6210/3310/3330 crashing sms!

[davieb]

Hi guys, now here's the deal:<br />I've edited gnokii LINUX software in the same way sms_client was supposedly edited (by breaking/changing the UDH to real high bytes)...<br />I've NOT tested it as I don't have a 6210/3310/3330 to try it out on <img src="frown.gif" border="0"> <br />But I've managed to compile and run it fine - and even send a message to my 6150! (tho it's unaffected as all messages are treated as having no udh on old models)

I won't be "releasing" the edit until I can have it tested - so...<br />Does anyone have a phone they'd mind me testing it on?<br />Remember, this bug can supposedly kill the phone - if it works and your phone is really dead, don't blame me!

If you wanna let me test it - email me at [email protected] with your phone number...<br />I'd like one of each (6210/3310/3330) to test on so send your phone model too and sw version!!! This might not work (could turn out pretty pish actually!) but according to the articles, the software has been modified in the correct fashion...

If it works i'll release the source and details of the file edited to produce this effect!

<img src="cool.gif" border="0"> <img src="wink.gif" border="0">

<FONT COLOR="#ffff00" SIZE="1">[ 10 January 2002 00:43: Message edited by: DavieB ]</font>

[micklong]

wowsers thats cool..

the soft u hve 'modified' what did/does it do apart from send mesg <br />is there a option to turn this 'bug on and off ..

<br />i do have a 3310, u copuld test it on ... hmmm<br />i was lead to believe that the phone recieves the msg ok ... but crashes every time u try to bring up details of the sms .. <br />and to get over this u use a diferent make/model of phone to delete the of*****ng sms<br />(if this is this case i will email ya me number )

so this bug can be used <img src="smile.gif" border="0"> <br />depending on its power will i soppose depend on how public it goes ?

Mick ...

[davieb]

Well, thats true on phones with no sms memory on the actual phone - but the 6210 can store quite a lot!<br />If the message is moved to the phone memory before it freezes, then every time the phone tries to initialise the "inbox", it'll freeze (or so I believe...)

The soft (gnokii) acts like Nokia Datasuite for linux, letting you use your mobile as a modem, send sms, send ringtones, etc...<br />This is someone elses work but is open source - I simply played with the values (once I actually found them!)<br />At the moment, I don't have any sort of way to enable/disable - the code is in c++ and making major modifications is beyond my level of skill...

If you still want me to test it, feel free to email me at the address below... And if you don't feel safe sending your number online, just pgp encrypt it using my public key below!

<img src="smile.gif" border="0"> <img src="cool.gif" border="0">

[davieb]

Actually, I think that If you did have a 6210, and it DID copy it into phone memory you could get round it by doing the following:

1.) Enable Sim PIN code<br />2.) Send dead UDH msg<br />3.) Turn phone back on<br />4.) When phone shows "Enter PIN:", plug in mbus cable, and delete the message directly from phone memory<br />5.) Enter PIN and phone should start fine

Just an idea <img src="smile.gif" border="0">

[Dave.W]

i see youve been thinking about this a lot <img src="smile.gif" border="0"> good work btw if its all correct.<br />if the message is opened, its only ment to freeze the phone though so you wouldnt need to have pin code request enabled as the phones still switched on and you could delete via data cable *i think*. <br />who knows though untill its tested <img src="eek.gif" border="0"> <img src="smile.gif" border="0">

[davieb]

Yeah I know what you mean - I didn't even consider a simple UI freeze!<br />I actually assumed it was a full system freeze - doh!<br />Thanks for pointing that one out <img src="smile.gif" border="0">

[davieb]

**** **** ****!!!!<br />Tried to repartition my laptop (where my modified client is...) and crosslinked files got screwed!<br />I've lost the edit completely but I still have written down where the UDH is specified...

If anyone is interested and has gnokii on linux/unix:<br />Line 2064 - File: Fbus6110.c

It'll be a while before I get everything back together.. In the meantimes I'll search for some win****s source I can try it out on - this'll be more usefull to general users anyway...

[chiefunlocker]

davidb, u sound like a man to know. respect

[davieb]

Thanks CU <img src="wink.gif" border="0"> <br />It's pretty hard tho <img src="frown.gif" border="0"> <br />I don't have the resources, money, or equipment of many people - hell i find it hard to buy expensive books <img src="wink.gif" border="0"> <br />So I usually learn what I can but moslty I just help out with anything anybody ask of me!

Peace <img src="wink.gif" border="0">

[chiefunlocker]

daivdb r u going to b uploading this software on here once its all working??

if so, just let me know <br />thanks

[davieb]

Of course! Since it'll take the weekend to rebuild all my dev stuff on my laptop I think I'll actually try reverse-engineering some win****s software.. It'll be more fun, easier to test, and more useful for you guys!

As I said before, I'll never charge for my gsm software/edits, or keep any of it private!<br />Source code will be open, hex edits will be discussed <img src="wink.gif" border="0">

[P]

Davie, I've sent you an email with my phone number, I've got a 6210 you can try it out on. I'm not worried about it messing up my fone, coz if it did, I'd go down the road to a club nokia centre point and get a new one. I've found theres 2 types of texts which will mess up phones. The first one will crash a 6210 whilst the message is being recieved, as I found with netmonitor. The phone just resets, then a minute later when the message starts to download again, it crashes again, and on and on. I don't know why this happens, but I've tested it by sending it to myself, and it seems like a normal text to me. It only seems to work on a 6210 though.

The other crashing text I've seen is on a friends 3310, where whenever she goes to open the text, the phone crashes, and you've got to take the battery out and turn on again. I fixed it for her by deleting the text with Oxygen SMS manager. I saw that the problem was the phone number recieved from was +4C7..... instead of +447... This is what I believe is making her phone crash. The person sending the text is sending it from another 3310 and I can't work out why that happens as its not even all the time.

If anyone else has seen this happening, let me know, then maybe we can work out how to *******te it.

P

[micklong]

ello 'P'

the first msg u talking about .. u say u send it ...<br />how did u send it, and how was it modified to cause this prob on the phone ??

cheers .. Mick ...

OO i tried the full screen (160) of ¤ (alt-0164) and it diplayed them fine !!<br />3310 v4.35

[Dave.W]

@Insp_Gadget <br />in the post the other day it said you need to do a full screen (160) of alrenate ¤ then € (euro symbol dont know why it shows as a square when the replies been posted though <img src="eek.gif" border="0"> )

<FONT COLOR="#ffff00" SIZE="1">[ 12 January 2002 12:19: Message edited by: D: ]</font>

[davieb]

It would show as a square since the language pack on the phone must not have contained the euro!<br />I got an 8310 for europe and I still got £ on it but when I get a service message with my balance on it i get some misformed looking "d" as currency symbol!<br />I guess i'll have to change the ppm when we get dct4 boxes <img src="smile.gif" border="0">