: mWireType : 0x5
09-08 10:51:56.668 20329 21438 E AndroidRuntime: mState : 0x1
09-08 10:51:56.668 20329 21438 E AndroidRuntime: mDiscardedBytes : 0x0
09-08 10:51:56.668 20329 21438 E AndroidRuntime: mOffset : 0x1
09-08 10:51:56.668 20329 21438 E AndroidRuntime: mExpectedObjectTokenStack : null
09-08 10:51:56.668 20329 21438 E AndroidRuntime: mDepth : 0xffffffff
09-08 10:51:56.668 20329 21438 E AndroidRuntime: mBuffer : [[email protected]
09-08 10:51:56.668 20329 21438 E AndroidRuntime: mBufferSize : 0x2000
09-08 10:51:56.668 20329 21438 E AndroidRuntime: mEnd : 0x665
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at android.util.proto.ProtoInputStream.assertWireType(ProtoInputStream.java:929)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at android.util.proto.ProtoInputStream.start(ProtoInputStream.java:494)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at com.android.server.usage.UsageStatsProto.loadCountAndTime(UsageStatsProto.java:157)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at com.android.server.usage.UsageStatsProto.read(UsageStatsProto.java:537)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.readLocked(UsageStatsDatabase.java:887)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.readLocked(UsageStatsDatabase.java:859)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.readLocked(UsageStatsDatabase.java:850)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.queryUsageStats(UsageStatsDatabase.java:659)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at com.android.server.usage.UserUsageStatsService.queryStats(UserUsageStatsService.java:350)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at com.android.server.usage.UserUsageStatsService.queryUsageStats(UserUsageStatsService.java:377)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at com.android.server.usage.UsageStatsService.queryUsageStats(UsageStatsService.java:631)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at com.android.server.usage.UsageStatsService$LocalService.queryUsageStatsForUser(UsageStatsService.java:1810)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at com.android.server.storage.CacheQuotaStrategy.getUnfulfilledRequests(CacheQuotaStrategy.java:178)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at com.android.server.storage.CacheQuotaStrategy.access$200(CacheQuotaStrategy.java:74)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at com.android.server.storage.CacheQuotaStrategy$1$1.run(CacheQuotaStrategy.java:136)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at android.os.AsyncTask$SerialExecutor$1.run(AsyncTask.java:289)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1167)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:641)
09-08 10:51:56.668 20329 21438 E AndroidRuntime: at java.lang.Thread.run(Thread.java:919)
09-08 10:51:56.752 26150 26150 E AndroidRuntime: FATAL EXCEPTION: main
09-08 10:51:56.752 26150 26150 E AndroidRuntime: Process: com.miui.cloudservice, PID: 26150
09-08 10:51:56.752 26150 26150 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:51:56.753 22160 22160 E AndroidRuntime: FATAL EXCEPTION: main
09-08 10:51:56.753 22160 22160 E AndroidRuntime: Process: com.google.android.googlequicksearchbox:search, PID: 22160
09-08 10:51:56.753 22160 22160 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:51:56.773 21201 21201 E AndroidRuntime: FATAL EXCEPTION: main
09-08 10:51:56.773 21201 21201 E AndroidRuntime: Process: com.google.android.gms.persistent, PID: 21201
09-08 10:51:56.773 21201 21201 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:51:56.775 26037 26037 E AndroidRuntime: FATAL EXCEPTION: main
09-08 10:51:56.775 26037 26037 E AndroidRuntime: Process: com.miui.bugreport, PID: 26037
09-08 10:51:56.775 26037 26037 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:51:56.791 23207 23207 E AndroidRuntime: FATAL EXCEPTION: main
09-08 10:51:56.791 23207 23207 E AndroidRuntime: Process: com.android.vending, PID: 23207
09-08 10:51:56.791 23207 23207 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:51:56.796 23207 23254 E AndroidRuntime: FATAL EXCEPTION: alyz
09-08 10:51:56.796 23207 23254 E AndroidRuntime: Process: com.android.vending, PID: 23207
09-08 10:51:56.796 23207 23254 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:52:30.474 26344 26779 E AndroidRuntime: *** FATAL EXCEPTION IN SYSTEM PROCESS: AsyncTask #1
09-08 10:52:30.474 26344 26779 E AndroidRuntime: android.util.proto.WireTypeMismatchException: Current wire type Fixed32 does not match expected wire type Length Delimited at offset 0x1
