how to root 4.5.621/622 for Droid 2 a955 & Droid R2D2 a957

[themib]

ezSBF and Root for D2 2.3.4/4.5.621

updated many times see change log


[ROOT] Framaroot, a one-click .apk to root
I have verified it works with these Motorola devices running android 2.3.4
Droid 2 (a955), Droid 2 Global (a956), R2D2 (a957), & Droid X (MB810)

just download, allow unknown sources, install, open, select top root method (Gimli), reboot phone, done, no pc needed
[video=youtube_share;-5TmP15hfQU]http://youtu.be/-5TmP15hfQU[/video]





----------------------------------------------------------------------------------------------------------------------------



created by phifc modified by bhigham

3 options mirror links posted Magic MD5 Root 2.3.4 for D2, R2D2, D2G, DX and 2.3.5 for DX2 - Google Docs
Multi-Device Root (54mb)
Droid2_621_SBF-and-RootCD.iso (213mb)
Droid2_R2D2_A957_2.3.4_SBF_and-or_RootCD.iso (250mb


How this works

Originally Posted by phifc
There's an exploit in loadpreinstall.sh. It compares md5 sum files of preinstalled apps and if they're different, copies the md5 to the local cache. The preinstall just has an empty file in app/ so it will parse the md5 for it. Instead of an md5 sum, it contains a local.prop that allows adb root shell. So the system thinks it's copying the md5sum to the cache when it bounces off the symlink and overwrites the /data/local.prop, giving adb root on next reboot

what is ezSBF?
original [TOOL] ezSBF (not for 2.3.4)

Don't let the word Linux scare you, this is just a cd you burn, nothing installs to your pc. Once you burn this CD you are ready to SBF flash anywhere you have a computer, no net connection needed to download any files.

This is an .iso file. It is a complete Linux operating system that you will download, burn to CD (or USB) then boot your pc from CD or USB, this allows your pc to reboot into a different operating system.

Instructions (Mac):
Download .iso
Use Disk Utility (built in) to burn iso file to a CD (instructions)
Shut computer down
Hold c key, push power and hold c until you see the Linux OS start
Hit enter at the yellow "boot baby... boot" screen
You will see yellow dots for 3-5 minutes then the script will start

Instructions (Windows):
Download .iso
Burn iso image to a disk (Instructions, Windows 7 - Vista and XP) or (Load to a USB flash drive)
Reboot PC
Hit F12 (sometimes F8 or esc) during boot to go to boot menu (possibly google search how to boot your specific pc from CDROM)
Select boot from CDROM (or USB if you used a flash drive)
Hit enter at the yellow "boot baby... boot" screen
You will see yellow dots for 3-5 minutes then the script will start

Live USB Instructions (Windows):
(Instructions from pendrivelinux.com)(thanks)
Download UNetBootin for Windows
Download your favorite Linux ISO
Double click the Unetbootin Executable to start the program
(1) Click the Diskimage radio box
(2) browse to select your ISO
(3) Set your target USB drive
(4) click OK to start the creation

(5) After the USB drive is done select reboot.
(6) During boot enter the boot menu and change USB to boot first, save and reboot.
(7) When booting from UNetbootin select SliTaz


________________________________________________

You will now be in the script and ready to flash.

select D2 for multi device root cd or /select root for the Droid2_621_SBF-and-Root CD
don't use numbers on right side of you keyboard, just use the ones above qwerty

turn phone on, connect to pc with usb cable

on phone check usb debugging (settings/apps/development)
on phone select charge only usb mode

on pc press continue
program will use adb to push

data/local.prop /data/preinstall_md5/magic.md5

manually reboot phone to bootloader
program will flash repacked sbf (less than 50mb)
program will reboot twice, very important (reboot just replaces the local.prop, but the old local.prop is still in memory, till second reboot)
adb pushes su,superuser, and busybox
program will reboot to recovery,
manually press both volume buttons when you see !, triangle, & android andy
manually select wipe cache
manually select reboot
rooted

error info
when running program you may see these errors
rm failed for /data/preinstall_md5/magic.md5 no such file or directory
no root.img.gz no such file or directory
rm failed for /data/preinstall_md5/magic.md5 read only file system


that is fine, it will still work



if you plan on creating nandroid backups or flashing roms read
[HOW TO] Install/Use Droid 2 Bootstrap

