Database Users

Roms for G935t?

I see a lot of roms and root threads in the general galaxy s7e discussion forums but i see only 1 rom listed under the t-mobile variant. Are the other roms not going to work on G935t? or will they work but theres no point having multiple threads?
im coming from almost entirely nexus stuff before so this phone is still rather new to me with how locked down it is.

shrimants said:
I see a lot of roms and root threads in the general galaxy s7e discussion forums but i see only 1 rom listed under the t-mobile variant. Are the other roms not going to work on G935t? or will they work but theres no point having multiple threads?
im coming from almost entirely nexus stuff before so this phone is still rather new to me with how locked down it is.
Click to expand...
Click to collapse
Tekv2 and Echoe are the only ones.
Personally and suggestion, i'll head up for TEKV2

This phone is locked down like Fort Knox. The locked bootloader was a big disappointment for ROM and root lovers, especially for early adopters like me.

Dr. Fed said:
This phone is locked down like Fort Knox. The locked bootloader was a big disappointment for ROM and root lovers, especially for early adopters like me.
Click to expand...
Click to collapse
I thought we had gotten past that? Or is it just that we have root but the bootloader itself is still locked?

shrimants said:
I thought we had gotten past that? Or is it just that we have root but the bootloader itself is still locked?
Click to expand...
Click to collapse
Nothing has changed. We have root because of an engineering kernel that allows root commands. But bootloader will not allow us to flash anything that isn't developed or approved by Samsung.

Rooting help

Have people been able to successfully root their Mediapads? I can't find any reliable/stable methods for TWRP or similar. The only solution at the moment is the one that greatslon created; no one/very few have confirmed that this works. Are there any stock firmwares/recoveries available yet either?

I followed the instructions given in the other thread. It was not a 1-click straight path, but it eventually worked just great and my M3 is rooted since a couple of months now, it works like a charm and it's super stable.
wanna look in here -> http://forum.xda-developers.com/mediapad-m3/how-to/root-success-t3489547

lolo83560 said:
I followed the instructions given in the other thread. It was not a 1-click straight path, but it eventually worked just great and my M3 is rooted since a couple of months now, it works like a charm and it's super stable.
wanna look in here -> http://forum.xda-developers.com/mediapad-m3/how-to/root-success-t3489547
Click to expand...
Click to collapse
I'm curious, do you have a US version or other version of this tablet? I have the US version and I cannot get TWRP that's posted in your linked thread to even boot. Trying to narrow down why it works for some and not others.
Thank you.

jmjm003 said:
I'm curious, do you have a US version or other version of this tablet? I have the US version and I cannot get TWRP that's posted in your linked thread to even boot. Trying to narrow down why it works for some and not others.
Thank you.
Click to expand...
Click to collapse
I'm French, bought it in France from a french dealer.
It does not look to be a french-specific model though, I would rather say "European model" as the included documentation comes in different EU languages.
In case that's relevant info my model is BTV-DL09 and build # is BTV-DL09C100B003
And from instructions given here, my OEMINFO is:
Vendor= hw
Country= eu

I'm located in the US (Atl) and we only have the WiFi only tablet here.
Model# BTV-W09
Build# BTV-W09C128B002
OEMINFO - ? Currently I can't boot TWRP or root so I can't retrieve it.
I do appreciate you sharing your info.

mrSpuddy said:
Have people been able to successfully root their Mediapads? I can't find any reliable/stable methods for TWRP or similar. The only solution at the moment is the one that greatslon created; no one/very few have confirmed that this works. Are there any stock firmwares/recoveries available yet either?
Click to expand...
Click to collapse
I'm in the same boat as you man. I posted in the greatslon thread that it didn't work for me and the OP nor anyone else cared to reply. I too have the US wifi only variant so maybe that's the reason why. As of right now I'm stuck using the stock device with just the bootloader unlocked.
I don't know why the hell this device isn't more popular it has stupid good specs and build quality for its sub $300 price. And an unlockable bootloader. You'd figure the dev community of the nexus 7 would be all over it.

