Could root be possible if utilizing CVE-2021-4154 - Fire TV Q&A, Help & Troubleshooting

GitHub - Markakd/CVE-2021-4154: CVE-2021-4154 exploit
CVE-2021-4154 exploit. Contribute to Markakd/CVE-2021-4154 development by creating an account on GitHub.
github.com
It allows privilege escalation on a LOT of linux kernels. There's a new one: https://github.com/Markakd/CVE-2022-2588 that might be even better for this (exploit demo is not currently available). We theoretically could just make a new su file in /etc/xbin with the required data with cat.
Could be viable on a LOT of androids.

I tried it. But it not working my android tablet TAB-A05-BD.
What's wrong?
Code:
TAB-A05-BD:/data/local/tmp $ ./strace ./dirtycred
execve("./dirtycred", ["./dirtycred"], 0x7fc2bfc8a0 /* 21 vars */) = 0
brk(NULL) = 0x31850000
brk(0x31850f90) = 0x31850f90
uname({sysname="Linux", nodename="localhost", ...}) = 0
set_tid_address(0x318500d0) = 28651
set_robust_list(0x318500e0, 24) = 0
rt_sigaction(SIGRTMIN, {sa_handler=0x406e48, sa_mask=[], sa_flags=SA_SIGINFO}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=0x406f08, sa_mask=[], sa_flags=SA_RESTART|SA_SIGINFO}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/data/local/tmp/dirtycred", 4096) = 25
brk(0x31871f90) = 0x31871f90
brk(0x31872000) = 0x31872000
mprotect(0x49b000, 4096, PROT_READ) = 0
getcwd("/data/local/tmp", 4096) = 16
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ca69bd000
rt_sigprocmask(SIG_BLOCK, ~[], [CHLD], 8) = 0
clone(child_stack=0x7ca69c6000, flags=CLONE_VM|CLONE_VFORK|SIGCHLD) = 28652
munmap(0x7ca69bd000, 36864) = 0
rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
wait4(28652, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 28652
rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGQUIT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28652, si_uid=2000, si_status=0, si_utime=0, si_stime=0} ---
fchmodat(AT_FDCWD, "exp_dir", 0777) = 0
chdir("exp_dir") = 0
mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EACCES (Permission denied)
getuid() = 2000
getgid() = 2000
mprotect(0x4c0000, 4096, PROT_NONE) = 0
clone(child_stack=0x5bffc0, flags=CLONE_NEWUSER|CLONE_NEWPID) = -1 EINVAL (Invalid argument)
exit_group(1) = ?
+++ exited with 1 +++

Related

problem with injection dll to cprog.exe process

Call PerformCallback4 failed. Error Number = 6. (The handle is invalid.)
But the handle of the cprog.exe process is right.
source code:
Code:
VOID
InjectDllToCprog()
{
WCHAR DllPath[MAX_PATH] = L"";
CallbackInfo ci;
GetModuleFileName(NULL, DllPath, MAX_PATH);
PWCHAR p = wcsrchr(DllPath, L'\\');
DllPath[p - DllPath] = '\0';
wcscat(DllPath, L"\\CprogInject.dll");
ZeroMemory(&ci, sizeof(ci));
g_hCprog = FindCprogProcess(L"Cprog.exe");
if(g_hCprog != NULL)
{
DWORD dwMode = SetKMode(TRUE);
DWORD dwPerm = SetProcPermissions(0xFFFFFFFF);
FARPROC pFunc = GetProcAddress(GetModuleHandle(L"Coredll.dll"), L"LoadLibraryW");
ci.ProcId = (HANDLE)g_hCprog;
ci.pFunc = (FARPROC)MapPtrToProcess(pFunc, g_hCprog);
ci.pvArg0 = MapPtrToProcess(DllPath, GetCurrentProcess());
g_InjectCprog = (HINSTANCE)PerformCallBack4(&ci, 0, 0, 0);
if(GetLastError() != 0)
DbgError(L"PerformCallBack 执行失败", GetLastError());
SetKMode(dwMode);
SetProcPermissions(dwPerm);
}
}
Anyone can help me?

