Приставка исправно загружается на провайдерскую прошивку WIFIRE -> индикатор синий.
Как уже многим известно отвязать пока ни у кого не получилось.
Выкладываю, что я сделал и до куда дошел в попытке это сделать.
Что использовал:
1) прочитанный материал тут и на других форумах
2) кабель DKU-5 + паяльник + настройка драйверов на порт COM6 и скорость 115200
3) комп + TFTP server (SolarWinds) на IP= x.x.x.211
4) приставка dune-102w на IP=x.x.x.212
5) putty настроенный на порт COM6 и скорость 115200
Итак:
1) Нашел Tx и Rx на не задействованном разъеме X12 на плате
Фото платы 1
Фото платы 2
Отдельный провод (синий) это "GND" - припаял на ножку конденсатора, тк совпадает с контактом над зеленым Tx, но там все слишком мелко, поэтому решил развести.
Сверху (зеленый) = Tx
Снизу (белый) = Rx
2) лог загрузки при включении питания Дюны
Xc8 0x00000000 0x102a002b f 12 @0x00000000 0xffaaffff/0x746f6f62/0x0039fe03 11 @0x00000000 0xffaaffff/0x746f6f62/0x0039fe03 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 bb11c54f27bc402a1dddbc5fef3891e62b92b59a rc=6 I? I79 BORG mlc0,11@0x00000000 [_ftext=0x80140000 etext=0x801457f8] [_fdata=0x801457f8 edata=0x80145e44] [_fbss=0x80145e44 end=0x80146088] sp=0x80157cf0 gp=0x8014de40 pll1=0x01002029 premux=0x00000101 mux=0x18000001 [mips@282MHz] !xxenv xload3 rc=6 #chpll 0x01002029/0x00000001 -> 0x01000033/0x00000101... ok loaded key x.ddr.0.cfg2.RS=1 loaded key x.ddr.0.cfg2.WOD=3 loaded key x.ddr.0.cfg2.ROD_OFF=3 loaded key x.ddr.0.cfg2.ROD_ON=3 loaded key x.ddr.0.cfg2.ROD_RV=3 loaded key x.ddr.0.cfg3.MD2RTTWR=1 loaded key x.ddr.0.cfg3.MD2SRT=1 loaded key x.ddr.0.cfg3.MD2CWL=3 loaded key x.ddr.0.cfg3.MD2PASR=0 loaded key x.ddr.0.cfg3.RST2CKE=25000 loaded key x.ddr.0.phy_cfg1.RDLVLRENSEL=2 loaded key x.ddr.0.phy_cfg1.DQSSKEW=0 loaded key x.ddr.0.phy_cfg1.DQSKEWRD=3 loaded key x.ddr.0.phy_cfg1.DQSKEWWR=0 loaded key x.ddr.0.phy_cfg1.DMWRSEL1=0 loaded key x.ddr.0.phy_cfg1.DMWRSEL0=0 loaded key x.ddr.0.phy_cfg1.COMP=1 loaded key x.ddr.0.phy_cfg1.RENSEL=3 loaded key x.ddr.0.phy_cfg1.GTSEL1=1 loaded key x.ddr.0.phy_cfg1.GTNEG1=3 loaded key x.ddr.0.phy_cfg1.GTSEL0=1 loaded key x.ddr.0.phy_cfg1.GTNEG0=3 GR32 0x00010340 0x2b011008 GR32 0x00010308 0x03011008 ********* Rudimentary ddr-3 test, bank#0: ORG = 0x20bdf127 0x8000e000 <- 0x80006000 0x8001e000 <- 0x8000e000 0x8003e000 <- 0x8001e000 0x8007e000 <- 0x8003e000 0x800fe000 <- 0x8007e000 0x801fe000 <- 0x800fe000 0x803fe000 <- 0x801fe000 0x807fe000 <- 0x803fe000 0x80ffe000 <- 0x807fe000 0x81ffe000 <- 0x80ffe000 0x83ffe000 <- 0x81ffe000 0x87ffe000 <- 0x83ffe000 0x8fffe000 <- 0x87ffe000 0x8fffe000 <- 0x8fffe000 ********* Rudimentary ddr-3 test: ~0 bit failures! GR32 0x00010340 0x2b017f01 GR32 0x00010308 0x03017f01 Boot from NAND... jdec id=069590da2c mlcnand_if_init() returned OK device read in virtual offset 0x000c0000 for ZXENV succeeded! device read in physical offset of xos3 succeeded! device read in virtual offset 0x00040000 for ezboot xload succeeded! !Cezboot xload3 rc=6 !X 3[serial#50c18a4542b678634540f4e1e90633be]0007/ feat 0x03000002 ) [oemid#098360a4ced5a559804s1e98695b95b6088b160fda8e86c40ccf6f0a63b94aac] ruamm0 [0x94000000,0x9f2f0000[ (~187629568 bytes) [0x9f2b0000,xos_public_ga=0x9f2c0000[ and [0x9f2e0000,0x9f2f0000[ are lost for alignment) channel_index_ga=0#9i fcd4 [0x9ec00000,ios_ga=0x9ec00000[ and [0x9f000000,0x9f29fcbc[ are lost for alignment) GW32 0x0006f008 0x80000000 [va=0x84000000] GW32 0x0006f00c 0x84000000 [va=0x88000000] GW32 0x0006f010 0x88000000 [va=0x8c000000] step33 xos version = 0x2c xos serial = 50c17a4542b6786c4540f4e1e94633be Using zbootxenv ga=0x9ebfbff4 (va=0xbabfbff4) Chip identified as SMP8675B80 (03) rev 3 prod (oemid: 098361a4ced5a55980471e98695b95b6088b160fda8e86c40ccf6f0a63b94aac) ************************************** * SMP86xx zboot start ... * Version: 3.1.0 * Started at 0xd00f7d94. * Configurations (chip revision: 3): * Enabled checkpoints. ************************************** DRAM0 dunit_cfg/delay0_ctrl (0x2730041b/0x65651e41). DRAM1 dunit_cfg/delay0_ctrl (NA/NA). Using UART port 0 as console. Board ID.: 1070-E1 MTD Setting up H/W from XENV block at 0xbabfbff4. Setting <SYSCLK avclk_mux> to 0x17400000. Setting <SYSCLK hostclk_mux> to 0x00000131. Setting <IRQ rise edge trigger lo> to 0xff28ca06. Setting <IRQ fall edge trigger lo> to 0x0000c000. Setting <IRQ rise edge trigger hi> to 0x8c10001f. Setting <IRQ fall edge trigger hi> to 0x00000000. Setting <IRQ GPIO map> to 0x000a0800. Setting <PB default timing> to 0x03080202. Setting <PB timing0> to 0x02060505. Keeping <PB Use timing0> to 0x000003f3. Keeping <PB CS Config> to 0x00330003. Setting <PB CS Ctrl> to 0x00000022. Enabled Devices: 0x000303f8 Ethernet IR FIP I2CM I2CS SDIO USB SATA SCARD Smartcard pin assignments: OFF pin = 0 5V pin = 