Hello!
I think this post may be of more relevance to Development. But unfortunately, I do not have enough posts to do so. I usually don't have to post at all, thanks to searching.
This time I can't seem to find an answer to my problem, so here it goes;
I have an Eris that I'm using at the moment. I rooted it(or so I thought) back in the day. It seemed to work fine back then, and everything was dandy.
Never went about installing a custom ROM though, so I attempted. After I started it up, I realized I had made the worst mistake of them all. I didn't make a nandroid backup of the stock ROM. After a couple boot loops of the Cyanogen logo, I powered it into the bootloader to find that "S-ON" was showing. I cried a little at that moment.
If I try to install any other ROM(stock, EvilEris, etc.), it does not work. And after a couple of attempts of trying to install CM again, now only getting to the skateboarding androids, I have no idea what to do.
Does anyone possibly have a solution to this? I'm at a complete loss not being able to actually boot the phone into the ROM.
Also, everytime I try to just throw a PB00IMG.ZIP on the root of the SD card, it says there's "No image!"
Thank you for any help,
-Kickore
kickore said:
Hello!
I think this post may be of more relevance to Development. But unfortunately, I do not have enough posts to do so. I usually don't have to post at all, thanks to searching.
This time I can't seem to find an answer to my problem, so here it goes;
I have an Eris that I'm using at the moment. I rooted it(or so I thought) back in the day. It seemed to work fine back then, and everything was dandy.
Never went about installing a custom ROM though, so I attempted. After I started it up, I realized I had made the worst mistake of them all. I didn't make a nandroid backup of the stock ROM. After a couple boot loops of the Cyanogen logo, I powered it into the bootloader to find that "S-ON" was showing. I cried a little at that moment.
If I try to install any other ROM(stock, EvilEris, etc.), it does not work. And after a couple of attempts of trying to install CM again, now only getting to the skateboarding androids, I have no idea what to do.
Does anyone possibly have a solution to this? I'm at a complete loss not being able to actually boot the phone into the ROM.
Also, everytime I try to just throw a PB00IMG.ZIP on the root of the SD card, it says there's "No image!"
Thank you for any help,
-Kickore
Click to expand...
Click to collapse
Before you try the PB00IMG.zip, are you going into the Wipe menu and choosing the option "Wipe data/factory reset" before restarting the phone? If not, try starting in Recovery, do just that, and then try to restart. (Depending on the CM ROM you are installing, you may need to install a Google apps zip as well, if you have not already done so. However, it will boot without Google apps - you just will not have the market.)
This is what happens when I go to wipe/factory reset the phone.
I'm sorry I wasn't a bit more descriptive in my first post.
I have clockwork mod recovery 2.5.0.1.
...With S-On...
This picture shows why I can't love anything.
Since you have clockwork recovery, definitely do not try a PB00IMG.zip. There have been bricked phones from this.
See this post: http://forum.xda-developers.com/showpost.php?p=12131623&postcount=9
This may be a good idea. That line "Can't read MISC" - I wonder if you have some bad blocks on that partition (or others)? Anyway, read through that post I listed above, flash that zip file, and it will create a file on the SD card called "MTD_Inspect.txt". Let's see what that shows.
(I think that once we determine the state of flash storage, the best bet may be to flash the Flashback_21v2, which will return the phone to stock, unrooted, and then you can re-root using ScaryAlien's modified version of JCase's 1-click root app to get Amon_RA recovery on the phone. Getting S-OFF going forward may not be such a bad idea, but one step at a time.)
Listen to doogald, he's giving you some good advice!
doogald said:
Since you have clockwork recovery, definitely do not try a PB00IMG.zip. There have been bricked phones from this.
See this post: http://forum.xda-developers.com/showpost.php?p=12131623&postcount=9
This may be a good idea. That line "Can't read MISC" - I wonder if you have some bad blocks on that partition (or others)? Anyway, read through that post I listed above, flash that zip file, and it will create a file on the SD card called "MTD_Inspect.txt". Let's see what that shows.
