Develop Bugs

ICS reboots due to 4g/WiMax

I've noticed that multiple people, including myself, have had multiple issues with random reboots on various ICS roms. Well it was driving me crazy, so I decided to catch it in the act. Please see this from my logcat:
Code:
04-18 17:04:36.799 E AlarmManagerService: android_server_AlarmManagerService_set to type=2, 115438.634000000
04-18 17:04:36.799 V AlarmManager: trigger WAKEUP Alarm{41c5fcd8 type 2 android}
04-18 17:04:36.809 W dalvikvm: threadid=13: thread exiting with uncaught exception (group=0x40c231f8)
04-18 17:04:36.809 E android.os.Debug: [email protected] > dumpstate -k -t -n -z -d -o /data/log/dumpstate_sys_error
04-18 17:04:36.809 E AndroidRuntime: *** FATAL EXCEPTION IN SYSTEM PROCESS: android.server.ServerThread
04-18 17:04:36.809 E AndroidRuntime: java.lang.NoSuchMethodError: com.android.server.WimaxService.access$1002
04-18 17:04:36.809 E AndroidRuntime: at com.android.server.WimaxService$4.onReceive(WimaxService.java:1150)
04-18 17:04:36.809 E AndroidRuntime: at android.app.LoadedApk$ReceiverDispatcher$Args.run(LoadedApk.java:728)
04-18 17:04:36.809 E AndroidRuntime: at android.os.Handler.handleCallback(Handler.java:605)
04-18 17:04:36.809 E AndroidRuntime: at android.os.Handler.dispatchMessage(Handler.java:92)
04-18 17:04:36.809 E AndroidRuntime: at android.os.Looper.loop(Looper.java:137)
04-18 17:04:36.809 E AndroidRuntime: at com.android.server.ServerThread.run(SystemServer.java:986)
04-18 17:04:36.834 I dumpstate: Check if stand-alone
04-18 17:04:36.859 I dumpstate: begin
I went back through several saved logcats after these reboots, and the signature looks the same. It looks to me as if the WiMax service (WimaxService.java) is calling an invalid method (com.android.server.WimaxService.access$1002), and causing android server to crash with a FATAL exception.
Now, I'm not a programmer, but does anyone have any ideas on how we can investigate the code and see if we can make a workaround? Thoughts anyone? I'll keep at this.

I'm not a program either, but I know Team Nocturnal had this same issue on a couple of their ROMs and Mijjah was working on it. Not sure if he has any logs of it happening.
I do know he's working on an AOKP rom as well, which I'm using, and I haven't had the issue yet.

Maybe post this in the dev thread of the rom you are using. I think we can all benefit from this Im sick of my phone rebooting while using 4g!!

[Q] Google Play

Any luck getting Google Play Store working, now that we have root? I got it to install using ps4ouya, got signed in to the store, but just get "No Connection". That's the farther than I've gotten with other methods (Play Store usually just crashes).

check logs, report back here

Yep same here no connection.

thrashman69 said:
Yep same here no connection.
Click to expand...
Click to collapse
I worked on this yesterday and it looks like its being rejected permission to the internet .. according to logcat.

mastafunk said:
I worked on this yesterday and it looks like its being rejected permission to the internet .. according to logcat.
Click to expand...
Click to collapse
Is this maybe something we could change with XPrivacy?

I/qtaguid (11598): Failed write_ctrl(u 74) res=-1 errno=22
I/qtaguid (11598): Untagging socket 74 failed errno=-22
W/NetworkManagementSocketTagger(11598): untagSocket(74) failed with errno -22
E/DfeApi (11598): [1] DfeRequest.deliverResponse: Null wrapper parsed for request=[[ ] https://android.clients.google.c
om/fdfe/toc?shh=zen2II1nK1Sx2swLcCn16w 0xe8d195d1 NORMAL 98]
D/Finsky (11598): [1] ErrorStrings.get: No specific error message for: com.android.volley.ParseError: java.lang.Runtime
Exception: java.lang.NullPointerException: expected receiver of type com.google.android.finsky.protos.Response$Payload,
but got null

The playstore GUI is bombing for me also. However, I'm able to use the Google Services Framework (for example, Tune In Pro, which I have via the Playstore, and which does a license check on startup, seems to be working.)
I launch Playstore from within XBMC, which is why some of the logcat references here are around XBMC:
I/ActivityManager( 648): START u0 {act=android.intent.action.MAIN cat=[android.
intent.category.LAUNCHER] flg=0x10000000 pkg=com.android.vending cmp=com.android
.vending/.AssetBrowserActivity} from pid 5212
V/threaded_app( 5212): Pause: 0x5aa5df40
V/threaded_app( 5212): activityState=13
V/XBMC ( 5212): virtual void CXBMCApp:nPause():
I/AudioManager( 5212): Cleared FLAG_SHOW_UI in setStreamVolume
V/XBMC ( 5212): CAndroidKey: key up (code: 23; repeat: 0; flags: 0x28; alt: n
o; shift: no; sym: no)
I/Activity( 2338): No ActvityExender defined. Proceed with default activity beha
vior.
V/threaded_app( 5212): WindowFocusChanged: 0x5aa5df40 -- 0
V/XBMC ( 5212): virtual void CXBMCApp:nLostFocus():
W/ContextImpl( 648): Calling a method in the system process without a qualified
user: android.app.ContextImpl.sendBroadcast:1353 com.amazon.internal.policy.imp
l.AmazonPhoneWindowManager$SendTopWindowChanged.run:3294 android.os.Handler.hand
leCallback:725 android.os.Handler.dispatchMessage:92 android.os.Looper.loop:137
V/threaded_app( 5212): NativeWindowDestroyed: 0x5aa5df40 -- 0x56fc2ef0
V/threaded_app( 5212): APP_CMD_TERM_WINDOW
V/XBMC ( 5212): virtual void CXBMCApp:nDestroyWindow():
V/XBMC ( 5212): XBMC_DestroyDisplay()
V/XBMC ( 5212): XBMC_Pause(true)
V/threaded_app( 5212): APP_CMD_TERM_WINDOW
I/qtaguid ( 2338): Failed write_ctrl(u 72) res=-1 errno=22
I/qtaguid ( 2338): Untagging socket 72 failed errno=-22
W/NetworkManagementSocketTagger( 2338): untagSocket(72) failed with errno -22
I/ElegantRequestDirector( 2338): I/O exception (org.apache.http.NoHttpResponseEx
ception) caught when processing request: The target server failed to respond
I/ElegantRequestDirector( 2338): Retrying request
D/libEGL ( 2338): loaded /system/lib/egl/libEGL_adreno200.so
D/libEGL ( 2338): loaded /system/lib/egl/libGLESv1_CM_adreno200.so
D/libEGL ( 2338): loaded /system/lib/egl/libGLESv2_adreno200.so
I/Adreno200-EGL( 2338): <qeglDrvAPI_eglInitialize:265>: EGL 1.4 QUALCOMM build:
PDAVID_AU_LINUX_ANDROID_JB_2.5.4.04.02.02.073.175+PATCH[ES]_msm8960_JB_2.5.4_CL3
406509_release_ENGG (CL3406509)
I/Adreno200-EGL( 2338): Build Date: 01/06/14 Mon
I/Adreno200-EGL( 2338): Local Branch: master
I/Adreno200-EGL( 2338): Remote Branch: quic/jb_2.5.4
I/Adreno200-EGL( 2338): Local Patches: 8eb510a221aaeae58c0ecdd202385ce404871588
PROFILER: Added proper handling of partially filled mipmaps
I/Adreno200-EGL( 2338): 2e6d0a734aa661addd942fe6f373d55a407591a
6 PROFILER: CL3406509: Compressed texture support.
I/Adreno200-EGL( 2338): fdfb486203fdd417c56d12d68e6997ebd0ae872
6 PROFILER: Check fo
D/OpenGLRenderer( 2338): Enabling debug mode 0
I/ActivityManager( 648): Displayed com.android.vending/.AssetBrowserActivity: +
319ms
W/ContextImpl( 648): Calling a method in the system process without a qualified
user: android.app.ContextImpl.sendBroadcast:1353 com.amazon.internal.policy.imp
l.AmazonPhoneWindowManager$SendTopWindowChanged.run:3294 android.os.Handler.hand
leCallback:725 android.os.Handler.dispatchMessage:92 android.os.Looper.loop:137
E/DfeApi ( 2338): [1] DfeRequest.deliverResponse: Null wrapper parsed for reque
st=[[ ] https://android.clients.google.com/fdfe/toc?shh=zen2II1nK1Sx2swLcCn16w 0
xe8d195d1 NORMAL 6]
D/Finsky ( 2338): [1] ErrorStrings.get: No specific error message for: com.andr
oid.volley.ParseError: java.lang.RuntimeException: java.lang.NullPointerExceptio
n: expected receiver of type com.google.android.finsky.protos.Response$Payload,
but got null