HTC Compass

Hello experts,
I am using : vs 2008 – MFC – Smart Device – dlg (Windows Mobile)
I tried to write c++ codes to have access to hardware compass parameters on the bases of sample codes I saw in this forum , but I had no success. My codes are :
.h file
public:
struct compass_data
{
short x;
short y;
short z;
short angle;
short d;
short dummy[10]; //just to make sure nothing get overwritten
};
struct compass
{
compass_data* data;
HANDLE h;
HANDLE service;
int init();
short update();
int deinit();
};
.cpp file
struct Crotate1Dlg::compass cmps;
cmps.init();
for(int iii=0; iii<5; iii++)
{
cmps.update();
char buffer1[65];_itoa_s(myangle, buffer1, 65, 10);//myangle is integer and initializes 9999
SetDlgItemText(IDC_mySTATIC1, (CString)buffer1);
}
cmps.deinit();
}
int Crotate1Dlg::compass::init()
{
Crotate1Dlg::compass::h = CreateFile( TEXT( "SEN0:" ), 0, 0, 0, OPEN_EXISTING, 0x80, 0 );
if( Crotate1Dlg::compass::h == INVALID_HANDLE_VALUE || Crotate1Dlg::compass::h == 0 )
{
Crotate1Dlg::compass::h = 0;
Crotate1Dlg::compass::service = RegisterService( TEXT( "SEN" ), 0, TEXT( "HTCSensorService.dll" ), 1 );
if( Crotate1Dlg::compass::service == 0 )
{
return 0;
}
Crotate1Dlg::compass::h = CreateFile( TEXT( "SEN0:" ), 0, 0, 0, OPEN_EXISTING, 0x80, 0 );
if( Crotate1Dlg::compass::h == INVALID_HANDLE_VALUE || Crotate1Dlg::compass::h == 0 )
{
Crotate1Dlg::compass::h = 0;
return 0;
}
}
if( 0 == DeviceIoControl( Crotate1Dlg::compass::h, DIO_INIT, 0, 0, 0, 0, 0, 0 ))
{
CloseHandle( Crotate1Dlg::compass::h );
Crotate1Dlg::compass::h = 0;
return 0;
}
return true;
}
short Crotate1Dlg::compass::update()
{
if( !Crotate1Dlg::compass::h )
{
return 0;
}
DWORD read = 0;
if( 0 == DeviceIoControl( Crotate1Dlg::compass::h, DIO_READ, 0, 0, Crotate1Dlg::compass::data, 5, &read, 0 ))
{
myangle = (int)Crotate1Dlg::compass::data->angle;
return 0;
}
else
{
return 1;
}
}
int Crotate1Dlg::compass::deinit()
{
if( Crotate1Dlg::compass::h )
{
if( 0 == DeviceIoControl( Crotate1Dlg::compass::h, 0x3000002, 0, 0, 0, 0, 0, 0 ))
{
CloseHandle( Crotate1Dlg::compass::h );
Crotate1Dlg::compass::h = 0;
return 0;
}
}
return 1;
}
This code compiles fine, deploys on emulator with no error (does not give proper output of course) , but gives error on the device (HTC HT2) . I am sure I am doing something wrong , please correct me.
Thank you in advance.
any screenshots ?
HTC compass
All I get on screen is : "A problem has occured with Test1.exe" then asks me to report to Microsoft .