(I think that once we determine the state of flash storage, the best bet may be to flash the Flashback_21v2, which will return the phone to stock, unrooted, and then you can re-root using ScaryAlien's modified version of JCase's 1-click root app to get Amon_RA recovery on the phone. Getting S-OFF going forward may not be such a bad idea, but one step at a time.)
Click to expand...
Click to collapse
Sorry it took a minute.
Here's what the MTD inspect gave me.
Code:
Eris MTD Partition Status Report Generated on Fri May 18 22:11:36 UTC 2012
PARTITION DEVICE_NAME SIZE(Bytes) BAD_BLOCKS #_E-BLKS ECC_FAIL ECC_CORR BBT_BLOCKS
misc /dev/mtd/mtd0 655360 0 5 0 0 0
recovery /dev/mtd/mtd1 5242880 0 40 0 0 0
boot /dev/mtd/mtd2 2621440 20 20 0 0 0
system /dev/mtd/mtd3 178257920 1350 1360 0 0 0
cache /dev/mtd/mtd4 136314880 9 1040 18 0 0
userdata /dev/mtd/mtd5 167247872 1 1276 0 0 0
#################################### misc PARTITION ###################################
Partition Symbolic Name: misc
Partition (character-special) Device: /dev/mtd/mtd0
Partition Total Size: 655360
Partition EraseBlock Size: 131072
ECC failed: 0
ECC corrected: 0
Number of bad blocks: 0
Number of bbt blocks: 0
Block size 131072, page size 2048, OOB size 0
Dumping data starting at 0x00000000 and ending at 0x00001000...
#################################### recovery PARTITION ###################################
Partition Symbolic Name: recovery
Partition (character-special) Device: /dev/mtd/mtd1
Partition Total Size: 5242880
Partition EraseBlock Size: 131072
ECC failed: 0
ECC corrected: 0
Number of bad blocks: 0
Number of bbt blocks: 0
Block size 131072, page size 2048, OOB size 0
Dumping data starting at 0x00000000 and ending at 0x00001000...
#################################### boot PARTITION ###################################
Partition Symbolic Name: boot
Partition (character-special) Device: /dev/mtd/mtd2
Partition Total Size: 2621440
Partition EraseBlock Size: 131072
ECC failed: 0
ECC corrected: 0
Number of bad blocks: 20
Number of bbt blocks: 0
Block size 131072, page size 2048, OOB size 0
Dumping data starting at 0x00000000 and ending at 0x00001000...
ECC: 1 uncorrectable bitflip(s) at offset 0x00000000
ECC: 1 uncorrectable bitflip(s) at offset 0x00000800
#################################### system PARTITION ###################################
Partition Symbolic Name: system
Partition (character-special) Device: /dev/mtd/mtd3
Partition Total Size: 178257920
Partition EraseBlock Size: 131072
ECC failed: 0
ECC corrected: 0
Number of bad blocks: 1350
Number of bbt blocks: 0
Block size 131072, page size 2048, OOB size 0
Dumping data starting at 0x00000000 and ending at 0x00001000...
ECC: 1 uncorrectable bitflip(s) at offset 0x00000000
ECC: 1 uncorrectable bitflip(s) at offset 0x00000800
#################################### cache PARTITION ###################################
Partition Symbolic Name: cache
Partition (character-special) Device: /dev/mtd/mtd4
Partition Total Size: 136314880
Partition EraseBlock Size: 131072
ECC failed: 18
ECC corrected: 0
Number of bad blocks: 9
Number of bbt blocks: 0
Block size 131072, page size 2048, OOB size 0
Dumping data starting at 0x00000000 and ending at 0x00001000...