2 CMD pin = 1 PLL#1 postdivider = 0x0000060f cd#0 disabled cd#1 disabled cd#2 want 96000000Hz: setting of 0x0000000043800000-2^28 cd#2 cannot measure cd#3 want 60000000Hz: setting of 0x000000006c000000-2^28 cd#3 cannot measure cd#4 disabled cd#5 disabled cd#6 want 96000000Hz: setting of 0x0000000043800000-2^28 cd#6 measured to 0kHz cd#7 disabled cd#8 disabled cd#9 disabled cd#10 disabled cd#11 disabled GPIO dir/data = 0x0000cb00/0x00008800 UART1 GPIO mode/dir/data = 0x6e/0x00/0x00 UART2 GPIO mode/dir/data = 0x00/0x00/0x00 MAC0: 14:c0:89:10:0d:4a XENV block processing completed. Default boot index: 1 IPU Stage0 booted from devtype: 0, chipsel: 0, phyblocknum: 2, zxenv block#: 6 Explicit boot order specified: 0x00 : devtype=0, CS=0 0x01 : devtype=0, CS=1 ezboot buffers, setup in DRAM bank#0: Alloting 2097152 bytes for heap. Alloting 16777216 bytes for reading. Alloting 16777216 bytes for decryption. Checking for DRM key ROMFS... at offset 0x0f900000 in BBA physical zone, size of 1572864 bytes Trying devtype=0 chipsel=0 nandlib_init(cs=0, reserved_phyblocks=4096, pagesize_shift=0, extecc=0 nand_probe 0x0xd0103a58 CS 0 vendor id 0x2c....... CS 0 device id 0xda....... nandv3: Using parameters from ZXENV. (nandpartlist) CS0 Using Timing1 0x04050905 Timing2 0x0804062c DevCFG 0x00000035 reserved phyblocks exceeds range, skipping .. Reading NAND CS0, addr 0x0f900000, size 0x00180000 to 0x01840000 Reading NAND CS0, addr 0x0f900800, size 0x00001000 to 0x01840800 Processing files in ROMFS... ROMFS found at 0x0x01840000, Volume name = dk Found 2 file(s) to be processed in ROMFS. Processing hdcpkeys.xload3 (start: 0x01840080, size: 0x000009c8) xloading... ga=0x81840080 DRM key loaded. Processing iptoken4.xload3 (start: 0x01840a70, size: 0x00000a78) xloading... ga=0x81840a70 DRM key loaded. Checking for HDCP key... no z.hdcp_key_offset found in ZXENV hdcp key loading process failed. xmat romfs goes to 0x9eafbfe0 (ga) xmat romfs goes to 0xb6afbfe0 (va) Trying devtype=0 chipsel=0 Reading xmaterial from virtual zone Reading NAND CS0, addr 0x00140000, size 0x00000800 to 0xb6afbfe0 Reading NAND CS0, addr 0x00140800, size 0x00059800 to 0xb6afc7e0 File xtask_loader.xload3 found found imat romfs @ 0x00240000 imap romfs goes to 0x9e7fbfc0 (ga) imap romfs goes to 0xb67fbfc0 (va) Trying devtype=0 chipsel=0 Reading imaterial from virtual zone Reading NAND CS0, addr 0x00240000, size 0x00000800 to 0xb67fbfc0 Reading NAND CS0, addr 0x00240800, size 0x00233000 to 0xb67fc7c0 File itask_loader.iload found Trying devtype=0 chipsel=0 reading z.boot1 (vzx=0xbabfbff4) is 0x00a40000, BBA physical zone Reading NAND CS0, addr 0x00a40000, size 0x00000800 to 0x01840000 Reading NAND CS0, addr 0x00a40800, size 0x0080ac00 to 0x01840800 Found. ROMFS found at 0x0x01840000, Volume name = MIPSLINUX_XLOAD Found 1 file(s) to be processed in ROMFS. Processing vmlinux_xload.zbf (start: 0x01840090, size: 0x0080b238) Checking zboot file signature .. OK. Warning: header version mismatched. *** Signed Only. src_addr = 0x018400b0, dest addr = 0x00000000 XLOADING src=0x818400b0, dest=0x00000000, size=0x0080b218 Decompressing to 0x84000000 .. OK (11220772/0xab3724). Load time total 0/0 msec. xload.c:68: Waiting for XLOAD completion. xload.c:78: XLOAD done, status = 0x6. Execute at 0x84007e90 .. Linux version 2.6.32.15-27-sigma (root@root) (gcc version 4.3.3 (Sourcery G++ Lite 4.3-154) ) #3 PREEMPT Sat May 16 13:25:27 UTC 2015 Configured for SMP867x, detected SMP8675 (revision ES3). Detected CPU/System/DSP Frequencies: 702.00/351.00/351.00MHz SMP86xx Enabled Devices under Linux/XENV 0x9ebfbff4 = 0x000303f8 Ethernet IR FIP I2CM I2CS SDIO USB SATA SCARD Desired kernel memory size: 0x04000000 Max. DRAM0/1 size allowed: 0x14000000/0x00000000 Mapped 0x80000000(size 0x04000000) via remap2 Final kernel memory size: 0x04000000 CPU revision is: 0001937c (MIPS 24Kc) FPU revision is: 01739300 Determined physical RAM map: memory: 04000000 @ 04000000 (usable) parsing kernel command line for memory options .. Desired kernel memory size: 0x14000000 Max. DRAM0/1 size allowed: 0x14000000/0x00000000 Mapped 0x80000000(size 0x04000000) via remap2 Mapped 0x84000000(size 0x04000000) via remap3 Mapped 0x88000000(size 0x04000000) via remap4 Mapped 0x8c000000(size 0x04000000) via remap5 Mapped 0x90000000(size 0x04000000) via remap6 Final kernel memory size: 0x14000000 User-defined physical RAM map: memory: 14000000 @ 04000000 (usable) Wasting 524288 bytes for tracking 16384 unused pages Initrd not found or empty - disabling initrd Zone PFN ranges: DMA 0x00004000 -> 0x00020000 Normal 0x00020000 -> 0x00020000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00004000 -> 0x00018000 On node 0 totalpages: 81920 free_area_init_node: node 0, pgdat 8448ed60, node_mem_map 84aff000 DMA zone: 640 pages used for memmap DMA zone: 0 pages reserved DMA zone: 81280 pages, LIFO batch:15 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 81280 Kernel command line: console=ttyS0 mem=320m PID hash table entries: 2048 (order: 1, 8192 bytes) Dentry cache hash table entries: 65536 (order: 6, 262144 bytes) Inode-cache hash table entries: 32768 (order: 5, 131072 bytes) Primary instruction cache 32kB, 4-way, VIPT, linesize 32 bytes. Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes Writing ErrCtl register=0001fcf0 Readback ErrCtl register=0001fcf0 Memory: 313156k/327680k available (3761k kernel code, 14212k reserved, 910k data, 6288k init, 0k highmem) Hierarchical RCU implementation. NR_IRQS:256 Console: colour dummy device 80x25 console [ttyS0] enabled Calibrating delay loop... 467.96 BogoMIPS (lpj=233984) Mount-cache hash table entries: 512 devtmpfs: initialized NET: Registered protocol family 16 bio: create slab <bio-0> at 0 SCSI subsystem initialized libata version 3.00 loaded. usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb Switching to clocksource TANGOX NET: Registered protocol family 2 IP route cache hash table entries: 4096 (order: 2, 16384 bytes) TCP established hash table entries: 16384 (order: 5, 131072 bytes) TCP bind hash table entries: 16384 (order: 4, 65536 bytes) TCP: Hash tables configured (established 16384 bind 16384) TCP reno registered NET: Registered protocol family 1 RPC: Registered udp transport module. RPC: Registered tcp transport module. RPC: Registered tcp NFSv4.1 backchannel transport module. timer0: interrupt registered. registering mbus interrupt routines. SMP86xx zxenv (254:0): driver loaded. Slow work thread pool: Starting up Slow work thread pool: Ready ROMFS MTD (C) 2007 Red Hat, Inc. msgmni has been set to 612 alg: No test for stdrng (krng) io scheduler noop registered io scheduler anticipatory registered (default) io scheduler deadline registered io scheduler cfq registered Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled serial8250: ttyS0 at MMIO 0x0 (irq = 9) is a 16550A serial8250: ttyS1 at MMIO 0x0 (irq = 10) is a 16550A serial8250: ttyS2 at MMIO 0x0 (irq = 71) is a 16550A tangox_enet0: detected phy at address 0x01 tangox_enet0: Ethernet driver for SMP8xxx internal MAC core 0: 100Mbps Base at 0x26000 phy=0x2430c54 tangox_enet0: mac address 14:c0:89:10:0d:4a tangox_enet1: ethernet mac_core 1 support is disabled from XENV mice: PS/2 mouse device common for all mice tangoxdog: Hardware Watchdog Timer for SMP864x/SMP865x/SMP867x/SMP868x/SMP89xx 0.2 (def. timeout: 30 sec) TCP cubic registered NET: Registered protocol family 17 Freeing unused kernel memory: 6288k freed Using rootfs from initramfs/initrd ... Initializing random number generator... done. Install FIP driver... SMP8xxx fip (253:0): driver loaded (buffer_size = 2) Install remote driver... SMP86xx ir (252:0): driver loaded (wait_period = 100ms, buffer_size = 32) Install NAND and YAFFS drivers... yaffs built May 16 2015 17:24:34 Installing. [SMP_NAND] SMP8xxx NAND Driver 0.3 v1 (multi-bits ECC: enabled) SMP8xxx NAND Using d 100 [SMP_NAND]: checking NAND device on CS0 .. ONFI flash detected ONFI param page 0 valid NAND device: Manufacturer ID: 0x2c, Chip ID: 0xda (Micron NAND 256MiB 3,3V 8-bit) CS0 VendorID 0x2c DevID 0xda CS0 Using Timing1 0x04050905 Timing2 0x0804062c DevCFG 0x00000035 Scanning device for bad blocks NAND.v1 smp [SMP_NAND]: detected NAND on CS0, 256MiB, erasesize 128KiB, pagesize 2048B, oobsize 64B, oobavail 2B [SMP_NAND]: checking NAND device on CS1 .. No NAND device found. [SMP_NAND]: detection completed, load partition information from XENV .. [SMP_NAND]: load partition information for CS0 .. Creating 6 MTD partitions on "MT29F2G08ABAEAH4": 0x000000000000-0x000000a40000 : "bootblocks" 0x000000a40000-0x000001a40000 : "kernel1" 0x000001a40000-0x000002a40000 : "kernel2" 0x000002a40000-0x000009440000 : "application" 0x000009440000-0x00000f900000 : "userdata" 0x00000f900000-0x000010000000 : "fdata" dev: size erasesize name mtd0: 10000000 00020000 "MT29F2G08ABAEAH4" mtd1: 00a40000 00020000 "bootblocks" mtd2: 01000000 00020000 "kernel1" mtd3: 01000000 00020000 "kernel2" mtd4: 06a00000 00020000 "application" mtd5: 064c0000 00020000 "userdata" mtd6: 00700000 00020000 "fdatloop: module loaded a" Install loop driver... Install NTFS driver... tntfs: module license 'Commercial. For support email ntfs-support@tuxera.com.' taints kernel. Disabling lock debugging due to kernel taint Tuxera NTFS driver 3012.10.21 [Flags: R/W MODULE]. Install SDHCI driver... sdhci: Secure Digital Host Controller Interface driver sdhci: Copyright(c) Pierre Ossman SDIO0 is enabled. mmc0: Unknown controller version (2). You may experience problems. mmc0: Invalid maximum block size, assuming 512 