SamyGO

Samsung TV Firmware on the GO
https://forum.samygo.tv/

[HOT] D series firmware with u-boot included. Official!

https://forum.samygo.tv/viewtopic.php?t=5858

Page 2 of 3

Re: [HOT] D series firmware with u-boot included. Official!

Posted: Mon May 06, 2013 4:29 pm
by spawnlmg
My TV UE55D7000LS downgraded to 1015 from DNS 149.154.159.134 which is displayed as 1090, how upgraded and which firmware?

Re: [HOT] D series firmware with u-boot included. Official!

Posted: Sat May 18, 2013 5:05 pm
by tempinbox
I have two questions...
1 is this T-GAP8DEUC-1028.0 is arm or mips?
2 can i flash it on C series? or is possible to flash only onboot and uboot so i can get access to uboot?

Re: [HOT] D series firmware with u-boot included. Official!

Posted: Sat May 18, 2013 7:51 pm
by juusso
no no, this is strongly for D series with firmware T-GAP[8]deuc

Re: [HOT] D series firmware with u-boot included. Official!

Posted: Sat May 25, 2013 8:07 pm
by Denny
just tested for fun :
files are okey and can be manual flashed!...

Code: Select all

U-Boot 2009.03 (Jan 27 2011 - 19:13:24)

SDP1002 #14950593 Operation clock
arm clock :  800.000 Mhz
ddr clock :  000.000 Mhz
peri clock : 050.000 Mhz
DRAM:  128 MB
env_relocate_spec : FlexOneNAND
crc is 0 not 3fe63ebc  67bc0008
wanning : Default environment
In:    serial
Out:   serial
Err:   serial
Net:   No ethernet found.
Hit any key to stop autoboot:  0
GENOA-P #  help
?       - alias for 'help'
base    - print or set address offset
bbm     - bbm   - BBM sub-system

boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootm   - boot application image from memory
bootp   - boot image via network using BOOTP/TFTP protocol
cmp     - memory compare
cp      - memory copy
crc32   - checksum calculation
crc32n  - several checksum calculation
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls   - list files in a directory (default /)
go      - start application at address 'addr'
help    - print online help
loop    - infinite loop on address range
md      - memory display
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nm      - memory modify (constant address)
printenv- print environment variables
rarpboot- boot image via network using RARP/TFTP protocol
reboot  - reboot

reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - saveenv - save environment variables to persistent storage

sdpmem  - setup memory info for kernel booting

setenv  - set environment variables
tftpboot- boot image via network using TFTP protocol
toggle  - toggle

usb     - USB sub-system
usbboot - boot from USB device
version - print monitor version
GENOA-P #
network not implemented...
usb buggy, noone usb found , maybee it needs some fix ...

Re: [HOT] D series firmware with u-boot included. Official!

Posted: Tue May 28, 2013 7:38 pm
by Mkò
Denny wrote:just tested for fun :
files are okey and can be manual flashed!...

Code: Select all

U-Boot 2009.03 (Jan 27 2011 - 19:13:24)

SDP1002 #14950593 Operation clock
arm clock :  800.000 Mhz
ddr clock :  000.000 Mhz
peri clock : 050.000 Mhz
DRAM:  128 MB
env_relocate_spec : FlexOneNAND
crc is 0 not 3fe63ebc  67bc0008
wanning : Default environment
In:    serial
Out:   serial
Err:   serial
Net:   No ethernet found.
Hit any key to stop autoboot:  0
GENOA-P #  help
?       - alias for 'help'
base    - print or set address offset
bbm     - bbm   - BBM sub-system

boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootm   - boot application image from memory
bootp   - boot image via network using BOOTP/TFTP protocol
cmp     - memory compare
cp      - memory copy
crc32   - checksum calculation
crc32n  - several checksum calculation
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls   - list files in a directory (default /)
go      - start application at address 'addr'
help    - print online help
loop    - infinite loop on address range
md      - memory display
mm      - memory modify (auto-incrementing)
mtest   - simple RAM test
mw      - memory write (fill)
nm      - memory modify (constant address)
printenv- print environment variables
rarpboot- boot image via network using RARP/TFTP protocol
reboot  - reboot

reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - saveenv - save environment variables to persistent storage

sdpmem  - setup memory info for kernel booting

setenv  - set environment variables
tftpboot- boot image via network using TFTP protocol
toggle  - toggle

usb     - USB sub-system
usbboot - boot from USB device
version - print monitor version
GENOA-P #
network not implemented...
usb buggy, noone usb found , maybee it needs some fix ...
How flash this manually???
I wanto to try these on my c series so i can get access to uboot...
And another question how i can dump the onboot and uboot of my c series tv ?
please reply (denny i read from your signature that you have one c series tv so maybe you can help me and answer my questions)
thx
Mk?

Re: [HOT] D series firmware with u-boot included. Official!

Posted: Tue May 28, 2013 10:05 pm
by Denny
How flash this manually???
I wanto to try these on my c series so i can get access to uboot...
And another question how i can dump the onboot and uboot of my c series tv ?
please reply (denny i read from your signature that you have one c series tv so maybe you can help me and answer my questions)
thx
Mk?
dont try to flash it to c serie , it is for d serie!

to flash manual i use bml.restore application located in device
at C serie , /dev/bml0/1 is onboot, uboot is blank and located at /dev/bml0/2

Re: [HOT] D series firmware with u-boot included. Official!

Posted: Sat Jun 01, 2013 3:20 pm
by Mkò
Denny wrote:
How flash this manually???
I wanto to try these on my c series so i can get access to uboot...
And another question how i can dump the onboot and uboot of my c series tv ?
please reply (denny i read from your signature that you have one c series tv so maybe you can help me and answer my questions)
thx
Mk?
dont try to flash it to c serie , it is for d serie!

to flash manual i use bml.restore application located in device
at C serie , /dev/bml0/1 is onboot, uboot is blank and located at /dev/bml0/2
I know i dump bml0/1 (onboot) bml0/2(u-boot) bml0/3 (uboot_env.bin) and bml0/2 is empty then uboot_env.bin has in it T-Valdeuc following by ff... so do you think that if i compile uboot and then flash it bml0/2 with bml.restore i get access to uboot? i need to calculate right hash before reflashing bml0/2? or maybe i can try to modify uboot_env.bin?
damn samsung :evil: why the don't release uboot stuff for c series arghh

Re: [HOT] D series firmware with u-boot included. Official!

Posted: Sun Jun 02, 2013 12:03 am
by Denny
I know i dump bml0/1 (onboot) bml0/2(u-boot) bml0/3 (uboot_env.bin) and bml0/2 is empty then uboot_env.bin has in it T-Valdeuc following by ff... so do you think that if i compile uboot and then flash it bml0/2 with bml.restore i get access to uboot? i need to calculate right hash before reflashing bml0/2? or maybe i can try to modify uboot_env.bin?
damn samsung :evil: why the don't release uboot stuff for c series arghh
i like your question! , so must answer :)

ok, what you think is not posible to do, even you get full source of u-boot or onboot because the onboot loader will not jump you into u-boot parition.

but!! :)

it is posible to build own boot strategy if you understand how Loader work, a bit more of ARM Assembler and C .

as onboot is not posible to reflash as it use locked 1st sector of flash, there is no posibility to let onboot start u-boot parition direct, the only way is to do a 2nd stage loader whitch will be flashed to working kernel parition (like kernel is prepared, with hashes calculated and stored in right places), from this 2nd stage loader (onboot2 or u-boot or u-boot-derivate) you may load your own kernel from where you want(serial/exlink, mmc, flash or usb) if you also include needed drivers.

if that loaded kernel (your own build) have network drivers, usb drivers etc... you may also mount rootfs from nfs or usb or even default from flash.

to do this by safe way, you need posibility to change boot parition or to swap between parition 0 and 1(kernel and rootfs) , that in case you make some fault, you can boot working parition to recover 2nd stage loader and continue develop of the 2nd stage loader until you think you finish.

now to missing sam?s GPL stuff that you will need, basicly all functions are inside of ram loaded, you just need to catch them by defining ram adress and you can use these functions without to have C code by jumping into memory address direct.

this is general posible to do with all devices where verification of kernel is known.

you still want to do it ?

