Samsung Galaxy S9

Model: SM-G960F/DS

ART code: SM-G960FZBDNEE
internal storage: 64GB
storage: microSD card slot - up to 512 GB
color: Coral Blue
RAM: 4 GB
screen: 5.8 inch, 1440 x 2960 pixels, Super AMOLED
IP68 dust / water protection
battery: 3000 mAh (non-removable)
Chipset: Exynos 9810 Octa
CPU: Octa-core (4 x 2.7 GHz Mongoose M3 + 4 x 1.8 GHz Cortex-A55
GPU: Mali-G72 MP18
WLAN: 802.11 a/b/g/n/ac, dual-band, Wi-Fi Direct, hotspot
Bluetooth: 5.0, A2DP, LE, aptX
GPS: A-GPS, GLONASS, BDS, GALILEO
NFC: yes
USB: 3.1, Type-C 1.0
3.5 mm jack: yes

OS: Android 8.0 (Oreo), upgradeable to Android 9.0 (Pie)

links

GSMArena Samsung Galaxy S9, Heimdall, Gitlab Heimdall, LineageOS: starlte - Galaxy S9, TWRP for starlte, SAMFREW.com, Guide to Install Stock firmware on Galaxy S9 or S9+ using ODIN or Smartswitch, Flashing stock firmware onto a Samsung Galaxy S9+ (SM-G965F) on Ubuntu 18.04 using Heimdall, more links: updato - How to use Odin to flash Samsung firmware update, other links: Free Android, Secure Android, r/LineageOS the best free and open-source applications for Android LineageOS (December 2018), HandsetGeek List of some useful ADB and fastboot commands, github topjohnwu/Magisk, interesting apps: PluckLockEx, Super Backup & Restore, Transportr, Kiwi Browser, Voice Audiobook Player, AntennaPod, Open Note Scanner, xda-developers: galaxy-s9, [ROM][8.1.0][OFFICIAL][WEEKLY] LineageOS 15.1 for S9 and S9+ (Exynos), Official Firmware thread - All Regions (as available) - OXM for SM-G960F models, [Basebands/Modems] SM-G960/G965 F/N/U/U1/W/0 [05.05.2019] & PIE StockRom Mirror, [Basebands/Modems] SM-G960/G965 F/N/U/U1/W/0 [16.06.2020] & Android 10 / PIE StockRom, apps on F-Droid: SecScanQR, SkyTube,

local links

z30b, mbp13,

(from powered off)

download mode: volume down + bixby + power
recovery: volume up + bixby + power

back to mobiles page.

History

2020-07-08: LineageOS - 17.1 installed, SIM slots detected, and the (old) SIM card int slot 1 unlocked. Looks like this works. Nice!

2020-07-08: z30b - Heimdall - LineageOs - try to install LineageOS 17.1

tingo@z30b:~/doc/Samsung/Galaxy_S9/LineageOS$ heimdall detect
Device detected

install recovery

tingo@z30b:~/doc/Samsung/Galaxy_S9/LineageOS$ heimdall flash --RECOVERY lineage-17.1-20200706-recovery-starlte.img --no-reboot
Heimdall v1.4.1

Copyright (c) 2010-2014 Benjamin Dobell, Glass Echidna
http://www.glassechidna.com.au/

This software is provided free of charge. Copying and redistribution is
encouraged.

If you appreciate this software and you would like to support future
development please consider donating:
http://www.glassechidna.com.au/donate/

Initialising connection...
Detecting device...
Claiming interface...
Setting up interface...

Initialising protocol...
Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond.
Please be patient!

Session begun.

Downloading device's PIT file...
PIT file download successful.

Uploading RECOVERY
100%
RECOVERY upload successful

Ending session...
Releasing device interface...

and then manually reboot into recovery. From recovery factory reset, format data / factory reset. adb sideload LineageOS

tingo@z30b:~/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload lineage-17.1-20200706-nightly-starlte-signed.zip
Total xfer: 1.00x

and open GApps

tingo@z30b:~/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload open_gapps-arm64-10.0-nano-20200708.zip
Total xfer: 1.00x

thats all. I reboot the phone from the main Recovery menu, the LineageOS start screen shows, and a while after LineageOS is installed.

2020-07-08: z30b - Heimdall, next try with TF5 firmware, from a post on xda-developers. Phone to download mode, then

tingo@z30b:~/doc/Samsung/Galaxy_S9/official_fw/10.0_Q/TF5/img$ heimdall detect
Device detected

and

tingo@z30b:~/doc/Samsung/Galaxy_S9/official_fw/10.0_Q/TF5/img$ heimdall flash --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --HIDDEN hidden.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --OMR omr.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img
Heimdall v1.4.1

Copyright (c) 2010-2014 Benjamin Dobell, Glass Echidna
http://www.glassechidna.com.au/

This software is provided free of charge. Copying and redistribution is
encouraged.

If you appreciate this software and you would like to support future
development please consider donating:
http://www.glassechidna.com.au/donate/

Initialising connection...
Detecting device...
Claiming interface...
Setting up interface...

Initialising protocol...
Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond.
Please be patient!

Session begun.

Downloading device's PIT file...
PIT file download successful.

Uploading BOOT
100%
BOOT upload successful

Uploading CACHE
100%
CACHE upload successful

Uploading CM
100%
CM upload successful

Uploading DQMDBG
100%
DQMDBG upload successful

Uploading HIDDEN
100%
HIDDEN upload successful

Uploading KEYSTORAGE
100%
KEYSTORAGE upload successful

Uploading RADIO
100%
RADIO upload successful

Uploading CP_DEBUG
100%
CP_DEBUG upload successful

Uploading ODM
100%
ODM upload successful

Uploading OMR
100%
OMR upload successful

Uploading PARAM
100%
PARAM upload successful

Uploading RECOVERY
100%
RECOVERY upload successful

Uploading BOOTLOADER
100%
BOOTLOADER upload successful

Uploading SYSTEM
100%
SYSTEM upload successful

Uploading UP_PARAM
100%
UP_PARAM upload successful

Uploading USERDATA
100%
USERDATA upload successful

Uploading VENDOR
100%
VENDOR upload successful

Ending session...
Rebooting device...
Releasing device interface...

now the device is in a continous reboot loop. If I hold the right keys, I can get it into recovery, but wipe cache and factory reset doesn't help.

2020-07-08: z30b - Heimdall, try to flash Android 10.0 (TB4) firmware. Put phone in download mode, connect, and test that Heimdall detects it

tingo@z30b:~/doc/Samsung/Galaxy_S9/official_fw/10.0_Q/TB4/img$ heimdall detect
Device detected

next flash,

tingo@z30b:~/doc/Samsung/Galaxy_S9/official_fw/10.0_Q/TB4/img$ heimdall flash --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --HIDDEN hidden.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --OMR omr.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img
Heimdall v1.4.1

Copyright (c) 2010-2014 Benjamin Dobell, Glass Echidna
http://www.glassechidna.com.au/

This software is provided free of charge. Copying and redistribution is
encouraged.

If you appreciate this software and you would like to support future
development please consider donating:
http://www.glassechidna.com.au/donate/

Initialising connection...
Detecting device...
Claiming interface...
Setting up interface...

Initialising protocol...
Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond.
Please be patient!

Session begun.

Downloading device's PIT file...
PIT file download successful.

Uploading BOOT
100%
BOOT upload successful

Uploading CACHE
100%
CACHE upload successful

Uploading CM
100%
CM upload successful

Uploading DQMDBG
100%
DQMDBG upload successful

Uploading HIDDEN
100%
HIDDEN upload successful

Uploading KEYSTORAGE
100%
KEYSTORAGE upload successful

Uploading RADIO
100%
RADIO upload successful

Uploading CP_DEBUG
100%
CP_DEBUG upload successful

Uploading ODM
100%
ODM upload successful

Uploading OMR
100%
OMR upload successful

Uploading PARAM
100%
PARAM upload successful

Uploading RECOVERY
100%
RECOVERY upload successful

Uploading BOOTLOADER
100%
BOOTLOADER upload successful

Uploading SYSTEM
100%
SYSTEM upload successful

Uploading UP_PARAM
100%
UP_PARAM upload successful

Uploading USERDATA
100%
USERDATA upload successful

Uploading VENDOR
100%
VENDOR upload successful

Ending session...
Rebooting device...
Releasing device interface...

then the phone boots, and reboots into download mode? Yes, tried flashin several times - no go. I even tried flashing the Rj3 firmware again, nope, it fails.

2020-07-08: mbp13 - Samsung Smart Switch - now it detects and connects to the phone. First it wants to update Smart Switch on the phone, ok, do that. It does that, and afterwards Smart Switch on the mbp just says "Your device software is up to date: RJ3(DBT)". As expected, no Emergency Software Recovery either. Oh well. 2020-07-08: z30b - Heimdall, put phone in download mode, check that heimdall detects it tingo@z30b:~/doc/Samsung/Galaxy_S9/official_fw/8.0.0_oreo/RJ3/img$ heimdall detect Device detected ok, flash RJ3 firmware tingo@z30b:~/doc/Samsung/Galaxy_S9/official_fw/8.0.0_oreo/RJ3/img$ heimdall flash --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --HIDDEN hidden.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --OMR omr.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img Heimdall v1.4.1

This software is provided free of charge. Copying and redistribution is encouraged.

If you appreciate this software and you would like to support future development please consider donating: http://www.glassechidna.com.au/donate/

Initialising connection... Detecting device... Claiming interface... Setting up interface...

Initialising protocol... Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond. Please be patient!

Session begun.

Downloading device's PIT file... PIT file download successful.

Uploading BOOT 100% BOOT upload successful

Uploading CACHE 100% CACHE upload successful

Uploading CM 100% CM upload successful

Uploading DQMDBG 100% DQMDBG upload successful

Uploading HIDDEN 100% HIDDEN upload successful

Uploading KEYSTORAGE 100% KEYSTORAGE upload successful

Uploading RADIO 100% RADIO upload successful

Uploading CP_DEBUG 100% CP_DEBUG upload successful

Uploading ODM 100% ODM upload successful

Uploading OMR 100% OMR upload successful

Uploading PARAM 100% PARAM upload successful

Uploading RECOVERY 100% RECOVERY upload successful

Uploading BOOTLOADER 100% BOOTLOADER upload successful

Uploading SYSTEM 100% SYSTEM upload successful

Uploading UP_PARAM 100% UP_PARAM upload successful

Uploading USERDATA 100% USERDATA upload successful

Uploading VENDOR 100% VENDOR upload successful

Ending session... Rebooting device... Releasing device interface... and the phone reboots and starts installing updates (which takes a while). 2020-07-08: mbp13 - I have Samsung Smart Switch 4.3.1.19093_1 installed on a MBP, so I tested if I could do factory reset / emergency reovery from it. The Galaxy S9 still has ARG2 installed. Smart Switch has problems detecting the phone, and suggests device recovery, but the phone doesn't show up in the Emergency Software Recovery window.