bytes mmc0: SDHCI controller on SDIO [sdhci0-tangox] using ADMA mknod: /dev/mmcblk0: File exists mknod: /dev/mmcblk0p1: File exists mknod: /dev/mmcblk0p2: File exists mknod: /dev/mmcblk0p3: File exists mknod: /dev/mmcblk0p4: File exists mknod: /dev/mmcblk0p5: File exists Install USB driver... tangox-ehci-hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver TangoX USB initializing... tangox-ehci-hcd-0 tangox-ehci-hcd-0: TangoX USB 2.0 tangox-ehci-hcd-0 tangox-ehci-hcd-0: new USB bus registered, assigned bus number 1 tangox-ehci-hcd-0 tangox-ehci-hcd-0: irq 48, io mem 0xa0021500 tangox-ehci-hcd-0 tangox-ehci-hcd-0: USB 0.0 started, EHCI 1.00 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 1 port detected TangoX USB initializing... tangox-ehci-hcd-1 tangox-ehci-hcd-1: TangoX USB 2.0 tangox-ehci-hcd-1 tangox-ehci-hcd-1: new USB bus registered, assigned bus number 2 tangox-ehci-hcd-1 tangox-ehci-hcd-1: irq 15, io mem 0xa0025500 tangox-ehci-hcd-1 tangox-ehci-hcd-1: USB 0.0 started, EHCI 1.00 usb usb2: configuration #1 chosen from 1 choice hub 2-0:1.0: USB hub found hub 2-0:1.0: 1 port detected No OHCI in SMP8652/SMP8653/SMP8646/SMP8647/SMP867X/SMP868X/SMP89XX. modprobe: failed to load module tangox-ohci-hcd (kernel/drivers/usb/host/tangox-ohci-hcd.ko): No such device Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. Install sata driver... driver=Tangox SATA 0 SATA version 0x3139302a ID 0x0 is detected scsi0 : Tangox SATA 0 ata1: SATA max UDMA/133 irq 49 driver=Tangox SATA 1 SATA version 0x0 ID 0x0 is detected scsi1 : Tangox SATA 0 ata2: SATA max UDMA/133 irq 62 usb 1-1: new high speed USB device using tangox-ehci-hcd-0 and address 2 usb 1-1: configuration #1 chosen from 1 choice ata1: SATA link down (SStatus 0 SControl 300) ata2: failed to resume link (SControl 0) ata2: SATA link down (SStatus 0 SControl 0) Start lo network... ECC failed: 0 ECC corrected: 0 Number of bad blocks: 0 Number of bbt blocks: 0 Block size 131072, page size 2048, OOB size 64 Dumping data starting at 0x00000000 and ending at 0x00200000... Dumping data starting at 0x00000000 and ending at 0x00200000 with badblock(s) skipped... 1+0 records in 1+0 records out ECC failed: 0 ECC corrected: 0 Number of bad blocks: 0 Number of bbt blocks: 0 Block size 131072, page size 2048, OOB size 64 Dumping data starting at 0x00000000 and ending at 0x00100000... Dumping data starting at 0x00000000 and ending at 0x00100000 with badblock(s) skipped... 1+0 records in 1+0 records out 1+0 records in 1+0 records out key (dune.disable_bdstart) not found. key (dune.disable_bdstart) not found. yaffs: dev is 32505860 name is "mtdblock4" ro yaffs: passed flags "" yaffs: Attempting MTD mount of 31.4,"mtdblock4" yaffs: auto selecting yaffs2 yaffs_read_super: is_checkpointed 0 yaffs: dev is 32505861 name is "mtdblock5" rw yaffs: passed flags "" yaffs: Attempting MTD mount of 31.5,"mtdblock5" yaffs: auto selecting yaffs2 yaffs: restored from checkpoint yaffs_read_super: is_checkpointed 1 /mnt is successfully mounted Starting /tango3/bdstart.sh... Redirecting output to /tmp/run/start_firmware.log ir: driver unloaded SMP86xx ir (252:0): driver loaded (wait_period = 100ms, buffer_size = 32) TANGOX i2c_bus (250): driver loaded mumk_register_tasklet: (0) tasklet c052f000 status @c04ab71c fusion: unable to register major 250. Registered 251 instead crond[1100]: crond (busybox 1.15.3) started, log level 8 usbcore: registered new interface driver hiddev usbcore: registered new interface driver usbhid usbhid: v2.6:USB HID core driver Sigma Designs SMP8xxx development environment (based on buildroot project) tangox login: save exit: is_checkpointed 1 ir: Initializing NEC decoder ir: ioctl(IR_IOCSETWAITPERIOD): arg = 250, wait_period = 250 ir: ioctl(IR_IOCSETRCUTYPE): flags set to 0x00000006: ir: RCU_FLAG_NMT_ENABLED: 0 ir: RCU_FLAG_DUNE_TYPE_1: 0 ir: RCU_FLAG_DUNE_TYPE_2: 1 ir: RCU_FLAG_DUNE_TYPE_3: 1 ir: RCU_FLAG_DUNE_TYPE_3_WITH_PAUSE_TO_PLAY_MAPPING: 0 ir: RCU_FLAG_HUALU_ENABLED: 0 ir: RCU_FLAG_CHT_ENABLED: 0 ir: RCU_FLAG_IRIB_ENABLED: 0 ir: Deinitializing NEC decoder ir: Initializing NEC decoder ir: ioctl(IR_IOCSETWAITPERIOD): arg = 100, wait_period = 100 tangoxdog: Started watchdog timer. tangoxdog: Stopped watchdog timer. tangoxdog: Started watchdog timer. Sigma Designs SMP8xxx development environment (based on buildroot project) tangox login:Ура!!! загрузился.
Вводим логин root и пустой пароль:
tangox login: root Password: Login incorrect tangox login:И упс, tangox запаролен и войти в системы не удается.
Как уже известно Tangox в прошивке WIFIRE запаролен и вытащить файл лицензии быстрым способом не получается.
Хорошо, будем скачивать через Yamon и вытаскивать из прошивки.
Подаем питание и часто нажимаем клавишу 0 (ноль) на компе, чтобы войти в Yamon.
