Samsung UE48H6700SL - po logu len cierna obrazovka

Zpráva

jandur · #16 Příspěvek od **jandur** » 21 pro 2024, 17:45

ok, ak to napajas z PSU, cize MB bezi potom ti bezi aj cpu a vytvara vsetky signaly, cize v tomto pripade musis prerusit CLK a myslim aj CMD..

P.S: citas to RT809H alebo niecim inym ?

#17 Příspěvek od **rnbw** » 22 pro 2024, 12:44

Ostranil som BD6 (3,3V napajanie pre eMMC) a teraz napajam z lab. zdroja len eMMC - 3,3V na BD6 a 1,8V na BD1301 (netreba odstranovat, pretoze na tejto vetve je len eMMC). Najprv sa to nechcelo chytit, ale ked som zvysil napatie na 1,9V, tak to zacalo fungovat!

Kód: Vybrat vše

[  738.478527] mmc0: new MMC card at address 0001
[  738.481589] mmcblk0: mmc0:0001 4FEACC 3.64 GiB
[  738.534076]  mmcblk0: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 >
[  738.536204] mmcblk0boot0: mmc0:0001 4FEACC 4.00 MiB
[  738.538164] mmcblk0boot1: mmc0:0001 4FEACC 4.00 MiB

Na citanie pouzivam notebook Toshiba Portege R100 so slotom na SD karty. Ma SD/MMC radic s plnym pristupom (nie USB) - takze sa da pracovat aj s boot particiami a CSD.

GND, CLK, CMD a DAT0 som pripojil cez upravenu redukciu na microSD karty. Chyba mi fotka s drotmi prispajkovanymi do redukcie - pridam neskor (teraz je v notebooku).

#18 Příspěvek od **rnbw** » 22 pro 2024, 16:35

Mam vydumpovane 4MiB boot0 a boot1 (prazdna) aj 3728MiB user. Pre istotu dvakrat a oba subory su zhodne.

User cast obsahuje 17 particii. Ktoru mam uploadnut? Ci celu user cast?

Kód: Vybrat vše

# fdisk -l /dev/mmcblk0
Disk /dev/mmcblk0: 3.64 GiB, 3909091328 bytes, 7634944 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: dos
Disk identifier: 0x00000000

Device          Boot   Start     End Sectors  Size Id Type
/dev/mmcblk0p1            16    1039    1024  512K 83 Linux
/dev/mmcblk0p2          1040    2063    1024  512K 83 Linux
/dev/mmcblk0p3          2064    3087    1024  512K 83 Linux
/dev/mmcblk0p4          3088 7487439 7484352  3.6G  5 Extended
/dev/mmcblk0p5          3104    4127    1024  512K 83 Linux
/dev/mmcblk0p6          4144   18479   14336    7M 83 Linux
/dev/mmcblk0p7         18496   29759   11264  5.5M 83 Linux
/dev/mmcblk0p8         29776   44111   14336    7M 83 Linux
/dev/mmcblk0p9         44128   55391   11264  5.5M 83 Linux
/dev/mmcblk0p10        55408   55423      16    8K 83 Linux
/dev/mmcblk0p11        55440   55455      16    8K 83 Linux
/dev/mmcblk0p12        55472   55487      16    8K 83 Linux
/dev/mmcblk0p13        55504   61647    6144    3M 83 Linux
/dev/mmcblk0p14        61664   67807    6144    3M 83 Linux
/dev/mmcblk0p15        67824  477423  409600  200M 83 Linux
/dev/mmcblk0p16       477440 4573439 4096000    2G 83 Linux
/dev/mmcblk0p17      4573456 7487439 2913984  1.4G 83 Linux

Podla EXTCSD je eMMC zdravy:
eMMC Life Time Estimation je 0x01, tzn. 0-10% opotrebovanie.
eMMC Pre EOL information je 0x01, tzn. normal.

Kód: Vybrat vše

=============================================
  Extended CSD rev 1.7 (MMC 5.0)
=============================================

