Bricked LE32C650

[juusso]

I serched for SWUpgrade on exeDSP and haven`t found any string in TDM too.

I was sure it is there, because B series has:

Code: Select all

TDM
12   (SubSystem)
1    (ssPlatformDebug)
13   (DirectSWUpgrade)

After choosing 13 TV starts to search firmware on USB. But this feature seems to be removed in C series.

[juusso]

I have some ideas...
Almost unreal, but...

IDEA No1
1. Full console enabled kernel (need to find out the address to patch - almost done, but requires time)
2. Encrypt kernel and add it to firmware upgrade USB. Edit checksums.
3. Make your firmware upgrade procedure (until 87% of success. Big chance that kernel is rewritten in this case, because TV flashes it before firmware. Don`t worry about authuld, it reboots your TV already and nothing else to be done.
4. If success, might input filtration is removed (patched kernel) and you can access full shell over exlink. It is enough to toggle to good firmware. (or correct checksumms?)
Time should be enough to make job because we can kill authuld:

Code: Select all

killall authuld

and get extra ~3 mins.

It sounds a bit mystical, because i dont know if TV does not decline any upgrade (our needed kernel) if firmware upgrade interrupts (in your case on 87%).


IDEA No2
what if you remove some files from firmware upgrade USB, that is not needed to upgrade, eg. just leave only firmware files? I mean you could try to leave:

Code: Select all

appdata.sec
appdata.sec.cmac
appdata.sec.cs
appdata.sec.vs
exe.sec
exe.sec.cmac
exe.sec.cs
exe.sec.vs
info.txt
major_version
minor_version
validinfo.txt
version_info.txt

File validinfo.txt should be edited by removing all stuff except exe.img and appdata.img like here (look at your firmware!, don`t copy/paste from here)

Code: Select all

*007_exe.img_f1c3eb29*011_appdata.img_cd58a244*005

I don`t know if TV accepts this stripped firmware. And even i don`t know if TV does not brick fully by flashing only firmware files w/o kernel and rootfs. We spare 7Mb of flashing. Is that enough? I doubt, but it is worth to try.

You asked ideas - you got it. I can`t confirm i`m right. Might i`m totally wrong. But idean No2 is more realistic. If you have had an alternative firmware, then there is kernel and rootfs already. The question is - what is TV behavior when/if it understoods about missing parts of upgrade. B series would be ok with this situation, how about C series?

[juusso]

Firmware upgrade has being succesfull only if both: appdata.img and exe.img are flashed. You couldn`t get success w/o one of those on USB.

If you know the address to patch, then it can be directly patched into the TV memory, no need to install as such.

Only in B series. On C and D series this feature is removed.

which file is the kernel in image or rootfs?

It`s file named Image. But it`s encrypted. You could decrypt it with samygo patcher (look at svn).

[juusso]

Check this topic.

Inspect your TDM for

Code: Select all

Register & Physical Memory Write

If this menu is active, then you`re lucky. Try to patch kernel and enable full console. I`m not sure about the address to patch, just confirm us that you have required menu under TDM...

[juusso]

Yes, you need number 1...

...Register & Physical Memory Write