Develop Bugs

[FFU][UPE-DEV]Structure Full Flash Update Image for Dell VenuePro[WP7][7.0.0.7004]

Structure Full Flash Update Image (.FFU) for Dell VenuePro Windows Phone 7 7.0.0.7004
Full Flash Update - This is a System Flash Image for update WP7 Device. We upgrade this OS, example in tool UpdateWP.exe(from Zune catalog in PC).
In Part SDLR, from general ROM structure, we have too more files and modules, which reads the image system and its syntax.
ImageFlash Structure:
Code:
[FullFlash]
Version = 1.0
MigrateUserSettings = False
UpdateType = Normal
DevicePlatformID = {5B8F8B62-8E55-4531-8D70-15269B68C43E}
FormatUserStore = True
[BinaryRegion]
Size = 24924572
Name = Modem
[Store]
SectorSize = 2048
Name = OS
SectorCount = 479296
ID = {ACE7CC5C-5F30-474b-A662-989B9B9DBA90}
[Partition]
UsedSectors = 2590
Name = SLDR
PartitionType = 32
BootDataSize = 12
TotalSectors = 3136
TargetStore = {ACE7CC5C-5F30-474b-A662-989B9B9DBA90}
[Partition]
UsedSectors = 2540
Name = NK
PartitionType = 35
BootDataSize = 12
TotalSectors = 2944
TargetStore = {ACE7CC5C-5F30-474b-A662-989B9B9DBA90}
[Partition]
UsedSectors = 66059
Name = IMGFS
PartitionType = 37
TotalSectors = 70719
TargetStore = {ACE7CC5C-5F30-474b-A662-989B9B9DBA90}
Nokser

[FFU][UPE-DEV]Structure Full Flash Update Image for HTC Mazaa

Structure Full Flash Update Image (.FFU) for Windows Phone 7 HTC Mazaa
Full Flash Update - This is a System Flash Image for update WP7 Device. We upgrade this OS, example in tool UpdateWP.exe(from Zune catalog in PC).
In Part SDLR, from general ROM structure, we have too more files and modules, which reads the image system and its syntax.
Physical Flash Layout:
HashTable.blob
Partition Table Info
User Store Space
Bootloader/Modem -> (amss, fsbl, osbl, etc.)
BSP
SLDR1
SLDR2
NK
USP
DPP
IMGFS
PADUSER
User Store
Partition Table Info (ImageFlash):
Code:
[FullFlash]
Version = 1.0
MigrateUserSettings = False
UpdateType = Clean
Description =
DevicePlatformID = {2527F725-F4B7-404e-8379-F0CAE045AAB8}
FormatUserStore = False
[BinaryRegion]
Size = 27547389
Name = Modem
[Store]
SectorSize = 512
Name = OS
SectorCount = 62324736
ID = {7EF3850B-A401-4699-9821-7A4C483F6BAA}
[Partition]
UsedSectors = 1
Name = BSP
PartitionType = 41
BootDataSize = 12
TotalSectors = 512
TargetStore = {7EF3850B-A401-4699-9821-7A4C483F6BAA}
[Partition]
UsedSectors = 10199
Name = SLDR1
PartitionType = 32
BootDataSize = 12
TotalSectors = 13260
TargetStore = {7EF3850B-A401-4699-9821-7A4C483F6BAA}
[Partition]
UsedSectors = 10199
Name = SLDR2
PartitionType = 32
BootDataSize = 12
TotalSectors = 13260
TargetStore = {7EF3850B-A401-4699-9821-7A4C483F6BAA}
[Partition]
UsedSectors = 8107
Name = NK
PartitionType = 35
BootDataSize = 12
TotalSectors = 11776
TargetStore = {7EF3850B-A401-4699-9821-7A4C483F6BAA}
[Partition]
UsedSectors = 0
Name = USP
PartitionType = 27
TotalSectors = 6912
TargetStore = {7EF3850B-A401-4699-9821-7A4C483F6BAA}
[Partition]
UsedSectors = 1
Name = DPP
PartitionType = 41
TotalSectors = 512
TargetStore = {7EF3850B-A401-4699-9821-7A4C483F6BAA}
[Partition]
UsedSectors = 528254
Name = IMGFS
PartitionType = 37
TotalSectors = 1028088
TargetStore = {7EF3850B-A401-4699-9821-7A4C483F6BAA}
[Partition]
UsedSectors = 0
Name = PADUSER
PartitionType = 42
TotalSectors = 8
TargetStore = {7EF3850B-A401-4699-9821-7A4C483F6BAA}
[Partition]
UsedSectors = 0
UseAllSpace = True
Name = User
PartitionType = 4
TotalSectors = 0
TargetStore = {7EF3850B-A401-4699-9821-7A4C483F6BAA}
More Information:
.ffu (Full Flash Update) file format (XML) will be used to pass information to the Zune software on which partitions are to be updated, etc. FFUs are signed just as .cabs are signed and only an .ffu which passes validation against the certificates on-device will be allowed to update a device.
Click to expand...
Click to collapse
Nokser