BCM21553 files of vodafone samrt II

the Vodafone Smart II have the same spec as our y
and 2.3.7 gb is pre-installed with it
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
[/SIZE][/B][/CENTER]
Here is the Unpacked system.img from the stock Italian ROM
http://www.mediafire.com/?khpdey37edwvzlv
and custom rom of it
http://forum.cyanogenmod.com/topic/...el-v860-ota-update2-integrated-rom-with-root/
Click to expand...
Click to collapse
Features
OS Android OS, v2.3.7 (Gingerbread)
Chipset BCM21553
CPU 832 MHz ARMv6
Click to expand...
Click to collapse
Is, that cm7?
sent by my Y using jelly blast rom frm XDA Premium
rmp07 said:
Is, that cm7?
sent by my Y using jelly blast rom frm XDA Premium
Click to expand...
Click to collapse
It should be 2.3.7 AOSP cause no manufacture release CM Rom
We can take drivers from here!!
Sent from my GT-S5360 using XDA
hell_lock said:
We can take drivers from here!!
Sent from my GT-S5360 using XDA
Click to expand...
Click to collapse
yeah ! that's what I attached in 1st post I think
also please have a lokk at this
See the 2 image file , look like our present graphics ​
Click to expand...
Click to collapse
in that vt file
Code:
# RADVISION H.323/3G-324M Stack Configuration File
#
# Value encodings:
# '' - String (and asciiz is not appended)
# \"\" - BMP string of ASCII characters
# [] - Hex octet string
# <> - IP
# {} - Object ID
# % - Bit string
# Other - Integer
1 ApplicationConfig = 0
+ AutoAnswer = 0
UseWnsrp = 1
UseACP = 0
UseMONA = 0
UseAEC = 0
mpcMediaTypes = 4 #0:Unknown 1:AMR 2:AMRWB 3:H264 4:MPEG4 5:H263
UseMPCRxOnly = 0
AcpAudioEntry = 0
AcpVideoEntry = 0
MultipleH245Messages = 1
AutoAcceptChannels = 1
AutoEarlyMES = 0
muxLevel = 3 # Rv3G324mCallMuxLevel2
AutoCaps = 1 # it will be modified to TRUE
AutoCapsReplayMedia = 0
AutoOpenChannels = 1
autoChannel_Audio_Use = 1
autoChannel_Audio_rate = 31
autoChannel_Audio_name = 'amr'
autoChannel_Audio_alConfig = 'AL2 WithSequenceNumber'
autoChannel_Video_Use = 1
autoChannel_Video_rate = 224
autoChannel_Video_name = 'mpeg4'
autoChannel_Video_alConfig = 'AL2 WithSequenceNumber'
autoChannel_Video_bNullData = 0
autoChannel_Video_bIsDuplex = 0
VideoChannelBufferNum = 40
VideoChannelBufferFreeNum = 20
AudioChannelBufferNum = 15
TransportWriteInterval = 20 # loop interval of read/write thread in transport module, 20ms, 40ms..., maximum is 100ms
TransportDoFlowControl = 1 # if transport thread do flow control
LogStreamBuffers = 0
LogStreamBufferSize = 2097152 #2*1024*1024
ReflectTransportBuffers = 1
isdnBufferCorrectionSize = 0 #16
LogMode = 1 # 0:None,1:Screen,2:File, 3:Memory
LogMemorySize = 1048576 # 1024K
LogFileName = '/data/vt/3gapp.log'
LogFileSize = 524288 #512K
LogLevelInfo = 127
LogLevelDebug = 1
LogLevelError = 1
LogModule = 7 # 1:Application, 2:Transport, 4:Stack, 8:AudioEnc, 16:AudioDec, 32:VideoEnc, 64:VideoDec
VideoFastUpdatePicture = 1
VideoEncodeIntraInterval = 32
VideoEncodeFrameRate = 15
VideoEncodeTargetBitRate = 48000
VideoEncodeDelayTime = 200
VideoDecodeStreamMode = 0
VendorIdentificationMes = 1
VendorIdent-CountryCode = 97
VendorIdent-Extension = 0
VendorIdent-ManufacturerCode = 0
VendorIdent-ProductNumber = 'SK-700'
VendorIdent-VersionNumber = 'SKT 14 v1.37'
VendorIdent-Match = '3GApp'
LipSyncTime = 0
SendThreadPriority = 80
RecvThreadPriority = -1
CameraRate = 8
RingDelayTime = 2000 # ms
BlockVideoDelay = 500 #ms
AutoDropTimeout = 20 #s
CallDurationLimitation = 0 #second
MuxLevelSyncTimeout = 10000;
1 3g324mSystem = 0
+ maxCalls = 4
maxTransmittingChannels = 4
maxReceivingChannels = 4
allocations = 0
+ controlBufferSize = 120
controlNumOfBuffers = 40
logicalChannelBufferSize = 2000
