[solved] Cycle reboot UE46C7700 - T-VALDEUC

[juusso]

Okey. TV now is healthy? Let`s stop off topic and continue to research eeprom? At least most interesting values

[hedak]

No, not healthy (i think):

Code: Select all

	insmod ehci_hcd...
	System will be down.(0x2)

Could you explain, what happened here:

Code: Select all

=== USE BSP RESET ===
############## Find Factory_Part1.dat File in mtd_exe ##################
############## Find Factory_Part2.dat File in mtd_exe ##################

Did it reset both mtd_exe areas?? (that was great!)

I will assemble the TV now to see the display (ATM its lying on the couch). But i !swear! to continue EEPROM research as soon as my TV is working again!

You are right, lets quit my problem in this thread. Would you be so kind and go on with me here: viewtopic.php?f=15&t=7120

[juusso]

hmm, maybe you should make toggle back to 2nd partition? i mean 77 ... B0

[juusso]

Some summary:

1. We know how to toggle partitions from micom eeprom on T-VAL* based device (viewtopic.php?f=15&t=7133)
2. You toggled to first partition, but TV still rebooted every 6.5 sec, right?
3. You deleted wrong start.sh but TV still reboots, time to reboot is now ~30 to 60 sek?
4. IN ANY CASE DON`T format /mtd_rwarea, you will lose hack, hotplug patch, then we can`t execute our scripts anymore

Am i correct because first two three?

p.s. did you modify both exe.img partitions or just one?

[hedak]

Of course i modified both exe.img partitions! Anything else would have been to easy now When i did that i didn't know why there was a second /mtd_exe partition and then i accidentally modified files of the worng partition...

1) correct!
2) yes, but the reason for toggling now was my faulty /mtd_rwarea/start.sh that was run by /mtd_exe/rc.local (the latter is placed in the partition toggled to)
3) yes, i removed the faulty /mtd_rwarea/start.sh with one of the scripts placed on usb stick (one of these: SamyGo.sh, run.sh, run_old.sh). After next forced reboot TV was up nearly 1 minute and i even heard the welcome tone! Then it shut down. The current state is now: I can turn it on, hear the welcome sound, see picture and popup showing weak signal. 45 seconds after start, the relais clicks and TV is turned off, no reboot. I could enter service menu and disable watchdog now. Last line of debug output is:

Code: Select all

[DevMgr/Fatal] 64 : [t_Main:450] All devices are initiated!!!
[CIP_KERNEL] count(1), value(0x0)
[DEV_ERROR  ] [GetPartitionSize] invalid path : NONE
System will be down.(0x2)

Current FW is as follows:

DSC_0308.jpg

4) OK, thanks for this hint, but as the faulty start.sh has gone there's no need to touch /mtd_rwarea ATM

juuso, THANK YOU SO MUCH so far!

EDIT: updated 3)

[juusso]

Now, we just have to reflash
-inactive exe.img
-hash partition with correct hashes
-switch to that partition using toggle (either micom, script or maybe software upgrade menu - doesn`t matter).

Is the T-VALDEUC 3011.0 on both partition sets?

[juusso]

Please make dumps of partitions below and attach here (you can do one dump per boot)
edit sda1 if your usb mounts not as sda1.

Code: Select all

dd if=/dev/bml0/5 of=/dtv/usb/sda1/bml5.dmp
dd if=/dev/bml0/6 of=/dtv/usb/sda1/bml6.dmp
dd if=/dev/bml0/7 of=/dtv/usb/sda1/bml7.dmp
dd if=/dev/bml0/8 of=/dtv/usb/sda1/bml8.dmp
dd if=/dev/bml0/9 of=/dtv/usb/sda1/bml9.dmp
dd if=/dev/bml0/10 of=/dtv/usb/sda1/bml10.dmp
cat /proc/cmdline > /dtv/usb/sda1/cmdline.txt

also cmdline.txt file to know what is what
i will check and give you some solution

[juusso]

I`m still waiting dumps

could enter service menu and disable watchdog now.

so in theory the 0x6D51 should be 00 now.

[hedak]

Ok ssh is working for some seconds. But the biggest dump of bm10/6 i could get was 143kB in size... Not enough time

Is any of these dumps smaller?

Whole content of cmdline.txt:

Code: Select all

root=/dev/tfsr6 console=ttyS1

[juusso]

You have to move commands one by one to SamyGO.sh and attach to it like you deleted start.sh

remove USB when TV goes to reboot. Biggest dumps are ~3-4Mb, smallest are about 256 Kb IIRC:

bml5 and 7 (kernel): 4.194.304 bytes
bml6 and 8(rootfs): 3.670.016 bytes
bml9 and 10(hash signature partitions): 262.144 bytes