Google Drive working?

maybe - Youtube plus signin is working for me.

I don't have the Fire Tv but many Android Tv box. Usually when i have problems with google play in some strange firmwares, is because some files in system/etc/permissions are missing. The files inside system/etc/permissions are all the permissions that an app can request from Android.
I suggest to read the list of this files on your tablet / phone in which google play works and copy the missing files in Fire tv / compare different permissions.
This can solve the problem. I'm not sure but is possible.

GMail - account management
Does everyone else have GMail working?
Have Google Drive access through ES File manager. Is the app needed?
Many play store fixes I've seen involve changes to the hosts file. Could this be the case here?
Is there way to delete account data? Tried 'clear data' in play store and gmail and it's still there. No account management.

I thinks the problem with the playstore is permissions related. Maybe someone knows how to change that so it is granted it may work?
Line 431: Bad package setting: package com.google.android.gsf has shared uid 32054 that is not defined
Line 961: Not granting permission android.permission.ACCESS_CACHE_FILESYSTEM to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 967: Not granting permission android.permission.ACCESS_DOWNLOAD_MANAGER to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 973: Not granting permission android.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 979: Not granting permission android.permission.BACKUP to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 985: Not granting permission android.permission.MASTER_CLEAR to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 991: Not granting permission android.permission.REBOOT to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 997: Not granting permission android.permission.SET_TIME to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 1003: Not granting permission android.permission.STATUS_BAR to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 1009: Not granting permission android.permission.WRITE_GSERVICES to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 1621: Not granting permission android.permission.ACCESS_CACHE_FILESYSTEM to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 1627: Not granting permission android.permission.ACCESS_DOWNLOAD_MANAGER to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 1633: Not granting permission android.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 1639: Not granting permission android.permission.BACKUP to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 1645: Not granting permission android.permission.MASTER_CLEAR to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 1651: Not granting permission android.permission.REBOOT to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 1657: Not granting permission android.permission.SET_TIME to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 1663: Not granting permission android.permission.STATUS_BAR to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 1669: Not granting permission android.permission.WRITE_GSERVICES to package com.google.android.gsf (protectionLevel=18 flags=0x8be44)
Line 3481: Start proc com.android.vending for broadcast com.android.vending/com.google.android.finsky.receivers.BootCompletedReceiver: pid=2099 uid=32055 gids={72055, 3003, 1015, 1028, 9001}
Line 3487: Start proc com.google.process.gapps for content provider com.google.android.gsf/.gservices.GservicesProvider: pid=2114 uid=32054 gids={72054, 3003, 1007, 1028, 9001}
Line 3487: Start proc com.google.process.gapps for content provider com.google.android.gsf/.gservices.GservicesProvider: pid=2114 uid=32054 gids={72054, 3003, 1007, 1028, 9001}
Line 3883: Scheduling restart of crashed service com.android.vending/com.google.android.finsky.services.DailyHygiene in 5000ms
Line 5035: START u0 {cmp=com.google.android.gsf/.loginservice.LoginActivity (has extras)} from pid 5989
Line 5041: START u0 {cmp=com.google.android.gsf/.loginservice.RunSetupWizardActivity (has extras)} from pid 2114
Line 5047: START u0 {flg=0x80000 cmp=com.google.android.gsf/.login.AccountIntroActivity (has extras)} from pid 2114
Line 5059: START u0 {cmp=com.google.android.gsf/.login.ChooseAccountActivity (has extras)} from pid 2114
Line 5083: START u0 {cmp=com.google.android.gsf/.login.LoginActivity (has extras)} from pid 2114
Line 5107: START u0 {cmp=com.google.android.gsf/.login.LoginActivityTask (has extras)} from pid 2114
Line 5119: START u0 {cmp=com.google.android.gsf/.login.ShowErrorActivity (has extras)} from pid 2114
Line 5197: netstack: STAT_HUB - App com.google.process.gapps isn't supported
Line 5305: Duplicate finish request for ActivityRecord{42596260 u0 com.google.android.gsf/.loginservice.RunSetupWizardActivity}
Line 5551: START u0 {flg=0x50000000 cmp=com.android.vending/com.google.android.vending.verifier.ConsentDialog (has extras)} from pid 5989
Line 5941: Not granting permission android.permission.ACCESS_CACHE_FILESYSTEM to package com.google.android.gsf (protectionLevel=18 flags=0x88be44)
Line 5947: Not granting permission android.permission.ACCESS_DOWNLOAD_MANAGER to package com.google.android.gsf (protectionLevel=18 flags=0x88be44)
Line 5953: Not granting permission android.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED to package com.google.android.gsf (protectionLevel=18 flags=0x88be44)
Line 5959: Not granting permission android.permission.BACKUP to package com.google.android.gsf (protectionLevel=18 flags=0x88be44)
Line 5965: Not granting permission android.permission.MASTER_CLEAR to package com.google.android.gsf (protectionLevel=18 flags=0x88be44)
Line 5971: Not granting permission android.permission.REBOOT to package com.google.android.gsf (protectionLevel=18 flags=0x88be44)
Line 5977: Not granting permission android.permission.SET_TIME to package com.google.android.gsf (protectionLevel=18 flags=0x88be44)
Line 5983: Not granting permission android.permission.STATUS_BAR to package com.google.android.gsf (protectionLevel=18 flags=0x88be44)
Line 5989: Not granting permission android.permission.WRITE_GSERVICES to package com.google.android.gsf (protectionLevel=18 flags=0x88be44)
Line 8627: [JavaScript Error: "no element found" {file: "https://checkout.google.com/inapp/frontend/app/log" line: 1}]
Line 16615: START u0 {cmp=com.google.android.gsf/.loginservice.LoginActivity (has extras)} from pid 5989
Line 16641: START u0 {cmp=com.google.android.gsf/.loginservice.RunSetupWizardActivity (has extras)} from pid 2114
Line 16647: Displayed com.google.android.gsf/.loginservice.LoginActivity: +89ms (total +216ms)
Line 16653: START u0 {flg=0x80000 cmp=com.google.android.gsf/.login.AccountIntroActivity (has extras)} from pid 2114
Line 16709: Displayed com.google.android.gsf/.login.AccountIntroActivity: +170ms
Line 16811: START u0 {cmp=com.google.android.gsf/.login.ChooseAccountActivity (has extras)} from pid 2114
Line 16847: Displayed com.google.android.gsf/.login.ChooseAccountActivity: +102ms
Line 16961: START u0 {cmp=com.google.android.gsf/.login.LoginActivity (has extras)} from pid 2114
Line 16997: Displayed com.google.android.gsf/.login.LoginActivity: +143ms
Line 17049: Activity idle timeout for ActivityRecord{4267f948 u0 com.google.android.gsf/.loginservice.LoginActivity}
Line 17055: Activity idle timeout for ActivityRecord{42506800 u0 com.google.android.gsf/.loginservice.RunSetupWizardActivity}
Line 22897: START u0 {cmp=com.google.android.gsf/.login.LoginActivityTask (has extras)} from pid 2114
Line 22951: Displayed com.google.android.gsf/.login.LoginActivityTask: +154ms
Line 23117: START u0 {cmp=com.google.android.gsf/.login.ShowErrorActivity (has extras)} from pid 2114
Line 23129: Displayed com.google.android.gsf/.login.ShowErrorActivity: +98ms
Line 25603: START u0 {cmp=com.google.android.gsf/.login.LoginActivityTask (has extras)} from pid 2114
Line 25651: Displayed com.google.android.gsf/.login.LoginActivityTask: +111ms