logicalChannelNumOfBuffers = 100
alxmBufferSize = 4000
alxmNumOfBuffers = 40
alxmInterleavingBufferSize = 4000
alxmInterleavingNumOfBuffers = 10
maxAsn1BufferSize = 6000
ach245NumOfBuffers = 15
- h223Params = 0
+ sendQueueSizePerChannel = 70
srpTimer = 2000
nsrpTimer = 200
al3RetransmissionTimer = 2000
numOfAlSduSaved = 100
n400Counter = 30
n402Counter = 5
2 watchdog
+ interval = 10
1 h245 = 0
2 masterSlave = 0
+ terminalType = 130
timeout = 1000
2 capabilities = 0
+ terminalCapabilitySet = 0
+ sequenceNumber = 1
protocolIdentifier = [00]
multiplexCapability = 0
+ h223Capability = 0
+ transportWithI-frames = 0
videoWithAL1 = 0
videoWithAL2 = 1
videoWithAL3 = 1
audioWithAL1 = 0
audioWithAL2 = 1
audioWithAL3 = 0
dataWithAL1 = 0
dataWithAL2 = 0
dataWithAL3 = 0
maximumAl2SDUSize = 512
maximumAl3SDUSize = 512
maximumDelayJitter = 10
h223MultiplexTableCapability = 0
+ basic = 0
- maxMUXPDUSizeCapability = 1
nsrpSupport = 1
mobileOperationTransmitCapability = 0
+ modeChangeCapability = 0
h223AnnexA = 1
h223AnnexADoubleFlag = 1
h223AnnexB = 1
h223AnnexBwithHeader = 1
4 capabilityTable = 0
#############################
# Video Codecs
#############################
# MPEG
5 * = 0 # Sequence
+ capabilityTableEntryNumber = 4
capability = 0
+ receiveAndTransmitVideoCapability = 1
+ genericVideoCapability = 0
+ capabilityIdentifier = 0
+ standard = {itu-t recommendation h 245 1 0 0}
- maxBitRate = 400
nonCollapsing = 1
10 * = 0
+ parameterIdentifier = 0
+ standard = 0
- parameterValue = 0
+ unsignedMax = 8
10 * = 0
+ parameterIdentifier = 0
+ standard = 1
- parameterValue = 0
+ unsignedMax = 1
# H.263
5 * = 0
+ capabilityTableEntryNumber = 3
capability = 0
+ receiveAndTransmitVideoCapability = 1
+ h263VideoCapability = 0
+ qcifMPI = 2
maxBitRate = 400
unrestrictedVector = 0
arithmeticCoding = 0
advancedPrediction = 0
pbFrames = 0
temporalSpatialTradeOffCapability = 1
#############################
# Audio Codecs
#############################
# AMR
5 * = 0
+ capabilityTableEntryNumber = 1
capability = 0
+ receiveAndTransmitAudioCapability = 1
+ genericAudioCapability = 0
+ capabilityIdentifier =
+ standard = {itu-t recommendation h 245 1 1 1}
- maxBitRate = 122
#define maxsdu
collapsing = 1
10 * = 0
+ parameterIdentifier = 0
+ standard = 0
- parameterValue = 0
+ unsignedMin = 1
# g.723.1
5 * = 0
+ capabilityTableEntryNumber = 2
capability = 0
+ receiveAudioCapability = 0
+ g7231 = 0
+ maxAl-sduAudioFrames = 6
silenceSuppression = 0
4 capabilityDescriptors = 0
+ * = 0
+ capabilityDescriptorNumber = 0
simultaneousCapabilities = 0
+ * = 0
+ * = 3
* = 4
- * = 0
+ * = 1
* = 2
3 timeout = 100
- channels = 0
3 * = 0
+ name = 'amr'
dataType = 0
+ audioData = 0
+ genericAudioCapability = 0
+ capabilityIdentifier = 0
+ standard = { itu-t(0) recommendation(0) h(8) 245 generic-capabilities(1) audio(1) amr(1) }
- maxBitRate = 122
collapsing = 0
+ * = 0
+ parameterIdentifier = 0
+ standard = 0
- parameterValue = 0
+ unsignedMin = 1
3 * = 0
+ name = 'mpeg4'
dataType = 0
+ videoData = 0
+ genericVideoCapability = 0
+ capabilityIdentifier = 0
+ standard = { itu-t(0) recommendation(0) h(8) 245 generic-capabilities(1) video(0) ISO-IEC14496-2(0) }
- maxBitRate = 400
nonCollapsing
8 * = 0
+ parameterIdentifier = 0
+ standard = 0
- parameterValue = 0
+ unsignedMax = 8
8 * = 0
+ parameterIdentifier = 0
+ standard = 1
- parameterValue = 0
+ unsignedMax = 1
8 * = 0
+ parameterIdentifier = 0
+ standard = 2
- parameterValue = 0
+ octetString = [000001b008000001b509000001000000012000844014282c2090a31f]
3 * = 0
+ name = 'h263'
dataType = 0
+ videoData = 0
+ h263VideoCapability = 0
+ qcifMPI = 2
maxBitRate = 400