shape of the above
the program is doing what
thanks

Can downgrade spl 5 with this??

Magpir said:
Can downgrade spl 5 with this??
Click to expand...
Click to collapse
+1 for this

what does this do?

hmm... this has been around for weeks Nokser, but thanks!

BCM21553 files of vodafone samrt II

the Vodafone Smart II have the same spec as our y
and 2.3.7 gb is pre-installed with it
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
[/SIZE][/B][/CENTER]
Here is the Unpacked system.img from the stock Italian ROM
http://www.mediafire.com/?khpdey37edwvzlv
and custom rom of it
http://forum.cyanogenmod.com/topic/...el-v860-ota-update2-integrated-rom-with-root/
Click to expand...
Click to collapse
Features
OS Android OS, v2.3.7 (Gingerbread)
Chipset BCM21553
CPU 832 MHz ARMv6
Click to expand...
Click to collapse

Is, that cm7?
sent by my Y using jelly blast rom frm XDA Premium

rmp07 said:
Is, that cm7?
sent by my Y using jelly blast rom frm XDA Premium
Click to expand...
Click to collapse
It should be 2.3.7 AOSP cause no manufacture release CM Rom

We can take drivers from here!!
Sent from my GT-S5360 using XDA

hell_lock said:
We can take drivers from here!!
Sent from my GT-S5360 using XDA
Click to expand...
Click to collapse
yeah ! that's what I attached in 1st post I think
also please have a lokk at this
See the 2 image file , look like our present graphics ​
Click to expand...
Click to collapse
in that vt file
Code:
# RADVISION H.323/3G-324M Stack Configuration File
#
# Value encodings:
# '' - String (and asciiz is not appended)
# \"\" - BMP string of ASCII characters
# [] - Hex octet string
# <> - IP
# {} - Object ID
# % - Bit string
# Other - Integer
1 ApplicationConfig = 0
+ AutoAnswer = 0
UseWnsrp = 1
UseACP = 0
UseMONA = 0
UseAEC = 0
mpcMediaTypes = 4 #0:Unknown 1:AMR 2:AMRWB 3:H264 4:MPEG4 5:H263
UseMPCRxOnly = 0
AcpAudioEntry = 0
AcpVideoEntry = 0
MultipleH245Messages = 1
AutoAcceptChannels = 1
AutoEarlyMES = 0
muxLevel = 3 # Rv3G324mCallMuxLevel2
AutoCaps = 1 # it will be modified to TRUE
AutoCapsReplayMedia = 0
AutoOpenChannels = 1
autoChannel_Audio_Use = 1
autoChannel_Audio_rate = 31
autoChannel_Audio_name = 'amr'
autoChannel_Audio_alConfig = 'AL2 WithSequenceNumber'
autoChannel_Video_Use = 1
autoChannel_Video_rate = 224
autoChannel_Video_name = 'mpeg4'
autoChannel_Video_alConfig = 'AL2 WithSequenceNumber'
autoChannel_Video_bNullData = 0
autoChannel_Video_bIsDuplex = 0
VideoChannelBufferNum = 40
VideoChannelBufferFreeNum = 20
AudioChannelBufferNum = 15
TransportWriteInterval = 20 # loop interval of read/write thread in transport module, 20ms, 40ms..., maximum is 100ms
TransportDoFlowControl = 1 # if transport thread do flow control
LogStreamBuffers = 0
LogStreamBufferSize = 2097152 #2*1024*1024
ReflectTransportBuffers = 1
isdnBufferCorrectionSize = 0 #16
LogMode = 1 # 0:None,1:Screen,2:File, 3:Memory
LogMemorySize = 1048576 # 1024K
LogFileName = '/data/vt/3gapp.log'
LogFileSize = 524288 #512K
LogLevelInfo = 127
LogLevelDebug = 1
LogLevelError = 1
LogModule = 7 # 1:Application, 2:Transport, 4:Stack, 8:AudioEnc, 16:AudioDec, 32:VideoEnc, 64:VideoDec
VideoFastUpdatePicture = 1
VideoEncodeIntraInterval = 32
VideoEncodeFrameRate = 15
VideoEncodeTargetBitRate = 48000
VideoEncodeDelayTime = 200
VideoDecodeStreamMode = 0
VendorIdentificationMes = 1
VendorIdent-CountryCode = 97
VendorIdent-Extension = 0
VendorIdent-ManufacturerCode = 0
VendorIdent-ProductNumber = 'SK-700'
VendorIdent-VersionNumber = 'SKT 14 v1.37'
VendorIdent-Match = '3GApp'
LipSyncTime = 0
SendThreadPriority = 80
RecvThreadPriority = -1
CameraRate = 8
RingDelayTime = 2000 # ms
BlockVideoDelay = 500 #ms
AutoDropTimeout = 20 #s
CallDurationLimitation = 0 #second
MuxLevelSyncTimeout = 10000;
1 3g324mSystem = 0
+ maxCalls = 4
maxTransmittingChannels = 4
maxReceivingChannels = 4
allocations = 0
+ controlBufferSize = 120