2019-05-10: Heimdall - flash ARG2. Boot to download mode, then tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ heimdall detect Device detected tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ heimdall flash --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img --NAD_REFER nad_refer.bin [..] but it didn't work - CP is still unknown. Seems I must figure out a way to do a repartition of the device. 2019-05-10: LineageOS - delete everything inside /efs: starlte:/ $ su - starlte:/ # ls -alF /efs total 2144 drwxrwx--x 20 radio system 4096 2019-05-10 02:53 ./ drwxrwxrwt 23 root root 920 2019-05-10 03:05 ../ -rwx------ 1 radio radio 1048576 2019-05-08 16:28 .nv_data.bak -rwx------ 1 radio radio 32 2019-05-08 16:28 .nv_data.bak.md5 drwxrwxr-x 2 radio system 4096 2019-05-08 16:28 Battery/ drwxrwxr-x 2 system system 4096 2019-05-08 16:28 DAK/ drwxrwxr-x 3 system system 4096 2019-05-08 17:14 FactoryApp/ drwxrwx--- 2 radio system 4096 2019-05-08 16:28 TEE/ drwx------ 2 system system 4096 2019-05-10 02:50 afc/ drwxrwx--- 2 system bluetooth 4096 2019-05-08 16:28 bluetooth/ drw-rw---- 2 radio system 4096 2019-05-08 16:28 cpdebug/ drwxrwx--x 2 radio system 4096 2019-05-08 16:28 cpk/ drwxrwxr-x 2 root radio 4096 2019-05-08 16:28 imei/ drwx------ 2 root root 4096 2019-05-08 16:22 lost+found/ -rw-rw---- 1 system system 216 2019-05-08 18:11 lpm_info.log drwxrwx--- 2 audioserver audio 4096 2019-05-08 16:28 maxim/ -rw------- 1 radio radio 122 2019-05-08 16:28 nv.log -rwx------ 1 radio radio 1048576 2019-05-08 16:28 nv_data.bin -rwx------ 1 radio radio 32 2019-05-08 16:28 nv_data.bin.md5 drwxrw---- 2 1200 1200 4096 2019-05-08 16:28 pfw_data/ drwxrwx--- 2 system system 4096 2019-05-08 16:28 prov/ drwxrwx--- 3 system system 4096 2019-05-08 16:28 prov_data/ drwxrwx--x 2 radio system 4096 2019-05-10 02:53 recovery/ drwxrwxr-x 4 radio system 4096 2019-05-10 02:50 sec_efs/ drwxrwx--- 2 system system 4096 2019-05-10 13:48 ssm/ drwxrwxr-x 2 radio system 4096 2019-05-08 16:28 wifi/ starlte:/ # rm -rf /efs/ /efs/.n starlte:/ # ls -alF /efs
total 8 drwxrwx--x 2 radio system 4096 2019-05-10 02:11 ./ drwxrwxrwt 23 root root 920 2019-05-10 03:05 ../ after a few seconds, verify starlte:/ # ls -alF /efs
total 1040 drwxrwx--x 2 radio system 4096 2019-05-10 02:11 ./ drwxrwxrwt 23 root root 920 2019-05-10 03:05 ../ -rw------- 1 radio radio 290 2019-05-10 02:11 nv.log -rwx------ 1 radio radio 1048576 2019-05-10 02:11 nv_data.bin -rwx------ 1 radio radio 32 2019-05-10 02:11 nv_data.bin.md5 starlte:/ # rm -rf /efs/ /efs/.n
starlte:/ # ls -alF /efs
total 8 drwxrwx--x 2 radio system 4096 2019-05-10 02:14 ./ drwxrwxrwt 23 root root 920 2019-05-10 03:05 ../ starlte:/ # then quickly power off the device 2019-05-10:LineageOS - enable developer, root access, ADB, local terminal 2019-05-10: TWRP - flash LineageOS - advanced, ADB sideload, then tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/LineageOS$ adb devices -l List of devices attached 226b65a628037ece sideload usb:1-3.1 product:omni_starlte model:omni_starlte device:starlte

2019-05-10: Heimdall - flash TWRP recovery tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/LineageOS$ heimdall flash --RECOVERY ../TWRP/twrp-3.3.0-0-starlte.img --no-reboot [..] then I press volume down and power until the phone restarts. quickly press volume up + bixby + power to boot into recovery. format data reboot into recovery (had to try this a few times before I got it) 2019-05-10: Heimdall - flash RK3 firmware tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/official_fw/8.0_oreo/RK3/img$ heimdall flash --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --HIDDEN hidden.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img [..] then boot into download mode again.

2019-05-09: Heimdall - flash ARG2 combination fw (with a SIM card in) and repartition using the PIT file that shipped with the software tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ ~/work/heimdall/Heimdall-v1.4.2/build/bin/heimdall flash --repartition --pit STARLTE_EUR_OPEN_FAC.pit --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img --NAD_REFER nad_refer.bin

Heimdall v1.4.2

This software is provided free of charge. Copying and redistribution is encouraged.

If you appreciate this software and you would like to support future development please consider donating: http://www.glassechidna.com.au/donate/

Initialising connection... Detecting device... Claiming interface... Setting up interface...

Initialising protocol... Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond. Please be patient!

Session begun.

Uploading PIT ERROR: Failed to receive PIT file part response! ERROR: PIT upload failed!

Ending session... Rebooting device... Releasing device interface...

didn't help. Try with sudo: tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ sudo ~/work/heimdall/Heimdall-v1.4.2/build/bin/heimdall flash --repartition --pit STARLTE_EUR_OPEN_FAC.pit --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img --NAD_REFER nad_refer.bin Heimdall v1.4.2

This software is provided free of charge. Copying and redistribution is encouraged.

If you appreciate this software and you would like to support future development please consider donating: http://www.glassechidna.com.au/donate/

Initialising connection... Detecting device... Claiming interface... Setting up interface...

Initialising protocol... Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond. Please be patient!

Session begun.

Uploading PIT ERROR: Failed to receive PIT file part response! ERROR: PIT upload failed!

Ending session... Rebooting device... Releasing device interface...

also didn't help.

2019-05-08: Heimdall - commented on issue 412. 2019-05-08: Heimdall - flash ARG2 combination fw (with a SIM card in) and repartition tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ heimdall detect Device detected tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ heimdall flash --repartition --pit ~/doc/Samsung/Galaxy_S9/SM-G960F.pit --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img --NAD_REFER nad_refer.bin [..] Beginning session...

Some devices may take up to 2 minutes to respond. Please be patient!

Session begun.

Uploading PIT ERROR: Failed to receive PIT file part response! ERROR: PIT upload failed!

Ending session... Rebooting device... Releasing device interface... try with Heimdall version 1.4.2 tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ ~/work/heimdall/Heimdall-v1.4.2/build/bin/heimdall version v1.4.2 tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ ~/work/heimdall/Heimdall-v1.4.2/build/bin/heimdall detect Device detected tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ ~/work/heimdall/Heimdall-v1.4.2/build/bin/heimdall flash --repartition --pit ~/doc/Samsung/Galaxy_S9/SM-G960F.pit --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img --NAD_REFER nad_refer.bin Heimdall v1.4.2

This software is provided free of charge. Copying and redistribution is encouraged.

If you appreciate this software and you would like to support future development please consider donating: http://www.glassechidna.com.au/donate/

Initialising connection... Detecting device... Claiming interface... Setting up interface...

Initialising protocol... Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond. Please be patient!

Session begun.

Uploading PIT ERROR: Failed to receive PIT file part response! ERROR: PIT upload failed!

Ending session... Rebooting device... Releasing device interface... hmm, didn't work. Can I download the PIT then? tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ ~/work/heimdall/Heimdall-v1.4.2/build/bin/heimdall detect Device detected tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ ~/work/heimdall/Heimdall-v1.4.2/build/bin/heimdall download-pit --output s9_SM-G960F.pit Heimdall v1.4.2

This software is provided free of charge. Copying and redistribution is encouraged.

If you appreciate this software and you would like to support future development please consider donating: http://www.glassechidna.com.au/donate/

Initialising connection... Detecting device... Claiming interface... Setting up interface...

Initialising protocol... Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond. Please be patient!

Session begun.

Downloading device's PIT file... PIT file download successful.

Ending session... Rebooting device... Releasing device interface... yes, but repartition doesn't work tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ ~/work/heimdall/Heimdall-v1.4.2/build/bin/heimdall detect Device detected tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ ~/work/heimdall/Heimdall-v1.4.2/build/bin/heimdall flash --repartition --pit s9_SM-G960F.pit --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img --NAD_REFER nad_refer.bin Heimdall v1.4.2

This software is provided free of charge. Copying and redistribution is encouraged.

If you appreciate this software and you would like to support future development please consider donating: http://www.glassechidna.com.au/donate/

Initialising connection... Detecting device... Claiming interface... Setting up interface...

Initialising protocol... Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond. Please be patient!

Session begun.

Uploading PIT ERROR: Failed to receive PIT file part response! ERROR: PIT upload failed!

Ending session... Rebooting device... Releasing device interface... well, crap. 2019-05-08: Heimdall - flash ARG2 combination fw (with a SIM card in) tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ heimdall detect Device detected tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ heimdall flash --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img --NAD_REFER nad_refer.bin [..] doesn't change a thing - CP is still unknown. 2019-05-08: LineageOS - I deleted everything in /efs again (including the .nv files). the powered off the phone. 2019-05-08: LineageOS - try to mount /cpefs starlte:/ # ls -l /dev/block/sdd brw------- 1 root root 8, 48 2019-05-08 16:09 /dev/block/sdd brw------- 1 root root 8, 49 2019-05-08 16:09 /dev/block/sdd1 mount it starlte:/ # mount /dev/block/sdd1 /cpefs '/dev/block/sdd1' is read-only starlte:/ # mount -r /dev/block/sdd1 /cpefs
mount: /dev/block/sdd1: need -t 1|starlte:/ # mount -r -t /dev/block/sdd1 /cpefs
mount: bad /etc/fstab: No such file or directory check starlte:/ # mount | grep cpe /dev/block/sdd1 on /cpefs type ext4 (ro,seclabel,relatime) starlte:/ # df -h /cpefs Filesystem Size Used Avail Use% Mounted on /dev/block/sdd1 1.8M 556K 1.3M 29% /cpefs contents starlte:/ # ls -alF /cpefs total 556 drwxrwx--x 3 radio system 4096 2018-03-27 12:42 ./ drwxrwxrwt 23 root root 920 2019-05-08 16:09 ../ -rwx------ 1 radio radio 546304 2019-01-01 01:00 .nv_core.bak -rwx------ 1 radio radio 32 2019-01-01 01:00 .nv_core.bak.md5 drwx------ 2 root root 4096 1970-01-01 01:00 lost+found/ hmm, it is read only