unrestrictedVector = 0
arithmeticCoding = 0
advancedPrediction = 0
pbFrames = 0
temporalSpatialTradeOffCapability = 0
errorCompensation = 0
Code:
[CENTER][B][FONT="Arial Black"][SIZE="4"]in modules folder [/SIZE][/FONT][/B][/CENTER]
bcm_headsetsw.ko
brcm_switch.ko
dhd.ko
gememalloc.ko
h6270enc.ko
hx170dec.ko
Code:
[CENTER][B][FONT="Arial Black"][SIZE="4"]in HW folder [/SIZE][/FONT][/B][/CENTER]
acoustics.default.so
alsa.default.so
gps.bcm21553.so
gralloc.default.so
lights.bcm21553.so
sensors.default.so
Code:
[CENTER][B][FONT="Arial Black"][SIZE="4"]in egl folder [/SIZE][/FONT][/B][/CENTER]
egl.cfg
libGLES_android.so
libGLES_hgl.so
So the phone is same like ours but does it have any development on it such as aosp,cm etc. If yes then post the link.. We can try our luck on it
Sent from my GT-S5360 using XDA
try this
2.3.7 AOSP based ROM
http://forum.cyanogenmod.com/topic/57455-vodafone-smart-aka-alcatel-v860-ota-update2-integrated-rom-with-root/
or
stock rom
http://www.mediafire.com/?khpdey37edwvzlv
amal das said:
the Vodafone Smart II have the same spec as our y
and 2.3.7 gb is pre-installed with it
[/SIZE][/B][/CENTER]
Click to expand...
Click to collapse
pre-compiled modules won't help
Well they can work for us! I have an idea...
Sent from my GT-S5360 using XDA
hell_lock said:
Well they can work for us! I have an idea...
Sent from my GT-S5360 using XDA
Click to expand...
Click to collapse
I am listening
Will report if it works out... I dont want u guys to soft brick ur phone.. alot of testing is needed in this process...
there are some files missing in stock rom
like framework-res.apk also some bin files even build.prop toooo
you better download the rom from cyanogen form
http://forum.cyanogenmod.com/topic/...el-v860-ota-update2-integrated-rom-with-root/
hell_lock said:
Will report if it works out... I dont want u guys to soft brick ur phone.. alot of testing is needed in this process...
Click to expand...
Click to collapse
well I am not going to test it on my device for sure. Just wanted to know what is your idea.
Bricking word hurts me a lot terrible experience.
I will play with the drivers... First I will test the drivers on my stock rom. If they work, I will try the aosp drivers on stock rom, if they still work then I will put them in cm7 and test it. It will surely work.
Sent from my GT-S5360 using XDA
hell_lock said:
I will play with the drivers... First I will test the drivers on my stock rom. If they work, I will try the aosp drivers on stock rom, if they still work then I will put them in cm7 and test it. It will surely work.
Sent from my GT-S5360 using XDA
Click to expand...
Click to collapse
Almost identical specs so is worth try porting.
therefore work has began :fingers-crossed:
Zackconsole said:
Almost identical specs so is worth try porting.
therefore work has began :fingers-crossed:
Click to expand...
Click to collapse
U doin it or should i try messing it up?
Sent from my GT-S5360 using XDA
hell_lock said:
U doin it or should i try messing it up?
Sent from my GT-S5360 using XDA
Click to expand...
Click to collapse
Doing it hope no anyone come and disturb me..or else i got to get myself lock into another room again!
Zackconsole said:
Doing it hope no anyone come and disturb me..or else i got to get myself lock into another room again!
Click to expand...
Click to collapse
will wait for your ported test version !
amal das said:
will wait for your ported test version !
Click to expand...
Click to collapse
Checkout your inbox 30min/1 hour depent on my internet connection man.
It's malaysia.Famous for slow internet (RM150 Internet = Get rm30 Internet) :crying:

[R&D] Serial dump

Here is a serial dump from the processor may come to some use this was during boot between bootloader to normal boot. I'm unable to get it to dump again.
Code:
Samsung S-Boot 4.0 for SM-G920P (Mar 29 2015 - 21:52:54)
EXYNOS7420 EVT 1.3 (Base on ARM CortexA53)
3048MB / 0MB / Rev 10 / G920PVPU1AOCF / (PKG_ID 0x0) / LOT_ID N2
XH4
BOOTLOADER VERSION : G920PVPU1AOCF
__if_pmic_rev_init - MUIC API is not ready!
MON: 0x3(0)
MON[0] = (0)[0x1e, 0x60]
MON[1] = (1)[0x20, 0x40]
MON[2] = (2)[0x3b, 0xdc]
MON[3] = (3)[0x22, 0x4d]
MON[4] = (4)[0x3b, 0xd5]
MON[5] = (5)[0x24, 0x3d]
MON[6] = (6)[0x15, 0x44]
MON[7] = (7)[0x0c, 0x07]
pmic_asv_init
(ASV_TBL_BASE+0x00)[11:0] bigcpu_asv_group = 2730
(ASV_TBL_BASE+0x00)[15:12] bigcpu_ssa0 = 0
(ASV_TBL_BASE+0x00)[27:16] littlecpu_asv_group = 2730
(ASV_TBL_BASE+0x00)[31:28] littlecpu_ssa0 = 0
(ASV_TBL_BASE+0x04)[11:0] g3d_asv_group = 2184
(ASV_TBL_BASE+0x04)[15:12] g3d_ssa0 = 0
(ASV_TBL_BASE+0x04)[27:16] mif_asv_group = 2730
(ASV_TBL_BASE+0x04)[31:28] mif_ssa0 = 0
(ASV_TBL_BASE+0x08)[11:0] int_asv_group = 2730
(ASV_TBL_BASE+0x08)[15:12] int_ssa0 = 0
(ASV_TBL_BASE+0x08)[27:16] cam_disp_asv_group = 2730
(ASV_TBL_BASE+0x08)[31:28] cam_disp_ssa0 = 0
(ASV_TBL_BASE+0x0C)[3:0] dvfs_asv_table_version = 11
(ASV_TBL_BASE+0x0C)[4] asv_group_type = 0
(ASV_TBL_BASE+0x0C)[7:5] reserved01 = 0
(ASV_TBL_BASE+0x0C)[8] shift_type = 0
(ASV_TBL_BASE+0x0C)[9] ssa1_enable = 0
(ASV_TBL_BASE+0x0C)[10] ssa0_enable = 0
(ASV_TBL_BASE+0x0C)[15:11] reserved02 = 0
(ASV_TBL_BASE+0x0C)[16] asv_method = 1
(ASV_TBL_BASE+0x0C)[31:17] reserved03 = 0
(ASV_TBL_BASE+0x10)[3:0] main_asv_group = 0
(ASV_TBL_BASE+0x10)[7:4] main_asv_ssa = 0
(ASV_TBL_BASE+0x10)[11:8] bigcpu_ssa1 = 0
(ASV_TBL_BASE+0x10)[15:12] littlecpu_ssa1 = 0
(ASV_TBL_BASE+0x10)[19:16] g3d_ssa1 = 0
(ASV_TBL_BASE+0x10)[23:20] mif_ssa1 = 0
(ASV_TBL_BASE+0x10)[27:24] int_ssa1 = 0
(ASV_TBL_BASE+0x10)[31:28] cam_disp_ssa1 = 0
(ASV_TBL_BASE+0x14)[8:0] bigcpu_ssa_ema = 0
(ASV_TBL_BASE+0x14)[17:9] littlecpu_ssa_ema = 0
(ASV_TBL_BASE+0x14)[26:18] g3d_ssa_ema = 0
(ASV_TBL_BASE+0x14)[31:27] reserved04 = 0
chip_status = b, bin2_efuse = 0
muic_register_max77843_apis
muic_is_max77843 chip_id:0x43 muic_id:0xb5 -> matched.
MUIC rev = MAX77843(181)
init_multi_microusb_ic Active MUIC 0xb5
max77843_init_microusb_ic: MUIC: CDETCTRL:0x2d
max77843_init_microusb_ic: MUIC: CONTROL1:0x1b
max77843_init_microusb_ic: MUIC: CONTROL2:0x3b
max77843_muic_get_adc_value: STATUS1:0x1c
max77843_muic_get_adc_value: ADC:0x1c
max77843_muic_get_adc_value: STATUS1:0x1c
max77843_muic_get_adc_value: ADC:0x1c
max77843_muic_get_chg_typ: STATUS2:0x00
max77843_muic_get_chg_typ: CHGTYP:0x00
load Secure Payload done.
Chip ID : 06b5af03f508 / 0x00003200
EL3 monitor information => Built : 15:35:51, Feb 24 2015
bConfigDescrLock: 1

