Develop Bugs

Please Help - Bricked after MM Android 6 upgrade attempt

Folks
Really need some help before I totally give up on my "baby" Nexus 7
- Nexus 7 2013 Wifi only
- (was running) CM12.1 Official Nightlies
Firstly
I tried to upgrade the system image using the Android 6 system image for "RazorG" as suggested
- Downloaded, started "flash-all.bat"
- erase userdata went on forever - I cant remember f I cancelled it or it timed out as I left it overnight
Bootloader (fastboot) was the only screen I could get to - there is no recovery and no system software
Fastboot commands (such as fastboot erase userdata) either takes forever or it errors "command write failed"
Secondly
Read everything similar to this problem all over the net and got loads of great ideas
- check USB ports and ADB versions (changed, checked, different computers etc etc)
- upgrade by hand i.e. individual commands rather than "flash-all", tried it but fastboot wont write
- Wugfresh NRT for "flash stock" - again errors on fastboot commands
- toggle the bootloader lock using "fastboot oem lock" (this worked) and "fastboot oem unlock" (this failed cos fastboot cant write to flash)
So now I have my N7, bootloader locked, fastboot wont write any commands or erase anything, Wug NRT doesnt do anything
Really need some experienced expert help here fellas - any ideas ?
Please let me know

The problem that started this is probably the fact that you used razorg factory image, which is the lte model while the WiFi model is razor.
As for fixing it i don't really know. As far as I know (which isn't that much), there isn't much you can do when your bootloader is locked.

Jtag service may help you but you can DIY
Order a motherboard on ebay. Cost is anywhere from 25 - 35 bucks.
Do it in 30 minutes. IFixit has a good guide.

[Solved] Several (related) problems flashing anything but stock

I have a C6506 that is unlocked, have checked via the service code. Not just unlockable but unlocked. Certain.
I've used both older flashtool64 that worked before (0.9.11.0) on a Surface Pro (windows 10) and newer (0.9.19.10) on a desktop (Windows 10 also).
In both cases I can flash 10.7.a.0.222 for C6506. I also can flash 10.3.a.0.423 on the Surface (did not try on others). It boots, it works, no issues.
I can get in fastboot mode on the phone (blue light), but on the surface with the older Flashtools (and associated drivers) I cannot access the phone at all, just waiting for device.
On the newer flash tools with drivers installed (turned off signing verification) I can get into fastboot and do things like a "getvar version", but I cannot do more complex things like get the unlock status, nor can I flash a boot image (in this case from CM 12.1). It says "Command not allowed" in the write phase. Yes, the phone is unlocked, really, at least it says it is, and I did do an unlock code with legitimate Sony provided codes. And previously rooted using it as unlocked.
I've also tried getting root with a pre-rooted 10.7.a.0.222 -- I can get an older version rooted, put recovery on it, I can do the install of the zip and it completes -- then boot loop. This is using Beta-SuperSU-V2.52.zip and zl-lockeddualrecovery2.8.23-release.combined.zip with PRFCreator. (The recovery is also what I used to do the install). Boot loop. Can't get out of it without a new flash despite power off, resets, etc. Can't get back into recovery either at that point.
I do have the phone working with a non-rooted stock Sony 10.7.A.0.222. As mentioned, flashes fine. I just can't seem to get CM running (can't fastboot the boot image), nor can I get root on the stock sony (boot loop).
I've also tried the fastboot program on the current SDK as well as the one in Flashtools without any difference, still can't flash a boot.img from cm12.1.
I feel like I'm missing something fundamental, like maybe some aspect of running Windows 10 that is interfering (I have no older version currently). I'd suspect CM12.1 but it also is failing with the typical root technique for 5.1.1 stock (i.e. root older version first).
While I am not an active developer, this is not my first round of flashing or updating the phone, though it is my first round in a year or more, certainly since Windows 10.
I realize this is a lot like "nothing is working what could be wrong" and not a very specific question, but wondering if anyone has any suggestions as to whether there might be a common cause here.

