edl icon indicating copy to clipboard operation
edl copied to clipboard
verified publisher icon bkerler

Oneplus 9 Pro (oneplus - Oneplus protection with prjid 19815 detected)

Open nonameirl opened this issue 4 years ago • 10 comments

I have the Oneplus 9 Pro T-MO [LE-2127] Project="2085A"

I was trying to convert the phone back to its stock image and I used the SMT Download in MSM with the Indian image. [which I realize was a mistake] and now I can't flash any other firmware with MSM. I do have lun[0-5].bin backups from my stock image and I am trying to restore them back to the phone. I was trying to use the edl tool 'edl wf .\lun0.bin --lun=0' but I get a 'oneplus - Oneplus protection with prjid 19815 detected'. I've attempted using every prjid model number listed in the oneplus.py file and it's not working. I get a: 'Setprojmodel failed. {'value': 'NAK', 'model_check': '1', 'auth_token_verify': '0'}'

Given that I have have backed up all my stock images and luns with edl how can I restore it back?

nonameirl avatar Dec 03 '21 22:12 nonameirl

You need as well a matching edl loader for your device, not just the right prjid.

bkerler avatar Dec 04 '21 13:12 bkerler

[root@shitbook edl]# edl wf /mnt/lun4.bin --lun=4 --devicemodel=2085A

Qualcomm Sahara / Firehose Client V3.53 (c) B.Kerler 2018-2021. Device is in EDL mode .. continuing. sahara -

HWID: 0x001350e100514d67 (MSM_ID:0x001350e1,OEM_ID:0x0051,MODEL_ID:0x4d67) CPU detected: "lahaina" PK_HASH: 0xa26bc25799770106f32c2856606a87ad9c1e997d25b5e80ff30b0e47e4c85e15 Serial: 0x71baea5b

sahara - Found possible loader: /usr/lib/python3.9/site-packages/edlclient-3.53-py3.9.egg/edlclient/../Loaders/oneplus/0000000000514d67_a26bc25799770106_fhprg_op9.bin sahara - Uploading loader /usr/lib/python3.9/site-packages/edlclient-3.53-py3.9.egg/edlclient/../Loaders/oneplus/0000000000514d67_a26bc25799770106_fhprg_op9.bin ... Successfully uploaded programmer :) firehose - Chip serial num: 1908075099 (0x71baea5b) firehose_client - Target detected: lahaina firehose_client firehose_client - [LIB]: Based on the chipset, we assume UFS as default memory type..., if it fails, try using --memory" with "UFS","NAND" or "spinor" instead ! firehose - TargetName= firehose - MemoryName=UFS firehose - Version= firehose_client - Supported functions:

program,read,nop,patch,configure,setbootablestoragedrive,erase,power,firmwarewrite,getstorageinfo,benchmark,emmc,ufs,fixgpt,getsha256digest,demacia,setprojmodel,SetNetType firehose firehose - [LIB]: setprojmodel token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pk="tmAqFhoajsfnEEAY" failed. firehose firehose - [LIB]: bytearray(b'\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n') Setprojmodel failed. {'value': 'NAK', 'model_check': '1', 'auth_token_verify': '0'}

[root@shitbook edl]# python3 ~/edl/edlclient/Library/Modules/oneplus.py setprojmodel_verify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tmAqFhoajsfnEEAY --projid=2085A

Projid=7f19519a ModelVerifyHashToken=0iyFR00pPnoqjVNL Hash1=FAEC591F5F84CACCB5A4210944639D7FFADD0BA93ACFAE2E38FBC5452830AC6F FirmwareString=guacamoles_21_O.22_191107 CustFlag=0 SOC_Serial=1908075099 Timestamp=1638839966 secret=6231309F56F90ABD55C6B4F149D1C007B4B0B147CC6A8348FDE7014C5B316A7E setprojmodel good

nonameirl avatar Dec 07 '21 01:12 nonameirl

I've tried basically all the versions of the edl loaders that are in the MSM files for different models of the Oneplus 9 Pro

nonameirl avatar Dec 07 '21 01:12 nonameirl

I can successfully flash my LE2027 (2085A) device with the Indian version of MSM tool and the settings.xml looks like this. I tried using the edl loaders from that image but still no luck.

<BasicInfo Project="20857" TargetName="SM8350" Version="lemonadep_22_I.07_210412" MemoryName="ufs" GrowLastPartToFillDisk="true" LogEnable="false" LogPositionIndex="-1" DelayStartTime="0" UseGPT="true" CheckImage="false" CheckHwVersion="false" NeedUsbDownload="true" BackupPart="false" BackupPartId="" ChipType="1" FactoryID="20857IN" MinToolVersion="5.0.3" SupportHwID="true" SupportRfID="true" SupportPrjID="true" CheckRfVersion="false" CheckProjectVersion="false" SkipImgSHA256Check="false" ParamVersion="1" SkipParamProcess="false" ModelVerifyVersion="2" ModelVerifyPrjName="9c151c7f" SkipCheckHWVerByCustFlag="false" DefaultCleanFRP="true" FrpPartitionLabel="frp" CarrierID="0" SendIntranetFlag="true" AutoDetectDDR="false" DPPackingVer="0" RandomPadding="P59cRjCzXOHliL9PGlS" ModelVerifyRandom="YKqvWRiw17JO2g7y" ModelVerifyHashToken="B8B36FCA8D4C52CB449EF812788B1FEA22FBD2A0E8A036DEFD28752C2C81F614" Applicant="Unknown" Hostname="ubuntu-16" BuildTime="1618242789" ApplicantIP="172.21.132.37" />

nonameirl avatar Dec 07 '21 02:12 nonameirl

Is this model not included in your program?

nonameirl avatar Dec 09 '21 03:12 nonameirl

"edl wf /mnt/lun4.bin --lun=4 --devicemodel=20859"

And make sure to use the right edl loader for your region from the msm download package (.ofp) If this doesn't work, please give me a link to the working msmdownload package for your device.

bkerler avatar Dec 09 '21 07:12 bkerler

I tried that command and same issue.

