Stagefright exploit patch?

miss_montage

\n\n
Will there be a patch for the Stagefright security leak soon? I ran the Stagefright Detector App yesterday, and it came as no surprise that the UMI Hammer is vulnerable. (I'm running the Kitkat 4,4,4, version of May 30th, 2015).
This patch works only on Kitkat!!!
  edit: you find patch  plus  a readme.txt here
Applause to jiayu.de& DerTeufel1980!!!
----------------------------------------------------------------------------------------------------------------------------------------
For Lollipop - compiled by superdragonpt
Video Glitches might occur...


Edited by bencebacsi for better readability.

gruffles

miss_montage replied at 2015-8-12 04:31
Edited by miss_montage at 2015-8-12 04:58 \n\n Edited by miss_montage at 2015-8-12 04:42 \n\n

Hey ...

Thanks! Could you add the zip file to your OP? Or link it to an online storage space?

Nice work!

gruffles

Hi miss_montage. I noticed on XDA a post from a "Miss Montage" with a working fix for this. I can only assume it is you!

Can you share the fix here with the zip file you included in the XDA post?

Much appreciated!
Gruffles

p.s. If it is not you I'll put a new post together, but I didn't want to steal your great work!

miss_montage

\n\n

Hey Gruffles,

yes it's me :-)
But the credit goes to Jiayu Germany
& DerTeufel1980!!!I
However, here it is! I can't upload it here, because the file is too big, but here are some links:
Needrom
xda developers
android-hilfe.de
chinamobiles.org

First, run a full nandroid backup and also backup the original system/lib/libstagefright.so file - e.g. rename it to libstagefright.so.bak
1. Download stagefright_fix.zip
2. Copy it to your internal or external sd card
3. Boot into custom recovery
4. Choose "Install", navigate to the downloaded file, pick it and run "install"
5. If you see the message "Successfully installed", reboot phone.


Edited by bencebacsi for better readability.

miss_montage

gruffles replied at 2015-8-12 05:42
Thanks! Could you add the zip file to your OP? Or link it to an online storage space?

Nice work! ...

Okay. Done...

bambiza

Vulnerable Again

miss_montage

Yes, I know. Just wanted to update my post. Here is the background...
Unfortunately I can't write a new patch myself...

miss_montage

\n\n

Great news from jiayu.de and Der Teufel 1980 again!
I updated the file in download link :--) (OP)


Edited by bencebacsi for better readability.

miss_montage

\n\n

You can even install it this way:
1. Download .zip and copy it to internal or external storage
2. Go to "Settings" -> "About phone / phone info"  -> WiFi Update -> press left softkey -> choose "local update"
3. Browse to downloaded .zip
4. Install

But please backup all important data before, and also backup the original /system/lib/libstagefright.so
I do not and will not take any responsibility for a bricked phone, neither will jiayu.de
Kitkat only!!!

Edited by bencebacsi for better readability.

bambiza

How to fix CVE-2015-6602 ?