elsamuraiguapo said:
I'm in the same boat as you man. I posted in the greatslon thread that it didn't work for me and the OP nor anyone else cared to reply. I too have the US wifi only variant so maybe that's the reason why. As of right now I'm stuck using the stock device with just the bootloader unlocked.
I don't know why the hell this device isn't more popular it has stupid good specs and build quality for its sub $300 price. And an unlockable bootloader. You'd figure the dev community of the nexus 7 would be all over it.
Click to expand...
Click to collapse
There is one real thread with a mish-mash of different model numbers. I am sceptical to trust that one home-made/freelance custom recovery will be the solution for everyone. I appreciate all the work that has been put in, but without more evidence that it will work, I'm staying clear. It's a shame as this tablet looks and feels great; it just needs the freedom of root. Unfortunately, as the rest of the world moves onto Nougat, an unrooted Huawei tablet running Marshmallow becomes less appealing. Lets hope our devices don't die too early.
Model: BTV-W09
Build: BTV-W09C100B003

Greatslon modded version of TWRP works fine with the US variant of the MediaPad M3. After I gave up trying to simply boot into it rather than flash it over my stock recovery I've not had any problems. If it was bricking device's you would see numerous complaints in his thread. After it was discovered that there was a difference between tablets depending where you purchased it he corrected for it.

elsamuraiguapo said:
I'm in the same boat as you man. I posted in the greatslon thread that it didn't work for me and the OP nor anyone else cared to reply. I too have the US wifi only variant so maybe that's the reason why. As of right now I'm stuck using the stock device with just the bootloader unlocked.
I don't know why the hell this device isn't more popular it has stupid good specs and build quality for its sub $300 price. And an unlockable bootloader. You'd figure the dev community of the nexus 7 would be all over it.
Click to expand...
Click to collapse
May I ask how you unlocked the bootloader? I emailed Huawei and they told me that they can't help me unlock it.....

XT1609 - No Root, Now What?

I'm satisfied with this phone for the most part. From what I've read so far, getting this phone rooted seems out of the question. Just what can you do, if anything, as far as customizing your phone like what's possible with Xposed (or even Gravitybox)? I'd prefer not flashing if the rom isn't rooted.
Any suggestions or answers?
Thanks!

PBMaxx said:
I'm satisfied with this phone for the most part. From what I've read so far, getting this phone rooted seems out of the question. Just what can you do, if anything, as far as customizing your phone like what's possible with Xposed (or even Gravitybox)? I'd prefer not flashing if the rom isn't rooted.
Any suggestions or answers?
Thanks!
Click to expand...
Click to collapse
Unfortunately for the xt1609 you can only use the stock rom as there is no root method for it. You cannot flash any custom roms or recoveries or use xposed.
Stuck with stock.

classic757 said:
Unfortunately for the xt1609 you can only use the stock rom as there is no root method for it. You cannot flash any custom roms or recoveries or use xposed.
Stuck with stock.
Click to expand...
Click to collapse
There acually may be a way... if someone thinks hard enough about it, like with the Desire 526 Verizon model. If enough Devs and Senoir members get together, it can be done, nothing is impossible hardware wise

classic757 said:
Unfortunately for the xt1609 you can only use the stock rom as there is no root method for it. You cannot flash any custom roms or recoveries or use xposed.
Stuck with stock.
Click to expand...
Click to collapse
Voltz100999 said:
There acually may be a way... if someone thinks hard enough about it, like with the Desire 526 Verizon model. If enough Devs and Senoir members get together, it can be done, nothing is impossible hardware wise
Click to expand...
Click to collapse
@classic757 statement was true when posted and remains so today. Finding a root solution (identifying a vulnerability and then developing a viable exploit to leverage it) has nothing to do with hardware unique to the G4P XT1609 varient. It is hard (increasingly unsucessful) work that fails to attract the critical mass needed to mount a coordinated effort. The puny market for this model almost guarantees no such effort will be undertaken.
If you truely want/need root consider a XT1607 which is bootloader unlockable and works fine with CDMA networks (specifically Verizon).