Re: [HOT] D series firmware with u-boot included. Official!

Posted: Sun Jun 02, 2013 12:34 pm
by Mkò
Denny wrote:<...>
Thanks for your answer.
You say that onboot is locked is this related with the option OTP lock of service menu? Because i was playing with my tv service menu and i find this option after i press the button otp lock the tv restarts i do some research and i find that this otp lock is a write protection system...
On the TD menu instead i find some boot options but i don't know what there are for

Code: Select all

==============================
 [ TDsSystem Debug Menu ]
------------------------------
 1  : Set RTC 
 2  : Get RTC 
[u] [b]3  : Get Boot Status [/b][/u]
 4  : Set SubMicom Protection 
 5  : Set Watchdog 
 6  : Get Watchdog 
 7  : Set OSD Position 
 8  : Set OSD Mute 
 9  : Dependency debug 
 10  : Zigbee Auto Test 
 11  : System Monitor Debug
 12  : internet tset debug 
[u][b] 13  : Get SecureBoot Certification[/b][/u]
 14  : Touch Slide On/Off
------------------------------
 99  : Exit Debug 
------------------------------
TDsSystem>: 3
[u][b][BootFromMicom]Get Boot Status : 0
Success... Boot Status : 0 [/b][/u]
==============================
 [ TDsSystem Debug Menu ]
------------------------------
 1  : Set RTC 
 2  : Get RTC 
 3  : Get Boot Status 
 4  : Set SubMicom Protection 
 5  : Set Watchdog 
 6  : Get Watchdog 
 7  : Set OSD Position 
 8  : Set OSD Mute 
 9  : Dependency debug 
 10  : Zigbee Auto Test 
 11  : System Monitor Debug
 12  : internet tset debug 
 13  : Get SecureBoot Certification
 14  : Touch Slide On/Off
------------------------------
 99  : Exit Debug 
------------------------------
[u][b]TDsSystem>: 13
SecureBoot Certification Success[/b][/u]
====================================
      [ SsPlatform Debug Menu]   	
------------------------------------
  1 [u][b] : GetBootState  [/b][/u]  				
  2  : GetPowerState    			
  3  : SetTimer						
  4  : SetOption					
  5  : GetOption					
  6  : SetAppState					
  7  : GetSystemInfo				
  8  : GetDisplayInfo				
  9  : Auto Wall Mount Debug		
 10 : GetBootParam				
 11 : Get Open Source License Files List	
 12 : Get Country List				
 13 : Set Auto Stand Power On/Off		
 14 : Set Panel Slide Key On/Off	
====================================
  99 : Exit							
====================================
[u][b]DBG> : 1
BootState Read... BOOT_STATE_MASTER[/b][/u]

====================================
====================================
      [ SsPlatform Debug Menu]   	
------------------------------------
  1  : GetBootState    				
  2  : GetPowerState    			
  3  : SetTimer						
  4  : SetOption					
  5  : GetOption					
  6  : SetAppState					
  7  : GetSystemInfo				
  8  : GetDisplayInfo				
  9  : Auto Wall Mount Debug		
 10 : GetBootParam				
 11 : Get Open Source License Files List	
 12 : Get Country List				
 13 : Set Auto Stand Power On/Off		
 14 : Set Panel Slide Key On/Off	
====================================
  99 : Exit							
====================================
DBG> : [M_DTV/Debugging] 1441 : TCDVBSIManager::m_OnDVBTOTSection timeOffset = 120, timeOfchangeFlag = 0, nextTimeOffset = 60, localOffset = 120 newTimeOffset
10
[u][b]BootParam Read... OPTION_BOOT_PARAM_NORMAL[/b][/u]
Yes i want still to do this... :)

Re: [HOT] D series firmware with u-boot included. Official!

Posted: Fri Aug 30, 2013 9:27 am
by silverbios
working on UA40D6960MW?
TNX
All times are UTC+01:00
Page 2 of 3

Powered by phpBB® Forum Software © phpBB Limited