SamyGO

Samsung TV Firmware on the GO
http://forum.samygo.tv/

BD-C7500 Downgrade Hack

http://forum.samygo.tv/viewtopic.php?t=5032

Page 2 of 3

Re: BD-C7500 Downgrade Hack

Posted: Wed Jan 02, 2013 8:20 pm
by bucko67
I know it's interesting if you can tell me what to do next.

Re: BD-C7500 Downgrade Hack

Posted: Wed Jan 02, 2013 8:27 pm
by juusso
I follow your research from beginning, but sorry, i don`t have C series BD and can`t support you. Let`s wait for anyone who knows what to do next.

Re: BD-C7500 Downgrade Hack

Posted: Sat Jan 05, 2013 12:40 pm
by bucko67
I came to a point 3. ?how to do point 4, if you can detailed instructions.
3. You shoul get a prompt #
4. mount the mtd-filesystem with the command "mount -t proc none /proc"

Re: BD-C7500 Downgrade Hack

Posted: Mon Jan 14, 2013 9:28 am
by bucko67
I got into the console input. ?asks my login and password. ?I tried the login root password tkfkddlf but will not.?I tried some more and not. ?if anyone might know login and password for this model tell me.

Re: BD-C7500 Downgrade Hack

Posted: Mon Jan 14, 2013 9:53 am
by juusso
Have you tried login as root without password? Just Press enter when it asks for password.

Re: BD-C7500 Downgrade Hack

Posted: Mon Jan 14, 2013 10:08 am
by arris69
bucko67 wrote:I got into the console input. ?asks my login and password. ?I tried the login root password tkfkddlf but will not.?I tried some more and not. ?if anyone might know login and password for this model tell me.
think this password is for B-BRCME57BSP based devices...

Re: BD-C7500 Downgrade Hack

Posted: Mon Jan 14, 2013 10:19 am
by bucko67
Do you know or point me in if there is a site.

Re: BD-C7500 Downgrade Hack

Posted: Mon Jan 14, 2013 11:05 am
by arris69
bucko67 wrote:Do you know or point me in if there is a site.
ok checked, on both firmwares is the same hash for root password....

Code: Select all

root:pDRa1VlS1AyC.:0:0:root:/root:/bin/sh
http://downloadcenter.samsung.com/conte ... 1027.0.zip
and

Code: Select all

SWU_B-BRCME57BSP_001016_I04_ES000KS000RS000DS000_120830/squash-rootfs.img/etc/passwd:root:pDRa1VlS1AyC.:0:0:root:/root:/bin/sh

Re: BD-C7500 Downgrade Hack

Posted: Mon Jan 14, 2013 12:16 pm
by bucko67
thank you. ?I'll try when I get home

Re: BD-C7500 Downgrade Hack

Posted: Mon Jan 14, 2013 8:10 pm
by bucko67

Code: Select all

BCM76300010
Found MLC NAND
Setting NAND Params

CFE starting from ROM
Chip specific init
TLB init
Board init
Starting memory configuration
Extracting memory configuration info
Checking strap value
Setting up PLL

***** MSA PLL test result - ###00000038

Done msa testing - ###OK###
?
BCM76300010
Found MLC NAND
Setting NAND Params

CFE starting from ROM
Chip specific init
TLB init
Board init
Starting memory configuration
Extracting memory configuration info
Checking strap value
Setting up PLL

PLL test result from last run 00000038
Enable DDR encryption
SooooooooooooooR
Preparing to copy code to RAM
Prepare for NAND loading


Starting code in RAM
Booting Secured CFE...


BCM97630 B0-SEC  CFE v2.1.8 (CFE core v2.1, BSP_REV 8), Endian Mode: Little
Build Date: Tue Mar  2 17:57:09 KST 2010 (gyu@localhost.localdomain)
Copyright (C) Broadcom Corporation.



DDR                        : Bank0:128MB@667MHz | Bank1:256MB@667MHz
NAND Boot                  : FlashSize 1024MB on CS0, BlkSize 256KB, PgSize 2048    B
NAND vendor timing         : ecd314a5 SAMSUNG K9G8G08U0A/B MLC  t1(33535238) t2(    80000b98)
Secure boot                : Enabled

Reading flash0.macadr to V:0x87917f80
Reading flash0.rawnvr to V:0x870927fc
booting ARM...
Reading flash0.ofefw0 to V:0x80000000 from offset 0 len 786432
Reading flash0.ofews to V:0x800c0000 from offset 0 len 32768
Reading flash0.ofews1 to V:0x800c8000 from offset 0 len 32768
booting ARM...ofefw@0x2fd00000
done
check service mode

Automatic startup canceled via Ctrl-C
CFE> ^C
CFE> ^C
CFE>
CFE> boot -elf -z flash0.kernel: root=/dev/romblock2 console=0,115200n8 BDVD_BOO    T_AUTOSTART=y BAPP_OUT=/dev/console memcfg=384 single ro
Loader:elf Filesys:raw Dev:flash0.kernel File: Options:root=/dev/romblock2
Loading: 0x80008000/4645696 0x80476340/304464
Successfully loaded secure elf image....
Entry address is 0x8000c330

