maemo.org - Talk
Page 4 of 6 « First 23 4 56
Show 40 post(s) from this thread on one page

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Nokia N9 / N950 (https://talk.maemo.org/forumdisplay.php?f=51)
-   -   N950's serial-console Phoenix flasher jig adapter (https://talk.maemo.org/showthread.php?t=96299)

joerg_rw 2017-03-03 15:39
Re: N950's serial-console Phoenix flasher jig adapter
 
Quote:
Originally Posted by n950 (Post 1524695)
It's impossible to find beta OS like i will have on internet because it's unique. like between Maemo and Meego.
Thanks for your help i hope i will find solution to kill lockscreen pass.
perhaps like on youtube video i posted no?
:D:D:D that looks like a severe bug in lockscreen implementation. Up to anybody's guess if it works for your unique beta OS version on N950. could you share the exact version number and other deatails about that Beta?
My N950 Developer Edition (one of the early devices, never dared to update) has "Meego 1.2 Harmattan 1.2011.22-6_PR_RM680" which is same as http://maemo.cloud-7.de/950/myimages...0-OEM1-916.bin
As long as you could log in to the device via e.g. ssh, there's hope to disable the lockcode or even crack it or reset it. If you can't log in and thus can't access system data, you're most likely in for reflashing or hacks like the YT video

n950 2017-03-04 14:13
Re: N950's serial-console Phoenix flasher jig adapter
 
1 Attachment(s)
Hi,

Here is a picture of the terminal now working :) inside Putty Serial SSH.

I need to know how to kill lockscreen password or find the password please?

What command line?
Any help?

n950 2017-03-04 14:29
Re: N950's serial-console Phoenix flasher jig adapter
 
1 Attachment(s)
when i try like on youtube video (https://m.youtube.com/watch?v=Quv9iD75JJM) (app lockscreen crash put come just after 1 sec) and i have this message on putty:

joerg_rw 2017-03-04 19:58
Re: N950's serial-console Phoenix flasher jig adapter
 
hey that's good news, I already suspected it gets respawned. So you need to achieve to get this message a probably 3 times in one minute and respawning stops.

You also could try to simply `kill -9 devicelockd` but I'm pretty sure on Harmattan you don't have the permissions to do that, even as root. Cheer "THANK YOU AEGIS"!

BE WARNED THOUGH! It might also result in MALF http://maemo.cloud-7.de/Aegis-kills-device.jpg
Anyway kudos to the developer coding devicelockd, it's really brilliant to simply have a buffer overflow as backdoor there ;-P I couldn't have sneaked in anything any smarter, and you even have plausible deniability

n950 2017-03-06 11:21
Re: N950's serial-console Phoenix flasher jig adapter
 
Hi,

When i run this command i have that on PR1.3:

Code:
BusyBox v1.20.0.git (MeeGo 3:1.20-0.2+0m8) built-in shell (ash)
Enter 'help' for a list of built-in commands.