Davey126 said:
@classic757 statement was true when posted and remains so today. Finding a root solution (identifying a vulnerability and then developing a viable exploit to leverage it) has nothing to do with hardware unique to the G4P XT1609 varient. It is hard (increasingly unsucessful) work that fails to attract the critical mass needed to mount a coordinated effort. The puny market for this model almost guarantees no such effort will be undertaken.
If you truely want/need root consider a XT1607 which is bootloader unlockable and works fine with CDMA networks (specifically Verizon).
Click to expand...
Click to collapse
Well, as soon as I get $140, ill give it a go, but until then, ill just have to wait.

Voltz100999 said:
Well, as soon as I get $140, ill give it a go, but until then, ill just have to wait.
Click to expand...
Click to collapse
Actually, all you need is $100. The G4 Play unlocked xt1607 is on sale at B&H through tomorrow 6-23-17 for $100. If you want it now's a great time to purchase it.
http://www.phonearena.com/news/Deal...for-just-100-32-off-its-regular-price_id95252

classic757 said:
Actually, all you need is $100. The G4 Play unlocked xt1607 is on sale at B&H through tomorrow 6-23-17 for $100. If you want it now's a great time to purchase it.
http://www.phonearena.com/news/Deal...for-just-100-32-off-its-regular-price_id95252
Click to expand...
Click to collapse
I got it to root with @utoprime's method. and i am now enjoying that as a result.
---------- Post added at 04:00 AM ---------- Previous post was at 03:57 AM ----------
Locked bootloader and all. Here is the method
https://twitter.com/utoprime

G955u factory binary and eng_boot (bootloader v2)--ERASED THE LINK!!

erased link sorry

What benefits does flashing this provide?

ktimque said:
What benefits does flashing this provide?
Click to expand...
Click to collapse
None yet, it's the base for getting root, once we find a way to get it to stay rooted. It's mainly for those who upgraded to the 2nd iteration of the bootloader and can't downgrade to a rootable firmware (It's been confirmed by a few to work with the new Cyborg rom, albeit without root).
As of right now, unless you know why you need it, it's best to leave it alone.

podagee said:
IF ANYONE GETS ROOT COULD YOU BE SO KIND AND POST IT HERE THANK YOU.
Click to expand...
Click to collapse
ktimque said:
What benefits does flashing this provide?
Click to expand...
Click to collapse
Well, I may have spoke too soon, you guys might want to take a look here in the Cyborg rom thread, seems they have a modified U2 bootloader they're flashing and retaining root. One member has volunteered to do a factory reset to see if it survives, but if so, v2 bootloader may now be rootable, or at least on the right track for public use.

IJoxer said:
None yet, it's the base for getting root, once we find a way to get it to stay rooted. It's mainly for those who upgraded to the 2nd iteration of the bootloader and can't downgrade to a rootable firmware (It's been confirmed by a few to work with the new Cyborg rom, albeit without root).
As of right now, unless you know why you need it, it's best to leave it alone.
Click to expand...
Click to collapse
Thanks for answering that man. Haha. That's awesome that the guys got stuff moving that quickly. I knew that they had the files also,but, held off as long as they could until I came along.
But another useful feature I've noticed in this combo firmware is that there is an open unlock option now and mine sticks after reboot. I tried build roms, kernels,etc.. in the past that ended in ultimate failure. I'd like to start again. At the moment I just cruise the foreign forums grabbing whatever software I can find. I kinda have building only the tree down, not so much, as it's been years. I used to build Linux OS's a long time ago but forgot. I'll do my own research here if it, anybody wants to teach, I'm all ears, all eyes. Aloha

Rooting the ls997 (oreo) - request

Is there any progress or hopes on rooting the ls997 running Oreo?
My device was unlocked for any carrier but after the Oreo update it has been relocked and I can't seem to find a way around it.
Rooting seems to be my best bet now. Plus I need to delete some super annoying Sprint apps.