I do have one more interesting piece of information that I do not understand.
I downloaded Emma and tried to use it to flash stock just to make sure the image I had was good for stock.
Emma says "this phone is locked". So thinking my last flash re-locked it, I went into flash tools and did this:
U:\AndroidSDK\platform-tools>fastboot oem unlock 0xkey-from-sony
...
OKAY [ 2.969s]
finished. total time: 2.969s
After doing so, Emma STILL says it is locked.
Flash tool however allows me to flash it.
Any clue why Emma would say "locked" when I just finished unlocking it?
In service, configuration it says "Yes" to unlocked, not "no/yes" or any other combination, just "yes".

focus on getting the sdk tools to work, like fastboot. What do you mean it just does not flash( show console output of your fastboot flash boot boot.img), Is fastboot not recognized in the device manager, It is odd you can use it to 'oem unlock'... I had to change driver files when I switched from windows 7 to windows 10. if you can 'fastboot devices' and 'adb devices' you should be good to go as far as flashing, maybe you have bad images not made for the phone? I am no pro take my information with a grain of salt.

ham5 said:
focus on getting the sdk tools to work, like fastboot. What do you mean it just does not flash( show console output of your fastboot flash boot boot.img), Is fastboot not recognized in the device manager, It is odd you can use it to 'oem unlock'... I had to change driver files when I switched from windows 7 to windows 10. if you can 'fastboot devices' and 'adb devices' you should be good to go as far as flashing, maybe you have bad images not made for the phone? I am no pro take my information with a grain of salt.
Click to expand...
Click to collapse
I will try again tomorrow (need the phone tonight and it takes a while to get stock back up and configured).
Concentrating on fastbook and on my more-working desktop (the tablet definitely has some issue, I think driver related).
I installed the newest Flashtools, and also installed the fastboot and s1 drivers from it (I think that's what they are called). I configured Windows to permit them unsigned and they installed without error.
When I try to do CM12.1, what I did was download their distribution zip, and unzip it and pull out the boot.img file. I then put the phone in fastboot mode, and it worked and was recognized (e.g. "fastboot getvar version" responds).
Going by the instructions for CM12.1, I then tried to do "fastboot flash boot c:\pathwhereitwas\boot.img"
This does a send of the file, which works, and then does a write and says "command not allowed". So it appears to transmit the file but can't commit it to flash. I cannot post the log as didn't save it but if you think relevant can post tomorrow.
As to the locked issue -- after trying this the first time, I thought "maybe the phone has been locked again". So I did the #*#*service*#*# and see it says "yes" for unlocked. But just to be safe, I dug out my 2 year old email from Sony and did another unlock. As to why I did it with the "oem unlock" that's how CM12.1 suggests (https://wiki.cyanogenmod.org/w/Install_CM_for_odin). The first time I typed it, it failed, the second time it said "OK". Tried the flash boot again, same "command not allowed error".
The phone goes into fastboot mode easily (blue light, plus response to things like getvar). It goes into flash mode fine also, and indeed, after I gave up (each of several times) I flashed stock back on the phone and it came up with 5.1.1 stock.
I wanted to run CM12.1 as I really don't like that stock has not patched stagefright, plus I hate not having root.
Any suggestions what I may be doing wrong, that fastboot commands sometimes work, but I can't flash the boot file?
Am I flashing the RIGHT boot file? Should I be flashing the CM12.1 recovery image they have on their download page instead? (But the instructions are pretty clear).
I should note that the phone does not appear to have a recovery on it -- booting after flashing stock, and toggling all the volume buttons in any combination is just ignored.