ECC: 1 uncorrectable bitflip(s) at offset 0x00000000
ECC: 1 uncorrectable bitflip(s) at offset 0x00000800
#################################### userdata PARTITION ###################################
Partition Symbolic Name: userdata
Partition (character-special) Device: /dev/mtd/mtd5
Partition Total Size: 167247872
Partition EraseBlock Size: 131072
ECC failed: 0
ECC corrected: 0
Number of bad blocks: 1
Number of bbt blocks: 0
Block size 131072, page size 2048, OOB size 0
Dumping data starting at 0x00000000 and ending at 0x00001000...
Apparently, I have a few.
Ok, the next step is probably to try what is in this post: http://forum.xda-developers.com/showpost.php?p=11651122&postcount=21
That post mentions that you should download a decent ROM, but I think that you are already there.
Just a quick note: you should also read the warning in bright red here: http://forum.xda-developers.com/showpost.php?p=11652502&postcount=40
Never mind, I'll quote it:
ErisMTDNuke_v0.9.zip IS EXTREMELY DANGEROUS AND SHOULD NOT BE USED WILLY-NILLY. IT'S ONLY USE IS FOR DESPERATE, LAST-RESORT MEASURES - CLOCKWORK "SOFT BRICKINGS" WHERE PARTITION CORRUPTION IS EVIDENT.
Click to expand...
Click to collapse
At this point, please understand that your phone is bricked and it may not come back. Let's see what the ErisMTDNuke does, though.
I mentioned earlier the thought of unrooting by flashing Flashback and then re-rooting with JCase's 1-click app. That's still a possibility, too. That will at least replace the Clockwork Recovery with stock Recovery. However, the other way is to flash the CM7 ROM that you were going to flash anyway and replace the recovery using the app GScript Lite.
Flashback can be downloaded from here: http://forum.xda-developers.com/showthread.php?t=792026
You can download the one without the radio, if that's what you want to do.
Anyway, let's see what ErisMTDNuke does. Good luck.
Dear doogald,
You are the coolest person on the internet. You have saved my phone by referencing forum posts made years ago that I totally couldn't figure out by myself.
Thank you very much.
I'm happy to announce that my phone has completed it's boot into stock, and I can now drag down my lock screen and activate my phone on the Verizon network.
I'll take to Jcase's one-click app tomorrow.
Thank you again,
-Kickore
P.s. Seriously, the coolest person on the internet ever.
Wow, that's awesome. Thanks redirected to bftb0, who did all of that work.
The way to install Amon_RA is here: http://androidforums.com/eris-all-t...2-custom-recovery-trackball-not-required.html
You should be able to use Scenario 5 in the first post (the JCase 1-click app method) that ScaryAlien mentions that it works with stock or stock-based ROMs like xtrSENSE. Just remember that 1-click works like this:
- allow third party app installs in settings->applications
- install the app (you may need the free app Astro File Manager to actually install by opening the .apk file in that app and choosing to install the app)
- run the 1-click app
- shut down and restart the phone - don't restart in recovery; restart as if you were going to make a phone call
- shut down and restart in Recovery by holding VolUp while booting
At some point I'll also post what you'd need to do to get the S-OFF engineering bootloader on, which will allow you to fastboot flash to recover any future problems (which, knock wood, will not happen...)
I attempted Jcase's app. It did give me Amon_RA's Recovery. It did not give me S-Off though, which I'm assuming is why you mentioned the engineering bootloader in your last post.
On a side note, I decided to experiment with something that wasn't clockwork mod, and found that I can flash custom ROMs with this Recovery. I also backed up my stock one this time, JUST IN CASE!
Well, it worked and I'm running GSB v4.5!
Still, I really appreciate it regardless of who originally found/wrote the documentation on how to do it. I'm a user with like 5 posts due to everything being figured out usually, and you're still helping instead of "GOOGLE IT."
So thank you.
kickore said:
I attempted Jcase's app. It did give me Amon_RA's Recovery. It did not give me S-Off though, which I'm assuming is why you mentioned the engineering bootloader in your last post.
