Develop Bugs

[Q] ATDT#777 to connect cdma data, and what cmd to disconnect?

my phone is rhod400, sprint version CDMA
cdma connect command is:
err = at_send_command("AT+CFUN=1", NULL);
err = at_send_command("AT+HTC_DUN=0", NULL);
err = at_send_command("ATH", NULL);
err = at_send_command("ATDT#777", &p_response);
and disconect command is ? I need this command to disconnect data, then try kill pppd process.
Click to expand...
Click to collapse
turn off data connection cause phone reboot(maybe I found the reason)
When i turn off data connect, phone auto reboot, this happend not everytime,but many times, i have try some builds but all of these builds have this problem.
Builds i had tried: FRG83.R5 ,FRG83.R6,odexed-cm61test-22112010, cm6-28112010-v12,tiad8 FROYO
I guess souce code maybe do null point operation somewhere.
Click to expand...
Click to collapse

muziling said:
my phone is rhod400, sprint version CDMA
When i turn off data connect, phone auto reboot, this happend not everytime,but many times, i have try some builds but all of these builds have this problem.
Builds i had tried: FRG83.R5 ,FRG83.R6,odexed-cm61test-22112010, cm6-28112010-v12,tiad8 FROYO
I guess souce code maybe do null point operation somewhere.
Click to expand...
Click to collapse
When you say turn off data what are you using? The built-in disable synchronization, the built-in disable all cellular, or a 3rd party app that disables data?

muziling said:
my phone is rhod400, sprint version CDMA
When i turn off data connect, phone auto reboot, this happend not everytime,but many times, i have try some builds but all of these builds have this problem.
Builds i had tried: FRG83.R5 ,FRG83.R6,odexed-cm61test-22112010, cm6-28112010-v12,tiad8 FROYO
I guess souce code maybe do null point operation somewhere.
Click to expand...
Click to collapse
I don't see you trying vanilla FRX03. You've tried it with a bunch of custom systems tho...
Try it with FRX03 - that should be everybody's baseline.

I have try FRX03 yet,but I can't do any operation after boot into android, because the system is no response. I have try to install FRX03 several times , everytime I encoutered the same problem, I will try today again.
BTW : where can I download vanilla FRX03, i had google it ,but not found this build for RHOD400
OK, i try version http://htcandroid.xland.cz/XDANDROID.2.2.1.AOSP.FRX03.21.11.10.FULL_PACKAGE.zip with kernel http://zimages.googlecode.com/files/htc-msm-linux-20101204_010857-package.tar.bz2
I follow the step:
1. full format SD card FAT32, not quick format
2. the first boot, welcome screen show, no touch screen, just wait for about 8 minutes,top LED not light,sceen can not be wake up by any key
3. remove battery and boot again.
4. boot into android, screen stop at lock screen, screen always light, can not goto sleep, and I can'n do anything, I touch the screen,but system is no response for me.

I threw together a build on 11/20. Download here. The only thing that could be considered outdated on it would be the kernel (zImage/modules).
If you're on a RHOD400 and using it as a CDMA device, make sure force_cdma=1 in the startup.txt. Enjoy.

Thanks , I will try this tonight.
http://www.multiupload.com/XD023XA5AH
is same to that I had tried
http://htcandroid.xland.cz/XDANDROID.2.2.1.AOSP.FRX03.21.11.10.FULL_PACKAGE.zip

cause reboot logcat:
I/logwrapper( 1277): /system/bin/sh terminated by exit(0)
D/GsmUmtsOptions( 1407): preferenceTreeClick: return false
D/NetworkSettings( 1407): onPreferenceTreeClick: preference == mButtonDataEnable
d.
D/dalvikvm( 1407): GC_CONCURRENT freed 498K, 52% free 2980K/6151K, external 2002
K/2137K, paused 0ms+10ms
I/TelephonyRegistry( 1318): notifyDataConnection: state=0 isDataConnectivityPoss
ible=false reason=apnSwitched interfaceName=null networkType=3
I/TelephonyRegistry( 1318): notifyDataConnection: state=1 isDataConnectivityPoss
ible=true reason=apnSwitched interfaceName=null networkType=3
D/dalvikvm( 1414): GC_EXPLICIT freed 186K, 52% free 2834K/5831K, external 2128K/
2137K, paused 110ms
D/SntpClient( 1318): request time failed: java.net.UnknownHostException: north-a
merica.pool.ntp.org
D/SntpClient( 1318): request time failed: java.net.UnknownHostException: north-a
merica.pool.ntp.org
D/SntpClient( 1318): request time failed: java.net.UnknownHostException: north-a
merica.pool.ntp.org
D/pppd ( 1621): using channel 1
I/pppd ( 1621): Using interface ppp0
I/pppd ( 1621): Connect: ppp0 <--> /dev/smd1
W/pppd ( 1621): Warning - secret file /etc/ppp/pap-secrets has world and/or g
roup access
D/pppd ( 1621): sent P
D/Tethering( 1318): ppp0 is not a tetherable iface, ignoring
D/pppd ( 1621): rcvd P
D/pppd ( 1621): rcvd P
D/pppd ( 1621): sent P
D/pppd ( 1621): rcvd P
W/pppd ( 1621): Warning - secret file /etc/ppp/chap-secrets has world and/or
group access
D/pppd ( 1621): sent P
D/pppd ( 1621): rcvd P
I/pppd ( 1621): CHAP authentication succeeded
D/pppd ( 1621): sent P
D/pppd ( 1621): sent P
D/pppd ( 1621): rcvd P
D/pppd ( 1621): sent P
D/pppd ( 1621): rcvd P
D/pppd ( 1621): rcvd P
D/pppd ( 1621): sent P
D/pppd ( 1621): rcvd P
D/pppd ( 1621): sent P
D/pppd ( 1621): rcvd P
I/pppd ( 1621): local IP address I
I/pppd ( 1621): remote IP address I
I/pppd ( 1621): primary DNS address I
I/pppd ( 1621): secondary DNS address I
D/pppd ( 1622): Script /etc/ppp/ip-up started (pid 1623)
D/pppd ( 1622): Script /etc/ppp/ip-up finished (pid 1623), status = 0x2
I/TelephonyRegistry( 1318): notifyDataConnection: state=2 isDataConnectivityPoss
ible=true reason=apnSwitched interfaceName=ppp0 networkType=3
W/ActivityManager( 1318): Unable to launch app com.android.providers.downloads/1
0017 for broadcast Intent { act=android.net.conn.CONNECTIVITY_CHANGE flg=0x10000
000 (has extras) }: process is bad
W/ActivityManager( 1318): finishReceiver called but none active
D/Tethering( 1318): MasterInitialState.processMessage what=3
D/GsmUmtsOptions( 1407): preferenceTreeClick: return false
D/NetworkSettings( 1407): onPreferenceTreeClick: preference == mButtonDataEnable
d.
I/pppd ( 1622): Terminating on signal 15
I/pppd ( 1622): Connect time 0.5 minutes.
I/pppd ( 1622): Sent 40 bytes, received 40 bytes.
D/pppd ( 1622): Script /etc/ppp/ip-down started (pid 1654)
D/pppd ( 1622): sent P
D/pppd ( 1622): Script /etc/ppp/ip-down finished (pid 1654), status = 0x0
D/pppd ( 1622): rcvd P
C:\Users\lilsh>

I think i found the problem,file /lib/froyo/libhtcgeneric-ril.so
function requestDeactivateDataCall(),there is one line system("killall pppd");
I am sure kill pppd process will cause phone reboot, when I execute command "adb shell killall pppd", phone reboot.
my carrier is CDMA(china telecom)

[Q] 2am bugs on new OTA (Touch of Blue ROM)