I think your really digging way to deep into this...
The phone goes into fastboot mode easily (blue light, plus response to things like getvar). It goes into flash mode fine also, and indeed, after I gave up (each of several times) I flashed stock back on the phone and it came up with 5.1.1 stock.
Click to expand...
Click to collapse
what is the difference between fastboot and flash mode? Ive never heard of this flash mode....
This does a send of the file, which works, and then does a write and says "command not allowed". So it appears to transmit the file but can't commit it to flash. I cannot post the log as didn't save it but if you think relevant can post tomorrow.
Click to expand...
Click to collapse
I don't believe it sends a file at all, it is flashed/written to the boot partition right away.. or is supposed to - I would consider this your chief complaint... "command not allowed" when trying to fastboot flash a boot.img -- I get a lot of hits googling that.. driver problems/bootloader locked

ham5 said:
I think your really digging way to deep into this...
Click to expand...
Click to collapse
I'd welcome a shorter, simpler path.
ham5 said:
what is the difference between fastboot and flash mode? Ive never heard of this flash mode....
Click to expand...
Click to collapse
Perhaps it is purely a sony thing. If, with the phone powered off, you plug it in holding the volume up button you end up in fastboot mode; if you plug it in with the volume down you end up in flash mode.
Flashmode is used by Emma and by Flashtools. Fastboot is used by the Fastboot utility. I'm unclear what happens under the cover, but they are not interchangeable.
ham5 said:
I don't believe it sends a file at all, it is flashed/written to the boot partition right away.. or is supposed to - I would consider this your chief complaint... "command not allowed" when trying to fastboot flash a boot.img -- I get a lot of hits googling that.. driver problems/bootloader locked
Click to expand...
Click to collapse
As I said, I do not know what happens under the covers, but in fastboot mode when you do the "flash boot" it first says it transmitted a file (shows bytes sent, etc) then it does a "write" command itself and it is that write command that fails.
And therein lies my issue trying to flash the boot image -- the write command fails, and I cannot figure out why.
Drivers: I've tried the latest flashtool, and installed the drivers from there. They do install (with signing verification off), and they do connect and see the phone. Some commands work, but this one does not. Could it be the drivers? Certainly, but I do not know what to try to fix them.
Emma: I hate to keep coming back to this, but I do not understand why Emma says my phone is locked, when it clearly appears not to be. I've both re-unlocked it, confirmed it is unlocked with the service menu. But that it thinks it is locked, and the "write" command failure, makes me wonder if there is an issue either in the phone or windows or drivers that makes it act that way. incidentally I've also tried all this with antivirus/firewalls off with no effect.
Locked: just to confirm, in the service menu it says "Root Status" and "unlockable" as "yes". Not "Yes/no". That means it is currently unlocked, correct?
To your first point, I may be over-complicating it. I would welcome some suggestion of other simpler steps. I've done the same google, and don't see real solutions other than "try better drivers", but most threads seem to point to the flashtools drivers, and I've tried those, as well as installing Emma which (presumably) either used those or loaded its own.

Incidentally if this is more appropriate to the Q&A forum, and a moderator is handy, I would appreciate it moving. I placed it here because this relates mostly to the Flashtools drivers and the process of using fastboot.

I cant say for sure .. CM's dialer does not work with service menu... but you defiantly not worried about root... your looking for the bootloader to be unlocked, not unlockable..

ham5 said:
I cant say for sure .. CM's dialer does not work with service menu... but you defiantly not worried about root... your looking for the bootloader to be unlocked, not unlockable..
Click to expand...
Click to collapse
I've never gotten to CM on this phone so that's moot. I'm doing the service menu from the stock phone. And so far as I can tell the bootloader is unlocked.
I went back to a much older version of Flashtools (0.9.11) that dates from about the time I got the phone, but those drivers do not seem to install on Windows 10 at all.
But I'm not clear whether it is a driver problem, since some fastboot commands work fine.

