summaryrefslogtreecommitdiffstats
path: root/htcdumlock/htcdumlock.c
diff options
context:
space:
mode:
Diffstat (limited to 'htcdumlock/htcdumlock.c')
-rw-r--r--htcdumlock/htcdumlock.c364
1 files changed, 364 insertions, 0 deletions
diff --git a/htcdumlock/htcdumlock.c b/htcdumlock/htcdumlock.c
new file mode 100644
index 000000000..911961292
--- /dev/null
+++ b/htcdumlock/htcdumlock.c
@@ -0,0 +1,364 @@
+/*
+ * This binary is a workaround for HTC's unlock method that doesn't let
+ * you flash boot while booted to recovery. It is designed to dump
+ * recovery and boot to the sdcard then flash recovery to boot. When
+ * used with a supported recovery, you can reflash the dumped copy of
+ * boot once you enter the recovery.
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 3 and
+ * only version 2 as published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+ * 02110-1301, USA.
+ *
+ * The code was written from scratch by Dees_Troy dees_troy at
+ * yahoo
+ *
+ * Copyright (c) 2012
+ *
+ * Note that this all could probably be done as a shell script, but
+ * I am much better at C than I am at scripting. :)
+ */
+#include <stdio.h>
+#include <string.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <sys/stat.h>
+
+// Number of bytes in the ramdisks to compare
+#define SCAN_SIZE 60
+
+#define DEVID_MAX 64
+
+#define CMDLINE_SERIALNO "androidboot.serialno="
+#define CMDLINE_SERIALNO_LEN (strlen(CMDLINE_SERIALNO))
+#define CPUINFO_SERIALNO "Serial"
+#define CPUINFO_SERIALNO_LEN (strlen(CPUINFO_SERIALNO))
+#define CPUINFO_HARDWARE "Hardware"
+#define CPUINFO_HARDWARE_LEN (strlen(CPUINFO_HARDWARE))
+
+char device_id[DEVID_MAX] = { 0 };
+int verbose = 0, java = 0;
+
+void sanitize_device_id(void) {
+ const char* whitelist ="-._";
+ char str[DEVID_MAX];
+ char* c = str;
+
+ snprintf(str, DEVID_MAX, "%s", device_id);
+ memset(device_id, 0, strlen(device_id));
+ while (*c) {
+ if (isalnum(*c) || strchr(whitelist, *c))
+ strncat(device_id, c, 1);
+ c++;
+ }
+ return;
+}
+
+/* Recent HTC devices that still take advantage of dumlock
+ can safely rely on cmdline device_id retrieval */
+void get_device_id(void)
+{
+ FILE *fp;
+ char line[2048];
+ char* token;
+
+ // Check the cmdline to see if the serial number was supplied
+ fp = fopen("/proc/cmdline", "rt");
+ if (fp != NULL) {
+ fgets(line, sizeof(line), fp);
+ fclose(fp); // cmdline is only one line long
+
+ token = strtok(line, " ");
+ while (token) {
+ if (memcmp(token, CMDLINE_SERIALNO, CMDLINE_SERIALNO_LEN) == 0) {
+ token += CMDLINE_SERIALNO_LEN;
+ snprintf(device_id, DEVID_MAX, "%s", token);
+ sanitize_device_id(); // also removes newlines
+ return;
+ }
+ token = strtok(NULL, " ");
+ }
+ }
+
+ strcpy(device_id, "serialno");
+ if (verbose)
+ printf("device id not found, using '%s'.", device_id);
+ return;
+}
+
+void reboot_device() {
+ // Reboot
+ printf("Rebooting!\n");
+ system("reboot system");
+}
+
+void scan_for_ramdisk_data(char *filename, char *ramdisk) {
+ FILE *pFile;
+ unsigned long lSize;
+ unsigned char *buffer;
+ size_t result;
+ int i;
+
+ pFile = fopen(filename, "rb");
+ if(pFile==NULL){
+ printf("Unabled to open image.\nFailed\n");
+ exit(1);
+ }
+
+ fseek (pFile , 0 , SEEK_END);
+ lSize = ftell(pFile);
+ rewind(pFile);
+
+ //printf("\n\nFile is %ld bytes big\n\n", lSize);
+
+ buffer = (unsigned char*)malloc(sizeof(unsigned char) * lSize);
+ if(buffer == NULL){
+ printf("File read error!\nFailed\n");
+ exit(2);
+ }
+