Click to expand...
Click to collapse
Which version of the bootloader do you have? It will either be 1.46.0000, 1.47.0000, or 1.49.0000. (The method to get the 1.49.2000 S-OFF depends on which you have now, IIRC.)
I currently have the 1.47.0000.
kickore said:
I currently have the 1.47.0000.
Click to expand...
Click to collapse
Ok. I am away for the weekend, but will try to get some detailed instructions ASAP. The generalized instructions, though (and it's quite a few steps, sorry to say):
- get a copy of the root PB00IMG.zip file onto the SD card
- get a copy of Flashback (with radio) onto the SD card
- get a copy of ScaryAlien's version of JCase's 1-click root app on the SD card (which I belive you have)
- Nandroid backup when you have now
- start in HBOOT and let the phone run the root PB00IMG.zip (it should detect and ask you to flash it automatically). This gives you 1.49.2000 S-OFF with an old version of the Eris ROM
- * Run the JCase root app (this gets you Amon_RA Recovery back)
- Flash Flashback with radio (this gets you the updated radio back - the root PB00IMG.zip file will flash an older version of the radio)
- Run the JCase root app again to root the phone
- Restart in Recovery and Nandroid Restore GSB
- restart and you'll be back where you were with S-OFF
- (Important) Erase the PB00IMG.zip file from the SD card (or rename it or move it into a folder).
(I may have missed a step - this is off the top of my head. Also, the step with * may be wrong - I think that the root ROM is Android 1.5 and JCase's root app may not run. I don't recall - I'll need to check on that one...)
There is no need! I figured it out from what you said. I'm not really that new at this whole rooting process... But I'm not a programmer and would not have been able to do anything otherwise. I really do appreciate your help.
Thank you so very much!
-Kickore
Edit:
As a suggestion, perhaps making a new guide for anyone who comes to this forum can easily get the files which are now dead links. As well as follow a comprehensive guide on the rooting process.
Hi,
I have searched the forums and still haven't found any useful information.
I've been trying to edit a ubifs image (system.img) for a generic mediatek tablet.
These are the many things I have tried:
1) Edit the boot.img so that ro.secure=0 etc to see if I can get root. Unfortunately selinux is enabled and I don't even have busybox on the system (something called toolbox)
2) Work out what nand flash is being used (in my case its - SanDisk SDTNRGAMA 64G 3.3V 8-bit). And emulate the nand by using nandsim on a linux computer, but it causes a segmentation fault:
Code:
sudo modprobe nanDsim id_bytes=0x45,0xde,0x94,0x93,0x76,0x50 cache_file=./test.img
Note - I have included a spelling mistake (nanDsim should be nandsim) because I dont' want anyone to just cut and paste this command - it causes a segmentation fault on Ubuntu and Debian and I have found that if you are running on an ssd system it will hard lock your pc! (You have been warned).
3) Use ubireader (github.com/jrspruitt/ubi_reader).
Code:
$ ubireader_display_info ./system.img
UBI File
---------------------
Min I/O: 16384
LEB Size: 4161536
PEB Size: 4194304
Total Block Count: 122
Data Block Count: 120
Layout Block Count: 2
Internal Volume Block Count: 0
Unknown Block Count: 0
First UBI PEB Number: 0
Image: 1101756791
---------------------
Image Sequence Num: 1101756791
Volume Name:system
PEB Range: 0 - 121
Volume: system
---------------------
Vol ID: 0
Name: system
Block Count: 120
Volume Record
---------------------
alignment: 1
crc: 3336263623
data_pad: 0
errors:
flags: autoresize
name: system
name_len: 6
padding:
rec_index: 0
reserved_pebs: 248
upd_marker: 0
vol_type: dynamic
but when I run 'ubireader_extract_files' I get all the files, but they are all corrupted.
I'm currently trying to use the information in the ubireader_display_info to create a blank ubifs image and using 'linux dd' to try and read the image that I have.