controlNumOfBuffers = 40
logicalChannelBufferSize = 2000
logicalChannelNumOfBuffers = 100
alxmBufferSize = 4000
alxmNumOfBuffers = 40
alxmInterleavingBufferSize = 4000
alxmInterleavingNumOfBuffers = 10
maxAsn1BufferSize = 6000
ach245NumOfBuffers = 15
- h223Params = 0
+ sendQueueSizePerChannel = 70
srpTimer = 2000
nsrpTimer = 200
al3RetransmissionTimer = 2000
numOfAlSduSaved = 100
n400Counter = 30
n402Counter = 5
2 watchdog
+ interval = 10
1 h245 = 0
2 masterSlave = 0
+ terminalType = 130
timeout = 1000
2 capabilities = 0
+ terminalCapabilitySet = 0
+ sequenceNumber = 1
protocolIdentifier = [00]
multiplexCapability = 0
+ h223Capability = 0
+ transportWithI-frames = 0
videoWithAL1 = 0
videoWithAL2 = 1
videoWithAL3 = 1
audioWithAL1 = 0
audioWithAL2 = 1
audioWithAL3 = 0
dataWithAL1 = 0
dataWithAL2 = 0
dataWithAL3 = 0
maximumAl2SDUSize = 512
maximumAl3SDUSize = 512
maximumDelayJitter = 10
h223MultiplexTableCapability = 0
+ basic = 0
- maxMUXPDUSizeCapability = 1
nsrpSupport = 1
mobileOperationTransmitCapability = 0
+ modeChangeCapability = 0
h223AnnexA = 1
h223AnnexADoubleFlag = 1
h223AnnexB = 1
h223AnnexBwithHeader = 1
4 capabilityTable = 0
#############################
# Video Codecs
#############################
# MPEG
5 * = 0 # Sequence
+ capabilityTableEntryNumber = 4
capability = 0
+ receiveAndTransmitVideoCapability = 1
+ genericVideoCapability = 0
+ capabilityIdentifier = 0
+ standard = {itu-t recommendation h 245 1 0 0}
- maxBitRate = 400
nonCollapsing = 1
10 * = 0
+ parameterIdentifier = 0
+ standard = 0
- parameterValue = 0
+ unsignedMax = 8
10 * = 0
+ parameterIdentifier = 0
+ standard = 1
- parameterValue = 0
+ unsignedMax = 1
# H.263
5 * = 0
+ capabilityTableEntryNumber = 3
capability = 0
+ receiveAndTransmitVideoCapability = 1
+ h263VideoCapability = 0
+ qcifMPI = 2
maxBitRate = 400
unrestrictedVector = 0
arithmeticCoding = 0
advancedPrediction = 0
pbFrames = 0
temporalSpatialTradeOffCapability = 1
#############################
# Audio Codecs
#############################
# AMR
5 * = 0
+ capabilityTableEntryNumber = 1
capability = 0
+ receiveAndTransmitAudioCapability = 1
+ genericAudioCapability = 0
+ capabilityIdentifier =
+ standard = {itu-t recommendation h 245 1 1 1}
- maxBitRate = 122
#define maxsdu
collapsing = 1
10 * = 0
+ parameterIdentifier = 0
+ standard = 0
- parameterValue = 0
+ unsignedMin = 1
# g.723.1
5 * = 0
+ capabilityTableEntryNumber = 2
capability = 0
+ receiveAudioCapability = 0
+ g7231 = 0
+ maxAl-sduAudioFrames = 6
silenceSuppression = 0
4 capabilityDescriptors = 0
+ * = 0
+ capabilityDescriptorNumber = 0
simultaneousCapabilities = 0
+ * = 0
+ * = 3
* = 4
- * = 0
+ * = 1
* = 2
3 timeout = 100
- channels = 0
3 * = 0
+ name = 'amr'
dataType = 0
+ audioData = 0
+ genericAudioCapability = 0
+ capabilityIdentifier = 0
+ standard = { itu-t(0) recommendation(0) h(8) 245 generic-capabilities(1) audio(1) amr(1) }
- maxBitRate = 122
collapsing = 0
+ * = 0
+ parameterIdentifier = 0
+ standard = 0
- parameterValue = 0
+ unsignedMin = 1
3 * = 0
+ name = 'mpeg4'
dataType = 0
+ videoData = 0
+ genericVideoCapability = 0
+ capabilityIdentifier = 0
+ standard = { itu-t(0) recommendation(0) h(8) 245 generic-capabilities(1) video(0) ISO-IEC14496-2(0) }
- maxBitRate = 400
nonCollapsing
8 * = 0
+ parameterIdentifier = 0
+ standard = 0
- parameterValue = 0
+ unsignedMax = 8
8 * = 0
+ parameterIdentifier = 0
+ standard = 1
- parameterValue = 0
+ unsignedMax = 1
8 * = 0
+ parameterIdentifier = 0
+ standard = 2
- parameterValue = 0
+ octetString = [000001b008000001b509000001000000012000844014282c2090a31f]
3 * = 0
+ name = 'h263'
dataType = 0
+ videoData = 0
+ h263VideoCapability = 0
+ qcifMPI = 2
maxBitRate = 400
unrestrictedVector = 0
arithmeticCoding = 0
advancedPrediction = 0
pbFrames = 0
temporalSpatialTradeOffCapability = 0
errorCompensation = 0

