Huawei Y6 2019 (huawei-madrid)
| This device is marked as not booting. Status: Nothing (for now) |
| Manufacturer | Huawei |
|---|---|
| Name | Y6 2019 |
| Codename | huawei-madrid |
| Model | MRD-LX1 |
| Released | 2019 |
| Type | handset |
| Hardware | |
| Chipset | MediaTek Helio A22 (MT6761) |
| CPU | Quad-core 2.0 GHz Cortex-A53 |
| GPU | PowerVR Rogue GE8300 (driver version 1.10@5130912) |
| Display | 720x1560 IPS 6.09" |
| Storage | 32GB |
| Memory | 2GB |
| Architecture | aarch64 |
| Software | |
Original software  The software and version the device was shipped with. |
Android EMUI 9.0 |
Extended version The most recent supported version from the manufacturer. |
Android EMUI 9.1 (Linux 4.9.117+) |
Mainline Instead of a Linux kernel fork, it is possible to run (Close to) Mainline. |
no |
| This device is based on the MediaTek MT6761. See the SoC page for common tips, guides and troubleshooting steps |
Huawei Y6 2019, codenamed madrid, is an entry level phone running on the MediaTek MT6761 platform. Its Little Kernel is 32-bit and Preloader does not verify Little Kernel when the bootloader is unlocked. This means a U-Boot port instead of Little Kernel is possible. The device is vulnerable to kamakiri, meaning we can use MTKClient in BROM mode. Preloader USBDL is disabled and there is currently no way to activate it back. Testpointing is needed to get BROM.
Contributors
- 37nx
- Fenolftalein
Users owning this device
- Fenolftalein (Notes: Not unlocked, debloated stock)
- TurkLine (Notes: Cracked screen)
Unlocking the bootloader
The phone can be unlocked by patching the Little Kernel with kaeru (board file) and unlocking seccfg with mtkclient.
- Unlock seccfg:
mtk da seccfg unlock - Dump LK:
mtk r lk lk.img - Clone kaeru repo:
git clone https://github.com/R0rt1z2/kaeru.git - Using Docker to build is strongly recommended:
./docker_run.sh - Move your lk.img to kaeru folder and run:
./build.py madrid lk.img - Flash madrid-kaeru.bin to your device:
mtk w lk [path to madrid-kaeru.bin] - Reboot the device:
mtk reset - Boot to fastboot mode and run:
fastboot oem kaeru-version
You should see something like this:
Then run: fastboot getvar unlocked
You should see "unlocked:yes". Then run: fastboot oem lock-state info: you should see both USER LockState and FB LockState unlocked.
External links
- GSMArena device specifications
- AIDA64 report
- Device tree on GitHub
- Downstream kernel source on GitHub
- Open source package by Huawei (contains broken downstream kernel source)