[solved] Cycle reboot UE46C7700 - T-VALDEUC

[hedak]

Hallo SamyGO experts

Problem:
My C7700 (T-VALDEUC-3011.0) is in a reboot loop. It reboots every 6.5 seconds. UART debug log is attached.

Reason (i guess):
The hash of /dev/st10/17 (/mtd_exe) is wrong and thus TV refuses to boot completely. As i didn't disable the watchdog in service menu the TV came in this ***** reboot loop.

How it happened:
I tried to play around with exeDSP and waned to test my modified version. So i looked for a way to replace the original one with mine and found /mtd_exe/rc.local. But as /mtd_exe was mounted read-only, i did the following:
# cp /etc/fstab /mtd_rwarea/etc/
# mount --bind /mtd_rwarea/etc/fstab /etc/fstab
added this line to /etc/fstab via vi:/dev/st10/17 /mtd_exe/ rfs defaults 0 0
# mount -no remount,rw /mtd_exe/
added this line to /mtd_exe/rc.local via vi:echo HEDAK
so /mtd_exe/rc.local looked like this:

Code: Select all

export MAPLE_DEFAULT_PATH=/mtd_cmmlib/InfoLink/lib
export MAPLE_MANAGER_WIDGET_PATH=/mtd_down/widgets/manager
export MAPLE_NORMAL_WIDGET_PATH=/mtd_down/widgets/normal
export MAPLE_WIDGET_DATA_PATH=/mtd_down
export MAPLE_WIDGET_INCLUDE_PATH=/mtd_down/widgets/inc
export MAPLE_PLUGIN_DATA_PATH=/mtd_cmmlib/InfoLink/lib
export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/mtd_cmmlib/YWidget_LIB:/mtd_contents:/m

export HOME=/mtd_moip
export KF_SLEEP_READ=-2
echo 30000 > /mtd_rwarea/DelayValue.txt
#touch /mtd_rwarea/DoPrintYahoo.txt
export KF_NO_INTERACTIVE=1
export KF_LOG=/dev/null #Remove engine logging.
export KF_DATA_DIR=/mtd_yahoo/yahoo
export KF_THREAD_PRIORITY=20
export KF_NO_LOG=1
export KF_NO_CRASHHANDLERS=1
export KF_HF_WRITE_PATH=/mtd_rwarea/yahoo
cd /mtd_exe/

./exeDSP
echo HEDAK

After the next reboot the TV rebooted after each minute. As that annoyed me, i wanted to undo this change. But doing this by hand would have taken to long, so i put a script on an usb stick and the original rc.local to be copied to /mtd_exe/rc.local. The file was changed as supposed, but the still rebooted after 1 minute. So i added one more empty line at the end of the rc.local on the stick and ran my script again- FAIL! From now on my TV reboots every 6.5 seconds.

Current state:
With exLink cable and UART in debug mode i have 4 seconds to do something, but i cannot enter TDM (anymore; before i could), i can just enter 'new debug menu' mentioned here: viewtopic.php?f=2&t=289&start=20#p2371
When plugging in an usb stick the TV tries to mount the stick, but this doesn't come to an end because the TV reboots...

The boot log is attached. The very last line of the log comes up only very rarely and looks like something from here: viewtopic.php?f=12&t=987&start=30

I think the only way to unbrick my TV is to disable the watchdog first, right? I already opened a thread for researching C Series EEPROM here: viewtopic.php?f=15&t=7117&p=53761

Any help/suggestions are very appreciated



Edit1: Maybe its not the watchdog annoying me. May it be what is trying to be prevent here in step 9: http://wiki.samygo.tv/index.php5/Recove ... repare_USB?

Edit2: Ok, i slept one more night about the problem: As stated in my other post i use hterm for COM terminal application. This application records timestamps of incoming data. In /etc/rc.local the script /mtd_exe/rc.local (i modified...) tries to be started, which then would run exeDSP forever and otherwise /mtd_exe/rc.local returns and prints 'SW image is stopped..' - exactly what i get. As you can see on the timestamps below, there is 'no' time spent between 'Application is started..' and 'SW image is stopped..'. So i think my /mtd_exe/rc.local is the main problem. Either its content is corrupted or (i guess) its flags are not set to be executable anymore after copying the 'corrected' file from usb stick (formatted fat32).

