SamyGO

Samsung TV Firmware on the GO
https://forum.samygo.tv/

[How-To] Hacking C series TV. Models with Internet@TV only

https://forum.samygo.tv/viewtopic.php?t=11501

Page 3 of 19

Re: Hacking C series TV. It`s already done!

Posted: Sat Oct 30, 2010 8:43 pm
by arris69
yokoloko85 wrote:Tried cifs.ko from http://wiki.samygo.tv/index.php?title=M ... ypass_DLNA
Output when loading the module on dmesg was:

cifs: version magic '2.6.18_SELP-ARM preempt mod_unload ARMv6 gcc-4.2' should be '2.6.24_SELP.4.3.x-Cortex-A8 preempt mod_unload ARMv7 '

Output of insmod:
insmod: cannot insert '/mtd_rwarea/cifs.ko': Invalid module format (-1): Exec format error

Is the module on the URL you've mentioned different ?
why should i repack modules for armv6 in packages for other architectures? for sure the new are different.

arris

Re: Hacking C series TV. It`s already done!

Posted: Sat Oct 30, 2010 8:59 pm
by juusso
Hi, yokoloko85

I`m not the author of this hack, but i was very close when it was done. If you have run.sh working it is good. Next:
1. Download the file busybox.zip from here, extract from archive file busybox, place it to USB root.
2. Create new file run.sh with this code

Code: Select all

#!/bin/sh
 
if !([ -e /mtd_rwarea/busybox ]); then
        cp $1/busybox /mtd_rwarea/
        chmod 777 /mtd_rwarea/busybox
        sync
fi
if !([ -e /mtd_rwarea/sh ]); then
        ln -s /mtd_rwarea/busybox /mtd_rwarea/sh
        chmod 777 /mtd_rwarea/sh
        sync
fi
 
mount -t devpts devpts /dev/pts
/mtd_rwarea/busybox telnetd -l /mtd_rwarea/sh
sync
3. set permissions chmod 777 run.sh
4. Attach USB to TV.
5. Telnet to TV port 23...

If code does not work, you can try replace $1 with /dtv/usb/sda1 with code:

Code: Select all

cp /dtv/usb/sda1/busybox /mtd_rwarea/
Every time you want telnet, you need attach run.sh with code above or as i wrote, you can make other script with this code and call it from run.sh.

p.s. while i wrote the ansver, you did make all by yourself. Good luck ;)

Re: Hacking C series TV. It`s already done!

Posted: Sat Oct 30, 2010 9:13 pm
by arris69
yokoloko85 wrote:Sorry, didnt notice that you had recompiled them. ;-)
I couldn't download them, when I open the link you sent a blank screen appears surrounded by a menu and if I click on any option of that menu I get JS errors.
M$-internet-explorer :roll:

http://stb.zsolttech.com/SamyGO-OE.dev/ ... ALDEUC.ipk
http://stb.zsolttech.com/SamyGO-OE.dev/ ... ALDEUC.ipk

arris

[REQ] Hacking C series TV. It`s already done!

Posted: Sun Oct 31, 2010 8:05 am
by arris69
yokoloko85 wrote:[...]

cifs:
/dtv/usb/sda1 # insmod /mtd_rwarea/cifs.ko
insmod: cannot insert '/mtd_rwarea/cifs.ko': Unknown symbol in module (-1): No such file or directory

dmesg -> cifs: Unknown symbol malloc_sizes

fsue:
/dtv/usb/sda1 # insmod /mtd_rwarea/fuse.ko
insmod: cannot insert '/mtd_rwarea/fuse.ko': Unknown symbol in module (-1): No such file or directory

dmesg -> fuse: Unknown symbol malloc_sizes

...
thnx, next try ;-)

http://stb.zsolttech.com/SamyGO-OE.dev/ ... ALDEUC.ipk
http://stb.zsolttech.com/SamyGO-OE.dev/ ... ALDEUC.ipk

if unknown symboles again pls mail me the output of

Code: Select all

cat /proc/kallsyms
to arris@zsolttech.com

arris

Re: Hacking C series TV. It`s already done!

Posted: Sun Oct 31, 2010 5:57 pm
by arris69
dalewski wrote:Hello

I done this on my ue32c6500:
cifs.ko and fuse.ko from last post loaded correctly

# lsmod
Module Size Used by Tainted: P
[...]
cifs 227808 0 - Live 0xbf6d5000
fuse 38836 0 - Live 0xbf70e000
thnx,

and can you also access windows shares?

Code: Select all

mkdir <mountpoint> (where you have write access may /dtv/test)
mount -o ro,user=<winusername>,password=<winpasswd>,codepage=cp1250,iocharset=utf8 -t cifs //<winmachineip>/<share> <mountpoint>
and do the trick to write entry to /dtv/usb/log or /dtv/usb/usblog work on c series? btw. you can first try to mount your windows share on your usb pen (so <mountpoint> can be /dtv/usb/sd[abc]1/test)

thnx
arris

Re: Hacking C series TV. It`s already done!

Posted: Sun Oct 31, 2010 6:48 pm
by arris69
dalewski wrote:and can you also access windows shares?