My Dinc currently has cmlusco's excellent Touch of Blue v2.2 installed(a full wipe install with v6), which includes the latest OTA. I also have the latest radio (2.15.10.12.20) which cmlusco pulled from the OTA installed.
Since the latest OTA files were installed I have seen a lot of people complaining about 2am reboots. I happen to work 3rd shift, so I am awake during this time and instead of the reboots(as I am usually using my phone at this time) I begin to have mounting errors. This never happened before the new OTA files and only occurs between the times of 2am-5am.
Basically, the second it hits 2am if the screen goes to sleep(either by time or by pressing the power button) after 2-3 seconds both the sd card and emmc unmount themselves. As soon as you wake the phone up the "Preparing phone storage" message is displayed and everything is remounted. I noticed this because I listen to music from my sd card through amazon mp3, and when the screen goes dark the music stops.
I began pulling logs with alogcat and this is an example of what I see happening:
--------- beginning of /dev/log/system
D/InputManagerService( 145): Window already focused, ignoring focus gain of: com.android.internal.view.IInputMethodClient$Stub$[email protected]
--------- beginning of /dev/log/main
I/power ( 145): *** set_screen_state 0
D/PowerManagerService( 145): setScreenStateLocked++, on: false, err: 0
D/SensorService( 145): disable: connection.get() = 0x37d8f8
D/SensorService( 145): disable: get sensor name = CM3602 Light sensor
D/SensorService( 145): SensorDevice::activate: handle = 0x4, enabled = 0x0
D/SensorService( 145): noteStopSensor: uid = 0x3e8, handle = 0x4
D/SensorService( 145): pid=145, uid=1000
D/SensorService( 145): Active sensors:
D/SensorService( 145): BMA150 3-axis Accelerometer (handle=0x00000000, connections=1)
D/PowerManagerService( 145): setScreenStateLocked, turn off the button light
D/lights ( 145): set_light_buttons_func: on=0 brightness=0
V/KeyguardViewMediator( 145): password timeout delay 599226ms
D/KeyguardViewManager( 145): show(); mKeyguar[email protected]409e7148
D/HtcLockScreen( 145): createPatternUnlockScreen() ...
D/HtcLockScreen( 145): package name not found - com.htc.lockscreen
D/SensorService( 145): disable: connection.get() = 0x37d8f8
D/SensorService( 145): disable: get sensor name = BMA150 3-axis Accelerometer
D/SensorService( 145): SensorDevice::activate: handle = 0x0, enabled = 0x0
D/Sensors ( 145): Enable akm: en = 0
D/SensorService( 145): noteStopSensor: uid = 0x3e8, handle = 0x0
D/SensorService( 145): pid=145, uid=1000
D/SensorService( 145): Active sensors:
D/AlarmManager( 145): ACTION_SCREEN_OFF
W/InputManagerService( 145): Receive : Intent.ACTION_SCREEN_OFF
D/SurfaceFlinger( 145): About to give-up screen, flinger = 0xb26c0
W/InputManagerService( 145): Disable input method client.
W/IInputConnectionWrapper( 8615): beginBatchEdit on inactive InputConnection
W/IInputConnectionWrapper( 8615): endBatchEdit on inactive InputConnection
D/StatusBarPolicy( 216): onSignalStrengthsChanged
D/StatusBarPolicy( 216): iconIndex=1
V/StatusBarPolicy( 216): cdmaLevel:3;max:4
D/StatusBarPolicy( 216): iconLevel:3
D/StatusBarService( 216): updateIcon slot=phone_signal index=20 viewIndex=14 old=StatusBarIcon(pkg=com.android.systemui id=0x7f020009 level=0 visible=true num=0 ) icon=StatusBarIcon(pkg=com.android.systemui id=0x7f02000a level=0 visible=true num=0 )
I/USERIAL_LINUX( 458): ##### USerial_Ioctl: BT_Wake, 0x8003 ####
D/ContactWidget Matrix( 264): Received intent:android.intent.action.SCREEN_OFF
D/StatusBarManagerService( 145): disable what =1, token = [email protected], pkg = android, mBar = [email protected]
D/MountService( 145): Receive Screen OFF!
D/MountService( 145): persist.erasedirtyfat.done = 0
D/MountService( 145): The current time is 2:40:13
D/AK8973 ( 102): Compass CLOSE
D/AutoSetting( 8786): service - mHandler: cancel location update
D/AutoSetting( 8786): service - changes count: 0
D/InputManagerService( 145): Starting input on non-focused client [email protected] (uid=10108 pid=8615)
V/SyncManager( 145): runstateidle: nonHTCActiveCount++ :1
I/USERIAL_LINUX( 458): ##### USerial_Ioctl: BT_Sleep, 0x8004 ####
D/KeyguardViewMediator( 145): wakeWhenReadyLocked(26)
D/lights ( 145): set_light_buttons_func: on=2960685 brightness=45
I/power ( 145): *** set_screen_state 1
D/PowerManagerService( 145): setScreenStateLocked++, on: true, err: 0
D/SurfaceFlinger( 145): Screen about to return, flinger = 0xb26c0
D/SensorService( 145): enable: connection.get() = 0x37d8f8, (2.3.4)
D/SensorService( 145): enable: get sensor name = CM3602 Light sensor
D/SensorService( 145): SensorDevice::activate: handle = 0x4, enabled = 0x1
D/SensorService( 145): noteStartSensor: uid = 0x3e8, handle = 0x4
D/SensorService( 145): pid=145, uid=1000
D/SensorService( 145): Active sensors:
D/SensorService( 145): CM3602 Light sensor (handle=0x00000004, connections=1)
D/PowerManagerService( 145): New lightsensor value:40, lcdValue:45
D/PowerManagerService( 145): lightSensorChangedLocked, buttonValue >= 0, mPowerState = 3
D/lights ( 145): set_light_buttons_func: on=16777215 brightness=255
D/PowerManagerService( 145): button light setOrientation:-1
V/KeyguardViewMediator( 145): password timeout delay 594138ms
D/AlarmManager( 145): ACTION_SCREEN_ON
W/InputManagerService( 145): Receive : Intent.ACTION_SCREEN_ON
W/InputManagerService( 145): Enable input method client.
D/HtcCdmaPhoneApp( 288): eri_id = 64 home or roaming = VZW_HOME_NETWORK
V/HtcCdmaGloableRoamingUtil( 288): localGetGlobalRoamingOption:0
D/HtcCdmaGloableRoamingUtil( 288): getNeedShowRoamingOption():true
D/HtcCdmaGloableRoamingUtil( 288): getNeedAutoSetDeny():false
D/StatusBarPolicy( 216): onSignalStrengthsChanged
D/ContactWidget Matrix( 264): Received intent:android.intent.action.SCREEN_ON
D/HtcNBPCDUtil( 288): EVENT_NBPCD_INFO
D/StatusBarPolicy( 216): iconIndex=1
V/StatusBarPolicy( 216): cdmaLevel:3;max:4
D/StatusBarPolicy( 216): iconLevel:3
D/StatusBarService( 216): updateIcon slot=phone_signal index=20 viewIndex=14 old=StatusBarIcon(pkg=com.android.systemui id=0x7f02000a level=0 visible=true num=0 ) icon=StatusBarIcon(pkg=com.android.systemui id=0x7f02000a level=0 visible=true num=0 )
D/MountService( 145): Receive Screen ON!
D/VoldCmdListener( 90): erase stop
D/VoldCmdListener( 90): Erase stop...
W/FrameworkListener( 90): Handler 'erase' error (No such file or directory)
D/VoldCmdListener( 90): volume mount /mnt/emmc
I/Vold ( 90): /dev/block/vold/179:3 being considered for volume emmc
D/Vold ( 90): Volume emmc state changing 1 (Idle-Unmounted) -> 3 (Checking)
I/StorageNotification( 216): Media {/mnt/emmc} state changed from {unmounted} -> {checking}
I//system/bin/fsck_msdos( 90): ** /dev/block/vold/179:3
I//system/bin/fsck_msdos( 90): ** Phase 1 - Read and Compare FATs
I//system/bin/fsck_msdos( 90): Attempting to allocate 845 KB for FAT
I//system/bin/fsck_msdos( 90): Attempting to allocate 845 KB for FAT
D/KeyguardViewManager( 145): hide()
D/StatusBarManagerService( 145): disable what =0, token = [email protected], pkg = android, mBar = [email protected]
D/SensorService( 145): enable: connection.get() = 0x37d8f8, (2.3.4)
D/SensorService( 145): enable: get sensor name = BMA150 3-axis Accelerometer
D/SensorService( 145): SensorDevice::activate: handle = 0x0, enabled = 0x1
D/Sensors ( 145): Enable akm: en = 1
D/AK8973 ( 102): Compass Start
D/SensorService( 145): noteStartSensor: uid = 0x3e8, handle = 0x0
D/SensorService( 145): pid=145, uid=1000
D/SensorService( 145): Active sensors:
D/SensorService( 145): BMA150 3-axis Accelerometer (handle=0x00000000, connections=1)
D/SensorService( 145): CM3602 Light sensor (handle=0x00000004, connections=1)
D/InputManagerService( 145): Window already focused, ignoring focus gain of: [email protected]
I//system/bin/fsck_msdos( 90): ** Phase 2 - Check Cluster Chains
I//system/bin/fsck_msdos( 90): ** Phase 3 - Checking Directories
D/dalvikvm( 8615): GC_CONCURRENT freed 477K, 49% free 3323K/6407K, external 36K/548K, paused 3ms+5ms
I//system/bin/fsck_msdos( 90): ** Phase 4 - Checking for Lost Files
I//system/bin/fsck_msdos( 90): 1370 files, 2008096 free (193825 clusters)
I/Vold ( 90): Filesystem check completed OK
I/Vold ( 90): Device /dev/block/vold/179:3, target /mnt/emmc mounted @ /mnt/secure/staging
D/Vold ( 90): Volume emmc state changing 3 (Checking) -> 4 (Mounted)
I/StorageNotification( 216): Media {/mnt/emmc} state changed from {checking} -> {mounted}
D/Ringer ( 288): -- intent.getAction() =android.intent.action.MEDIA_MOUNTED
D/MountService( 145): persist.erasedirtyfat.done = 0
D/MountService( 145): The current time is 2:40:19
D/FacebookReceiver( 8190): Intent.ACTION_USER_PRESENT SyncInterval=86400000,currTime=1341902419199
D/FacebookReceiver( 8190): Intent.ACTION_USER_PRESENT lastStreamSyncTime=1341902419200,lastFriendSyncTime=1341902419200
D/dalvikvm( 987): GC_EXTERNAL_ALLOC freed 191K, 46% free 2985K/5511K, external 1759K/2270K, paused 32ms
D/AppWidgetHostView( 264): updateAppWidget mInfo = AppWidgetProviderInfo(provider=ComponentInfo{mikado.bizcalpro/mikado.bizcalpro.WidgetProvider4x4})
V/CalendarProvider2( 8786): ACTION_EVENT_CHANGED
D/dalvikvm( 987): GC_EXTERNAL_ALLOC freed 176K, 46% free 2986K/5511K, external 1126K/1637K, paused 31ms
D/DrmScannerReceiver( 8918): android.intent.action.MEDIA_MOUNTED
I/EMMC ( 8918): Action mounted + path: /mnt/emmc,/mnt/sdcard,/mnt/ext_sd, /mnt/emmc,android.intent.action.MEDIA_MOUNTED
D/DrmIntentService( 8918): SCAN_STORAGE
D/DrmIntentService( 8918): Scanning /images
E/MediaScannerService( 8918): Failed to delete file /data/data/com.android.providers.media/pause_scan
D/DrmIntentService( 8918): Empty in /images
I/MediaUploader( 8937): No need to wake up
D/DrmIntentService( 8918): Scanning /audio
D/DrmIntentService( 8918): Empty in /audio
D/DrmIntentService( 8918): Scanning /video
D/DrmIntentService( 8918): Empty in /video
D/DrmIntentService( 8918): Scanning /jar
D/DrmIntentService( 8918): Empty in /jar
I/AmazonAppstore.UpdateCommands( 8587): Self-updating enabled: true
W/JustPictures( 8229): External storage mounted
D/AmazonAppstore.UpdateCommands( 8587): Adding self-update command to UpdateService
D/AmazonAppstore.UpdateService( 8587): Received action: com.amazon.mas.client.framework.UpdateService.SD_CARD_MOUNTED from intent: Intent { act=com.amazon.mas.client.framework.UpdateService.SD_CARD_MOUNTED cmp=com.amazon.venezia/com.amazon.mas.client.framework.UpdateService }
D/MediaScannerService( 8918): start scanning volume phoneStorage
D/MediaProvider( 8918): lock thumbnail worker
D/MediaProvider( 8918): thread is un-locked
D/MediaProvider( 8918): lock thumbnail worker
V/MediaPlayerService( 7891): Create new media retriever from pid 8918
D/MediaScannerService( 8918): getDefaultLocale =en_US
D/MediaScannerService( 8918): [MediaScannerService][scan]+external-fc303da9.db volume ID: -63947351,phoneStorage,/mnt/emmc
D/dalvikvm( 8918): GC_CONCURRENT freed 319K, 47% free 3084K/5767K, external 712K/1024K, paused 2ms+2ms
D/MediaScanner( 8918): MediaScanner:scanDirectories.doBulkInsertAll+
D/MediaScanner( 8918): MediaScanner:scanDirectories.doBulkInsertAll-
D/MediaScanner( 8918): prescan time: 34ms
D/MediaScanner( 8918): scan time: 293ms
D/MediaScanner( 8918): postscan time: 0ms
D/MediaScanner( 8918): total time: 327ms
D/MediaScannerService( 8918): [MediaScannerService][scan]-
D/MediaProvider( 8918): un-lock thumbnail worker
D/MediaProvider( 8918): un-lock thumbnail worker
D/MediaScannerService( 8918): done scanning volume phoneStorage
E/MediaScannerService( 8918): Failed to delete file /data/data/com.android.providers.media/pause_scan
D/StatusBarPolicy( 216): onSignalStrengthsChanged
D/StatusBarPolicy( 216): iconIndex=1
V/StatusBarPolicy( 216): cdmaLevel:2;max:4
D/StatusBarPolicy( 216): iconLevel:2
D/StatusBarService( 216): updateIcon slot=phone_signal index=20 viewIndex=14 old=StatusBarIcon(pkg=com.android.systemui id=0x7f02000a level=0 visible=true num=0 ) icon=StatusBarIcon(pkg=com.android.systemui id=0x7f020009 level=0 visible=true num=0 )
I/USERIAL_LINUX( 458): ##### USerial_Ioctl: BT_Wake, 0x8003 ####
I/USERIAL_LINUX( 458): ##### USerial_Ioctl: BT_Sleep, 0x8004 ####
Click to expand...
Click to collapse
I am very new to reading these logs but a few lines stuck out to me...
D/MountService( 145): Receive Screen OFF!
D/MountService( 145): persist.erasedirtyfat.done = 0
D/MountService( 145): The current time is 2:40:13
Click to expand...
Click to collapse
and then:
D/MountService( 145): Receive Screen ON!
D/VoldCmdListener( 90): erase stop
D/VoldCmdListener( 90): Erase stop...
W/FrameworkListener( 90): Handler 'erase' error (No such file or directory)
D/VoldCmdListener( 90): volume mount /mnt/emmc
I/Vold ( 90): /dev/block/vold/179:3 being considered for volume emmc
D/Vold ( 90): Volume emmc state changing 1 (Idle-Unmounted) -> 3 (Checking)
I/StorageNotification( 216): Media {/mnt/emmc} state changed from {unmounted} -> {checking}
Click to expand...
Click to collapse
I don't see anything obvious enough to make me understand what is going on, but I can definitely see that as soon as the screen goes off the phone checks the time and starts doing something with the mounts, and as soon as the command to turn back on again comes the phone begins working on remounting everything.
On another site someone mentioned HTC stating that the reboots were for memory optimization and should only happen once. I'm sure there is some sort of commonality between the reboots and my errors but it has me puzzled. Does anyone more experienced than me see anything in the logs that could lead to a fix, as I don't plan on changing my work schedule anytime soon.
Thanks for any assistance.