Has anyone got any tips on how to progress, your help and advice would be appreciated.
Hello everybody!!Sorry for my english, I'm from Russia
Can somebody help me to recover uboot to MEIZU MX2 (Exynos 4412 proccesor)?
I connect to my phone using UART-USB(RS232) Win7.
It happened after I changed the values of the variables in ENV, This is the factory default ENV (printenv):
Code:
bootcmd=emmc open 0;movi read zero fwbl1 0 40000000; emmc close 0;movi
read kernel0 0 40008000;movi read rootfs 0 41000000;bootm 40008000
41000000
I changed the values to:
Code:
bootcmd=emmc open 0;movi read zero fwbl1 0 50000000; emmc close 0;movi
read kernel0 0 50000000;movi read rootfs 0 50000000;bootm 50000000
Then entered the command: saveenv adn reset.
From that moment, everything changed, the phone has become a brick in uboot does not load, and the terminal writes:
Code:
[UART BOOT] Fail, Can
not connect to DNW.
I know that the problem in U-BOOT. U-Boot can not boot from the address 0x50000000.
Help me to find at least some some information to restore my phone.
Thank you.
Hello,
I have problem with my Lenovo P1m. After changing unresponsive screen with aftermarket one, phone is not booting. To be explicitly specific, phone is booting OEM ROM correctly, but I was using custom ROM of LineageOS 14.1 before screen replacement and now it is not working. My problem is - I can compile my own kernel with different screen drivers / options / etc as I am familiar with linux kernel itself, BUT - how do I debug bootloop, when the only thing I can dig from phone via TWRP recovery is following line from /proc/last_kmsg which, honestly, tells me nothing
Code:
ram console header, hw_status: 2, fiq step 0.
(previously, I got some error message about wrong kernel header as I was trying to compile kernel myself, but this is solved now - but no luck with bootloop either)
Scenario is like this: after power on, I have vibration and normal white Android screen, which if normal boot, is followed by animation and OS welcome. But now, the screen after is black, and after few seconds everything starts from begining - vibration, white android screen etc...
I cannot use adb at all, as it is not catching the phone in this situation, probably kernel is failing before adbd itself starts. I am using TWRP to extract /proc/last_kmsg but as mentioned before, no usable information.
Is there any other way to get kernel messages from boot process? (It would be besto to have something like dmesg output)
So, I see that nobody knows or wants to help, so I helped myself. Made cable as seen here: h t t p: // w w w .stevenhoneyman.co.uk/2014/11/mtk-mediatek-debug-cable.html
And now I at least have serial console. BUT - all output ends exactly when kernel is loaded. Any ideas how to get verbose output from kernel to uart? I tried to add printk.disable_uart=0 ignore_loglevel into commandline arguments for kernel, but no luck.
End of console output looks like:
Code:
[5940] [PROFILE] ------- boot_time takes 3053 ms --------
[LK_ENV]get_env hibboot
[LK_ENV]get_env resume
[5940] booting linux @ 0x40080000, ramdisk @ 0x44000000 (1611013)
[5940] [LEDS]LK: leds_deinit: LEDS off
[5940] [LEDS]LK: red level is 0
[5940] [LEDS]LK: green level is 0
[5940] [LEDS]LK: PMIC Type: 7, Level: 0
[5940] [LEDS]LK: blue level is 0
[5940] DRAM Rank :2
[5940] DRAM Rank[0] Start = 0x40000000, Size = 0x40000000
[5940] DRAM Rank[1] Start = 0x80000000, Size = 0x3ffc0000
[5940] cmdline: console=tty0 console=ttyMT0,921600n1 root=/dev/ram vmalloc=496M androidboot.hardware=mt6735 slub_max_order=0 slub_debug=O bootopt=64S3,32N2,64N2 androidboot.selinux=permissive buildvariant=userdebug printk.disable_uart=0 ignore_loglevel lcm=1-ili
[5940] lk boot time = 3053 ms
[5940] lk boot mode = 0
[5940] lk boot reason = wdt_by_pass_pwk
[5940] lk finished --> jump to linux kernel 64Bit
[5940]
[LK]jump to K64 0x40080000
[5940] smc jump
Key to get kernel boot output was finally in console on ttyMT1 instead of ttyMT0 (console=ttyMT1,921600n1)and also nousb parameter, so usb port will not switch to real usb during boot and remains uart. Now, I have found out that my kernel is missing some LCM driver, which was then re-compiled and now I have to find out what else is wrong...
