Quad rooter patches codeaurora - LG G5 Questions & Answers

Hi, I am vulnerable about the 4 issues.
And I saw the patches like this one:
https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=9e8bdd63f7011dff5523ea435433834b3702398d
Do you think that we could fix it ourselves with an app editor or text editor? (Of course I'm rooted)
Thanks.

Related

[Q] CM7 settings question

I have been looking for a good CM 7.1 based ROM and am having a hard time deciding on one. The main thing I am looking for is the advanced lock screen delay and timeout settings. I cannot tell if this is a difference between CM 7.1 and 7.0.3 or if it is just a setting that some ROMs have and some do not.
Can someone shed some light on this for me? Is there a way to add this functionality? (I care because work enforced a security lock on my phone for email access, but I don't want to have to type i tin EVERY time the screen goes off. iPhones and WinMobile don't. It seems to be a flaw in Android's ActiveSync).
Thanks in advance.
This feature is new in CM 7.1. However, other users have reported success using Delayed Lock + WidgetLocker apps from the market to effect the same functionality, though I am uncertain how well they play with the Exchange server's demands.
Alternately, if you really don't want this security lock feature at all then you can find versions of Email.apk that will just lie to the Exchange server about the phone's configuration. Then you can configure your lock settings however you like. Ah, the classic fallacy of a security model that trusts the client...
I actually like the security of the password. I just wish it behaved like ActiveSyns on every other type of device (Win Mobile, iphone, etc) and let you set a delay (defined by the system administrator) for when the device security locks, not every time the screen goes off.
I wish we had a good CM7.1 ROM. Oh Z, wherefore art thou?
Yeah, running a nightly (or a ROM that pulls from nightly) is currently the only practicable choice to get the feature.
I backported the feature's code to the CM 7.0.3 codebase and built a custom ROM for my own device. I wanted the feature but didn't want to run the unstable nightly on my primary phone. Well, "backport" isn't the correct term, because the feature was developed against 7.0.3 and was rebased to 7.1 for submission to the source repo. But you know what I mean (haha).
organophosphate said:
Yeah, running a nightly (or a ROM that pulls from nightly) is currently the only practicable choice to get the feature.
I backported the feature's code to the CM 7.0.3 codebase and built a custom ROM for my own device. I wanted the feature but didn't want to run the unstable nightly on my primary phone. Well, "backport" isn't the correct term, because the feature was developed against 7.0.3 and was rebased to 7.1 for submission to the source repo. But you know what I mean (haha).
Click to expand...
Click to collapse
Care to share?
rearview said:
Care to share?
Click to expand...
Click to collapse
You know, I realized after posting that I probably look like a jerk for not offering. I apologize. There are issues that seem to preclude this, however.
The target of the relatively minor code changes necessarily included one of the fundamental framework jars.
When I was developing the feature, I only compiled CM for the Droid Incredible. Didn't make sense to compile for platforms I can't use/test, especially given the next point.
It takes my machine 90+ minutes to compile a ROM for a platform.
I believe that if I gave you a flashable update.zip to replace the affected jars it would have a high probability of cacking your ROM and would result in bootloops. Not absolutely certain, but fairly concerned about the possibility. I believe you would have better luck running a nightly that people report as "relatively stable" in the forums (some nightlies are better than others).
When the feature was merged, I really thought CM 7.1 would be out soon. RC1 dropped a month *before* the new feature was merged. That sounds odd in retrospect, because most projects freeze feature additions before entering the RC phase of a release (ie. they accept bugfixes only).
I just assumed it was for an X10 since we were in the X10 forums. Since this phone isn't officially CM supported I'm at the mercy of ROM developers to make a nice CM7.1. There are a couple out there, and they all have issues. One is close, but the dev seems to have gone missing. I hope he returns soon.
Is modifying one jar file all that it would take? Which file? If I knew that I could possibly take the jar file from one of the CM7.1 ROMs for my device (which has issues) and put it into a 7.0.3 that works smoothly and be happy.
rearview said:
Is modifying one jar file all that it would take? Which file? If I knew that I could possibly take the jar file from one of the CM7.1 ROMs for my device (which has issues) and put it into a 7.0.3 that works smoothly and be happy.
Click to expand...
Click to collapse
I like your train of thought. Unfortunately, even if that were to work you would be unable to configure the feature, because the UI is in the CM Settings apk (ie. the apk that makes "CyanogenMod Settings" menu option appear in your Android settings). If you were to also grab the CM 7.1 settings APK and install it, then that would replace the old version. The CM 7.1 version has all sorts of changes, controls for other new features, and so forth; therefore, that would break much of your other functionality.
How conversant are you in software development? You may be able to join one of those CM 7-derived ROM projects for your platform. It should be relatively easy for someone with a CM dev environment configured for your platform to grab these patches via git cherry-pick and build a 7.0.3 "Gold Edition" with this feature added. Because it should be easy, you might be able to persuade one of those custom ROM developers to grab this feature and include it.
If you are interested, here are the links to my patchsets that were merged to implement the feature:
Framework Implementation
CM Settings UI
I believe the patches will merge "nearly cleanly" into a CM 7.0.3 derived branch. That is to say, if there are merge conflicts they will not be substantive and will merely involve wholesale cut/paste reordering of methods within the given class files rather than requiring a rewrite of any part of the actual implementation.
I know that this simple reordering is all I changed between my 7.0.3 development version and the 7.1-derived submission. Seems Steve Kondik did a little further rearrangement to accommodate other patches that had been accepted/merged while mine was pending. Same deal there: still should be relatively simple.
I'm not much of a developer, though I'm an IT guy with some unix background. I'll look at it.