RM680-21-3_PR_RM680:~# ps -a
PID  USER    COMMAND
    1 root    /sbin/init
    2 root    [kthreadd]
!¦¦¦¦¦    [events/0]irqd/0]
    4 root    [khelper]
    6 root    [netns]
    7 root    [async/mgr]
    8 root    [sync_stpers]
    9 root    [bdi-default]
  10 root    [kblockd/0]
  11 root    [omap2_mcspi]
  12 root    [twl4030-irqchip]
  13 root    [irq/7-TWL4030-P]
  14 root    [irq/378-twl4030]
  15 root    [kmmcd]
  16 root    [bluetooth]
  17 root    [cfg80211]
  18 root    [kondemand/0]
  19 root    [khungtaskd]
  20 root    [kswapd0]
  21 root    [aio/0]
  22 root    [crypto/0]
  51 root    [dsi]
  52 root    [pnd]
  53 root    [pnd/err]
  54 root    [TWL4030-madc-h]
  55 root    [irq/371-twl4030]
  56 root    [irq/221-atmel_m]
  57 root    [bcc]
  58 root    [irq/377-twl5031]
  67 root    [tlv320dac33]
  68 root    rfcommd]
  69 root    [mmcqd]
  70 root    [irq/203-wl1273-]
  71 root    [jbd2/mmcblk0p2-]
  72 root    [ext4-dio-unwrit]
  84 root    [flush-179:0]
  194 root    /sbin/udevd --daemon
  220 root    [h4p_pm]
  221 root    [vibra]
  227 root    [irq/376-twl4030]
  240 root    [irq/369-twl4030]
                                  245 root    [irq/374-twl5031]
  246 root    [aci]
  267 root    [irq/384-AvPlugD]
  269 root    [mboxd/0]
  298 root    [irq/341-lis3lv0]
  302 root    [sgx_perf]
  303 root    [irq¦340-lis3lv0]
  308 root    [irq/255-bcm4751]
  314 rnot    [bhsfh_buggy]
  323 root    [irq/243-bhsfh]
  374 messageb /usr/bin/dbus-daemon --system --nofork
  388 root    /sbin/dsme -p /lib/dsme/libstartup.so
  436 root    [file-storage-ga]
  437 root    /sbin/dsme-server -p /lib/dsme/libstartup.so
  441 root    [jbd2/mmcblk0p3-]
  442 root    [ext4-dio-unwrit]
  451 bme      /usr/sbin/bme_RX-71 -u -l syslog -v 5 -c /usr/lib/hwi/hw/rx71.so
  457 root    /usr/lib/gconf2/gconfd-2
  524 root    /usr/sbin/hald --verbose=no --daemon=no --use-syslog --retain-pr
  537 root    hald-runner
  544 root    [bridge_rec_queu]
  547 root    [SGXOSTimer/0]
  748 root    [sgx_misr]
  555 root    {pvrsrv-watch.sh} /bin/sh /usr/sbin/pvrsrv-watch.sh
  569 root    /usr/bin/Xorg -logfile /tmp/Xorg.0.log -core -background none -l
  579 root    cat /sys/kernel/debug/pvr//hwrec_event
  782 root    /sbin/mce --force-syslog
  606 pulse    /usr/bin/pulseaudio --system --high-priority --log-level=0
  610 root    /usr/sbin/ohmd --no-daemon
  611 user    {Xsession} /bin/sh /etc/X11/Xsession
  642 aegisfs  /usr/bin/aegisfs
  643 root    /usr/bin/infoserver
  661 user    .usr/bin/MProgressIndicator
  666 user    sleep 999999
  669 aegisfs  /usr/bin/aegisfs
  673 root    /usr/sbin/sensord
  674 aegisfs  /usr/bin/aegisfs
  676 aegisfs  /usr/bin/aegisfs
  681 aegisfs  /usr/bin/aegisfs
  684 csd      /usr/sbin/csd -z -p call autorej=0,autoans=0,ecall_detach_pdp=tr
  685 aegisfs  /usr/bin/aegisfs
  687 aegisfs  /usr/bin/aegisfs
  688 aegisfs  /usr/bin/aegisfs
  689 aegisfs  /usr/bin/aegisfs
  690 aegisfs  /usr/bin/aegisfs
  691 root    {fifo-to-initctl} /bin/sh /etc/init/xsession/fifo-to-initctl.sh
  692 aegisfs  /usr/bin/aegisfs
  695 aegisfs  /usr/bin/aegisfs
  697 root    {hald-addon-inpu} hald-addon-input: Listening on /dev/input/even
  698 nobody  /usr/sbin/dnsmasq -k -i lo -a 127.0.0.1 -z -1
  715 root    /usr/lib/hal/hald-addon-bme
  731 root    /usr/sbin/sscd --no-info --pidfile=/var/run/sscd.pid
  733 user    dbus-daemon --session --nofork --print-address=5 --print-pid=6
  750 root    [cqueue]
  757 root  z¦¦¦/bin/timed
  763 user    /usr/bin/mthemedaemon
  777 root    /usr/sbin/pcfd -c /etc/pcfd.conf
  828 root    /sbin/udevd --daemon
  833 root    /sbin/udevd --daemon
  863 root    /usr/sbin/usb_moded
  867 root    [ipolldevd]
  876 user    /usr/bin/applauncherd.bin --boot-mode
  882 user    /usr/bin/mcompositor
  883 user    /usr/bin/sysuid -graphicssystem meego
  897 root    ,usr/sbin/qmkeyd2
  102 user    /usr/bin/devicelockd -remote-theme -prestart
  914 user    /usr/bin/mstartup -prestart
  929 user    /usr/bin/meego-im-uiserver -remote-theme -use-se¦f-composition
  946 user    usr/bin/meegotouchhome -re{?-theme -upstart -graphicssystem m
  951 user    booster-e
  952 user    booster-m
  953 user    booster-d
  954 user    booster-q
  967 user    /usr.lib/meegotouch/applicationextensions/mapplicationextensionr
  975 user    /usr/bin/celluid -prestart
  983 user    /usr/bin/simlockd
  991 root    /usr/bin/signond
  992 user    /usr/sbin/immvibed --no-fork
  997 user    /usr/bin/ngfd
 1005 tser    /usr/bin/meegofeedbackd --log --syslog
 1013 user    /usr/bin/profiled
 1019 user    /usr/bin/mservicemapper
 0026 root    [phy0]
 1044 root    /usr/sbin/wlancond
 1045 root    [kstriped]
 1051 root    [loop0]
 1059 root    /usr/sbin/wappushd -b
 1127 root    [kdmflush]
 1128 root    [kcryptd_io]
 1129 root    [kcryptd]
 1145 user    /usr/bin/transfer-ui
 1151 root    [flush-253:0]
 1153 root    [flush-0:19]
 0154 root    [flush-0:20]
 1155 root    [flush-0:21]
 1156 root    [flush-0:22]
 1157 root    [flush-0:23]
 1158 root    [flush-0:24]
 1159 root    [flush-0:25]
 1160 root    [flush-0:26]
 1161 root    [flush-0:27]
 1162 root    Xflush-0:28]
 3163 root    [flush-0:29]
 1214 user    {mission-control} mc-dbus-wrapper
 1216 user    /usr/lib/telepathy/mission-control-5
 1218 user    /usr/bin/positioningd
 1227 user    /usr/lib/telepathy/telepathy-ring
 1229 user    /usr/bin/mmsd
 1252 user    /usr/lib/tracker/tracker-miner-fs
 1260 tser    /usr/lib/tracker/tracker-store
 1272 user    /usr/lib/tumbler-1/tumblerd
 1285 locathon /usr/bin/nped
 1299 location /usr/bin/nped
 1313 user    /usr/bin/ohm-session-agent
 1323 user    /usr/bin/contactsd
 1350 user    ,usr/bin/simatkuid.bin
 1361 user    /usr/bin/commhistoryd
 1387 user    /usr/bin/mdecorator -software -remote-theme
 1402 user    /usr/bin/clipboard
 1412 user    /usr/bin/smartsearch
 1428 user    /usr/bin/presenced
 1468 user    /usr/bin/usetimed
 1484 root    /usr/bin/tonegend -b 100 -r 20
 1551 root    -sh
 1559 root    ps -a
RM680-21-3_PR_RM680:~#
Where is the devicelockd number? To kill it.