Running out of ideas. Phone boots with old broken OEM display. If I connect new aftermarket display, it bootloops. Kernel logs attached for every case: old display, new display. Any ideas what goes wrong with new display?
NEW: https://pastebin.com/Ewz8FF5h
OLD: https://pastebin.com/CjtmA0aB
Code:
[ 14.143167] (0)[1:swapper/0][FTS] Step 1:Reset CTPM
[ 14.243788] (0)[1:swapper/0]hidi2c_to_stdi2c successful.
[ 14.263168] (0)[1:swapper/0][FTS] Step 2:Enter upgrade mode
[ 14.313857] (0)[1:swapper/0][FTS] Step 3: CTPM ID,ID1 = 0x0,ID2 = 0x0
[ 14.314917] (0)[1:swapper/0]ft5x0x 1-0070: [FTS] Step 3 fail: CTPM ID,ID1 = 0x0,ID2 = 0x0, 0x54, 0x2c:
[ 14.423169] (0)[1:swapper/0][FTS] Step 1:Reset CTPM
[ 14.473714] (0)[1:swapper/0]hidi2c_to_stdi2c successful.
[ 14.493166] (0)[1:swapper/0][FTS] Step 2:Enter upgrade mode
[ 14.543852] (0)[1:swapper/0][FTS] Step 3: CTPM ID,ID1 = 0x0,ID2 = 0x0
[ 14.544707] (0)[1:swapper/0]ft5x0x 1-0070: [FTS] Step 3 fail: CTPM ID,ID1 = 0x0,ID2 = 0x0, 0x54, 0x2c:
[ 14.653167] (0)[1:swapper/0][FTS] Step 1:Reset CTPM
THIS is the reason of problems. When I deconfigure FT5446 driver from kernel, system boots without problems. Only thing is that touchscreen is inoperative because of disabled driver. How to debug this issue?
I have resolved this issue for me. Hardcode-edited driver for FT5446 IC touchscreen to workaround firmware upgrade checking. Now I have operational P1m with aftermarket display under LOS 14.1 on 3.18.19 kernel. If anybody interested, here is boot.img for darklords LOS14.1 ROM lineage-14.1-20171119_095733-UNOFFICIAL-P1m.zip but I think it will work also for his other versions
https://uloz.to/!cuEWkiCv9flq/boot-img
can you share the changes you made to the kernel source
i have compared some changes that you shared , they can be seen in here
Hello,
I was following some threads regarding flashing Magisk to root this tablet and managed to get it working after some trial and error and recovering with Lenovo's Rescue tool. I did not manage to flash TWRP successfully because there doesn't seem to be any port of it (I tried flashing the port for the X606 series, but didn't work).
I then tried to flash a Lineage GSI following this XDA guide, using the manual process, and after I did the factory reset from the system's UI, the tablet rebooted and is now always stuck on a black screen. Tried to reboot to recovery and bootloader using adb and the physical buttons, to no avail. Then I thought of checking what `adb devices` was reporting, and it turns out it's stuck on the recovery?
Code:
❱ sudo adb devices
List of devices attached
HA1MPS2C recovery
Is there a way to fix this? Or did I screw up somewhere really badly?
Thanks in advance!