Laxnkio said:
My Dinc currently has cmlusco's excellent Touch of Blue v2.2 installed(a full wipe install with v6), which includes the latest OTA. I also have the latest radio (2.15.10.12.20) which cmlusco pulled from the OTA installed.
Since the latest OTA files were installed I have seen a lot of people complaining about 2am reboots. I happen to work 3rd shift, so I am awake during this time and instead of the reboots(as I am usually using my phone at this time) I begin to have mounting errors. This never happened before the new OTA files and only occurs between the times of 2am-5am.
Basically, the second it hits 2am if the screen goes to sleep(either by time or by pressing the power button) after 2-3 seconds both the sd card and emmc unmount themselves. As soon as you wake the phone up the "Preparing phone storage" message is displayed and everything is remounted. I noticed this because I listen to music from my sd card through amazon mp3, and when the screen goes dark the music stops.
I began pulling logs with alogcat and this is an example of what I see happening:
I am very new to reading these logs but a few lines stuck out to me...
and then:
I don't see anything obvious enough to make me understand what is going on, but I can definitely see that as soon as the screen goes off the phone checks the time and starts doing something with the mounts, and as soon as the command to turn back on again comes the phone begins working on remounting everything.
On another site someone mentioned HTC stating that the reboots were for memory optimization and should only happen once. I'm sure there is some sort of commonality between the reboots and my errors but it has me puzzled. Does anyone more experienced than me see anything in the logs that could lead to a fix, as I don't plan on changing my work schedule anytime soon.
Thanks for any assistance.
Click to expand...
Click to collapse
Those logs are interesting as with this newest update a file in /system/bin called erase_dirty_fat. From looking at this file it seems it scans emmc and the sdcard for bad sectors and errors. The mounting problems may be intentional by htc, as the script unmounts and mounts the emnc and sdcard. This could some how cause reboots i suppose just not sure how yet. I need to examine the file more to se exactly what it does.