Card Supported Command sets [S_CMD_SET: 0x01]
HPI Features [HPI_FEATURE: 0x01]: implementation based on CMD13
Background operations support [BKOPS_SUPPORT: 0x01]
Max Packet Read Cmd [MAX_PACKED_READS: 0x3f]
Max Packet Write Cmd [MAX_PACKED_WRITES: 0x3f]
Data TAG support [DATA_TAG_SUPPORT: 0x01]
Data TAG Unit Size [TAG_UNIT_SIZE: 0x04]
Tag Resources Size [TAG_RES_SIZE: 0x00]
Context Management Capabilities [CONTEXT_CAPABILITIES: 0x05]
Large Unit Size [LARGE_UNIT_SIZE_M1: 0x07]
Extended partition attribute support [EXT_SUPPORT: 0x03]
Generic CMD6 Timer [GENERIC_CMD6_TIME: 0x0a]
Power off notification [POWER_OFF_LONG_TIME: 0x3c]
Cache Size [CACHE_SIZE] is 8192 KiB
Background operations status [BKOPS_STATUS: 0x00]
1st Initialisation Time after programmed sector [INI_TIMEOUT_AP: 0x1e]
Power class for 52MHz, DDR at 3.6V [PWR_CL_DDR_52_360: 0x00]
Power class for 52MHz, DDR at 1.95V [PWR_CL_DDR_52_195: 0x00]
Power class for 200MHz at 3.6V [PWR_CL_200_360: 0x00]
Power class for 200MHz, at 1.95V [PWR_CL_200_195: 0x00]
Minimum Performance for 8bit at 52MHz in DDR mode:
 [MIN_PERF_DDR_W_8_52: 0x00]
 [MIN_PERF_DDR_R_8_52: 0x00]
TRIM Multiplier [TRIM_MULT: 0x02]
Secure Feature support [SEC_FEATURE_SUPPORT: 0x55]
Boot Information [BOOT_INFO: 0x07]
 Device supports alternative boot method
 Device supports dual data rate during boot
 Device supports high speed timing during boot
Boot partition size [BOOT_SIZE_MULTI: 0x20]
Access size [ACC_SIZE: 0x06]
High-capacity erase unit size [HC_ERASE_GRP_SIZE: 0x01]
 i.e. 512 KiB
High-capacity erase timeout [ERASE_TIMEOUT_MULT: 0x01]
Reliable write sector count [REL_WR_SEC_C: 0x01]
High-capacity W protect group size [HC_WP_GRP_SIZE: 0x10]
 i.e. 8192 KiB
Sleep current (VCC) [S_C_VCC: 0x07]
Sleep current (VCCQ) [S_C_VCCQ: 0x07]
Sleep/awake timeout [S_A_TIMEOUT: 0x11]
Sector Count [SEC_COUNT: 0x00748000]
 Device is block-addressed
Minimum Write Performance for 8bit:
 [MIN_PERF_W_8_52: 0x00]
 [MIN_PERF_R_8_52: 0x00]
 [MIN_PERF_W_8_26_4_52: 0x00]
 [MIN_PERF_R_8_26_4_52: 0x00]
Minimum Write Performance for 4bit:
 [MIN_PERF_W_4_26: 0x00]
 [MIN_PERF_R_4_26: 0x00]
Power classes registers:
 [PWR_CL_26_360: 0x00]
 [PWR_CL_52_360: 0x00]
 [PWR_CL_26_195: 0x00]
 [PWR_CL_52_195: 0x00]
Partition switching timing [PARTITION_SWITCH_TIME: 0x01]
Out-of-interrupt busy timing [OUT_OF_INTERRUPT_TIME: 0x05]
I/O Driver Strength [DRIVER_STRENGTH: 0x1f]
Card Type [CARD_TYPE: 0x57]
 HS400 Dual Data Rate eMMC @200MHz 1.8VI/O
 HS200 Single Data Rate eMMC @200MHz 1.8VI/O
 HS Dual Data Rate eMMC @52MHz 1.8V or 3VI/O
 HS eMMC @52MHz - at rated device voltage(s)
 HS eMMC @26MHz - at rated device voltage(s)
CSD structure version [CSD_STRUCTURE: 0x02]
Command set [CMD_SET: 0x00]
Command set revision [CMD_SET_REV: 0x00]
Power class [POWER_CLASS: 0x00]
High-speed interface timing [HS_TIMING: 0x00]
Erased memory content [ERASED_MEM_CONT: 0x00]
Boot configuration bytes [PARTITION_CONFIG: 0x48]
 Boot Partition 1 enabled
 No access to boot partition
Boot config protection [BOOT_CONFIG_PROT: 0x00]
Boot bus Conditions [BOOT_BUS_CONDITIONS: 0x02]
High-density erase group definition [ERASE_GROUP_DEF: 0x01]
Boot write protection status registers [BOOT_WP_STATUS]: 0x0a
Boot Area Write protection [BOOT_WP]: 0x04
 Power ro locking: possible
 Permanent ro locking: possible
 partition 0 ro lock status: locked permanently
 partition 1 ro lock status: locked permanently
User area write protection register [USER_WP]: 0x00
FW configuration [FW_CONFIG]: 0x00
RPMB Size [RPMB_SIZE_MULT]: 0x04
Write reliability setting register [WR_REL_SET]: 0x1f
 user area: the device protects existing data if a power failure occurs during a write operation
 partition 1: the device protects existing data if a power failure occurs during a write operation
 partition 2: the device protects existing data if a power failure occurs during a write operation
 partition 3: the device protects existing data if a power failure occurs during a write operation
 partition 4: the device protects existing data if a power failure occurs during a write operation
Write reliability parameter register [WR_REL_PARAM]: 0x04
 Device supports the enhanced def. of reliable write
Enable background operations handshake [BKOPS_EN]: 0x00
H/W reset function [RST_N_FUNCTION]: 0x01
HPI management [HPI_MGMT]: 0x01
Partitioning Support [PARTITIONING_SUPPORT]: 0x07
 Device support partitioning feature
 Device can have enhanced tech.
Max Enhanced Area Size [MAX_ENH_SIZE_MULT]: 0x0000e9
 i.e. 1908736 KiB
Partitions attribute [PARTITIONS_ATTRIBUTE]: 0x00
Partitioning Setting [PARTITION_SETTING_COMPLETED]: 0x00
 Device partition setting NOT complete
General Purpose Partition Size
 [GP_SIZE_MULT_4]: 0x000000
 [GP_SIZE_MULT_3]: 0x000000
 [GP_SIZE_MULT_2]: 0x000000
 [GP_SIZE_MULT_1]: 0x000000
Enhanced User Data Area Size [ENH_SIZE_MULT]: 0x000000
 i.e. 0 KiB
Enhanced User Data Start Address [ENH_START_ADDR]: 0x00000000
 i.e. 0 bytes offset
Bad Block Management mode [SEC_BAD_BLK_MGMNT]: 0x00
Periodic Wake-up [PERIODIC_WAKEUP]: 0x00
Program CID/CSD in DDR mode support [PROGRAM_CID_CSD_DDR_SUPPORT]: 0x01
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[127]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[126]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[125]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[124]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[123]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[122]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[121]]: 0x21
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[120]]: 0x4b
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[119]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[118]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[117]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[116]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[115]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[114]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[113]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[112]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[111]]: 0x04
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[110]]: 0xaf
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[109]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[108]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[107]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[106]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[105]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[104]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[103]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[102]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[101]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[100]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[99]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[98]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[97]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[96]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[95]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[94]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[93]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[92]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[91]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[90]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[89]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[88]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[87]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[86]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[85]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[84]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[83]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[82]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[81]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[80]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[79]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[78]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[77]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[76]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[75]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[74]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[73]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[72]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[71]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[70]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[69]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[68]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[67]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[66]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[65]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[64]]: 0x0f
Native sector size [NATIVE_SECTOR_SIZE]: 0x00
Sector size emulation [USE_NATIVE_SECTOR]: 0x00
Sector size [DATA_SECTOR_SIZE]: 0x00
1st initialization after disabling sector size emulation [INI_TIMEOUT_EMU]: 0x00
Class 6 commands control [CLASS_6_CTRL]: 0x00
Number of addressed group to be Released[DYNCAP_NEEDED]: 0x00
Exception events control [EXCEPTION_EVENTS_CTRL]: 0x0000
Exception events status[EXCEPTION_EVENTS_STATUS]: 0x0000
Extended Partitions Attribute [EXT_PARTITIONS_ATTRIBUTE]: 0x0000
Context configuration [CONTEXT_CONF[51]]: 0x00
Context configuration [CONTEXT_CONF[50]]: 0x00
Context configuration [CONTEXT_CONF[49]]: 0x00
Context configuration [CONTEXT_CONF[48]]: 0x00
Context configuration [CONTEXT_CONF[47]]: 0x00
Context configuration [CONTEXT_CONF[46]]: 0x00
Context configuration [CONTEXT_CONF[45]]: 0x00
Context configuration [CONTEXT_CONF[44]]: 0x00
Context configuration [CONTEXT_CONF[43]]: 0x00
Context configuration [CONTEXT_CONF[42]]: 0x00
Context configuration [CONTEXT_CONF[41]]: 0x00
Context configuration [CONTEXT_CONF[40]]: 0x00
Context configuration [CONTEXT_CONF[39]]: 0x00
Context configuration [CONTEXT_CONF[38]]: 0x00
Context configuration [CONTEXT_CONF[37]]: 0x00
Packed command status [PACKED_COMMAND_STATUS]: 0x00
Packed command failure index [PACKED_FAILURE_INDEX]: 0x00
Power Off Notification [POWER_OFF_NOTIFICATION]: 0x01
Control to turn the Cache ON/OFF [CACHE_CTRL]: 0x01
Control to turn the Cache Barrier ON/OFF [BARRIER_CTRL]: 0x00
eMMC Firmware Version:
eMMC Life Time Estimation A [EXT_CSD_DEVICE_LIFE_TIME_EST_TYP_A]: 0x01
eMMC Life Time Estimation B [EXT_CSD_DEVICE_LIFE_TIME_EST_TYP_B]: 0x01
eMMC Pre EOL information [EXT_CSD_PRE_EOL_INFO]: 0x01
Secure Removal Type [SECURE_REMOVAL_TYPE]: 0x09
 information is configured to be removed by an erase of the physical memory
 Supported Secure Removal Type:
  information removed by an erase of the physical memory
  information removed using a vendor defined

