CG36, CG43, CG44, CG46 and CG52

[topkat0]

digging a bit more found that inetd.sh
CG36\etc\initservices\services\inetd.sh
could activate the telnet if motmode
CG36\bin\motmode
returns a value of engr that would make inetd run with telnet active
can someone dissasemble modemode and tell us what it checking?
TIA

[biji]

would you post file motmode here..

[Psycomorpher]

would you post file motmode here..

Here it is.

[biji]

maybe we can try motmode -m engr ?


some dump:

motmode: ELF 32-bit LSB executable, ARM, version 1 (SYSV), for GNU/Linux 2.4.17, dynamically linked (uses shared libs), stripped


/lib/ld-linux.so.3
MontaVista Software
motmode: EBADCRC
motmode: ENOTIMPLEMENTED
motmode: EINVAL
motmode
Usage: motmode FLAG...
Return the boolean AND of the specified flags

Possible FLAGs, each FLAG may only be specified once:
-m, --mode=[MODE] Mode of the phone. MODE may
be 'engr' or 'prod'.
-k, --key=[STATE] Key provisioning state. STATE
may be 'notinstalled' or
'installed'.
-p, --product=[STATE] Product state. STATE may be
'acceptance' or 'ship'.
mode
product
engr
prod
installed
notinstalled
acceptance
ship
m:k:
libmotsecurity.so
_DYNAMIC
_init
_fini
__data_start
_Jv_RegisterClasses
__gmon_start__
mot_security_getmode
mot_security_getboundsignaturestate
mot_security_getproductstate
libc.so.6
getopt_long
perror
optarg
abort
fprintf
strcmp
stderr
exit
__libc_start_main
__exidx_start
__exidx_end
_edata
__bss_start
__bss_start__
__bss_end__
__end__
GLIBC_2.4
/lib/ld-linux.so.3

[vanhieumai]

thank rasputin007

[biji]

Can anybody post libmotsecurity.so??
thanks

[biji]

You can change any file in the mounted filesystem and create a new CG.smg with "mksquashfs" command, but I doubt if it will work cos there is no digital signature, which seems to be in every CG and without those the V8 just will start in BL (bootloader).

suppose I can make modification to CGs (offline)
so is it possible to "remake" firmware from those modified CGs? (and flashed back to phone)

thanks

[rasputin007]

suppose I can make modification to CGs (offline)
so is it possible to "remake" firmware from those modified CGs? (and flashed back to phone)

thanks

Sorry, but I forgot that squashfs is a read-only filesystem. You can edit files from it, but you can not save them!!!
Psycomorpher and i tried it with the CG52 (cos it has no linked files/folders and no digital signature), we could use mksquashfs to create a new CG52.smg, but after flashing those the V8 hangs at boot screen.
Even if you take a unchanged original CG52 and mksquashfs them into a CG52.smg, it is the same problem. We have not found out why our "home made" CG52 do not work, it might be some parameter settings when you mksquashfs them.
All other CG's are not possible to get them working cos the digital signature would be missing.
It is possible to use original CG's for flashing, see "Skins?Anyone" thread.

[biji]

Thank you for explanation..