Code:
[CENTER][B][FONT="Arial Black"][SIZE="4"]in modules folder [/SIZE][/FONT][/B][/CENTER]
bcm_headsetsw.ko
brcm_switch.ko
dhd.ko
gememalloc.ko
h6270enc.ko
hx170dec.ko
Code:
[CENTER][B][FONT="Arial Black"][SIZE="4"]in HW folder [/SIZE][/FONT][/B][/CENTER]
acoustics.default.so
alsa.default.so
gps.bcm21553.so
gralloc.default.so
lights.bcm21553.so
sensors.default.so
Code:
[CENTER][B][FONT="Arial Black"][SIZE="4"]in egl folder [/SIZE][/FONT][/B][/CENTER]
egl.cfg
libGLES_android.so
libGLES_hgl.so

So the phone is same like ours but does it have any development on it such as aosp,cm etc. If yes then post the link.. We can try our luck on it
Sent from my GT-S5360 using XDA

try this
2.3.7 AOSP based ROM
http://forum.cyanogenmod.com/topic/57455-vodafone-smart-aka-alcatel-v860-ota-update2-integrated-rom-with-root/
or
stock rom
http://www.mediafire.com/?khpdey37edwvzlv

amal das said:
the Vodafone Smart II have the same spec as our y
and 2.3.7 gb is pre-installed with it
[/SIZE][/B][/CENTER]
Click to expand...
Click to collapse
pre-compiled modules won't help

Well they can work for us! I have an idea...
Sent from my GT-S5360 using XDA

hell_lock said:
Well they can work for us! I have an idea...
Sent from my GT-S5360 using XDA
Click to expand...
Click to collapse
I am listening

Will report if it works out... I dont want u guys to soft brick ur phone.. alot of testing is needed in this process...

there are some files missing in stock rom
like framework-res.apk also some bin files even build.prop toooo
you better download the rom from cyanogen form
http://forum.cyanogenmod.com/topic/...el-v860-ota-update2-integrated-rom-with-root/

hell_lock said:
Will report if it works out... I dont want u guys to soft brick ur phone.. alot of testing is needed in this process...
Click to expand...
Click to collapse
well I am not going to test it on my device for sure. Just wanted to know what is your idea.
Bricking word hurts me a lot terrible experience.