zulu99 said:
I don't have the Fire Tv but many Android Tv box. Usually when i have problems with google play in some strange firmwares, is because some files in system/etc/permissions are missing. The files inside system/etc/permissions are all the permissions that an app can request from Android.
I suggest to read the list of this files on your tablet / phone in which google play works and copy the missing files in Fire tv / compare different permissions.
This can solve the problem. I'm not sure but is possible.
Click to expand...
Click to collapse
@zulu99 aka Strauzo LMAO! Funny to see you still around after that epic fail over at freaktab. Im curious to know what type of adverse could possibly be caused by adding permissions related files that do not work properly? Possible boot loop? IDK but sounds risky

Is there an alternative for AppOpps for older Android versions?
It is restricted to 4.3 normally.

alwaysbless said:
@zulu99Im curious to know what type of adverse could possibly be caused by adding permissions related files that do not work properly? Possible boot loop? IDK but sounds risky
Click to expand...
Click to collapse
no boot loop, but the permissions to works should be present also in the framework part. Usually dev that strip down android add new permissions but not delete the original. if so the permissions in general can works otherwise no. but the google play problem can be also very different. We should remember that the greatest interest for amazon is run its own market and destroy at all costs the google play store.
However, with the google play services running even paid apps should work.

play store working here following these instructions.
http://forum.xda-developers.com/showthread.php?t=2787813

nhumber said:
play store working here following these instructions.
http://forum.xda-developers.com/showthread.php?t=2787813
Click to expand...
Click to collapse
For real? Have you tested it?

working google play store
hello
it is really working I tried it
I have to do it twice but every thing is working perfect

Here is my step-by-step guide with screenshots for installing the Google Play Store: http://www.aftvnews.com/how-to-install-the-google-play-store-on-the-amazon-fire-tv/

Play store loads,looks good, I click install for an app and nothing happens or downloads

New root method?

Some folks are trying to find an exploit for another Android device. I tried to apply it to the Fire TV stick, but the exploitServiceApp.apk won't install.
http://forum.xda-developers.com/not...t-progress-t2961974/post58464146#post58464146

Sizzlechest said:
Some folks are trying to find an exploit for another Android device. I tried to apply it to the Fire TV stick, but the exploitServiceApp.apk won't install.
http://forum.xda-developers.com/not...t-progress-t2961974/post58464146#post58464146
Click to expand...
Click to collapse
exploitServiceApp.apk was built with a minimum sdk version of 18. The Fire TV and Fire TV Stick run sdk version 17. That's why it wont install. It also seems to require mock locations to be enabled, which may prove to be a chore on the AFTV/S. Of Course this all assumes the AFTV/S is vulnerable to begin with.
Root sources seem to be:
http://forum.xda-developers.com/mate-7/general/wip-mate-7-root-bl-unlock-t2995086/
and
http://forum.xda-developers.com/crossdevice-dev/sony/giefroot-rooting-tool-cve-2014-4322-t3011598

What would happen, if you would try to rebuild it with APK Tool and change the min sdk to 17?
I just did it with the Advanced APK Tool and attatched it to this posting. I'm not at home right now so I can't test it on my own.
APK-Info.exe says its a valid apk and the minimum sdk version is 17.
Important note: I'm not responsible for damaging your device if this somehow does.

It depends on the exploit, I read on another topic that it's based on a specific location in memory (or something like that).
That's presuming that it's even possible.
In regards to mock locations, is it possible to set it using the aosp settings apk?

It does install, but it goes straight to home after loading. Maybe it does work if it's possible to enable mock locations.

tech3475 said:
In regards to mock locations, is it possible to set it using the aosp settings apk?
Click to expand...
Click to collapse
Trying to access developer options (which is where the mock location setting is) causes settings.apk to crash.
bigwillie1 said:
It does install, but it goes straight to home after loading. Maybe it does work if it's possible to enable mock locations.
Click to expand...
Click to collapse
Odd, on a Fire TV Stick (running latest OS version) @androidyeah's app launches fine. However, it just displays the message "Note: Your device seems not vulnerable!" in the upper right corner.

AFTVnews.com said:
Trying to access developer options (which is where the mock location setting is) causes settings.apk to crash.
Click to expand...
Click to collapse
Anyone tried any debugging yet on that part?
AFTVnews.com said:
Odd, on a Fire TV Stick (running latest OS version) @androidyeah's app launches fine. However, it just displays the message "Note: Your device seems not vulnerable!" in the upper right corner.
Click to expand...
Click to collapse
I guess if FTV Stick + FTV using similar base firmwares, it is already patched or something :/