Just read using emma with lollipop can screw your phone up... in fastboot mode can you 'fastboot getvar version' ?
here is the CM wiki - https://wiki.cyanogenmod.org/w/Install_CM_for_odin - good luck I don't think I can be of any help.

ham5 said:
Just read using emma with lollipop can screw your phone up... in fastboot mode can you 'fastboot getvar version' ?
here is the CM wiki - https://wiki.cyanogenmod.org/w/Install_CM_for_odin - good luck I don't think I can be of any help.
Click to expand...
Click to collapse
Yes, in fastboot mode I can do the getvar version. It says 0.5.
I had read the wiki; as mentioned that is why I was trying to flash boot.img.
As requested here is a fastboot session log:
Code:
U:\AndroidSDK\platform-tools>fastboot getvar version
version: 0.5
finished. total time: 0.002s
U:\AndroidSDK\platform-tools>fastboot flash boot boot.img
sending 'boot' (10668 KB)...
OKAY [ 0.340s]
writing 'boot'...
FAILED (remote: Command not allowed)
finished. total time: 0.340s
U:\AndroidSDK\platform-tools>fastboot flashing get_unlock_ability
...
^C
U:\AndroidSDK\platform-tools>fastboot devices -l
EPxxxxx47K fastboot
U:\AndroidSDK\platform-tools>fastboot devices
EPxxxxx47K fastboot
U:\AndroidSDK\platform-tools>fastboot flash boot boot.img
sending 'boot' (10668 KB)...
OKAY [ 0.340s]
writing 'boot'...
FAILED (remote: Command not allowed)
finished. total time: 0.354s
U:\AndroidSDK\platform-tools>fastboot flash boot boot.img
sending 'boot' (10668 KB)...
OKAY [ 0.340s]
writing 'boot'...
FAILED (remote: Command not allowed)
finished. total time: 0.353s
As you can see some commands work, some do not. Not sure the get_unlock_ability is even supposed to work as it looks like a late comer to fastboot and the phone is old.
Most articles I find posted about "command not allowed" do not seem to get as far as being able to use fastboot at all, but even if it is a driver issue, not sure what I can do about it, these are the latest drivers.

Ok, I've managed to get this to work. I can tell you what I did, but not why, but in case it helped someone else.
The bootloader showed unlocked, but I ran the flashtool option to unlock it again, then WITHOUT REBOOTING I did the fastboot option to flash the boot.img.
It appears that if you reboot (to stock) in between, it does something that at least makes it appear the bootloader is locked (the service menu shows it NOT locked still).
There's another thread here that implies you need to do it multiple times, but I think the issue is not a need to do it more than once, but a need to make sure that (at least a late version stock) does not get a chance to run, as it appears to do something.
I'm now happily on 12.1. Well, sort of happy, I finally noticed it says it doesn't support the 6506 (as opposed to the 6503) so I might not stay long, but at least I worked out what was wrong. Thanks to those who encouraged me to keep looking.

Asus Transformer TF303K bricked ?

Hi,
I appeal for the community help to try to get rid of my tablet "boot-loop" !
Here is the situation today :
My tablet no more boots on Android. It starts on what I believe is the bootloader (see screenshot) but this original bootloader doesn't allow me (through volume +/-) to choose between the usual recovery/boot/reboot choices. I can't do anything except a long press on power to switch off the device. On this "bootloader" screen, I fortunately can send fastboot commands.
What I can do :
- fastboot reboot => ok, the device reboots and comes back to the same screen
- fastboot continue => most of the time (if not always) it does nothing, but some few times (I can't manage when exactely) it continues the boot and goes to the loading screen with ASUS image and loading spinner, but the boot doesn't go further : I let it a full night and the device was still on this screen.
- fastboot flash boot boot.img => ok. The image (from a zip downloaded on ASUS website asus.com/Tablets/ASUS_Transformer_Pad_TF303K/HelpDesk_Download ) is flashed successfully.
- fastboot erase xxx => ok, clean the partition
- fastboot oem unlock => FAILED (remote: Invalid signature, fail to unlock!!)
How I finally get here :
I wanted to root/unlock my device, except I may acted as a newbee ! Finally, today, I don't really know what is the whole set of commands I have sent.
I saw too late that ASUS provide an unlocker tool. The problem was I was under an official but too recent android version to run this tool.
Some information :
A few month ago, I had this issue, and, by insisting I managed to boot normally and fully on android. At this time, I told myself that I will never switch off the device, but, this happened !
So, today I need your help :
Do you know how I can get rid of this bootloop ?
Does the screenshot is really what is called the bootloader ? (even with no volume +/- control ?)
I saw it exists a tool named "ASUS Flash Tool" but it needs "raw" images and not zips like we can download on the ASUS website. Does anybody know what are this raw files made of, and how I could eventually convert a zip to this raw format ?
If anybody have original backups of the TF303k, they may be very helpful for me !
Thanks for any help or advices ! :fingers-crossed:

An ultime little up... :crying:
Edit : Or if anybody have a TF303K, if you can send me a backup of your system partitions, I'll really apreciate it ! :fingers-crossed:

virtcs said:
Hi,
I appeal for the community help to try to get rid of my tablet "boot-loop" !
Here is the situation today :
My tablet no more boots on Android. It starts on what I believe is the bootloader (see screenshot) but this original bootloader doesn't allow me (through volume +/-) to choose between the usual recovery/boot/reboot choices. I can't do anything except a long press on power to switch off the device. On this "bootloader" screen, I fortunately can send fastboot commands.
What I can do :
- fastboot reboot => ok, the device reboots and comes back to the same screen
- fastboot continue => most of the time (if not always) it does nothing, but some few times (I can't manage when exactely) it continues the boot and goes to the loading screen with ASUS image and loading spinner, but the boot doesn't go further : I let it a full night and the device was still on this screen.
- fastboot flash boot boot.img => ok. The image (from a zip downloaded on ASUS website asus.com/Tablets/ASUS_Transformer_Pad_TF303K/HelpDesk_Download ) is flashed successfully.
- fastboot erase xxx => ok, clean the partition
- fastboot oem unlock => FAILED (remote: Invalid signature, fail to unlock!!)
How I finally get here :
I wanted to root/unlock my device, except I may acted as a newbee ! Finally, today, I don't really know what is the whole set of commands I have sent.
I saw too late that ASUS provide an unlocker tool. The problem was I was under an official but too recent android version to run this tool.
Some information :
A few month ago, I had this issue, and, by insisting I managed to boot normally and fully on android. At this time, I told myself that I will never switch off the device, but, this happened !
So, today I need your help :
Do you know how I can get rid of this bootloop ?
Does the screenshot is really what is called the bootloader ? (even with no volume +/- control ?)
I saw it exists a tool named "ASUS Flash Tool" but it needs "raw" images and not zips like we can download on the ASUS website. Does anybody know what are this raw files made of, and how I could eventually convert a zip to this raw format ?
If anybody have original backups of the TF303k, they may be very helpful for me !
Thanks for any help or advices ! :fingers-crossed:
Click to expand...
Click to collapse
Exactly the same here!! Any news? How to fix this 'always boot to fastboot but I can still get into system by using fastboot boot boot.img command'?!
EDIT 1: This ASUS specific fastboot command seems to be a big life saver because it RESETS the Tampered Flag to False: "fastboot oem reset-dev_info"! Hurray!

fastboot oem reset-dev_info
Click to expand...
Click to collapse
Yeah, this did it for me too! Thanks a lot!
How did you get knowledge of this flag?
Je\/er
hackwerk said:
Exactly the same here!! Any news? How to fix this 'always boot to fastboot but I can still get into system by using fastboot boot boot.img command'?!
EDIT 1: This ASUS specific fastboot command seems to be a big life saver because it RESETS the Tampered Flag to False: "fastboot oem reset-dev_info"! Hurray!
Click to expand...
Click to collapse

