n4ru / 1vyrain Goto Github PK

The problem I ran into is I cannot sign into my x230 bios at boot after I flashed it with the default image found here:

https://drive.google.com/file/d/1fh7Y-x-7X410Vo3Fyw0G1zZ-_pn21kVF
Pre-step:
-Bios had boot up password.

Steps:
(1) Ran the downgrade utility on my x230 from Window 10 x64 which downgraded the bios from 2.81 to 2.60.

(2) Verified after downgrade I could sign into the bios and also boot into windows 10.

(3) I then booted from the USB drive into the default IVYRain image.

(4) The image successfully applied and then rebooted.

(5) I can get to the bios password sign in screen but it does not accept my password.

(6) I can see the text being typed.

I have found that on the T530 that when "Intel(R) AT Suspend ON" is enabled, it only stays enabled until the next reboot. The computer doesn't wake up from suspend when this option is disabled.

Hi dear
I did as instructed by you but But it is not working

show me >>>>> hang every time

So what should I do now?

My Notebook
Thinkpad T530

It would be neat to document all the patches used for the lenovo bios as they may apply to other series of thinkpads.

Hi Team,

Your project so amazing to creak thinkpad bios.
But how about W541? i see the W530 in list, but how about the W541?
I replace my Thinkpad541 screen, but cannot change brightness.
I think that;s the bios whitelist issue.
If I can fix the issue use your project?

Bruce Lau.

I had below screen shot while I was in jail break of my thinkpad x230i.

bios was downgraded to 2.60 from 2.77. but still has same 'unsupported' message. Not sure if 'jail break' is done correctly. Can you please help me?

When attempting to flash 4mb skulls bios on T430 I receive the error
error: image size (8388608B) doesnt match with the flash chips size (12582912B)
Any help would be appreciated

In my case on a T430 my original bios version was G1ET69WW (2.05) from 2012-09-12.
And after jailbreak with 1vyrain I've got G1ETC2WW (2.82) from 2019-08-07.

That means :

• not possible to run 1vyrain again after that jailbreak : "No Valid BIOS detected. Please downgrade to supported BIOS. Exiting"
• and so, not possible to restore original rom backup with 1vyrain -> so the menu 4 item "Flash a backup BIOS if it exists" is a bit useless in that case...
• no EC patch (Battery unlock/7-rows keyboard swap) will be possible after 1vyrain jailbreak

If I just want to revert back my original backup rom, I must go through the process of a BIOS downgrade process... to be able to run 1vyrain again.

Would it be feasible to change the menu item like:

1. Flash Modified Lenovo BIOS (recommended but will prevent further patching ability)
2. Flash Modified Lenovo BIOS (latest vulnerable BIOS for patching)
   ...
   That menu 2 item would install the modified version of one of these bios version: https://github.com/gch1p/thinkpad-bios-software-flashing-guide#bios-versions ?
   Just to let the choice to end users...

Refer to this issue, which I'm being told is on 1vyrain's end: merge/skulls#142

I'm hitting what appears to be flashrom argument regression. The latest version errors out with a size mismatch error.

Details: T530
Error: size (4202496 B) doesn't match the flash chip's size (12582912 B)

Looks like it's not selecting the bios region.

i flashed this on an X230t.
The EC was modded previously for kb swap.
started at 2.71, downgraded to 2.59 with gcuj19uc.iso
mod failed, flash unlock didn't work.
rolled back to 2.01 with gcuj08uc.iso.
flash worked, however i get an error every boot:
2101: Detection error on HDD2 (Mini SATA)

I have installed the Jailbreak successfully.
Do I need to Downgrade to install a custom image afterwards or is there a way around?
I'm now on X230 Bios Version 2.77 after the Jailbreak.

Would it be possible to merge the work done by https://github.com/hamishcoleman/thinkpad-ec in order to disable the battery validation?

Decided to try out the patch on an L430 thinkpad, and the result that it's compatible.

Machine: L430
Bios: G3ET94WW(2.54)
Version:
Flashsize: 80 M

Model: Thinkpad T430
Bios version: G1ETC2WW (2.82 )
Settings are not saved when enabling virtualization. I recorded a 37 seconds video showing what happens: https://video.hardlimit.com/videos/watch/d3532b36-fa86-442a-a3a1-8ce20e655e99

I have a 3740QM on a W530, what overclocking support is really given? Presets or full control? My goal would be to lower voltages...
Thanks

New testing version available.

