PDA

View Full Version : 9.2a rollout



bcc
11-08-2007, 08:01 PM
So 9.2a has started rolling out for the s3/HD tivos. Yes, 9.2a is newer than 9.2J. 9.1 introduced an all-video-goes-to-grey-screen bug that remained unfixed in 9.2J. Presumably the re-spin was to address this bug (crosses fingers).

Anyways, the VMA for the tivoapp no encryption patch somebody found has moved a couple bytes again. It's now:
0x070165c "104000aa 100000aa"
aka
echo -ne "\x10\x00\x00\xaa" | dd conv=notrunc of=tivoapp.new bs=1 seek=3151452
Works for me with s3tots.

ScanMan
11-12-2007, 07:07 AM
Here is the full port of Superpatch for 9.2a

I ported this from 9.1 and applied it to version 9.2a-01-2-652 (TivoHD)

I can confirm backdoors enabled, encryption disabled (thanks bcc!), MRV functioning.
30-sec skip is unknown after 9.1, it appears to be remote enabled - see post here. (http://www.dealdatabase.com/forum/showpost.php?p=290408&postcount=850)
I have not fully tested everything; I did a successful test call to tivo, but I've only been running it less than 24 hours.

array set patch_9_2a {
0x0aa9e08 "14400026 10400026"
0x06d1120 "00008021 24100001"

0x050bea8 "0c81e670 24020001"
0x070165c "104000aa 100000aa"
0x0f7c8bc "0c1b7bb7 3c020000"
0x0bbdec4 "0c472351 00000000"
0x0bbdf58 "0c472351 00000000"
0x0db77f0 "0c470e09 00001021"
0x0dbdba8 "0c472351 00000000"
0x0620608 "14400008 00000000"
0x0dbe6ec "0c470e09 00001021"
0x0dc0180 "0c4724ba 00000000"
0x067b7cc "0c1b7bb7 0c4000d1"
0x100033c "27bdfec8 03e00008"
0x1000340 "afb40128 24020001"
0x1000344 "afb00118 8e24000c"
0x1000348 "afbf0134 8c820000"
0x100034c "afb5012c 8c850004"
0x1000350 "afb30124 00451025"
0x1000354 "afb20120 8c850008"
0x1000358 "afb1011c 00451025"
0x100035c "8c830010 03e00008"
0x1000360 "8c84000c 00000000"
0x1000798 "0c81e040 00001021"
0x10007d8 "0c81e040 00001021"
0x1000b84 "0c81e040 00001021"
0x1000bc8 "0c81e040 00001021"
0x11bace8 "0c472351 00000000"
0x11bad4c "0c472351 00000000"
0x11c3b78 "0c472351 00000000"
0x11c3c04 "0c472351 00000000"
0x11bab14 "0c4724ba 00000000"
0x11babc4 "0c4724ba 00000000"
0x11bac5c "0c4724ba 00000000"
0x11c3960 "0c4724ba 00000000"
0x11c3a14 "0c4724ba 00000000"
0x11c3ac8 "0c4724ba 00000000"
}

Then add this regexp:

} elseif { [regexp {^9\.2a-01-2} $sw] } {
set a "patch_9_2a"

And you should be good to go...

md5sum:

bash-2.02# md5sum /tvbin/tivoapp.original
550369074cf94881d838e89606744569 /tvbin/tivoapp.original

EDIT: Per Jamie's comment (who knows way more than me), if you don't want the whole patch and just want the backdoors.


0x06d1120 "00008021 24100001"
aka
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp.new bs=1 seek=2953504

jkozee
11-12-2007, 08:59 AM
ScanMan,

Shouldn't this:
0x067b7cc "0c1b7bb7 0c400dcd"
Be:
0x067b7cc "0c1b7bb7 0c4000d1"

I think when you ported the patch, you didn't update the target of this jump.

Jamie
11-12-2007, 09:05 AM
Also, as far as I have been able to determine, beyond the nocso and backdoors patches, the superpatch patches don't do anything useful on a Series3 or TiVoHD. MRV on unencrypted recordings works without them.

ScanMan
11-12-2007, 11:50 AM
ScanMan,

Shouldn't this:
0x067b7cc "0c1b7bb7 0c400dcd"
Be:
0x067b7cc "0c1b7bb7 0c4000d1"

I think when you ported the patch, you didn't update the target of this jump.You're absolutely right; I missed that, sorry. I updated the location of the jump.

shutterfriend
11-12-2007, 03:10 PM
Also, as far as I have been able to determine, beyond the nocso and backdoors patches, the superpatch patches don't do anything useful on a Series3 or TiVoHD. MRV on unencrypted recordings works without them.

Jamie,

Is this the same thing for Series 2?

Shutterfriend

Jamie
11-12-2007, 04:15 PM
Is this the same thing for Series 2?I haven't tested it. I have the full superpatch on my S2's. They are running 9.1. I'll test it when I get a chance, unless someone beats me to it.

ronnythunder
11-15-2007, 03:38 PM
this may not be the best thread, but... on the series 2 9.x boxes, does the "new" mrv use program streams like the "old" mrv/pre-9.x, or does it use ts like series 3?

ronny

Jamie
11-15-2007, 07:29 PM
this may not be the best thread, but... on the series 2 9.x boxes, does the "new" mrv use program streams like the "old" mrv/pre-9.x, or does it use ts like series 3?I'm pretty sure that S2 <-> S2 MRV uses S2 native ty streams. S3 <-> S3 uses S3 native ty streams, and S2 <-> S3 goes through a TTG/TTCB conversion.

There's more discussion here (http://www.dealdatabase.com/forum/showthread.php?p=290765#post290765) about the new MRV. If you have a Series2 with 9.x, you can sniff the network and see if you can find a raw retrieval URL like was seen on the Series3.

laurent
02-17-2008, 08:34 PM
Also, as far as I have been able to determine, beyond the nocso and backdoors patches, the superpatch patches don't do anything useful on a Series3 or TiVoHD. MRV on unencrypted recordings works without them.

Can you MRV encrypted shows if the NOCSO patch is applied?

Omikron
03-20-2008, 05:10 AM
So did we ever figure out if any of the patches other than the "No Encryption" and "Backdoors" are actually necessary or even functional?

I like to keep my patching as lean as possible and so far I haven't been able to justify all of these other misc patches.

budrecki
04-14-2008, 07:38 PM
An excellent question ... has anyone verified that all of those patches are necessary ?

lrhorer
04-19-2008, 04:55 AM
Well, the question now is, what is the VMA for the no encryption patch for 9.3?

I've got a TiVo HD waiting to upgrade to 9.3, but I can't let that happen until I'm sure I can get encryption disabled when the upgrade goes through.

ScanMan
04-19-2008, 07:17 AM
Well, the question now is, what is the VMA for the no encryption patch for 9.3?

I've got a TiVo HD waiting to upgrade to 9.3, but I can't let that happen until I'm sure I can get encryption disabled when the upgrade goes through.
It's in the 9.3 thread (http://www.dealdatabase.com/forum/showthread.php?t=58885); the last note by Jamie indicates tivoapp is the same for s2 (9.3) and s3 (9.3a) versions so the patches for the final rollout of 9.3a are the same as the experimental [9.3a.Y, etc.] releases.