I will play with the drivers... First I will test the drivers on my stock rom. If they work, I will try the aosp drivers on stock rom, if they still work then I will put them in cm7 and test it. It will surely work.
Sent from my GT-S5360 using XDA

hell_lock said:
I will play with the drivers... First I will test the drivers on my stock rom. If they work, I will try the aosp drivers on stock rom, if they still work then I will put them in cm7 and test it. It will surely work.
Sent from my GT-S5360 using XDA
Click to expand...
Click to collapse
Almost identical specs so is worth try porting.
therefore work has began :fingers-crossed:

Zackconsole said:
Almost identical specs so is worth try porting.
therefore work has began :fingers-crossed:
Click to expand...
Click to collapse
U doin it or should i try messing it up?
Sent from my GT-S5360 using XDA

hell_lock said:
U doin it or should i try messing it up?
Sent from my GT-S5360 using XDA
Click to expand...
Click to collapse
Doing it hope no anyone come and disturb me..or else i got to get myself lock into another room again!

Zackconsole said:
Doing it hope no anyone come and disturb me..or else i got to get myself lock into another room again!
Click to expand...
Click to collapse
will wait for your ported test version !

amal das said:
will wait for your ported test version !
Click to expand...
Click to collapse
Checkout your inbox 30min/1 hour depent on my internet connection man.
It's malaysia.Famous for slow internet (RM150 Internet = Get rm30 Internet) :crying:

[R&D] Serial dump

Here is a serial dump from the processor may come to some use this was during boot between bootloader to normal boot. I'm unable to get it to dump again.
Code:
Samsung S-Boot 4.0 for SM-G920P (Mar 29 2015 - 21:52:54)
EXYNOS7420 EVT 1.3 (Base on ARM CortexA53)
3048MB / 0MB / Rev 10 / G920PVPU1AOCF / (PKG_ID 0x0) / LOT_ID N2
XH4
BOOTLOADER VERSION : G920PVPU1AOCF
__if_pmic_rev_init - MUIC API is not ready!
MON: 0x3(0)
MON[0] = (0)[0x1e, 0x60]
MON[1] = (1)[0x20, 0x40]
MON[2] = (2)[0x3b, 0xdc]
MON[3] = (3)[0x22, 0x4d]
MON[4] = (4)[0x3b, 0xd5]
MON[5] = (5)[0x24, 0x3d]
MON[6] = (6)[0x15, 0x44]
MON[7] = (7)[0x0c, 0x07]
pmic_asv_init
(ASV_TBL_BASE+0x00)[11:0] bigcpu_asv_group = 2730
(ASV_TBL_BASE+0x00)[15:12] bigcpu_ssa0 = 0
(ASV_TBL_BASE+0x00)[27:16] littlecpu_asv_group = 2730
(ASV_TBL_BASE+0x00)[31:28] littlecpu_ssa0 = 0
(ASV_TBL_BASE+0x04)[11:0] g3d_asv_group = 2184
(ASV_TBL_BASE+0x04)[15:12] g3d_ssa0 = 0
(ASV_TBL_BASE+0x04)[27:16] mif_asv_group = 2730
(ASV_TBL_BASE+0x04)[31:28] mif_ssa0 = 0
(ASV_TBL_BASE+0x08)[11:0] int_asv_group = 2730
(ASV_TBL_BASE+0x08)[15:12] int_ssa0 = 0
(ASV_TBL_BASE+0x08)[27:16] cam_disp_asv_group = 2730
(ASV_TBL_BASE+0x08)[31:28] cam_disp_ssa0 = 0
(ASV_TBL_BASE+0x0C)[3:0] dvfs_asv_table_version = 11
(ASV_TBL_BASE+0x0C)[4] asv_group_type = 0
(ASV_TBL_BASE+0x0C)[7:5] reserved01 = 0
(ASV_TBL_BASE+0x0C)[8] shift_type = 0
(ASV_TBL_BASE+0x0C)[9] ssa1_enable = 0
(ASV_TBL_BASE+0x0C)[10] ssa0_enable = 0
(ASV_TBL_BASE+0x0C)[15:11] reserved02 = 0
(ASV_TBL_BASE+0x0C)[16] asv_method = 1
(ASV_TBL_BASE+0x0C)[31:17] reserved03 = 0
(ASV_TBL_BASE+0x10)[3:0] main_asv_group = 0
(ASV_TBL_BASE+0x10)[7:4] main_asv_ssa = 0
(ASV_TBL_BASE+0x10)[11:8] bigcpu_ssa1 = 0
(ASV_TBL_BASE+0x10)[15:12] littlecpu_ssa1 = 0
(ASV_TBL_BASE+0x10)[19:16] g3d_ssa1 = 0
(ASV_TBL_BASE+0x10)[23:20] mif_ssa1 = 0
(ASV_TBL_BASE+0x10)[27:24] int_ssa1 = 0
(ASV_TBL_BASE+0x10)[31:28] cam_disp_ssa1 = 0
(ASV_TBL_BASE+0x14)[8:0] bigcpu_ssa_ema = 0
(ASV_TBL_BASE+0x14)[17:9] littlecpu_ssa_ema = 0
(ASV_TBL_BASE+0x14)[26:18] g3d_ssa_ema = 0
(ASV_TBL_BASE+0x14)[31:27] reserved04 = 0
chip_status = b, bin2_efuse = 0
muic_register_max77843_apis
muic_is_max77843 chip_id:0x43 muic_id:0xb5 -> matched.
MUIC rev = MAX77843(181)
init_multi_microusb_ic Active MUIC 0xb5
max77843_init_microusb_ic: MUIC: CDETCTRL:0x2d
max77843_init_microusb_ic: MUIC: CONTROL1:0x1b
max77843_init_microusb_ic: MUIC: CONTROL2:0x3b
max77843_muic_get_adc_value: STATUS1:0x1c
max77843_muic_get_adc_value: ADC:0x1c
max77843_muic_get_adc_value: STATUS1:0x1c
max77843_muic_get_adc_value: ADC:0x1c
max77843_muic_get_chg_typ: STATUS2:0x00
max77843_muic_get_chg_typ: CHGTYP:0x00
load Secure Payload done.
Chip ID : 06b5af03f508 / 0x00003200
EL3 monitor information => Built : 15:35:51, Feb 24 2015
bConfigDescrLock: 1