cmlusco said:
Those logs are interesting as with this newest update a file in /system/bin called erase_dirty_fat. From looking at this file it seems it scans emmc and the sdcard for bad sectors and errors. The mounting problems may be intentional by htc, as the script unmounts and mounts the emnc and sdcard. This could some how cause reboots i suppose just not sure how yet. I need to examine the file more to se exactly what it does.
Click to expand...
Click to collapse
I'm running the odex version and except for the one time after first flashing it I haven't had another 2 am reboot since and never a problem mounting storage,

Bit of an update...after scouring the net i tried the manual setting the clock to 2am idea while I wasn't using the phone and let it sit for over 8 hours. I don't think I got any reboots but last night at the real 2am I didn't get any unmounts. So it has to be some sort of optimization script or something that can only run when you aren't using the phone. Hope tonight is the same result.
Sent from my ADR6300 using Tapatalk 2

For those of you getting the 2am reboots try this as a fix. Go to /system/bin and look for a file called " erase_dirty_fat ". Rename or move the file and reboot the phone. See if you still get the 2am reboots.

cmlusco said:
For those of you getting the 2am reboots try this as a fix. Go to /system/bin and look for a file called " erase_dirty_fat ". Rename or move the file and reboot the phone. See if you still get the 2am reboots.
Click to expand...
Click to collapse
Be interesting to know if this fixes the problem also, may try this Rom if it does.

Spoke too quickly I guess because the problem returned tonight after 5 days in the clear. Will try to erase that file now and see if it works.
Sent from my ADR6300 using Tapatalk 2

Its so weird i feel lucky, but also left out lol. I havent had it happen to me at all.

Same here in a way since I don't have the reboots. I've tried deleting that file to no avail, also tried leaving the phone alone for 2 8 hour blocks to try and let it finish but that doesn't seem to help either.
Wouldn't be a problem if I didn't work mids and listen to podcasts, the perfect storm. Good job htc screwing up a phone 2 years after release.
Sent from my ADR6300 using Tapatalk 2

Laxnkio said:
Spoke too quickly I guess because the problem returned tonight after 5 days in the clear. Will try to erase that file now and see if it works.
Sent from my ADR6300 using Tapatalk 2
Click to expand...
Click to collapse
Same with me, problem returned after a week of not having it. Deleting the mentioned system/bin file had no effect on mine, reboot problem still there.

kzoodroid said:
Same with me, problem returned after a week of not having it. Deleting the mentioned system/bin file had no effect on mine, reboot problem still there.
Click to expand...
Click to collapse
Well my next guess would be its one of the new apps mabey. The pic below shows the new apks added in the update. Try renaming them one at a time and see if the reboots stop.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
I would start with linkify dispatcher. Make sure you have a backup incase it messes something up.

Linkify didn't work for me, going to try the one that starts with q next since it has sd in the name.
Sent from my ADR6300 using Tapatalk 2

Renaming qx didn't work either. So weird.
Sent from my Thrive using Tapatalk 2

Laxnkio said:
Renaming qx didn't work either. So weird.
Sent from my Thrive using Tapatalk 2
Click to expand...
Click to collapse
There were many other files updated and patched that could be the cause. Mabey its a common app like gmail or something, as i dont use the gmail app and i dont get the 2am bug. Hard to tell, im going to install gmail app and see if i get the reboots. I just keep thinking it has to be an app commonly used, but that i dont have installed. If it were in the framework i should be experiencing it too.

Hmmmm... Mine keeps asking me to update but I'm not doing it.
Sent from my ADR6300 using xda premium

I just went back to TOB 1.3 and everything is running fine.
---------- Post added at 11:24 PM ---------- Previous post was at 11:21 PM ----------
Is GingerTiny_v2_2.6.35.14_08/10/2012+ compatibe with TOB 1.3. I had a problem with this combo so I went back to the Feb release.

joeyz400 said:
I just went back to TOB 1.3 and everything is running fine.
---------- Post added at 11:24 PM ---------- Previous post was at 11:21 PM ----------
Is GingerTiny_v2_2.6.35.14_08/10/2012+ compatibe with TOB 1.3. I had a problem with this combo so I went back to the Feb release.
Click to expand...
Click to collapse
Yes, all versions of the Gingertiny kernel are compatible with all versions of TOB. What issues were you having?

cmlusco said:
Yes, all versions of the Gingertiny kernel are compatible with all versions of TOB. What issues were you having?
Click to expand...
Click to collapse
I get a lot of freezes and have to restart. I tried to reinstall it and got bootloops. I just did another recovery.

FF18 Leak (OTA) Bluetooth Panasonic Home phone

I have a panasonic th12 home phone base that normally my phone connects to when I am at home over bluetooth. This allows me to use regular handsets while in the house to make / receive phone calls. I just updated to the FF18 from sfhub's odin and now my device no longer will connect the home phone base. It pairs but it will not stay connected or allow me to check the box for phone calls as well. Any ideas? is this a bluetooth bug?

Every time I flash I have to pair my phone with car again. I typically delete device profile from phone, delete phone profile from device, change bluetooth name of phone, pair phone with device under new name. Finally after paired wait for message to pop up on phone asking if device has permission to access your stuff and check box for always allow.