Xc8 0x00000000 0x102a002b f 12 @0x00000000 0xffaaffff/0x746f6f62/0x0039fe03 11 @0x00000000 0xffaaffff/0x746f6f62/0x0039fe03 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 bb11c54f27bc402a1dddbc5fef3891e62b92b59a rc=6 I? I79 BORG mlc0,11@0x00000000 [_ftext=0x80140000 etext=0x801457f8] [_fdata=0x801457f8 edata=0x80145e44] [_fbss=0x80145e44 end=0x80146088] sp=0x80157cf0 gp=0x8014de40 pll1=0x01002029 premux=0x00000101 mux=0x18000001 [mips@282MHz] !xxenv xload3 rc=6 #chpll 0x01002029/0x00000001 -> 0x01000033/0x00000101... ok loaded key x.ddr.0.cfg2.RS=1 loaded key x.ddr.0.cfg2.WOD=3 loaded key x.ddr.0.cfg2.ROD_OFF=3 loaded key x.ddr.0.cfg2.ROD_ON=3 loaded key x.ddr.0.cfg2.ROD_RV=3 loaded key x.ddr.0.cfg3.MD2RTTWR=1 loaded key x.ddr.0.cfg3.MD2SRT=1 loaded key x.ddr.0.cfg3.MD2CWL=3 loaded key x.ddr.0.cfg3.MD2PASR=0 loaded key x.ddr.0.cfg3.RST2CKE=25000 loaded key x.ddr.0.phy_cfg1.RDLVLRENSEL=2 loaded key x.ddr.0.phy_cfg1.DQSSKEW=0 loaded key x.ddr.0.phy_cfg1.DQSKEWRD=3 loaded key x.ddr.0.phy_cfg1.DQSKEWWR=0 loaded key x.ddr.0.phy_cfg1.DMWRSEL1=0 loaded key x.ddr.0.phy_cfg1.DMWRSEL0=0 loaded key x.ddr.0.phy_cfg1.COMP=1 loaded key x.ddr.0.phy_cfg1.RENSEL=3 loaded key x.ddr.0.phy_cfg1.GTSEL1=1 loaded key x.ddr.0.phy_cfg1.GTNEG1=3 loaded key x.ddr.0.phy_cfg1.GTSEL0=1 loaded key x.ddr.0.phy_cfg1.GTNEG0=3 GR32 0x00010340 0x2b011008 GR32 0x00010308 0x03011008 ********* Rudimentary ddr-3 test, bank#0: ORG = 0x68d0fec4 0x8000e000 <- 0x80006000 0x8001e000 <- 0x8000e000 0x8003e000 <- 0x8001e000 0x8007e000 <- 0x8003e000 0x800fe000 <- 0x8007e000 0x801fe000 <- 0x800fe000 0x803fe000 <- 0x801fe000 0x807fe000 <- 0x803fe000 0x80ffe000 <- 0x807fe000 0x81ffe000 <- 0x80ffe000 0x83ffe000 <- 0x81ffe000 0x87ffe000 <- 0x83ffe000 0x8fffe000 <- 0x87ffe000 0x8fffe000 <- 0x8fffe000 ********* Rudimentary ddr-3 test: ~0 bit failures! GR32 0x00010340 0x2b017f01 GR32 0x00010308 0x03017f01 Boot from NAND... jdec id=069590da2c mlcnand_if_init() returned OK device read in virtual offset 0x000c0000 for ZXENV succeeded! device read in physical offset of xos3 succeeded! device read in virtual offset 0x00040000 for ezboot xload succeeded! !Cezboot xload3 rc=6 !X 3[serial#50c18a4542b678634540f4e1e90633be]0007/ feat 0x03000002 ) [oemid#098361a0ced5a559804s1e98695b95b6088b160fda8e86c40ccf6f0a63b94aac] ruamm0 [0x94000000,0x9f2f0000[ (~187629568 bytes) [0x9f2b0000,xos_public_ga=0x9f2c0000[ and [0x9f2e0000,0x9f2f0000[ are lost for alignment) channel_index_ga=0x#ei cd4 [0x9ec00000,ios_ga=0x9ec00000[ and [0x9f000000,0x9f29fcbc[ are lost for alignment) GW32 0x0006f008 0x80000000 [va=0x84000000] GW32 0x0006f00c 0x84000000 [va=0x88000000] GW32 0x0006f010 0x88000000 [va=0x8c000000] step33 xos version = 0x2c xos serial = 50c17a4542b6786c4540f4e1e94633be Using zbootxenv ga=0x9ebfbff4 (va=0xbabfbff4) Chip identified as SMP8675B80 (03) rev 3 prod (oemid: 098361a4ced5a55980471e98695b95b6088b160fda8e86c40ccf6f0a63b94aac) ************************************** * SMP86xx zboot start ... * Version: 3.1.0 * Started at 0xd00f7d94. * Configurations (chip revision: 3): * Enabled checkpoints. ************************************** DRAM0 dunit_cfg/delay0_ctrl (0x2730041b/0x65651e41). DRAM1 dunit_cfg/delay0_ctrl (NA/NA). Using UART port 0 as console. Board ID.: 1070-E1 MTD Setting up H/W from XENV block at 0xbabfbff4. Setting <SYSCLK avclk_mux> to 0x17400000. Setting <SYSCLK hostclk_mux> to 0x00000131. Setting <IRQ rise edge trigger lo> to 0xff28ca06. Setting <IRQ fall edge trigger lo> to 0x0000c000. Setting <IRQ rise edge trigger hi> to 0x8c10001f. Setting <IRQ fall edge trigger hi> to 0x00000000. Setting <IRQ GPIO map> to 0x000a0800. Setting <PB default timing> to 0x03080202. Setting <PB timing0> to 0x02060505. Keeping <PB Use timing0> to 0x000003f3. Keeping <PB CS Config> to 0x00330003. Setting <PB CS Ctrl> to 0x00000022. Enabled Devices: 0x000303f8 Ethernet IR FIP I2CM I2CS SDIO USB SATA SCARD Smartcard pin assignments: OFF pin = 0 5V pin = 2 CMD pin = 1 PLL#1 postdivider = 0x0000060f cd#0 disabled cd#1 disabled cd#2 want 96000000Hz: setting of 0x0000000043800000-2^28 cd#2 cannot measure cd#3 want 60000000Hz: setting of 0x000000006c000000-2^28 cd#3 cannot measure cd#4 disabled cd#5 disabled cd#6 want 96000000Hz: setting of 0x0000000043800000-2^28 cd#6 measured to 0kHz cd#7 disabled cd#8 disabled cd#9 disabled cd#10 disabled cd#11 disabled GPIO dir/data = 0x0000cb00/0x00008800 UART1 GPIO mode/dir/data = 0x6e/0x00/0x00 UART2 GPIO mode/dir/data = 0x00/0x00/0x00 MAC0: 14:c0:89:10:0d:4a XENV block processing completed. Default boot index: 1 Boot Index (0) IPU Stage0 booted from devtype: 0, chipsel: 