6.4a has arrived

[jt1134]

Looks like 6.4a is starting to show up on some Directv tivos.

http://tivocommunity.com/tivo-vb/sho...d.php?t=393867

[labbie48]

Not in mfs here yet....

[jt1134]

I don't have it either (don't have a directv box on the sat any more). An initial look at tivoapp doesn't look hopeful in ANY sense, though I'm no expert at that. Looks like someone at TCF has been poking around a bit though

Here's a 6.4a tivoapp if anyone wants to take a look.

[Omikron]

I don't have DTV service but it is nice to see the two companies continuing to support these boxes until the bitter end. Many others would have abandoned support long ago.

[PlainBill]

I've got it in MFS on one system - along with 6.2, 6.2a, 6.3e, and 6.3f.

PlainBill

[RandC]

POSSIBLE "currently confirmed by CrashHD only" new location patches 6.4a only. This information is for persons with higher pay grades to confirm.
DO NOT try these locations without confirmation from the higher authorities as I used a very crude method to locate the possible new locations. Unless of course you want to screw your unit.

#No encryption (DEC) 1598904 orig 0c16a402
#30-second skip (DEC) 6883312 orig 1440002b
#Backdoors (DEC) 2806144 orig 00008021
#HMO/HME
(DEC) 906328 orig 00408821
(DEC) 1119964 orig 00408021
(DEC) 5874104 orig 14400014
#Free Trial (DEC) 920520 orig 0c1445a9
#OSD Message (DEC) 6895320 orig 0c3289f7


If the jump to locations remain the same as 6.3f then this is what the command would be. TEST AT YOUR OWN RISK
"currently confirmed by CrashHD only"

Disable encryption:
echo -ne "\x3C\x02\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=1598904

30sec skip:
echo -ne "\x10\x40\x00\x2b" | dd conv=notrunc of=tivoapp bs=1 seek=6883312

Backdoors
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp bs=1 seek=2806144

HMO/HME
echo -ne "\x34\x11\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=906328
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp bs=1 seek=1119964
echo -ne "\x10\x00\x00\x14" | dd conv=notrunc of=tivoapp bs=1 seek=5874104

removes *TiVo Plus features (trial ends today)
echo -ne "\x24\x02\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=920520

[dt1401]

Well, none of my DirecTV tivo's have downloaded 6.4a. Anyone have a link for the slices/slice?

[crashHD]

#No encryption (DEC) 1598904 orig 0c16a402
<snip>
Disable encryption:
echo -ne "\x3C\x02\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=1598904

<Bushism> That information has been confirmified. That is to say, we have a positive, confirmification of the accuracy of the information.</Bushism>

Tested working on a HR10 with 6.4a. Tests of other patches to be forthcoming.

[crashHD]

#30-second skip (DEC) 6883312 orig 1440002b
#30sec skip:
echo -ne "\x10\x40\x00\x2b" | dd conv=notrunc of=tivoapp bs=1 seek=6883312

Also confirmified!

[crashHD]

#Backdoors (DEC) 2806144 orig 00008021
Backdoors
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp bs=1 seek=2806144

This one also is a successful test, on an HR10-250 w/6.4a. I intend to test the rest of the patches today, and report my results. For now, I am off to make dinner (ugh...teh more hungrier me stomach are get, the dumberer me brain are be.)

[crashHD]

Go to post 42, this thread, for a better way to superpatch your 6.4a

#No encryption (DEC) 1598904 orig 0c16a402
#30-second skip (DEC) 6883312 orig 1440002b
#Backdoors (DEC) 2806144 orig 00008021
#HMO/HME
(DEC) 906328 orig 00408821
(DEC) 1119964 orig 00408021
(DEC) 5874104 orig 14400014
#Free Trial (DEC) 920520 orig 0c1445a9

#OSD Message (DEC) 6895320 orig 0c3289f7
CrashHD:This patch not yet tested

Disable encryption:
echo -ne "\x3C\x02\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=1598904

30sec skip:
echo -ne "\x10\x40\x00\x2b" | dd conv=notrunc of=tivoapp bs=1 seek=6883312

Backdoors
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp bs=1 seek=2806144

HMO/HME
echo -ne "\x34\x11\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=906328
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp bs=1 seek=1119964
echo -ne "\x10\x00\x00\x14" | dd conv=notrunc of=tivoapp bs=1 seek=5874104

removes *TiVo Plus features (trial ends today)
echo -ne "\x24\x02\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=920520

I have tested these all, and found them to all work correctly, so far, with the exception of the OSD patch, which I did could not test without knowing the new value.