Question SetEdit Tweaks

Does this actually work?
All In One Tweaks Except Kernel (Global Table)
up_threshold = 90
up_threshold_any_cpu_load = 85
up_threshold_multi_core = 85
sampling_rate = 75000
sampling_down_factor = 2
down_differential = 10
freq_step = 35
sched_boost = 0
perf_cpu_time_max_percent = 5
sched_autogroup_enabled = 1
sched_child_runs_first = 1
sched_tunable_scaling = 0
sched_latency_ns = 1000000
sched_min_granularity_ns = 130000
scaling_governor = performance
sched_wakeup_granularity_ns = 750000
sched_migration_cost_ns = 3000000
sched_min_task_util_for_colocation = 0
sched_nr_migrate = 8
sched_schedstats = 0
touchboost = 1
boost_ms = 100
sched_boost_on_input = 100
stune_background_prefer_idle = 1
stune_foreground_prefer_idle = 1
stune_topapp_prefer_idle = 1
stune_topapp_schedtune_boost = 1
stune_global_prefer_idle = 1
stune_rt_prefer_idle = 1
use_deepest_state = 1
boost = true
power_efficient = false
persist.sys.ui.hw = 1
debug.egl.buffcount = 4
debug.egl.hw = 1
debug.hwui.renderer = skiagl
gpufreq_limited_thermal_ignore = 1
dvfs_enable = 1
simple_gpu_activate = 1
adreno_idler_idleworkload = 6000
adreno_idler_downdifferential = 15
adreno_idler_idlewait = 15
adrenoboost = 2
throttling = 0
max_pwrlevel = 0
force_no_nap = 1
bus_split = 0
force_bus_on = 1
force_clk_on = 1
force_rail_on = 1
add_random =0
nomerges = 2
rq_affinity = 2
ro.sf.compbypass.enable = 0
ro.config.enable.hw_accel = true
debug.gralloc.enable_fb_ubwc = 1
dev.pm.dyn_samplingrate = 1
ro.vold.umsdirtyratio = 20
fs.lease-break-time = 20
fs.file-max = 524288
fs.nr_open = 1048576
fs.inotify.max_queued_events = 32000
fs.inotify.max_user_instances = 256
fs.inotify.max_user_watches = 10240
vold.post_fs_data_done = 1
ro.vendor.qti.sys.fw.bservice_enable = true
ro.config.low_ram = true
sys.use_fifo_ui = 1
GPUTUNER_SWITCH = true
All In One Kernel Tweaks (Global Table)
kernel.timer_migration = 1
kernel.panic = 30
kernel.panic_on_oops = 1
kernel.msgmni = 2048
kernel.msgmax = 65536
kernel.random.read_wakeup_threshold = 128
kernel.random.write_wakeup_threshold = 256
kernel.shmmni = 4096
kernel.shmall = 2097152
kernel.shmmax = 268435456
kernel.sem = 500 512000 64 2048
kernel.sched_features = 24189
kernel.hung_task_timeout_secs = 30
kernel.sched_latency_ns = 1000000
kernel.sched_min_granularity_ns = 100000
kernel.sched_wakeup_granularity_ns = 2000000
kernel.sched_compat_yield = 1
kernel.sched_shares_ratelimit = 256000
kernel.sched_child_runs_first = 0
kernel.sched_child_runs_first = 1
kernel.sched_enable_thread_grouping = 1
kernel.sched_autogroup_enabled = 1
kernel.perf_cpu_time_max_percent = 5
kernel.sched_schedstats = 0
kernel.sched_nr_migrate = 64
kernel.sched_min_task_util_for_colocation = 50
kernel.sched_min_task_util_for_boost = 25
kernel.sched_migration_cost_ns = 1000000
kernel.sched_min_granularity_ns = 1000000
kernel.sched_tunable_scaling = 0
kernel.sched_upmigrate = 80 80
kernel.sched_group_upmigrate = 80
kernel.sched_group_downmigrate = 20
kernel.threads-max = 524288
kernel.sched_downmigrate = 20 20
vm.min_free_order_shift = 4
vm.laptop_mode = 0
vm.block_dump = 0
vm.compact_unevictable_allowed = 0
vm.dirty_background_ratio = 10
vm.dirty_ratio = 30
vm.dirty_expire_centisecs = 1000
vm.dirty_writeback_centisecs = 0
vm.extfrag_threshold = 750
vm.oom_dump_tasks = 0
vm.page-cluster = 0
vm.reap_mem_on_sigkill = 1
vm.stat_interval = 10
vm.swappiness = 80
vm.vfs_cache_pressure = 200
hispeed_load = 80
input_boost_freq = 1.4 GHz
input_boost_ms = 250 ms
iostats = 0
readahead = 0
nr_requests = 512
Oblivon23 said:
Does this actually work?