2019-05-08: LineageOS - paths and binaries starlte:/ # echo $PATH /sbin:/system/sbin:/system/bin:/system/xbin:/vendor/bin:/vendor/xbin sbin and system starlte:/ # ls -F /sbin cbd charger ueventd@ watchdogd@ starlte:/ # starlte:/ # ls -F /system/sbin ls: /system/sbin: No such file or directory 1|starlte:/ # ls -F /system/bin acpi@ dpm keystore_cli_v2 oatdump start-ssh
adbd drmserver kill@ od@ stat@
am du@ killall@ paste@ stop@
app_process@ dumpstate ld.mc patch@ storaged
app_process32 dumpsys linker patchoat strings@
app_process64 e2fsck linker64 perfprofd su@
applypatch e2fsdroid linker_asan@ pgrep@ surfaceflinger
appops echo@ linker_asan64@ pidof@ svc
appwidget egrep@ lmkd ping swapoff@
arping env@ ln@ ping6 swapon@
atrace expand@ load_policy@ pkill@ sync@
audioloader expr@ locksettings pm sysctl@
audioserver fallocate@ log@ pmap@ sysinit
awk false@ logcat pppd tac@
base64@ fgrep@ logcatd printenv@ tail@
basename@ file@ logd printf@ tar@
bcc find@ logname@ profman taskset@
blkid flock@ logpersist.cat@ ps@ tc
blockdev@ free@ logpersist.start pwd@ tc-wrapper-1.0@
bmgr fsck.exfat logpersist.stop@ racoon tee@
bootanimation fsck.f2fs logwrapper readlink@ telecom
bootstat fsck.ntfs losetup@ realpath@ thermalserviced brctl fsck_msdos lpm reboot time@
bu gatekeeperd ls@ renice@ timeout@
bugreport gdbserver lshal requestsync tombstoned
bugreportz gdbserver64 lsmod@ resize2fs toolbox
bunzip2@ getenforce@ lsof@ restorecon@ top@
bzcat@ getevent@ lspci@ rm@ touch@
bzip2 getprop@ lsusb@ rmdir@ toybox
cal@ grep make_ext4fs rmmod@ tr@
cameraserver groups@ make_f2fs run-as tracepath
cat@ gunzip@ md5sum@ runcon@ tracepath6
chcon@ gzip@ mdnsd schedtest traceroute6
chgrp@ head@ media scp true@
chmod@ healthd mediadrmserver screencap truncate@
chown@ hid mediaextractor screenrecord tty@
chroot@ hostname@ mediametrics sdcard tune2fs
chrt@ hw/ mediaserver secdiscard tzdatacheck
cksum@ hwclock@ memory_replay32 secilc uiautomator
clatd hwservicemanager memory_replay64 sed@ ulimit@
clear@ id@ memtest sendevent@ umount@
cmd idmap microcom@ sensorservice uname@
cmp@ ifconfig@ mkdir@ seq@ uncrypt
comm@ ime mke2fs service uniq@
content incident mkfifo@ servicemanager unix2dos@
cp@ incidentd mkfs.exfat setenforce@ unzip
cpio@ inotifyd@ mkfs.ntfs setprop@ uptime@
crash_dump32 input mknod@ setsid@ usleep@
crash_dump64 insmod@ mkswap@ settings uudecode@
curl install@ mktemp@ sftp uuencode@
cut@ install-recovery.sh modinfo@ sgdisk vdc
dalvikvm@ installd modprobe@ sh vmstat@
dalvikvm32 ionice@ monkey sha1sum@ vold
dalvikvm64 iorenice@ more@ sha224sum@ vr
date@ iotop mount@ sha256sum@ wc@
dd@ ip mount.ntfs sha384sum@ webview_zygote32 debuggerd ip-wrapper-1.0@ mountpoint@ sha512sum@ webview_zygote64 dex2oat ip6tables mtpd sleep@ which@
dexdiag ip6tables-restore@ mv@ sload_f2fs whoami@
dexdump ip6tables-save@ ndc sm wificond
dexlist ip6tables-wrapper-1.0@ ndc-wrapper-1.0@ sort@ wm
dexoptanalyzer iptables netd split@ xargs@
df@ iptables-restore@ netstat@ sqlite3 xxd@
diff@ iptables-save@ netutils-wrapper-1.0 ss yes@
dirname@ iptables-wrapper-1.0@ newfs_msdos@ ssh zcat@
dmesg@ iw nice@ ssh-keygen
dnsmasq keystore nl@ sshd
dos2unix@ keystore_cli nohup@ start@
starlte:/ # starlte:/ # ls -F /system/xbin
7z gunzip@ librank pigz runconuid su zcat@ anrd gzip@ micro_bench powertop sane_schedstat taskstats zip bash htop micro_bench64 procmem showmap tcpdump
cpustats httpurl micro_bench_static procrank showslab unpigz@
crypto ioshark_bench micro_bench_static64 puncture_fs simpleperf unrar
dnschk ksminfo mmc_utils rawbu simpleperf32 vim
dumpcache latencytop nano rsync strace wget
starlte:/ # vendor starlte:/ # ls -F /vendor/bin acpi@ dirname@ hostname@ microcom@ printf@ sort@ ulimit@
argosd dmesg@ hw/ mkdir@ ps@ split@ umount@
base64@ dos2unix@ hwclock@ mkfifo@ pwd@ start@ uname@
basename@ du@ id@ mknod@ readlink@ stat@ uniq@
bcc echo@ ifconfig@ mkswap@ realpath@ stop@ unix2dos@
blockdev@ egrep@ inotifyd@ mktemp@ renice@ strings@ uptime@
cal@ env@ insmod@ modinfo@ restorecon@ swapoff@ usleep@
cat@ expand@ ionice@ modprobe@ rm@ swapon@ uudecode@
chcon@ expr@ iorenice@ more@ rmdir@ sync@ uuencode@
chgrp@ fallocate@ kill@ mount@ rmmod@ sysctl@ vmstat@
chmod@ false@ killall@ mountpoint@ runcon@ tac@ vndservice
chown@ fgrep@ ln@ mv@ sed@ tail@ vndservicemanager chroot@ file@ load_policy@ netstat@ sendevent@ tar@ wc@
chrt@ find@ log@ nice@ seq@ taskset@ which@
cksum@ flock@ logname@ nl@ setenforce@ tee@ whoami@
clear@ free@ losetup@ nohup@ setprop@ time@ xargs@
cmp@ getenforce@ ls@ od@ setsid@ timeout@ xxd@
comm@ getprop@ lsmod@ paste@ sh top@ yes@
cp@ grep lsof@ patch@ sha1sum@ touch@ zcat@
cpio@ groups@ lspci@ pgrep@ sha224sum@ toybox_vendor cut@ gunzip@ lsusb@ pidof@ sha256sum@ tr@
date@ gzip@ main_abox pkill@ sha384sum@ true@
df@ head@ mcDriverDaemon pmap@ sha512sum@ truncate@
diff@ hostapd md5sum@ printenv@ sleep@ tty@
starlte:/ # ls -F /vendor/xbin
ls: /vendor/xbin: No such file or directory ok 2019-05-08: LineageOS - filesystems and mounts starlte:/ # df -h Filesystem Size Used Avail Use% Mounted on rootfs 1.5G 3.5M 1.5G 1% / tmpfs 1.6G 684K 1.6G 1% /dev /dev/block/sda19 471M 470M 332K 100% /vendor /dev/block/sda18 4.1G 1.1G 2.9G 29% /system /dev/block/sda20 612M 489M 123M 80% /odm tmpfs 1.6G 0 1.6G 0% /mnt /dev/block/sda21 581M 544K 581M 1% /cache /dev/block/sda25 52G 405M 52G 1% /data /dev/block/sda3 16M 2.2M 13M 15% /efs /dev/block/sda17 12M 12K 12M 1% /dqmdbg /dev/block/sda23 45M 12K 45M 1% /omr /data/media 52G 405M 52G 1% /mnt/runtime/default/emulated /dev/block/vold/public:179_1 60G 1.0G 59G 2% /mnt/media_rw/8026-1405 /mnt/media_rw/8026-1405 60G 1.0G 59G 2% /mnt/runtime/default/8026-1405 mounts starlte:/ # mount rootfs on / type rootfs (ro,seclabel,size=1650428k,nr_inodes=412607) tmpfs on /dev type tmpfs (rw,seclabel,nosuid,relatime,mode=755) devpts on /dev/pts type devpts (rw,seclabel,relatime,mode=600,ptmxmode=000) proc on /proc type proc (rw,relatime) sysfs on /sys type sysfs (rw,seclabel,relatime) selinuxfs on /sys/fs/selinux type selinuxfs (rw,relatime) /dev/block/sda19 on /vendor type ext4 (ro,seclabel,relatime) /dev/block/sda18 on /system type ext4 (ro,seclabel,relatime,data=ordered) /dev/block/sda20 on /odm type ext4 (ro,seclabel,relatime) none on /acct type cgroup (rw,relatime,cpuacct) /sys/kernel/debug on /sys/kernel/debug type debugfs (rw,seclabel,relatime) none on /dev/stune type cgroup (rw,relatime,schedtune) tmpfs on /mnt type tmpfs (rw,seclabel,relatime,mode=755,gid=1000) none on /config type configfs (rw,relatime) none on /dev/cpuctl type cgroup (rw,relatime,cpu) none on /dev/cpuset type cgroup (rw,relatime,cpuset,noprefix,release_agent=/sbin/cpuset_release_agent) pstore on /sys/fs/pstore type pstore (rw,seclabel,relatime) /dev/block/sda19 on /vendor/overlay type ext4 (ro,seclabel,relatime) /dev/block/sda18 on /vendor/etc/usb_audio_policy_configuration.xml type ext4 (ro,seclabel,relatime,data=ordered) none on /sys/kernel/config type configfs (rw,relatime) adb on /dev/usb-ffs/adb type functionfs (rw,relatime) /dev/block/sda21 on /cache type ext4 (rw,seclabel,nosuid,nodev,noatime,discard,journal_checksum,noauto_da_alloc,errors=panic,data=ordered) /dev/block/sda25 on /data type ext4 (rw,seclabel,nosuid,nodev,noatime,discard,journal_checksum,noauto_da_alloc,errors=panic,data=ordered) /dev/block/sda3 on /efs type ext4 (rw,seclabel,nosuid,nodev,noatime,journal_checksum,noauto_da_alloc) /dev/block/sda17 on /dqmdbg type ext4 (rw,seclabel,nosuid,nodev,noatime,journal_checksum,noauto_da_alloc) /dev/block/sda23 on /omr type ext4 (rw,seclabel,nosuid,nodev,noatime,journal_checksum,noauto_da_alloc) tmpfs on /storage type tmpfs (rw,seclabel,relatime,mode=755,gid=1000) tracefs on /sys/kernel/debug/tracing type tracefs (rw,seclabel,relatime) /data/media on /mnt/runtime/default/emulated type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,multiuser,mask=6,derive_gid) /data/media on /storage/emulated type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,multiuser,mask=6,derive_gid) /data/media on /mnt/runtime/read/emulated type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,multiuser,mask=23,derive_gid) /data/media on /mnt/runtime/write/emulated type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,multiuser,mask=7,derive_gid) /dev/block/vold/public:179_1 on /mnt/media_rw/8026-1405 type vfat (rw,dirsync,nosuid,nodev,noexec,noatime,uid=1023,gid=1023,fmask=0007,dmask=0007,allow_utime=0020,codepage=437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro) /mnt/media_rw/8026-1405 on /mnt/runtime/default/8026-1405 type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,mask=6) /mnt/media_rw/8026-1405 on /storage/8026-1405 type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,mask=6) /mnt/media_rw/8026-1405 on /mnt/runtime/read/8026-1405 type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,mask=18) /mnt/media_rw/8026-1405 on /mnt/runtime/write/8026-1405 type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,mask=18) ok 2019-05-08: LineageOS - enable developer options, enable ADB, enable root access, enable local terminal. Test that 'su -' works - it does. Test with adb shell: tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/LineageOS$ adb devices -l List of devices attached 226b65a628037ece device usb:1-3.1 product:lineage_starlte model:SM_G960F device:starlte

tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/LineageOS$ adb shell starlte:/ $ test 'su -' starlte:/ $ su - starlte:/ # it works 2019-05-08: TWRP - wipe, format data, advanced wipe - Cache + System, then (still from TWRP) install LineageOS via adb sideload: tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/LineageOS$ adb devices -l List of devices attached 226b65a628037ece sideload usb:1-3.1 product:omni_starlte model:omni_starlte device:starlte

tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload VENDOR-27_ARI9.zip Total xfer: 1.01x
tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload lineage-15.1-20190421-nightly-starlte-signed.zip Total xfer: 1.00x
tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload MindTheGapps-8.1.0-arm64-20180808_153856.zip Total xfer: 1.01x
tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload addonsu-15.1-arm64-signed.zip Total xfer: 1.49x
ok 2019-05-08: Heimdall - flash TWRP recovery 2019-05-08: Heimdall - flash RK3 (stock) firmware tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/official_fw/8.0_oreo/RK3/img$ heimdall flash --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --HIDDEN hidden.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img [..] Ending session... Rebooting device... Releasing device interface... ok 2019-05-08: comb. fw - filesystems starlte:/ $ df -h Filesystem Size Used Avail Use% Mounted on rootfs 1.5G 10M 1.5G 1% / tmpfs 1.6G 984K 1.6G 1% /dev /dev/block/sda18 4.0G 1.5G 2.5G 39% /system /dev/block/sda19 608M 407M 201M 67% /vendor /dev/block/sda20 612M 8.0K 612M 1% /odm tmpfs 1.6G 0 1.6G 0% /mnt tmpfs 1.6G 0 1.6G 0% /mnt/secure /dev/block/sda21 581M 24K 581M 1% /cache /dev/block/sda25 53G 222M 52G 1% /data /dev/block/sda3 16M 2.2M 13M 15% /efs /dev/block/sdd1 1.8M 556K 1.3M 29% /cpefs /dev/block/sda17 12M 12K 12M 1% /dqmdbg /dev/block/sda23 45M 12K 45M 1% /omr tmpfs 1.6G 0 1.6G 0% /storage /data/media 53G 312M 52G 1% /storage/emulated /mnt/media_rw/8026-1405 60G 1.0G 59G 2% /storage/8026-1405 mounts starlte:/ $ mount
rootfs on / type rootfs (ro,seclabel,size=1635416k,nr_inodes=408854) tmpfs on /dev type tmpfs (rw,seclabel,nosuid,relatime,size=1720148k,nr_inodes=430037,mode=755) devpts on /dev/pts type devpts (rw,seclabel,relatime,mode=600,ptmxmode=000) proc on /proc type proc (rw,relatime) sysfs on /sys type sysfs (rw,seclabel,relatime) selinuxfs on /sys/fs/selinux type selinuxfs (rw,relatime) /dev/block/sda18 on /system type ext4 (ro,seclabel,relatime) /dev/block/sda19 on /vendor type ext4 (ro,seclabel,relatime) /dev/block/sda20 on /odm type ext4 (ro,seclabel,relatime) /sys/kernel/debug on /sys/kernel/debug type debugfs (rw,seclabel,relatime) none on /acct type cgroup (rw,relatime,cpuacct) none on /dev/stune type cgroup (rw,relatime,schedtune) tmpfs on /mnt type tmpfs (rw,seclabel,relatime,mode=755,gid=1000) none on /config type configfs (rw,relatime) tmpfs on /mnt/secure type tmpfs (rw,seclabel,relatime,mode=700) tmpfs on /mnt/secure/asec type tmpfs (rw,seclabel,relatime,mode=700) none on /dev/cpuctl type cgroup (rw,relatime,cpu) none on /dev/cpuset type cgroup (rw,relatime,cpuset,noprefix,release_agent=/sbin/cpuset_release_agent) pstore on /sys/fs/pstore type pstore (rw,seclabel,relatime) none on /sys/kernel/config type configfs (rw,relatime) adb on /dev/usb-ffs/adb type functionfs (rw,relatime) /dev/block/sda21 on /cache type ext4 (rw,seclabel,nosuid,nodev,noatime,journal_checksum,noauto_da_alloc) /dev/block/sda25 on /data type ext4 (rw,seclabel,nosuid,nodev,noatime,journal_checksum,noauto_da_alloc,resgid=5555) /dev/block/sda3 on /efs type ext4 (rw,seclabel,nosuid,nodev,noatime,journal_checksum,noauto_da_alloc) /dev/block/sdd1 on /cpefs type ext4 (ro,seclabel,nosuid,nodev,noatime,journal_checksum,noauto_da_alloc) /dev/block/sda17 on /dqmdbg type ext4 (rw,seclabel,nosuid,nodev,noatime,journal_checksum,noauto_da_alloc) /dev/block/sda23 on /omr type ext4 (rw,seclabel,nosuid,nodev,noatime,journal_checksum,noauto_da_alloc) tmpfs on /storage type tmpfs (rw,seclabel,relatime,mode=755,gid=1000) tracefs on /sys/kernel/debug/tracing type tracefs (rw,seclabel,relatime) /data/media on /mnt/runtime/default/emulated type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,multiuser,mask=6,reserved=20MB) /data/media on /storage/emulated type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,multiuser,mask=6,reserved=20MB) /data/media on /mnt/runtime/read/emulated type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,multiuser,mask=23,reserved=20MB) /data/media on /mnt/runtime/write/emulated type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,multiuser,mask=7,reserved=20MB) /dev/block/vold/public:179,1 on /mnt/media_rw/8026-1405 type sdfat (rw,dirsync,nosuid,nodev,noexec,relatime,fs=vfat:32,uid=1023,gid=1023,fmask=0007,dmask=0007,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,utf8,shortname=winnt,namecase=0,delay,smart,ausize=32768,adj_hid,adj_req,symlink=0,bps=512,errors=remount-ro) /dev/block/vold/public:179,1 on /mnt/secure/asec type sdfat (rw,dirsync,nosuid,nodev,noexec,relatime,fs=vfat:32,uid=1023,gid=1023,fmask=0007,dmask=0007,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,utf8,shortname=winnt,namecase=0,delay,smart,ausize=32768,adj_hid,adj_req,symlink=0,bps=512,errors=remount-ro) /mnt/media_rw/8026-1405 on /mnt/runtime/default/8026-1405 type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,mask=6) /mnt/media_rw/8026-1405 on /storage/8026-1405 type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,mask=6) /mnt/media_rw/8026-1405 on /mnt/runtime/read/8026-1405 type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,mask=18) /mnt/media_rw/8026-1405 on /mnt/runtime/write/8026-1405 type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,mask=18) ok. so both /efs (sda3) and /cpefs (sdd1) are ext4.