CM7
droid2-cm7-gb-20120611-spitemare-.621.zip(with 601 kernel check removed)
100mb md5: F483935C9F493B26BB2008EA9223D108




Older Methods see instruction by phifc below
windows Batch file (uses rsd lite)
Linux batch file (adb and sbf_flash)
Linux manual (adb and sbf_flash)

from original thread @ New root method for stock 2.3.4 (621/622) found (Droid2, R2D2) - Droid 2 / R2D2 / Milestone 2 / Droid 2 Global - RootzWiki

Posted by phifc (OP)

This is for original Droid2 and Droid R2D2. If you have issues b
ooting after root, check the end of this post.

I've been working on root for a few days after having to flash stock 621. I've tested this with my R2D2 running 621.

7/25/2012 - Thanks to beh for putting together an EzSBF cd for this! Just burn, boot from CD and follow the directions. It can flash to the stock 621 update for those that want the stock Gingerbread image, then gives you the option to root if you like. You can also create a bootable USB stick with the iso using UNetbootin - Homepage and Downloads

Droid 2 621 EzSBF with root option
The MD5 is
e50bc7914c4852ca32e9f08f7744c056

The instructions below work, but beh's EzSBF is far superior.

If you want to use CyanogenMod 7.2 after root with this method check this post.

I've been working on root for a few days after having to flash stock 621. I've tested this with my R2D2 running 621.

Windows
Install Motorola drivers and RDS Lite.
Get RootDroid2 file, extract folder, run RootDroid2.bat and follow the instructions.
You'll have to flash the phone as part of the process.

Linux (Easy way)
You'll need adb and sbf_flash.
1) Download the RootDroid2 file, extract it wherever you like.
2) Using adb enter

adb shell ln -s /data/local.prop /data/preinstall_md5/magic.md5

3) Flash using sbf file in download.
4) Reboot
5) adb shell will now be root

Linux (Long way)
What you need: Stock SBF (thanks to droid-developers.org), custom preinstall.img, adb (from android sdk), and sbf_flash

1) Enable USB debugging on your phone and send this adb command:

adb shell ln -s /data/local.prop /data/preinstall_md5/magic.md5

2) Unpack the custom preinstall file, then reboot your phone into flash mode by holding the up arrow on the keypad. Then send the custom SBF file with sbf_flash:

sbf_flash -r --preinstall preinstall.img <stock sbf filename>

(For example, I used 1FF-p2a_droid2_cdma_droid2-user-2.3.4-4.5.1_57_DR4-51-120117-release-keys-signed-Verizon-US.sbf so the command is "sbf_flash -r --preinstall preinstall.img 1FF-p2a_droid2_cdma_droid2-user-2.3.4-4.5.1_57_DR4-51-120117-release-keys-signed-Verizon-US.sbf")

3) Wait for phone to boot after flashing, then reboot again one final time.
4)

adb shell

should give you a root prompt (# instead of $)

5)Send superuser utils from Superuser

adb shell mount -o remount,rw /dev/block/system /system
adb push su /system/bin/su
adb shell chmod 4755 /system/bin/su

adb push Superuser.apk /system/app/Superuser.apk
adb shell chmod 644 /system/app/Superuser.apk
adb shell mount -o remount,ro /dev/block/system /system

Thanks to Dan Rosenberg (djrbliss) and those that helped him researchhttp://vulnfactory.o...ng-the-droid-3/ for ideas

for basic SBF and RSD lite info read The DROID Wiki

First, where do i download all these tools like motorola drivers and RSDlite? Do i put them on my phone or my PC?

use pc, links are baked into text just click on name of file
moto drivers USB and PC Charging Drivers - Motorola Mobility, Inc. USA

