sahara - [LIB]: Error: Cannot receive specified number of program headers

[tokkoro]

Hi, I didn't find another issue related to this so creating a new one. Where should I start looking for solutions to this, the edl seems to start uploading but then fails with Cannot receive specified number of program headers and Connection detected, quiting.

I wasn't able to fully remove the modemmanager, but I disabled and stopped the service. Could that result this?

I'm working with Arch Linux (KDE Plasma, Manjaro)

edl --memory=ufs printgpt
Capstone library is missing (optional).
Keystone library is missing (optional).
Qualcomm Sahara / Firehose Client V3.60 (c) B.Kerler 2018-2022.
main - Trying with no loader given ...
main - Waiting for the device
main - Device detected :)
sahara - Protocol version: 2, Version supported: 1
main - Mode detected: sahara
sahara - 
------------------------
HWID:              0x001740e100000000 (MSM_ID:0x001740e1,OEM_ID:0x0000,MODEL_ID:0x0000)
CPU detected:      "kamorta_IoT_APQ"
PK_HASH:           [--]
Serial:             [--]

sahara - Found possible loader: /usr/lib/python3.10/site-packages/edlclient-3.60-py3.10.egg/edlclient/../Loaders/qualcomm/factory/sc8180x/000b80e100000000_d40eee56f3194665_FHPRG.bin
sahara - Found possible loader: /usr/lib/python3.10/site-packages/edlclient-3.60-py3.10.egg/edlclient/../Loaders/qualcomm/factory/sdm662/0014d0e100000000_d40eee56f3194665_FHPRG.bin
sahara - Found possible loader: /usr/lib/python3.10/site-packages/edlclient-3.60-py3.10.egg/edlclient/../Loaders/qualcomm/model_generic/SDM855LA/000a50e100000000_d40eee56f3194665_fhprg.bin
sahara - Protocol version: 2, Version supported: 1
sahara - Uploading loader /usr/lib/python3.10/site-packages/edlclient-3.60-py3.10.egg/edlclient/../Loaders/qualcomm/model_generic/SDM855LA/000a50e100000000_d40eee56f3194665_fhprg.bin ...
sahara - 64-Bit mode detected.
sahara - Firehose mode detected, uploading...
sahara
sahara - [LIB]: Error: Cannot receive specified number of program headers
Connection detected, quiting.

[CE1CECL]

TicWatch Pro (Catfish) as well

Capstone library is missing (optional). Keystone library is missing (optional). Qualcomm Sahara / Firehose Client V3.60 (c) B.Kerler 2018-2022. main - Trying with no loader given ... main - Waiting for the device main - Device detected :) sahara - Protocol version: 2, Version supported: 1 main - Mode detected: sahara sahara -

HWID: 0x000520e100000000 (MSM_ID:0x000520e1,OEM_ID:0x0000,MODEL_ID:0x0000) CPU detected: "Wear3100" PK_HASH: 0xcc3153a80293939b90d02d3bf8b23e0292e452fef662c74998421adad42a380f Serial: 0x12557265

sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8953/000460e100000000_cc3153a80293939b_fhprg_bqxpro_8953_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8976/009900e100000000_cc3153a80293939b_fhprg_bqx5_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/model_generic/msm8909/009600e100000000_cc3153a80293939b_fhprg_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/asus_wingtech/009600e10029001b_cc3153a80293939b_fhprg_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/asus_wingtech/007050e10029001e_cc3153a80293939b_fhprg_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/asus_wingtech/008f10e100290008_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/LG/009010e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974abv3/007bc0e100000000_cc3153a80293939b_fhprg_oneplusone_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974ab/007b40e100000000_cc3153a80293939b_fhprg_oneplusx_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/patched/mdm9x07/000480e100000000_cc3153a80293939b_enprg_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/patched/mdm9x6x/0007d0e100000000_cc3153a80293939b_enprg9x60p.mbn sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/patched/mdm9x5x/000320e10000a069_cc3153a80293939b_enprg9x55p.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/model_generic/msm8928/009180e100290041_cc3153a80293939b_fhprg_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/model_generic/msm8936_8939/0090b0e10029001f_cc3153a80293939b_fhprg_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/007150e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/006b50e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974ab/007b40e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974ab/007b40e100310262_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8953/000460e100290021_cc3153a80293939b_fhprg_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974AC/006b10e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8930/007210e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/apq8064/007190e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/apq8064/007190e100040000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8926/008050e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8926/008050e1003102a2_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974/007b00e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974/007b00e100311000_cc3153a80293939b_fhprg.bin sahara - Protocol version: 2, Version supported: 1 sahara - Uploading loader /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974/007b00e100311000_cc3153a80293939b_fhprg.bin ... sahara - 32-Bit mode detected. sahara - Firehose mode detected, uploading... sahara sahara - [LIB]: Error: Cannot receive specified number of program headers Connection detected, quiting. root@HP-PAVILION-590:/home/ce1cecl/edl#

