SamyGO

Posted: **Mon Oct 26, 2015 9:33 pm**

Do you like to use only crashing options?

SYSTEM has some already reported issues because some offsets have changed in new firmwares (as well as MSGBOX, in a lesser extent). Simply don't use it, it's ugly anyway

Posted: **Mon Oct 26, 2015 9:41 pm**

yeah, somehow i have lucj finding those options.

anyway, using TEXT the output on the screen is truncated after the first space in the text string - did anyone encounter that as well?
here is the log (displayed text should have been "Anruf: test test test":

Code: Select all

[Alert] SamyGO B/C/D/E/F/H libAlert v0.2.1 - (c) zoelechat 2015
[Alert] dlsym 'g_AppWindow' failed.
[Alert] g_pAppWindow [0xb46b52c].
[Alert] dlsym 'g_TaskManager' failed.
[Alert] g_pTaskManager [0xb468938].
[Alert] dlsym 'g_TVViewerMgr' failed.
[Alert] g_pTVViewerMgr [0xb486150].
[Alert] g_pWarningResMgr [0xb544290].
[Alert] g_pMsgboxResMgr [0xb544734].
[Alert] g_TVViewerWStringEng [0xb007528].
[Alert] g_WarningWStringEng [0xb30e170].
[Alert] g_MsgboxWStringEng [0xb316cb4].
[Alert] g_pSystemAlertResMgr [0xb544550].
[Alert] g_SystemAlertWStringEng [0xb312238].
[Alert] g_pCustomTextResMgr [0xb5446e4].
[Alert] g_CustomTextWStringEng [0xb3161c4].
[Alert] _ZN5TCAPI9GetWindowEN8TCWindow7EWindowE [0x1661900].
[Alert] dlsym '_ZN8TCWindow9MuteVideoEb' failed.
[Alert] _ZN13TCWindowProxy9MuteVideoEb [0x16d1834].
[Alert] _ZN16CResourceManager10GetWStringEi [0x1dc8b70].
[Alert] _ZN9PCWString7ConvertEPtPKciiPi [0x158bdfc].
[Alert] dlsym '_ZN14CViewerWrapper17ShowWarningBannerEi' failed.
[Alert] _ZN12CTaskManager14GetApplicationE15DTV_APPLICATION [0x1dc9da8].
[Alert] _ZN10CViewerApp16GetViewerManagerEv [0x295b6c4].
[Alert] _ZN14CViewerManager11ShowWarningEii [0x297e9d8].
[Alert] _ZN10ALMOND030015CDesktopManager11GetInstanceENS_13EDesktopIndexE [0x1ed4144].
[Alert] _ZN10ALMOND030015CDesktopManager14GetApplicationEPKcS2_ [0x1edf750].
[Alert] dlsym '_ZN14CViewerManager10ShowMsgBoxEi' failed.
[Alert] dlsym '_ZN14CViewerManager10ShowMsgBoxEiPFbPK7PTEventPKvES6_' failed.
[Alert] _ZN13CViewerCommon10ShowMsgBoxEPN10ALMOND030015CDesktopManagerEiPKc [0x2941f74].
[Alert] dlsym '_ZN13CViewerCommon10ShowMsgBoxEP6PCTaskiiiPFbPK7PTEventPKvES8_iii' failed.
[Alert] dlsym '_ZN13CViewerCommon10ShowMsgBoxEP6PCTaskiiiPFbPK7PTEventPKvES8_i' failed.
[Alert] dlsym '_ZN14CViewerManager15ShowSystemAlertEii' failed.
[Alert] dlsym '_ZN14CViewerManager15ShowSystemAlertEi' failed.
[Alert] dlsym '_ZN14CViewerManager14ShowCustomTextEi' failed.
[Alert] dlsym '_ZN14CViewerManager14ShowCustomTextEib' failed.
[Alert] dlsym '_ZN14CViewerManager10ShowRCModeEi' failed.
[Alert] _ZN14CCustomTextApp13t_OnActivatedEPKci [0x49c5a0c].
[Alert] _ZN10ALMOND030015CDesktopManager14RunApplicationEPKcS2_S2_PNS_19CApplicationContextEmiNS0_16EForceProcesModeE [0x1eef3b0].
[Alert] lib_init, >>>
[Alert] Found string at Pos: 3
[Alert] Showing text banner: "Anruf:"
[Alert] <<< lib_deinit

Posted: **Mon Oct 26, 2015 9:45 pm**

What is syntax you used? Are you showing text from a variable ($something)?

Posted: **Mon Oct 26, 2015 9:47 pm**

yes indeed. without a variable it works fine...

Posted: **Mon Oct 26, 2015 9:49 pm**

ok. solved that. thanks...: put " around the variable...

Posted: **Mon Oct 26, 2015 9:51 pm**

Exactly, even better quote TEXT: as well:

Code: Select all

samyGOso blah ... "TEXT:$my_text_var"

Posted: **Mon Oct 26, 2015 9:54 pm**

ok fine. any way to force a line break? if i have a text too long for one row line break is inserted automatically. would be cool to force it. tested already \n and <br /> without success.

Posted: **Mon Oct 26, 2015 9:59 pm**

Yep

Code: Select all

"TEXT:$(echo -e 'line1\nline2\nline3')"

Posted: **Mon Oct 26, 2015 10:06 pm**

perfect! thanks.
now i forced another issue...

logged in via telnet to create a crash (with other lib -> libText). however, the crash didn't occur. tried to find a good text size and called the script lots of times. suddenliy injection is not working anymore:

# samyGOso -d -A -B -l /mtd_rwcommon/libText.so TEXT:"ANRUF VON TEST TEST TEST" FONT:0 SIZE: TIMEOUT:5 COLOR:0xFFFF90F0 CENTER:2
samyGOso v1.2.5 (c) bugficks 2013-2014, sectroyer 2014-2015
usage: samyGOso [-p PID | -n procname | -A | -T | -D ] [-B ] {-c CONFIG | -l /full/path/to/inject.so [-r (=resident)]} [-d (=debug on)] [-a (=add libc addressoffset )] [arg0,...,argN]

injecting libAlert is not working as well. what's that???

Posted: **Mon Oct 26, 2015 10:08 pm**

Means TV is crashed, but Telnet remains in the opposite of ssh

Reliable way to know:

Code: Select all

pidof exeTV

(and/or exeAPP)

SamyGO

[App] libAlert B/C/D/E/F/H

Re: [App] libAlert B/C/D/E/F/H

Re: [App] libAlert B/C/D/E/F/H

Re: [App] libAlert B/C/D/E/F/H

Re: [App] libAlert B/C/D/E/F/H

Re: [App] libAlert B/C/D/E/F/H

Re: [App] libAlert B/C/D/E/F/H

Re: [App] libAlert B/C/D/E/F/H

Re: [App] libAlert B/C/D/E/F/H

Re: [App] libAlert B/C/D/E/F/H

Re: [App] libAlert B/C/D/E/F/H