...Where do i enter this adb command?...

abd in command prompt start/search cmd.exe

...What version of software will be on my droid 2...

same version, rooting alone doesn't change that, rooting just gives you access to change system files/settings



My Links
Magic MD5 Root 2.3.4 for D2, R2D2, D2G, DX and 2.3.5 for DX2 - Google Docs

sd_shadow's [Collection] of Links: FAQs, Guides, Rooting, SBFs, ROMs... - Google Docs


Changelog
edit: added multi slitaz img and FAQ
30 aug 2012 add more detailed instructions for muti device cd
02 Oct 2012 added mac info
10 Oct 2012 added error info
26 Oct 2012 added mirror
18 Nov 2012 added MD5 & SHA-1 Checksum Utility and R2D2 ezSBF link
02 Dec 2012 changed download links
09 Dec 2012 major rewrite
26 April 2013 added Framaroot
27 april 2013 added framaroot video

 

[Ojelola]

Does this work properly on the Droid 2 Global (A956) with System Version 4.5.629 ?
Has anybody tried this? If so, were there any difficulties encountered?

New root method for stock 2.3.4 (621/622) found (Droid2, R2D2)

New root method for stock 2.3.4 (621/622) found (Droid2, R2D2) - Droid 2 / R2D2 / Milestone 2 / Droid 2 Global - RootzWiki

 

[jwagman1]

RSD gives this error

Failed flashing process. Interface BP: Checksum error in the RAM Downloader for Flash Bootloader. File: 0x13AD (0x702C)

any ideas?????

 

[Scubamike]

RSD gives this error

Failed flashing process. Interface BP: Checksum error in the RAM Downloader for Flash Bootloader. File: 0x13AD (0x702C)

any ideas?????

I'm dealing with this error too. I'll post if I find a solution.

 

[Scubamike]

Ok, Checksum error yada yada yada is ignorable...

Ok. I'm rooted. Error and all. From what I've read, because this is a modified .sbf the checksums fail. Forget about it and "run what you brung!" When it fails, wait for the phone to reboot from RSD. If it doesn't, hit "Show Device". Eventually, it will either say on the phone "Update Complete" or be at the bootloader screen. If it ends up at the boot loader screen, hit the power button to shut it off and turn it back on again. If it is still in the boot loader mode, shut it off with the power button, unplug the USB cable until you see the normal boot up "M". Then plug it back in and let the root process complete. Golden. If you do a batt pull while it is says "Updating SW" it will brick and say "Corrupted Code". Who cares!?! Just SBF, and you're still golden.

 

[Ojelola]

System Version 4.5.629 ?

Okay, that's all good. My question still remains:

Does this stuff work properly on the Droid 2 Global (A956) with System Version 4.5.629 ?

Ok. I'm rooted. Error and all. From what I've read, because this is a modified .sbf the checksums fail. Forget about it and "run what you brung!" When it fails, wait for the phone to reboot from RSD. If it doesn't, hit "Show Device". Eventually, it will either say on the phone "Update Complete" or be at the bootloader screen. If it ends up at the boot loader screen, hit the power button to shut it off and turn it back on again. If it is still in the boot loader mode, shut it off with the power button, unplug the USB cable until you see the normal boot up "M". Then plug it back in and let the root process complete. Golden. If you do a batt pull while it is says "Updating SW" it will brick and say "Corrupted Code". Who cares!?! Just SBF, and you're still golden.

 

[themib]

why don't try and let us know

 

[Scubamike]

Okay, that's all good. My question still remains:

Does this stuff work properly on the Droid 2 Global (A956) with System Version 4.5.629 ?

Emphatically "no"! As the thread says, this is for the A955/A957. The A956 has a significantly different firmware. Your root method for 4.5.629 can be found here:

[How-to] [SBF] unbricking & root D2g 629 - Droid 2 / R2D2 / Milestone 2 / Droid 2 Global - RootzWiki

 

[themib]

or try the d2g ezsbf http://rootzwiki.com/topic/27387-ne...-cd-for-629-updateezsbf-method-d2g-a956-only/

 

[MissionImprobable]

Yeah, I do believe in the Rootz thread one member used this on the Global, the bat file along with the Global SBF, and was successful.