Code: Select all

mkdir <mountpoint> (where you have write access may /dtv/test)
mount -o ro,user=<winusername>,password=<winpasswd>,codepage=cp1250,iocharset=utf8 -t cifs //<winmachineip>/<share> <mountpoint>
mount -o ro,user=...,password=...,codepage=cp1250,iocharset=utf8 -t cifs //192.168.0.2/... mnt
segfault:

Code: Select all

Unable to handle kernel NULL pointer dereference at virtual address 00000045
pgd = d4494000
[00000045] *pgd=8a712031, *pte=00000000, *ppte=00000000
Internal error: Oops: 17 [#3] PREEMPT
...
not so good.
dalewski wrote:
and do the trick to write entry to /dtv/usb/log or /dtv/usb/usblog work on c series?
What trick? I have write access to this file:

Code: Select all

/dtv/usb # ls -la usblog 
-rw-r--r--    1 root     0             173 Jan  1 00:00 usblog

Code: Select all

echo -e "[sdh]\nVendor : SmbFsMount\nProduct : Samba\nSerial : Q80VQLFI\nDevpath : 9\nLun : 0\nScsiDevicePath : /dev/sdh1\nMountDir : /dtv/usb/smb/192.168.1.2/pelis2\nFileSystem : vfat\n" >> /dtv/usb/usblog
than tv may let you access the files from internal media player

Re: Hacking C series TV. It`s already done!

Posted: Sun Oct 31, 2010 7:51 pm
by arris69
dalewski wrote:
arris69 wrote:

Code: Select all

echo -e "[sdh]\nVendor : SmbFsMount\nProduct : Samba\nSerial : Q80VQLFI\nDevpath : 9\nLun : 0\nScsiDevicePath : /dev/sdh1\nMountDir : /dtv/usb/smb/192.168.1.2/pelis2\nFileSystem : vfat\n" >> /dtv/usb/usblog
than tv may let you access the files from internal media player
Probably this will work fine, if I can mount remote shares.
can you pls download and try cifs package again (same url)

if it crash again, pls output of (btw. you can send me the info in any case to arris@zsolttech.com)

Code: Select all

cat /proc/kallsyms
cat /sys/selp/vd/lspinfo/*
cat /proc/cpuinfo
cat /proc/version
cat /proc/filesystems
thnx
arris
notice for me: svn r1069 (cast in memcpy)

Re: Hacking C series TV. It`s already done!

Posted: Sun Oct 31, 2010 8:30 pm
by arris69
without /proc/kallsyms its a bit hard to resconstruct the exact kernel config, i think ther is no /proc/config.gz :(

but seems i'm working with right sources lspinfo is the same

whats with nfs mount, can somebody test it pls.?

thnx
arris

Re: Hacking C series TV. It`s already done!

Posted: Sun Oct 31, 2010 8:35 pm
by juusso
nfs mount does not work:

Code: Select all

mount -t nfs 192.168.11.5:/d/films / -o udp
and

Code: Select all

mount -t nfs 192.168.11.5:/Films_D /
mounts nothing, cursor goes to next row until pressing ctrl+c

after creating mount point in dtv/usb/

Code: Select all

~ # mkdir -p /dtv/usb/nfs/
~ # mount -t nfs 192.168.11.5:/Films_D /dtv/usb/nfs/
mount: mounting 192.168.11.5:/Films_D on /dtv/usb/nfs/ failed
dot mount error.
NFS server haneWIN works properly. In haneWIN clients is IP of TV to see.

another try:

Code: Select all

~ # mkdir /dtv/usb/nfs
~ # /mtd_rwarea/busybox mount -t nfs 192.168.11.5:/Films_D /dtv/usb/nfs/
mount: mounting 192.168.11.5:/Films_D on /dtv/usb/nfs/ failed: Input/output error
Here is C650 mount:

Code: Select all

~ # mount
rootfs on / type rootfs (rw)
/dev/root on / type squashfs (ro)
none on /proc type proc (rw)
none on /sys type sysfs (rw)
none on /dev/sam type tmpfs (rw)
none on /dtv type tmpfs (rw)
none on /dsm type tmpfs (rw)
none on /core type tmpfs (rw)
none on /tmp type tmpfs (rw)
/dev/stl0/14 on /mtd_rwarea type rfs (rw,codepage=utf8,vfat,fcache(blks)=128)
/dev/stl0/19 on /mtd_rocommon type squashfs (ro)
/dev/stl0/15 on /mtd_exe type rfs (ro,codepage=cp949,vfat,fcache(blks)=128)
/dev/stl0/16 on /mtd_appdata type squashfs (ro)
/dev/stl0/13 on /mtd_contents type rfs (rw,codepage=utf8,vfat,fcache(blks)=128)
/dev/stl0/20 on /mtd_swu type rfs (rw,codepage=cp949,vfat,fcache(blks)=128)
/dev/stl0/21 on /mtd_rwcommon type rfs (rw,codepage=utf8,vfat,fcache(blks)=128)
none on /proc/bus/usb type usbfs (rw)
/dev/sda1 on /dtv/usb/sda1 type vfat (rw,sync,fmask=0022,dmask=0022,codepage=cp437,iocharset=utf8,shortname=mixed)
devpts on /dev/pts type devpts (rw)

Re: Hacking C series TV. It`s already done!

Posted: Sun Oct 31, 2010 10:06 pm
by arris69
last try for today ;)
http://stb.zsolttech.com/SamyGO-OE.dev/ ... ALDEUC.ipk

in the coredumps ntfs was not listed as module but the SELP.4.3.x.valencia.def.config in kernel sources has it as module configured
so if on tv

Code: Select all

lsmod

show ntfs pls remove it with

Code: Select all

rmmod ntfs
than try to load ntfs module from:
http://stb.zsolttech.com/SamyGO-OE.dev/ ... ALDEUC.ipk
and than try to attach ntfs formatted usb-pen/hd to tv

thnx for all your patience guys
arris
All times are UTC+01:00
Page 3 of 19

Powered by phpBB® Forum Software © phpBB Limited