Testing needed specifically for:
-X230/X330 FHD: expected behavior: After booting up the liveusb you see the 1vyrain prompt on the FHD display connected via eDP.
-L430: expected behavior: No WLAN, WWAN, whitelists, advanced menu enabled.
-All models: expected behavior: 1066 memory limiter option missing and replaced with a second Auto

Image: https://xorg-broke-aga.in/1vyrain.iso
md5sum: dd30313a8665e870360920b00cec55c4

Change log:
-booting in blind mode fix
-X230(X330) FHD requiring LVDS display to be plugged in fixed(image now shows on all connected screens)
-L430 support removed for now. Will be added back if someone with a hardware flasher and L430 is willing to test. Rom is still inside the image but it has to be flashed manually
-1066 speed limiter removed to prevent bricks
-TPM fix

References:
#27
#24
https://askubuntu.com/questions/831346/no-suitable-video-mode-detected/857008
https://i.imgur.com/l5VpwXs.png
#21
#41

I believe it's possible to nuke LVDS output from BIOS - would be useful for those of us running FHD mod on our X230's.

Setting Active core numbers is ignored and is always All after reboot.
Limiting CPUID does not have effect. Also, disabling AMT makes AMT active again after reboot.

My CPU: i7-3720QM. T430.

Hi there,
after doing the mod my computer does not wake up from neither sleep nor hibernation about half the time, it just does not respond at al, connection led stays on and data stays off (when it's waking it should be flashing).
I have to maintain the power button till it shuts down and turn it on again, also I noticed it was very hot with the cooler off, when it should be sleeping or hibernating.
I unistalled xtu and loaded default in bios as I feared it could be the OC instability, I did not mess at all with the c states, is it possible that the default options in the advanced menu are not ideal?
specs: updated windows10, 3740QM, 24gb, k1000m and thanks to the mod a Intel n 7260 wifi card

Hi,
There is a way to do it with the lenovo modified firmware?
I have x220 battery which the x230 cant charge

Following https://github.com/gch1p/thinkpad-bios-software-flashing-guide

I understand that once running from a vulnerable bios, the s3 vulnerability can be used to unlock wp bits.

I'm on my way of providing shrinked ME and expended IFD for the x230 under Heads, once I figure out how to make coreboot module to depend on an external x230 blobs repository from board configuration, where the IFD and ME would be downloaded from, so Heads do not distribute them directly so that coreboot uses them when being built, freeing 5mb of additional usable space, deactivating and neutering it.

If I understand well, it would then be possible to actually flash the whole ROM, including the ME region and IFD, not just the BIOS region. Or did I miss something?

Although there is nothing broken, something appears to be not working. Maybe I am missing something?

• Model: T430s, with i7
• BIOS: 2.59, downgraded using IVprep
• Downloaded the latest release of 1vyrain.

Reset bios settings, changed boot to UEFI only

Booting of the USB works fine.
I get the following screen at the end of the process:

After downgrading and flashing the custom bios, I'm still getting error 1802: unauthorized network card on my X230T. The exploiting and flashing did work, because I do get the Advanced menu in the bios settings screen, but the whitelist removal isn't working

The TPM seems to be stuck in MFG mode after the mod. TPM.msc and such claim that it cleared the TPM, but trying to use BitLocker gives me an "internal error detected". In the BIOS the security chip is set to MFG (manufacturing mode) mode, with no other options. Any way to fix this?

Hi,

I have 2 x T430s with i7-3520M CPU @ 2.9 GHz - 2 cores, 4 logical processors
BIOS: 2.59, downgraded using IVprep
Downloaded the latest release of 1vyrain

The exploit fails on both - attached are pictures of the failure - mismatched image size. Any suggestion?

Thank you

Will support for this board be added?

"Error no suitable video mode found. Booting in blind mode" on X230 with WQHD screen.
Test on official and test version.

P.s. Please add additional variant of BIOS (for X230/X330 with modded screen) with disabled native LVDS to see only 1 display in the OS

After using 1vyrain on my T430s, I can no longer boot from the internal HDD. Either I get to the dialog where I can select the boot device, but selecting the HDD does nothing, or I end up with a blinking cursor on a black text mode screen.

Booting from a USB flash drive still works. The HDD is recognized in the BIOS, as well as in the Lenovo diagnostics tool.

I tried both UEFI and legacy boot, as well as resetting the BIOS settings. No effect. Secure boot is disabled.

Does someone have a hint what to do?

Would flashing an official Lenovo BIOS help?

I'd be thankful for any help.

It now takes my X230 7-8 seconds for the Thinkpad boot logo to display immediately after pressing the power button before Windows 10 could start loading. Before the mod it took only 3 seconds. I have an SSD installed. Probably being nit picky here but I like my stuff to boot fast. My previous bios before the mod is 2.52.

Known issue - the Linux kernel defaults to LVDS output, which doesn't exist as eDP2 is used to connect FHD screen.

Workaround: in GRUB, add "nomodeset" to kernel parameter list.

