Page 3 of 7

Re: Cycle reboot UE46C7700 - T-VALDEUC

Posted: Sun Jan 12, 2014 7:07 pm
by hedak
Of course! Excuse me :oops:

I will attach the dumps now!

BTW bit 0x6D51 is 0x00 now ;) But i will double check (maybe that i forget to set it back to 0x01 when playing around with SoC EEPROM before)

Edit: I'm going crazy! That's my run_old.sh which is executed because run_old.ok is created:

Code: Select all

#!/bin/sh
dd if=/dev/bml0/10 of=/dtv/usb/sda1/bml10.dmp
date >> $1/run_old.ok
echo $1 >> $1/run_old.ok
#ls /mtd_rwarea/usb_mount >> $1/run_old.ok
#cp /mtd_rwarea/usb_mount/killself.sh $1
#cp /mtd_rwarea/usb_mount/usb_cmd $1
#cp /mtd_rwarea/usb_mount/usb_mount $1
#cp /mtd_rwarea/usb_mount/usb_hotplug.sh $1
rm -f /mtd_rwarea/profile
sh -x $1/SamyGO/rcSGO $1/SamyGO > $1/rcSGO_out 2>&1 &
But there is no dump file on the usb stick :?:

Edit2: changing to 'dd if=/dev/bml0/10 of=$1/bml10.dmp' has no effect too...

Re: Cycle reboot UE46C7700 - T-VALDEUC

Posted: Sun Jan 12, 2014 7:32 pm
by juusso

Code: Select all

mount | grep "sd*" >> $1/run_old.ok
is the answer /dtv/usb/sda1 ?

edit: Try

Code: Select all

dd if=/dev/bml0/10 of=/mtd_swu/bml10.dmp
cp -f /mtd_swu/bml10.dmp /dtv/usb/sda1/
or

Code: Select all

bml.dump /dev/bml0/10 /dtv/usb/sda1/bml10.dmp 
or

Code: Select all

cat /dev/bml0/10 > /dtv/usb/sda1/bml10.dmp 

Re: Cycle reboot UE46C7700 - T-VALDEUC

Posted: Sun Jan 12, 2014 7:53 pm
by hedak
Finally...

'mount|grep "sd*" > $1/run_old.ok' returned:

Code: Select all

rootfs on / type rootfs (rw)
/dev/root on / type squashfs (ro)
none on /sys type sysfs (rw)
none on /dev/sam type tmpfs (rw)
none on /dtv type tmpfs (rw)
none on /dsm type tmpfs (rw)
none on /core type tmpfs (rw)
none on /tmp type tmpfs (rw)
/dev/stl0/14 on /mtd_rwarea type rfs (rw,codepage=utf8,vfat,fcache(blks)=128)
/dev/stl0/19 on /mtd_rocommon type squashfs (ro)
/dev/stl0/15 on /mtd_exe type rfs (ro,codepage=cp949,vfat,fcache(blks)=128)
/dev/stl0/16 on /mtd_appdata type squashfs (ro)
/dev/stl0/13 on /mtd_contents type rfs (rw,codepage=utf8,vfat,fcache(blks)=128)
/dev/stl0/20 on /mtd_swu type rfs (rw,codepage=cp949,vfat,fcache(blks)=128)
/dev/stl0/21 on /mtd_rwcommon type rfs (rw,codepage=utf8,vfat,fcache(blks)=128)
none on /proc/bus/usb type usbfs (rw)
/dev/sda1 on /dtv/usb/sda1 type vfat (rw,sync,fmask=0022,dmask=0022,codepage=cp437,iocharset=utf8,shortname=mixed)
'bml.dump /dev/bml0/10 /dtv/usb/sda1/bml10.dmp' didn't work, but cat command did!

Edit: inconvenient dump sizes BTW... had to delete bml10.zip which you already downloaded as only 5 attachements are allowed

Re: Cycle reboot UE46C7700 - T-VALDEUC

Posted: Sun Jan 12, 2014 8:01 pm
by juusso
okey, waiting for other.

ps. i hope here is enough time to make dump of /dev/stl0/17 ?

Code: Select all

cat /dev/stl0/17 > /dtv/usb/stl17.dmp
or first to /mtd_swu and next reboot - copy to USB

Re: Cycle reboot UE46C7700 - T-VALDEUC

Posted: Sun Jan 12, 2014 8:23 pm
by juusso
bad, only bml9 and 10 are complete, other partitions have just ~1Mb of size

Edit. need to know how to calculate hash of current /mtd_exe, time is not enough to reflash full partition

Re: Cycle reboot UE46C7700 - T-VALDEUC

Posted: Sun Jan 12, 2014 8:28 pm
by hedak
Have to disappoint you: stl17.dmp copied from /mtd_swu is only 976kB...

Do you know how long a flash of /mtd_exe takes?