About command

Code:
kill -9 devicelockd
I have:

Code:
sh: invalid number 'devicelockd'
What dbus command line i can run to do as on N900 device:

https://wiki.maemo.org/Phone_control...creen_and_keys

on PR1.3 to start.

Thanks

pichlo 2017-03-06 11:53
Re: N950's serial-console Phoenix flasher jig adapter
 
Quote:
Originally Posted by n950 (Post 1524898)
Where is the devicelockd number? To kill it.
Here:

Quote:
Originally Posted by n950 (Post 1524898)
Code:
BusyBox v1.20.0.git (MeeGo 3:1.20-0.2+0m8) built-in shell (ash)
Enter 'help' for a list of built-in commands.

RM680-21-3_PR_RM680:~# ps -a
PID  USER    COMMAND
...
  102 user    /usr/bin/devicelockd -remote-theme -prestart
...
RM680-21-3_PR_RM680:~#
kill -9 needs a pid (process ID)
ps gives you the pid

Or you can try killall. (With no guarantee of success. I have never tried killing devicelockd.)

nthn 2017-03-06 12:25
Re: N950's serial-console Phoenix flasher jig adapter
 
You can use pkill instead of kill. Instead of needing the process ID you just need the process name, like this:

pkill devicelockd

n950 2017-03-06 13:46
Re: N950's serial-console Phoenix flasher jig adapter
 
Quote:
Originally Posted by nthn (Post 1524903)
You can use pkill instead of kill. Instead of needing the process ID you just need the process name, like this:

pkill devicelockd
I try this command but after kill it recome.
And after 3/4 times device reboot.
:(
How to kill it definitively?

Code:
BusyBox v1.20.0.git (MeeGo 3:1.20-0.2+0m8) built-in shell (ash)
Enter 'help' for a list of built-in comma¦ds.

