Using sahara to recover a board in QDL mode

[ivancastell]

Hello! My board is in this state:

Bus 001 Device 020: ID 05c6:9008 Qualcomm, Inc. Gobi Wireless Modem (QDL mode)

I can see a /dev/ttyUSB connected on the Linux kernel:

[2271735.463190] usb 1-3.4: Qualcomm USB modem converter now attached to ttyUSB3

I have compiled your "sahara" tool, and it is running fine. Thank you so much for that work!!

I have running appsboot.mbn, devcfg.mbn, rpm.mbn, sbl1.mbn, and tz.mbn images available:

494K feb 27 09:59 appsboot.mbn
38K feb 27 09:59 devcfg.mbn
164K feb 27 09:59 rpm.mbn
253K feb 27 09:59 sbl1.mbn
989K feb 27 09:59 tz.mbn

What is the proper way to upload that images in my board to recover it using sahara?

Currently when I plug the board, it requires me a 52 bytes packet I don't know how to send

Device requesting 52 bytes of image 0x0D - EHOSTDL. Would you like to browse and send this now?

Thanks a lot! :-)

[ghassani]

You need to send a valid device programmer image (https://github.com/openpst/assets/tree/master/programmers) for your device. If you have one already, when you load Sahara just browse and send it then finalize with the done command. If it was valid your phone will load the programmer then you can proceed to program it via its protocol (dload, or firehose).

[ivancastell]

Thanks a lot for your answer. Unfortunately my device doesn't appear on the list of device programmers available on the provided link.

[ghassani]

If your device does not have secure boot enabled, you can use any programmer for your SoC. But if it has secure boot enabled you need to get a signed programmer. You can try contacting the manufacturer, but the files generally are kept private. What device is it?

[ivancastell]

Its a Qualcomm MDM9650. I will try contacting them. Thanks!! :-)