Help with building an apk

Hi,
I'm trying to build the default Email app from source.
Using the CM10.2 as base: https://github.com/CyanogenMod/android_packages_apps_Email
I used some patches, which I successfully applied, as this is the main reason of doing this whole thing
At first I tried using apktool but that didn't work out.
Currently I'm struggling with importing the necessary libs in eclipse (adt-bundle-windows-x86_64-20130917; target API 18 aka 4.3.x).
First issue is that even though I am using Google APIs i'm still missing com.google.common. Without google APIs i'm missing the whole com.google...
apparently the app has it's own libs com.android.emailcommon which are provided with the application.
I had to add emailcommon/src in the buildpath because the rest of the app was referencing it.
Problem here is under com.android.emailcommon.service.EmailServiceProxy: IEmailService cannot be resolved to a type. I'm seeing though that IEmailService.aidl exists so why isn't it seeing that interface?
I'd be gratefull for any help here.
Thanks!
bump
please help
any some hint would be nice!
bump?

[Q] Android Browser WebView / addJavascriptInterface Exploit

Technology Review article "Browser Exploit for Android Highlights Google’s Update Problem" (February 14/2014) referenced an exploit on devices running Android older than 4.2 involving the addJavascriptInterface function in WebView. The post listed a number of sources and more can be found in OSVDB entry 97520.
I take claims that '70% of all Android devices are vulnerable' with a grain of salt but I do have a number of devices where the vendors have not provided upgrades to Android 4.2 or higher (devices running Android 4.2 and above may still have vulnerable apps compiled with pre-4.2 libraries). I have reviewed some of the references but am not clear how large the hole is or whether there are viable ways of protecting from it (other than rooting the device and upgrading). The 2011 paper "Attacks on WebView in the Android System" identified a number of attack vectors, found mitigating factors in most applications that prevented exploitation but also identified a number of vulnerable applications. Subsequent work by Rapid7 implies that the vulnerability is exploitable but they have an incentive to promote their Metasploit software.
Is this vulnerability as bad as claimed? Are there ways of blocking the vulnerability on Android prior to 4.2?
Thanks, Norbert
Norbert,
Some of your questions are answered here - http://www.droidsec.org/news/2014/02/26/on-the-webview-addjsif-saga.html
In short the 70% number on browsers was a hasty estimate but the problem is much bigger than these articles describe.
Joshua
addjisf Test Results
Joshua, very interesting post! I am not sure how I would go about identifying which applications on my Android devices use WebView or how to get them to visit the test page. I tried the browsers on a Samsung Galaxy S (Android 2.3.3) and Toshiba Thrive (Android 4.0.4). The Samsung stock browser passed while the Thrive stock browser failed (VULNERABLE: searchBoxJavaBridge_). Chrome on the Thrive was not vulnerable.
Maybe it is time to have a chat with Toshiba about getting this problem resolved. I am sure the Samsung has vulnerabilities but it is hard to get traction without a clear 'smoking gun'.
Thanks, Norbert