Samted69 said:
Is there any progress or hopes on rooting the ls997 running Oreo?
My device was unlocked for any carrier but after the Oreo update it has been relocked and I can't seem to find a way around it.
Rooting seems to be my best bet now. Plus I need to delete some super annoying Sprint apps.
Click to expand...
Click to collapse
I would say if you mean official Oreo, than no.
Anything after ZV7 atm is not rootable. Especially Oreo. Nougat might still have a chance. But Oreo is the nail in the coffin, if not the final nail. I personally am rooted on ZV7 and I can't even find an Oreo based ROM to run and try for LS997. Sprint's Kdz lockdown is my guess.
Carrier unlocked is sadly not going to allow root either unless somehow able to fully swap internal thoughts and memories of phone with another carrier. Even if able, it a slim chance if any.

Mysticblaze347 said:
I would say if you mean official Oreo, than no.
Anything after ZV7 atm is not rootable. Especially Oreo. Nougat might still have a chance. But Oreo is the nail in the coffin, if not the final nail. I personally am rooted on ZV7 and I can't even find an Oreo based ROM to run and try for LS997. Sprint's Kdz lockdown is my guess.
Carrier unlocked is sadly not going to allow root either unless somehow able to fully swap internal thoughts and memories of phone with another carrier. Even if able, it a slim chance if any.
Click to expand...
Click to collapse
You ever find anywhere else with a zv7? The one you linked got snatched up...?. I gotta make a dump for i95swervin and maybe he'll make a version of Alpha Oreo for LS997. I might be responsible for your lack of an Oreo ROM ?
---------- Post added at 12:03 PM ---------- Previous post was at 11:52 AM ----------
Mysticblaze347 said:
I would say if you mean official Oreo, than no.
Anything after ZV7 atm is not rootable. Especially Oreo. Nougat might still have a chance. But Oreo is the nail in the coffin, if not the final nail. I personally am rooted on ZV7 and I can't even find an Oreo based ROM to run and try for LS997. Sprint's Kdz lockdown is my guess.
Carrier unlocked is sadly not going to allow root either unless somehow able to fully swap internal thoughts and memories of phone with another carrier. Even if able, it a slim chance if any.
Click to expand...
Click to collapse
We should start a bounty thread???

zeusofyork said:
You ever find anywhere else with a zv7? The one you linked got snatched up...?. I gotta make a dump for i95swervin and maybe he'll make a version of Alpha Oreo for LS997. I might be responsible for your lack of an Oreo ROM ?
---------- Post added at 12:03 PM ---------- Previous post was at 11:52 AM ----------
We should start a bounty thread???
Click to expand...
Click to collapse
A bounty thread would be useless, most of the devs have moved on and runningnak3d has already stated root for 997 is a lost cause. If root is very important to you, then you should move onto another device
Sent from my LG-H910 using XDA Labs

zeusofyork said:
You ever find anywhere else with a zv7? The one you linked got snatched up.... I gotta make a dump for i95swervin and maybe he'll make a version of Alpha Oreo for LS997. I might be responsible for your lack of an Oreo ROM ?
---------- Post added at 12:03 PM ---------- Previous post was at 11:52 AM ----------
We should start a bounty thread???
Click to expand...
Click to collapse
I would be down for a bounty thread, but I think it would be pointless as well.
As for the ZV7... That sucks. I wish I had another link but I do not atm and can't say when. If I see something I will let you know asap. Very rare now adays.
I also have a ZV7 dump I think on my laptop if need be from before I rooted.
ZVD rootable would be absolutely epic, I still have hope for someday as for my backup phones.

zeusofyork said:
You ever find anywhere else with a zv7? The one you linked got snatched up.... I gotta make a dump for i95swervin and maybe he'll make a version of Alpha Oreo for LS997. I might be responsible for your lack of an Oreo ROM
Click to expand...
Click to collapse
The eBay store of the seller who previously sold several LS997 ZV7's can be found here. He periodically relisted the Sprint LG V20 on there over the last couple of months (I bought two ZV7's on two separate occasions), so there's a slim chance that he could still have another ZV7 left among those that he sells. You could contact the seller to check.