androidyeah said:
Anyone tried any debugging yet on that part?
Click to expand...
Click to collapse
Code:
V/AudioFlinger( 329): Audio hardware entering standby, mixer 0x40100008, suspend count 0
D/AudioStreamOutALSA( 329): AudioStreamOut: standby()
V/AudioFlinger( 329): releaseWakeLock_l() AudioOut_2
V/AudioFlinger( 329): thread 0x40100008 type 0 TID 712 going to sleep
V/AudioFlinger( 329): createTrack() sessionId: 0
V/AudioFlinger( 329): createTrack() lSessionId: 99
V/AudioFlinger( 329): AUDIO_OUTPUT_FLAG_FAST denied: isTimed=0 sharedBuffer=0x0 frameCount=3763 mFrameCount=256 format=1 isLinear=1 channelMask=0x1 sampleRate=44100 mSampleRate=48000 hasFastMixer=1 tid=7528 fastTrackAvailMask=0xfe
V/AudioFlinger( 329): Track constructor name 4100, calling pid 691
V/AudioFlinger( 329): acquiring 99 from 691
V/AudioFlinger( 329): added new entry for 99
V/AudioFlinger( 329): start(4100), calling pid 691 session 99
V/AudioFlinger( 329): ? => ACTIVE (4100) on thread 0x40f9a808
V/AudioFlinger( 329): mWaitWorkCV.broadcast
V/AudioFlinger( 329): thread 0x40100008 type 0 TID 712 waking up
V/AudioFlinger( 329): acquireWakeLock_l() AudioOut_2 status 0
V/AudioFlinger( 329): releasing 98 from 691
V/AudioFlinger( 329): decremented refcount to 0
V/AudioFlinger( 329): purging stale effects
V/AudioFlinger( 329): remove track (4098) and delete from mixer
V/AudioFlinger( 329): PlaybackThread::Track destructor
I/ActivityManager( 691): START u0 {act=android.intent.action.MAIN cmp=com.android.settings/.SubSettings (has extras)} from pid 7424
D/dalvikvm( 691): GC_FOR_ALLOC freed 957K, 30% free 8019K/11344K, paused 37ms, total 39ms
I/ViewRootImpl( 7424): Slow KeyEvent in com.android.settings/com.android.settings.Settings device=8 action=Up latency=3ms processing=54ms
I/Activity( 7424): No ActvityExender defined. Proceed with default activity behavior.
D/AndroidRuntime( 7424): Shutting down VM
W/dalvikvm( 7424): threadid=1: thread exiting with uncaught exception (group=0x40dc2af8)
V/AudioFlinger( 329): getNextBuffer() no more data for track 4100 on thread 0x40100008
V/AudioFlinger( 329): stop(4100), calling pid 691
V/AudioFlinger( 329): not stopping/stopped => stopping/stopped (4100) on thread 0x40100008
E/AndroidRuntime( 7424): FATAL EXCEPTION: main
E/AndroidRuntime( 7424): java.lang.RuntimeException: Unable to start activity ComponentInfo{com.android.settings/com.android.settings.SubSettings}: java.lang.SecurityException: Only package verification agents can read the verifier device identity: Neither user 10001 nor current process has android.permission.PACKAGE_VERIFICATION_AGENT.
E/AndroidRuntime( 7424): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2206)
E/AndroidRuntime( 7424): at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2258)
E/AndroidRuntime( 7424): at android.app.ActivityThread.access$600(ActivityThread.java:146)
E/AndroidRuntime( 7424): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1243)
E/AndroidRuntime( 7424): at android.os.Handler.dispatchMessage(Handler.java:99)
E/AndroidRuntime( 7424): at android.os.Looper.loop(Looper.java:137)
E/AndroidRuntime( 7424): at android.app.ActivityThread.main(ActivityThread.java:5129)
E/AndroidRuntime( 7424): at java.lang.reflect.Method.invokeNative(Native Method)
E/AndroidRuntime( 7424): at java.lang.reflect.Method.invoke(Method.java:511)
E/AndroidRuntime( 7424): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:793)
E/AndroidRuntime( 7424): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:560)
E/AndroidRuntime( 7424): at dalvik.system.NativeStart.main(Native Method)
E/AndroidRuntime( 7424): Caused by: java.lang.SecurityException: Only package verification agents can read the verifier device identity: Neither user 10001 nor current process has android.permission.PACKAGE_VERIFICATION_AGENT.
E/AndroidRuntime( 7424): at android.os.Parcel.readException(Parcel.java:1426)
E/AndroidRuntime( 7424): at android.os.Parcel.readException(Parcel.java:1380)
E/AndroidRuntime( 7424): at android.content.pm.IPackageManager$Stub$Proxy.getVerifierDeviceIdentity(IPackageManager.java:3381)
E/AndroidRuntime( 7424): at android.app.ApplicationPackageManager.getVerifierDeviceIdentity(ApplicationPackageManager.java:1295)
E/AndroidRuntime( 7424): at com.android.settings.DevelopmentSettings.onCreate(DevelopmentSettings.java:143)
E/AndroidRuntime( 7424): at android.app.Fragment.performCreate(Fragment.java:1673)
E/AndroidRuntime( 7424): at android.app.FragmentManagerImpl.moveToState(FragmentManager.java:854)
E/AndroidRuntime( 7424): at android.app.FragmentManagerImpl.moveToState(FragmentManager.java:1057)
E/AndroidRuntime( 7424): at android.app.BackStackRecord.run(BackStackRecord.java:682)
E/AndroidRuntime( 7424): at android.app.FragmentManagerImpl.execPendingActions(FragmentManager.java:1435)
E/AndroidRuntime( 7424): at android.app.Activity.performStart(Activity.java:5220)
E/AndroidRuntime( 7424): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2179)
E/AndroidRuntime( 7424): ... 11 more
V/AudioFlinger( 329): presentationComplete() reset: mPresentationCompleteFrames 8192 audioHalFrames 3072
W/ActivityManager( 691): Force finishing activity com.android.settings/.SubSettings
I/Process ( 7424): Sending signal. PID: 7424 SIG: 9
W/ActivityManager( 691): Force finishing activity com.android.settings/.Settings
I/ActivityManager( 691): Process com.android.settings (pid 7424) has died.
I/WindowState( 691): WIN DEATH: Window{414bef98 u0 com.android.settings/com.android.settings.Settings}
D/FIRED-TV( 2488): Settings Loaded from /data/data/com.altusapps.firedtvlauncher/files/settings2.json
V/AudioFlinger( 329): presentationComplete() session 99 complete: framesWritten 8192
V/AudioFlinger( 329): TrackBase::reset
W/ContextImpl( 691): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1353 com.android.server.am.ActivityManagerService.activityResumed:4547 android.app.ActivityManagerNative.onTransact:420 com.android.server.am.ActivityManagerService.onTransact:1716 android.os.Binder.execTransact:351
W/InputMethodManagerService( 691): Got RemoteException sending setActive(false) notification to pid 7424 uid 10001
W/ContextImpl( 691): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1353 com.amazon.internal.policy.impl.AmazonPhoneWindowManager$SendTopWindowChanged.run:3297 android.os.Handler.handleCallback:725 android.os.Handler.dispatchMessage:92 android.os.Looper.loop:137
D/Bluetooth HS/HF( 1355): HandleMessage9
D/Bluetooth HS/HF( 1355): Battery State Changed, send update100Scale: 100
D/FIRED-TV( 2488): Settings Saved to /data/data/com.altusapps.firedtvlauncher/files/settings2.json
V/AudioFlinger( 329): Audio hardware entering standby, mixer 0x40100008, suspend count 0
D/AudioStreamOutALSA( 329): AudioStreamOut: standby()
V/AudioFlinger( 329): releaseWakeLock_l() AudioOut_2
V/AudioFlinger( 329): thread 0x40100008 type 0 TID 712 going to sleep
I/ThermalDaemon( 336): Sensor[tmp105_2_pwrs] Temperature : 35.0
I/TemperatureSensorObserver( 691): read new temperature 35500
I/abtfilt ( 1775): all HID in sniff mode!
I/abtfilt ( 1775): BT Action
I/abtfilt ( 1775): WMI Cmd: 145 Len: 16
maybe someone finds this useful...