2019-05-07: comb. fw - I used IME and #0808# to change to RNDIS + ... so I get a serial port: tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ ls -l /dev/tty[ACU] crw-rw---- 1 root dialout 166, 0 May 7 16:04 /dev/ttyACM0 start cutecom, select 230400, and try to send 'AT' commands 2019-05-07: Heimdall - flash ARG2 combination firmware tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ heimdall detect Device detected tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ heimdall flash --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img --NAD_REFER nad_refer.bin [..] Ending session... Rebooting device... Releasing device interface... ok 2019-05-07: LineageOS - efs - what happens if I delete everything inside /efs? starlte:/ # rm -rf /efs/* waitt, then starlte:/ # ls -l /efs total 0 ok, power off phone. 2019-05-07: LineageOS - efs - what does it look like? starlte:/ # ls -l /efs total 1124 drwxrwxr-x 2 radio system 4096 2019-04-25 13:07 Battery drwxrwxr-x 2 system system 4096 2019-04-25 12:58 DAK drwxrwxr-x 3 system system 4096 2019-04-25 18:01 FactoryApp drwxrwx--- 2 radio system 4096 2019-04-25 12:58 TEE drwx------ 2 system system 4096 2019-04-25 16:54 afc drwxrwx--- 2 system bluetooth 4096 2019-04-25 13:10 bluetooth drw-rw---- 2 radio system 4096 2019-04-25 12:58 cpdebug drwxrwx--x 2 radio system 4096 2019-04-25 12:58 cpk -rw------- 1 radio radio 158 2019-04-25 11:26 factory.prop drwxrwxr-x 2 root radio 4096 2019-04-25 13:08 imei drwx------ 2 root root 4096 1970-01-01 01:00 lost+found -rw-rw---- 1 system system 539 2019-05-07 14:35 lpm_info.log drwxrwx--- 2 audioserver audio 4096 2019-04-25 12:58 maxim -rw------- 1 radio radio 10189 2019-04-25 17:32 nv.log -rwx------ 1 radio radio 1048576 2019-04-25 17:32 nv_data.bin -rwx------ 1 radio radio 32 2019-04-25 17:32 nv_data.bin.md5 drwxrw---- 2 1200 1200 4096 2019-04-25 13:07 pfw_data drwxrwx--- 2 system system 4096 2018-04-02 07:46 prov drwxrwx--- 3 system system 4096 2018-04-02 07:46 prov_data drwxrwx--x 2 radio system 4096 2019-05-07 14:00 recovery drwxrwxr-x 4 radio system 4096 2019-05-07 14:19 sec_efs drwxrwx--- 2 system system 4096 2019-05-07 14:22 ssm drwx------ 2 system system 4096 2019-05-07 14:19 umc drwxrwxr-x 2 radio system 4096 2019-04-25 12:58 wifi more info starlte:/ # more /efs/recovery/history + []A] --delete_efs_ota --data_resizing --delete_apn_changes reboot reason : UNKNOWN - + [a] --wipe_cache --delete_efs_ota reboot reason : UNKNOWN - and starlte:/ # ls -lF /efs/sec_efs
total 28 -rw------- 1 system system 489 2019-05-07 14:19 !SVC -rw------- 1 system system 489 2019-05-07 14:19 SVC drwx------ 2 nfc nfc 4096 2019-04-25 13:07 nfc/ -rw------- 1 system system 42 2019-04-25 13:09 sem_data -rw------- 1 system system 2686 2019-04-25 13:09 sem_sk.dat -rw-r--r-- 1 system system 124 2019-04-25 13:09 ssp_data drwx------ 2 system system 4096 2019-04-25 13:09 ucm_ca_cert/ and starlte:/ # ls -lF /efs/ssm/ total 4 -rw------- 1 system system 37 2019-05-07 14:22 magic.bin magic.bin? starlte:/ # ls -lF /efs/umc/
total 4 -rw------- 1 system system 1 2019-05-07 14:19 BulkEnrollmentProfile starlte:/ # ls -lF /efs/wifi/
total 0 ok 2019-05-07: LineageOS - test with adb: tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/LineageOS$ adb shell starlte:/ $ su - starlte:/ # what file systems are mounted? with df starlte:/ # df -h
Filesystem Size Used Avail Use% Mounted on rootfs 1.5G 3.5M 1.5G 1% / tmpfs 1.6G 684K 1.6G 1% /dev /dev/block/sda19 471M 470M 332K 100% /vendor /dev/block/sda18 4.1G 1.1G 2.9G 29% /system /dev/block/sda20 612M 489M 123M 80% /odm tmpfs 1.6G 0 1.6G 0% /mnt /dev/block/sda21 581M 568K 581M 1% /cache /dev/block/sda25 52G 453M 52G 1% /data /dev/block/sda3 16M 2.3M 13M 16% /efs /dev/block/sda17 12M 12K 12M 1% /dqmdbg /dev/block/sda23 45M 12K 45M 1% /omr /data/media 52G 453M 52G 1% /mnt/runtime/default/emulated /dev/block/vold/public:179_1 60G 1.0G 59G 2% /mnt/media_rw/8026-1405 /mnt/media_rw/8026-1405 60G 1.0G 59G 2% /mnt/runtime/default/8026-1405 with mount starlte:/ # mount
rootfs on / type rootfs (ro,seclabel,size=1650428k,nr_inodes=412607) tmpfs on /dev type tmpfs (rw,seclabel,nosuid,relatime,mode=755) devpts on /dev/pts type devpts (rw,seclabel,relatime,mode=600,ptmxmode=000) proc on /proc type proc (rw,relatime) sysfs on /sys type sysfs (rw,seclabel,relatime) selinuxfs on /sys/fs/selinux type selinuxfs (rw,relatime) /dev/block/sda19 on /vendor type ext4 (ro,seclabel,relatime) /dev/block/sda18 on /system type ext4 (ro,seclabel,relatime,data=ordered) /dev/block/sda20 on /odm type ext4 (ro,seclabel,relatime) none on /acct type cgroup (rw,relatime,cpuacct) /sys/kernel/debug on /sys/kernel/debug type debugfs (rw,seclabel,relatime) none on /dev/stune type cgroup (rw,relatime,schedtune) tmpfs on /mnt type tmpfs (rw,seclabel,relatime,mode=755,gid=1000) none on /config type configfs (rw,relatime) none on /dev/cpuctl type cgroup (rw,relatime,cpu) none on /dev/cpuset type cgroup (rw,relatime,cpuset,noprefix,release_agent=/sbin/cpuset_release_agent) pstore on /sys/fs/pstore type pstore (rw,seclabel,relatime) /dev/block/sda19 on /vendor/overlay type ext4 (ro,seclabel,relatime) /dev/block/sda18 on /vendor/etc/usb_audio_policy_configuration.xml type ext4 (ro,seclabel,relatime,data=ordered) none on /sys/kernel/config type configfs (rw,relatime) adb on /dev/usb-ffs/adb type functionfs (rw,relatime) /dev/block/sda21 on /cache type ext4 (rw,seclabel,nosuid,nodev,noatime,discard,journal_checksum,noauto_da_alloc,errors=panic,data=ordered) /dev/block/sda25 on /data type ext4 (rw,seclabel,nosuid,nodev,noatime,discard,journal_checksum,noauto_da_alloc,errors=panic,data=ordered) /dev/block/sda3 on /efs type ext4 (rw,seclabel,nosuid,nodev,noatime,journal_checksum,noauto_da_alloc) /dev/block/sda17 on /dqmdbg type ext4 (rw,seclabel,nosuid,nodev,noatime,journal_checksum,noauto_da_alloc) /dev/block/sda23 on /omr type ext4 (rw,seclabel,nosuid,nodev,noatime,journal_checksum,noauto_da_alloc) tmpfs on /storage type tmpfs (rw,seclabel,relatime,mode=755,gid=1000) tracefs on /sys/kernel/debug/tracing type tracefs (rw,seclabel,relatime) /data/media on /mnt/runtime/default/emulated type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,multiuser,mask=6,derive_gid) /data/media on /storage/emulated type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,multiuser,mask=6,derive_gid) /data/media on /mnt/runtime/read/emulated type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,multiuser,mask=23,derive_gid) /data/media on /mnt/runtime/write/emulated type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,multiuser,mask=7,derive_gid) /dev/block/vold/public:179_1 on /mnt/media_rw/8026-1405 type vfat (rw,dirsync,nosuid,nodev,noexec,noatime,uid=1023,gid=1023,fmask=0007,dmask=0007,allow_utime=0020,codepage=437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro) /mnt/media_rw/8026-1405 on /mnt/runtime/default/8026-1405 type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,mask=6) /mnt/media_rw/8026-1405 on /storage/8026-1405 type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=1015,mask=6) /mnt/media_rw/8026-1405 on /mnt/runtime/read/8026-1405 type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,mask=18) /mnt/media_rw/8026-1405 on /mnt/runtime/write/8026-1405 type sdcardfs (rw,nosuid,nodev,noexec,noatime,fsuid=1023,fsgid=1023,gid=9997,mask=18) more info? Aha, by name starlte:/ # ls -lF /dev/block/platform/11120000.ufs/by-name/
total 0 lrwxrwxrwx 1 root root 16 2019-05-07 15:01 BOOT -> /dev/block/sda10@ lrwxrwxrwx 1 root root 15 2019-05-07 15:01 BOTA0 -> /dev/block/sda1@ lrwxrwxrwx 1 root root 15 2019-05-07 15:01 BOTA1 -> /dev/block/sda2@ lrwxrwxrwx 1 root root 15 2019-05-07 15:01 BOTA2 -> /dev/block/sda7@ lrwxrwxrwx 1 root root 16 2019-05-07 15:01 CACHE -> /dev/block/sda21@ lrwxrwxrwx 1 root root 15 2019-05-07 15:01 CPEFS -> /dev/block/sdd1@ lrwxrwxrwx 1 root root 16 2019-05-07 15:01 CP_DEBUG -> /dev/block/sda24@ lrwxrwxrwx 1 root root 16 2019-05-07 15:01 DQMDBG -> /dev/block/sda17@ lrwxrwxrwx 1 root root 15 2019-05-07 15:01 DTB -> /dev/block/sda8@ lrwxrwxrwx 1 root root 15 2019-05-07 15:01 DTBO -> /dev/block/sda9@ lrwxrwxrwx 1 root root 15 2019-05-07 15:01 EFS -> /dev/block/sda3@ lrwxrwxrwx 1 root root 16 2019-05-07 15:01 HIDDEN -> /dev/block/sda22@ lrwxrwxrwx 1 root root 15 2019-05-07 15:01 KEYSTORAGE -> /dev/block/sda6@ lrwxrwxrwx 1 root root 16 2019-05-07 15:01 MISC -> /dev/block/sda15@ lrwxrwxrwx 1 root root 16 2019-05-07 15:01 NAD_REFER -> /dev/block/sda13@ lrwxrwxrwx 1 root root 16 2019-05-07 15:00 ODM -> /dev/block/sda20@ lrwxrwxrwx 1 root root 16 2019-05-07 15:01 OMR -> /dev/block/sda23@ lrwxrwxrwx 1 root root 15 2019-05-07 15:01 PARAM -> /dev/block/sda4@ lrwxrwxrwx 1 root root 16 2019-05-07 15:01 PERSISTENT -> /dev/block/sda14@ lrwxrwxrwx 1 root root 16 2019-05-07 15:01 RADIO -> /dev/block/sda12@ lrwxrwxrwx 1 root root 16 2019-05-07 15:01 RECOVERY -> /dev/block/sda11@ lrwxrwxrwx 1 root root 16 2019-05-07 15:01 STEADY -> /dev/block/sda16@ lrwxrwxrwx 1 root root 16 2019-05-07 15:00 SYSTEM -> /dev/block/sda18@ lrwxrwxrwx 1 root root 15 2019-05-07 15:01 UP_PARAM -> /dev/block/sda5@ lrwxrwxrwx 1 root root 16 2019-05-07 15:01 USERDATA -> /dev/block/sda25@ lrwxrwxrwx 1 root root 16 2019-05-07 15:00 VENDOR -> /dev/block/sda19@ ok 2019-05-07: LineageOS - enable developer options, enable root access, enable local terminal. 2019-05-07: install LineageOS tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload VENDOR-27_ARI9.zip Total xfer: 1.01x
tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload lineage-15.1-20190505-nightly-starlte-signed.zip Total xfer: 1.00x
tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload MindTheGapps-8.1.0-arm64-20180808_153856.zip Total xfer: 1.01x
tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload addonsu-15.1-arm64-signed.zip Total xfer: 1.49x
not ok, I got "Encryption unsuccessful" and had to go into TWRP again and format data. After that LineageOS is ok. 2019-05-07: Heimdall - flash TWRP recovery tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/TWRP$ heimdall detect Device detected tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/TWRP$ heimdall flash --RECOVERY twrp-3.3.0-0-starlte.img --no-reboot [..] Uploading RECOVERY 100% RECOVERY upload successful

