Can't upgrade to 9.4 from 9.2.2

Question

Can't upgrade to 9.4 from 9.2.2

keshto opened this issue 3 years ago · comments

With newer TVs that ship with 9.2.2, the exploit does not seem to work and when trying to force an update to the tested 9.4 version there is a message showing that one cannot downgrade...?

Marcus T · Answer 1 · Thu Dec 09 2021 07:30:41 GMT+0800 (China Standard Time)

Are you sure you're on version 9.2.2 and not 10.2.2? RokuOS 9.2 was released a long time ago and I don't imagine that new TVs ship with it.

You can check your full version number and build number by pulling up the Roku secret menu.

Keshto · Answer 2 · Thu Dec 09 2021 07:48:16 GMT+0800 (China Standard Time)

I am pretty sure. Please see attached image.

Marcus T · Answer 3 · Fri Dec 10 2021 09:43:11 GMT+0800 (China Standard Time)

Huh. I stand corrected. That's actually very surprising.
I know most Roku TVs have the ability to apply firmware updates via USB drives, but unless you happen to have the 9.4.0 update files for your exact model then you're out of luck.

The other snag is that even if they ship factory fresh with an exploitable version, the initial TV setup requires downloading and applying a firmware update before you can continue. I also believe activating developer mode forces an update check as well. Currently, I'm not aware of any ways to bypass the initial update requirement. :(

Keshto · Answer 4 · Fri Dec 10 2021 09:47:06 GMT+0800 (China Standard Time)

So, yes I have 9.4 for my device (wayback machine) however when trying to apply it from USB it says unable to downgrade which is weird. As, far as enabling Dev mode and init setup goes. One can simply block the update from the router which I have done and can do both without upgrading. The snag here is it reports 9.2 however does not allow me to manually upgrade to 9.4 and it seems that the 9.2 version is built in 2021 and might be patched.

…

On December 10, 2021 1:43:21 AM UTC, Marcus T ***@***.***> wrote: Huh. I stand corrected. That's actually _very_ surprising. I know most Roku TVs have the ability to apply firmware updates via USB drives, but unless you happen to have the 9.4.0 update files for your exact model then you're out of luck. The other snag is that even if they ship factory fresh with an exploitable version, the initial TV setup _requires_ downloading and applying a firmware update before you can continue. I also believe activating developer mode forces an update check as well. Currently, I'm not aware of any ways to bypass the initial update requirement. :( -- You are receiving this because you authored the thread. Reply to this email directly or view it on GitHub: #8 (comment)

Marcus T · Answer 5 · Fri Dec 10 2021 10:12:31 GMT+0800 (China Standard Time)

That's odd. The last time I took a look at this, attempting to do the initial setup while blocking access to Roku's update servers simply caused the initial setup to fail. It put me in a loop of "need to update" and "failed to update".

What I find incredibly strange is that your build date is actually very recent. I know Roku released patched versions of their older firmwares after this exploit was released, but that doesn't explain why they'd still use a patched 9.2 image the factory default image instead of something newer like 9.4 or 10.

My best guess is that the update is comparing build dates instead of version numbers.

Keshto · Answer 6 · Fri Dec 10 2021 10:37:36 GMT+0800 (China Standard Time)

You can get through the initial setup it is just a timing thing. You have to not reject the update but let it fail with a timeout and enable access soon as it times out because they check after. The build time vs version makes sense. The updates are sha1sum and then attested by roku so cant really change the built time (plus dont know where to start with that since dont know the update package format) Have any ideas on what I should do?

…

On December 10, 2021 2:12:42 AM UTC, Marcus T ***@***.***> wrote: That's odd. The last time I took a look at this, attempting to do the initial setup while blocking access to Roku's update servers simply caused the initial setup to fail. It put me in a loop of "need to update" and "failed to update". What I find incredibly strange is that your build date is actually very recent. I know Roku released patched versions of their older firmwares after this exploit was released, but that doesn't explain why they'd still use a _patched_ 9.2 image the factory default image instead of something newer like 9.4 or 10. My best guess is that the update is comparing build dates instead of version numbers. -- You are receiving this because you authored the thread. Reply to this email directly or view it on GitHub: #8 (comment)

Marcus T · Answer 7 · Fri Dec 10 2021 10:58:46 GMT+0800 (China Standard Time)

Hmm, I'm curious about the upgrade skip. Do you mind emailing me directly so we can discuss this further? You can contact me at llamasoft@rm-rf.email