Yes my phone does the same for Microsoft sync in my vehicle but it will not connect with my home phone.
EDIT: I have a couple of logcat during the time i tried to connect my device to the base if that helps anything?
Code:
I//system/bin/bluetoothd( 2530): bluetoothd[2534]: external/bluetooth/bluez/plugins/hciops.c:conn_complete() status 0x00
I//system/bin/bluetoothd( 2530): bluetoothd[2534]: external/bluetooth/bluez/src/adapter.c:adapter_get_device() 00:80:F0:8F:61:B6
V/BluetoothEventLoop.cpp( 1910): event_filter: Received signal org.bluez.Device:PropertyChanged from /org/bluez/2534/hci0/dev_00_80_F0_8F_61_B6
D/BluetoothEventLoop( 1910): Device property changed: 00:80:F0:8F:61:B6 property: Connected value: true
I/BluetoothService( 1910): ACL connected, mAclLinkCount = 1
I//system/bin/bluetoothd( 2530): bluetoothd[2534]: external/bluetooth/bluez/plugins/hciops.c:remote_features_information() hci0 status 0
I//system/bin/bluetoothd( 2530): bluetoothd[2534]: external/bluetooth/bluez/plugins/hciops.c:remote_name_information() hci0 status 0
I//system/bin/bluetoothd( 2530): bluetoothd[2534]: external/bluetooth/bluez/plugins/hciops.c:link_key_request() hci0 dba 00:80:F0:8F:61:B6
I//system/bin/bluetoothd( 2530): bluetoothd[2534]: external/bluetooth/bluez/plugins/hciops.c:get_auth_info() hci0 dba 00:80:F0:8F:61:B6
I//system/bin/bluetoothd( 2530): bluetoothd[2534]: external/bluetooth/bluez/plugins/hciops.c:link_key_request() kernel auth requirements = 0x04
I//system/bin/bluetoothd( 2530): bluetoothd[2534]: external/bluetooth/bluez/plugins/hciops.c:link_key_request() Matching key found
I//system/bin/bluetoothd( 2530): bluetoothd[2534]: external/bluetooth/bluez/plugins/hciops.c:link_key_request() link key type 0x00
W/ActivityManager( 1910): Permission Denial: receiving Intent { act=android.bluetooth.device.action.ACL_CONNECTED flg=0x10000010 (has extras) } to com.locationlabs.v3client requires android.permission.BLUETOOTH due to sender android (uid 1000)
V/BluetoothEventManager( 4127): Received android.bluetooth.device.action.UUID
D/Bluetooth HSHFP( 2156): SDP UUID: TYPE_HANDSFREE
E/CachedBluetoothDevice( 4127): updating profiles for Base TH12
V/CachedBluetoothDevice( 4127): Class: 620210
V/CachedBluetoothDevice( 4127): UUID:
V/CachedBluetoothDevice( 4127): 0000111e-0000-1000-8000-00805f9b34fb
E/CachedBluetoothDevice( 4127): onUuidChanged: Time since last connect2151
D/CachedBluetoothDevice( 4127): Command sent successfully:CONNECT Address:00:80:F0:8F:61:B6 Profile:HEADSET
D/CachedBluetoothDevice( 4127): Preferred profiles = 1
D/BluetoothUtils( 2156): isHeadsetAllowedBySecurityPolicy
V/BT HSHFP( 2156): waitForAsyncConnectNative
V/BT HSHFP( 2156): connectAsyncNative
I/BT HSHFP( 2156): Created RFCOMM socket fd 125.
I/BT HSHFP( 2156): async connect is in progress (Operation now in progress)
V/BT HSHFP( 2156): Remaining time 486ms
V/BT HSHFP( 2156): select() returned 2.
E/BT HSHFP( 2156): RFCOMM async connect() error: Connection refused (111), nr = -1
V/BT HSHFP( 2156): disconnectNative
D/BluetoothService( 1910): CONNECTION_STATE_CHANGE: : 1 -> 0
V/BluetoothEventManager( 4127): Received android.bluetooth.headset.profile.action.CONNECTION_STATE_CHANGED
I/BluetoothDeviceProfileState( 1910): Entering ACL Connected state with: 102
D/BluetoothPbap( 1910): disconnect()
Looks like someone on CM had issues with this as well, but it eventually worked... mine doesnt
http://forum.cyanogenmod.com/topic/41497-bluetooth-wont-auto-connect/

Maybe someone can even point me in the right direction as to how to debug this situation? I have a development environment up for apps, but havent ever explored the base source code. If anyone has any thoughts it would truly be appreciated.
Its really makes me made because I had a similar problem with my last phone, the HTC hero. It got to the point you wait for all of these updates and then I had to limit my phone to like andorid 1.5 otherwise my phone would not connect. Its should be a bigger issue only because users who are not on xda would be screwed and could not rollback to a previous Android release. At lease this community exists so that I can go back if needed. As of right now I'm liking the new ics on this phone and will be very disappointed if I have to to back to GB just for this.

New root method?

Some folks are trying to find an exploit for another Android device. I tried to apply it to the Fire TV stick, but the exploitServiceApp.apk won't install.
http://forum.xda-developers.com/not...t-progress-t2961974/post58464146#post58464146

Sizzlechest said:
Some folks are trying to find an exploit for another Android device. I tried to apply it to the Fire TV stick, but the exploitServiceApp.apk won't install.
http://forum.xda-developers.com/not...t-progress-t2961974/post58464146#post58464146
Click to expand...
Click to collapse
exploitServiceApp.apk was built with a minimum sdk version of 18. The Fire TV and Fire TV Stick run sdk version 17. That's why it wont install. It also seems to require mock locations to be enabled, which may prove to be a chore on the AFTV/S. Of Course this all assumes the AFTV/S is vulnerable to begin with.
Root sources seem to be:
http://forum.xda-developers.com/mate-7/general/wip-mate-7-root-bl-unlock-t2995086/
and
http://forum.xda-developers.com/crossdevice-dev/sony/giefroot-rooting-tool-cve-2014-4322-t3011598

What would happen, if you would try to rebuild it with APK Tool and change the min sdk to 17?
I just did it with the Advanced APK Tool and attatched it to this posting. I'm not at home right now so I can't test it on my own.
APK-Info.exe says its a valid apk and the minimum sdk version is 17.
Important note: I'm not responsible for damaging your device if this somehow does.

It depends on the exploit, I read on another topic that it's based on a specific location in memory (or something like that).
That's presuming that it's even possible.
In regards to mock locations, is it possible to set it using the aosp settings apk?

It does install, but it goes straight to home after loading. Maybe it does work if it's possible to enable mock locations.

tech3475 said:
In regards to mock locations, is it possible to set it using the aosp settings apk?
Click to expand...
Click to collapse
Trying to access developer options (which is where the mock location setting is) causes settings.apk to crash.
bigwillie1 said:
It does install, but it goes straight to home after loading. Maybe it does work if it's possible to enable mock locations.
Click to expand...
Click to collapse
Odd, on a Fire TV Stick (running latest OS version) @androidyeah's app launches fine. However, it just displays the message "Note: Your device seems not vulnerable!" in the upper right corner.

AFTVnews.com said:
Trying to access developer options (which is where the mock location setting is) causes settings.apk to crash.
Click to expand...
Click to collapse
Anyone tried any debugging yet on that part?
AFTVnews.com said:
Odd, on a Fire TV Stick (running latest OS version) @androidyeah's app launches fine. However, it just displays the message "Note: Your device seems not vulnerable!" in the upper right corner.
Click to expand...
Click to collapse
I guess if FTV Stick + FTV using similar base firmwares, it is already patched or something :/