AFTVnews.com said:
Trying to access developer options (which is where the mock location setting is) causes settings.apk to crash.
Odd, on a Fire TV Stick (running latest OS version) @androidyeah's app launches fine. However, it just displays the message "Note: Your device seems not vulnerable!" in the upper right corner.
Click to expand...
Click to collapse
If you want to enable mock locations or change any other settings this is the way to go (does not require root):
http://forum.xda-developers.com/fire-tv/general/guide-change-settings-firetv-via-adb-t3015522
thought i would share this as people keep using on how manipulate the settings.db
I have done some root app development and stumbled across this binary a while ago.
Have fun!

superkoal said:
If you want to enable mock locations or change any other settings this is the way to go (does not require root):
http://forum.xda-developers.com/fire-tv/general/guide-change-settings-firetv-via-adb-t3015522
thought i would share this as people keep using on how manipulate the settings.db
I have done some root app development and stumbled across this binary a while ago.
Have fun!
Click to expand...
Click to collapse
That's a great tip, thanks.
Running "settings get secure allow_mock_location" returns "null". I went ahead and ran "settings put secure allow_mock_location 1" and "settings put secure ALLOW_MOCK_LOCATION 1" but it doesn't seem to have done anything. The exploitServiceApp APK still gives the same message. I sideloaded some location spoofing app from the Play Store and it complained that mock locations were not enabled.

superkoal said:
If you want to enable mock locations or change any other settings this is the way to go (does not require root):
http://forum.xda-developers.com/fire-tv/general/guide-change-settings-firetv-via-adb-t3015522
thought i would share this as people keep using on how manipulate the settings.db
I have done some root app development and stumbled across this binary a while ago.
Have fun!
Click to expand...
Click to collapse
thanks, i tried it using
Code:
settings put secure mock_location 1
but the app still goes directly to the home screen...
Code:
V/AudioFlinger( 329): Audio hardware entering standby, mixer 0x40100008, suspend count 0
D/AudioStreamOutALSA( 329): AudioStreamOut: standby()
V/AudioFlinger( 329): releaseWakeLock_l() AudioOut_2
V/AudioFlinger( 329): thread 0x40100008 type 0 TID 712 going to sleep
I/ActivityManager( 691): START u0 {act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] flg=0x10000000 pkg=org.keenteam cmp=org.keenteam/.ServiceExploitActivity} from pid 18589
D/dalvikvm( 691): GC_FOR_ALLOC freed 521K, 23% free 10295K/13204K, paused 40ms, total 40ms
I/ViewRootImpl(18589): Slow KeyEvent in com.amazon.tv.settings/com.amazon.tv.settings.tv.BuellerApplicationDetailSettingsActivity device=10 action=Up latency=1ms processing=61ms
I/ActivityManager( 691): Start proc org.keenteam for activity org.keenteam/.ServiceExploitActivity: pid=19348 uid=10007 gids={50007, 1028}
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnStop:1303 android.app.Activity.performStop:5412 android.app.ActivityThread.performStopActivityInner:3197
W/ContextImpl( 691): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1353 com.amazon.internal.policy.impl.AmazonPhoneWindowManager$SendTopWindowChanged.run:3297 android.os.Handler.handleCallback:725 android.os.Handler.dispatchMessage:92 android.os.Looper.loop:137
E/Trace (19348): error opening trace file: No such file or directory (2)
D/ProfileManager(19348): Create ProfileManager instance
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnStop:1303 android.app.Activity.performStop:5412 android.app.ActivityThread.performStopActivityInner:3197
I/Activity(19348): No ActvityExender defined. Proceed with default activity behavior.
D/dalvikvm(19348): Trying to load lib /data/app-lib/org.keenteam-1/libexploitHelper.so 0x4109cdf0
D/dalvikvm(19348): Added shared lib /data/app-lib/org.keenteam-1/libexploitHelper.so 0x4109cdf0
D/dalvikvm(19348): No JNI_OnLoad found in /data/app-lib/org.keenteam-1/libexploitHelper.so 0x4109cdf0, skipping init
I/System.out(19348): 1 inner classes found
D/AndroidRuntime(19348): Shutting down VM
W/dalvikvm(19348): threadid=1: thread exiting with uncaught exception (group=0x40dc2af8)
E/AndroidRuntime(19348): FATAL EXCEPTION: main
E/AndroidRuntime(19348): java.lang.RuntimeException: Unable to start activity ComponentInfo{org.keenteam/org.keenteam.ServiceExploitActivity}: java.lang.RuntimeException: java.lang.NoSuchFieldException: TRANSACTION_setApplicationRestrictions
E/AndroidRuntime(19348): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2206)
E/AndroidRuntime(19348): at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2258)
E/AndroidRuntime(19348): at android.app.ActivityThread.access$600(ActivityThread.java:146)
E/AndroidRuntime(19348): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1243)
E/AndroidRuntime(19348): at android.os.Handler.dispatchMessage(Handler.java:99)
E/AndroidRuntime(19348): at android.os.Looper.loop(Looper.java:137)
E/AndroidRuntime(19348): at android.app.ActivityThread.main(ActivityThread.java:5129)
E/AndroidRuntime(19348): at java.lang.reflect.Method.invokeNative(Native Method)
E/AndroidRuntime(19348): at java.lang.reflect.Method.invoke(Method.java:511)
E/AndroidRuntime(19348): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:793)
E/AndroidRuntime(19348): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:560)
E/AndroidRuntime(19348): at dalvik.system.NativeStart.main(Native Method)
E/AndroidRuntime(19348): Caused by: java.lang.RuntimeException: java.lang.NoSuchFieldException: TRANSACTION_setApplicationRestrictions
E/AndroidRuntime(19348): at org.keenteam.exploit_CVE_2014_7911.do_exploit(exploit_CVE_2014_7911.java:106)
E/AndroidRuntime(19348): at org.keenteam.ServiceExploitActivity.onCreate(ServiceExploitActivity.java:34)
E/AndroidRuntime(19348): at android.app.Activity.performCreate(Activity.java:5202)
E/AndroidRuntime(19348): at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1088)
E/AndroidRuntime(19348): at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2170)
E/AndroidRuntime(19348): ... 11 more
E/AndroidRuntime(19348): Caused by: java.lang.NoSuchFieldException: TRANSACTION_setApplicationRestrictions
E/AndroidRuntime(19348): at java.lang.Class.getDeclaredField(Class.java:631)
E/AndroidRuntime(19348): at org.keenteam.exploit_CVE_2014_7911.do_exploit(exploit_CVE_2014_7911.java:80)
E/AndroidRuntime(19348): ... 15 more
W/ActivityManager( 691): Force finishing activity org.keenteam/.ServiceExploitActivity
D/dalvikvm( 691): GC_FOR_ALLOC freed 1713K, 24% free 10123K/13204K, paused 51ms, total 51ms
I/Process (19348): Sending signal. PID: 19348 SIG: 9
W/ActivityManager( 691): Force finishing activity com.amazon.tv.settings/.tv.BuellerApplicationDetailSettingsActivity
I/ActivityManager( 691): Process org.keenteam (pid 19348) has died.
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnStart:1212 android.app.Activity.performStart:5223 android.app.Activity.performRestart:5291
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnStart:1212 android.app.Activity.performStart:5223 android.app.Activity.performRestart:5291
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnResume:1265 android.app.Activity.performResume:5313 android.app.ActivityThread.performResumeActivity:2761
I/AudioManager(18589): Cleared FLAG_SHOW_UI in setStreamVolume
I/AudioManager(18589): Cleared FLAG_SHOW_UI in setStreamVolume
E/MM_OSAL ( 329): ValidateAACFile failed
D/MediaExtractor( 329): returning default extractor
D/ ( 329): MPQ Mime Type: audio/raw, getMPQObjectsAlive = 0
I/ ( 329): MPQ Audio Enabled - MPQ Audio Player
D/ ( 329): Use tunnel player only for AUDIO_STREAM_MUSIC
D/ ( 329): Set Audio Track as Audio Source
D/ ( 329): MPQ Audio Player
D/ ( 329): MPQ Audio player created for mime audio/raw duration 342083
W/ ( 329): Trying to create tunnel player mIsTunnelAudio 0, LPAPlayer::objectsAlive 0, TunnelPlayer::mTunnelObjectsAlive = 0, (mAudioPlayer == NULL) 0
E/ ( 329): Audio Player set source
W/MPQAudioPlayer( 329): Sw Decoder
E/MM_OSAL ( 329): ValidateAACFile failed
D/MediaExtractor( 329): returning default extractor
D/ ( 329): MPQ Mime Type: audio/raw, getMPQObjectsAlive = 0
I/ ( 329): MPQ Audio Enabled - MPQ Audio Player
D/ ( 329): Use tunnel player only for AUDIO_STREAM_MUSIC
D/ ( 329): Set Audio Track as Audio Source
D/ ( 329): MPQ Audio Player
D/ ( 329): MPQ Audio player created for mime audio/raw duration 54833
W/ ( 329): Trying to create tunnel player mIsTunnelAudio 0, LPAPlayer::objectsAlive 0, TunnelPlayer::mTunnelObjectsAlive = 0, (mAudioPlayer == NULL) 0
E/ ( 329): Audio Player set source
W/MPQAudioPlayer( 329): Sw Decoder
W/ContextImpl( 691): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1353 com.android.server.am.ActivityManagerService.activityResumed:4547 android.app.ActivityManagerNative.onTransact:420 com.android.server.am.ActivityManagerService.onTransact:1716 android.os.Binder.execTransact:351
E/MM_OSAL ( 329): ValidateAACFile failed
D/MediaExtractor( 329): returning default extractor
D/ ( 329): MPQ Mime Type: audio/raw, getMPQObjectsAlive = 0
I/ ( 329): MPQ Audio Enabled - MPQ Audio Player
D/ ( 329): Use tunnel player only for AUDIO_STREAM_MUSIC
D/ ( 329): Set Audio Track as Audio Source
D/ ( 329): MPQ Audio Player
D/ ( 329): MPQ Audio player created for mime audio/raw duration 259854
W/ ( 329): Trying to create tunnel player mIsTunnelAudio 0, LPAPlayer::objectsAlive 0, TunnelPlayer::mTunnelObjectsAlive = 0, (mAudioPlayer == NULL) 0
E/ ( 329): Audio Player set source
W/MPQAudioPlayer( 329): Sw Decoder
W/ContextImpl( 691): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1353 com.amazon.internal.policy.impl.AmazonPhoneWindowManager$SendTopWindowChanged.run:3297 android.os.Handler.handleCallback:725 android.os.Handler.dispatchMessage:92 android.os.Looper.loop:137
W/ContextImpl(18589): Calling a method in the system process without a qualified user: android.app.ContextImpl.sendBroadcast:1339 android.app.Instrumentation.sendLifecycleEventBroadcast:1786 android.app.Instrumentation.callActivityOnStop:1303 android.app.Activity.performStop:5412 android.app.ActivityThread.performDestroyActivity:3468
I/abtfilt ( 1775): all HID in sniff mode!
I/abtfilt ( 1775): BT Action
I/abtfilt ( 1775): WMI Cmd: 145 Len: 16