Ending session... Releasing device interface... a bit hard to get into recovery, I had to detach the usb cable first. 2019-05-07: Heimdall - flash RK3 firmware tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/official_fw/8.0_oreo/RK3/img$ heimdall detect Device detected tingo@kg-bsbox:~/doc/Samsung/Galaxy_S9/official_fw/8.0_oreo/RK3/img$ heimdall flash --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --HIDDEN hidden.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img [..] Uploading VENDOR 100% VENDOR upload successful

Ending session... Rebooting device... Releasing device interface... ok 2019-05-07: flashing recovery "over" the factory image doesn't work; when the phone boots it complains about signature check or something and doesn't want to boot into recovery.

2019-05-06: testing the CSC change via AT commands.Unfortunately, I get no response when entering 'AT' or 'at' followed by CR or CR+LF. 230400 baud, 8N1, tested with bothe screen and cutecom. IF I press IME, the #0808# and get USBSettings, I can change to DM + ACM + ADB but then the device is always in download mode. If I select RNDIS + ACM + DM + ADB I get a serial port, like this tingo@z30b:~/personal/projects/psoc/fluxengine/tmp2$ ls -l /dev/tty[ACU] crw-rw---- 1 root dialout 166, 0 May 6 22:29 /dev/ttyACM0 and I can use that. Unfortunately, no response. 2019-05-06:Bixby - disable from home screen - long press, then disable. To disable Bixby button, open Bixby, then menu icon, then Settings, find Bixby key - select "don't open anything". 2019-05-06: this thread [GUIDE] How to change S9/S9+ CSC (Only Same Model Number's CSC) explains how to change CSC, if you have combination firmware installed. 2019-05-06: some instructions here.

2019-04-26: testing the factory binary. Does it have su or sudo? connect + layout tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ adb devices List of devices attached 226b65a628037ece device

tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ adb shell starlte:/ $ df -h Filesystem Size Used Avail Use% Mounted on rootfs 1.5G 10M 1.5G 1% / tmpfs 1.6G 984K 1.6G 1% /dev /dev/block/sda18 4.0G 1.5G 2.5G 39% /system /dev/block/sda19 608M 407M 201M 67% /vendor /dev/block/sda20 612M 8.0K 612M 1% /odm tmpfs 1.6G 0 1.6G 0% /mnt tmpfs 1.6G 0 1.6G 0% /mnt/secure /dev/block/sda21 581M 628K 581M 1% /cache /dev/block/sda25 53G 272M 52G 1% /data /dev/block/sda3 16M 2.3M 13M 16% /efs /dev/block/sdd1 1.8M 556K 1.3M 29% /cpefs /dev/block/sda17 12M 12K 12M 1% /dqmdbg /dev/block/sda23 45M 12K 45M 1% /omr tmpfs 1.6G 0 1.6G 0% /storage /data/media 53G 362M 52G 1% /storage/emulated /mnt/media_rw/8026-1405 60G 1.0G 59G 2% /storage/8026-1405 check for su or sudo 1|starlte:/ $ su - /system/bin/sh: su: not found 127|starlte:/ $ sudo -i /system/bin/sh: sudo: not found see if I have access to "interesting" partitions 1|starlte:/ $ ls -l /system total 10460 drwxr-xr-x 46 root root 4096 2018-07-13 08:31 app drwxr-xr-x 3 root shell 8192 2008-12-31 15:00 bin -rw------- 1 root root 3325 2008-12-31 15:00 build.prop drwxr-xr-x 9 root root 4096 2008-12-31 15:00 cameradata -rw-r--r-- 1 root root 10311 2008-12-31 15:00 compatibility_matrix.xml drwxr-xr-x 17 root root 4096 2018-07-13 08:32 etc drwxr-xr-x 2 root root 4096 2008-12-31 15:00 factory drwxr-xr-x 2 root root 4096 2008-12-31 15:00 fake-libs drwxr-xr-x 2 root root 4096 2008-12-31 15:00 fake-libs64 drwxr-xr-x 2 root root 12288 2008-12-31 15:00 fonts drwxr-xr-x 5 root root 8192 2018-07-13 08:31 framework drwxr-xr-x 3 root root 4096 2008-12-31 15:00 hidden -rw-r--r-- 1 root root 39 2008-12-31 15:00 info.extra drwxr-xr-x 10 root root 16384 2008-12-31 15:00 lib drwxr-xr-x 8 root root 16384 2008-12-31 15:00 lib64 drwx------ 2 root root 4096 1970-01-01 00:00 lost+found -rw-r--r-- 1 root root 2544 2008-12-31 15:00 manifest.xml drwxr-xr-x 3 root root 4096 2008-12-31 15:00 media drwxr-xr-x 3 root root 4096 2018-07-13 08:31 preload drwxr-xr-x 57 root root 4096 2018-07-13 08:31 priv-app drwxrwxr-x 2 root root 4096 2019-04-25 15:39 recovery -rw-r--r-- 1 root root 10554125 2018-07-13 08:35 recovery-from-boot.p drwxr-xr-x 10 root root 4096 2008-12-31 15:00 saiv drwxr-xr-x 4 root root 4096 2008-12-31 15:00 tts drwxr-xr-x 8 root root 4096 2008-12-31 15:00 usr lrw-r--r-- 1 root root 7 2018-07-13 08:32 vendor -> /vendor drwxr-xr-x 3 root root 4096 2008-12-31 15:00 voicebargeindata drwxr-xr-x 2 root shell 4096 2008-12-31 15:00 xbin starlte:/ $ ls -l /vendor total 76 drwxr-xr-x 3 root shell 4096 2008-12-31 15:00 app drwxr-xr-x 3 root shell 4096 2008-12-31 15:00 bin -rw------- 1 root root 2839 2008-12-31 15:00 build.prop drwxr-xr-x 21 root shell 4096 2008-12-31 15:00 carrier -rw-r--r-- 1 root root 2389 2008-12-31 15:00 compatibility_matrix.xml -rw------- 1 root root 630 2008-12-31 15:00 default.prop drwxr-xr-x 11 root shell 4096 2008-12-31 15:00 etc drwxr-xr-x 3 root shell 4096 2008-12-31 15:00 firmware drwxr-xr-x 8 root shell 8192 2008-12-31 15:00 lib drwxr-xr-x 8 root shell 8192 2008-12-31 15:00 lib64 drwx------ 2 root root 4096 1970-01-01 00:00 lost+found -rw-r--r-- 1 root root 12704 2008-12-31 15:00 manifest.xml drwxr-xr-x 4 root shell 4096 2008-12-31 15:00 openvx drwxr-xr-x 2 root shell 4096 2018-07-13 08:31 overlay starlte:/ $ ls -l /odm total 4 drwx------ 2 root root 4096 1970-01-01 00:00 lost+found starlte:/ $ ls -l /mnt total 0 drwx--x--x 2 root root 40 2019-04-26 09:13 appfuse drwxr-xr-x 2 root system 40 2019-04-26 09:13 asec drwxrwx--x 2 system system 40 2019-04-26 09:13 expand drwxr-x--- 3 root media_rw 60 2019-04-26 09:13 media_rw drwxr-xr-x 2 root system 40 2019-04-26 09:13 obb drwx------ 5 root root 100 2019-04-26 09:13 runtime lrwxrwxrwx 1 root root 21 2019-04-26 09:13 sdcard -> /storage/self/primary drwx------ 4 root root 80 2019-04-26 09:13 secure drwxr-xr-x 3 root root 60 2019-04-26 09:13 user 1|starlte:/ $ ls -l /storage total 36 drwxrwx--x 7 root sdcard_rw 32768 2019-04-26 09:13 8026-1405 drwx--x--x 5 root sdcard_rw 4096 2019-04-25 15:41 emulated drwxr-xr-x 2 root root 60 2019-04-26 09:13 self 1|starlte:/ $ ls -l /storage/8026-1405 ls: /storage/8026-1405/.android_secure: Permission denied total 128 drwxrwx--x 3 root sdcard_rw 32768 2019-04-23 02:55 9_backups drwxrwx--x 3 root sdcard_rw 32768 2019-03-16 12:43 Android drwxrwx--x 2 root sdcard_rw 32768 2019-03-16 12:35 LOST.DIR drwxrwx--x 6 root sdcard_rw 32768 2019-04-24 14:08 files