Just took a peek with `adb shell` to read the `/tmp/recovery.log` file and found this repeating:
Code:
Starting TWRP 3.6.0_11-0-aafc82e8-dirty on Sat Jan 1 10:22:18 2011
(pid 765)
RECOVERY_SDCARD_ON_DATA := true
I:Lun file '/sys/class/android_usb/android0/f_mass_storage/lun0/file' does not exist, USB storage mode disabled
TW_INCLUDE_CRYPTO := true
I:Find_File: Error opening '/sys/class/backlight'
I:Found brightness file at '/sys/class/leds/lcd-backlight/brightness'
I:Got max brightness 255 from '/sys/class/leds/lcd-backlight/max_brightness'
I:TWFunc::Set_Brightness: Setting brightness control to 255
I:TW_EXCLUDE_ENCRYPTED_BACKUPS := true
I:LANG: en
Starting the UI...
setting DRM_FORMAT_RGB565 and GGL_PIXEL_FORMAT_RGB_565
cannot find/open a drm device: No such file or directory
fb0 reports (possibly inaccurate):
vi.bits_per_pixel = 32
vi.red.offset = 0 .length = 8
vi.green.offset = 8 .length = 8
vi.blue.offset = 16 .length = 8
failed to mmap framebuffer: Invalid argument
I:TWFunc::Set_Brightness: Setting brightness control to 255
TW_SCREEN_BLANK_ON_BOOT := true
I:TWFunc::Set_Brightness: Setting brightness control to 0
ioctl(): blank: Bad file descriptor
ioctl(): blank: Bad file descriptor
I:TWFunc::Set_Brightness: Setting brightness control to 255
I:Loading package: splash (/twres/splash.xml)
I:Load XML directly
I:PageManager::LoadFileToBuffer loading filename: '/twres/splash.xml' directly
I:Checking resolution...
libc: Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0 in tid 765 (recovery), pid 765 (recovery)
libc: Unable to set property "ro.twrp.boot" to "1": error code: 0xb
libc: Unable to set property "ro.twrp.version" to "3.6.0_11-0": error code: 0xb
So the failed TWRP is still there, and somehow always booting to it?
Further development: I have tried flashing the stock recovery using `flash_image` through an adb shell, but with no success. It just spits out
Code:
failed with error: -1
I assume you cannot flash the recovery while in the recovery...?
I just don't understand how this started happening after I it did the factory reset from the booted Android UI.
I finally solved this conundrum!
After digging around a bit more, I found this blog post on someone's website (thank you!) and tried it out.
In my case, I had /dev/block/platform/bootdevice/by-name/recovery but it still worked wonders.
In case that blog ever goes down, what you have to do is check that path and see if it matches. Like the post suggests, you can do DEV=$(ls /dev/block/platform/*/by-name/recovery); echo $DEV.
Then, it's a matter of using dd to dump the image onto that path, like this: dd of=$DEV if=/path/to/recovery.img (I put mine in /sdcard with adb push).
Finally, just reboot using adb reboot ... or using your device's physical buttons.
Hope this helps!
if TWRP would be broken, you wouldn't be able to use adb shell.
system won't boot because avb/dm-verity detects modified partition (such as recovery) and will therefore send into recovery mode on unsuccessful boot. It's not the recovery blocking here, this would happen with every custom recovery no matter what file you flash, unless you disable dm-verity.
The TWRP used here is most likely targeting Android 11
aIecxs said:
if TWRP would be broken, you wouldn't be able to use adb shell.
system won't boot because avb/dm-verity detects modified partition (such as recovery) and will therefore send into recovery mode on unsuccessful boot. It's not the recovery blocking here, this would happen with every custom recovery no matter what file you flash, unless you disable dm-verity.
The TWRP used here is most likely targeting Android 11
Click to expand...
Click to collapse
Oooh I see. So if I disable verity (with fastboot's --disable-verity, I assume), it could work?
I will have to try that, thank you for the response!