jandur · #19 Příspěvek od **jandur** » 22 pro 2024, 20:15

ok, da sa aj tak.. boot1 aj boot2 by mali byt v tomto tv prazdne pretoze TV bootuje so spi flash. Uploadni niekde na https://mega.io/ a link mi posli do PM.. Zajtra som v praci tak ti prenesiem vsetky kluce do funkcneho mojho dumpu + spi flash + eeprom s povolenym debugom - malo by to byt o hodne ukecanejsie v uart logu

#20 Příspěvek od **rnbw** » 22 pro 2024, 21:25

Prvy boot prazdny nie je - je tam Onboot.

Inak skusal som dalsie 3 notebooky a v ziadnom z nich to nejde, asi nestravia tu 1,8V uroven. Zvladne to len ta Toshiba.

Mega je platena, dam to na nejake free ulozisko.

#21 Příspěvek od **rnbw** » 22 pro 2024, 22:42

Analyza particii v eMMC:

Kód: Vybrat vše

Device   Boot   Start     End Sectors  Size Id Type
loop0p1            16    1039    1024  512K 83 Linux = SERET0 = same as P2
loop0p2          1040    2063    1024  512K 83 Linux = SERET1 = same as P1
loop0p3          2064    3087    1024  512K 83 Linux = SECOS0 = same as P5
loop0p4          3088 7487439 7484352  3.6G  5 Extended
loop0p5          3104    4127    1024  512K 83 Linux = SECOS1 = same as P3
loop0p6          4144   18479   14336    7M 83 Linux = KERNEL0 = same as P8 = u-boot legacy uImage, Linux-3.8.13, ...
loop0p7         18496   29759   11264  5.5M 83 Linux = ROOTFS0 = Squashfs filesystem, little endian, version 4.0, ...
loop0p8         29776   44111   14336    7M 83 Linux = KERNEL1 = same as P6
loop0p9         44128   55391   11264  5.5M 83 Linux = ROOTFS1 = Squashfs filesystem, little endian, version 4.0, ...
loop0p10        55408   55423      16    8K 83 Linux = SECUREMAC0 = ??? encrypted
loop0p11        55440   55455      16    8K 83 Linux = SECUREMAC1 = ??? encrypted
loop0p12        55472   55487      16    8K 83 Linux = SECUREMAC2 = VD-HEADER (HEAD_VD)
loop0p13        55504   61647    6144    3M 83 Linux = DRMREGION_A = VDFS_VOLUME
loop0p14        61664   67807    6144    3M 83 Linux = DRMREGION_B = VDFS_VOLUME
loop0p15        67824  477423  409600  200M 83 Linux = RWAREA = VDFS_VOLUME
loop0p16       477440 4573439 4096000    2G 83 Linux = UNIRO = VDFS_VOLUME
loop0p17      4573456 7487439 2913984  1.4G 83 Linux = UNIRW = VDFS_VOLUME

Nazvy su vytiahnute z rootfs (P7). SERET je nejaky recovery bootloader, SECOS je asi kod pre nejaky sekundarny procesor. V hlavnom procesore bezi Linux (KERNEL0), root filesystem je ROOTFS0.
Ostatne filesystemy su VDFS, co je nejaky zazrak od Samsungu - riesili to tu:
https://labs.withsecure.com/publication ... s-smart-tv

SECUREMAC budu asi nejake hashe alebo tie kluce, ktore sa musia zachovat? Musim pozriet, co je v tych DRMREGION_A a DRMREGION_B.

jandur · #22 Příspěvek od **jandur** » 23 pro 2024, 10:51

OK

zatial som Ti v PM poslal link na upravenu eeprom aby bol ukecanejsi uart log.. skus to testnut a poslat vypis

#23 Příspěvek od **rnbw** » 23 pro 2024, 12:19

Dal som tam ten upraveny obsah, verifikoval a ziadny rozdiel vo vystupe. UART1 je stale v mode "UART or logic or FANet". Asi to bude nejaky iny byte.