Also how do you change imei if you loose a backup for mtk? (offtopic)

[CE1CECL]

Edit: I wonder if it uses VIP (https://github.com/bkerler/edl/issues/329#issuecomment-1271541040)

Debug log:

root@HP-PAVILION-590:/home/ce1cecl/edl# ./edl rf TWP.BUR --debugmode Capstone library is missing (optional). Keystone library is missing (optional). Qualcomm Sahara / Firehose Client V3.60 (c) B.Kerler 2018-2022. loader_utils loader_utils - [LIB]: invalid literal for int() with base 16: 'mprg8626' loader_utils loader_utils - [LIB]: invalid literal for int() with base 16: 'mprg8974' loader_utils loader_utils - [LIB]: invalid literal for int() with base 16: 'mprg8974' loader_utils loader_utils - [LIB]: invalid literal for int() with base 16: 'prog' loader_utils loader_utils - [LIB]: invalid literal for int() with base 16: 'prog' loader_utils loader_utils - [LIB]: invalid literal for int() with base 16: 'prog' loader_utils loader_utils - [LIB]: list index out of range loader_utils loader_utils - [LIB]: list index out of range loader_utils loader_utils - [LIB]: list index out of range loader_utils loader_utils - [LIB]: list index out of range loader_utils loader_utils - [LIB]: list index out of range loader_utils loader_utils - [LIB]: list index out of range loader_utils loader_utils - [LIB]: invalid literal for int() with base 16: 'prog' loader_utils loader_utils - [LIB]: list index out of range loader_utils loader_utils - [LIB]: invalid literal for int() with base 16: 'prog' loader_utils loader_utils - [LIB]: invalid literal for int() with base 16: 'prog' loader_utils loader_utils - [LIB]: invalid literal for int() with base 16: 'prog' main - Trying with no loader given ... main - Waiting for the device DeviceClass DeviceClass - [LIB]: Detaching kernel driver main - Device detected :) DeviceClass DeviceClass - [LIB]: read:0x30 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 299, in run\n conninfo = self.doconnect(loop)\n', ' File "/home/ce1cecl/edl/./edl", line 213, in doconnect\n resp = self.sahara.connect()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 111, in connect\n v = self.cdc.read(length=0xC * 0x4,timeout=1)\n'] DeviceClass DeviceClass - [LIB]: RX:010000003000000002000000010000000004000000000000000000000000000000000000000000000000000000000000 sahara - Protocol version: 2, Version supported: 1 main - Mode detected: sahara DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 338, in run\n sahara_info = self.sahara.cmd_info()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 212, in cmd_info\n if self.enter_command_mode():\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 155, in enter_command_mode\n if not self.cmd_hello(sahara_mode_t.SAHARA_MODE_COMMAND):\n'] DeviceClass DeviceClass - [LIB]: TX:020000003000000002000000010000000000000003000000000000000000000000000000000000000000000000000000 DeviceClass DeviceClass - [LIB]: read:0x8 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 338, in run\n sahara_info = self.sahara.cmd_info()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 212, in cmd_info\n if self.enter_command_mode():\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 157, in enter_command_mode\n res = self.get_rsp()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 64, in get_rsp\n data = self.cdc.read()\n'] DeviceClass DeviceClass - [LIB]: RX:0b00000008000000 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 338, in run\n sahara_info = self.sahara.cmd_info()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 213, in cmd_info\n self.serial = self.cmdexec_get_serial_num()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 173, in cmdexec_get_serial_num\n res = self.cmd_exec(exec_cmd_t.SAHARA_EXEC_CMD_SERIAL_NUM_READ)\n'] DeviceClass DeviceClass - [LIB]: TX:0d0000000c00000001000000 DeviceClass DeviceClass - [LIB]: read:0x10 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 338, in run\n sahara_info = self.sahara.cmd_info()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 213, in cmd_info\n self.serial = self.cmdexec_get_serial_num()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 173, in cmdexec_get_serial_num\n res = self.cmd_exec(exec_cmd_t.SAHARA_EXEC_CMD_SERIAL_NUM_READ)\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 593, in cmd_exec\n res = self.get_rsp()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 64, in get_rsp\n data = self.cdc.read()\n'] DeviceClass DeviceClass - [LIB]: RX:0e000000100000000100000004000000 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 338, in run\n sahara_info = self.sahara.cmd_info()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 213, in cmd_info\n self.serial = self.cmdexec_get_serial_num()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 173, in cmdexec_get_serial_num\n res = self.cmd_exec(exec_cmd_t.SAHARA_EXEC_CMD_SERIAL_NUM_READ)\n'] DeviceClass DeviceClass - [LIB]: TX:0f0000000c00000001000000 DeviceClass DeviceClass - [LIB]: cmd_exec:0x4 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 338, in run\n sahara_info = self.sahara.cmd_info()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 213, in cmd_info\n self.serial = self.cmdexec_get_serial_num()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 173, in cmdexec_get_serial_num\n res = self.cmd_exec(exec_cmd_t.SAHARA_EXEC_CMD_SERIAL_NUM_READ)\n'] DeviceClass DeviceClass - [LIB]: RX:65725512 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 338, in run\n sahara_info = self.sahara.cmd_info()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 215, in cmd_info\n self.hwid = self.cmdexec_get_msm_hwid()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 177, in cmdexec_get_msm_hwid\n res = self.cmd_exec(exec_cmd_t.SAHARA_EXEC_CMD_MSM_HW_ID_READ)\n'] DeviceClass DeviceClass - [LIB]: TX:0d0000000c00000002000000 DeviceClass DeviceClass - [LIB]: read:0x10 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 338, in run\n sahara_info = self.sahara.cmd_info()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 215, in cmd_info\n self.hwid = self.cmdexec_get_msm_hwid()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 177, in cmdexec_get_msm_hwid\n res = self.cmd_exec(exec_cmd_t.SAHARA_EXEC_CMD_MSM_HW_ID_READ)\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 593, in cmd_exec\n res = self.get_rsp()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 64, in get_rsp\n data = self.cdc.read()\n'] DeviceClass DeviceClass - [LIB]: RX:0e000000100000000200000018000000 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 338, in run\n sahara_info = self.sahara.cmd_info()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 215, in cmd_info\n self.hwid = self.cmdexec_get_msm_hwid()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 177, in cmdexec_get_msm_hwid\n res = self.cmd_exec(exec_cmd_t.SAHARA_EXEC_CMD_MSM_HW_ID_READ)\n'] DeviceClass DeviceClass - [LIB]: TX:0f0000000c00000002000000 DeviceClass DeviceClass - [LIB]: cmd_exec:0x18 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 338, in run\n sahara_info = self.sahara.cmd_info()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 215, in cmd_info\n self.hwid = self.cmdexec_get_msm_hwid()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 177, in cmdexec_get_msm_hwid\n res = self.cmd_exec(exec_cmd_t.SAHARA_EXEC_CMD_MSM_HW_ID_READ)\n'] DeviceClass DeviceClass - [LIB]: RX:00000000e120050000000000e120050000000000e1200500 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 338, in run\n sahara_info = self.sahara.cmd_info()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 216, in cmd_info\n self.pkhash = self.cmdexec_get_pkhash()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 186, in cmdexec_get_pkhash\n res = self.cmd_exec(exec_cmd_t.SAHARA_EXEC_CMD_OEM_PK_HASH_READ)\n'] DeviceClass DeviceClass - [LIB]: TX:0d0000000c00000003000000 DeviceClass DeviceClass - [LIB]: read:0x10 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 338, in run\n sahara_info = self.sahara.cmd_info()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 216, in cmd_info\n self.pkhash = self.cmdexec_get_pkhash()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 186, in cmdexec_get_pkhash\n res = self.cmd_exec(exec_cmd_t.SAHARA_EXEC_CMD_OEM_PK_HASH_READ)\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 593, in cmd_exec\n res = self.get_rsp()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 64, in get_rsp\n data = self.cdc.read()\n'] DeviceClass DeviceClass - [LIB]: RX:0e000000100000000300000060000000 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 338, in run\n sahara_info = self.sahara.cmd_info()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 216, in cmd_info\n self.pkhash = self.cmdexec_get_pkhash()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 186, in cmdexec_get_pkhash\n res = self.cmd_exec(exec_cmd_t.SAHARA_EXEC_CMD_OEM_PK_HASH_READ)\n'] DeviceClass DeviceClass - [LIB]: TX:0f0000000c00000003000000 DeviceClass DeviceClass - [LIB]: cmd_exec:0x60 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 338, in run\n sahara_info = self.sahara.cmd_info()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 216, in cmd_info\n self.pkhash = self.cmdexec_get_pkhash()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 186, in cmdexec_get_pkhash\n res = self.cmd_exec(exec_cmd_t.SAHARA_EXEC_CMD_OEM_PK_HASH_READ)\n'] DeviceClass DeviceClass - [LIB]: RX:cc3153a80293939b90d02d3bf8b23e0292e452fef662c74998421adad42a380fcc3153a80293939b90d02d3bf8b23e0292e452fef662c74998421adad42a380fcc3153a80293939b90d02d3bf8b23e0292e452fef662c74998421adad42a380f sahara -