[Mod][Xposed] Keepchat

Hey guys, sad announcement unfortunately.
I knew it was coming soon, since they were actively blocking my mods. I just received a cease and desist letter from Snapchat's lawyers for infringement of their intellectual property. And they're right, I am infringing their intellectual property. I won't be taking any further risks and will comply with their requirements to settle. I have and am going to remove everything, including SnapMod, Keepchat and Snapshare.
It's been a fun ride. I really loved developing it and really improved my skills. But I knew it had to stop some time. I understand they're not happy with it and there's no other option than to honour their requests. I'm going to think of something else to develop, of course it'll be open source. Something like an app (don't know what yet) or rom development for example. New challenges, new things to learn.
I'm going to remove everything from AndroidFileHost and the Xposed repository, ask the mods to close this thread and remove it after a few days, when most of you have had the chance to read this message.
I'm really sorry guys, I hope you understand I have to quit. I do understand them. Thanks for being such a loyal community.
P1nGu1n
XDA:DevDB Information
Keepchat, Xposed for all devices (see above for details)
Contributors
P1nGu1n_, sturmen, stammler and Ramis
Xposed Package Name: com.ramis.keepchat
Version Information
Status: Stable
Current Stable Version: v4.3.0
Stable Release Date: 2015-01-31
Created 2014-10-24
Last Updated 2015-02-10
Changelog
Changelog
Updates can be downloaded from Xposed Installer.
Note: uninstall Keepchat version prior to v4.0.0, otherwise it will refuse to install.
v4.3.0 - 2015-01-31
This version is compatible with Snapchat 9.0.1.0 up to 9.0.2.0.
Save images from the chat
Usage: long press the image in the chat you want to save and it's saved.
v4.2.3 - 2015-01-30
This version is compatible with Snapchat 9.0.1.0 up to 9.0.2.0.
Fix sweep to save:
In Snapchat 9.0.x they changed the way snaps are loaded. They used load the image/video once the timer of the previous one was finished. However, in the newer versions they load the next snap while the current one is viewed. When sweep to save was performed, it used to save the latest snap. This didn't work properly any more, because they load the next one in advance and so the latest loaded snap is the next one, resulting in the next image being saved when performing the gesture on the current one. This is worked around now. :good:
v4.2.2 - 2015-01-29
This version is compatible with Snapchat 9.0.1.0 up to 9.0.2.0.
Snapchat v9.0.1.0 and 9.0.2.0 compatibility
Updated translations
v4.2.1 - 2015-01-20
This version is compatible with Snapchat 8.1.0 up to 8.1.2.
Added Urdu (Pakistan) and Vietnamese translations
Updated many translations
v4.2.0 - 2015-01-03
This version is compatible with Snapchat 8.1.0 up to 8.1.2.
Added Sweep to Save
Just swipe back and forth in any direction with the finger you were already holding the screen with (to view the snap) and it'll save. Replaces the ask-to-save functionality.
Added minimum timer duration
You can set how long at least you can view a snap. Especially useful in combination with Sweep to Save so you have a few settings minimum to decide if you want to save it.
Added Korean and partially Romanian translation
Updated translations
v4.2.0-beta1 - 2014-12-30
This version is compatible with Snapchat 8.1.0 up to 8.1.2.
Replaced the ask-to-save functionality by the brand new Sweep to Save mode! Just swipe back and forth in any direction with the finger you were already holding the screen with (to view the snap) and it'll save.
v4.1.0 - 2014-12-25
This version is compatible with Snapchat 8.1.0 up to 8.1.2.
Compatibility with Snapchat v8.1.0+
Rewrote the whole core of the application
Improved Czech, Spanish and Turkish, partially added Chinese Traditional.
v4.0.1 - 2014-12-08
This version is compatible with Snapchat 5.0.38.1 up to 8.0.1.
I'm proud to announce that Keepchat is fully translated to 17 languages; Arabic, Brazilian Portuguese, Czech, Danish, Dutch, English, Finnish, French, German, Greek, Hungarian, Italian, Norwegian, Polish, Portuguese, Spanish and Swedish! Thereafter it's partially translated to Russian and Turkish. This is al done by you, the community! You can still contribute by voting for translations, improving them if necessary and by bringing Keepchat to new languages. Click here to help.
