Page 2 of 7
Re: C Series EEPROM research
Posted: Sun Jan 12, 2014 4:46 pm
by juusso
Okey. TV now is healthy? Let`s stop off topic and continue to research eeprom? At least most interesting values
Re: C Series EEPROM research
Posted: Sun Jan 12, 2014 4:53 pm
by hedak
No, not healthy (i think):
Code: Select all
insmod ehci_hcd...
System will be down.(0x2)
Could you explain, what happened here:
Code: Select all
=== USE BSP RESET ===
############## Find Factory_Part1.dat File in mtd_exe ##################
############## Find Factory_Part2.dat File in mtd_exe ##################
Did it reset both mtd_exe areas?? (that was great!)
I will assemble the TV now to see the display (ATM its lying on the couch). But i !swear! to continue EEPROM research as soon as my TV is working again!
You are right, lets quit my problem in this thread. Would you be so kind and go on with me here:
viewtopic.php?f=15&t=7120
Re: C Series EEPROM research
Posted: Sun Jan 12, 2014 4:56 pm
by juusso
hmm, maybe you should make toggle back to 2nd partition? i mean 77 ... B0
Re: Cycle reboot UE46C7700 - T-VALDEUC
Posted: Sun Jan 12, 2014 5:03 pm
by juusso
Some summary:
- We know how to toggle partitions from micom eeprom on T-VAL* based device (viewtopic.php?f=15&t=7133)
- You toggled to first partition, but TV still rebooted every 6.5 sec, right?
- You deleted wrong start.sh but TV still reboots, time to reboot is now ~30 to 60 sek?
- IN ANY CASE DON`T format /mtd_rwarea, you will lose hack, hotplug patch, then we can`t execute our scripts anymore
Am i correct because first
two three?
p.s. did you modify both exe.img partitions or just one?
Re: Cycle reboot UE46C7700 - T-VALDEUC
Posted: Sun Jan 12, 2014 5:29 pm
by hedak
Of course i modified both exe.img partitions! Anything else would have been to easy now
When i did that i didn't know why there was a second /mtd_exe partition and then i accidentally modified files of the worng partition...
1) correct!
2) yes, but the reason for toggling now was my faulty /mtd_rwarea/start.sh that was run by /mtd_exe/rc.local (the latter is placed in the partition toggled to)
3) yes, i removed the faulty /mtd_rwarea/start.sh with one of the scripts placed on usb stick (one of these: SamyGo.sh, run.sh, run_old.sh). After next forced reboot TV was up nearly 1 minute and i even heard the welcome tone! Then it shut down. The current state is now: I can turn it on, hear the welcome sound, see picture and popup showing weak signal. 45 seconds after start, the relais clicks and TV is turned off, no reboot. I could enter service menu and disable watchdog now. Last line of debug output is:
Code: Select all
[DevMgr/Fatal] 64 : [t_Main:450] All devices are initiated!!!
[CIP_KERNEL] count(1), value(0x0)
[DEV_ERROR ] [GetPartitionSize] invalid path : NONE
System will be down.(0x2)
Current FW is as follows:
DSC_0308.jpg
4) OK, thanks for this hint, but as the faulty start.sh has gone there's no need to touch /mtd_rwarea ATM
juuso, THANK YOU SO MUCH so far!
EDIT: updated 3)
Re: Cycle reboot UE46C7700 - T-VALDEUC
Posted: Sun Jan 12, 2014 5:44 pm
by juusso
Now, we just have to reflash
-inactive exe.img
-hash partition with correct hashes
-switch to that partition using toggle (either micom, script or maybe software upgrade menu - doesn`t matter).
Is the T-VALDEUC 3011.0 on both partition sets?
Re: Cycle reboot UE46C7700 - T-VALDEUC
Posted: Sun Jan 12, 2014 6:02 pm
by juusso
Please make dumps of partitions below and attach here (you can do one dump per boot)
edit sda1 if your usb mounts not as sda1.
Code: Select all
dd if=/dev/bml0/5 of=/dtv/usb/sda1/bml5.dmp
dd if=/dev/bml0/6 of=/dtv/usb/sda1/bml6.dmp
dd if=/dev/bml0/7 of=/dtv/usb/sda1/bml7.dmp
dd if=/dev/bml0/8 of=/dtv/usb/sda1/bml8.dmp
dd if=/dev/bml0/9 of=/dtv/usb/sda1/bml9.dmp
dd if=/dev/bml0/10 of=/dtv/usb/sda1/bml10.dmp
cat /proc/cmdline > /dtv/usb/sda1/cmdline.txt
also cmdline.txt file to know what is what
i will check and give you some solution
Re: Cycle reboot UE46C7700 - T-VALDEUC
Posted: Sun Jan 12, 2014 6:44 pm
by juusso
I`m still waiting dumps
hedak wrote: could enter service menu and disable watchdog now.
so in theory the 0x6D51 should be 00 now.
Re: Cycle reboot UE46C7700 - T-VALDEUC
Posted: Sun Jan 12, 2014 6:50 pm
by hedak
Ok ssh is working for some seconds. But the biggest dump of bm10/6 i could get was 143kB in size... Not enough time
Is any of these dumps smaller?
Whole content of cmdline.txt:
Re: Cycle reboot UE46C7700 - T-VALDEUC
Posted: Sun Jan 12, 2014 6:51 pm
by juusso
You have to move commands one by one to SamyGO.sh and attach to it like you deleted start.sh
remove USB when TV goes to reboot. Biggest dumps are ~3-4Mb, smallest are about 256 Kb IIRC:
bml5 and 7 (kernel): 4.194.304 bytes
bml6 and 8(rootfs): 3.670.016 bytes
bml9 and 10(hash signature partitions): 262.144 bytes