no access starlte:/ $ ls -l /mnt/secure ls: /mnt/secure: Permission denied 1|starlte:/ $ ls -l /cache ls: /cache: Permission denied 1|starlte:/ $ ls -l /data data: Permission denied ls: /1|starlte:/ $ ls -l /efs ls: /efs: Permission denied 1|starlte:/ $ ls -l /cpefs ls: /cpefs: Permission denied 1|starlte:/ $ ls -l /dqmdbg ls: /dqmdbg: Permission denied 1|starlte:/ $ ls -l /omr ls: /omr: Permission denied starlte:/ $ ls -l /storage/emulated ls: /storage/emulated: Permission denied so then I know. 2019-04-25: try with COMBINATION_OXM_FA80_G960FXXU2ARG2_OXMFAC_CL13637600_QB18941698_REV01_user_mid_noship.tar.md5 tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/combination_fw/ARG2/img$ heimdall flash --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img --NAD_REFER nad_refer.bin [..] Ending session... Rebooting device... Releasing device interface... and it boots into factory binary! boot recovery, wipe data/factory reset, reboot system press IME button, enter #06# - sm-g960f not supported on showIMEI #0# - advancedtest menu #0011# - servicemode (empty) #32489# - servicemode (empty) #9090# - servicemode (empty) #1575# - servicemode (empty) #7284# - servicemode UART, USB #9900# - sysdump #7412365# - phone/cam fw ver check #0228# BatteryStatus #12580369# - - main version #7353# - quick test menu #1234# - Version (AP + model) #2683662# - nothing #0808# - USBSettings #2663# - advanced firmware version *#74123465# - nothing but it doesn't look like this firmware can help me fix IMEI / CP problems. 2019-04-25: got a combination file COMBINATION_OXM_FA80_G960FXXU1ARC3.zip, unzips to tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/combination_fw/ARC3$ unzip ../COMBINATION_OXM_FA80_G960FXXU1ARC3.zip Archive: ../COMBINATION_OXM_FA80_G960FXXU1ARC3.zip inflating: COMBINATION_OXM_FA80_G960FXXU1ARC3_OXMFAC_CL13233814_QB17505057_REV01_user_mid_noship.tar.md5 tar contains tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/combination_fw/ARC3/img$ tar tvf ../COMBINATION_OXM_FA80_G960FXXU1ARC3_OXMFAC_CL13233814_QB17505057_REV01_user_mid_noship.tar.md5 -rw-rw-r-- dpi/dpi 5176 2018-03-27 07:51 STARLTE_EUR_OPEN_FAC.pit -rw-rw-r-- dpi/dpi 2871824 2018-03-27 07:51 sboot.bin -rw-rw-r-- dpi/dpi 133120 2018-03-27 07:50 param.bin -rw-rw-r-- dpi/dpi 1372160 2018-03-27 07:50 up_param.bin -rw-rw-r-- dpi/dpi 4112912 2018-03-27 07:50 cm.bin -rw-rw-r-- dpi/dpi 8192 2018-03-27 07:50 keystorage.bin -rw-rw-r-- dpi/dpi 32564240 2018-03-27 07:51 nad_fw.bin -rw-rw-r-- dpi/dpi 65536 2018-03-27 07:50 nad_refer.bin -rw-rw-r-- dpi/dpi 247256371 2018-03-27 07:52 nad_bigstream.bin -rw-rw-r-- dpi/dpi 35922464 2018-03-27 07:51 boot.img -rw-rw-r-- dpi/dpi 42594848 2018-03-27 07:51 recovery.img -rw-rw-r-- dpi/dpi 1843352724 2018-03-27 07:52 system.img -rw-rw-r-- dpi/dpi 462363260 2018-03-27 07:52 vendor.img -rw-r--r-- dpi/dpi 4481148 2018-03-27 07:52 dqmdbg.img -rw-r--r-- dpi/dpi 280678664 2018-03-27 07:52 userdata.img -r-xr-xr-x dpi/dpi 43109744 2018-03-27 07:50 modem.bin -r--r--r-- dpi/dpi 5242880 2018-03-27 07:50 modem_debug.bin -rw-r--r-- dpi/dpi 11878704 2018-03-27 07:52 cache.img -rw-rw-r-- dpi/dpi 27431204 2018-03-27 07:52 odm.img use Heimdall to flash tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/combination_fw/ARC3/img$ heimdall detect Device detected tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/combination_fw/ARC3/img$ heimdall flash --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img --NAD_REFER nad_refer.bin [..] Uploading ODM 0% ERROR: Failed to send file part packet! ERROR: ODM upload failed!

Ending session... ERROR: Failed to send end session packet! Releasing device interface... fails on ODM, every time. Will it work without ODM? tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/combination_fw/ARC3/img$ heimdall detect Device detected tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/combination_fw/ARC3/img$ heimdall flash --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img --NAD_REFER nad_refer.bin [..] Uploading PARAM 0% ERROR: Failed to send file part packet! ERROR: PARAM upload failed!

Ending session... ERROR: Failed to send end session packet! Releasing device interface... nope. 2019-04-25: flash stock (RJ3) tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/official_fw/8.0_oreo/RJ3/img$ heimdall detect Device detected tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/official_fw/8.0_oreo/RJ3/img$ heimdall flash --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --HIDDEN hidden.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --OMR omr.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img [..] Ending session... Rebooting device... Releasing device interface... but no - no Factory app. 2019-04-25: LineageOS -I use Root Browser to delete everything except 'FactoryApp' 'prov' and 'prov_data' folders in/efs, then I reboot the phone, then I power off and boot into recovery, format data. Power off, boot into download mode. 2019-04-25: LineageOS - apps - install File Explorer Root Browser 3.5.10.0 - it crashes, install Root Browser Classic 2.7.9.0, install the utilities and BusyBox for Android 2019-04-25: LineageOS - enable developer options, enable root access (apps and ADB), USB debugging 2019-04-25: install LineageOS - TWRP already installed - from TWRP, wipe, format data, advanced wipe - Cache + System - from TWRP adb sideload tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload VENDOR-27_ARI9.zip Total xfer: 1.01x
tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload lineage-15.1-20190421-nightly-starlte-signed.zip Total xfer: 1.00x
tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload MindTheGapps-8.1.0-arm64-20180808_153856.zip Total xfer: 1.01x
tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload addonsu-15.1-arm64-signed.zip Total xfer: 1.49x
ok 2019-04-25: flash TWRP tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/TWRP$ heimdall detect Device detected tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/TWRP$ heimdall flash --RECOVERY twrp-3.3.0-0-starlte.img --no-reboot [..] Uploading RECOVERY 100% RECOVERY upload successful then I press volume down and power until the phone powers off. press volume up + bixby + power to boot into recovery. root device 2019-04-25: EFS fixing - method 2 in the article xda-developers [GUIDE] How to fix IMEI / DRK issues (S7 / S7 Edge) says OEM unlock (via developer options) have a backup of EFS partition (even if corrupt) rooted device use Root Browser, browse to /efs folder, delete everything except 'FactoryApp' and 'prov_data' folders reboot - full reboot, ignore any problems boot into recovery - wipe data put phone into download mode (without boot) flash stock firmware boot - it should end up in Factory Binary reboot press "IME" button and type *#06# and verify that IMEI is restored flash the firmware you want 2019-04-25: developer options - enable OEM unlock, phone resets and does a factory reset 2019-04-25: apps - Partitions Backup & Restore 2.2.1, 2019-04-25: apps - install Root Browser Classic 2.7.9.0, 2019-04-25: File Explorer Root Browser doesn't see the /efs folder. Termux can't list it (no permissions). 2019-04-25: apps - install File Explorer Root Browser 3.5.10.0, Termux 0.68,

2019-04-24: went to a Samsung Service Point / Service Center and paid NOK 299.- to have them reset the phone and install latest software. Didn't fix the problem (I was warned about that possible outcome before the job was started) 2019-04-24: Heimdall - insert SIM, then do tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/official_fw/8.0_oreo/RJ3/img$ heimdall flash --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --HIDDEN hidden.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --OMR omr.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img [..] Ending session... Rebooting device... Releasing device interface... ok 2019-04-24: the last post in this thread indicates that when you flash multicarrier (OXM?) sw, you need to have a SIM installed before first boot; that is what sets CSC. Interesting. 2019-04-24: from this I found out that #0011# enters a service mode, but I don't know what it is for. googling for galaxy s9 service mode" gives How to Access Hidden Service Menu on Samsung Galaxy S9, #0# - Advanced test menu - for sensors and stuff, not so useful now codes from All Secret Codes of Samsung Galaxy S9 and Galaxy S9+, #32489# - nothing #7284# - nothing #9090# - servicemode #9900# - system dump #1575# - nothing #7412365# - nothing #0228# - BatteryStatus #12580369# - Main version (software and hardware) #7353# - quick test menu (sensors) #1234# - Version - firmware info #8736364# - nothing (OTA update meny screen) #7780# - nothing (Factory Data Reset) 27673855# - nothing (full factory reset - no confirmation) #27673855# - nothing (full factory reset - no confirmation) from Codes for SAMSUNG Galaxy S9 #2683662# - Advanced service mode - empty #0808# - USB Settings #2663# - advanced firmware version #74123465# - nothing - camera firmware version 2019-04-24: How to fix Samsung Galaxy unknown baseband version - EFS Professional can be found here. 2019-04-24: SuperSU doesn't show up in apps, but if I do 'su -' in termux, I get a superuser grant request. 2019-04-24: root - via How to Root Samsung Galaxy S9 and Galaxy S9 Plus. Installed via TWRP no-verity-opt-encrypt-samsung-1.0.zip RMM-State_Bypass_Mesa_v2.zip and ElementalX-S9-1.15.zip Magisk-v19.0.zip and UPDATE-SuperSU-v2.82-20170528234214.zip ok 2019-04-24: Heimdall - install TWRP tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/TWRP$ heimdall detect Device detected tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/TWRP$ heimdall flash --RECOVERY twrp-3.3.0-0-starlte.img --no-reboot [..] Uploading RECOVERY 100% RECOVERY upload successful

Ending session... Releasing device interface... then I press volume down and power until the phone powers off. press volume up + bixby + power to boot into recovery. 2019-04-24: adb - shell tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9$ adb shell starlte:/ $ what do we have here? starlte:/ $ df -h Filesystem Size Used Avail Use% Mounted on rootfs 1.5G 11M 1.5G 1% / tmpfs 1.6G 0.9M 1.6G 1% /dev /dev/block/dm-0 4.0G 3.6G 451M 90% /system /dev/block/dm-1 608M 440M 168M 73% /vendor /dev/block/dm-2 612M 489M 123M 80% /odm tmpfs 1.6G 0 1.6G 0% /mnt tmpfs 1.6G 0 1.6G 0% /mnt/secure /dev/block/sda21 581M 2.3M 579M 1% /cache /dev/block/sda3 16M 2.6M 13M 17% /efs /dev/block/sda17 12M 12K 12M 1% /dqmdbg /dev/block/sda23 45M 12K 45M 1% /omr tmpfs 1.6G 0 1.6G 0% /storage /dev/block/dm-3 53G 1.3G 51G 3% /data /data/media 53G 1.4G 51G 3% /storage/emulated /mnt/media_rw/8026-1405 60G 1.0G 59G 2% /storage/8026-1405 interesting starlte:/ $ ls -l /efs ls: /efs: Permission denied and no su or sudo, I presume? 1|starlte:/ $ su /system/bin/sh: su: not found 127|starlte:/ $ sudo /system/bin/sh: sudo: not found right. 2019-04-24: recovery - wipe cache, wipe data/factory reset, power off. Power on - get dumped to recovery, do Reboot system now 2019-04-24: recovery - the following menu choices Reboot system now Reboot to bootloader Apply update from ADB Apply update from SD card Wipe data/factory reset Wipe cache partition Mount /system View recovery logs Run graphics test Power off ok 2019-04-24: call codes (from here) #06# - sm-g960f is not supported on showIMEI #197328640# - does nothing ##197328640## - does nothing 2019-04-24: sw info Android 8.0.0 Samsung Experience version 9.0 Baseband version Unknown Build number R16NW.G960FXXU2BRJ3 IMEI - both are unknown 2019-04-24: flash RJ3 firmware with Heimdall tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9/official_fw/8.0_oreo/RJ3/img$ heimdall flash --BOOT boot.img --CACHE cache.img --CM cm.bin --DQMDBG dqmdbg.img --HIDDEN hidden.img --KEYSTORAGE keystorage.bin --RADIO modem.bin --CP_DEBUG modem_debug.bin --ODM odm.img --OMR omr.img --PARAM param.bin --RECOVERY recovery.img --BOOTLOADER sboot.bin --SYSTEM system.img --UP_PARAM up_param.bin --USERDATA userdata.img --VENDOR vendor.img [..] Downloading device's PIT file... PIT file download successful.