HWID: 0x000520e100000000 (MSM_ID:0x000520e1,OEM_ID:0x0000,MODEL_ID:0x0000) CPU detected: "Wear3100" PK_HASH: 0xcc3153a80293939b90d02d3bf8b23e0292e452fef662c74998421adad42a380f Serial: 0x12557265

sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8953/000460e100000000_cc3153a80293939b_fhprg_bqxpro_8953_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8976/009900e100000000_cc3153a80293939b_fhprg_bqx5_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/model_generic/msm8909/009600e100000000_cc3153a80293939b_fhprg_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/asus_wingtech/009600e10029001b_cc3153a80293939b_fhprg_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/asus_wingtech/007050e10029001e_cc3153a80293939b_fhprg_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/asus_wingtech/008f10e100290008_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/LG/009010e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974abv3/007bc0e100000000_cc3153a80293939b_fhprg_oneplusone_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974ab/007b40e100000000_cc3153a80293939b_fhprg_oneplusx_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/patched/mdm9x07/000480e100000000_cc3153a80293939b_enprg_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/patched/mdm9x6x/0007d0e100000000_cc3153a80293939b_enprg9x60p.mbn sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/patched/mdm9x5x/000320e10000a069_cc3153a80293939b_enprg9x55p.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/model_generic/msm8928/009180e100290041_cc3153a80293939b_fhprg_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/model_generic/msm8936_8939/0090b0e10029001f_cc3153a80293939b_fhprg_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/007150e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/006b50e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974ab/007b40e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974ab/007b40e100310262_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8953/000460e100290021_cc3153a80293939b_fhprg_peek.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974AC/006b10e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8930/007210e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/apq8064/007190e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/apq8064/007190e100040000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8926/008050e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8926/008050e1003102a2_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974/007b00e100310000_cc3153a80293939b_fhprg.bin sahara - Found possible loader: /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974/007b00e100311000_cc3153a80293939b_fhprg.bin DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 338, in run\n sahara_info = self.sahara.cmd_info()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 296, in cmd_info\n self.cmd_modeswitch(sahara_mode_t.SAHARA_MODE_COMMAND)\n'] DeviceClass DeviceClass - [LIB]: TX:0c0000000c00000003000000 DeviceClass DeviceClass - [LIB]: read:0x30 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 340, in run\n resp = self.sahara.connect()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 111, in connect\n v = self.cdc.read(length=0xC * 0x4,timeout=1)\n'] DeviceClass DeviceClass - [LIB]: RX:010000003000000002000000010000000004000003000000000000000000000000000000000000000000000000000000 sahara - Protocol version: 2, Version supported: 1 sahara - Uploading loader /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/factory/msm8974/007b00e100311000_cc3153a80293939b_fhprg.bin ... DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 345, in run\n mode = self.sahara.upload_loader()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 511, in upload_loader\n if not self.cmd_hello(sahara_mode_t.SAHARA_MODE_IMAGE_TX_PENDING):\n'] DeviceClass DeviceClass - [LIB]: TX:020000003000000002000000010000000000000000000000000000000000000000000000000000000000000000000000 DeviceClass DeviceClass - [LIB]: read:0x14 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 345, in run\n mode = self.sahara.upload_loader()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 519, in upload_loader\n resp = self.get_rsp()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 64, in get_rsp\n data = self.cdc.read()\n'] DeviceClass DeviceClass - [LIB]: RX:03000000140000000d0000000000000034000000 sahara - 32-Bit mode detected. sahara - Firehose mode detected, uploading... DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 345, in run\n mode = self.sahara.upload_loader()\n'] DeviceClass DeviceClass - [LIB]: TX:d1dc4b843410d77315000000ffffffffffffffff5000000000c000f8dcbd0400dca40400dc6405f800010000dc6505f800180000 DeviceClass DeviceClass - [LIB]: read:0x10 DeviceClass DeviceClass - [LIB]: [' File "/home/ce1cecl/edl/./edl", line 391, in \n base.run()\n', ' File "/home/ce1cecl/edl/./edl", line 345, in run\n mode = self.sahara.upload_loader()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 519, in upload_loader\n resp = self.get_rsp()\n', ' File "/home/ce1cecl/edl/edlclient/Library/sahara.py", line 64, in get_rsp\n data = self.cdc.read()\n'] DeviceClass DeviceClass - [LIB]: RX:04000000100000000d00000014000000 sahara sahara - [LIB]: Error: Cannot receive specified number of program headers Connection detected, quiting. root@HP-PAVILION-590:/home/ce1cecl/edl#