Could root be possible if utilizing CVE-2021-4154

GitHub - Markakd/CVE-2021-4154: CVE-2021-4154 exploit
CVE-2021-4154 exploit. Contribute to Markakd/CVE-2021-4154 development by creating an account on GitHub.
github.com
It allows privilege escalation on a LOT of linux kernels. There's a new one: https://github.com/Markakd/CVE-2022-2588 that might be even better for this (exploit demo is not currently available). We theoretically could just make a new su file in /etc/xbin with the required data with cat.
Could be viable on a LOT of androids.

I tried it. But it not working my android tablet TAB-A05-BD.
What's wrong?
Code:
TAB-A05-BD:/data/local/tmp $ ./strace ./dirtycred
execve("./dirtycred", ["./dirtycred"], 0x7fc2bfc8a0 /* 21 vars */) = 0
brk(NULL) = 0x31850000
brk(0x31850f90) = 0x31850f90
uname({sysname="Linux", nodename="localhost", ...}) = 0
set_tid_address(0x318500d0) = 28651
set_robust_list(0x318500e0, 24) = 0
rt_sigaction(SIGRTMIN, {sa_handler=0x406e48, sa_mask=[], sa_flags=SA_SIGINFO}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=0x406f08, sa_mask=[], sa_flags=SA_RESTART|SA_SIGINFO}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/data/local/tmp/dirtycred", 4096) = 25
brk(0x31871f90) = 0x31871f90
brk(0x31872000) = 0x31872000
mprotect(0x49b000, 4096, PROT_READ) = 0
getcwd("/data/local/tmp", 4096) = 16
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ca69bd000
rt_sigprocmask(SIG_BLOCK, ~[], [CHLD], 8) = 0
clone(child_stack=0x7ca69c6000, flags=CLONE_VM|CLONE_VFORK|SIGCHLD) = 28652
munmap(0x7ca69bd000, 36864) = 0
rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
wait4(28652, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 28652
rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGQUIT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28652, si_uid=2000, si_status=0, si_utime=0, si_stime=0} ---
fchmodat(AT_FDCWD, "exp_dir", 0777) = 0
chdir("exp_dir") = 0
mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EACCES (Permission denied)
getuid() = 2000
getgid() = 2000
mprotect(0x4c0000, 4096, PROT_NONE) = 0
clone(child_stack=0x5bffc0, flags=CLONE_NEWUSER|CLONE_NEWPID) = -1 EINVAL (Invalid argument)
exit_group(1) = ?
+++ exited with 1 +++