Kód: Vybrat vše

KLM4G1FEAC
support DDR52 1.8V
Running DDR52

boot-up

Cold boot
=======================================
Onboot X14H Main (Mar 10 2014 - 15:55:35)
release ver : 1009.B - PRODUCT
etc :  patch 71 : emmc clk  - by yongkyoon81
L1 cache : on
1GB/256MB MMAP version : 0008
=======================================
This U04 : [0] 1,[1] 0,[4] 0,[62] 1
LCD FastLogo Run...
Loading SecureOS auth [success] by h/w sha256, h/w rsa2048
(Ver:0068.0, size:281024bytes)
Loading Kernel >>>[1st]<<< size:3628976byte
UART1 is used to >>>[UART or logic or FANet]<<< mode.
auth [success] by h/w sha256, h/w rsa2048
NEC I2C Write Error addr[0]= 0x00 addr[1]=0x06 !!!!
Jump secos and Kernel....

cpu0 wait for trig : .OK!
jump to kernel

#24 Příspěvek od **rnbw** » 23 pro 2024, 14:11

Pokracovanie analyzy - zatial som pracoval len s neposkodenym dumpom stiahnutym z webu.

S miernymi upravami sa mi podarilo skompilovat vdfs2-tools. Spravna verzia sa urci podla suboru vdfs-tools/include/vdfs*_layout.h a retazca na zaciatku particie - v mojich je "VDFS0001".
vdfs2:

Kód: Vybrat vše

#define VDFS2_LAYOUT_VERSION                    "0001"

vdfs3:

Kód: Vybrat vše

#define VDFS_LAYOUT_VERSION                     "1002"

vdfs4:

Kód: Vybrat vše

#define VDFS4_LAYOUT_VERSION                    "2006"

Je tam nastroj unpack.vdfs2, ktory rozbali filesystem do adresara.
p13 je prazdna
p14:

Kód: Vybrat vše

.
└── backup
    └── sxb
        ├── 19d6366f
        │   └── 93015b43cf71e7c1.sx
        ├── 6a92acbf
        │   ├── 93015b430b80b649.sx
        │   ├── 93015b434d7b0ed3.sx
        │   ├── 93015b4397850ef3.sx
        │   ├── 93015b439c3b34d2.sx
        │   └── 93015b43c0d43576.sx
        ├── 79cd064e
        │   ├── 93015b435ae40c6b.sx
        │   └── 93015b43b9eaec18.sx
        ├── c35b9816
        │   ├── 93015b431626edeb.sx
        │   ├── 93015b435288b49e.sx
        │   ├── 93015b4361b15ca1.sx
        │   ├── 93015b4364062f79.sx
        │   ├── 93015b4394421efe.sx
        │   └── 93015b43cc309cd6.sx
        ├── d075d1bf
        │   ├── 93015b4352319c2e.sx
        │   ├── 93015b43c5624a34.sx
        │   └── 93015b43df8d7f87.sx
        ├── d6302dd4
        │   └── 93015b432c5e2ba9.sx
        ├── d96bcbc2
        │   ├── 93015b4308238445.sx
        │   ├── 93015b431cfad238.sx
        │   ├── 93015b437274cb2a.sx
        │   ├── 93015b439ad79fde.sx
        │   └── 93015b43a76f9011.sx
        ├── e7326ad6
        │   ├── 93015b430d94a775.sx
        │   ├── 93015b43127e3797.sx
        │   ├── 93015b433167a2c2.sx
        │   ├── 93015b4343051b19.sx
        │   ├── 93015b436e7aaea8.sx
        │   ├── 93015b43f9da08ae.sx
        │   └── 93015b43ff4518f6.sx
        └── f5b28cf6
            ├── 93015b4353362cd5.sx
            └── 93015b43ec40aa42.sx

11 directories, 32 files

p15:

Kód: Vybrat vše

.
├── 15MostUsedDir
│   ├── GENERATE_AND_POWEROFF_DATE_FILE.dat
│   └── GENERATE_AND_POWEROFF_DATE_FILE.datb
├── Analyzer
│   └── usbPath
├── appcmhome
│   ├── Disclaimerfile_billing.dat
│   ├── Disclaimerfile_billing.datb
│   ├── Disclaimerfile_main_common.dat
│   ├── Disclaimerfile_main_common.datb
│   ├── Disclaimerfile_nuance.dat
│   ├── Disclaimerfile_nuance.datb
│   ├── Disclaimerfile_pp.dat
│   ├── Disclaimerfile_pp.datb
│   ├── Disclaimerfile_rm.dat
│   ├── Disclaimerfile_rm.datb
│   ├── Disclaimerfile_sub_common.dat
│   ├── Disclaimerfile_sub_common.datb
│   ├── Disclaimerfile_tnc.dat
│   ├── Disclaimerfile_tnc.datb
│   ├── Disclaimerfile_voice_new.dat
│   ├── Disclaimerfile_voice_new.datb
│   ├── Disclaimer_osd_language.dat
│   ├── Disclaimer_osd_language.datb
│   ├── disclamer
│   │   ├── Disclaimerfile_billing.dat
│   │   ├── Disclaimerfile_billing.datb
│   │   ├── Disclaimerfile_main_common.dat
│   │   ├── Disclaimerfile_main_common.datb
│   │   ├── Disclaimerfile_nuance.dat
│   │   ├── Disclaimerfile_nuance.datb
│   │   ├── Disclaimerfile_pp.dat
│   │   ├── Disclaimerfile_pp.datb
│   │   ├── Disclaimerfile_rm.dat
│   │   ├── Disclaimerfile_rm.datb
│   │   ├── Disclaimerfile_sub_common.dat
│   │   ├── Disclaimerfile_sub_common.datb
│   │   ├── Disclaimerfile_tnc.dat
│   │   ├── Disclaimerfile_tnc.datb
│   │   ├── Disclaimerfile_voice_new.dat
│   │   ├── Disclaimerfile_voice_new.datb
│   │   ├── Disclaimer_osd_language.dat
│   │   ├── Disclaimer_osd_language.datb
│   │   ├── homepanel_info1.dat
│   │   ├── homepanel_info1.datb
│   │   ├── homepanel_info2.dat
│   │   └── homepanel_info2.datb
│   ├── homepanel_info1.dat
│   ├── homepanel_info1.datb
│   ├── homepanel_info2.dat
│   ├── homepanel_info2.datb
│   ├── mucl_new01
│   └── mucl_new01b
├── APP_CONFIG
├── BACKUP_IMAGE_VERSION
├── Billing
│   └── BillingServiceYn
├── Blaster_ver
├── Bluetooth_Dev_info
├── camdatabase
├── camdatabaseb
├── cimstatusstorage
├── cimstatusstorageb
├── cip_services_database
├── CT802.abin
├── DAA.ID
├── DebugBackupData
├── dlna_web_root
│   ├── dmr
│   │   ├── AVTransport1.xml
│   │   ├── ConnectionManager1.xml
│   │   ├── icon_detailed.ico -> /mtd_appdata/Images/DMR/icon_detailed.ico
│   │   ├── icon.ico -> /mtd_appdata/Images/DMR/icon.ico
│   │   ├── icon_LRG.jpg -> /mtd_appdata/Images/DMR/icon_LRG.jpg
│   │   ├── icon_LRG.png -> /mtd_appdata/Images/DMR/icon_LRG.png
│   │   ├── icon_SML.jpg -> /mtd_appdata/Images/DMR/icon_SML.jpg
│   │   ├── icon_SML.png -> /mtd_appdata/Images/DMR/icon_SML.png
│   │   ├── RenderingControl1.xml
│   │   └── SamsungMRDesc.xml
│   ├── MainTVServer2
│   │   ├── MainTVAgent21.xml
│   │   └── MainTVServer2Desc.xml
│   ├── rcr
│   │   ├── dial1.xml
│   │   ├── dialreceiver.xml
│   │   ├── MultiScreenService1.xml
│   │   └── RemoteControlReceiver.xml
│   └── SMPConfig
│       └── UPnPConfig.xml
├── eepgbcg.dat
├── eepgbcg.datb
├── FeaturedDir
│   ├── Amazon Video_111299001578-15608.bmp
│   ├── FEATURED_DATA_CONTENT_FILE_
│   ├── FEATURED_DATA_CONTENT_FILE_b
│   ├── Netflix_11101200001-15564.bmp
│   ├── YouTube_111299001912-15612.bmp
│   ├── Фильмы HD_141199000002-15592.bmp
│   └── Яндекс_-15496.bmp
├── FineTune_Digital
├── FineTune_Digitalb
├── fontconfig
│   ├── 2fa0b6998aff80d44eefdafaf3efd4c1-arm.cache-4
│   ├── 4313cb2745a74d5e6838b8895b7f7f77-arm.cache-4
│   ├── e45ad6c9882f36a36b5406c5fa262b57-arm.cache-4
│   ├── e52552a3d6f664772dd03651324f6abb-arm.cache-4
│   └── version.info
├── fonts
│   └── var
│       └── cache_v2
│           └── fontconfig
│               ├── 3d0e4c0db5a017ac5052c30b5f7e961e-arm.cache-4
│               ├── 40d75032718a15411a5bb7b742b8e5dd-arm.cache-4
│               ├── 4313cb2745a74d5e6838b8895b7f7f77-arm.cache-4
│               ├── 571d14d93c57eb0c3635bf23f0924c05-arm.cache-4
│               ├── 57eda8c65b2d6bf525615d1e22533ab9-arm.cache-4
│               ├── 6d090b64bf3da13d8fe4630a2993aadc-arm.cache-4
│               ├── 70e872b27ae3213510f02adfc062de37-arm.cache-4
│               ├── CACHEDIR.TAG
│               ├── e52552a3d6f664772dd03651324f6abb-arm.cache-4
│               └── eff650475998787560d2a6f001fe4ba3-arm.cache-4
├── freesiaDB
│   ├── freesia_ontv_0.db
│   ├── freesia_ontv_1.db
│   └── profile.db
├── GameHub
│   ├── AutoUpdate
│   └── LatestPlay_1
├── Giraffic
│   ├── Data
│   │   ├── Cache.db
│   │   ├── Slices.db
│   │   └── tmp
│   ├── Giraffic.cfg
│   └── Logs
├── ifcfg-br-auto
├── Iptv
│   └── TEMP
│       └── IptvChMgrDB.xml
├── LastUpgradeInfo
├── LastUpgradeInfo_Temp
├── ld.so.cache
├── ld.so.cache.version
├── ld.so.conf
├── LNBSettingsDataBase.dat
├── LNBSettingsDataBase.datb
├── map-AirA
├── map-AirAb
├── map-AirD
├── map-AirDb
├── map-CableA
├── map-CableD
├── map-CableDb
├── map-ChKey
├── map-ChKeyb
├── map-SateD
├── MC8121.abin
├── mheg
│   ├── freesat
│   │   ├── grp
│   │   └── svr
│   └── PST
├── NCD_LastAutoStoreInfo
├── NCD_LastAutoStoreInfob
├── network
│   ├── br_lease_info
│   ├── entropy.dat
│   ├── insmod_qca.sh
│   ├── network_tv_name
│   ├── p2p_dual.conf
│   ├── wfd_allow_deny_list
│   ├── wfd_bg_ready_mode
│   ├── wifi_vendor
│   ├── wpa_sta.conf
│   └── wpa_supplicant_failed
├── network_snap
│   ├── snap_config.dat
│   └── updateSNAP
├── NetworkSpeakerApp
│   ├── Flag.txt
│   ├── MainSpeaker.txt
│   └── SpeakerList.txt
├── NOA
│   └── CountryCode.txt
├── nvramCount
├── partitionDataHashes.dat
├── PartitionSwitch_1_0
├── persistent_cookie.txt
├── PicUpdateFlag
├── PowerOffTime
├── PQ_Data.cbin
├── PrdInfo
├── PTCCABLE
├── PTCCABLEb
├── QURANTINE
├── RadioMap
├── RadioMapb
├── RECOG_DATA
├── reminder.dat
├── reminder.datb
├── remote.info
├── resetInfoHistory
├── resolv.conf
├── RME
├── SatDataBase.dat
├── SaveKeyFile
├── SCT
│   └── netdiag.xml
├── security
│   ├── ck_flag
│   │   ├── A7a26
│   │   ├── A8b37
│   │   ├── F50f0
│   │   ├── Hb51a
│   │   ├── Mb73d
│   │   ├── Nfe47
│   │   ├── Pe89c
│   │   └── W9b1e
│   ├── crt
│   │   ├── cacert.pem
│   │   ├── fkp_configuration.dat
│   │   ├── openssl4client_req.cnf
│   │   ├── rand.dat
│   │   ├── S0_def_model_cert.pem
│   │   ├── S0_def_model_prkey_enc.pem
│   │   ├── S0_model_cert.pem
│   │   ├── S0_Su0_dev_cert.pem
│   │   ├── S0_Su0_dev_CSR.csr
│   │   ├── S0_Su1_dev_cert.pem
│   │   └── S0_Su1_dev_CSR.csr
│   ├── crt_cc
│   ├── decode.txt
│   ├── DTCP
│   ├── fkp.log
│   └── sdrm
│       ├── MSC
│       │   ├── ctl.dat
│       │   ├── Domain.dat
│       │   └── License.dat
│       ├── VD
│       │   ├── ctl.dat
│       │   ├── Domain.dat
│       │   └── License.dat
│       └── version.txt
├── SecurityDUID
├── ServiceProviders
├── ServiceProvidersb
├── session_cookie.txt
├── shadow_debug
├── SoccerCreate
├── SOCIAL
│   ├── CPSorting.txt
│   ├── DAILYMOTION
│   ├── FB
│   │   └── cheng.zhou@samsung.com
│   │       └── Thumbnail
│   ├── FLICKR
│   ├── SocialData.db
│   ├── TELLY
│   ├── TUNEIN
│   │   └── videodata.txt
│   ├── TW
│   │   └── cheng.zhou@samsung.com
│   │       └── Thumbnail
│   └── Y2B
│       ├── Thumbnail
│       └── videodata.txt
├── swu_finalizer_complete_flag
├── testQR.png
├── TransponderDataBase.dat
├── TSIDList
├── TSIDListb
├── UDBCOMMON
├── udhcpd.pid
├── udhcpd_wifidev.conf
├── UPGRADE_FLAG
├── Version.0
├── Version.1
├── VFC_AirA.txt
├── VFC_AirD.txt
├── VFC_CableA.txt
├── VFC_CableD.txt
├── WatchDog00
├── WatchDog01
├── WatchDog02
├── WatchDog03
├── WeakSignalHistory.dat
├── wfd_rtspsource
└── XSERVER_MSGQ

