Huawei Y6 2019
| This device is marked as not booting. Status: Nothing (for now) |
| Manufacturer | Huawei |
|---|---|
| Name | Y6 2019 |
| Codename | huawei-madrid |
| Model | MRD-LX1 |
| Released | 2019 |
| Type | handset |
| Hardware | |
| Chipset | MediaTek Helio A22 (MT6761) |
| CPU | Quad-core 2.0 GHz Cortex-A53 |
| GPU | PowerVR Rogue GE8300 (driver version 1.10@5130912] |
| Display | 720x1560 IPS 6.09" |
| Storage | 32GB |
| Memory | 2GB |
| Architecture | aarch64 |
| Software | |
Original software The software and version the device was shipped with. |
Android EMUI 9.0 |
Extended version The most recent supported version from the manufacturer. |
Android EMUI 9.1 (Linux 4.9.117+) |
Mainline Instead of a Linux kernel fork, it is possible to run (Close to) Mainline. |
no |
Huawei Y6 2019, codenamed madrid, is an entry level phone running on the MediaTek MT6761 platform. It's Little Kernel is 32 bit and Preloader does not verify Little Kernel when the bootloader is unlocked. This means a U-Boot port instead of Little Kernel is possible. The device is vulnerable to kamakiri, meaning we can use MTKClient in BROM mode. Preloader USBDL is disabled and there is currently no way to activate it back. Testpointing is needed to get BROM.
Contributors
- 37nx
- Fenolftalein
Users owning this device
- Fenolftalein (Notes: Not unlocked, debloated stock)
- TurkLine (Notes: Cracked screen)
Unlocking the bootloader
The phone can be unlocked with patching the Little Kernel with kaeru (board file) and unlocking seccfg with mtkclient.
Unlock seccfg: mtk da seccfg unlock
Dump LK: mtk r lk lk.img
Clone kaeru repo: git clone https://github.com/R0rt1z2/kaeru.git
Using Docker to build is strongly recommended: ./docker_run.sh
Move your lk.img to kaeru folder and run: ./build.py madrid lk.img
Now flash madrid-kaeru.bin to your device: mtk w lk [path to madrid-kaeru.bin]
Reboot the device: mtk reset
Now boot to fastboot mode and run: fastboot oem kaeru-version
You should see something like this:
Then run: fastboot getvar unlocked
You should see unlocked:yes
Then run: fastboot oem lock-state info
You should see both USER LockState and FB LockState unlocked.
Extra information
Open Source package by Huawei (contains broken downstream kernel source)