[How-To] Rollback on old FW...

[ji035453]

Wow, yes I have. And now, may I try something like:
mount -t auto /dev/tbml8 /what_name?

Code: Select all

# cat /proc/partitions
major minor  #blocks  name

 139     0    1005568 tfsr0/c
 139     1        512 tfsr1
 139     2        512 tfsr2
 139     3        512 tfsr3
 139     4        512 tfsr4
 139     5       4096 tfsr5
 139     6       4096 tfsr6
 139     7       2048 tfsr7
 139     8      61440 tfsr8
 139     9      46080 tfsr9
 139    10      61440 tfsr10
 139    11      46080 tfsr11
 139    12     184320 tfsr12
 139    13     225280 tfsr13
 139    14      43008 tfsr14
 139    15      82944 tfsr15
 139    16     121856 tfsr16
 139    17     120832 tfsr17
 137     0    1005568 bml0/c
 137     1        512 bml1
 137     2        512 bml2
 137     3        512 bml3
 137     4        512 bml4
 137     5       4096 bml5
 137     6       4096 bml6
 137     7       2048 bml7
 137     8      61440 bml8
 137     9      46080 bml9
 137    10      61440 bml10
 137    11      46080 bml11
 137    12     184320 bml12
 137    13     225280 bml13
 137    14      43008 bml14
 137    15      82944 bml15
 137    16     121856 bml16
 137    17     120832 bml17
 138    12     152576 stl12
 138    13     193536 stl13
 138    14      11264 stl14
 138    15      51200 stl15
 138    16      90112 stl16
 138    17      89088 stl17
   8     0    1007616 sda
   8     1    1007600 sda1

[ji035453]

You mean to execute something like this?

Code: Select all

# df -h
Filesystem                Size      Used Available Use% Mounted on
/dev/tbml6                3.1M      3.1M         0 100% /
none                     10.0M      4.0k     10.0M   0% /dtv
/dev/tbml7              896.0k    896.0k         0 100% /mtd_boot
none                     10.0M         0     10.0M   0% /mtd_ram
/dev/stl0/14             11.0M      1.7M      9.2M  16% /mtd_rwarea
/dev/tbml10              60.0M     51.0M      8.9M  85% /mtd_exe
/dev/tbml11              28.6M     28.6M         0 100% /mtd_appdata
/dev/stl0/13            189.0M    156.9M     32.1M  83% /mtd_tlib
/dev/stl0/15             50.0M      3.5M     46.5M   7% /mtd_contents
/dev/stl0/16             87.9M      5.4M     82.5M   6% /mtd_down
/dev/stl0/12            149.0M    145.1M      3.9M  97% /mtd_wiselink
/dev/stl0/17             87.0M    176.0k     86.8M   0% /mtd_swu
/dev/sda1                 3.7G      2.3G      1.4G  63% /dtv/usb/sda1
# /mtd_boot/MicomCtrl 23
# killall -9 exeDSP
# umount /mtd_exe
# umount /mtd_appdata
# mount -t auto /dev/tbml8 /mtd_exe
# mount -t auto /dev/tbml9 /mtd_appdata
# /mtd_exe/rc.local

I think that:
1) test monkey mustn't have the 3000.2 firmware (not me)
2) test monkey must have ex-link cable and functional serial debug console (not me)
3) maybe something is still missing, I remember, that there is some file which is used as firmware switcher or pointer, isn't it?

[erdem_ua]

instead of mounting that partition, dump that flash partition to USB flash disk and examine on PC if it's 3002 or older version.
It it's older, than you could move further and could force TV to use alternative software via /mtd_rwarea/partitionswitch file...

[ji035453]

It seems that:
1) exe.img.8 is my previous exe.img version 2004.1, because it is binary different from exe.img.10 and contains string T-CHL7DEUC-2004.1 (exe.img.10 contains string T-CHL7DEUC-3000.2)
2) appdata.img.9 is at least different from appdata.img.11

Code: Select all

# bml.dump /dev/bml0/8 /mtd_swu/exe.img.8
+----------------------------------------------------------------------+
| bml.dump : Low-level Partition Dump Tool for NAND Flash Memory       |
+----------------------------------------------------------------------+
    This utility program can be used to dump the specified low-level partition. However, the reserved area is not dumped by this utility
This program is operated over FSR based
You will dump partitial partition
  100%
All of the flash memory units have been dumped successfully.
# mv /mtd_swu/exe.img.8 /dtv/usb/sda1
# bml.dump /dev/bml0/9 /mtd_swu/appdata.img.9
+----------------------------------------------------------------------+
| bml.dump : Low-level Partition Dump Tool for NAND Flash Memory       |
+----------------------------------------------------------------------+
    This utility program can be used to dump the specified low-level partition. However, the reserved area is not dumped by this utility
This program is operated over FSR based
You will dump partitial partition
  100%
All of the flash memory units have been dumped successfully.
# mv /mtd_swu/appdata.img.9 /dtv/usb/sda1
# ls -al /mtd_rwarea/PartitionSwitch*
-rwxr-xr-x    1 root     0               0 Jan  1  1980 /mtd_rwarea/PartitionSwitch_1_0

What to do now? Execute this?

Code: Select all

# /mtd_boot/MicomCtrl 23
# killall -9 exeDSP
# umount /mtd_exe
# umount /mtd_appdata
# mount -t auto /dev/tbml8 /mtd_exe
# mount -t auto /dev/tbml9 /mtd_appdata
# rm /mtd_rwarea/PartitionSwitch_1_0
# touch /mtd_rwarea/PartitionSwitch_0_0
# /mtd_exe/rc.local

[erdem_ua]

Himm, it sounds good to me.
I don't know which is correct

Code: Select all

PartitionSwitch_0_1 or PartitionSwitch_0_0  or PartitionSwitch_1_1

So please try with

Code: Select all

# /mtd_boot/MicomCtrl 23
# killall -9 exeDSP
# umount /mtd_exe
# umount /mtd_appdata
# mount -t auto /dev/tbml8 /mtd_exe
# mount -t auto /dev/tbml9 /mtd_appdata
# /mtd_exe/rc.local

and if it works, than we can make permanent changes via using "PartitionSwitch"

[ji035453]

Himm, it sounds good to me.
I don't know which is correct

Code: Select all

PartitionSwitch_0_1 or PartitionSwitch_0_0  or PartitionSwitch_1_1

So please try with

Code: Select all

# /mtd_boot/MicomCtrl 23
# killall -9 exeDSP
# umount /mtd_exe
# umount /mtd_appdata
# mount -t auto /dev/tbml8 /mtd_exe
# mount -t auto /dev/tbml9 /mtd_appdata
# /mtd_exe/rc.local

and if it works, than we can make permanent changes via using "PartitionSwitch"

Someone with two switchable firmwares can tell us which combination is correct:

Code: Select all

PartitionSwitch_0_1 or PartitionSwitch_0_0 or PartitionSwitch_1_1

Now I have:

Code: Select all

# ls -al /mtd_rwarea/PartitionSwitch*
-rwxr-xr-x    1 root     0               0 Jan  1  1980 /mtd_rwarea/PartitionSwitch_1_0

[ji035453]

Ouch, there are all of these strings in exe.img:

Code: Select all

/mtd_rwarea/PartitionSwitch_0_0
/mtd_rwarea/PartitionSwitch_0_1
/mtd_rwarea/PartitionSwitch_1_0
/mtd_rwarea/PartitionSwitch_1_1

Which one is complementary to my actual PartitionSwitch file?

Code: Select all

/mtd_rwarea/PartitionSwitch_1_0