androidyeah said:
Anyone tried any debugging yet on that part?
Click to expand...
Click to collapse
Code:
V/AudioFlinger( 329): Audio hardware entering standby, mixer 0x40100008, suspend count 0
D/AudioStreamOutALSA( 329): AudioStreamOut: standby()
V/AudioFlinger( 329): releaseWakeLock_l() AudioOut_2
V/AudioFlinger( 329): thread 0x40100008 type 0 TID 712 going to sleep
V/AudioFlinger( 329): createTrack() sessionId: 0
V/AudioFlinger( 329): createTrack() lSessionId: 99
V/AudioFlinger( 329): AUDIO_OUTPUT_FLAG_FAST denied: isTimed=0 sharedBuffer=0x0 frameCount=3763 mFrameCount=256 format=1 isLinear=1 channelMask=0x1 sampleRate=44100 mSampleRate=48000 hasFastMixer=1 tid=7528 fastTrackAvailMask=0xfe
V/AudioFlinger( 329): Track constructor name 4100, calling pid 691
V/AudioFlinger( 329): acquiring 99 from 691
V/AudioFlinger( 329): added new entry for 99
V/AudioFlinger( 329): start(4100), calling pid 691 session 99
V/AudioFlinger( 329): ? => ACTIVE (4100) on thread 0x40f9a808
V/AudioFlinger( 329): mWaitWorkCV.broadcast
V/AudioFlinger( 329): thread 0x40100008 type 0 TID 712 waking up
V/AudioFlinger( 329): acquireWakeLock_l() AudioOut_2 status 0
V/AudioFlinger( 329): releasing 98 from 691
V/AudioFlinger( 329): decremented refcount to 0
V/AudioFlinger( 329): purging stale effects
V/AudioFlinger( 329): remove track (4098) and delete from mixer
V/AudioFlinger( 329): PlaybackThread::Track destructor
I/ActivityManager( 691): START u0 {act=android.intent.action.MAIN cmp=com.android.settings/.SubSettings (has extras)} from pid 7424
D/dalvikvm( 691): GC_FOR_ALLOC freed 957K, 30% free 8019K/11344K, paused 37ms, total 39ms
I/ViewRootImpl( 7424): Slow KeyEvent in com.android.settings/com.android.settings.Settings device=8 action=Up latency=3ms processing=54ms
I/Activity( 7424): No ActvityExender defined. Proceed with default activity behavior.
D/AndroidRuntime( 7424): Shutting down VM
W/dalvikvm( 7424): threadid=1: thread exiting with uncaught exception (group=0x40dc2af8)
V/AudioFlinger( 329): getNextBuffer() no more data for track 4100 on thread 0x40100008
V/AudioFlinger( 329): stop(4100), calling pid 691
V/AudioFlinger( 329): not stopping/stopped => stopping/stopped (4100) on thread 0x40100008
E/AndroidRuntime( 7424): FATAL EXCEPTION: main
E/AndroidRuntime( 7424): java.lang.RuntimeException: Unable to start activity ComponentInfo{com.android.settings/com.android.settings.SubSettings}: java.lang.SecurityException: Only package verification agents can read the verifier device identity: Neither user 10001 nor current process has android.permission.PACKAGE_VERIFICATION_AGENT.
E/AndroidRuntime( 7424): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2206)
E/AndroidRuntime( 7424): at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2258)
E/AndroidRuntime( 7424): at android.app.ActivityThread.access$600(ActivityThread.java:146)
E/AndroidRuntime( 7424): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1243)
E/AndroidRuntime( 7424): at android.os.Handler.dispatchMessage(Handler.java:99)
E/AndroidRuntime( 7424): at android.os.Looper.loop(Looper.java:137)
E/AndroidRuntime( 7424): at android.app.ActivityThread.main(ActivityThread.java:5129)
E/AndroidRuntime( 7424): at java.lang.reflect.Method.invokeNative(Native Method)
E/AndroidRuntime( 7424): at java.lang.reflect.Method.invoke(Method.java:511)
E/AndroidRuntime( 7424): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:793)
E/AndroidRuntime( 7424): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:560)
E/AndroidRuntime( 7424): at dalvik.system.NativeStart.main(Native Method)
E/AndroidRuntime( 7424): Caused by: java.lang.SecurityException: Only package verification agents can read the verifier device identity: Neither user 10001 nor current process has android.permission.PACKAGE_VERIFICATION_AGENT.
E/AndroidRuntime( 7424): at android.os.Parcel.readException(Parcel.java:1426)
E/AndroidRuntime( 7424): at android.os.Parcel.readException(Parcel.java:1380)
E/AndroidRuntime( 7424): at android.content.pm.IPackageManager$Stub$Proxy.getVerifierDeviceIdentity(IPackageManager.java:3381)
E/AndroidRuntime( 7424): at android.app.ApplicationPackageManager.getVerifierDeviceIdentity(ApplicationPackageManager.java:1295)
E/AndroidRuntime( 7424): at com.android.settings.DevelopmentSettings.onCreate(DevelopmentSettings.java:143)
E/AndroidRuntime( 7424): at android.app.Fragment.performCreate(Fragment.java:1673)
E/AndroidRuntime( 7424): at android.app.FragmentManagerImpl.moveToState(FragmentManager.java:854)
E/AndroidRuntime( 7424): at android.app.FragmentManagerImpl.moveToState(FragmentManager.java:1057)
E/AndroidRuntime( 7424): at android.app.BackStackRecord.run(BackStackRecord.java:682)
E/AndroidRuntime( 7424): at android.app.FragmentManagerImpl.execPendingActions(FragmentManager.java:1435)
E/AndroidRuntime( 7424): at android.app.Activity.performStart(Activity.java:5220)
E/AndroidRuntime( 7424): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2179)
E/AndroidRuntime( 7424): ... 11 more
V/AudioFlinger( 329): presentationComplete() reset: mPresentationCompleteFrames 8192 audioHalFrames 3072
W/ActivityManager( 691): Force finishing activity com.android.settings/.SubSettings
I/Process ( 7424): Sending signal. PID: 7424 SIG: 9
W/ActivityManager( 691): Force finishing activity com.android.settings/.Settings
I/ActivityManager( 691): Process com.android.settings (pid 7424) has died.
I/WindowState( 691): WIN DEATH: Window{414bef98 u0 com.android.settings/com.android.settings.Settings}
D/FIRED-TV( 2488): Settings Loaded from /data/data/com.altusapps.firedtvlauncher/files/settings2.json
V/AudioFlinger( 329): presentationComplete() session 99 complete: framesWritten 8192
V/AudioFlinger( 329): TrackBase::reset
W/ContextImpl( 691): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1353 com.android.server.am.ActivityManagerService.activityResumed:4547 android.app.ActivityManagerNative.onTransact:420 com.android.server.am.ActivityManagerService.onTransact:1716 android.os.Binder.execTransact:351
W/InputMethodManagerService( 691): Got RemoteException sending setActive(false) notification to pid 7424 uid 10001
W/ContextImpl( 691): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1353 com.amazon.internal.policy.impl.AmazonPhoneWindowManager$SendTopWindowChanged.run:3297 android.os.Handler.handleCallback:725 android.os.Handler.dispatchMessage:92 android.os.Looper.loop:137
D/Bluetooth HS/HF( 1355): HandleMessage9
D/Bluetooth HS/HF( 1355): Battery State Changed, send update100Scale: 100
D/FIRED-TV( 2488): Settings Saved to /data/data/com.altusapps.firedtvlauncher/files/settings2.json
V/AudioFlinger( 329): Audio hardware entering standby, mixer 0x40100008, suspend count 0
D/AudioStreamOutALSA( 329): AudioStreamOut: standby()
V/AudioFlinger( 329): releaseWakeLock_l() AudioOut_2
V/AudioFlinger( 329): thread 0x40100008 type 0 TID 712 going to sleep
I/ThermalDaemon( 336): Sensor[tmp105_2_pwrs] Temperature : 35.0
I/TemperatureSensorObserver( 691): read new temperature 35500
I/abtfilt ( 1775): all HID in sniff mode!
I/abtfilt ( 1775): BT Action
I/abtfilt ( 1775): WMI Cmd: 145 Len: 16
maybe someone finds this useful...