As I have stated in another thread, I have a procedure that I am confident will work, but it will require significant development time to get kexec working.
The procedure would not be easy (if you think lafsploit is hard to do .. you haven't seen anything yet). Also, it would be a tethered root .. meaning you would need a PC every time your phone is powered off. If you just needed to restart the OS, that could be done without a PC, but a cold boot would need a PC to enter some commands via a shell.
If all of that sounds like something you are willing to deal with, then start a bounty thread and I will try to get an exact estimate on the amount of dev hours I would have to put into writing the code.
If you Google "kexec loading a kernel from a kernel" you will get an idea of the amount of work I would have to put in.
By using kexec, we would use a validated kernel (one that passes dm-verity) to load another kernel with dm-verity disabled. Since the first kernel already passed the checks .. the second kernel would be loaded without the full boot process, and therefore aboot wouldn't verify it.
EDIT: Oh yeah, you would also need an SD card in your phone with a partition to hold kexec, the kernels, and TWRP. You could use the rest of the SD card for the OS, and the partition wouldn't need to be very big .. but just throwing that out there.
-- Brian

runningnak3d said:
As I have stated in another thread, I have a procedure that I am confident will work, but it will require significant development time to get kexec working.
The procedure would not be easy (if you think lafsploit is hard to do .. you haven't seen anything yet). Also, it would be a tethered root .. meaning you would need a PC every time your phone is powered off. If you just needed to restart the OS, that could be done without a PC, but a cold boot would need a PC to enter some commands via a shell.
If all of that sounds like something you are willing to deal with, then start a bounty thread and I will try to get an exact estimate on the amount of dev hours I would have to put into writing the code.
If you Google "kexec loading a kernel from a kernel" you will get an idea of the amount of work I would have to put in.
By using kexec, we would use a validated kernel (one that passes dm-verity) to load another kernel with dm-verity disabled. Since the first kernel already passed the checks .. the second kernel would be loaded without the full boot process, and therefore aboot wouldn't verify it.
EDIT: Oh yeah, you would also need an SD card in your phone with a partition to hold kexec, the kernels, and TWRP. You could use the rest of the SD card for the OS, and the partition wouldn't need to be very big .. but just throwing that out there.
-- Brian
Click to expand...
Click to collapse
I never looked into lafsploit because I don't have an H918. Just ls997..one rooted ZV7, and two ZVD's (backups). However...that method would seem a lil tedious, but doable. If only way...
I was wondering if it is even possible or easier to do and full on 100% phone clone. Turn one of the ZVD's into the rooted ZV7. That would be a true game changer and way faster.
If this was not intended at me I apologise. However, just a thought.

Once ARB has been incremented you can't roll back to any version that has a lower ARB. Even if you replaced the NAND, you would still only be able to use ZV8 or later since ARB is incremented inside the CPU. So, you can always replace the CPU AND the NAND
-- Brian

runningnak3d said:
Once ARB has been incremented you can't roll back to any version that has a lower ARB. Even if you replaced the NAND, you would still only be able to use ZV8 or later since ARB is incremented inside the CPU. So, you can always replace the CPU AND the NAND
-- Brian
Click to expand...
Click to collapse
Oh yeah, I forgot about it being baked in the CPU..damn it.
Reminds me of PS3 and nand flasher crap. Damn all the lock down. Oh well. At least I have a replacable battery .

Sad year so far
My beloved fully rooted ls997 died with a sudden rpm crash that was unfixable ?. Cant find a different one for the life of me. Anyway, I am now on ls997 oreo with temp root. Its nice, but very limited. I miss my full root.
I noticed that I have oem unlocked which is supposed to unlock bootloader or allow. But this supposed arb screws it up. How I have no idea. Its all rom related so it absolutely makes no damn sense. Why have oem unlocked if we cant do anything?
So oreo full root with arb?...
Would a stock Oreo dump allow for kdz extraction to make a rooted/ rootable rom?
Just a question and be cool if so. Long shot I know.
Especially with a not yet known arb bootloader

cnjax said:
A bounty thread would be useless, most of the devs have moved on and runningnak3d has already stated root for 997 is a lost cause. If root is very important to you, then you should move onto another device
Sent from my LG-H910 using XDA Labs
Click to expand...
Click to collapse
i needed to hear this now i can relax,i have so many ways but they don't work for my v20 ls997 running oreo