Buenas yo le he estado testeando y obtengo el mismo resultado
Código:
/data/local/tmp/exploit cp
eroot started.
model: LT26i
buildid: 6.2.B.0.200
dumping arguments:
/data/local/tmp/exploit
cp
dumping maps:
00008000-0000d000 r-xp 00000000 b3:0e 65541 /data/local/tmp/exploit
0000d000-0000e000 r--p 00004000 b3:0e 65541 /data/local/tmp/exploit
0000e000-0000f000 rw-p 00005000 b3:0e 65541 /data/local/tmp/exploit
01aa0000-01aa1000 rw-p 00000000 00:00 0 [heap]
4006e000-40081000 r-xp 00000000 b3:0c 414 /system/bin/linker
40081000-40082000 r--p 00012000 b3:0c 414 /system/bin/linker
40082000-40083000 rw-p 00013000 b3:0c 414 /system/bin/linker
40083000-40098000 rw-p 00000000 00:00 0
40107000-40117000 r--s 00000000 00:0a 4418 /dev/__properties__ (de
40134000-40177000 r-xp 00000000 b3:0c 1339 /system/lib/libc.so
40177000-4017a000 rw-p 00043000 b3:0c 1339 /system/lib/libc.so
4017a000-40186000 rw-p 00000000 00:00 0
40209000-4020a000 r--p 00000000 00:00 0
40287000-40296000 r-xp 00000000 b3:0c 1369 /system/lib/libcutils.s
40296000-40297000 r--p 0000e000 b3:0c 1369 /system/lib/libcutils.s
40297000-40298000 rw-p 0000f000 b3:0c 1369 /system/lib/libcutils.s
40298000-402a6000 rw-p 00000000 00:00 0
40304000-40307000 r-xp 00000000 b3:0c 1468 /system/lib/liblog.so
40307000-40308000 r--p 00002000 b3:0c 1468 /system/lib/liblog.so
40308000-40309000 rw-p 00003000 b3:0c 1468 /system/lib/liblog.so
4037f000-40380000 r-xp 00000000 b3:0c 1600 /system/lib/libstdc++.s
40380000-40381000 r--p 00000000 b3:0c 1600 /system/lib/libstdc++.s
40381000-40382000 rw-p 00000000 00:00 0
40382000-40397000 r-xp 00000000 b3:0c 1469 /system/lib/libm.so
40397000-40398000 r--p 00014000 b3:0c 1469 /system/lib/libm.so
40398000-40399000 rw-p 00000000 00:00 0
bec72000-bec93000 rw-p 00000000 00:00 0 [stack]
ffff0000-ffff1000 r-xp 00000000 00:00 0 [vectors]
ffff0000-ffff1000 r-xp 00000000 00:00 0 [vectors]
trying hisilicon...
trying qualcomm...
trying mediatek...
trying linux perf swevent...
fork 37 child(ren).
child#0#19886: assigned 980.
child#0#19886: completed 980.
child#1#19887: assigned 980.
child#1#19887: completed 980.
child#2#19888: assigned 980.
child#2#19888: completed 980.
child#3#19889: assigned 980.
child#3#19889: completed 980.
child#4#19891: assigned 980.
child#4#19891: completed 980.
child#5#19892: assigned 980.
child#5#19892: completed 980.
child#6#19893: assigned 980.
child#6#19893: completed 980.
child#7#19894: assigned 980.
child#7#19894: completed 980.
child#8#19895: assigned 980.
child#8#19895: completed 980.
child#9#19896: assigned 980.
child#9#19896: completed 980.
child#10#19897: assigned 980.
child#10#19897: completed 980.
child#11#19898: assigned 980.
child#11#19898: completed 980.
child#12#19899: assigned 980.
child#12#19899: completed 980.
child#13#19900: assigned 980.
child#13#19900: completed 980.
child#14#19901: assigned 980.
child#14#19901: completed 980.
child#15#19902: assigned 980.
child#15#19902: completed 980.
child#16#19903: assigned 980.
child#16#19903: completed 980.
child#17#19904: assigned 980.
child#17#19904: completed 980.
child#18#19905: assigned 980.
child#18#19905: completed 980.
child#19#19906: assigned 980.
child#19#19906: completed 980.
child#20#19907: assigned 980.
child#20#19907: completed 980.
child#21#19908: assigned 980.
child#21#19908: completed 980.
child#22#19909: assigned 980.
child#22#19909: completed 980.
child#23#19910: assigned 980.
child#23#19910: completed 980.
child#24#19911: assigned 980.
child#24#19911: completed 980.
child#25#19912: assigned 980.
child#25#19912: completed 980.
child#26#19913: assigned 980.
child#26#19913: completed 980.
child#27#19914: assigned 980.
child#27#19914: completed 980.
child#28#19915: assigned 980.
child#28#19915: completed 980.
child#29#19916: assigned 980.
child#29#19916: completed 980.
child#30#19917: assigned 980.
child#30#19917: completed 980.
child#31#19918: assigned 980.
child#31#19918: completed 414.
fork() failed: File table overflow.
trying samsung v4l2...
trying samsung fb...
trying samsung exynos...
trying omap3 dsp bridge...
eroot exited with status -1.
/system/bin/sh: can't create pipe - try again
En teoria el xploit aprovecha un bug para poder ejecutar comandos como root, y de esa manera solo deberiamos usar busybox para remontar la particion en rw y asi poder meter los binarios de root
pero en en esta version de firmware no me funciona