Jever2000 said:
Yeah, this did it for me too! Thanks a lot!
How did you get knowledge of this flag?
Je\/er
Click to expand...
Click to collapse
If you are thankful, please press Thanks button under my posts
The Tampered Flag is an OEM specific thing, and all fastboot oem commands are specific per brand and type.
As the ASUS TF303K is a clone of the (ASUS) Google Nexus 7 (2013)(Flo), I read ALL stuff on the Nexus 7 (2013) everywhere. You'll see this command a lot.
Unfortunately the Nexus is unlockable (fastboot oem unlock), and ours is NOT in any way.
One of the best posts is this one.
Still hope ANY one can help us unlocking the bootloader, or help us on how to flash another ROM (Nexus 7 2013?) to our device using Qualcomm tools (QPST / QFil / MiFlash etc etc)? :'(

hackwerk said:
EDIT 1: This ASUS specific fastboot command seems to be a big life saver because it RESETS the Tampered Flag to False: "fastboot oem reset-dev_info"! Hurray!
Click to expand...
Click to collapse
It didn't do the job for me
I still get an endless waiting screen when fastbooting boot.img.
Can anybody would accept to dump its partitions ? (system, boot, and recovery) ? This should do the trick and may not require root ! Thanks so much !

X2 Pro: "Your device is corrupt. It can’t be trusted and may not work properly."

X2 Pro: "Your device is corrupt. It can’t be trusted and may not work properly."
Hi everybody,
my Aquaris X2 Pro worked fine with rooted BQ 1.7.3 firmware (Android 8.1 based) - Magisk was installed and worked fine and also the xposed framework.
Today the device was normally working as it suddenly just reboots
After that the usual "unlocked bootloader" screen appears but then it only shows a screen with the message "Your device is corrupt. It can’t be trusted and may not work properly."
I can select "continue" - but that only leads back to the "unlocked bootloader" warning screen --> a boot loop :crying:
Does anybody know how I can bring back my device back to work - without losing all my settings and stuff?
And any idea what happened (so that I can prevent it to do so in future)?

Hmm, I'm not 100% sure, but I think I saw that message / boot process once as I tried to root my X2 Pro.
I had done a
Code:
fastboot flashing unlock / unlock-critical
but no
Code:
fastboot oem unlock
(or the other way round? Definitely only done one of them - I was following instructions from a thread here)
and was trying to boot a magisk patched boot-img via
Code:
fastboot boot magisk_patched.img
So, it looked like the bootloader was "NOT fully" unlocked and it detected booting a "not correctly signed" bootloader.
Perhaps check your unlock status via
Code:
fastboot getvar all
But note - UNLOCKING again will wipe your data ... and can only be done if the setting in developer options is active (I fear that THAT may have changed on your device)
You could also try booting the second slot
Code:
fastboot getvar current-slot
and then
Code:
fastboot set_active a/b
(if current-slot gives a, boot b and vica versa).
Last idea: try flashing ONLY the stock boot.img. If you can do this, this should re-enable you to boot. You will loose root, but may be able to backup (most) of your settings via Helium

Thanks a lot for your help!
Inbetween I had to go the hard way and reflashed the newest BQ factory image v2.0.2 (based on Android 9) to both parts _a and _b - losing all my data...
after that I patched the boot.img for magisk and reflashed that to my _a boot partition (and still have the original boot.img in _b).
It did cost me a bit of my spare time - but it wasn't as hard as I expected...
I was able to restore a lot of my settings with Titanium backup....
merlinwv said:
I had done a
Code:
fastboot flashing unlock / unlock-critical
but no
Code:
fastboot oem unlock
Click to expand...
Click to collapse
That was exactly what I did - the first time I only did a "flashing unlock", no "unlock-critical" - so now I had to do it to flash the complete factory image, and therefore it wiped all my data again
merlinwv said:
I was following instructions from a thread here)
Click to expand...
Click to collapse
I used the BQ batch script to flash it, but did not execute the erase commands.
But that did not help to keep my data as I needed to execute a "unlock-critical"...
merlinwv said:
So, it looked like the bootloader was "NOT fully" unlocked and it detected booting a "not correctly signed" bootloader.
Click to expand...
Click to collapse
Hmm, it worked for several months without problems - don't know why it suddenly complained about it.
merlinwv said:
Perhaps check your unlock status via
Code:
fastboot getvar all
Code:
fastboot getvar current-slot
Click to expand...
Click to collapse
Very interesting commands which I didn't know - I already wondered how I can get that information
merlinwv said:
Last idea: try flashing ONLY the stock boot.img. If you can do this, this should re-enable you to boot. You will loose root, but may be able to backup (most) of your settings via Helium
Click to expand...
Click to collapse
That would be a great idea :good: which I could've tried - but I didn't...; maybe next time - although I hope the problem will never come back