Many new and updated translations
Small internal improvements
v4.0.0 - 2014-11-20
This version is compatible with Snapchat 5.0.38.1 up to 8.0.1.
Mainly internal improvements: refactoring and simplifying code
Option to sort by username without having to sort by category
Added option to hide the app from your launcher
Rearranged preferences
New icon, matching Snapchat and Snapshare
Added Danish, Dutch, Finnish, French, Italian and Norwegian translations
Removed Google Analytics and thus internet permission
Transfer - 2014-10-24
Ramis transferred the project to me, I'll be improving the module and adding new features in the next weeks. Thread created and repo cloned.
Previous versions released by Ramis:
Code:
3.6.3
-- Fixed support for snapchat 5.0.38.2
3.6.2
-- Support for latest snapchat 5.0.38.2
3.6
-- Bug fix
3.5.9
-- Added support for the 5.0.34.4
3.5.7
-- Small bug fix
3.5.5
-- Updated to support 5.0.32.1 and above
3.5.2
-- Support for 5.0.27.1 added
3.5
-- Removed support for older versions
-- Only works with the current stable ( 5.0.23.0 )
-- Included google analytics
3.2.3
-- Added support for the latest beta 4.1.13
3.2.2
-- Added support for the latest beta 4.1.12 and 4.1.11
3.2
-- Added support for the latest beta 4.1.11
-- Made a few changes with how settings work and it should fix the problems people have
3.1.8
-- Disabled support for saving sent snaps for these three beta (4.1.08, 4.1.09 and 4.1.09) due to major changes in snapchat code
-- Added new setting to save snaps into sub-folders by user name
3.1.7
-- Fixed small bug introduced by last version
-- Also trying a potential fix for the settings not being applied error
3.1.6
-- Added support for latest snapchat beta 4.1.07 and 4.1.07 Stable
3.1.5
-- Added support for latest snapchat beta 4.1.06
3.1.4
-- Added support for 4.1.05 including the beta
3.1.2
-- Added support for the latest Stable 4.1.03
-- Fixed a major bug for older versions of snapchat
3.1.1
-- Added support for the latest beta 4.1.03
3.1
-- Added support for all snapchat version 4.1.01 Beta and below. (Includes the 4.1.01 stable)
-- Fixed a bug with settings
-- Fixed a bug with the dialog boxes
3.0.4 Beta
-- Hopefully fixed getting reported bug for stories
-- Works with 4.0.22 Beta now
3.0.2
-- Fixed bug that caused Errors 1, 2, 3
-- Added new setting for sorting images into folder
-- Little changes to make logs better
3.0.1
-- Small update to the debugging code (no need to update really unless you want to help debug errors)
3.0 Settings added!
-- Initial Release
Snapchat compatibility
Snapchat compatibility
This post lists the latest compatible Keepchat version for every Snapchat version. Every Keepchat version can be downloaded from both Xposed Installer and GitHub
Snapchat 9.0.1.0 up to the latest
Keepchat v4.2.3
Snapchat 8.1.0 up to 8.1.2
Keepchat v4.2.1
Snapchat 5.0.38.1 up to 8.0.1
Keepchat v4.0.1
Snapchat 5.0.23.0 up to 5.0.38.3
Keepchat v3.6.3
@P1nGu1n_
Thanks for taking this over. I'm very happy that development will continue
Tnx!
As i asked in previous topic..
I would like to have folder snapchat in gallery( like camera folder, download folder,..) Now i have different snapchat users folders..
I would like to have main folder "snapchat" and in there subolders of users...
Tnx
Sent from my A0001 using Tapatalk
ddasd said:
I would like to have folder snapchat in gallery( like camera folder, download folder,..) Now i have different snapchat users folders..
I would like to have main folder "snapchat" and in there subolders of users...
Click to expand...
Click to collapse
Just go into settings and change the destination folder, I have all my snaps save to one folder and have done for the whole time using keepchat. That would be the only way, its down to the gallery app, not keepchat. Gallery apps just look for images in a folder, with no sub directories.
Adam3Sixty said:
Just go into settings and change the destination folder, I have all my snaps save to one folder and have done for the whole time using keepchat. That would be the only way, its down to the gallery app, not keepchat. Gallery apps just look for images in a folder, with no sub directories.