 

[Scubamike]

Yeah, I do believe in the Rootz thread one member used this on the Global, the bat file along with the Global SBF, and was successful.

Take note, "global .sbf", and you won't get root from the unmodified global .sbf. The .bat file doesn't hold the magic. It has to be a patched .sbf that includes the exploit. Maybe you could use the modified .629 found in one of the afore mentioned links with this method, but why combine one developer's method with another's.

 

[MissionImprobable]

From Rootz:
New root method for stock 2.3.4 (621/622) found (Droid2, R2D2) - Droid 2 / R2D2 / Milestone 2 / Droid 2 Global - RootzWiki - Page 8
[quote name='Morlok8k' timestamp='1342762312' post='828691']
Droid 2 Global:

Note: My D2G is already rooted, running .629, and has the TBH unbandlock installed, as per this page. I temp unrooted, and uninstalled the updates to my superuser program. (My phone then had 3.07 superuser package, and no su binary.)


I downloaded the D2G .629 sbf: http://sbf.droid-dev...rizon-US.sbf.gz
and extracted it.


I downloaded a different version number of Superuser (3.1.3) than i already had my phone. (I also temp-unrooted it, and uninstalled the superuser .apk updates so i had an older version than what i would be installing today.)


I followed the Linux (Long path) instructions...
the only thing i changed was step 2:

2) Unpack the custom preinstall file, then reboot your phone into flash mode by holding the up arrow on the keypad. Then send the custom SBF file with sbf_flash:

sbf_flash -r --preinstall preinstall.img 1FF-p3_droid2we_cdma_droid2we-user-2.3.4-4.5.1_57_D2GA-59-120117-test-keys-signed-Verizon-US.sbf

...

After completing all the steps:

it worked! I had the latest su binary and .apk installed. (and because i used sbf_flash instead of RSDlite, i again kept my "N_01.48.05R" baseband - my TBH unbandlocked radio)

so there you have it. verified on droid 2 global. (someone else might want to try it on a fully unrooted phone... but it should work.)


Edit: sometimes when booting it freezes at the Red M. I just do a battery pull, and restart it and it works. is this because it is doing the hack each time it boots? if so, how can i disable the hack now that i have root installed?
[/quote]

Complete on the Global using the Global SBF.

 

[Ojelola]

Thanks!

Thank you! This is good.

Emphatically "no"! As the thread says, this is for the A955/A957. The A956 has a significantly different firmware. Your root method for 4.5.629 can be found here:

[How-to] [SBF] unbricking & root D2g 629 - Droid 2 / R2D2 / Milestone 2 / Droid 2 Global - RootzWiki

 

[bhigham]

A simpler method is available now.

Thank you! This is good.

I put together a CD to a simpler method, doesn't require bricking the phone and multiple flashes. It is the method MissionImprobable referenced, but packaged for the D2G, and shouldn't require a Data wipe, (though there is always the possibility of mishap)
None of tools are mine, I just repackaged them to be more user friendly.
They are at
Droid 2 Global root CD for .629 (not necessary to brick phone) - Droid 2 / R2D2 / Milestone 2 / Droid 2 Global - RootzWiki

 

[ldog70]

Droid 2 running A955 lockdown software

I am dump when it comes to this rooting stuff. I have never done it. I have a droid 2 running 4.5.621.A955. I have some questions.

First, where do i download all these tools like motorola drivers and RSDlite? Do i put them on my phone or my PC?
Second, Where do i get this RootDroid2file? Where do i put it?
Third, Where do i enter this adb comman?
Fourth, If i am lucky enough to figure this thing out(which i doubt) what next? What version of software will be on my droid 2 now?

I know nothing about ROM's and all that. Will i be able to still use my phone like normal once i have finished this process? Please help. I need somebody willing to walk me through this process literally STEP BY STEP!!!!!

Thanks.