AFTVnews.com said:
That's a great tip, thanks.
Running "settings get secure allow_mock_location" returns "null". I went ahead and ran "settings put secure allow_mock_location 1" and "settings put secure ALLOW_MOCK_LOCATION 1" but it doesn't seem to have done anything. The exploitServiceApp APK still gives the same message. I sideloaded some location spoofing app from the Play Store and it complained that mock locations were not enabled.
Click to expand...
Click to collapse
The constant value is just "mock_location", you can see it if you click the constant name in the android docs.
So try "settings put secure mock_location 1"
If you try to get the value first and it doesn't return null it means your parameter name is right. I recommend not to insert values in the table that are not there before.

On another note,
https://access.redhat.com/articles/1332213
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235
Wonder if that glibc bug could be used to gain root on certain Android devices.

freezer2k said:
On another note,
https://access.redhat.com/articles/1332213
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235
Wonder if that glibc bug could be used to gain root on certain Android devices.
Click to expand...
Click to collapse
Android doesn't use glibc.

freezer2k said:
On another note,
https://access.redhat.com/articles/1332213
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235
Wonder if that glibc bug could be used to gain root on certain Android devices.
Click to expand...
Click to collapse
Haha, had a follow-up meeting about that same vulnerability at work today!

This was posted today: http://forum.xda-developers.com/showpost.php?p=58510300&postcount=641

Android Auto API_UNAVAILABLE

Hi,
on latest nightly LineageOS 15.1 Android Auto crashes with "Google Play Services not working" on startup.
Log:
Code:
11-14 13:02:26.748 1107 2869 I ActivityManager: START u0 {act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] flg=0x10200000 cmp=com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity bnds=[440,288][640,561]} from uid 10033
11-14 13:02:26.868 1107 1183 I ActivityManager: Displayed com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity: +90ms
11-14 13:02:27.083 8728 8728 I GH.LifetimeManager: connectToCarService
11-14 13:02:27.084 8728 8728 E GH.LifetimeManager: CarService onConnectionFailed (API_UNAVAILABLE: null)
11-14 13:02:27.125 1107 5646 W ActivityManager: Unable to start service Intent { act=com.google.android.gms.car.service.START pkg=com.google.android.gms } U=0: not found
11-14 13:02:27.129 8728 8979 E GmsClient: unable to connect to service: com.google.android.gms.car.service.START on com.google.android.gms
11-14 13:02:27.130 604 604 D SurfaceFlinger: duplicate layer name: changing com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity to com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity#1
11-14 13:02:27.145 8728 8728 W GH.CarApiClientManager: connection failed: ConnectionResult{statusCode=API_UNAVAILABLE, resolution=null, message=null}
11-14 13:02:27.145 8728 8728 E GH.LifetimeManager: CarService onConnectionFailed (API_UNAVAILABLE: null)
11-14 13:02:27.183 604 604 D SurfaceFlinger: duplicate layer name: changing com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity to com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity#2
API_UNAVAILABLE sounds like I missed something to install? I'm using Open GApps Mini. Android auto menu item is also missing in settings - google - services menu.
Same setup on other devices for example HTC M8s works without problem.
Anyone seen this issue before and may help?
Edit:
Got it somehow working for now. I was in settings - google - show debug items (in top menu) - google play services modules (at the bottom) - car / car_setup. There I did check for updates nothing happened went back to GCM Diagnostics pressed disconnect, then connect, and ping nothing really happened again. Then I went back did hide debug items now Android auto menu was present and I was able to startup Android Auto without the error.
Log seems fine now:
Code:
11-17 23:26:19.848 1107 2924 I ActivityManager: START u0 {act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] flg=0x10200000 cmp=com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity bnds=[241,612][440,885]} from uid 10033
11-17 23:26:19.970 1107 1183 I ActivityManager: Displayed com.google.android.projection.gearhead/com.google.android.gearhead.vanagon.VnLaunchPadActivity: +77ms
11-17 23:26:20.187 15152 15152 I GH.LifetimeManager: connectToCarService
11-17 23:26:20.188 15152 15152 D GH.CarApiClientManager: registered listener [email protected]
11-17 23:26:20.188 15152 15152 D GH.CarApiClientManager: start
11-17 23:26:20.195 15152 15178 D CAR.CLIENT: connect [email protected]
11-17 23:26:20.212 14973 14987 D CAR.SERVICE: Package validated: com.google.android.projection.gearhead
11-17 23:26:20.215 14973 14987 D CAR.SERVICE: Android Auto has car home but both aliases are disabled. Nothing to do
11-17 23:26:20.235 15152 15152 D CAR.CLIENT: onICarAvailable [email protected]
11-17 23:26:20.236 14973 14987 D CAR.SERVICE: Registering [email protected]
11-17 23:26:20.236 15152 15152 I GH.CarApiClientManager: connected
11-17 23:26:20.236 15152 15152 D GH.CarApiClientManager: calling onConnected on [email protected]
11-17 23:26:20.247 11394 11394 D GH.CarApiClientManager: registered listener [email protected]
11-17 23:26:20.248 11394 11394 D GH.CarApiClientManager: start
Still I do not know what was causing the issue. I was always able to use Android Auto until it was broken for no reason. Maybe some strange issue while disconnecting from the car caused the car play service to crash. Nevertheless, reboot alone did not fix it. I'll report back if it breaks again in the future and maybe dump logs directly after the incident.