Code: Select all

#
# run exeDSP
#

if [ -f /mtd_exe/exeDSP ]; then
        echo "Application is started.."
        /mtd_exe/rc.local
else
        echo "Application executable is not found.."
fi

##executable stopped. try to handle emergency state###

if [ -e $UPGRADE_FLAG  ]; then

    echo "SW image is stopped.."
    exit 1

else

Code: Select all

11:51:42.351:
A
11:51:42.351:
pplication i
11:51:42.352:
s started.
11:51:42.353:
.
SW 
11:51:42.354:
image is sto
11:51:42.357:
pped..

[juusso]

forget watchdog, later.
i think you get reboot by authuld and disabling watchdog wont help (but worth to try...).

micom is much more helpfull in your case.

[hedak]

Guess you are right again! Got bit 0x6D51 set to 0x00, but had no effect, even after power reset.

So i will try to follow your advise and change micom EEPROM

[hedak]

Just changed these bits and then made a dump to compare

OK, toggle worked!
EDIT: How i toggled, read here: viewtopic.php?f=15&t=7133#p53883

But... now the /mtd_exe/rc.local script tries to run the script '/mtd_rwarea/start.sh' i created before i ran in these troubles. Now i get './exeDSP: error while loading shared libraries: libz.so: cannot open shared object file: No such file or directory' (see log attached)

start.sh i created looks like this (found it in my ssh logs..., content is exactly what was written in original /mtd_exe/rc.local except the first line):

Code: Select all

# cat /mtd_rwarea/start.sh
touch /mtd_rwarea/hedak.log

export MAPLE_DEFAULT_PATH=/mtd_cmmlib/InfoLink/lib
export MAPLE_MANAGER_WIDGET_PATH=/mtd_down/widgets/manager
export MAPLE_NORMAL_WIDGET_PATH=/mtd_down/widgets/normal
export MAPLE_WIDGET_DATA_PATH=/mtd_down
export MAPLE_WIDGET_INCLUDE_PATH=/mtd_down/widgets/inc
export MAPLE_PLUGIN_DATA_PATH=/mtd_cmmlib/InfoLink/lib
export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/mtd_cmmlib/YWidget_LIB:/mtd_contents:/mtd_cmmlib/InfoLink/lib/plugin/Static:/mtd_appdata/yahoo:/mtd_appdata/moip:/mt

export HOME=/mtd_moip
export KF_SLEEP_READ=-2
echo 30000 > /mtd_rwarea/DelayValue.txt
#touch /mtd_rwarea/DoPrintYahoo.txt
export KF_NO_INTERACTIVE=1
export KF_LOG=/dev/null #Remove engine logging.
cd /mtd_exe/

./exeDSP

EDIT: ok, the problem of the start.sh is: the line starting with 'export LD_LIBRARY_PATH' is cut... Seems like i coped from putty console and missed the end of the line...

Is there any way to reset /mtd_rwarea/ by hardware? ...

[juusso]

hmm, weird, you have not only flashed custom made exe.img, but also left some start.sh ...

was there any widget hack or hotel hack before to brick?

[hedak]

/mtd_rwarea/ was read-write, so i played around...

Both hacks (widget and hotel) are active. Modified the widget hack to run run_old.sh and hotel hack to run run.sh from usb.

I just had to remove my /mtd_rwarea/start.sh and everything would be fine

[juusso]

usbhotplug is there, so should be ok, prepare fat32 usb with code to remove start.sh with SamyGO.sh on the root:

SamyGO.sh:

Code: Select all

#!/bin/sh
rm -f /mtd_rwarea/start.sh

attach to TV and perform these steps:
1.Input

Code: Select all

10041004
8282119 [ENTER]

2. Select 1, it mounts USB and at that moment SamyGO.sh should be executed.
3. Reboot TV

Or step 2 is obsolete and USB mounts in step one (don`t remember already)

[hedak]

You forgot about the missing time i think. I did never get the menu of 8282119 printed because tv reboots before. (don't i need to enter 10041004 before?)

Another option:
As i understood it's the micom controller initiating the reboot. It communicates to ?SoC? via UART? What if i cut the TX wire temporarely (with a switch for example) to prevent from rebooting?

[juusso]

How much time do you have now until TV goes to reboot?

Be quick and prepare script. After 10041004 you be able to enter that 8282119 menu with USB attached.
Don`t cut anything.
If you haven`t removed hotel hack, then your TV will be alive soon. Just be quick enough (copy/paste commands)

possible, that you hacked TV via widget hack last, then place another copy of SamyGO.sh to USB renamed to run.sh. Just in case.

[hedak]

WOHAA, something happend! It was up for nearly a minute! Just inserted the usb stick with the script files.

Log is attached