All In One Tweaks Except Kernel (Global Table)
up_threshold = 90
up_threshold_any_cpu_load = 85
up_threshold_multi_core = 85
sampling_rate = 75000
sampling_down_factor = 2
down_differential = 10
freq_step = 35
sched_boost = 0
perf_cpu_time_max_percent = 5
sched_autogroup_enabled = 1
sched_child_runs_first = 1
sched_tunable_scaling = 0
sched_latency_ns = 1000000
sched_min_granularity_ns = 130000
scaling_governor = performance
sched_wakeup_granularity_ns = 750000
sched_migration_cost_ns = 3000000
sched_min_task_util_for_colocation = 0
sched_nr_migrate = 8
sched_schedstats = 0
touchboost = 1
boost_ms = 100
sched_boost_on_input = 100
stune_background_prefer_idle = 1
stune_foreground_prefer_idle = 1
stune_topapp_prefer_idle = 1
stune_topapp_schedtune_boost = 1
stune_global_prefer_idle = 1
stune_rt_prefer_idle = 1
use_deepest_state = 1
boost = true
power_efficient = false
persist.sys.ui.hw = 1
debug.egl.buffcount = 4
debug.egl.hw = 1
debug.hwui.renderer = skiagl
gpufreq_limited_thermal_ignore = 1
dvfs_enable = 1
simple_gpu_activate = 1
adreno_idler_idleworkload = 6000
adreno_idler_downdifferential = 15
adreno_idler_idlewait = 15
adrenoboost = 2
throttling = 0
max_pwrlevel = 0
force_no_nap = 1
bus_split = 0
force_bus_on = 1
force_clk_on = 1
force_rail_on = 1
add_random =0
nomerges = 2
rq_affinity = 2
ro.sf.compbypass.enable = 0
ro.config.enable.hw_accel = true
debug.gralloc.enable_fb_ubwc = 1
dev.pm.dyn_samplingrate = 1
ro.vold.umsdirtyratio = 20
fs.lease-break-time = 20
fs.file-max = 524288
fs.nr_open = 1048576
fs.inotify.max_queued_events = 32000
fs.inotify.max_user_instances = 256
fs.inotify.max_user_watches = 10240
vold.post_fs_data_done = 1
ro.vendor.qti.sys.fw.bservice_enable = true
ro.config.low_ram = tru
sys.use_fifo_ui = 1
GPUTUNER_SWITCH = true
All In One Kernel Tweaks (Global Table)
kernel.timer_migration = 1
kernel.panic = 30
kernel.panic_on_oops = 1
kernel.msgmni = 2048
kernel.msgmax = 65536
kernel.random.read_wakeup_threshold = 128
kernel.random.write_wakeup_threshold = 256
kernel.shmmni = 4096
kernel.shmall = 2097152
kernel.shmmax = 268435456
kernel.sem = 500 512000 64 2048
kernel.sched_features = 24189
kernel.hung_task_timeout_secs = 30
kernel.sched_latency_ns = 1000000
kernel.sched_min_granularity_ns = 100000
kernel.sched_wakeup_granularity_ns = 2000000
kernel.sched_compat_yield = 1
kernel.sched_shares_ratelimit = 256000
kernel.sched_child_runs_first = 0
kernel.sched_child_runs_first = 1
kernel.sched_enable_thread_grouping = 1
kernel.sched_autogroup_enabled = 1
kernel.perf_cpu_time_max_percent = 5
kernel.sched_schedstats = 0
kernel.sched_nr_migrate = 64
kernel.sched_min_task_util_for_colocation = 50
kernel.sched_min_task_util_for_boost = 25
kernel.sched_migration_cost_ns = 1000000
kernel.sched_min_granularity_ns = 1000000
kernel.sched_tunable_scaling = 0
kernel.sched_upmigrate = 80 80
kernel.sched_group_upmigrate = 80
kernel.sched_group_downmigrate = 20
kernel.threads-max = 524288
kernel.sched_downmigrate = 20 20
vm.min_free_order_shift = 4
vm.laptop_mode = 0
vm.block_dump = 0
vm.compact_unevictable_allowed = 0
vm.dirty_background_ratio = 10
vm.dirty_ratio = 30
vm.dirty_expire_centisecs = 1000
vm.dirty_writeback_centisecs = 0
vm.extfrag_threshold = 750
vm.oom_dump_tasks = 0
vm.page-cluster = 0
vm.reap_mem_on_sigkill = 1
vm.stat_interval = 10
vm.swappiness = 80
vm.vfs_cache_pressure = 200
hispeed_load = 80
input_boost_freq = 1.4 GHz
input_boost_ms = 250 ms
iostats = 0
readahead = 0
nr_requests = 512
Click to expand...
Click to collapse
Nah fake, except GPUTUNER...
A lot of these are goofy af so I believe it's fake

Categories

Resources