I have packaged all of these up in a single script. It mounts root rw, copies tivoapp to a temp file, patches the temp file, swaps the patched tmp file with the running tivoapp, leaves a backup copy of tivoapp in the /tvbin folder, mounts the / ro, and exits. There is no "superpatch-like" error checking on these, it is just a simple script that patches the necessary locations, and accordingly, it's use does not come without risk. Use at your own peril.

#!/bin/sh

echo "Mounting / rw"
mount -o remount,rw /

echo "Patching 6.4a Tivoapp"
echo "Copying /tvbin/tivoapp /tvbin/tivoapp.tmp"
cp /tvbin/tivoapp /tvbin/tivoapp.tmp
echo "Done copying, now patching tivoapp.tmp"

# Disable Encraption:
echo -ne "\x3C\x02\x00\x00" | dd conv=notrunc of=/tvbin/tivoapp.tmp bs=1 seek=1598904
# Enable 30sec skip:
echo -ne "\x10\x40\x00\x2b" | dd conv=notrunc of=/tvbin/tivoapp.tmp bs=1 seek=6883312
# Backdoors:
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=/tvbin/tivoapp.tmp bs=1 seek=2806144
# HMO/HME:
echo -ne "\x34\x11\x00\x00" | dd conv=notrunc of=/tvbin/tivoapp.tmp bs=1 seek=906328
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=/tvbin/tivoapp.tmp bs=1 seek=1119964 
echo -ne "\x10\x00\x00\x14" | dd conv=notrunc of=/tvbin/tivoapp.tmp bs=1 seek=5874104 
# Remove "*Tivo Plus features (trial ends today)"
echo -ne "\x24\x02\x00\x00" | dd conv=notrunc of=/tvbin/tivoapp.tmp bs=1 seek=920520

# Enable on-screen clock (SPS9S toggle)
#echo -ne "\x10\x40\x00\x1e" | dd conv=notrunc of=/tvbin/tivoapp.tmp bs=1 seek=178560

# Disable OSD messages (insert your access card, etc)
#echo -ne "\x24\x02\x00\x00" | dd conv=notrunc of=/tvbin/tivoapp.tmp bs=1 seek=6895320


echo "Moving the running /tvbin/tivoapp to /tvbin/tivoapp.orig.bak"
mv /tvbin/tivoapp /tvbin/tivoapp.6.4a.original
echo "Done that, moving /tvbin/tivoapp.tmp /tvbin/tivoapp"
mv /tvbin/tivoapp.tmp /tvbin/tivoapp
echo "Mounting / ro"
mount -o remount,ro /
echo "Done.  In the event of problems, your original tivoapp is at /tvbin/tivoapp.6.4a.original"

exit

<EDIT> There was an error with the attached file. Two values were flipped. It has been corrected.

The real credit here goes to RandC. Finding these patch points is beyond me, and all I have really done is tested and packaged his work. Enjoy.
Go to post 42, this thread, for a better way to superpatch your 6.4a

[stevel]

Are there any unusual considerations for 6.4a? I thought I read in TCF that DHCP was disabled, or that you could not use the old killinitrd kernel with it. Or can one update to it the same way as past updates (6.3f, etc.)?

[crashHD]

I haven't tested DHCP with it. As I recall, though, DHCP has been wrecked since 6.3 e or f. I think a necessary file or two (dhclient??) are missing, and if they are copied over from an older version, it works again. Now that there are patches that turn on the network screen in the gui, it is less of a big deal.

I never tried running my 6.4a unit with it's stock drivers. I installed the backports right away during the upgrade, and I've had no problem.

[RandC]

Crash try these for OSD and SPS9S

TEST ONLY - NOT CONFIRMED - currently confirmed by CrashHD only 5-25-2008
OSD message
echo -ne "\x24\x02\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=6895320

TEST ONLY - NOT CONFIRMED - currently confirmed by CrashHD only 5-25-2008
SPS9S
echo -ne "\x10\x40\x00\x1e" | dd conv=notrunc of=/tvbin/tivoapp bs=1 seek=178560

[RandC]

Lots of new and modified files in 6.4a, as expected with the additional features to be available with this upgrade