AFTVnews.com said:
Trying to access developer options (which is where the mock location setting is) causes settings.apk to crash.
Odd, on a Fire TV Stick (running latest OS version) @androidyeah's app launches fine. However, it just displays the message "Note: Your device seems not vulnerable!" in the upper right corner.
Click to expand...
Click to collapse
If you want to enable mock locations or change any other settings this is the way to go (does not require root):
http://forum.xda-developers.com/fire-tv/general/guide-change-settings-firetv-via-adb-t3015522
thought i would share this as people keep using on how manipulate the settings.db
I have done some root app development and stumbled across this binary a while ago.
Have fun!

superkoal said:
If you want to enable mock locations or change any other settings this is the way to go (does not require root):
http://forum.xda-developers.com/fire-tv/general/guide-change-settings-firetv-via-adb-t3015522
thought i would share this as people keep using on how manipulate the settings.db
I have done some root app development and stumbled across this binary a while ago.
Have fun!
Click to expand...
Click to collapse
That's a great tip, thanks.
Running "settings get secure allow_mock_location" returns "null". I went ahead and ran "settings put secure allow_mock_location 1" and "settings put secure ALLOW_MOCK_LOCATION 1" but it doesn't seem to have done anything. The exploitServiceApp APK still gives the same message. I sideloaded some location spoofing app from the Play Store and it complained that mock locations were not enabled.

superkoal said:
If you want to enable mock locations or change any other settings this is the way to go (does not require root):
http://forum.xda-developers.com/fire-tv/general/guide-change-settings-firetv-via-adb-t3015522
thought i would share this as people keep using on how manipulate the settings.db
I have done some root app development and stumbled across this binary a while ago.
Have fun!
Click to expand...
Click to collapse
thanks, i tried it using
Code:
settings put secure mock_location 1
but the app still goes directly to the home screen...
Code:
V/AudioFlinger( 329): Audio hardware entering standby, mixer 0x40100008, suspend count 0
D/AudioStreamOutALSA( 329): AudioStreamOut: standby()
V/AudioFlinger( 329): releaseWakeLock_l() AudioOut_2
V/AudioFlinger( 329): thread 0x40100008 type 0 TID 712 going to sleep
I/ActivityManager( 691): START u0 {act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] flg=0x10000000 pkg=org.keenteam cmp=org.keenteam/.ServiceExploitActivity} from pid 18589
D/dalvikvm( 691): GC_FOR_ALLOC freed 521K, 23% free 10295K/13204K, paused 40ms, total 40ms
I/ViewRootImpl(18589): Slow KeyEvent in com.amazon.tv.settings/com.amazon.tv.settings.tv.BuellerApplicationDetailSettingsActivity device=10 action=Up latency=1ms processing=61ms
I/ActivityManager( 691): Start proc org.keenteam for activity org.keenteam/.ServiceExploitActivity: pid=19348 uid=10007 gids={50007, 1028}
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnStop:1303 android.app.Activity.performStop:5412 android.app.ActivityThread.performStopActivityInner:3197
W/ContextImpl( 691): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1353 com.amazon.internal.policy.impl.AmazonPhoneWindowManager$SendTopWindowChanged.run:3297 android.os.Handler.handleCallback:725 android.os.Handler.dispatchMessage:92 android.os.Looper.loop:137
E/Trace (19348): error opening trace file: No such file or directory (2)
D/ProfileManager(19348): Create ProfileManager instance
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnStop:1303 android.app.Activity.performStop:5412 android.app.ActivityThread.performStopActivityInner:3197
I/Activity(19348): No ActvityExender defined. Proceed with default activity behavior.
D/dalvikvm(19348): Trying to load lib /data/app-lib/org.keenteam-1/libexploitHelper.so 0x4109cdf0
D/dalvikvm(19348): Added shared lib /data/app-lib/org.keenteam-1/libexploitHelper.so 0x4109cdf0
D/dalvikvm(19348): No JNI_OnLoad found in /data/app-lib/org.keenteam-1/libexploitHelper.so 0x4109cdf0, skipping init
I/System.out(19348): 1 inner classes found
D/AndroidRuntime(19348): Shutting down VM
W/dalvikvm(19348): threadid=1: thread exiting with uncaught exception (group=0x40dc2af8)
E/AndroidRuntime(19348): FATAL EXCEPTION: main
E/AndroidRuntime(19348): java.lang.RuntimeException: Unable to start activity ComponentInfo{org.keenteam/org.keenteam.ServiceExploitActivity}: java.lang.RuntimeException: java.lang.NoSuchFieldException: TRANSACTION_setApplicationRestrictions
E/AndroidRuntime(19348): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2206)
E/AndroidRuntime(19348): at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2258)
E/AndroidRuntime(19348): at android.app.ActivityThread.access$600(ActivityThread.java:146)
E/AndroidRuntime(19348): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1243)
E/AndroidRuntime(19348): at android.os.Handler.dispatchMessage(Handler.java:99)
E/AndroidRuntime(19348): at android.os.Looper.loop(Looper.java:137)
E/AndroidRuntime(19348): at android.app.ActivityThread.main(ActivityThread.java:5129)
E/AndroidRuntime(19348): at java.lang.reflect.Method.invokeNative(Native Method)
E/AndroidRuntime(19348): at java.lang.reflect.Method.invoke(Method.java:511)
E/AndroidRuntime(19348): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:793)
E/AndroidRuntime(19348): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:560)
E/AndroidRuntime(19348): at dalvik.system.NativeStart.main(Native Method)
E/AndroidRuntime(19348): Caused by: java.lang.RuntimeException: java.lang.NoSuchFieldException: TRANSACTION_setApplicationRestrictions
E/AndroidRuntime(19348): at org.keenteam.exploit_CVE_2014_7911.do_exploit(exploit_CVE_2014_7911.java:106)
E/AndroidRuntime(19348): at org.keenteam.ServiceExploitActivity.onCreate(ServiceExploitActivity.java:34)
E/AndroidRuntime(19348): at android.app.Activity.performCreate(Activity.java:5202)
E/AndroidRuntime(19348): at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1088)
E/AndroidRuntime(19348): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2170)
E/AndroidRuntime(19348): ... 11 more
E/AndroidRuntime(19348): Caused by: java.lang.NoSuchFieldException: TRANSACTION_setApplicationRestrictions
E/AndroidRuntime(19348): at java.lang.Class.getDeclaredField(Class.java:631)
E/AndroidRuntime(19348): at org.keenteam.exploit_CVE_2014_7911.do_exploit(exploit_CVE_2014_7911.java:80)
E/AndroidRuntime(19348): ... 15 more
W/ActivityManager( 691): Force finishing activity org.keenteam/.ServiceExploitActivity
D/dalvikvm( 691): GC_FOR_ALLOC freed 1713K, 24% free 10123K/13204K, paused 51ms, total 51ms
I/Process (19348): Sending signal. PID: 19348 SIG: 9
W/ActivityManager( 691): Force finishing activity com.amazon.tv.settings/.tv.BuellerApplicationDetailSettingsActivity
I/ActivityManager( 691): Process org.keenteam (pid 19348) has died.
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnStart:1212 android.app.Activity.performStart:5223 android.app.Activity.performRestart:5291
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnStart:1212 android.app.Activity.performStart:5223 android.app.Activity.performRestart:5291
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnResume:1265 android.app.Activity.performResume:5313 android.app.ActivityThread.performResumeActivity:2761
I/AudioManager(18589): Cleared FLAG_SHOW_UI in setStreamVolume
I/AudioManager(18589): Cleared FLAG_SHOW_UI in setStreamVolume
E/MM_OSAL ( 329): ValidateAACFile failed
D/MediaExtractor( 329): returning default extractor
D/ ( 329): MPQ Mime Type: audio/raw, getMPQObjectsAlive = 0
I/ ( 329): MPQ Audio Enabled - MPQ Audio Player
D/ ( 329): Use tunnel player only for AUDIO_STREAM_MUSIC
D/ ( 329): Set Audio Track as Audio Source
D/ ( 329): MPQ Audio Player
D/ ( 329): MPQ Audio player created for mime audio/raw duration 342083
W/ ( 329): Trying to create tunnel player mIsTunnelAudio 0, LPAPlayer::objectsAlive 0, TunnelPlayer::mTunnelObjectsAlive = 0, (mAudioPlayer == NULL) 0
E/ ( 329): Audio Player set source
W/MPQAudioPlayer( 329): Sw Decoder
E/MM_OSAL ( 329): ValidateAACFile failed
D/MediaExtractor( 329): returning default extractor
D/ ( 329): MPQ Mime Type: audio/raw, getMPQObjectsAlive = 0
I/ ( 329): MPQ Audio Enabled - MPQ Audio Player
D/ ( 329): Use tunnel player only for AUDIO_STREAM_MUSIC
D/ ( 329): Set Audio Track as Audio Source
D/ ( 329): MPQ Audio Player
D/ ( 329): MPQ Audio player created for mime audio/raw duration 54833
W/ ( 329): Trying to create tunnel player mIsTunnelAudio 0, LPAPlayer::objectsAlive 0, TunnelPlayer::mTunnelObjectsAlive = 0, (mAudioPlayer == NULL) 0
E/ ( 329): Audio Player set source
W/MPQAudioPlayer( 329): Sw Decoder
W/ContextImpl( 691): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1353 com.android.server.am.ActivityManagerService.activityResumed:4547 android.app.ActivityManagerNative.onTransact:420 com.android.server.am.ActivityManagerService.onTransact:1716 android.os.Binder.execTransact:351
E/MM_OSAL ( 329): ValidateAACFile failed
D/MediaExtractor( 329): returning default extractor
D/ ( 329): MPQ Mime Type: audio/raw, getMPQObjectsAlive = 0
I/ ( 329): MPQ Audio Enabled - MPQ Audio Player
D/ ( 329): Use tunnel player only for AUDIO_STREAM_MUSIC
D/ ( 329): Set Audio Track as Audio Source
D/ ( 329): MPQ Audio Player
D/ ( 329): MPQ Audio player created for mime audio/raw duration 259854
W/ ( 329): Trying to create tunnel player mIsTunnelAudio 0, LPAPlayer::objectsAlive 0, TunnelPlayer::mTunnelObjectsAlive = 0, (mAudioPlayer == NULL) 0
E/ ( 329): Audio Player set source
W/MPQAudioPlayer( 329): Sw Decoder
W/ContextImpl( 691): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1353 com.amazon.internal.policy.impl.AmazonPhoneWindowManager$SendTopWindowChanged.run:3297 android.os.Handler.handleCallback:725 android.os.Handler.dispatchMessage:92 android.os.Looper.loop:137
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnStop:1303 android.app.Activity.performStop:5412 android.app.ActivityThread.performDestroyActivity:3468
I/abtfilt ( 1775): all HID in sniff mode!
I/abtfilt ( 1775): BT Action
I/abtfilt ( 1775): WMI Cmd: 145 Len: 16