Bodenseematze said:
Thanks a lot for your help!
...
I used the BQ batch script to flash it, but did not execute the erase commands.
But that did not help to keep my data as I needed to execute a "unlock-critical"...
Click to expand...
Click to collapse
You are most welcome
The erase commands are not the ones doing the factory-reset - if you want to keep your data during a "factory-flash" you need to comment/delete the lines which flash the userdata-partition.
But I do not know if you can flash the factory image without unlocked critical (=boot) flashing. I never tried this myself. Some phones allow flashing of correctly signed boot images even when critical is locked, others prevent ALL flashing then.
Of course, for "he who knows what he is doing" there is always the possibility to flash in EDL-mode (turn off, afterwards keep vol+, Vol- and Power pressed - will bring you to a special flash mode that allows flashing even when locked - but via a special serial interface etc. pp.). Google it - this would have helped you regarding "loose of userdata when doing unlock critical". But of course - you need to edit the file because in EDL mode, normally userdata is flashed, too.
Just something to keep in mind for the next time
Hmm, it worked for several months without problems - don't know why it suddenly complained about it.
That would be a great idea :good: which I could've tried - but I didn't...; maybe next time - although I hope the problem will never come back
Click to expand...
Click to collapse
I think that perhaps an update was installed (explanation for the reboot?!) that switched to the other boot-slot and did a more thorough check of the boot-chain. This was the reason to suggest trying the other boot-slot (which would then be the pre-update version, that may still boot - and even have root)

merlinwv said:
Of course, for "he who knows what he is doing" there is always the possibility to flash in EDL-mode
Click to expand...
Click to collapse
Again: very interesting information! :good:
merlinwv said:
I think that perhaps an update was installed (explanation for the reboot?!)
Click to expand...
Click to collapse
I hope that wasn't the reason, because I explicitly switched off all automatic updates. And I did not do a manual update!
merlinwv said:
that switched to the other boot-slot and did a more thorough check of the boot-chain. This was the reason to suggest trying the other boot-slot (which would then be the pre-update version, that may still boot - and even have root)
Click to expand...
Click to collapse
I tried to switch to the other slot and boot it - but that didn't help either and led to the same problem...
What I didn't tried was to only flash the boot.img - will do this next time

Alldocube - T1026 (kPad) Bootloader Unlocking

Surprised that I haven't come across too much regarding this tablet. It's relatively cheap, but has a wonderful screen, with cel data and SD card support. And not a bad resolution. (Not 4K, but ALMOST 2k...) This device seems to be running a SpreadTrun / SPD system under the hood.
Having issues getting it rooted and bootloader unlocked.
First, Rooting via boot.img and Magisk -
I am able to get the boot.img file and have Magisk patch it fine. However, when I go to re-write the boot.img file, fastboot gives me the following:
C:\>fastboot flash boot_a magisk_patched-22100_2U5Ga.img
Warning: skip copying boot_a image avb footer (boot_a partition size: 0, boot_a image size: 67108864).
Sending 'boot_a' (65536 KB) OKAY [ 2.422s]
Writing 'boot_a' FAILED (remote: 'Flashing Lock Flag is locked. Please unlock it first!')
fastboot: error: Command failed
SPD's UpgradeFlash won't let me select JUST to flash the boot file - it forces everything to be flashed, which resets the device. Because of that, when I insert the patched boot.img in, it causes the tablet to bootloop.
Trying to unlock bootloader -
Reading through different methods for SPD devices, I'm running into deadends. With both ADB Debug and OEM Unlock enabled, running the following commands don't work:
C:\>fastboot flashing unlock
FAILED (remote: 'unknown cmd.')
C:\>fastboot oem unlock
FAILED (remote: 'Unlock bootloader fail.')
I thought that perhaps the method of flashing the signature (signature.pim file) was needed. However, following that attempt, the command yields:
C:\>fastboot flashing unlock signature.bin
fastboot: usage: unknown 'flashing' command unlock
(Same error is given for 'unlock_critical' and 'unlock_bootloader'.)
Anyone know of an alternate way to flash JUST the boot.img files to an SPD device?