+ result = fread (buffer, 1, lSize, pFile);
+ if (result != lSize) {
+ printf("Error reading file '%s'\nFailed\n", filename);
+ exit(3);
+ }
+
+ unsigned char needle[6] = {0x00, 0x00, 0x00, 0x00, 0x1f, 0x8b};
+ unsigned char *last_needle = NULL;
+ //char *p = memmem(needle, lSize, buffer, sizeof(needle));
+ unsigned char *p = memmem(buffer + 2048, lSize - 2048, needle, sizeof(needle));
+ if (!p) {
+ fclose(pFile);
+ printf("Ramdisk not found in '%s', error!\nFailed\n", filename);
+ exit(4);
+ } else {
+ //printf("Ramdisk found in '%s'!\n", filename);
+ }
+
+ memcpy(ramdisk, p, sizeof(char) * SCAN_SIZE);
+ fclose(pFile);
+ free(buffer);
+}
+
+int compare_ramdisks(char *boot_path, char *recovery_path) {
+ char boot_data[SCAN_SIZE], recovery_data[SCAN_SIZE];
+
+ scan_for_ramdisk_data(boot_path, (char*)&boot_data);
+ scan_for_ramdisk_data(recovery_path, (char*)&recovery_data);
+ if (memcmp(boot_data, recovery_data, sizeof(boot_data)) == 0) {
+ if (verbose)
+ printf("Boot and recovery are the same.\n");
+ return 0;
+ } else {
+ if (verbose)
+ printf("Boot and recovery are NOT the same.\n");
+ return 1;
+ }
+}
+
+void flash_recovery_to_boot(int no_flash, int no_reboot) {
+ char twrp_device_path[255], recovery_path[255], boot_path[255],
+ exec[255], md5recovery[255], md5boot[255],
+ recoveryimg[255], bootimg[255], tempimg[255];
+ int ret_val = 0;
+ FILE *fp;
+ char* token;
+
+ // Create folders
+ if (verbose)
+ printf("Making '/sdcard/TWRP'\n");
+ mkdir("/sdcard/TWRP", 0777);
+ if (verbose)
+ printf("Making folder '/sdcard/TWRP/htcdumlock'\n");
+ mkdir("/sdcard/TWRP/htcdumlock", 0777);
+ strcpy(twrp_device_path, "/sdcard/TWRP/htcdumlock/");
+ strcat(twrp_device_path, device_id);
+ if (verbose)
+ printf("Making folder '%s'\n", twrp_device_path);
+ mkdir(twrp_device_path, 0777);
+ // Make folder for recovery
+ strcpy(recovery_path, twrp_device_path);
+ strcat(recovery_path, "/recovery");
+ if (verbose)
+ printf("Making folder '%s'\n", recovery_path);
+ mkdir(recovery_path, 0777);
+ strcat(recovery_path, "/");
+ // Make folder for boot
+ strcpy(boot_path, twrp_device_path);
+ strcat(boot_path, "/boot");
+ if (verbose)
+ printf("Making folder '%s'\n", boot_path);
+ mkdir(boot_path, 0777);
+ strcat(boot_path, "/");
+
+ // Set up file locations
+ strcpy(recoveryimg, recovery_path);
+ strcat(recoveryimg, "recovery.img");
+ strcpy(bootimg, boot_path);
+ strcat(bootimg, "boot.img");
+ strcpy(tempimg, twrp_device_path);
+ strcat(tempimg, "/temp.img");
+
+ // Dump recovery
+ strcpy(exec, "dump_image recovery ");
+ strcat(exec, recoveryimg);
+ if (verbose)
+ printf("Running command: '%s'\n", exec);
+ ret_val = system(exec);
+ if (ret_val != 0) {
+ printf("Unable to dump recovery.\nFailed\n");
+ return;
+ }
+
+ // Dump boot (kernel)
+ strcpy(exec, "dump_image boot ");
+ strcat(exec, tempimg);
+ if (verbose)
+ printf("Running command: '%s'\n", exec);
+ ret_val = system(exec);
+ if (ret_val != 0) {
+ printf("Unable to dump recovery.\nFailed\n");
+ return;
+ }
+
+ // Compare the ramdisks of the images from boot and recovery to make sure they are different
+ // If they are the same, then recovery is already flashed to boot and we don't want to wipe
+ // out our existing backup of boot
+ if (compare_ramdisks(tempimg, recoveryimg) != 0) {
+ if (verbose)
+ printf("Boot and recovery do not match so recovery is not flashed to boot yet...\n");
+ strcpy(exec, "mv ");
+ strcat(exec, tempimg);
+ strcat(exec, " ");
+ strcat(exec, bootimg);