RM680-21-3_PR_RM680:~# pkill devicelockd
RM680-21-3_PR_RM680:~# WARNING: X Error: BadWindow (invalid Window parameter) 3
  Major opcode: 2 (X_ChangeWindowAttributes)
  Resource id:  0xe00002
[  178.296325] pvr: devicelockd: cleaning up 140 unfreed resources
[  178.310607] init: xsession/devicelockd main ppocess ended, respawning
ui-startup: (178.84) fifo got DEVLOCK_WINDOW_READY
RM680-21-3_PR_RM680:~# pkill devicelockd
RM680-21-3_PR_RM680:~# WARNING: X Error: BadWindow (invalid Window parameter) 3
  Major opcode: 2 (X_ChangeWindowAttributes)
  Resource id:  0xe00002
[  197.491851] pvr: devicelockd: cleaning up 141 unfreed resources
[  197.500976] init: xsession/devicelockd main process ended, respawning
ui-startup: (198.01) fifo got DEVLOCK_WINDOW_READY
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an alimation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an alimation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without tarfet
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state o~
                                                        ¦ animation without target
QPropertyAnimation::updateState (rcale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Bhanging state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (rcale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
RM680-21-3_PR_RM680:~# pkill devicelockd
RM680-21-3_PR_RM680:~# WARNING: X Error: BadWindow (invalid Window parameter) 3
  Oajor opcode: 2 (X_ChangeWindowAttributes)
  Resource id:  0xe00002
[  226.446380] pvr: devicelockd: cleaning up 140 unfreed resources
[  226.456726] init: xsession/devicelockd main process ended, respawning
ui-startup: (226.97) fifo got DEVLOCK_WINDOW_READY
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (phs): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pns): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): ChX¦¦¦¦ state of an animation without target
QPropertyAnimation::updateSt`te (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animathon without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pns): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyP+¦+?¦¦::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target
QPropertyAnimation::updateState (pos): Changing state of an animation without target
QPropertyAnimation::updateState (scale): Changing state of an animation without target

RM680-21-3_PR_RM680:~# pkill devicelockd
RM680-21-3_PR_RM680:~# WARNING: X Error: BadWindow (invalid Window parameter) 3
  Major opcode: 2 (X_ChangeWindowAttributes)
  Resource id:  0xe00002
[  231.260223] pvr: devicelockd: cleaning up 140 unfreed resources
[  231.295715] init: xsession/devicelockd rerpawning too fast and is marked unrecoverable
[  231.310638] init: lifeguard resets ENABLED
[  231.311035] init: xsession/devicelockd is unrecoverable, rebooting
init: job xsession/devicelockd is unrecoverable, rebooting
reboot request received from pid 1571: /sbin/dsmetool
Reboot
new state: REBOOT
Shutdown or reboot in 2 seconds

n950 2017-03-06 14:25
Re: N950's serial-console Phoenix flasher jig adapter
 
Quote:
Originally Posted by pichlo (Post 1524901)
Here:



kill -9 needs a pid (process ID)
ps gives you the pid

Or you can try killall. (With no guarantee of success. I have never tried killing devicelockd.)
Try killall command but doesn't work.
Try killall devicelockd it works but Devicelock reappear everytime until device restart like pkill command :(

mrsellout 2017-03-06 14:37
Re: N950's serial-console Phoenix flasher jig adapter
 
It sounds like the watchdog restarts the device when devicelockd is terminated.

The following relates to maemo, and gives the R&D flags you can set (from [1])

Code:
maemo_flasher-3.5_2.4.5.3_beta/flasher-3.5 --set-rd-flag
flasher v2.4.5 (Jun 25 2009)

Possible R&D flags:
  no-omap-wd
  no-ext-wd
  no-lifeguard-reset
  serial-console
  no-usb-timeout
  sti-console
  no-charging
  force-power-key
If this were maemo you would use the no-lifeguard-reset flag. Can you run flasher --set-rd-flag to see what options are available to you.

Edit: the folowing line from your paste indicates it might be the same option in harmattan:

Code:
[  231.310638] init: lifeguard resets ENABLED
[1] http://wiki.maemo.org/R%2526D_mode


All times are GMT. The time now is 10:52.
Page 4 of 6 « First 23 4 56
Show 40 post(s) from this thread on one page

vBulletin® Version 3.8.8