0, phyblocknum: 2, zxenv block#: 6 Explicit boot order specified: 0x00 : devtype=0, CS=0 0x01 : devtype=0, CS=1 ezboot buffers, setup in DRAM bank#0: Alloting 2097152 bytes for heap. Alloting 16777216 bytes for reading. Alloting 16777216 bytes for decryption. Checking for DRM key ROMFS... at offset 0x0f900000 in BBA physical zone, size of 1572864 bytes Trying devtype=0 chipsel=0 nandlib_init(cs=0, reserved_phyblocks=4096, pagesize_shift=0, extecc=0 nand_probe 0x0xd0103a58 CS 0 vendor id 0x2c....... CS 0 device id 0xda....... nandv3: Using parameters from ZXENV. (nandpartlist) CS0 Using Timing1 0x04050905 Timing2 0x0804062c DevCFG 0x00000035 reserved phyblocks exceeds range, skipping .. Reading NAND CS0, addr 0x0f900000, size 0x00180000 to 0x01840000 Reading NAND CS0, addr 0x0f900800, size 0x00001000 to 0x01840800 Processing files in ROMFS... ROMFS found at 0x0x01840000, Volume name = dk Found 2 file(s) to be processed in ROMFS. Processing hdcpkeys.xload3 (start: 0x01840080, size: 0x000009c8) xloading... ga=0x81840080 DRM key loaded. Processing iptoken4.xload3 (start: 0x01840a70, size: 0x00000a78) xloading... ga=0x81840a70 DRM key loaded. Checking for HDCP key... no z.hdcp_key_offset found in ZXENV hdcp key loading process failed. xmat romfs goes to 0x9eafbfe0 (ga) xmat romfs goes to 0xb6afbfe0 (va) Trying devtype=0 chipsel=0 Reading xmaterial from virtual zone Reading NAND CS0, addr 0x00140000, size 0x00000800 to 0xb6afbfe0 Reading NAND CS0, addr 0x00140800, size 0x00059800 to 0xb6afc7e0 File xtask_loader.xload3 found found imat romfs @ 0x00240000 imap romfs goes to 0x9e7fbfc0 (ga) imap romfs goes to 0xb67fbfc0 (va) Trying devtype=0 chipsel=0 Reading imaterial from virtual zone Reading NAND CS0, addr 0x00240000, size 0x00000800 to 0xb67fbfc0 Reading NAND CS0, addr 0x00240800, size 0x00233000 to 0xb67fc7c0 File itask_loader.iload found Trying devtype=0 chipsel=0 reading z.boot0 (vzx=0xbabfbff4) is 0x00100000, virtual zone Reading NAND CS0, addr 0x00100000, size 0x00000800 to 0x01840000 Reading NAND CS0, addr 0x00100800, size 0x00034c00 to 0x01840800 Found. ROMFS found at 0x0x01840000, Volume name = YAMON_XLOAD Found 1 file(s) to be processed in ROMFS. Processing yamon-xload.zbf (start: 0x01840080, size: 0x00035298) Checking zboot file signature .. OK. Warning: header version mismatched. *** Signed Only. src_addr = 0x018400a0, dest addr = 0x00000000 XLOADING src=0x818400a0, dest=0x00000000, size=0x00035278 Decompressing to 0x85200000 .. OK (395136/0x60780). Load time total 0/0 msec. xload.c:68: Waiting for XLOAD completion. xload.c:78: XLOAD done, status = 0x6. Execute at 0x85200000 .. CS 0 vendor id 0x2c....... CS 0 device id 0xda....... nandv3: Using parameters from ZXENV. CS 1 vendor id 0x00....... CS 1 device id 0x00....... nandv3: Using parameters from ZXENV. ********************************** * YAMON ROM Monitor * Revision 02.16-SIGMADESIGNS-27-smp86xx_yamon_R2.16-27 ********************************** Memory: code: 0x86000000-0x86060000, 0x85200000-0x85204000 reserved data: 0x86200000-0x86300000, 0x86700000-0x87000000 PCI memory: 0x86300000-0x86700000 WARNING: The value(4096) of the xenv key, a.cs0_rsvd_pblk, >= the NAND chip capacity in blocks(2048) on CS 0. Super block searching skipped!! !! No NAND hardware found on CS 1 !! YAMON>
Ура ! Yamon загружается.
Делаем как уже описано на других форумах:
1) net init
2) настройку TFTP сервера
3) ping x.x.x.211 - это мой комп - ура комп виден
4) команды для загрузки прошивки blk1b1 и blk5b1
YAMON> net init Ethernet driver for SMP86XX (v1.0) MAC(14:c0:89:10:0d:4a) PHY(0x2430c54) Tangox eth0 - full-duplex mode Tangox eth0 - 100 Mbit/s Tangox eth0 ethernet start DHCP was successfully configured. ipaddr: 192.168.11.212 subnetmask: 255.255.255.0 gateway: 192.168.11.99 YAMON> ping 192.168.11.211 64 bytes ICMP-ECHO-REPLY user data received from 192.168.11.211 YAMON> nflash read -p 0 0xa4a00000 0x80000 0 YAMON> fwrite tftp://192.168.11.211/blk1b1 0xa4a00000 0x80000 About to binary write tftp://192.168.11.211/blk1b1 Error : TFTP DATA timeout ERROR Hint : Check cable and TFTP-server is still running YAMON> nflash read 0xcc0000 0xa4a00000 0x800000 0 Error : Internal, code = fffffff6 YAMON>
Но как видим записать файл прошивки "blk1b1" по команде "fwrite" увы не удается.
А если прочитывать область флеша для 5 блока , то тоже не получается и выдает ошибку "fffffff6"
Чтобы вы видели что на TFTP server запись идет, вот вам лог Фото лога
Об этом уже писалось тут, но я решил все собрать в один пост. Пока проблема!!!
Понятно, что адресация в этой модели явно другая. Прочитал что надо правильно указать адресацию.