59 directories, 230 files

p16:

Kód: Vybrat vše

.
├── emanual
│   ├── DTV-manual.img
│   ├── DTV-manual.ver
│   └── eManual.ver
├── exe1.img
├── exe2.img
├── rocommon1.img
├── rocommon2.img
├── rocommon_link_1 -> /mtd_uniro/rocommon1.img
├── rocommon_link_2 -> /mtd_uniro/rocommon2.img
├── uncompexe1.img
└── uncompexe2.img

1 directory, 11 files

p17:

Kód: Vybrat vše

.
├── contents
│   ├── bookmark.db
│   ├── device0013.db
│   ├── RecentlyPlayed
...
│   └── RecentlyPlayed.txt
├── rwcommon
│   ├── adobe
│   │   └── stagecraft
│   │       ├── data
│   │       │   ├── config
│   │       │   │   └── ssl
│   │       │   │       └── certs
│   │       │   │           ├── encrypted
│   │       │   │           └── unencrypted
│   │       │   ├── file-cache
│   │       │   └── ssl
│   │       │       └── certs
│   │       │           ├── encrypted
│   │       │           └── unencrypted
│   │       └── font
│   ├── caph
│   ├── common
│   │   ├── 141199000002
│   │   │   └── data.bin
│   │   ├── LogPolicyConfig.xml
│   │   ├── MiniHubIcon
│   │   │   ├── 11101200001.png
│   │   │   ├── 11101228603.png
│   │   │   ├── 11102105201.png
│   │   │   ├── 111199000265.png
│   │   │   ├── 111199000389.png
│   │   │   ├── 111199000746.png
│   │   │   ├── 111299000288.png
│   │   │   ├── 111299000620.png
│   │   │   ├── 111299001578.png
│   │   │   ├── 111299001664.png
│   │   │   ├── 111299001900.png
│   │   │   ├── 111299001912.png
│   │   │   ├── 111299002000.png
│   │   │   ├── 111399000037.png
│   │   │   ├── 111399000136.png
│   │   │   ├── 111399000410.png
│   │   │   ├── 111399001211.png
│   │   │   ├── 111399001956.png
│   │   │   ├── 111399002017.png
│   │   │   ├── 111477000131.png
│   │   │   ├── 111477000186.png
│   │   │   ├── 111477001201.png
│   │   │   ├── 141199000002.png
│   │   │   ├── 20141000001.png
│   │   │   ├── 20142100002.png
│   │   │   ├── 3201410000185.png
│   │   │   ├── 3201411000347.jpg
│   │   │   ├── 3201508004704.png
│   │   │   ├── 3201611010983.png
│   │   │   ├── 3201612011274.png
│   │   │   ├── 3201710014965.png
│   │   │   └── 3201801015538.png
│   │   ├── PSID.KEY
│   │   ├── PSID.KEYb
│   │   ├── TempDownLoad
│   │   │   └── 141199000002
│   │   ├── vudu
│   │   │   └── deactivate
│   │   └── WidgetMgr
│   │       ├── camera.dat
│   │       ├── fullbrowserData.dat
│   │       └── info.xml
│   ├── cookies
│   │   ├── 10140000000.cookie
│   │   ├── 101400000099.cookie
│   │   ├── 111299001912.cookie
│   │   └── 141199000002.cookie
│   ├── emps
│   │   ├── empBillingEx_img
│   │   │   ├── empBillingEx.img
│   │   │   ├── empBillingEx.img.signature
│   │   │   └── empBillingEx.xml
│   │   ├── empBillingExNew
│   │   ├── empBillingExNew_img
│   │   │   └── empBillingExNew.img
│   │   ├── empBrowserCommonPlugin
│   │   ├── empBrowserCommonPlugin_Execute_img
│   │   │   ├── empBrowserCommonPlugin.img
│   │   │   ├── empBrowserCommonPlugin.img.signature
│   │   │   └── empBrowserCommonPlugin.xml
│   │   ├── empCABOX
│   │   ├── empCABOX_img
│   │   │   ├── empCABOX.img
│   │   │   ├── empCABOX.img.signature
│   │   │   └── empCABOX.xml
│   │   ├── empCamera
│   │   ├── empCamera_img
│   │   │   ├── empCamera.img
│   │   │   ├── empCamera.img.signature
│   │   │   └── empCamera.xml
│   │   ├── empDownload
│   │   ├── empDownload_img
│   │   │   ├── empDownload.img
│   │   │   ├── empDownload.img.signature
│   │   │   └── empDownload.xml
│   │   ├── empFSAPI_img
│   │   │   ├── empFSAPI.img
│   │   │   └── empFSAPI.xml
│   │   ├── empGamepadEx
│   │   ├── empGamepadEx_img
│   │   │   ├── empGamepadEx.img
│   │   │   └── empGamepadEx.xml
│   │   ├── empInstaller
│   │   ├── empInstaller_img
│   │   │   ├── empInstaller.img
│   │   │   └── empInstaller.xml
│   │   ├── empNRDP41_img
│   │   │   ├── empNRDP41.img
│   │   │   ├── empNRDP41.img.signature
│   │   │   └── empNRDP41.xml
│   │   ├── empNRDP_img
│   │   │   ├── empNRDP.img
│   │   │   ├── empNRDP.img.signature
│   │   │   └── empNRDP.xml
│   │   ├── empWebBrowser_Execute
│   │   ├── empWebBrowser_Execute_img
│   │   │   ├── empWebBrowser.img
│   │   │   ├── empWebBrowser.img.signature
│   │   │   └── empWebBrowser.xml
│   │   ├── empYTContents
│   │   └── empYTContents_img
│   │       ├── empYTContents.img
│   │       └── empYTContents.xml
│   ├── error.html
│   ├── FACTOR
│   ├── fold.dat
│   ├── fold.datb
│   ├── hdpop
│   │   ├── Broadcaster_Logo.xml