Click to expand...
Click to collapse
I like that i have for every user own folder.. but i would love to have in "gallery" there only one folder ( like keepchat or snapchat.. or what ever)
folders:
https://drive.google.com/file/d/0B5K0CX82qr0bT1FOZjBxQkxzVlk/view?usp=sharing
gallery:
https://drive.google.com/file/d/0B5K0CX82qr0bSGE5U3pxZlBmQms/view?usp=sharing
here i want to have main folder and inside this snapchat users folders... if its possible and if u guys understand what i am trying to say
tnx!
ddasd said:
I like that i have for every user own folder.. but i would love to have in "gallery" there only one folder ( like keepchat or snapchat.. or what ever)
folders:
https://drive.google.com/file/d/0B5K0CX82qr0bT1FOZjBxQkxzVlk/view?usp=sharing
gallery:
https://drive.google.com/file/d/0B5K0CX82qr0bSGE5U3pxZlBmQms/view?usp=sharing
here i want to have main folder and inside this snapchat users folders... if its possible and if u guys understand what i am trying to say
tnx!
Click to expand...
Click to collapse
That has nothing to do with Keepchat. Keepchat only saves the images, it's up to your gallery app how it displays those pictures. If you want that, you should look for a gallary app which meets your needs.
P1nGu1n_ said:
That has nothing to do with Keepchat. Keepchat only saves the images, it's up to your gallery app how it displays those pictures. If you want that, you should look for a gallary app which meets your needs.
Click to expand...
Click to collapse
What he said.......
(And I did actually say in my first post, lol)
Thanks for taking over Keepchat! And also thanks to @Ramis for all of this work. And for the people before him.
Hope you can keep this up-to-date with Snapchat versions and very much luck!
Thanks!
@P1nGu1n_ what's your first plan of attack pal?
@P1nGu1n_ So I have no idea how much work this would involve or even if you support the idea, but given Xposed's lack of support for ART in the foreseeable future, what are your thoughts on forking this project into a standalone app?
I know there are currently a handful of Snapchat clones that support saving snaps, but they are all either horribly outdated (e.g. no support for stories or messages) or frighteningly unsafe (The Snappening). I think an open-source, up-to-date app from a trusted dev would fill a big hole for users who can't root their device or install the Xposed framework.
I hope I'm not coming across as entitled or ungrateful, I'm just a regular Keepchat and Snapshare user, and losing both after updating to Lollipop kind of sucks. Having a Snapchat alternative that would work on Android 5.0 and be available on something like f-droid would be awesome.
f0xy said:
@P1nGu1n_ what's your first plan of attack pal?
Click to expand...
Click to collapse
First I'm going to convert the project from Eclipse to gradle (Android Studio). Second I'm going to refactor and clean the code, mainly internal improvements. Than I'm going to look into making the captions on videos optional. Of course I'll add support for new versions when it's necessary. That's it at the moment, don't know any other features to implement yet. If anyone has suggestions (and I mean only doable and useful features), I'm open to it
And yes, I'm sorry I haven't start working on Keepchat yet. I've been so busy this week and I took this project over unexpectedly, but it was a no-brainer.
Wondersnite said:
@P1nGu1n_ So I have no idea how much work this would involve or even if you support the idea, but given Xposed's lack of support for ART in the foreseeable future, what are your thoughts on forking this project into a standalone app?
I know there are currently a handful of Snapchat clones that support saving snaps, but they are all either horribly outdated (e.g. no support for stories or messages) or frighteningly unsafe (The Snappening). I think an open-source, up-to-date app from a trusted dev would fill a big hole for users who can't root their device or install the Xposed framework.