Начал с "setxenv"
YAMON> setxenv (0x00) 4 x.boot 0x00005800 (0x00) 4 z.stage1_ga 0x81600000 (0x00) 4 z.verbose 0x00000001 (0x00) 4 x.ddr.0.density 0x00000005 (0x00) 4 x.ddr.1.density 0xffffffff (0x00) 4 x.ddr.grade 0x00000004 (0x00) 4 x.ddr.fmin_mhz 0x000000c8 (0x00) 4 x.ddr.fmax_mhz 0x00000190 (0x00) 4 x.ddr.method 0x10003004 (0x00) 4 x.ddr.verbose 0x00000001 (0x00) 4 a.avclk_mux 0x17400000 (0x00) 4 a.hostclk_mux 0x00000131 (0x00) 4 a.pll.1.div 0x0000060f (0x00) 4 a.cd0_freq 0x00000000 (0x00) 4 a.cd1_freq 0x00000000 (0x00) 4 a.cd2_freq 0x05b8d800 (0x00) 4 a.cd3_freq 0x03938700 (0x00) 4 a.cd4_freq 0x00000000 (0x00) 4 a.cd5_freq 0x00000000 (0x00) 4 a.cd6_freq 0x05b8d800 (0x00) 4 a.cd7_freq 0x00000000 (0x00) 4 a.cd8_freq 0x00000000 (0x00) 4 a.cd9_freq 0x00000000 (0x00) 4 a.cd10_freq 0x00000000 (0x00) 4 a.cd11_freq 0x00000000 (0x00) 4 a.irq_rise_edge_lo 0xff28ca06 (0x00) 4 a.irq_rise_edge_hi 0x8c10001f (0x00) 4 a.irq_fall_edge_lo 0x0000c000 (0x00) 4 a.irq_fall_edge_hi 0x00000000 (0x00) 4 a.gpio_irq_map 0x000a0800 (0x00) 4 a.pcidev1_irq_route 0x01010101 (0x00) 4 a.pcidev2_irq_route 0x01010101 (0x00) 4 a.pcidev3_irq_route 0x01010101 (0x00) 4 a.pcidev4_irq_route 0x01010101 (0x00) 4 a.gpio_dir 0x0000cb00 (0x00) 4 a.gpio_data 0x00008800 (0x00) 4 a.pb_def_timing 0x03080202 (0x00) 4 a.pb_cs_config 0x00330003 (0x00) 4 a.pb_cs_config1 0x00000000 (0x00) 4 a.pb_cs_ctrl 0x00000022 (0x00) 4 a.pb_use_timing0 0x000003f3 (0x00) 24 a.nandpart0_params 19 00 da 2c 58 02 b8 0b 40 00 5a 1a 05 09 05 04 2c 06 04 08 35 00 00 00 (0x00) 4 a.uart0_gpio_mode 0x00000000 (0x00) 4 a.uart0_gpio_dir 0x00000000 (0x00) 4 a.uart0_gpio_data 0x00000000 (0x00) 4 a.uart1_gpio_mode 0x0000006e (0x00) 4 a.uart1_gpio_dir 0x00000000 (0x00) 4 a.uart1_gpio_data 0x00000000 (0x00) 4 a.uart1_baudrate 0x0001c200 (0x00) 4 a.uart2_baudrate 0x0001c200 (0x00) 4 a.scard_5v_pin 0x00000002 (0x00) 4 a.scard_cmd_pin 0x00000001 (0x00) 4 a.scard_off_pin 0x00000000 (0x00) 12 a.board_id 1070-E1 MTD (0x00) 101 xmb.comment --- review xmasboot/configs/1112-E1_r3_MTD_1x16dram.config for details [xmbd0-ezbootce-nand_st2] --- (0x00) 4 a.enable_devices 0x000303f8 (0x00) 15 a.eth1_mac 00:16:e8:00/25 (0x00) 4 a.cs0_rsvd_pblk 0x00001000 (0x00) 4 a.cs1_rsvd_pblk 0x00001000 (0x00) 4 a.sata_channel_cfg 0x00008527 (0x00) 4 z.boot0 0x00100000 (0x00) 4 z.boot0_in_virtualzone 0x00000001 (0x00) 4 z.boot1 0x00a40000 (0x00) 4 z.boot1_in_virtualzone 0x00000002 (0x00) 4 z.boot2 0x01a40000 (0x00) 4 z.boot2_in_virtualzone 0x00000002 (0x00) 4 z.imatromfs_offset 0x00240000 (0x00) 4 z.imatromfs_in_virtualzone 0x00000001 (0x00) 4 z.imatromfs_size 0x00300000 (0x00) 4 z.imatromfs_mm 0x00000000 (0x00) 4 z.xmatromfs_offset 0x00140000 (0x00) 4 z.xmatromfs_in_virtualzone 0x00000001 (0x00) 4 z.xmatromfs_size 0x00100000 (0x00) 4 z.xmatromfs_mm 0x00000000 (0x00) 4 z.drm_keys_offset 0x0f900000 (0x00) 4 z.drm_keys_size 0x00180000 (0x00) 4 z.drm_keys_in_virtualzone 0x00000002 (0x00) 4 z.default_boot 0x00000001 (0x00) 4 z.interactive_boot_idx_sel 0x00000001 (0x00) 2 z.bootdev_order 00 01 (0x00) 9 y.testvar yamonfoo (0x00) 95 y.b0 nflash read -v 0x0100000 0xa4a00000 0x040000 0; dump romfs 0xa4a00000; load zbf 0xa4a00080; go (0x00) 98 y.b1 nflash read -b 0x01100000 0xa7000000 0x01000000 0; dump romfs 0xa7000000; load zbf 0xa7000090; go (0x00) 91 y.fb0 nflash read 0x080000 0x84a00000 0x040000 0; dump romfs 0x84a00000; load zbf 0x84a00080; go (0x00) 91 y.fb1 nflash read 0x0c0000 0x87000000 0x740000 0; dump romfs 0x87000000; load zbf 0x87000090; go (0x00) 91 y.fb2 nflash read 0x480000 0x84a00000 0x080000 0; dump romfs 0x84a00000; load zbf 0x84a00080; go (0x00) 91 y.commit nflash write -v 0xc0000 $xenv_addr 0x20000 0; nflash write -v 0xe0000 $xenv_addr 0x20000 0 (0x00) 38 y.get_xxenv nflash read -v 0 0xa7000000 0x20000 0 (0x00) 11 y.xxenv_addr 0xa7008748 (0x00) 102 y.xcommit nflash read -v 0x00180000 0x84000000 0x20000 0; go 0x84000000; nflash write -v 0 0xa7000000 0x20000 0 (0x00) 62 y.nwk load -b tftp://172.30.2.212/ES5/vmlinux-latest.bin 0x84000000 (0x00) 116 y.nwg go . root=/dev/nfs nfsroot=172.30.63.13:/roots/debinst-yourlogin ip=::::::dhcp rdinit=/none console=ttyS0 mem=135MB (0x00) 4 a.cs0_pblk_part1_offset 0x00000000 (0x00) 4 a.cs0_pblk_part1_size 0x00a40000 (0x00) 4 a.cs0_pblk_part2_offset 0x00a40000 (0x00) 4 a.cs0_pblk_part2_size 0x01000000 (0x00) 4 a.cs0_pblk_part3_offset 0x01a40000 (0x00) 4 a.cs0_pblk_part3_size 0x01000000 (0x00) 4 a.cs0_pblk_part4_offset 0x02a40000 (0x00) 4 a.cs0_pblk_part4_size 