09-08 10:52:30.474 26344 26779 E AndroidRuntime: mFieldNumber : 0xc
09-08 10:52:30.474 26344 26779 E AndroidRuntime: mWireType : 0x5
09-08 10:52:30.474 26344 26779 E AndroidRuntime: mState : 0x1
09-08 10:52:30.474 26344 26779 E AndroidRuntime: mDiscardedBytes : 0x0
09-08 10:52:30.474 26344 26779 E AndroidRuntime: mOffset : 0x1
09-08 10:52:30.474 26344 26779 E AndroidRuntime: mExpectedObjectTokenStack : null
09-08 10:52:30.474 26344 26779 E AndroidRuntime: mDepth : 0xffffffff
09-08 10:52:30.474 26344 26779 E AndroidRuntime: mBuffer : [[email protected]
09-08 10:52:30.474 26344 26779 E AndroidRuntime: mBufferSize : 0x2000
09-08 10:52:30.474 26344 26779 E AndroidRuntime: mEnd : 0x665
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at android.util.proto.ProtoInputStream.assertWireType(ProtoInputStream.java:929)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at android.util.proto.ProtoInputStream.start(ProtoInputStream.java:494)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at com.android.server.usage.UsageStatsProto.loadCountAndTime(UsageStatsProto.java:157)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at com.android.server.usage.UsageStatsProto.read(UsageStatsProto.java:537)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.readLocked(UsageStatsDatabase.java:887)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.readLocked(UsageStatsDatabase.java:859)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.readLocked(UsageStatsDatabase.java:850)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at com.android.server.usage.UsageStatsDatabase.queryUsageStats(UsageStatsDatabase.java:659)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at com.android.server.usage.UserUsageStatsService.queryStats(UserUsageStatsService.java:350)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at com.android.server.usage.UserUsageStatsService.queryUsageStats(UserUsageStatsService.java:377)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at com.android.server.usage.UsageStatsService.queryUsageStats(UsageStatsService.java:631)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at com.android.server.usage.UsageStatsService$LocalService.queryUsageStatsForUser(UsageStatsService.java:1810)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at com.android.server.storage.CacheQuotaStrategy.getUnfulfilledRequests(CacheQuotaStrategy.java:178)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at com.android.server.storage.CacheQuotaStrategy.access$200(CacheQuotaStrategy.java:74)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at com.android.server.storage.CacheQuotaStrategy$1$1.run(CacheQuotaStrategy.java:136)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at android.os.AsyncTask$SerialExecutor$1.run(AsyncTask.java:289)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1167)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:641)
09-08 10:52:30.474 26344 26779 E AndroidRuntime: at java.lang.Thread.run(Thread.java:919)
09-08 10:52:30.798 27249 31720 E AndroidRuntime: FATAL EXCEPTION: lowpool[14]
09-08 10:52:30.798 27249 31720 E AndroidRuntime: Process: com.google.android.gms.persistent, PID: 27249
09-08 10:52:30.798 27249 31720 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:52:30.801 27249 27249 E AndroidRuntime: FATAL EXCEPTION: main
09-08 10:52:30.801 27249 27249 E AndroidRuntime: Process: com.google.android.gms.persistent, PID: 27249
09-08 10:52:30.801 27249 27249 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:52:30.803 27692 27692 E AndroidRuntime: FATAL EXCEPTION: main
09-08 10:52:30.803 27692 27692 E AndroidRuntime: Process: com.google.android.googlequicksearchbox:interactor, PID: 27692
09-08 10:52:30.803 27692 27692 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
09-08 10:52:30.804 32282 32282 E AndroidRuntime: FATAL EXCEPTION: main
09-08 10:52:30.804 32282 32282 E AndroidRuntime: Process: com.miui.cloudservice, PID: 32282
09-08 10:52:30.804 32282 32282 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
If phone is bootlooping it should be obvious that you can't get a stable USB-connection: adb pull operation aborts when bootloop re-starts.
Assumed phone's Android is rooted, you may use Android's dd command with seek / skip options.
Example:
Code:
adb exec-out "su -c 'dd if=BLOCK seek=NN skip=NN'" >> C:\IMG
Unfortunatelly its not rooted.
Hi guys. I've been trying to unlock the bootloader. So far I installed an useful app to open android settings https://m.apkpure.com/hidden-settings-for-android/com.jami.tool.hiddensetting.
