[HOT] D series firmware with u-boot included. Official!

Here is information about customize your D series firmware..:!:This forum is NOT FOR USER questions or problems but DEVELOPER.

spawnlmg
Posts: 1
Joined: Mon May 06, 2013 4:14 pm

Re: [HOT] D series firmware with u-boot included. Official!

Post by spawnlmg »

My TV UE55D7000LS downgraded to 1015 from DNS 149.154.159.134 which is displayed as 1090, how upgraded and which firmware?
tempinbox
Posts: 317
Joined: Wed May 11, 2011 7:00 pm

Re: [HOT] D series firmware with u-boot included. Official!

Post by tempinbox »

I have two questions...
1 is this T-GAP8DEUC-1028.0 is arm or mips?
2 can i flash it on C series? or is possible to flash only onboot and uboot so i can get access to uboot?
User avatar
juusso
SamyGO Moderator
Posts: 10129
Joined: Sun Mar 07, 2010 6:20 pm

Re: [HOT] D series firmware with u-boot included. Official!

Post by juusso »

no no, this is strongly for D series with firmware T-GAP[8]deuc
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]

DO NOT EVER INSTALL FIRMWARE UPGRADE
Denny
Official SamyGO Developer
Posts: 350
Joined: Thu Sep 30, 2010 12:18 pm
Location: Croatia

Re: [HOT] D series firmware with u-boot included. Official!

Post by Denny »

just tested for fun :
files are okey and can be manual flashed!...

Code: Select all

U-Boot 2009.03 (Jan 27 2011 - 19:13:24)

SDP1002 #14950593 Operation clock
arm clock :  800.000 Mhz
ddr clock :  000.000 Mhz
peri clock : 050.000 Mhz
DRAM:  128 MB
env_relocate_spec : FlexOneNAND
crc is 0 not 3fe63ebc  67bc0008
wanning : Default environment
In:    serial
Out:   serial
Err:   serial
Net:   No ethernet found.
Hit any key to stop autoboot:  0
GENOA-P #  help
?       - alias for 'help'
base    - print or set address offset
bbm     - bbm   - BBM sub-system

boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootm   - boot application image from memory
bootp   - boot image via network using BOOTP/TFTP protocol
cmp     - memory compare
cp      - memory copy
crc32   - checksum calculation
crc32n  - several checksum calculation
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls   - list files in a directory (default /)
go      - start application at address 'addr'
help    - print online help
loop    - infinite loop on address range
md      - memory display
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nm      - memory modify (constant address)
printenv- print environment variables
rarpboot- boot image via network using RARP/TFTP protocol
reboot  - reboot

reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - saveenv - save environment variables to persistent storage

sdpmem  - setup memory info for kernel booting

setenv  - set environment variables
tftpboot- boot image via network using TFTP protocol
toggle  - toggle

usb     - USB sub-system
usbboot - boot from USB device
version - print monitor version
GENOA-P #
network not implemented...
usb buggy, noone usb found , maybee it needs some fix ...
Denny - 데니 - 丹尼 (card2000)
UE55C8000 UE55D8000 UE32D6510 BD-C9600 3xDM8000
Reversing HW Demux Drivers and API from Samsung´s TV
Mkò
Posts: 199
Joined: Fri Jul 29, 2011 2:34 pm

Re: [HOT] D series firmware with u-boot included. Official!

Post by Mkò »

Denny wrote:just tested for fun :
files are okey and can be manual flashed!...

Code: Select all

U-Boot 2009.03 (Jan 27 2011 - 19:13:24)

SDP1002 #14950593 Operation clock
arm clock :  800.000 Mhz
ddr clock :  000.000 Mhz
peri clock : 050.000 Mhz
DRAM:  128 MB
env_relocate_spec : FlexOneNAND
crc is 0 not 3fe63ebc  67bc0008
wanning : Default environment
In:    serial
Out:   serial
Err:   serial
Net:   No ethernet found.
Hit any key to stop autoboot:  0
GENOA-P #  help
?       - alias for 'help'
base    - print or set address offset
bbm     - bbm   - BBM sub-system

boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootm   - boot application image from memory
bootp   - boot image via network using BOOTP/TFTP protocol
cmp     - memory compare
cp      - memory copy
crc32   - checksum calculation
crc32n  - several checksum calculation
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls   - list files in a directory (default /)
go      - start application at address 'addr'
help    - print online help
loop    - infinite loop on address range
md      - memory display
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nm      - memory modify (constant address)
printenv- print environment variables
rarpboot- boot image via network using RARP/TFTP protocol
reboot  - reboot

reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - saveenv - save environment variables to persistent storage

sdpmem  - setup memory info for kernel booting

setenv  - set environment variables
tftpboot- boot image via network using TFTP protocol
toggle  - toggle

usb     - USB sub-system
usbboot - boot from USB device
version - print monitor version
GENOA-P #
network not implemented...
usb buggy, noone usb found , maybee it needs some fix ...
How flash this manually???
I wanto to try these on my c series so i can get access to uboot...
And another question how i can dump the onboot and uboot of my c series tv ?
please reply (denny i read from your signature that you have one c series tv so maybe you can help me and answer my questions)
thx
Mk?
Denny
Official SamyGO Developer
Posts: 350
Joined: Thu Sep 30, 2010 12:18 pm
Location: Croatia

Re: [HOT] D series firmware with u-boot included. Official!

Post by Denny »

How flash this manually???
I wanto to try these on my c series so i can get access to uboot...
And another question how i can dump the onboot and uboot of my c series tv ?
please reply (denny i read from your signature that you have one c series tv so maybe you can help me and answer my questions)
thx
Mk?
dont try to flash it to c serie , it is for d serie!

to flash manual i use bml.restore application located in device
at C serie , /dev/bml0/1 is onboot, uboot is blank and located at /dev/bml0/2
Denny - 데니 - 丹尼 (card2000)
UE55C8000 UE55D8000 UE32D6510 BD-C9600 3xDM8000
Reversing HW Demux Drivers and API from Samsung´s TV
Mkò
Posts: 199
Joined: Fri Jul 29, 2011 2:34 pm

Re: [HOT] D series firmware with u-boot included. Official!

Post by Mkò »

Denny wrote:
How flash this manually???
I wanto to try these on my c series so i can get access to uboot...
And another question how i can dump the onboot and uboot of my c series tv ?
please reply (denny i read from your signature that you have one c series tv so maybe you can help me and answer my questions)
thx
Mk?
dont try to flash it to c serie , it is for d serie!

to flash manual i use bml.restore application located in device
at C serie , /dev/bml0/1 is onboot, uboot is blank and located at /dev/bml0/2
I know i dump bml0/1 (onboot) bml0/2(u-boot) bml0/3 (uboot_env.bin) and bml0/2 is empty then uboot_env.bin has in it T-Valdeuc following by ff... so do you think that if i compile uboot and then flash it bml0/2 with bml.restore i get access to uboot? i need to calculate right hash before reflashing bml0/2? or maybe i can try to modify uboot_env.bin?
damn samsung :evil: why the don't release uboot stuff for c series arghh
Denny
Official SamyGO Developer
Posts: 350
Joined: Thu Sep 30, 2010 12:18 pm
Location: Croatia

Re: [HOT] D series firmware with u-boot included. Official!

Post by Denny »

I know i dump bml0/1 (onboot) bml0/2(u-boot) bml0/3 (uboot_env.bin) and bml0/2 is empty then uboot_env.bin has in it T-Valdeuc following by ff... so do you think that if i compile uboot and then flash it bml0/2 with bml.restore i get access to uboot? i need to calculate right hash before reflashing bml0/2? or maybe i can try to modify uboot_env.bin?
damn samsung :evil: why the don't release uboot stuff for c series arghh
i like your question! , so must answer :)

ok, what you think is not posible to do, even you get full source of u-boot or onboot because the onboot loader will not jump you into u-boot parition.

but!! :)

it is posible to build own boot strategy if you understand how Loader work, a bit more of ARM Assembler and C .

as onboot is not posible to reflash as it use locked 1st sector of flash, there is no posibility to let onboot start u-boot parition direct, the only way is to do a 2nd stage loader whitch will be flashed to working kernel parition (like kernel is prepared, with hashes calculated and stored in right places), from this 2nd stage loader (onboot2 or u-boot or u-boot-derivate) you may load your own kernel from where you want(serial/exlink, mmc, flash or usb) if you also include needed drivers.

if that loaded kernel (your own build) have network drivers, usb drivers etc... you may also mount rootfs from nfs or usb or even default from flash.

to do this by safe way, you need posibility to change boot parition or to swap between parition 0 and 1(kernel and rootfs) , that in case you make some fault, you can boot working parition to recover 2nd stage loader and continue develop of the 2nd stage loader until you think you finish.

now to missing sam?s GPL stuff that you will need, basicly all functions are inside of ram loaded, you just need to catch them by defining ram adress and you can use these functions without to have C code by jumping into memory address direct.

this is general posible to do with all devices where verification of kernel is known.

you still want to do it ?
Denny - 데니 - 丹尼 (card2000)
UE55C8000 UE55D8000 UE32D6510 BD-C9600 3xDM8000
Reversing HW Demux Drivers and API from Samsung´s TV
Mkò
Posts: 199
Joined: Fri Jul 29, 2011 2:34 pm

Re: [HOT] D series firmware with u-boot included. Official!