Setprojmodel failed.
{'value': 'NAK', 'model_check': '1', 'auth_token_verify': '0'}

Used the loader from the MSM package that works. Here is a link to that package.

https://androidfilehost.com/?fid=2188818919693804748

nonameirl avatar Dec 09 '21 08:12 nonameirl

I've added the setup. Use the edl loader (ddr, not the lite one) from the msm package and run with --devicemodel=20857

bkerler avatar Dec 09 '21 23:12 bkerler

I pulled the latest updates and tried with the --devicemodel=20857 mentioned above and same issue.

(edl) PS D:\edl> python edl wf .\lun0.bin --lun=0 --loader=.\prog_firehose_ddr.elf --devicemodel=20857
Qualcomm Sahara / Firehose Client V3.53 (c) B.Kerler 2018-2021.
main - Using loader .\prog_firehose_ddr.elf ...
main - Waiting for the device
..main - Device detected :)
main - Mode detected: sahara
Device is in EDL mode .. continuing.
sahara -
------------------------
HWID:              0x001350e100514d67 (MSM_ID:0x001350e1,OEM_ID:0x0051,MODEL_ID:0x4d67)
CPU detected:      "lahaina"
PK_HASH:           0xa26bc25799770106f32c2856606a87ad9c1e997d25b5e80ff30b0e47e4c85e15
Serial:            0x71baea5b

sahara - Uploading loader .\prog_firehose_ddr.elf ...
Successfully uploaded programmer :)
firehose - Chip serial num: 1908075099 (0x71baea5b)
firehose_client - Target detected: lahaina
firehose_client
firehose_client - [LIB]: Based on the chipset, we assume UFS as default memory type..., if it fails, try using --memory" with "UFS","NAND" or "spinor" instead !
firehose
firehose - [LIB]: Couldn't detect MaxPayloadSizeFromTargetinBytes
firehose
firehose - [LIB]: Couldn't detect TargetName
firehose - TargetName=Unknown
firehose - MemoryName=UFS
firehose - Version=1
firehose_client - Supported functions:
-----------------
program,read,nop,patch,configure,setbootablestoragedrive,erase,power,firmwarewrite,getstorageinfo,benchmark,emmc,ufs,fixgpt,getsha256digest,demacia,setprojmodel,SetNetType
firehose
firehose - [LIB]: setprojmodel token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pk="J7zWreO5x10ZE1MY" failed.
firehose
firehose - [LIB]: bytearray(b'<?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="ERROR: decrypt token: 9c151c7f,0iyFR00pPnoqjVNL,9C302DE4D30DDFC8A4A00FB5C4459240A262ADA658B660778BACDCF0D334A037,guacamoles_21_O.22_191107,0,1908075099,1639093725,BF7159248AF6F4287BA28C974BFBE2BDFAF69157224CE6BC74CD9DB0AD7761F4\n" /></data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="ERROR: model name=9c151c7f, random postfix=0iyFR00pPnoqjVNL, verify hash=9C302DE4D30DDFC8A4A00FB5C4459240A262ADA658B660778BACDCF0D334A037, ver=guacamoles_21_O.22_191107, cf=0, sn=1908075099, ts=1639093725, secret=BF7159248AF6F4287BA28C974BFBE2BDFAF69157224CE6BC74CD9DB0AD7761F4\n" /></data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="ERROR: SN: 1908075099,1908075099" /></data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="ERROR: model name=9c151c7f, random postfix=0iyFR00pPnoqjVNL, verify hash=9C302DE4D30DDFC8A4A00FB5C4459240A262ADA658B660778BACDCF0D334A037, ver=guacamoles_21_O.22_191107, cf=0, sn=1908075099, ts=1639093725, secret=BF7159248AF6F4287BA28C974BFBE2BDFAF69157224CE6BC74CD9DB0AD7761F4\n" /></data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="ERROR: model hash = 9C302DE4D30DDFC8A4A00FB5C4459240A262ADA658B660778BACDCF0D334A037, message = 7016147d58e8c0389c151c7f0iyFR00pPnoqjVNL, prjname=9c151c7f\n" /></data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="ERROR: model hash store= 9C302DE4D30DDFC8A4A00FB5C4459240A262ADA658B660778BACDCF0D334A037\n" /></data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="ERROR: message = c4b95538c57df2319c151c7f01908075099guacamoles_21_O.22_19110716390937259C302DE4D30DDFC8A4A00FB5C4459240A262ADA658B660778BACDCF0D334A0375b0217457e49381b, len = 150\n" /></data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="ERROR: hash = BF7159248AF6F4287BA28C974BFBE2BDFAF69157224CE6BC74CD9DB0AD7761F4\n" /></data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="ERROR: hash store= BF7159248AF6F4287BA28C974BFBE2BDFAF69157224CE6BC74CD9DB0AD7761F4\n" /></data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="ERROR: Model ID=3" /></data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="ERROR: hw=0, rf=-1, prj=0" /></data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="ERROR: hw check result = 1" /></data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<response value="NAK" model_check="1" auth_token_verify="0" /></data>')
Setprojmodel failed.
{'value': 'NAK', 'model_check': '1', 'auth_token_verify': '0'}

nonameirl avatar Dec 09 '21 23:12 nonameirl

When I use the MSM tool I supplied it only works when the Firehouse Lite option is selected, otherwise I receive a "Device not match image" error.

nonameirl avatar Dec 09 '21 23:12 nonameirl