Is there any way to prevent sstem from shutting down (kill auth**)?

Edit: to see what file a touched (timestamps) on /mtd_exe 'ls -lsaR' would be fine, wouldn't it?!

Re: Cycle reboot UE46C7700 - T-VALDEUC

Posted: Sun Jan 12, 2014 8:41 pm
by juusso
flash of exe.img takes longer than you have time. Do you let TV boot with USB attached OR are you attaching USB after a while after TV is powered on?
Leave it for coldstart and let it dump bml0/5, we need more time.
Here is nothing what prevents TV from reboot by authuld, just correct hashes.

Re: Cycle reboot UE46C7700 - T-VALDEUC

Posted: Sun Jan 12, 2014 8:46 pm
by hedak
Is attached before boots.

Look, what i figured out:

Code: Select all

# mount -t rfs -r /dev/stl0/17 /mtd_rwcommon/hedak/
# ls -lsa /mtd_rwcommon/hedak
 128 -r-xr-xr-x    1 root     0          131072 Oct 10  2011 $RFS_LOG.LO$
   8 drwxrwxrwx    2 root     0            8192 Oct 10  2011 Comp_LIB
   8 drwxrwxrwx    2 root     0            8192 Oct 10  2011 EDID
   8 -rwxrwxrwx    1 root     0               6 Oct 10  2011 EXE_IMG_VER
 944 -rwxrwxrwx    1 root     0          964876 Oct 10  2011 Factory_Part1.dat
2232 -rwxrwxrwx    1 root     0         2283304 Oct 10  2011 Factory_Part2.dat
   8 lrwxrwxrwx    1 root     0              23 Oct 10  2011 GAME_LIB -> ../mtd_appdata/GAME_LIB
   8 lrwxrwxrwx    1 root     0              23 Oct 10  2011 InfoLink -> ../mtd_appdata/InfoLink
   8 lrwxrwxrwx    1 root     0              17 Oct 10  2011 Java -> /mtd_appdata/Java
  16 -rwxrwxrwx    1 root     0            8547 Oct 10  2011 LifeScenario
   8 lrwxrwxrwx    1 root     0              19 Oct 10  2011 RUIC -> ../mtd_appdata/RUIC
   8 -rwxrwxrwx    1 root     0              19 Oct 10  2011 ReleaseInfo
  16 -rwxrwxrwx    1 root     0            9764 Oct 10  2011 SpecialItemNumber.txt
   8 lrwxrwxrwx    1 root     0              23 Oct 10  2011 WIFI_LIB -> ../mtd_appdata/WIFI_LIB
   8 drwxrwxrwx    2 root     0            8192 Oct 10  2011 YWidget_LIB
  56 -rwxrwxrwx    1 root     0           52661 Oct 10  2011 ddr_margin
57984 -rwxrwxrwx    1 root     0        59369664 Oct 10  2011 exeDSP
   8 drwxrwxrwx    2 root     0            8192 Oct 10  2011 lib
  16 -rwxrwxrwx    1 root     0           10205 Oct 10  2011 memalloc
   8 drwxrwxrwx    2 root     0            8192 Oct 10  2011 moip
   8 -rwxrwxrwx    1 root     0             230 Oct 10  2011 otpcheck.sh
   8 -rwxrwxrwx    1 root     0            1974 Oct 10  2011 partition.txt
   8 -rwxrwxrwx    1 root     0              64 Oct 10  2011 prelink.cache
   8 -rwxrwxrwx    1 root     0             556 Oct 10  2011 prelink.conf
   0 -rwxrwxrwx    1 root     0               0 Jan  1  1980 rc.local
   8 -rwxrwxrwx    1 root     0              92 Oct 10  2011 rc.local.rfs
5408 -rwxrwxrwx    1 root     0         5536752 Oct 10  2011 samdrv.ko
   8 lrwxrwxrwx    1 root     0              25 Oct 10  2011 stagecraft -> ../mtd_appdata/stagecraft
   8 -rwxrwxrwx    1 root     0            1024 Oct 10  2011 value.bin
#
As suspected the rc.local is corrupted. What about setting time whith date command to Oct 10 2011 and create new file with correct content? And then toggling partitions back

Re: Cycle reboot UE46C7700 - T-VALDEUC

Posted: Sun Jan 12, 2014 8:49 pm
by juusso
You could try to replace correct rc.local from original exe.img same way like you changed it.
mount as rw and bla bla bla. But now you don`t have much time. And not much hope that in this case hashes will be correct.

Not create new file, but use original file!

Re: Cycle reboot UE46C7700 - T-VALDEUC

Posted: Sun Jan 12, 2014 8:56 pm
by hedak
I will try that! Could you extract the rc.local from T-VALDEUC-3011.0? (have no linux here to mount)
Why should the hashes not be correct after copying the original file? Because of the timestamp?