Hey, I want to use ivyrain to flash skulls to my x230, however, I have just noticed that the image is 4.2 MB and not 4 MB exactly. How can I fix this? Here's where I got it from: https://github.com/merge/skulls/releases/tag/0.1.8
Attached is the image.

x230_coreboot_seabios_6af55e583d_top.rom.zip

Caveat Emptor: I have an x230 and everything mentioned here is based on it, but hopefully is easy to generalize

I am trying to create reproducible builds for the bios files in the patched-bios submodule of 1vyrain (the n4ru/patched-bioses repo), but I was unsure of the base bios version is used to create those files.

I followed the steps for self-building 1vyrain, but there isn't any information on what is the base of the patched-bios files in it. Due to a still-unexplained mix-up in my reading list's order (1vyrain + heads + skulls + thinkpad-ec + thinkpad bios flashing guide), I ended up building a patched x230 bios rom based on BIOS 2.75 (G2ETB5WW) + EC 1.14 (G2HT35WW) (//:/FLASH/G2ETB5WW/$01D3000.FL1 from g2uj31us.iso) . As expected, the generated file and the files from patched-bios did not match, and so I didn't try creating a brick.

A more detailed read of the longer form FAQ told me that the patches listed in it are for the bios version released after September 2019. The current bios release file lists that as BIOS 2.77 (G2ETB7WW) + EC 1.15 (G2HT36WW) released 2019/10/03.

Armed with this info, I tried the same process as earlier, but on the bios file from 2.77 (G2ETB7WW), and the generated file actually matches exactly:

samveen@X230: ~/builds/x230 $ diff x230.G2ETB7WW.s01D3000.patched.rom ../../patched-bios/X230.rom 

This brings up some questions I have about 1vyrain:

• In case the next bios version is released (probably 2.78?), will the process of upgrade be to downgrade back to BIOS 2.60 and then apply a patched bios again? As I understand the patches, there's nothing in there to introduce vulnerabilities into the bios that make 1vyrain possible (and they shouldn't, right?). Already answered by #10 and #26 .
• I'm trying to create a travis-ci config such that the patched bios roms can be auto-generated and added as release artifacts to the 1vyrain repository (automated builds as well as open and auditible process). Would you be open to review that if I submit a pull request?

After changing the memory frequency on my test T430 to 1066MHz I found that the board would refuse to boot ever again, removing the CMOS battery and main battery, power cycling it, absolutely nothing would work, I'm trying to see if I can flash coreboot via hardware to recover this board.

Note, had 8GB + 4GB of Samsung 1866MHz CL10 RAM Installed at the time, will not boot regardless of the RAM installed in any config.

not sure where the issue is, but since i've 1vyrained my X230T i cant use vt at all - its simply disabled and wont stay on if i toggle it in bios.
i think i could have a modbios from previous mobo where it worked, just in case, but not sure if its of any help

Hi..
You made a great job on this mod for the bios. Everything is working fine.
However I was not able to find the option to change the BIOS time and date. I am having some issues with my backup battery and the system keeps asking me to adjust the BIOS time and date.
Can you give me the instructions to get the date and time changed within BIOS?

Thanks
Josue Soto

Hello,

i have used the jailbreak on my T430 with an i7-3720QM With the result that I already have the problem with two mainbaords that the system thinks that the used power supply does not provide enough power.
No matter if with a 90W, 135W or 170W.
None is accepted.
65W I have not tested.

The T430 has no Nvidia, I didn't change anything on the CPU power limits, just disabled Intel ME.

If I deactivate MCore Multi-Processing in the Bios, the power supply is recognized and can be used.

The T430 can be started without battery with the power supply, but as soon as the T430 has a battery, the T430 goes to battery operation.

Bios-downgrade to 2.64 doesn't bring any improvement

Translated from german to english with deepl.com

Translated with www.DeepL.com/Translator (free version)

Hi,

can this BIOS mod change the fan-speed rpms of a Thinkpad X230 or does this happen in another part? The X230 fan speed on the lowest setting is too fast and therefore too loud. The X220 had a much lower minimum fan speed (at level 1) and was perfectly silent. I do not remember exactly, I think on the X220 it was 1000 or 1500 rpms for level 1 while the X230 started at 2000 rpms or so.

Thank you!

Thomas

Got this flashed on my T430 with no issues. However, the laptop's battery died (of course the CMOS battery is garbage), so the BIOS bothered me to set the clock. I went into the BIOS to change it, and I could not find the Date/Time config that usually resides in one of the top tabs.

Maybe I'm crazy, but I couldn't find the setting. Thanks for your work on these laptops, keeping them alive! The thinkpad community really appreciates it.

When I try to flash a custom rom from a github repo that I created with only that rom image, the following error appears.