Quick bump!
One interesting thing I have noticed - every time after I run the second command ('oen unlock'), any command sent AFTER that will hang. As if the tablet's expecting something else.

Any luck? I've also got this tablet, seems like unisoc have different bootloader unlock procedure, read that it needs linux with custom adb tools

I actually unlocked the bootloader on mine several months ago. Details aren't fresh in my mind but I do remember a few things that may help you.
1) You absolutely need the signature file. I got mine by installing an app "spreatrum tools" on the tablet.
2) It only works with a specific version of fastboot.
3) According to my terminal history, the command to unlock could be "fastboot.exe flashing unlock_bootloader signature.bin" or the one posted by OP: "fastboot flashing unlock signature.bin". At least one of these works but I don't remember which since I used them both.
Pretty sure I got both the working version of fastboot (windows version, not linux) and the app here on the forum. Whoever posted those files originally deserves the credits but, again, I don't remember who or where so... Luckily I still have both files on my NAS so I'm attaching them.
Anyway, there, have fun.

So this can also work, nice!

troolie said:
I actually unlocked the bootloader on mine several months ago. Details aren't fresh in my mind but I do remember a few things that may help you.
Anyway, there, have fun.
Click to expand...
Click to collapse
Thanks so much, already unlocked my BL (through modified adb via Linux) but can't proceed to root it, have you rooted yours?

Nope. My plan was to unlock in order to install a custom recovery as I thought there's a good chance the one for iplay40 might work. Turns out I ended up with a brick so I went back to stock.
My immediate concern was to get rid of system apps but adb shell works well enough for that so...
Actually, I'm more interested in running generic GSI if at all possible, considering alldocube is unlikely to ever update the stock rom.

troolie said:
I actually unlocked the bootloader on mine several months ago. Details aren't fresh in my mind but I do remember a few things that may help you.
Click to expand...
Click to collapse
Vvtaewoo12 said:
Any luck? I've also got this tablet, seems like unisoc have different bootloader unlock procedure, read that it needs linux with custom adb tools
Click to expand...
Click to collapse
Sorry for the silence guys, had a death in the family that took me away from playing with this tablet for a while.
Glad you both got it - I actually was able to get in touch with someone AT AlldoCube, and they replied saying that the bootloader IS UNLOCKED in the same fashion that the iPlay40 is. (Which isn't too much of a surprise - the back cover of my kPad actually has the iPlay 40 model number on it. Heh.) I followed the instructions in the iPlay 40 thread exactly (including the one command that's run that the output seems to not be used), and it worked.
Like you both, though, I haven't been able to root - Because of the family issues, I haven't tried in a while, but I remember getting as far as trying to flash a modified Magisk boot.img - at which point, the tablet goes into bootloop. I blieve that we need a signed vbmeta file, though I have no idea yet how to generate/flash that.
I have NOT tried the iPlay40 rooting instructions in one post, and I'm admittedly not even sure that I'm using the Spedtrum flashing applications correctly.

Help me unlock bootloader ipay 40
U have trailer video URL/??

U use Ubuntu linux but do not!!

Taoismixi said:
U use Ubuntu linux but do not!!
Click to expand...
Click to collapse
Wrong thread. This is not about the iPlay 40.