[CE1CECL]

edl --loader=/home/ce1cecl/edl/edlclient/../Loaders/qualcomm/model_generic/msm8909/009600e100000000_cc3153a80293939b_fhprg_peek.bin

Qualcomm Sahara / Firehose Client V3.60 (c) B.Kerler 2018-2022. main - Using loader /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/model_generic/msm8909/009600e100000000_cc3153a80293939b_fhprg_peek.bin ... main - Waiting for the device main - Device detected :) sahara - Protocol version: 2, Version supported: 1 main - Mode detected: sahara sahara -

HWID: 0x000520e100000000 (MSM_ID:0x000520e1,OEM_ID:0x0000,MODEL_ID:0x0000) CPU detected: "Wear3100" PK_HASH: 0xcc3153a80293939b90d02d3bf8b23e0292e452fef662c74998421adad42a380f Serial: 0x16e0f376

sahara - Protocol version: 2, Version supported: 1 sahara - Uploading loader /home/ce1cecl/edl/edlclient/../Loaders/qualcomm/model_generic/msm8909/009600e100000000_cc3153a80293939b_fhprg_peek.bin ... sahara - 32-Bit mode detected. sahara - Firehose mode detected, uploading... sahara - Loader successfully uploaded.

Seems like the default loader didn't work, it works now! The original didn't work in QFIL either but this one does work.

[CE1CECL]

Its also worth mentioning that all the qualcomm/factory didn't work for me at least but may only work for some.

[bkerler]

How did you put the TicWatch Pro into edl mode ?

[CE1CECL]

How did you put the TicWatch Pro into edl mode ?

fastboot boot twrp.img then I did adb reboot edl I also can use a edl cable but it requires the micro usb adapter instead.

[bkerler]

can you provide the twrp ? It's unlikely the device has VIP, as it seems to be unfused. Ordered a ticwatch pro 2020 as well now, so I can debug the issue

[CE1CECL]

twrp-3.7.0_9-0-catfish.img.zip

can you provide the twrp ? It's unlikely the device has VIP, as it seems to be unfused. Ordered a ticwatch pro 2020 as well now, so I can debug the issue

I didn't use the 2020 version though, I had the catfish version from 2018 and I have 2 of the same watch as well. Note the TWRP was modded to flash to the recovery and compressed to be smaller but it came directly from twrp.me, I used mkbootimg to compress the padding that was not needed (in my case).

As for the EDL cable I used https://www.walmart.com/ip/EDL-Cable-Deep-Flash-Mode-9008-Mode-Cables-For-Cell-Phone/2054157901 and the adapter I used was https://www.walmart.com/ip/Power-Adapter-Charge-Cord-Stand-Cradle-Magnetic-Fast-Charger-for-TicWatch-Pro/1074388717?athbdg=L1400 (these aren't the exact thing I have since I bought them a long time ago.)