0x06a00000 (0x00) 4 a.cs0_pblk_part5_offset 0x09440000 (0x00) 4 a.cs0_pblk_part5_size 0x064c0000 (0x00) 4 a.cs0_pblk_part6_offset 0x0f900000 (0x00) 4 a.cs0_pblk_part6_size 0x00700000 (0x00) 4 a.cs0_pblk_parts 0x00000006 (0x00) 11 a.cs0_pblk_part1_name bootblocks (0x00) 8 a.cs0_pblk_part2_name kernel1 (0x00) 8 a.cs0_pblk_part3_name kernel2 (0x00) 12 a.cs0_pblk_part4_name application (0x00) 9 a.cs0_pblk_part5_name userdata (0x00) 6 a.cs0_pblk_part6_name fdata (0x00) 4 z.log2_xpu0_size 0x00000017 (0x00) 4 z.dsp0_size 0x00500000 (0x00) 4 z.zdata0_size 0x00004000 (0x00) 4 z.uzdata0_size 0x0000c000 (0x00) 4 z.log2_xpu1_size 0x00000000 (0x00) 4 z.dsp1_size 0x00000000 (0x00) 4 z.zdata1_size 0x00000000 (0x00) 4 z.uzdata1_size 0x00000000 (0x00) 4 z.ruamm1_offset 0x00000000 (0x00) 4 z.stage2_ga 0x80000000 (0x00) 4 z.xos_public_mm 0x00000000 (0x00) 4 z.log2_xos_public_size 0x00000011 (0x00) 4 z.channel_index_mm 0x00000000 (0x00) 4 z.ih_api_mm 0x00000000 (0x00) 4 z.ios_mm 0x00000000 (0x00) 4 z.ios_size 0x00400000 (0x00) 4 z.splashscreen_enabled 0x00000001 (0x00) 4 i.sp.scaler 0x00000004 (0x00) 4 i.sp.digital_enable 0x00000001 (0x00) 4 i.sp.component_enable 0x00000001 (0x00) 4 i.sp.analog_enable 0x00000001 (0x00) 4 i.sp.digital_standard 0x00000023 (0x00) 4 i.sp.component_standard 0x00000065 (0x00) 4 i.sp.analog_standard 0x0000007b (0x00) 11 i.sp.picture splash.sdd (0x00) 4 i.sp.hdmi_chip 0x00000001 (0x00) 4 i.sp.animation_enable 0x00000001 (0x00) 4 i.dac.cav.bs 0x000000ea (0x00) 4 i.dac.cav.rs 0x000000ea (0x00) 140 a.ps.mt3_hs 1b 20 00 01 01 03 00 00 01 04 00 00 1a 00 14 35 2b 13 65 45 21 00 01 00 1a 00 14 35 2b 13 65 45 21 00 01 00 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0c 0c 0c 0c 80 80 80 80 7d 7f 7d 7f 05 05 05 05 05 05 05 05 0c 0c 0c 0c 80 80 80 80 7c 7c 7a 7a 05 05 05 05 05 05 05 05 (0x00) 4 a.ps.pll2 0x00000000 (0x00) 4 a.ps.pll0 0x00000000 (0x00) 12 a.standby.mt3_hs 1f 80 00 01 01 00 00 00 01 04 00 00 (0x00) 4 a.standby.pll2 0x00000000 (0x00) 4 a.standby.pll0 0x00000000 (0x00) 4 a.standby.gpio_dir 0x00000280 (0x00) 4 a.standby.gpio_data 0x00000000 (0x00) 1 dune.product_rev 4 (0x00) 24 a.linux_cmd "console=ttyS0 mem=320m" (0x00) 4 z.ruamm0_offset 0x14000000 (0x00) 18 dune.product_id "megafon__tv102v2" (0x00) 17 a.eth_mac 14:C0:89:10:0D:4A (0x00) 4 a.pb_timing0 0x02060505 (0x0f) 4 a.ezb_origin 0x00000206 (0x0f) 4 z.xmat_romfs_buf 0x9eafbfd8 (0x0f) 4 z.imat_romfs_buf 0x9e7fbfbc (0x0f) 4 a.stage2_origin 0x00000000 (0x00) 10 y.xenv_addr 0xbabfbff4 159 records, 4719 bytes YAMON>
Понял, что конкретно в моей модели нужная другая адресация, вроде это тут:
(0x00) 4 a.cs0_pblk_part1_offset 0x00000000 (0x00) 4 a.cs0_pblk_part1_size 0x00a40000 (0x00) 4 a.cs0_pblk_part2_offset 0x00a40000 (0x00) 4 a.cs0_pblk_part2_size 0x01000000 (0x00) 4 a.cs0_pblk_part3_offset 0x01a40000 (0x00) 4 a.cs0_pblk_part3_size 0x01000000 (0x00) 4 a.cs0_pblk_part4_offset 0x02a40000 (0x00) 4 a.cs0_pblk_part4_size 0x06a00000 (0x00) 4 a.cs0_pblk_part5_offset 0x09440000 (0x00) 4 a.cs0_pblk_part5_size 0x064c0000 (0x00) 4 a.cs0_pblk_part6_offset 0x0f900000 (0x00) 4 a.cs0_pblk_part6_size 0x00700000Также при загрузки Tangox есть еще и эта информация:
[SMP_NAND]: detected NAND on CS0, 256MiB, erasesize 128KiB, pagesize 2048B, oobsize 64B, oobavail 2B [SMP_NAND]: checking NAND device on CS1 .. No NAND device found. [SMP_NAND]: detection completed, load partition information from XENV .. [SMP_NAND]: load partition information for CS0 .. Creating 6 MTD partitions on "MT29F2G08ABAEAH4": 0x000000000000-0x000000a40000 : "bootblocks" 0x000000a40000-0x000001a40000 : "kernel1" 0x000001a40000-0x000002a40000 : "kernel2" 0x000002a40000-0x000009440000 : "application" 0x000009440000-0x00000f900000 : "userdata" 0x00000f900000-0x000010000000 : "fdata" dev: size erasesize name mtd0: 10000000 00020000 "MT29F2G08ABAEAH4" mtd1: 00a40000 00020000 "bootblocks" mtd2: 01000000 00020000 "kernel1" mtd3: 01000000 00020000 "kernel2" mtd4: 06a00000 00020000 "application" mtd5: 064c0000 00020000 "userdata" mtd6: 00700000 00020000 "fdatloop: module loaded
Но чтобы я не пробовал увы ничего не получается.
И вот тут я обращаюсь к Вам , какие есть идеи?
Но даже если blk1b1 и blk5b1 я вытащу из Дюны. Из них вытащу лицензию. То остается вопрос а чем заменить эти блоки.
У меня есть рабочая 102 дюна но совпадут ли эти блоки, взаимозаменяемы ли они, если адресация в данной модели другая.
.....Sky4K, Pro4K, Max4K, Ultra4K..... 
, MaxVision, UltraVision, Solo8K.....