[ROM][UNOFFICIAL][GAPPS][13] ArrowOS for Fire HD10 9th gen (maverick)

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
ArrowOS​
This is an alpha build, not intended for use as a daily driver!
This ROM requires the temporary unlock to work, along with TWRP!
Your device must be on the 7.3.1.0 launch firmware!
Code:
/*
* We are not responsible for bricked devices, dead SD cards,
* thermonuclear war, or you getting fired because the alarm app failed. Please
* do some research if you have any concerns about features included in this ROM
* before flashing it! YOU are choosing to make these modifications, and if
* you point the finger at us for messing up your device, We will laugh at you.
* It is your fault because you chose to do all the modifications on your device.
* Remember projects like these and the work done on them is a hobby to the
* contributors and the team members, no one is working for you nor is getting paid for it
* have some respect for the work done by them since it is done purely on interest or a hobby
*/
ABOUT
ArrowOS is an Android Open Source Project based Android mobile operating system started with the aim of keeping things simple, clean and neat.
Website: https://arrowos.net
Telegram: Channel | TG Portal/Links
Github: https://github.com/ArrowOS
Code Review: review.arrowos.net
E-mail: arrowos.contact
PayPal: Donate to us
Blog: blog.arrowos.net
Checkout more documentation at (maintainership/contributing): Check this out
WHAT WORKS?
Everything except those mentioned on the not working list.
WHAT DOESN'T WORK?
Bluetooth audio
Hardware codecs
Brightness adjustment is buggy
SELinux permissive
Known performance issues
com.android.phone crashes from time to time
DRM
You tell me!
DOWNLOADS
Click here to Download
Read our blog article/post about:
* HOW-TO report a bug
* GAPPS and VANILLA variants
* Checking build integrity
GPL compliance:
ROM Source- https://github.com/ArrowOS
Kernel Source- https://github.com/amazon-maverick-dev/android_kernel_amazon_mt8183 (branch: 13.0-new)
Device Source- https://github.com/amazon-maverick-dev/android_device_amazon_maverick

Reserved #2

Reserved #3

Installed it on my device. Looking good! Are the bluetooth issues isolated to Bluetooth audio? I was unable to pair a bluetooth game controller or a mouse.

moomph said:
Installed it on my device. Looking good! Are the bluetooth issues isolated to Bluetooth audio? I was unable to pair a bluetooth game controller or a mouse.
Click to expand...
Click to collapse
Hey, it's possible that there are more Bluetooth issues than meets the eye, I didn't really do much real world testing since this is in very early stages.
I'd be happy to have a look if you could attach a logcat while trying to pair the game controller.