Uploading BOOT 100% BOOT upload successful

Uploading CACHE 100% CACHE upload successful

Uploading CM 100% CM upload successful

Uploading DQMDBG 100% DQMDBG upload successful

Uploading HIDDEN 100% HIDDEN upload successful

Uploading KEYSTORAGE 100% KEYSTORAGE upload successful

Uploading RADIO 100% RADIO upload successful

Uploading CP_DEBUG 100% CP_DEBUG upload successful

Uploading ODM 100% ODM upload successful

Uploading OMR 100% OMR upload successful

Uploading PARAM 100% PARAM upload successful

Uploading RECOVERY 100% RECOVERY upload successful

Uploading BOOTLOADER 100% BOOTLOADER upload successful

Uploading SYSTEM 100% SYSTEM upload successful

Uploading UP_PARAM 100% UP_PARAM upload successful

Uploading USERDATA 100% USERDATA upload successful

Uploading VENDOR 100% VENDOR upload successful

Ending session... Rebooting device... Releasing device interface... ok 2019-04-24: fastboot - the Galaxy S9 doesn't have fastboot, only download mode 2019-04-24: adb - verify that the phone can be detected tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9$ adb devices List of devices attached 226b65a628037ece device

tingo@kg-bsbox:/zs/tingo/doc/Samsung/Galaxy_S9$ adb devices -l List of devices attached 226b65a628037ece device usb:1-3.2 product:lineage_starlte model:SM_G960F device:starlte ok 2019-04-24: Heimdall - info version tingo@kg-bsbox:~$ heimdall version v1.4.1 help tingo@kg-bsbox:~$ heimdall Usage: heimdall

Action: close-pc-screen Arguments: [--verbose] [--no-reboot] [--resume] [--stdout-errors] [--usb-log-level ] Description: Attempts to get rid off the "connect phone to PC" screen. Note: --no-reboot causes the device to remain in download mode after the action is completed. If you wish to perform another action whilst remaining in download mode, then the following action must specify the --resume flag.

Action: detect Arguments: [--verbose] [--stdout-errors] [--usb-log-level ] Description: Indicates whether or not a download mode device can be detected.

Action: download-pit Arguments: --output [--verbose] [--no-reboot] [--stdout-errors] [--usb-log-level ] Description: Downloads the connected device's PIT file to the specified output file. Note: --no-reboot causes the device to remain in download mode after the action is completed. If you wish to perform another action whilst remaining in download mode, then the following action must specify the --resume flag.

Action: flash Arguments: [-- ...] [-- ...] [--pit ] [--verbose] [--no-reboot] [--resume] [--stdout-errors] [--usb-log-level ] or: --repartition --pit [-- ...] [-- ...] [--verbose] [--no-reboot] [--resume] [--stdout-errors] [--usb-log-level ] Description: Flashes one or more firmware files to your phone. Partition names (or identifiers) can be obtained by executing the print-pit action. Note: --no-reboot causes the device to remain in download mode after the action is completed. If you wish to perform another action whilst remaining in download mode, then the following action must specify the --resume flag. WARNING: If you're repartitioning it's strongly recommended you specify all files at your disposal.

Action: help Description: Displays this dialogue.

Action: info Description: Displays information about Heimdall.

Action: print-pit Arguments: [--file ] [--verbose] [--no-reboot] [--stdout-errors] [--usb-log-level ] Description: Prints the contents of a PIT file in a human readable format. If a filename is not provided then Heimdall retrieves the PIT file from the connected device. Note: --no-reboot causes the device to remain in download mode after the action is completed. If you wish to perform another action whilst remaining in download mode, then the following action must specify the --resume flag.

Action: version Description: Displays the version number of this binary. ok 2019-04-24: Samsung smart switch - this can supposedly do an emergency install / factory reset of your phone, in addition to updates.

2019-04-23:Odin - tested Odin v3.09 on my win7 laptop u35jc - it accepts the firmware files, starts the download and then nothing more happens. Odin v3.12 - same as Odin v3.09. Odin 3.10 - crashes or fails (timeout) to setup the connection. 2019-04-23: Odin - tested with Odin 3.12 on bitraf-ws1-win. Odin accepts the firmware files (I tested both RK3 and RJ3 updates) and starts the download, but then nothing happens. 2019-04-23: the IMEI number is unknown too. This article indicates that the reason might be that the EFS "folder" (partition) is damaged / corrupted.

2019-04-22: LineageOS - it also says Baseband version "Unknown", even after flashing RK3 from recovery. Hmm,,, It seems the fix involves Odin 1. Just use Odin as usual! 2. Put files in appropriate slots AP, BL, CP, CSC 3. Go to options and check nand erase all, re-partition, auto reboot and F. Reset time. 4. Hit start and wait for the green Pass! Let it reboot as usual and Boom, all will be back to the way it should! (from this thread) . Also this, 2019-04-22: install LineageOS + open gapps by doing tingo@z30b:~/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload lineage-15.1-20190421-nightly-starlte-signed.zip Total xfer: 1.00x
tingo@z30b:~/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload open_gapps-arm64-8.1-nano-20190315.zip Total xfer: 1.20x
ok 2019-04-22: recovery (TWRP) - I installed VENDOR-27_ARI9.zip sucessfully. 2019-04-22: I installed TWRP by doing tingo@z30b:~/doc/Samsung/Galaxy_S9/LineageOS/recovery_TWRP$ heimdall flash --RECOVERY recovery.img --no-reboot [..] Uploading RECOVERY 100% RECOVERY upload successful

Ending session... Releasing device interface... at least that works 2019-04-22: flash vendor.img from VENDOR-27_ARI9.zip tingo@z30b:~/doc/Samsung/Galaxy_S9/vendor_images/temp$ heimdall flash --VENDOR vendor.img [..] Initialising protocol... Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond. Please be patient!

Session begun.

Downloading device's PIT file... PIT file download successful.

Uploading VENDOR 49% ERROR: Failed to send file part packet! ERROR: VENDOR upload failed!

Ending session... ERROR: Failed to send end session packet! Releasing device interface... hmm, I wonder why it failed? (tries several times, fails every time) 2019-04-22: service provider SW version SAOMC_SM-G960F_OXM_NEE_OO_0039 226b65a628037ece NEE/NEE,NEE/NEE ok 2019-04-22: try to flash modem bin from Modem_G960FXXS2BRK3_28.11.2018.rar: tingo@z30b:~/doc/Samsung/Galaxy_S9/basebands/Modem_G960FXXS2BRK3_28.11.2018$ heimdall detect Device detected tingo@z30b:~/doc/Samsung/Galaxy_S9/basebands/Modem_G960FXXS2BRK3_28.11.2018$ heimdall flash --RADIO modem.bin [..] nope, still Baseband version "Unknown". 2019-04-22: Ok, now I have Samsungs Android Android 8.0.0 Samsung Experience version 9.0 Baneband version Unknown Kernel version 4.9.59-14479316-QB201817876 dpi@SWDG5318 #1 Wed Nov 28 10:38:46 KST 2018 Build number R16NW.G960F_8.0.0_0017, Wed Nov28 11:04:26 2018 but still no SIM card detected. 2019-04-22: flash all at once tingo@z30b:~/doc/Samsung/Galaxy_S9/official_fw/8.0.0_oreo$ heimdall flash --BOOTLOADER sboot.bin --CM cm.bin --PARAM param.bin --UP_PARAM up_param.bin --KEYSTORAGE keystorage.bin --BOOT boot.img --RECOVERY recovery.img --RADIO modem.bin --DQMDBG dqmdbg.img --SYSTEM system.img --VENDOR vendor.img --ODM odm.img --CACHE cache.img --HIDDEN hidden.img --OMR omr.img --CP_DEBUG modem_debug.bin --USERDATA userdata.img [..] Ending session... Rebooting device... Releasing device interface... and the phone reboots, installs some Android update and reboots again, slowly blinking "SAMSUNG" logo on screen for a while, then reboot, installing applications 2019-04-22: flash vendor - I now get a slowly flashing "SAMSUNG" logo on the screen and nothing more happens. 2019-04-22: flash recovery - recovery works, I can wipe cache and factory reset, but the phone will not boot still 2019-04-22: flash system - unable to boot from TWRP, not even with wipe cache / dalvik 2019-04-22: flash dqmdbg - didn't help 2019-04-22: flash keystorage - didn't help 2019-04-22: flash param and up_param - didn't help 2019-04-22: flash cm - didn't help 2019-04-22: flash omr - didn't help 2019-04-22: flash hidden - didn't help 2019-04-22: flash odm - didn't help, still "unknown" baseband. tingo@z30b:~/doc/Samsung/Galaxy_S9/official_fw/8.0.0_oreo$ heimdall detect Device detected tingo@z30b:~/doc/Samsung/Galaxy_S9/official_fw/8.0.0_oreo$ heimdall flash --ODM odm.img [..] Initialising connection... Detecting device... Claiming interface... Setting up interface...

Initialising protocol... Protocol initialisation successful.

Beginning session... [..] Session begun.

Downloading device's PIT file... PIT file download successful.

Uploading ODM 100% ODM upload successful

Ending session... Rebooting device... Releasing device interface... ok 2019-04-22:result - "unknown" baseband, SIM card not detected. 2019-04-22: flash modem.bin and modem_debug.bin tingo@z30b:~/doc/Samsung/Galaxy_S9/official_fw/8.0.0_oreo$ heimdall detect Device detected tingo@z30b:~/doc/Samsung/Galaxy_S9/official_fw/8.0.0_oreo$ heimdall flash --RADIO modem.bin --CP_DEBUG modem_debug.bin Heimdall v1.4.1

This software is provided free of charge. Copying and redistribution is encouraged.

If you appreciate this software and you would like to support future development please consider donating: http://www.glassechidna.com.au/donate/

Initialising connection... Detecting device... Claiming interface... Setting up interface...

Initialising protocol... Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond. Please be patient!

Session begun.

Downloading device's PIT file... PIT file download successful.

Uploading RADIO 100% RADIO upload successful

Uploading CP_DEBUG 100% CP_DEBUG upload successful

Ending session... Rebooting device... Releasing device interface... ok.

2019-04-22: from the pit text file I can get the following partition names and filenames partition file BOOTLOADER sboot.bin BOOTLOADER2 - CM cm.bin ECT ect.bin CPEFS PIT - MD5HDR md5.img BOTA0 - BOTA1 - EFS efs.img PARAM param.bin UP_PARAM up_param.bin KEYSTORAGE keystorage.bin BOTA2 - DTB dtb.img DTBO dtb0.img BOOT boot.img RECOVERY recovery.img RADIO modem.bin NAD_REFER nad_refer.bin PERSISTENT MISC STEADY steady.bin DQMDBG dqmdbg.img SYSTEM system.img VENDOR vendor.img ODM odm.img CACHE cache.img HIDDEN hidden.img OMR omr.img CP_DEBUG modem_debug.bin USERDATA userdata.img ok 2019-04-22: I put the pdhone in downloiad mode then do tingo@z30b:~/doc/Samsung/Galaxy_S9$ heimdall detect Device detected then print the pit to a file tingo@z30b:~/doc/Samsung/Galaxy_S9$ heimdall print-pit > SM-G960F_pit.txt (the phone reboots after the command is finished)

2019-04-20: baseband testing - I flash a new baseband (from TWRP - recovery) then I wipe cache / dalvik, then reboot and see if it connects to mobile network. RK3 - says registered on network, but doesn't ask for PIN for the SIM, also says "error while searching for networks" when switching to manual. Power off, then it asks for PIN, but it still will not register. RK4 - power off from Android, then power on. Asks for PIN, doesn't register on network SB3 - (reboot loop, required a few trips into TWRP to fix - power off, then reboot system) - set up LineageOS from fresh - asks for PIN, doesn't register on network. SC1 - power off from Android, - asks for PIN, doesn't register on network, SD2 - power off from Android, - asks for PIN, doesn't register on network, SD3 - power off from Android, - asks for PIN, doesn't register on network, so, no progress.

2019-04-19: mobile network - unfortunately, factory reset didn't help with the SIM-card problem; it still will not register automatically. Manually registering on ice.net doesn't work either. Registering to N Netcom - doesn't work. Registering to N Telenor - 2019-04-19: factory reset - what happens if I try a factory reset? Settings, System, Reset options, Erase all data (factory reset) - ok, the phone ends up in a boot loop, not good. Fixed by holding volume up + bixby + power (= recovery) and doing a "factory reset" wipe from TWRP.

2019-04-16: baseband - I flashed RK4 baseband - G960FXXS2BRK4; SIM-card won't register with that either 2019-04-16: SIM-card won't register with that baseband either. 2019-04-16: baseband - I downloaded the RK3 baseband from this thread and flashed it via recovery (TWRP). Now baseband is G960FXXS2BRK3.