I enabled developer settings trough ADB:
Bash:
adb shell settings put global development_settings_enabled 1
But I think I could've also enable it by clicking 5 times the build version... Anyway then I opened the Settings app and Developer Options appeared, unfortunately, when I open it, the whole Settings app crashes. Here is the what I think it is the relevant logcat:
Code:
03-12 22:59:30.047 12645 12645 E ndroid.setting: Can't find memory status under: /sys/block/zram0/
03-12 22:59:30.047 12645 12645 D AndroidRuntime: Shutting down VM
03-12 22:59:30.033 12645 12645 W ndroid.settings: type=1400 audit(0.0:129): avc: denied { read } for name="pagetypeinfo" dev="proc" ino=4026531857 scontext=u:r:system_app:s0 tcontext=u:object_r:proc_pagetypeinfo:s0 tclass=file permissive=0
03-12 22:59:30.047 12645 12645 E AndroidRuntime: FATAL EXCEPTION: main
03-12 22:59:30.047 12645 12645 E AndroidRuntime: Process: com.android.settings, PID: 12645
03-12 22:59:30.047 12645 12645 E AndroidRuntime: java.lang.RuntimeException: Unable to start activity ComponentInfo{com.android.settings/com.android.settings.SubSettings}: java.lang.RuntimeException: SysMemInfo read failed
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:3279)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:3418)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at android.app.servertransaction.LaunchActivityItem.execute(LaunchActivityItem.java:83)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at android.app.servertransaction.TransactionExecutor.executeCallbacks(TransactionExecutor.java:135)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at android.app.servertransaction.TransactionExecutor.execute(TransactionExecutor.java:95)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2025)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at android.os.Handler.dispatchMessage(Handler.java:107)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at android.os.Looper.loop(Looper.java:214)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at android.app.ActivityThread.main(ActivityThread.java:7389)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at java.lang.reflect.Method.invoke(Native Method)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:492)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:933)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: Caused by: java.lang.RuntimeException: SysMemInfo read failed
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at android.os.Debug.getZoneWatermarks(Native Method)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.internal.util.MemInfoReader.readMemInfo(MemInfoReader.java:37)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.applications.ProcStatsData$MemInfo.calculateWeightInfo(ProcStatsData.java:423)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.applications.ProcStatsData$MemInfo.<init>(ProcStatsData.java:383)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.applications.ProcStatsData$MemInfo.<init>(ProcStatsData.java:362)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.applications.ProcStatsData.refreshStats(ProcStatsData.java:156)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.applications.ProcStatsData.setDuration(ProcStatsData.java:128)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.development.MemoryUsagePreferenceController.setDuration(MemoryUsagePreferenceController.java:76)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.development.MemoryUsagePreferenceController.displayPreference(MemoryUsagePreferenceController.java:54)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.dashboard.DashboardFragment.lambda$displayResourceTiles$5(DashboardFragment.java:313)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.dashboard.-$$Lambda$DashboardFragment$Tn5-YvXfafHUTSTeQyMxdmcExvo.accept(Unknown Source:4)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at java.util.stream.ForEachOps$ForEachOp$OfRef.accept(ForEachOps.java:184)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1390)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at java.util.stream.ReferencePipeline$Head.forEach(ReferencePipeline.java:604)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:283)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at java.util.Iterator.forEachRemaining(Iterator.java:116)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at java.util.Spliterators$IteratorSpliterator.forEachRemaining(Spliterators.java:1801)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:485)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:475)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at java.util.stream.ForEachOps$ForEachOp.evaluateSequential(ForEachOps.java:151)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at java.util.stream.ForEachOps$ForEachOp.evaluateSequential(ForEachOps.java:133)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:236)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at java.util.stream.ReferencePipeline.forEach(ReferencePipeline.java:435)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.dashboard.DashboardFragment.displayResourceTiles(DashboardFragment.java:312)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.dashboard.DashboardFragment.refreshAllPreferences(DashboardFragment.java:360)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.dashboard.DashboardFragment.onCreatePreferences(DashboardFragment.java:160)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at androidx.preference.PreferenceFragmentCompat.onCreate(PreferenceFragmentCompat.java:160)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settingslib.core.lifecycle.ObservablePreferenceFragment.onCreate(ObservablePreferenceFragment.java:61)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.SettingsPreferenceFragment.onCreate(SettingsPreferenceFragment.java:133)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.dashboard.DashboardFragment.onCreate(DashboardFragment.java:137)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.dashboard.RestrictedDashboardFragment.onCreate(RestrictedDashboardFragment.java:104)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.development.DevelopmentSettingsDashboardFragment.onCreate(DevelopmentSettingsDashboardFragment.java:145)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at androidx.fragment.app.Fragment.performCreate(Fragment.java:2596)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at