Hey, thanks for getting back. To preface, when I attempt to pair the controller, the UI in the "Connected devices" screen behaves as if it is connected for a second, but the controller disconnects and moves down to the list of "Saved devices". I saw similar behavior with a bluetooth mouse - it seems to pair, but then it disconnects immediately.
Simply running logcat results in a deluge of log messages - lots of errors amongst them.
When I run logcat | grep bluetooth and attempt to pair the controller, this is what I see. Pardon how massive this is:
Code:
09-23 11:44:53.264 22003 22214 I bluetooth: packages/modules/Bluetooth/system/gd/hci/hci_layer.cc:113 drop: Dropping event MAX_SLOTS_CHANGE
09-23 11:44:53.281 22003 22214 I bluetooth: packages/modules/Bluetooth/system/main/shim/acl.cc:525 OnReadClockOffsetComplete: UNIMPLEMENTED
09-23 11:44:53.287 21733 21759 I ActivityManager: Start proc 10056:com.google.android.projection.gearhead:shared/u0a54 for broadcast {com.google.android.projection.gearhead/com.google.android.apps.auto.wireless.bluetooth.WifiBluetoothReceiver}
09-23 11:44:53.403 21733 21904 I ActivityTaskManager: START u0 {act=android.bluetooth.device.action.PAIRING_REQUEST flg=0x10000000 cmp=com.android.settings/.bluetooth.BluetoothPairingDialog (has extras)} from uid 1000
09-23 11:44:53.514 21733 22058 D CoreBackPreview: Window{90ec256 u0 com.android.settings/com.android.settings.bluetooth.BluetoothPairingDialog}: Setting back callback OnBackInvokedCallbackInfo{[email protected]65, mPriority=0}
09-23 11:44:53.519 21733 22058 D CoreBackPreview: Window{97a6d06 u0 com.android.settings/com.android.settings.bluetooth.BluetoothPairingDialog}: Setting back callback OnBackInvokedCallbackInfo{[email protected]92, mPriority=0}
09-23 11:44:53.562 21733 21748 I ActivityTaskManager: Displayed com.android.settings/.bluetooth.BluetoothPairingDialog: +153ms
09-23 11:44:53.760 10056 10056 I GH.WifiBluetoothRcvr: Connection action: android.bluetooth.device.action.ACL_CONNECTED, device E4:17:D8:85:79:73
09-23 11:44:53.863 29843 30332 I BistoWorker: (REDACTED) bluetoothConnectionStateChanged. Action: %s
09-23 11:44:54.793 22003 22214 W bluetooth: packages/modules/Bluetooth/system/gd/hci/hci_layer.cc:375 on_hci_event: Unhandled event of type 0xe5 (Unknown EventCode: 229)
09-23 11:44:58.628 369 369 I HwBinder:369_3: type=1400 audit(0.0:16620973): avc: denied { call } for scontext=u:r:init:s0 tcontext=u:r:bluetooth:s0 tclass=binder permissive=1
09-23 11:44:58.632 22003 22214 W bluetooth: packages/modules/Bluetooth/system/gd/hci/hci_layer.cc:375 on_hci_event: Unhandled event of type 0xe5 (Unknown EventCode: 229)
09-23 11:44:59.775 21733 22688 D CoreBackPreview: Window{90ec256 u0 com.android.settings/com.android.settings.bluetooth.BluetoothPairingDialog}: Setting back callback null
09-23 11:44:59.787 22003 22214 W bluetooth: packages/modules/Bluetooth/system/gd/hci/vendor_specific_event_manager.cc:86 on_vendor_specific_event: Unhandled vendor specific event of type 0x52
09-23 11:44:59.787 22003 22214 W bluetooth: packages/modules/Bluetooth/system/gd/hci/vendor_specific_event_manager.cc:86 on_vendor_specific_event: Unhandled vendor specific event of type 0x52
09-23 11:44:59.788 21733 23979 W InputManager-JNI: Input channel object '90ec256 com.android.settings/com.android.settings.bluetooth.BluetoothPairingDialog (client)' was disposed without first being removed with the input manager!
09-23 11:44:59.860 21733 22058 D CoreBackPreview: Window{97a6d06 u0 com.android.settings/com.android.settings.bluetooth.BluetoothPairingDialog}: Setting back callback null
09-23 11:44:59.862 21733 22058 W InputManager-JNI: Input channel object '97a6d06 com.android.settings/com.android.settings.bluetooth.BluetoothPairingDialog (client)' was disposed without first being removed with the input manager!
09-23 11:45:00.152 21733 21758 W BroadcastQueue: Background execution not allowed: receiving Intent { act=android.bluetooth.device.action.UUID flg=0x10 (has extras) } to com.google.android.gms/.chimera.GmsIntentOperationService$PersistentTrustedReceiver
09-23 11:45:00.152 21733 21758 W BroadcastQueue: Background execution not allowed: receiving Intent { act=android.bluetooth.device.action.UUID flg=0x10 (has extras) } to com.google.android.googlequicksearchbox/com.google.android.apps.gsa.broadcastreceiver.external.ExternalCommonBroadcastReceiver
09-23 11:45:00.152 21733 21758 W BroadcastQueue: Background execution not allowed: receiving Intent { act=android.bluetooth.device.action.UUID flg=0x10 (has extras) } to com.google.android.projection.gearhead/com.google.android.apps.auto.carservice.gmscorecompat.CarBluetoothReceiver
09-23 11:45:00.156 21733 21758 W BroadcastQueue: Background execution not allowed: receiving Intent { act=android.bluetooth.device.action.BOND_STATE_CHANGED flg=0x10 (has extras) } to com.google.android.gms/.chimera.GmsIntentOperationService$PersistentTrustedReceiver
09-23 11:45:00.156 21733 21758 W BroadcastQueue: Background execution not allowed: receiving Intent { act=android.bluetooth.device.action.BOND_STATE_CHANGED flg=0x10 (has extras) } to com.google.android.googlequicksearchbox/com.google.android.apps.gsa.broadcastreceiver.external.ExternalCommonBroadcastReceiver
09-23 11:45:00.157 10918 17585 I NearbyDiscovery: FastPairHandler: Received action android.bluetooth.device.action.UUID [CONTEXT service_id=49 ]
09-23 11:45:00.274 22003 22214 I bluetooth: packages/modules/Bluetooth/system/gd/hci/le_scanning_manager.cc:639 stop_scan: Scanning already stopped, return!
09-23 11:45:02.037 22003 22214 W bluetooth: packages/modules/Bluetooth/system/gd/hci/hci_layer.cc:375 on_hci_event: Unhandled event of type 0xe5 (Unknown EventCode: 229)
09-23 11:45:02.249 22003 22214 W bluetooth: packages/modules/Bluetooth/system/gd/hci/hci_layer.cc:375 on_hci_event: Unhandled event of type 0xe5 (Unknown EventCode: 229)
09-23 11:45:02.681 22003 22214 W bluetooth: packages/modules/Bluetooth/system/gd/hci/hci_layer.cc:375 on_hci_event: Unhandled event of type 0xe5 (Unknown EventCode: 229)
09-23 11:45:03.315 22003 22214 W bluetooth: packages/modules/Bluetooth/system/gd/hci/hci_layer.cc:375 on_hci_event: Unhandled event of type 0xe5 (Unknown EventCode: 229)
09-23 11:45:03.534 22003 22214 W bluetooth: packages/modules/Bluetooth/system/gd/hci/hci_layer.cc:375 on_hci_event: Unhandled event of type 0xe5 (Unknown EventCode: 229)
09-23 11:45:04.136 22003 22003 I bt_stack_manage: type=1400 audit(0.0:16623299): avc: denied { call } for scontext=u:r:bluetooth:s0 tcontext=u:r:init:s0 tclass=binder permissive=1
09-23 11:45:04.136 369 369 I HwBinder:369_3: type=1400 audit(0.0:16623300): avc: denied { call } for scontext=u:r:init:s0 tcontext=u:r:bluetooth:s0 tclass=binder permissive=1
09-23 11:45:04.219 22003 22230 E bluetooth: packages/modules/Bluetooth/system/stack/btm/btm_sco.cc:950 btm_sco_on_disconnected: Unable to find sco connection
09-23 11:45:04.245 29843 30332 I BistoWorker: (REDACTED) bluetoothConnectionStateChanged. Action: %s
09-23 11:45:06.296 22003 22003 I bt_stack_manage: type=1400 audit(0.0:16624639): avc: denied { call } for scontext=u:r:bluetooth:s0 tcontext=u:r:init:s0 tclass=binder permissive=1
09-23 11:45:06.299 22003 22214 I bluetooth: packages/modules/Bluetooth/system/gd/hci/le_scanning_manager.cc:639 stop_scan: Scanning already stopped, return!
09-23 11:45:06.300 369 369 I HwBinder:369_3: type=1400 audit(0.0:16624640): avc: denied { call } for scontext=u:r:init:s0 tcontext=u:r:bluetooth:s0 tclass=binder permissive=1

Did this again and saw some other logs relevant looking logs that perhaps I somehow missed in the first dump:
Code:
09-23 13:09:33.240 22003 22214 W bluetooth: packages/modules/Bluetooth/system/gd/hci/hci_layer.cc:375 on_hci_event: Unhandled event of type 0xe5 (Unknown EventCode: 229)
09-23 13:09:33.467 22003 22230 W l2c_link: packages/modules/Bluetooth/system/stack/l2cap/l2c_link.cc:500 l2c_link_timeout: TODO: Remove this callback into bcm_sec_disconnect
09-23 13:09:33.467 22003 22230 I btm_acl : packages/modules/Bluetooth/system/stack/acl/btm_acl.cc:188 hci_btsnd_hcic_disconnect: Disconnecting peer:xx:xx:xx:xx:79:73 reason:Remote Terminated Connection comment:stack::l2cap::l2c_link::l2c_link_timeout All channels closed
09-23 13:09:33.562 22003 22230 E bluetooth: packages/modules/Bluetooth/system/stack/btm/btm_sco.cc:950 btm_sco_on_disconnected: Unable to find sco connection
09-23 13:09:33.562 22003 22230 I btm_acl : packages/modules/Bluetooth/system/stack/acl/btm_acl.cc:2569 btm_acl_iso_disconnected: ISO disconnection from GD, handle: 0x32, reason: 0x16
09-23 13:09:33.563 22003 22230 I btif_av : packages/modules/Bluetooth/system/btif/src/btif_av.cc:3409 btif_av_acl_disconnected: btif_av_acl_disconnected: Peer XX:XX:XX:XX:79:73 : ACL Disconnected
09-23 13:09:33.565 22003 22161 W BatteryService: getBatteryService(): service is NULL
09-23 13:09:33.604 26918 27235 I BistoWorker: (REDACTED) bluetoothConnectionStateChanged. Action: %s
09-23 13:09:33.611 26918 27027 I BistoWorker: (REDACTED) Failed to get bistoDeviceInfo %s
09-23 13:09:33.615 22003 22073 D BluetoothDatabase: getBondedDevicesOrdered: Invalid address for device LocalStorage
09-23 13:09:33.624 26982 26982 I NearbyDiscovery: onAclChange: state=DISCONNECTED, device=XX:XX:XX:XX:79:73 [CONTEXT service_id=49 ]
Also, I found that the telephony service was failing and infinitely restarting, causing the deluge of error logs. Running the following solved it:
am service-restart-backoff disable com.android.phone

After further testing with the Bluetooth mouse, looking at the logs and UI behavior, it appears that the pairing does succeed. The device remains listed within the section of currently paired devices, and when I turn off the mouse, the UI updates accordingly and new log messages appear indicating a disconnection. However, a mouse pointer never materializes on screen during connection.