│   │   ├── Common
│   │   │   └── API
│   │   │       ├── Plugin.js
│   │   │       ├── TVKeyValue.js
│   │   │       └── Widget.js
│   │   ├── config.xml
│   │   ├── CSS
│   │   │   └── Main.css
│   │   ├── HD.swf
│   │   ├── index.html
│   │   ├── Javascript
│   │   │   └── Main.js
│   │   ├── pop_version.txt
│   │   └── widget.info
│   ├── history
│   │   └── capture
│   ├── home_page_restored
│   ├── HTML5FILESYSTEM
│   ├── IIC_ER
│   ├── moip
│   │   ├── bin
│   │   │   └── tmp
│   │   │       ├── empCamera
│   │   │       ├── empCamera.xml
│   │   │       ├── EmpSchema.xsd
│   │   │       ├── FalconBC.bin
│   │   │       ├── FalconFW.bin
│   │   │       ├── FalconPlus_BC.bin
│   │   │       ├── FalconPlus_FW.bin
│   │   │       ├── gesticon
│   │   │       │   ├── gesticon_effect_fight.png
│   │   │       │   ├── gesticon_effect_heart.png
│   │   │       │   ├── gesticon_effect_hi.png
│   │   │       │   ├── gesticon_effect_thumb.png
│   │   │       │   └── gesticon_effect_v.png
│   │   │       ├── Heron_Ext_FW.bin
│   │   │       ├── libMoIPCamera_205c.so
│   │   │       ├── libMoIPCamera_2061.so
│   │   │       ├── libMoIPCamera_2065.so
│   │   │       └── ok
│   │   ├── engines
│   │   └── mnt
│   ├── NetSec
│   │   └── daemon.log
│   ├── panel
│   │   ├── HomeConfig.info
│   │   ├── HomeConfig.infob
│   │   ├── running
│   │   ├── updated
│   │   └── valid
│   │       └── samsung.web.info
│   │           ├── homepanel.property -> /mtd_exe/panel/samsung.web.info/homepanel.property
│   │           ├── panel_icon -> /mtd_exe/panel/samsung.web.info/panel_icon
│   │           ├── RESET_FLAG
│   │           ├── samsung.web.info.img -> /mtd_exe/panel/samsung.web.info/samsung.web.info.img
│   │           ├── version.txt -> /mtd_exe/panel/samsung.web.info/version.txt
│   │           └── widget.license -> /mtd_exe/panel/samsung.web.info/widget.license
│   ├── PreRender
│   │   └── UserProfile.bin
│   ├── psa
│   ├── RECOGNITION
│   ├── resetInfo
│   ├── SFSetting.ini
│   ├── smlu
│   ├── stagecraft-data
│   ├── temp
│   │   └── widgets
│   │       └── caph
│   │           └── updated
│   │               └── 102710000000
│   ├── VideoThumb
│   ├── voice_commands
│   │   ├── temp
│   │   ├── temp_mount
│   │   └── work
│   │       ├── config.xml
│   │       └── second
...
│   ├── webkit
│   │   ├── etc
│   │   │   └── WebkitPlugin
│   │   │       └── ServerConfigurations
│   │   │           ├── featurePageVersion.xml
│   │   │           └── searchPageConfig.xml
│   │   ├── nativeui
│   │   │   └── snapshot
│   │   │       └── favicon
│   │   ├── WebBrowser
│   │   │   ├── Cookies
│   │   │   ├── localstorage
│   │   │   └── settings.db
│   │   ├── WebControl
│   │   │   └── localstorage
│   │   │       ├── https_www.youtube.com_0.localstorage.111299001912
│   │   │       ├── https_www.youtube.com_0.localstorage.111299001912-journal
│   │   │       └── StorageTracker.db
│   │   └── WidgetEngine
│   │       └── localstorage
│   └── widgets
│       ├── caph
│       │   ├── 102710000000
│       │   └── 102710000000_img
│       │       ├── 102710000000.img
│       │       ├── 102710000000.img.signature
│       │       └── widget.license
│       ├── framework
│       │   ├── 501410000000
│       │   └── 501410000000_img
│       ├── manager
│       │   ├── 10140000000
│       │   ├── 10140000000_img
│       │   │   ├── config.xml.spm
│       │   │   └── widget.license
│       │   ├── w.data
│       │   └── ww.data
│       └── normal
...
└── swu
    ├── autoupgradetimers.dat
    ├── download-temp
    ├── OURegistry
    ├── SHOPUSERMODE
    ├── STB
    ├── SWU_TimeInfo
    └── WAKEUP_TIMER_INDEX

156 directories, 585 files

jandur · #25 Příspěvek od **jandur** » 23 pro 2024, 14:40

sorry moja chyba, to je tak ked sa robi po pamati z domu. v PM mas link na novu upravu eeprom.. u X14-stky treba prepisat 2 byte.. u X12 staci iba jeden

toto v boote neni košér: NEC I2C Write Error addr[0]= 0x00 addr[1]=0x06 !!!! , značí to problem na I2C zbernici..
kazdopadne vdsf nemusius rozoberat, je to irelevantne. uz som v praci, odovzdam par teliek a poslem ti upraveny user, myslim ze to je zo 6200 coz je nepodstatne, pretoze napln eMMC je ta ista, liši sa len 25q40 a obsah eeprom

#26 Příspěvek od **rnbw** » 23 pro 2024, 15:14

Pokracujem analyzou mojho dumpu:
SERET aj SECOS su OK - obe kopie zhodne a rovnake ako z dumpu z webu.

