|
Welcome to the GSM-Forum forums. You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. Only registered members may post questions, contact other members or search our database of over 8 million posts. Registration is fast, simple and absolutely free so please - Click to REGISTER! If you have any problems with the registration process or your account login, please contact contact us . |
|
Register | FAQ | Donate | Forum Rules | Root any Device | ★iPhone Unlock★ | ★ Direct Codes ★ | Direct Unlock Source | Search | Today's Posts | Mark Forums Read |
| LinkBack | Thread Tools | Display Modes |
08-30-2018, 04:28 | #1 (permalink) |
Product Manager Join Date: Apr 2006 Age: 55
Posts: 5,746
Member: 256342 Status: Offline Sonork: None Thanks Meter: 28,276 | RIFF Box Qualcomm Sahara support, tips and tricks We took some time to prepare latest addition to JTAG Manager and built from scratch complete Sahara protocol support (both firehose and streaming download). We didn't just embedded freely available tools from Qualcomm (emmcdl and qh_loader), instead, we used own code. Great work is done on eMMC Plugin too, which now supports USB, ISP and JTAG access. You can select partition on LU (Logical Unit) to parse. Among other improvements, we added GPT repair/adjust which serves as analogue to patch0.xml used with QFIL. "Adjust GPT" will automatically update checksums and resize userdata partition to fill whole chip. This is valuable in cases where gpt is from different chip size. There is more work, but we feel confident that current functions can satisfy most of the needs in servicing and forensics fields. So, for start, few important tips: 1. Make sure to have Qualcomm drivers installed 2. Most Snapdragon 200 firehose loaders don't have read support, also some will not output storage info (size, SN, brand). We found out that there is one universal firehose looader which supports all this, but uses a bit different protocol. As this is Alcatel loader, we named it "Alcatel Firehose". It can be used with MSM8x10, MSM8x12, MSM8x26 which otherwise don't have read support. File is attached here. 3. Sahara protocol requires phone to be in EDL mode. To enter EDL mode, exist few methods: 1. Kill phone BootChain or GPT 2. Switch to EDL from ADB or from TWRP: (TWRP tested on some Samsung models) "Adb reboot EDL" 3. Use EDL cable (Xiaomi phones for example) 4. Activate Diag mode and JTAG Manager will switch it to EDL automatically if phone supports it. 5. Hold Vol+ for 10 seconds (OnePLus models) 6. Short EDL TP-s if exist 7. Short CMD to GND 9. Most reliable method is to remove eMMC I'll add some videos to this post later, for now please test functionality and ask for clarification if there is anything unclear. Last edited by legija; 08-30-2018 at 18:39. |
The Following 39 Users Say Thank You to legija For This Useful Post: |
08-30-2018, 11:19 | #5 (permalink) |
Product Manager Join Date: Apr 2006 Age: 55
Posts: 5,746
Member: 256342 Status: Offline Sonork: None Thanks Meter: 28,276 | Redmi Note5 Pro is SDM636. Firehose loader should be embedded with firmware. Give me some time to check it. Oppo R15 we haven't tested, but loader is there in ops file. Need to decrypt it, also need some time (few hours). |
08-30-2018, 11:51 | #6 (permalink) |
Product Manager Join Date: Apr 2006 Age: 55
Posts: 5,746
Member: 256342 Status: Offline Sonork: None Thanks Meter: 28,276 | |
The Following 3 Users Say Thank You to legija For This Useful Post: |
08-30-2018, 13:47 | #8 (permalink) |
Banned Join Date: Sep 2006
Posts: 102
Member: 349359 Status: Offline Thanks Meter: 7 | i have lg v20 dead with ufs chip , can i revive it . it battery charging sign when battery charge is low but vibrates alone with black screen when battery is charged. can i fix it with this update. |
08-30-2018, 17:47 | #10 (permalink) |
No Life Poster Join Date: May 2009 Location: Bangladesh Age: 30
Posts: 888
Member: 1034743 Status: Offline Sonork: 100.1619212 Thanks Meter: 193 | Riff box is good,,but team slowly worked.. i hope also update this device regurarly look like z3x jtag , octoplus jtag , medusa etc |
08-31-2018, 05:33 | #13 (permalink) | |
Freak Poster Join Date: Aug 2006 Location: Buenos Aires, Argentina
Posts: 431
Member: 331917 Status: Offline Thanks Meter: 214 | Quote:
I tried 3A, but no luck. http://forum.gsmhosting.com/vbb/f83/...-mode-2461092/ thanks | |
08-31-2018, 07:33 | #14 (permalink) | |
Product Manager Join Date: Apr 2006 Age: 55
Posts: 5,746
Member: 256342 Status: Offline Sonork: None Thanks Meter: 28,276 | Quote:
Of course DIAG or manufacturer mode must be enabled first, and of course not all models will comply. I've tested Huawei few models and they all go to EDL via this, but on LG some do, some not. | |
The Following User Says Thank You to legija For This Useful Post: |
08-31-2018, 16:26 | #15 (permalink) | |
Freak Poster Join Date: Aug 2006 Location: Buenos Aires, Argentina
Posts: 431
Member: 331917 Status: Offline Thanks Meter: 214 | Quote:
thanks anyway for your help | |
The Following User Says Thank You to Nicogalan For This Useful Post: |
Bookmarks |
Thread Tools | |
Display Modes | |
| |
|