+ if (verbose)
+ printf("Moving temporary boot.img: '%s'\n", exec);
+ ret_val = system(exec);
+ if (ret_val != 0) {
+ printf("Unable to move temporary boot image.\nFailed\n");
+ return;
+ }
+ } else {
+ if (!java)
+ printf("Ramdisk recovery and boot matches! Recovery is already flashed to boot!\n");
+ if (!no_reboot)
+ reboot_device();
+ return;
+ }
+
+ // Flash recovery to boot
+ strcpy(exec, "flash_image boot ");
+ strcat(exec, recoveryimg);
+ if (no_flash) {
+ if (verbose)
+ printf("NOT flashing recovery to boot due to argument 'noflash', command is '%s'\n", exec);
+ } else {
+ if (verbose)
+ printf("Running command: '%s'\n", exec);
+ ret_val = system(exec);
+ if (ret_val != 0) {
+ printf("Unable to flash recovery to boot.\nFailed\n");
+ return;
+ }
+ }
+
+ if (!no_reboot && !ret_val)
+ reboot_device();
+}
+
+void restore_original_boot(int no_flash) {
+ char boot_path[255], exec[255];
+
+ // Restore original boot partition
+ strcpy(boot_path, "/sdcard/TWRP/htcdumlock/");
+ strcat(boot_path, device_id);
+ strcat(boot_path, "/boot/");
+ strcpy(exec, "flash_image boot ");
+ strcat(exec, boot_path);
+ strcat(exec, "boot.img");
+ if (no_flash) {
+ if (verbose)
+ printf("NOT restoring boot due to argument 'noflash', command is '%s'\n", exec);
+ } else {
+ if (verbose)
+ printf("Running command: '%s'\n", exec);
+ system(exec);
+ }
+}
+
+int main(int argc, char** argv)
+{
+ int recovery = 0, no_flash = 0, restore_boot = 0, arg_error = 0,
+ no_reboot = 0, i;
+
+ // Parse the arguments
+ if (argc < 2)
+ arg_error = 1;
+ else {
+ for (i=1; i<argc; i++) {
+ if (strcmp(argv[i], "recovery") == 0) {
+ // Check to see if restore option is already set
+ // Do not allow user to do recovery and restore at the same time
+ if (restore_boot)
+ arg_error = 1;
+ recovery = 1;
+ } else if (strcmp(argv[i], "restore") == 0) {
+ // Check to see if recovery option is already set
+ // Do not allow user to do recovery and restore at the same time
+ if (recovery)
+ arg_error = 1;
+ restore_boot = 1;
+ } else if (strcmp(argv[i], "noflash") == 0)
+ no_flash = 1;
+ else if (strcmp(argv[i], "noreboot") == 0)
+ no_reboot = 1;
+ else if (strcmp(argv[i], "verbose") == 0)
+ verbose = 1;
+ else if (strcmp(argv[i], "java") == 0)
+ java = 1;
+ else
+ arg_error = 1;
+ }
+ }
+ if (arg_error) {
+ printf("Invalid argument given.\n");
+ printf("Valid arguments are:\n");
+ printf(" recovery -- backs up boot and recovery and flashes recovery to boot\n");
+ printf(" restore -- restores the most recent backup of boot made by this utility\n");
+ printf(" noflash -- same as 'recovery' but does not flash boot or reboot at the end\n");
+ printf(" noreboot -- does not reboot after flashing boot during 'recovery'\n");
+ printf(" verbose -- show extra debug information\n");
+ printf("\nNOTE: You cannot do 'recovery' and 'restore' in the same operation.\nFailed\n");
+ return 0;
+ }
+
+ get_device_id();
+ if (verbose)
+ printf("Device ID is: '%s'\n", device_id);
+ if (strcmp(device_id, "serialno") == 0) {
+ printf("Error, dummy device ID detected!\n");
+ printf("Did you 'su' first? HTC Dumlock requires root access.\nFailed\n");
+ return 0;
+ }
+
+ if (recovery) {
+ if (!java)
+ printf("Flashing recovery to boot, this may take a few minutes . . .\n");
+ flash_recovery_to_boot(no_flash, no_reboot);
+ }
+ if (restore_boot) {
+ printf("Restoring boot, this may take a few minutes . . .\n");
+ restore_original_boot(no_flash);
+ }
+
+ return 0;
+}