Post by Mkò »

Denny wrote:<...>
Thanks for your answer.
You say that onboot is locked is this related with the option OTP lock of service menu? Because i was playing with my tv service menu and i find this option after i press the button otp lock the tv restarts i do some research and i find that this otp lock is a write protection system...
On the TD menu instead i find some boot options but i don't know what there are for

Code: Select all

==============================
 [ TDsSystem Debug Menu ]
------------------------------
 1  : Set RTC 
 2  : Get RTC 
[u] [b]3  : Get Boot Status [/b][/u]
 4  : Set SubMicom Protection 
 5  : Set Watchdog 
 6  : Get Watchdog 
 7  : Set OSD Position 
 8  : Set OSD Mute 
 9  : Dependency debug 
 10  : Zigbee Auto Test 
 11  : System Monitor Debug
 12  : internet tset debug 
[u][b] 13  : Get SecureBoot Certification[/b][/u]
 14  : Touch Slide On/Off
------------------------------
 99  : Exit Debug 
------------------------------
TDsSystem>: 3
[u][b][BootFromMicom]Get Boot Status : 0
Success... Boot Status : 0 [/b][/u]
==============================
 [ TDsSystem Debug Menu ]
------------------------------
 1  : Set RTC 
 2  : Get RTC 
 3  : Get Boot Status 
 4  : Set SubMicom Protection 
 5  : Set Watchdog 
 6  : Get Watchdog 
 7  : Set OSD Position 
 8  : Set OSD Mute 
 9  : Dependency debug 
 10  : Zigbee Auto Test 
 11  : System Monitor Debug
 12  : internet tset debug 
 13  : Get SecureBoot Certification
 14  : Touch Slide On/Off
------------------------------
 99  : Exit Debug 
------------------------------
[u][b]TDsSystem>: 13
SecureBoot Certification Success[/b][/u]
====================================
      [ SsPlatform Debug Menu]   	
------------------------------------
  1 [u][b] : GetBootState  [/b][/u]  				
  2  : GetPowerState    			
  3  : SetTimer						
  4  : SetOption					
  5  : GetOption					
  6  : SetAppState					
  7  : GetSystemInfo				
  8  : GetDisplayInfo				
  9  : Auto Wall Mount Debug		
 10 : GetBootParam				
 11 : Get Open Source License Files List	
 12 : Get Country List				
 13 : Set Auto Stand Power On/Off		
 14 : Set Panel Slide Key On/Off	
====================================
  99 : Exit							
====================================
[u][b]DBG> : 1
BootState Read... BOOT_STATE_MASTER[/b][/u]

====================================
====================================
      [ SsPlatform Debug Menu]   	
------------------------------------
  1  : GetBootState    				
  2  : GetPowerState    			
  3  : SetTimer						
  4  : SetOption					
  5  : GetOption					
  6  : SetAppState					
  7  : GetSystemInfo				
  8  : GetDisplayInfo				
  9  : Auto Wall Mount Debug		
 10 : GetBootParam				
 11 : Get Open Source License Files List	
 12 : Get Country List				
 13 : Set Auto Stand Power On/Off		
 14 : Set Panel Slide Key On/Off	
====================================
  99 : Exit							
====================================
DBG> : [M_DTV/Debugging] 1441 : TCDVBSIManager::m_OnDVBTOTSection timeOffset = 120, timeOfchangeFlag = 0, nextTimeOffset = 60, localOffset = 120 newTimeOffset
10
[u][b]BootParam Read... OPTION_BOOT_PARAM_NORMAL[/b][/u]
Yes i want still to do this... :)
silverbios
Posts: 21
Joined: Sat Jan 05, 2013 5:57 pm

Re: [HOT] D series firmware with u-boot included. Official!

Post by silverbios »

working on UA40D6960MW?
TNX

Post Reply

Return to “[D] Firmware”