[Error 1011] Programmers Needed!

Hi everyone.

As far as you may know, there is an error which up to now it can't be solved (maybe if you got AT&T). I'm talking about error 1011.
What is going on? Corrupted BL or BB + Invalid Calibration Data.
What we need? Fix Invalid Calibration Data, Reflash BL, Reflash BB, use swifi.
Resources: gbootloader, ieraser, bbupdater.

Currently working on: gbootloader
patched to: skip bootrom locations check, skip patched bootloader check
works: Errors
Error: Resource Busy (16)
OS: 1.1.4

My hypothesis says that, if we flash the BL using Gbootloader, we will be able
to issue a secpack and use ieraser, then flash a baseband using bbupdater, we will succeed to get this working.
Actually, BootNeuter is able to do this, but, it stucks at Determining current settings,
at this point it is logical, as the BL or BB are corrupted.

To do:
> Patch BootNeuter to skip "Determining Current Settings" and proceed directly
to flash BL BB and so.

Could someone help with this while I get progress with gbootloader?

Thanks

You can't flash a bootloader (on 3.9 bricked) if the bootrom locs are not blank.

Isn't westbear the same guy who was with winterchild or starchild, who made a photoshopware of ifree ?? what did you do with all the donations you took on
http://ifreeproject.blogspot.com/ ??

iFree-iUnbrick, as it calls... it SUCKS

Please, no discussions about iFree or iUnBrick here.

@westbaer: OK, there must be a way, as I already mentioned, BootNeuter is able
to do this, but stucks at [determining current settings].

¿ A17 trick doesnt work ?

it is good idea to patch some code to override "determining current settings". Avoid this part to convert bootneuter to "recoveryneuter".
Just one thing: this tool should stay away from juniors+amateurs. Quite dangerous

Well, time to work!

basic questions:
1) why bootneuter stucks in this part? (bcoz bb is damaged, boot damaged, but... why? that here what we figure it out a way to skip this check)
2) why bootloader cannot be flashed? (error "baseband bootloader too old"? it can be skipped or force-flashed?)

if all of this will be possible, here is our answer. the new bootneuter, full-recoverable iPhone solution

1) Phone determines current settings, as far as I know, reading them from the phone, and as this is damaged, it won't get the correct data, or no data at all.
Skipping this check will allow us to proceed directly to flashing.

2) I'm getting the (16) Resource Busy error with my patched version of gbootloader, exactly, what I'm trying to achieve is it to be force-flashed.

@jsn1,

I've been reading this statement from Musclenerd.

Quote:

---

The boot sequence is bootrom->bootloader<->baseband. The bootrom sanity checks the bootloader before running it, the bootloader sanity checks the baseband before running it. The sanity check is pretty weak though. If the bootloader passes CPU control to the baseband and the baseband is corrupted and throws an invalid instruction or data alignment exception (for example) early in the boot process, the exception vectors are not set up yet and you'll end up in tight loop using dummy handlers.

In other words, your S-Gold is doing bootrom->bootloader->baseband->tight loop. The tight loop is preventing the bootloader from servicing interactive bootloader requests done by bbupdater, bootneuter, and the rest.

In theory, if your baseband is empty at the right locations above a0040000, you may still be able to do the A17 hardware hack, which will trick the bootrom into thinking the bootloader is empty and so it would execute your serial payloads.

---

and from geohot's blog he said

Quote:

---

gbootloader will erase and downgrade your bootloader from software. I have checks in the program to prevent a bootloader without the bootrom locations blank from being uploaded ...

---

so are you patching gbootloader to bypass the check ?

Quote:

---

Originally Posted by dtube

@jsn1,

I've been reading this statement from Musclenerd.
and from geohot's blog he said
so are you patching gbootloader to bypass the check ?

---

Yup. Bypass the blank bootrom locations check.
However, I'm getting error (16) Resource Busy. Maybe the problem is the loop you mention.

Hello, yesterday (after 2 months) I finally can get out from error 1011.

My problem start when I get the "Repair needed" messages appears on my 16GB iPhone. I tried to restore 1.1.4 with itunes and start with the error 1011 and after that I lost the imei, wifi, audio, bluetooth, etc.
When I press the "i" button from an inactivated iPhone it will display the IMEI and ICCID as "unknown".

With ZiPhone I get the “invalid calibration data” error.
Tried with pwnage BootNeuter freezes on loading screen.

After try a lot of things I get now my iPhone working again.
I can’t say for sure what solve my problem but I will tell you the procedure exactly how I do it:

1- Put the iPhone on DFU mode (I use ZiPhone 3.0 for Mac Os, the option is on the top menu mode/dfu mode.
2- Restore the iPhone with iTunes and firmware 1.1.1 (when it finish I get the error 1011).
3- Put the iPhone on DFU mode again (using ZiPhone 3.0).
4- Restore with iTunes and firmware 1.1.3 (this time I didn´t get the error 1011) end when I touch on "i" icon on th iPhone screen I surprised when I get the IMEI again.
5- Put the iPhone on restore mode (not DFU) I shutdown the iPhone, then disconnect the USB cable, with the HOME button pressed connect the USB cable again, it should start in restore mode.
6- Restore with iTunes with firmware 1.1.4.
7- I unlocked my iPhone with iDemocracy instead of ZiPhone because I see on forums that I can suspect that Ziphone could brick my phone.

I hope it works for you, and please let me know if it’s works or not because we can check the procedure.

PD: Sorry for my English, I´m from Argentina.