I hope I'm not coming across as entitled or ungrateful, I'm just a regular Keepchat and Snapshare user, and losing both after updating to Lollipop kind of sucks. Having a Snapchat alternative that would work on Android 5.0 and be available on something like f-droid would be awesome.
Click to expand...
Click to collapse
That would involve an enormous amount of work. There's no point forking this project, this 100% depends on Xposed and has no future without it.
I do get what you mean and I agree with you, there are no great alternatives at the moment. Another app not requiring Xposed would still require root, because it needs to get the images from the data folder from Snapchat. The only solution not requiring root is modifying a Snapchat APK, which sucks, as you stated yourself. My OnePlus One will get Android L in 3 months, I hope Xposed will be compatible by then. If not, I might create an app for it, but that will require root. So I'm sorry, I can't help you at the moment. Keepchat really is the best solution at the moment and it is open source.
@P1nGu1n_ I can't wait for you to begin work. Can you make the first order to get this thing working again. This latest update doesn't work anymore. Just on stories. Good luck with it.
keithsmith22 said:
@P1nGu1n_ I can't wait for you to begin work. Can you make the first order to get this thing working again. This latest update doesn't work anymore. Just on stories. Good luck with it.
Click to expand...
Click to collapse
Working on it at the moment
Which latest update? The latest update is 5.0.38.2 as far as I know and everything is fully working on it.
P1nGu1n_ said:
Working on it at the moment
Which latest update? The latest update is 5.0.38.2 as far as I know and everything is fully working on it.
Click to expand...
Click to collapse
Yes. Release 3.6.3 for Snapchat 5.0.38.2 is not working. It does the stories but nothing else.
keithsmith22 said:
Yes. Release 3.6.3 for Snapchat 5.0.38.2 is not working. It does the stories but nothing else.
Click to expand...
Click to collapse
Works perfect for me
Sent from my SM-G900F using Tapatalk
keithsmith22 said:
Yes. Release 3.6.3 for Snapchat 5.0.38.2 is not working. It does the stories but nothing else.
Click to expand...
Click to collapse
Running 3.6.3 with Snapchat 5.0.38.2, several people confirmed it working. Probably something's not working on your side, can you enable debugging in settings, try to save a snap and post your log? Might give us a clue about what's going on and why it's not working for you.
P1nGu1n_ said:
Running 3.6.3 with Snapchat 5.0.38.2, several people confirmed it working. Probably something's not working on your side, can you enable debugging in settings, try to save a snap and post your log? Might give us a clue about what's going on and why it's not working for you.
Click to expand...
Click to collapse
Will do when I get home. Thanks for the quick response.
P1nGu1n_ said:
Running 3.6.3 with Snapchat 5.0.38.2, several people confirmed it working. Probably something's not working on your side, can you enable debugging in settings, try to save a snap and post your log? Might give us a clue about what's going on and why it's not working for you.
Click to expand...
Click to collapse
I did an uninstall/ fresh reinstall of both snapchat and the module and it is working fine. Not sure what the glitch was about I am good to go. Thanks.

[FIXED] 95% of Android phones vulnerable to Stagefright MMS exploit

Hello,
a massive bug was found in the media playback component of android.
http://techreport.com/news/28701/95-of-android-phones-vulnerable-to-stagefright-mms-exploit
I think this bug was fixed in android with this patch
https://android.googlesource.com/platform/frameworks/av/+/dae006d1def007dddad9a202a0593b478eab503f
I do not have the source of libstagefright.so (has anyone?) for 407/DSC, but from the symbols I know the affected function Copy is inside /system/lib/libstagefright_amrnb_common.so. This library is in the whole system only used from /system/lib/libstagefright.so, but this library does not use the function Copy(). this library uses Copy under the name voAWB_Copy.
So I think our Streak 5 is one of the 5% unaffected android devices.
Streak 5 is affected, too.
I attached a fix for DSC/407 - waiting for an exploit
regards hunderteins

Categories

Resources