Oba KERNELy su poskodene!
Podla hlavicky by mali byt zhodne ako v dumpe z webu, ale kazdy je iny:

Kód: Vybrat vše

u-boot legacy uImage, Linux-3.8.13, Linux/ARM, OS Kernel Image (Not compressed), 3628976 bytes, Tue Apr 25 05:34:33 2017, Load Address: 0x21708000, Entry Point: 0x21708000, Header CRC: 0xBDA93A4D, Data CRC: 0x7C86041C

KERNEL1 ma len namiesto jedneho nuloveho bloku blok AAh. Zaujimave je, ze dlzka je 816B - nedava to ziadny zmysel. Je to ale az na offsete 003763f0, takze za koncom - teoreticky by to mohlo bootovat.
KERNEL0 je poskodeny viac, ma mnoho casti vynulovanych. Ak sa to pokusa bootovat tento kernel, tak je jasne, ze to nemoze fungovat.

ROOTFS0 aj ROOTFS1 su OK - rovnake ako z dumpu z webu.

Zaujimave je, ze aj p13 obsahuje data. Mozno je to v dumpe z webu naschval zmazane:

Kód: Vybrat vše

.
└── security
    ├── di.dat
    ├── du.dat
    ├── keyfile2.dat
    ├── sboot
    ├── sxb
    │   ├── 0f426ca5
    │   │   └── 93015b4386c8ed5b.sx
    │   ├── 19d6366f
    │   │   └── 93015b43cf71e7c1.sx
    │   ├── 6a92acbf
    │   │   ├── 93015b430b80b649.sx
    │   │   ├── 93015b434d7b0ed3.sx
    │   │   ├── 93015b4397850ef3.sx
    │   │   ├── 93015b439c3b34d2.sx
    │   │   └── 93015b43c0d43576.sx
    │   ├── 79cd064e
    │   │   ├── 93015b435ae40c6b.sx
    │   │   └── 93015b43b9eaec18.sx
    │   ├── a32f9f00
    │   │   └── 93015b434609c4b1.sx
    │   ├── b6edf067
    │   │   └── 93015b430187d1e7.sx
    │   ├── bfa654d2
    │   │   ├── 93015b4361d0da64.sx
    │   │   ├── 93015b438d88e96d.sx
    │   │   └── 93015b439141e57e.sx
    │   ├── c35b9816
    │   │   ├── 93015b431626edeb.sx
    │   │   ├── 93015b435288b49e.sx
    │   │   ├── 93015b4361b15ca1.sx
    │   │   ├── 93015b4364062f79.sx
    │   │   ├── 93015b4394421efe.sx
    │   │   └── 93015b43cc309cd6.sx
    │   ├── d075d1bf
    │   │   ├── 93015b4352319c2e.sx
    │   │   ├── 93015b43c5624a34.sx
    │   │   └── 93015b43df8d7f87.sx
    │   ├── d419dfbd
    │   │   ├── 93015b435495d95b.sx
    │   │   ├── 93015b4378d1b860.sx
    │   │   ├── 93015b437d652b7a.sx
    │   │   ├── 93015b438f1d62aa.sx
    │   │   └── 93015b43c33902e7.sx
    │   ├── d6302dd4
    │   │   └── 93015b432c5e2ba9.sx
    │   ├── d96bcbc2
    │   │   ├── 93015b4308238445.sx
    │   │   ├── 93015b431cfad238.sx
    │   │   ├── 93015b437274cb2a.sx
    │   │   ├── 93015b439ad79fde.sx
    │   │   └── 93015b43a76f9011.sx
    │   ├── e7326ad6
    │   │   ├── 93015b430d94a775.sx
    │   │   ├── 93015b43127e3797.sx
    │   │   ├── 93015b433167a2c2.sx
    │   │   ├── 93015b4343051b19.sx
    │   │   ├── 93015b436e7aaea8.sx
    │   │   ├── 93015b43b4a10772.sx
    │   │   ├── 93015b43f9da08ae.sx
    │   │   └── 93015b43ff4518f6.sx
    │   └── f5b28cf6
    │       ├── 93015b4353362cd5.sx
    │       └── 93015b43ec40aa42.sx
    └── tee_state.dat

16 directories, 49 files

p15 je poskodena - unpack skonci s chybou:

Kód: Vybrat vše

unpack.vdfs2: lib/disk_op.c:397: vdfs2_read_blocks: Assertion `actual_offset < sb_info->image_size' failed.

p16 a p17 sa rozbalili bez chyby, co ale neznamena, ze musia byt OK.

jandur · #27 Příspěvek od **jandur** » 23 pro 2024, 16:07

tym naozaj nic neziskas, ale ako zabavka je to poucne.. tu mas link na moj dump s tvojimi klucmi: https://mega.nz/file/quw0XDjR#CKtZDJ6nz ... -7Da_m74yQ

mas to OK, aspon to co som nasiel v logu:

Boot configuration bytes [PARTITION_CONFIG: 0x48]
Boot Partition 1 enabled

H/W reset function [RST_N_FUNCTION]: 0x01

Partitioning Support [PARTITIONING_SUPPORT]: 0x07

Boot write protection status registers [BOOT_WP_STATUS]: 0x0a

vyskusaj, daj info

#28 Příspěvek od **rnbw** » 23 pro 2024, 16:24

Dakujem, stahujem. Zatial som vyskusal druhu verziu upravy EEPROM. (Ne)funguje rovnako ako prva.

jandur · #29 Příspěvek od **jandur** » 23 pro 2024, 16:43

vyslusaj ten user, ak by nesedeli kluce alebo tv sa spraval nejako divne vymazem komplet config, desik mam podrobny servis manual aj s nastavenim poloziek v serv. menu

#30 Příspěvek od **rnbw** » 23 pro 2024, 17:30

Zatial dakujem. Nemam doma panel, tak skusanie musim obmedzit len na UART a blikanie LED.