ERROR: The certificate of www.github.com is not trusted
ERROR: The certificate of www.github.com doesn't have a known issuer.

This is preventing me from actually flashing the bios that I want to.

The github repo is here:
https://github.com/joshuayun61/thinkpad_t430_coreboot

I am running a T430 right now.

Machine: T431s
BIOS: GHET44WW
Version: 1.29
Flashsize: 16 M

It seems, the script does not creates a dump of bios region before flashing (correct me if I'm wrong). I think it's a good idea to have backups, just in case.

Note that you can't dump whole 12M because of working ME, but you still can dump the bios region.

I have three T430's all with i5-3320M and 8GB RAM and I am very interested in this mod purely to remove the WiFi white list as I want to put 11ac cards in all of them. Two of the laptops are Windows 10 with BitLocker enabled which I need to have for corporate reasons.

My question - is it safe to do this BIOS mod and not kill the TPM? I can live with a warning at boot, as long as it doesn't require user intervention such as pressing a key to continue etc.

I did see in the long FAQ about taking ownership of the TPM but I am not really sure what this means or how to do it.

Thanks

This is definitely in "wish feature" category: would be super-nice to be able to specify own boot logo :-)

I'd like to have longer battery life because my x230 only runs for 2-3 hours, even with a good condition (52/57Wh) battery and all power saving measures taken.
Specs:
Intel Core i5 3380m
Windows 10 Pro
6-cell battery
240GB SSD

It'd be awesome to see support for Ivy Bridge equipped x131e Thinkpads.

Is it possible to change a vid pid on the whitelist instead of patching the BIOS?

Thank you.

I want to change the TOLUD to a lower setting but cant find the setting in the "Advanced" menu. I'd alternatively want to activate an option related to "Above 4G decoding", but can't find that either. Here's why I want that (I don't know if any of the following matters but I include it anyways):

I want to set up an eGPU with an EXP GDC (not sure which) and a NVIDIA GTX 750 (not ti). I'm on linux lubuntu 18.04, kernel is 4.15.0-117-generic, boot is GPT UEFI (grub2), BIOS is 2.77, flashed via 1vyrain at Sep 4 (a week ago). When I plug in the expresscard attached to the EXP GDC I can see these things (https://pastebin.com/fibRDz9Z) in the kernel log (dmesg), it should be exactly everthing that happens when I plug in the card. When I install the nvidia driver I see this (https://pastebin.com/KF1nUXzh) repeated over and over again (I chose a random start, but it seems sensible to me--since it is annoying to watch at and the driver doesn't do anything if the GPU isn't recognised the driver is currently not installed).

Upon researching on this I was told to

• enable "above 4G decoding" or

• smaller the TOLUD

• do a BIOS upgrade

• booth with UEFI

so I searched for the options and did the other two things. I upgraded from the 1.X BIOS I still had at this point to 2.77, where I then found out that this doesn't change anything and that changing the TOLUD wasn't an option, so I asked further and was directed to 1vyrain which also couldn't resolve it.

Note: to install I downgraded from stock 2.77 to 2.6 and booted the 1vyrain image via UEFI, I forgot to do a BIOS reset though, and I did not follow through all of (https://github.com/gch1p/thinkpad-bios-software-flashing-guide), just the downgrading part. Actually I thought of this the second I was prompted to make a decision and pressed 3 for a reboot a minute or five after but it installed anyways (why tho? was It because I waited too long? It said something about a timeout but I don't remember entirely). I don't know how to check if the install was fully succesful but I don't see anything odd (if not, can I safely just do it again, and do I need to do the downgrade again?)

Now I'm asking here since nobody seems to know an answer (and I'm sufficiently desperately undereducated in CS stuff around BIOS, kernel and hardware that I don't even know where to begin to read myself to a solution). At this point I wanted to add that it probably needs to be verified that the problem is with the BIOS and I'm not sure if this then is an issue of 1vyrain or rather a feature request. I'm also not sure how much of this is misplaced, I don't want to ask for more here than confirmation that it is a BIOS problem and a way to resolve it, if it's a kernel problem or a problem nouveau and nvidia somehow share, I'll of course accept that and try my luck with them (as frustrating it may be to not have a solution).

To resolve the issue I was told a few other things, adding these too, to make is easier to troubleshoot if this really is an issue with the BIOS:

• add kernel parameter "pci=nocrs", this doesn't change anything maybe other kernel parameters might help?

• different (newer) kernel: the sources for bionic beaver have 5.0, 5.3 and 5.4, I tried out the latest 5.3 they had but it didn't work on that either.

• DSDT override (didn't, frightens me)

• peculiarly other X230 users had working eGPUs (and one of these had a GTX 750 ti) without needing to alter the BIOS at all