androidx.fragment.app.FragmentManagerImpl.moveToState(FragmentManagerImpl.java:831)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at androidx.fragment.app.FragmentTransition.addToFirstInLastOut(FragmentTransition.java:1197)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at androidx.fragment.app.FragmentTransition.calculateFragments(FragmentTransition.java:1080)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at androidx.fragment.app.FragmentTransition.startTransitions(FragmentTransition.java:119)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at androidx.fragment.app.FragmentManagerImpl.executeOpsTogether(FragmentManagerImpl.java:1853)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at androidx.fragment.app.FragmentManagerImpl.removeRedundantOperationsAndExecute(FragmentManagerImpl.java:1811)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at androidx.fragment.app.FragmentManagerImpl.execPendingActions(FragmentManagerImpl.java:1717)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at androidx.fragment.app.FragmentManagerImpl.executePendingTransactions(FragmentManagerImpl.java:183)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.SettingsActivity.switchToFragment(SettingsActivity.java:600)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.SettingsActivity.launchSettingFragment(SettingsActivity.java:393)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at com.android.settings.SettingsActivity.onCreate(SettingsActivity.java:301)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at android.app.Activity.performCreate(Activity.java:7825)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at android.app.Activity.performCreate(Activity.java:7814)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1306)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:3254)
03-12 22:59:30.047 12645 12645 E AndroidRuntime: ... 11 more
03-12 22:59:30.033 12645 12645 W ndroid.settings: type=1400 audit(0.0:130): avc: denied { search } for name="zram0" dev="sysfs" ino=46795 scontext=u:r:system_app:s0 tcontext=u:object_r:sysfs_zram:s0 tclass=dir permissive=0
03-12 22:59:30.033 12645 12645 W ndroid.settings: type=1400 audit(0.0:131): avc: denied { search } for name="zram0" dev="sysfs" ino=46795 scontext=u:r:system_app:s0 tcontext=u:object_r:sysfs_zram:s0 tclass=dir permissive=0
03-12 22:59:30.033 12645 12645 W ndroid.settings: type=1400 audit(0.0:132): avc: denied { read } for name="zoneinfo" dev="proc" ino=4026531859 scontext=u:r:system_app:s0 tcontext=u:object_r:proc_zoneinfo:s0 tclass=file permissive=0
03-12 22:59:30.052 1044 4585 W ActivityTaskManager: Force finishing activity com.android.settings/.SubSettings
My first impression is that's related to some kernel build flags. Does someone knows more?
I think it is possible to unlock the bootloader normally with developer options because ro.oem_unlock_supported is set to 1. Bye.
Edit: Here is a relevant stackoverflow issue https://stackoverflow.com/questions...h-when-opening-developer-options-programmatic It may depends on the app used to open the settings.
you can access some settings with SetEdit
SetEdit SettingsDatabaseEditor – Apps bei Google Play
Provides direct access to the Android settings database
play.google.com
here you can shutdown some services:
Download Package Disabler Pro(com.ospolice.packagedisablerpro)11.0 free APK - Android Games_APKsHub
Download Package Disabler Pro(com.ospolice.packagedisablerpro)11.0 free APK - Android Games_APKsHub APKShub
www.apkshub.com
also i think the developer options page just isnt there so it cant load into memory so it cant be read by the os.
even when developer options page is accessible, we only need the OEM unlock option and USB debugging. somewhere in the settingstable is a line for OEM unlock but its a closed table.
also:
huawei had a bootloader mastercodes like 2222222222222222 for example. and some of the indias are hacking the bootloadercode of android phones with some special dongle/software. wouldnt it be possible to get in touch with those (mostly moneymakers)? they have to have some magic knowledge which result is only shared over crypted payed and timelimited programms and/or dongles.
what about the oculus go, it has root isnt that the quest os just for 3DOF?
(i had the feeling that no one tries to get root on the quest, because its so silent here.
if we know the length of the code we can try fastboot bruteforce )
codes are server sided bud....either you hack Facebook private servers or nothing at all.... also bootloader codes ever since Facebook took over, change at random, unspecified intervals, generated by thief servers...hence why you need to mostly setup the device using. an app for on a phone or pc,.....this syncs up each new bootloader code when it changes.... its called Oculus companion server" if you browse running system processes...used to be able to force kill the process but as soon as you did, oculus home would crash and you get a unresponsive blank screen until reboot....
thats why all those legit "unlock" phone providers like SamPwnd, work because the guy running it is either a current samsung employee, former and still has server access, or has an inside guy at samsung.....they dont hack the bootloaader codes...they get them straight from private servers
ok, not thought about it. maybe we dont need an unlocked bootloader, but for that i need someone who can programm android launchers or apps.
wazzu232 said:
codes are server sided bud....either you hack Facebook private servers or nothing at all.... also bootloader codes ever since Facebook took over, change at random, unspecified intervals, generated by thief servers...hence why you need to mostly setup the device using. an app for on a phone or pc,.....this syncs up each new bootloader code when it changes.... its called Oculus companion server" if you browse running system processes...used to be able to force kill the process but as soon as you did, oculus home would crash and you get a unresponsive blank screen until reboot....
thats why all those legit "unlock" phone providers like SamPwnd, work because the guy running it is either a current samsung employee, former and still has server access, or has an inside guy at samsung.....they dont hack the bootloaader codes...they get them straight from private servers
Click to expand...
Click to collapse
We could find a vuln in android to gain root access and then find the code using root like we did on huaweis