Re: BD-E Debug Console [FOUND] + Setup Menu [FOUND]

[oga83]

Hello,

I've just receceived my BD-E8300, and the first thing I did was opening it
I tried to locate the debug console signals as I did with my BD-D8900.
It seems that Samsung worked to hide them a little more :
I spent a few hours trying to find the signals with my oscilloscope... without any success

The signals MUST be somewhere and I came to the point that the debug console might be disabled by default in the setup menu (which is surprising for a debug console that must be the first thing to work).
Unfortunately, I was not able to enter the setup menu. The KEY_FACTORY network method doesn't work anymore...
Firmware is up to date (1006).

Has anybody entered the E-series setup menu ?


Thanks

[Denny]

if you find out where exlink is, to enable TDM enter:

Code: Select all

20102011

[oga83]

I did not find it yet...

- About the debug console :
I removed the heatsink to see if the signals were there. Some resistors under the heatsink, but still no signal...

- About the setup menu :
I started to objdump exeDSP to see if I could find something about it.

@Denny,
The magic code to start the debug menu on the console is still in the code
" 26120b8 616e6420 21212100 32303038 39393939 and !!!.20089999"
It is used in <BdsDebug::t_Main()>
944d50: e30210c0 movw r1, #8384 ; 0x20c0 Pointer to string "20089999"
944d54: e3401261 movt r1, #609 ; 0x261
944d58: e0823000 add r3, r2, r0
944d5c: e1a00004 mov r0, r4
944d60: e5437041 strb r7, [r3, #-65]
944d64: ebfceab6 bl 87f844 <PCString::Diff(char const*, char const*)>

[oga83]

I found the debug port for the BD-E8X00
I didn't see it the first time I checked the signals; that's why I thought it was well hidden; in fact it's not



I used a minijack connector that I placed in the cable holder hole.
The 100 ohms resistors on the connectors are not really necessary (already on the board), but it's just an aditional protection.



and here it goes !

Code: Select all

kernel.msgmni = ##### VDLinux Warning msg, Pid [58], comm :rc.local, VD forbids user to change unaligned access policy. (3)
64
VERSION         B-ECBHRDEUC-1006.1
DATE            2012-04-26
^^ : mallopt (M_MMAP_THRESHOLD, 4096) is called successfully.....
##### System Execution!!! #####

Code: Select all

20089999

====================================
      [ TOP Debug Menu]
------------------------------------
  1  : SubSystem Print On/Off
  2  : Platform Print Setting
  3  : TD Print Setting
  4  : Performance Print Setting
  5  : Sdal Print Setting
  6  : Sdal Trace Setting
  11 : TD Debug
  12 : SubSystem DBG
  13 : SubSystem Info Print
  14 : Optical SubSystem   DBG
  21 : Louvre Print Setting
------------------------------------
  70 : Jade Debug
  80 : PVR Debug
  81 : CSP debug
====================================
  99 : Exit
====================================
DBG> :

I'm still working on the debug menu...

[juusso]

Wow, great findings, must have on wiki!

Now just check Is the shell input limited as on c and d series. Also how about (memory) registry write/read to patch memory...

[oga83]

Thank you Juziz28 !

Yes, the console only accepts hexa
I didn't find anything to patch memory in TDM.
Also, no shell in TDM...

[julianbb]

Great job Oliver !!!

[oga83]

I did not see at first sight, but /bin/sh can be ran from TDM (but with keyboard locked to hexa) :

Code: Select all

====================================
      [ TOP Debug Menu]
------------------------------------
  1  : SubSystem Print On/Off
  2  : Platform Print Setting
  3  : TD Print Setting
  4  : Performance Print Setting
  5  : Sdal Print Setting
  6  : Sdal Trace Setting
  11 : TD Debug
  12 : SubSystem DBG
  13 : SubSystem Info Print
  14 : Optical SubSystem   DBG
  21 : Louvre Print Setting
------------------------------------
  70 : Jade Debug
  80 : PVR Debug
  81 : CSP debug
====================================
  99 : Exit
====================================
DBG> 2

Input Start Level << : 0
Input End Level << : 0

====================================
     [Platform Debug List]
------------------------------------
  1. Basic Platform
  2. Advanced Platform
  3. Java
  4. Pharos
  5. Met Platform
  6. Shadow
------------------------------------
  99 : Exit
====================================
cmd> 2

====================================
     [Platform Debug List]
------------------------------------
  1 : USB HID Input Debug
  2 : DeviceManager Debug
  3 : ContentsManager Debug
  4 : Uniplayer Debug
  5 : InfoLink Debug
  6 : FullBrowser Debug
  7 : NetworkManager Debug
  8 : CherrySS Debug
  9 : NetworkSetup Debug
  10 : CMMLoginApp Debug
  11 : PVR Debug
  12 : MultiMedia Debug
  13 : MMPlayer Debug
  14 : CMPDivxApp Debug
  15 : CEC Debug
  16 : PSA Debug
  17 : FlashApps Debug
  18 : SWU Core
  19 : Cloning Debug
  20 : RM Debug
  21 : DMR Debug
  22 : DAE WebKit Debug
  23 : DAE Plugin WebKit Debug
  24 : WebServer Debug
  25 : RAStackApp Debug
  26 : Map Debug
  27 : DualTV Debug
  28 : DMRCore Debug
  29 : WidgetEngine Debug
  30 : SEF Debug
  31 : HasApi Debug
------------------------------------
  99 : Exit
====================================
cmd> 12

====================================
     [MultiMedia Debug Module]
------------------------------------
  1 : [OFF] MMBrowser     2 : [OFF] MMDOC         3 : [OFF] MMDevice
  4 : [OFF] MMPushVOD
====================================
 Debug Level = Fatal
====================================
 80 : All OFF
 81 : All ON
 82 : PMS ON/OFF
 85 : Set Debug Level
====================================
 10 : Lua Browser Debug
 11 : Lua Player Debug
 12 : Lua Recorder Debug
 13 : Lua Device Debug
 20 : Shell
------------------------------------
 99 : Exit
====================================
cmd> 20

VDLinux#>
VDLinux#>
VDLinux#>

[juusso]

Yes, same as C and D. Hope we can unlock this soon as for other series

[nobody]

It seems someone already did.

o.O

https://twitter.com/zibri/status/210166236267560960

Edit:
It seems he did also BD-D5300...
https://twitter.com/zibri/status/138045175741165568

I wonder why he didn't release anything and as I see he is banned from this forum.