current time (15869179 uS), 15869 ms

Timestamp started ...
Starting program at 0x8000c330

[    0.000000] -- DDR Bank 0: 128 MB
[    0.000000] -- DDR Bank 1: 256 MB
[    0.000000] Linux version 2.6.28.9 (root@BdManager) (gcc version 4.2.0 200701    24 (prerelease) - BRCM 10ts-20080721) #279 Fri Nov 4 15:46:35 KST 2011
[    0.000000] Kernel command line: root=/dev/romblock2 rw console=0,115200n8
[4294667.387000] checker_0 control 0x00000008 addr low 0x00001000 hi 0x00345000
[4294667.394000] read rights _0 0xffffffff _1 0xffffffff write rights _0 0x00000    000 _1 0x00000000
[4294667.403000] checker_1 control 0x00000008 addr low 0x00346000 hi 0x021fff80
[4294667.410000] read rights _0 0xffffffff _1 0xffffffff write rights _0 0x00000    000 _1 0x00e4fca0
[4294667.419000] checker_2 control 0x00000008 addr low 0x20000000 hi 0x241fff80
[4294667.426000] read rights _0 0xffffffff _1 0xffffffff write rights _0 0x00000    000 _1 0x00e4fca0
[4294667.435000] checker_3 control 0x00000018 addr low 0x2fd00000 hi 0x2fdfff80
[4294667.442000] read rights _0 0xffffffff _1 0xffffffff write rights _0 0x00000    000 _1 0x00010000
[4294667.463000] Driver 'sd' needs updating - please use bus_type methods
[4294667.470000] Driver 'sr' needs updating - please use bus_type methods
[4294667.477000] vide_ofe_probe: FE SECURITY NOT ENABLED
[4294667.490000] scsi 0:0:0:0: CD-ROM            SAMSUNG  SPE-450          0058     PQ: 0 ANSI: 5
[4294667.499000] sr 0:0:0:0: Attached scsi generic sg0 type 5
[4294667.547000] brcmnand_probe: Found MLC device Samsung MLC K9G8G08U0A/B
[4294667.553000] brcmnand_probe() pageSize : 2048, blockSize: 262144<6>Updating     Config Reg: Block & Page Size: After: 48152300
[4294667.565000]  allocating this->pLocalOob<3> allocating this->ecc mask<6>Brcm    NAND version = 0x80000304 1024MB @00000000
[4294667.598000] Creating 22 MTD partitions on "bcm7xxx-nand":
[4294667.604000] 0x00000000-0x00100000 : "cfe"
[4294667.609000] 0x00100000-0x00600000 : "kernel"
[4294667.614000] 0x00600000-0x04600000 : "rootfs"
[4294667.619000] 0x04600000-0x04800000 : "ofefw0"
[4294667.624000] 0x04800000-0x04a00000 : "splash"
[4294667.630000] 0x04a00000-0x04c00000 : "splashS"
[4294667.635000] 0x04c00000-0x04e00000 : "splashU"
[4294667.640000] 0x04e00000-0x05000000 : "bootsound"
[4294667.645000] 0x05000000-0x05080000 : "macadr"
[4294667.650000] 0x05080000-0x05100000 : "nvram"
[4294667.655000] 0x05100000-0x05180000 : "rawnvr"
[4294667.661000] 0x05180000-0x05200000 : "drmregion"
[4294667.666000] 0x05200000-0x05280000 : "drmregion1"
[4294667.671000] 0x05280000-0x05300000 : "ofews"
[4294667.676000] 0x05300000-0x05380000 : "ofews1"
[4294667.682000] 0x05380000-0x06280000 : "tmp"
[4294667.687000] 0x06280000-0x06780000 : "kernel1"
[4294667.692000] 0x06780000-0x0a780000 : "rootfs1"
[4294667.697000] 0x0a780000-0x0a980000 : "ofefw1"
[4294667.702000] 0x0a980000-0x13f80000 : "widget"
[4294667.708000] 0x13f80000-0x3ff00000 : "pstor"
[4294667.715000] 0x00000000-0x40000000 : "all"
rcS: BDVD_BOOT_AUTOSTART<>  BQ<>  BAPP<>  BAPP_OUT</tmp/app.out>  BNET<>  BNET_D    LY<> OFE_SB<>
rcS: Starting at Thu Jan  1 00:00:00 UTC 1970
rcS: Mount /proc fs
rcS: Mount /dev/pts
rcS: Mount /sys fs
[4294668.383000] yaffs: restored from checkpoint
[4294668.485000] yaffs: restored from checkpoint
rcS: Mounting /var (tmpfs).
rcS: Init of utmp and wtmp, start of syslogd.
Wed Jun 11 00:00:00 UTC 2008
rcS: Beg of insmod
[4294668.648000] front: module license '<1>Dual BSD/GPL' taints kernel.
[4294668.658000] front device driver v0.24
[4294668.661000] Made by Samsung Electronics
[4294668.665000] For BRCM7630 Bx
[4294668.668000] Model : BD Player
[4294668.672000] Complete : Insert Front device Module
[4294668.672000]
[4294668.672000]
[4294670.304000] BCMDRV: Initializing bcmdriver version $ bdvd_v3.0/3 $
[4294670.310000] BCMDRV: Using Interrupt Definition for 7630 (uname -a)
[4294670.317000] BCMDRV: Total intc words=2,Total Irqs=65
[4294670.322000] IRQ handler type mismatch for IRQ 19
[4294670.322000] current handler: Front_SRQ
[4294670.331000] bcmdriver: request irq failed 0x-16
[4294670.336000] irq: 19 flags 0x00000020 name UPG_CPU_INTR
[4294670.341000] BCMDRV: Global Interrupt Mask 0:0xD09E3FEF,1:0x0EB20003,2:0x000    00000,3:0x00000000
[4294670.350000] BCMDRV: Initialization complete...
rcS: End of insmod list
rcS: source bdvd_custom_target_prep.sh
3.18 0.82
 app_player END
rcS: Exiting at Wed Ju
(none) login: root
Password:
Login incorrect


I tried. ?not.
Please use

Code: Select all

 tag for console output formatting. Thanks. Moderator.[/color]
All times are UTC+01:00
Page 2 of 3

Powered by phpBB® Forum Software © phpBB Limited