AFTVnews.com said:
That's a great tip, thanks.
Running "settings get secure allow_mock_location" returns "null". I went ahead and ran "settings put secure allow_mock_location 1" and "settings put secure ALLOW_MOCK_LOCATION 1" but it doesn't seem to have done anything. The exploitServiceApp APK still gives the same message. I sideloaded some location spoofing app from the Play Store and it complained that mock locations were not enabled.
Click to expand...
Click to collapse
The constant value is just "mock_location", you can see it if you click the constant name in the android docs.
So try "settings put secure mock_location 1"
If you try to get the value first and it doesn't return null it means your parameter name is right. I recommend not to insert values in the table that are not there before.

On another note,
https://access.redhat.com/articles/1332213
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235
Wonder if that glibc bug could be used to gain root on certain Android devices.

freezer2k said:
On another note,
https://access.redhat.com/articles/1332213
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235
Wonder if that glibc bug could be used to gain root on certain Android devices.
Click to expand...
Click to collapse
Android doesn't use glibc.

freezer2k said:
On another note,
https://access.redhat.com/articles/1332213
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235
Wonder if that glibc bug could be used to gain root on certain Android devices.
Click to expand...
Click to collapse
Haha, had a follow-up meeting about that same vulnerability at work today!

This was posted today: http://forum.xda-developers.com/showpost.php?p=58510300&postcount=641

Android Auto API_UNAVAILABLE

Hi,
on latest nightly LineageOS 15.1 Android Auto crashes with "Google Play Services not working" on startup.
Log:
Code:
11-14 13:02:26.748 1107 2869 I ActivityManager: START u0 {act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] flg=0x10200000 cmp=com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity bnds=[440,288][640,561]} from uid 10033
11-14 13:02:26.868 1107 1183 I ActivityManager: Displayed com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity: +90ms
11-14 13:02:27.083 8728 8728 I GH.LifetimeManager: connectToCarService
11-14 13:02:27.084 8728 8728 E GH.LifetimeManager: CarService onConnectionFailed (API_UNAVAILABLE: null)
11-14 13:02:27.125 1107 5646 W ActivityManager: Unable to start service Intent { act=com.google.android.gms.car.service.START pkg=com.google.android.gms } U=0: not found
11-14 13:02:27.129 8728 8979 E GmsClient: unable to connect to service: com.google.android.gms.car.service.START on com.google.android.gms
11-14 13:02:27.130 604 604 D SurfaceFlinger: duplicate layer name: changing com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity to com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity#1
11-14 13:02:27.145 8728 8728 W GH.CarApiClientManager: connection failed: ConnectionResult{statusCode=API_UNAVAILABLE, resolution=null, message=null}
11-14 13:02:27.145 8728 8728 E GH.LifetimeManager: CarService onConnectionFailed (API_UNAVAILABLE: null)
11-14 13:02:27.183 604 604 D SurfaceFlinger: duplicate layer name: changing com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity to com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity#2
API_UNAVAILABLE sounds like I missed something to install? I'm using Open GApps Mini. Android auto menu item is also missing in settings - google - services menu.
Same setup on other devices for example HTC M8s works without problem.
Anyone seen this issue before and may help?
Edit:
Got it somehow working for now. I was in settings - google - show debug items (in top menu) - google play services modules (at the bottom) - car / car_setup. There I did check for updates nothing happened went back to GCM Diagnostics pressed disconnect, then connect, and ping nothing really happened again. Then I went back did hide debug items now Android auto menu was present and I was able to startup Android Auto without the error.
Log seems fine now:
Code:
11-17 23:26:19.848 1107 2924 I ActivityManager: START u0 {act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] flg=0x10200000 cmp=com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity bnds=[241,612][440,885]} from uid 10033
11-17 23:26:19.970 1107 1183 I ActivityManager: Displayed com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity: +77ms
11-17 23:26:20.187 15152 15152 I GH.LifetimeManager: connectToCarService
11-17 23:26:20.188 15152 15152 D GH.CarApiClientManager: registered listener [email protected]
11-17 23:26:20.188 15152 15152 D GH.CarApiClientManager: start
11-17 23:26:20.195 15152 15178 D CAR.CLIENT: connect [email protected]
11-17 23:26:20.212 14973 14987 D CAR.SERVICE: Package validated: com.google.android.projection.gearhead
11-17 23:26:20.215 14973 14987 D CAR.SERVICE: Android Auto has car home but both aliases are disabled. Nothing to do
11-17 23:26:20.235 15152 15152 D CAR.CLIENT: onICarAvailable [email protected]
11-17 23:26:20.236 14973 14987 D CAR.SERVICE: Registering [email protected]
11-17 23:26:20.236 15152 15152 I GH.CarApiClientManager: connected
11-17 23:26:20.236 15152 15152 D GH.CarApiClientManager: calling onConnected on [email protected]
11-17 23:26:20.247 11394 11394 D GH.CarApiClientManager: registered listener [email protected]
11-17 23:26:20.248 11394 11394 D GH.CarApiClientManager: start
Still I do not know what was causing the issue. I was always able to use Android Auto until it was broken for no reason. Maybe some strange issue while disconnecting from the car caused the car play service to crash. Nevertheless, reboot alone did not fix it. I'll report back if it breaks again in the future and maybe dump logs directly after the incident.