2019-04-15: baseband version is G960FXXU2CSB3. 2019-04-15: LineageOS - download and install April 14 update, 455 MB. The download is a bit slow. 2019-04-15: apps - installed Phone Info SAM 3.7.6 2019-04-15: LineageOS - download and install April 7 update, 455 MB. The download is a bit slow. 2019-04-15: I sent a message to Ice support, they recommended a new SIM card. Went to a Narvesen, got myself a new SIM card and registered it 2019-04-15: went to a Telia store - they said that the phone is not locked to a phone operator, and they tested it with a SIM-card and it worked.

2019-04-03: SIM card - the inserted SIM card didn't automatically register on a mobile network. Not manually either. It works fine in another phone that runs LineageOS. 2019-04-03: LineageOS - download and install March 31 update, 455 MB. The download is very slow today. 2019-04-03: apps - installed QR Code Reader 2.3, 2019-04-03: app - Health Mate - logged in, ok. 2019-04-03: app - Goodreads - already logged in. 2019-04-03: app - Meetup - logged in, ok. 2019-04-03: app - Expesnify - logged in, ok. 2019-04-03: app - Fitbit - logged in, and everything was ok. 2019-04-03: app - MWM - paired and set up MetaWatch Strata (I disassociated it in MWM on the S5 first). 2019-04-03: LineageOS - download and install March 24 update, 455 MB.

2019-04-02: apps - installed Fitbit 2.90, Withings Health Mate 4.3.3, Expensify 8.4.10.3, SMS Backup+ 1.5.11, Meetup 3.10.50, Goodreads 2.7.0 Build 17, Tiny Scanner 4.0.2, 2019-04-02: apps - I donwloaded a com.metawatch.mwm_2015-05-27.apk from here, shared it to my S9 via drive, then installed it

2019-03-16: apps - Standard Notes seems to be an excellent replacement for my prevoius note taking app. 2019-03-16:z30b - gmtp works for downloading files from the phone (internal storage or sdcard) 2019-03-16: LineageOS - after rebooting and finishing install, the phone now has LineageOS 15.1-20190310-NIGHTLY-starlte, which is Android 8.1.0. Cool.

2019-03-15: z30b - TWRP - sideload - advanced, ADB sideload then on linux machine do tingo@z30b:~/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload lineage-15.1-20190310-nightly-starlte-signed.zip Total xfer: 0.01x and the phone says that the vendor image isn't compatible. Hmm... try the previous image tingo@z30b:~/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload lineage-15.1-20190303-nightly-starlte-signed.zip Total xfer: 0.01x
same problem ERROR: Vendor image on the device is NOT compatible Expected version: 27_ARI9 You can download from is.gd/omexok hmm, according to this thread, I need a new vendor image, which needs to be flashed first. downloading VENDOR-27_ARI9.zip now. so sideload vendor image tingo@z30b:~/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload VENDOR-27_ARI9.zip Total xfer: 1.01x
ok, then LineageOS image tingo@z30b:~/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload lineage-15.1-20190310-nightly-starlte-signed.zip Total xfer: 1.00x
ok, then Open GApps tingo@z30b:~/doc/Samsung/Galaxy_S9/LineageOS$ adb sideload open_gapps-arm64-8.1-nano-20190315.zip Total xfer: 1.20x
ok

2019-03-15: TWRP - wipe - format data - yes, advanced wipe, System + Cache - swipe to wipe, 2019-03-15: TWRP - backup - I did a backup of system, data and boot partitions to microSD card 2019-03-15:z30b - I copied files to the fat32 partition on the microSD card lineage-15.1-20190310-nightly-starlte-signed.zip open_gapps-arm64-8.1-nano-20190315.zip then I put it back into the phone again. 2019-03-15:TWRP - I formated the microSd card in TWRP, it created a 7.8GB fat32 partition and a ext3 partition 2019-03-15: microSD card - I'm using a 64GB Samsung microSD card 2019-03-15:z30b - Heimdall - install TWRP recovery tingo@z30b:~/doc/Samsung/Galaxy_S9/LineageOS/recovery_TWRP$ heimdall flash --RECOVERY twrp-3.2.3-0-starlte.img --no-reboot Heimdall v1.4.1

This software is provided free of charge. Copying and redistribution is encouraged.

If you appreciate this software and you would like to support future development please consider donating: http://www.glassechidna.com.au/donate/

Initialising connection... Detecting device... Claiming interface... Setting up interface...

Initialising protocol... Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond. Please be patient!

Session begun.

Downloading device's PIT file... PIT file download successful.

Uploading RECOVERY 100% RECOVERY upload successful

Ending session... Releasing device interface... ok, then 2019-03-15:z30b - Heimdall - verify that it can connect tingo@z30b:~$ heimdall print-pit Heimdall v1.4.1

This software is provided free of charge. Copying and redistribution is encouraged.

If you appreciate this software and you would like to support future development please consider donating: http://www.glassechidna.com.au/donate/

Initialising connection... Detecting device... Claiming interface... Setting up interface...

Initialising protocol... Protocol initialisation successful.

Beginning session...

Some devices may take up to 2 minutes to respond. Please be patient!

Session begun.

Downloading device's PIT file... PIT file download successful.

Entry Count: 32 Unknown 1: 1598902083 Unknown 2: 844251476 Unknown 3: 21324 Unknown 4: 14665 Unknown 5: 12600 Unknown 6: 48 Unknown 7: 5 Unknown 8: 0

--- Entry #0 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 80 Attributes: 2 (STL Read-Only) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 0 Partition Block Count: 1024 File Offset (Obsolete): 1 File Size (Obsolete): 0 Partition Name: BOOTLOADER Flash Filename: sboot.bin FOTA Filename:

--- Entry #1 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 81 Attributes: 2 (STL Read-Only) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 0 Partition Block Count: 1024 File Offset (Obsolete): 2 File Size (Obsolete): 0 Partition Name: BOOTLOADER2 Flash Filename: - FOTA Filename:

--- Entry #2 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 90 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 0 Partition Block Count: 1792 File Offset (Obsolete): 4 File Size (Obsolete): 0 Partition Name: CM Flash Filename: cm.bin FOTA Filename:

--- Entry #3 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 91 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 1792 Partition Block Count: 256 File Offset (Obsolete): 4 File Size (Obsolete): 0 Partition Name: ECT Flash Filename: ect.bin FOTA Filename:

--- Entry #4 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 1 Attributes: 5 (Read/Write) Update Attributes: 5 (FOTA) Partition Block Size/Offset: 6 Partition Block Count: 1536 File Offset (Obsolete): 3 File Size (Obsolete): 0 Partition Name: CPEFS Flash Filename: FOTA Filename:

--- Entry #5 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 70 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 6 Partition Block Count: 2 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: PIT Flash Filename: - FOTA Filename:

--- Entry #6 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 71 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 8 Partition Block Count: 256 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: MD5HDR Flash Filename: md5.img FOTA Filename:

--- Entry #7 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 1 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 1024 Partition Block Count: 1024 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: BOTA0 Flash Filename: - FOTA Filename:

--- Entry #8 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 2 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 2048 Partition Block Count: 2048 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: BOTA1 Flash Filename: - FOTA Filename:

--- Entry #9 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 3 Attributes: 5 (Read/Write) Update Attributes: 5 (FOTA) Partition Block Size/Offset: 4096 Partition Block Count: 5120 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: EFS Flash Filename: efs.img FOTA Filename:

--- Entry #10 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 4 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 9216 Partition Block Count: 2048 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: PARAM Flash Filename: param.bin FOTA Filename:

--- Entry #11 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 5 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 11264 Partition Block Count: 2048 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: UP_PARAM Flash Filename: up_param.bin FOTA Filename:

--- Entry #12 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 6 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 13312 Partition Block Count: 2 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: KEYSTORAGE Flash Filename: keystorage.bin FOTA Filename:

--- Entry #13 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 7 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 13314 Partition Block Count: 2048 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: BOTA2 Flash Filename: - FOTA Filename:

--- Entry #14 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 8 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 15362 Partition Block Count: 2048 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: DTB Flash Filename: dtb.img FOTA Filename:

--- Entry #15 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 9 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 17410 Partition Block Count: 2048 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: DTBO Flash Filename: dtbo.img FOTA Filename:

--- Entry #16 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 10 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 19458 Partition Block Count: 14080 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: BOOT Flash Filename: boot.img FOTA Filename:

--- Entry #17 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 11 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 33538 Partition Block Count: 16638 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: RECOVERY Flash Filename: recovery.img FOTA Filename:

--- Entry #18 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 12 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 50176 Partition Block Count: 12800 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: RADIO Flash Filename: modem.bin FOTA Filename:

--- Entry #19 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 13 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 62976 Partition Block Count: 256 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: NAD_REFER Flash Filename: nad_refer.bin FOTA Filename:

--- Entry #20 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 14 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 63232 Partition Block Count: 128 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: PERSISTENT Flash Filename: FOTA Filename:

--- Entry #21 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 15 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 63360 Partition Block Count: 256 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: MISC Flash Filename: FOTA Filename:

--- Entry #22 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 16 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 63616 Partition Block Count: 1024 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: STEADY Flash Filename: steady.bin FOTA Filename:

--- Entry #23 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 17 Attributes: 5 (Read/Write) Update Attributes: 5 (FOTA) Partition Block Size/Offset: 64640 Partition Block Count: 4096 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: DQMDBG Flash Filename: dqmdbg.img FOTA Filename:

--- Entry #24 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 18 Attributes: 5 (Read/Write) Update Attributes: 5 (FOTA) Partition Block Size/Offset: 68736 Partition Block Count: 1126400 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: SYSTEM Flash Filename: system.img FOTA Filename:

--- Entry #25 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 19 Attributes: 5 (Read/Write) Update Attributes: 5 (FOTA) Partition Block Size/Offset: 1195136 Partition Block Count: 166400 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: VENDOR Flash Filename: vendor.img FOTA Filename:

--- Entry #26 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 20 Attributes: 5 (Read/Write) Update Attributes: 5 (FOTA) Partition Block Size/Offset: 1361536 Partition Block Count: 165376 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: ODM Flash Filename: odm.img FOTA Filename:

--- Entry #27 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 21 Attributes: 5 (Read/Write) Update Attributes: 5 (FOTA) Partition Block Size/Offset: 1526912 Partition Block Count: 153600 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: CACHE Flash Filename: cache.img FOTA Filename:

--- Entry #28 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 22 Attributes: 5 (Read/Write) Update Attributes: 5 (FOTA) Partition Block Size/Offset: 1680512 Partition Block Count: 2560 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: HIDDEN Flash Filename: hidden.img FOTA Filename:

--- Entry #29 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 23 Attributes: 5 (Read/Write) Update Attributes: 5 (FOTA) Partition Block Size/Offset: 1683072 Partition Block Count: 12800 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: OMR Flash Filename: omr.img FOTA Filename:

--- Entry #30 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 24 Attributes: 5 (Read/Write) Update Attributes: 1 (FOTA) Partition Block Size/Offset: 1695872 Partition Block Count: 1280 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: CP_DEBUG Flash Filename: modem_debug.bin FOTA Filename:

--- Entry #31 --- Binary Type: 0 (AP) Device Type: 8 (Unknown) Identifier: 25 Attributes: 5 (Read/Write) Update Attributes: 5 (FOTA) Partition Block Size/Offset: 1697152 Partition Block Count: 0 File Offset (Obsolete): 0 File Size (Obsolete): 0 Partition Name: USERDATA Flash Filename: userdata.img FOTA Filename: remained

Ending session... Rebooting device... Releasing device interface... and the phone reboots - ok 2019-03-15:z30b - verify that Heimdall is installed and working tingo@z30b:~$ heimdall version v1.4.1 ok 2019-03-15:z30b - using adb on my Toshiba laptop (running Debian 9.8) tingo@z30b:~$ adb devices List of devices attached * daemon not running. starting it now on port 5037 * * daemon started successfully * 226b65a628037ece unauthorized first attempt - not authorized. After saying ok on device tingo@z30b:~$ adb devices List of devices attached 226b65a628037ece device good. 2019-03-15: oem unlock - I enabled oem unlock in developer options, got a warning about wiping of all data, the phone rebooted and did a factory reset. After it had finished, I enabled developer options and usb debugging. 2019-03-15: LineageOS - version 15.1 is supported on Galaxy S9 (aka starlte).

2019-03-14: Android - ran updates until there were no more. The phone now has Android 9, One UI version 1.0 Baseband version G960FXXU2CSB3 Kernel version 4.9.59-15367606

1 Wed Feb 20 22:19:19 KST 2019

Build number PPR1.180610.011.G960FXXU2CSB9

Android security patch level 1 February 2019 ok

2019-03-13: got a package in the mail - a Samsung Galaxy S9.