[App] Movie Player Seek Patch

[sectroyer]

This is stable version of Seek Movie patch for E series. It allows settings time values for both KEY_LEFT/KEY_RIGHT and also adds support for KEY_UP/KEY_DOWN.
For me it works all the time and allows setting seek values multiple times without the need to restart TV. Please test it, post your TV model, firmware version and debug (-d) output

Sample usage:

Code: Select all

./seekpatch -n exeDSP --up 60 --down -60 --left -30 --right 30 -d

New, much more stable version. Please test and post your results

Update:
New dynamic version

[juusso]

T-GAPDEUC-1016

SpoilerShow

Code: Select all

 Seekpatch v0.3.2 by sectroyer

./seekpatch -n exeDSP -d
pc=41cdb670 lr=41cdb65c sp=becc4088 fp=5b0e13c
r0=fffffe00 r1=80
r2=1 r3=0
Register values before memory allocation.
pc=41cdb670 lr=41cdb65c sp=becc4088 fp=5b0e13c
r0=fffffe00 r1=80
r2=1 r3=0
symbol: exit -> @0x419132c0
symbol: valloc -> @0x419537e0
symbol: mprotect -> @0x419b2be0
<command stopped at this moment - no activity in console window...>

result: left/right -/+ 15 sec in mediaplayer, but in console process has not been finished (no exit/quit?)

[sectroyer]

T-GAPDEUC-1016

SpoilerShow

Code: Select all

 Seekpatch v0.3.2 by sectroyer

./seekpatch -n exeDSP -d
pc=41cdb670 lr=41cdb65c sp=becc4088 fp=5b0e13c
r0=fffffe00 r1=80
r2=1 r3=0
Register values before memory allocation.
pc=41cdb670 lr=41cdb65c sp=becc4088 fp=5b0e13c
r0=fffffe00 r1=80
r2=1 r3=0
symbol: exit -> @0x419132c0
symbol: valloc -> @0x419537e0
symbol: mprotect -> @0x419b2be0
<command stopped at this moment - no activity in console window...>

result: left/right -/+ 15 sec in mediaplayer, but in console process has not been finished (no exit/quit?)

This patch is not for you. E series only Still working on D version

[zoelechat]

Works here (T-MST10PDEUC-1042.0 on UE40ES6540)
Patch takes ~12 seconds to complete (during this time, TV is completely held, can't even change channel)

Code: Select all

./seekpatch -p `pidof exeDSP` --left -60 --right 60 --down -300 --up 300 -d

SpoilerShow

Code: Select all

pc=428234dc lr=428234c8 sp=bebefef8 fp=72bc50c
r0=fffffe00 r1=80
r2=1 r3=0
Register values before memory allocation.
pc=428234dc lr=428234c8 sp=bebefef8 fp=72bc50c
r0=fffffe00 r1=80
r2=1 r3=0
symbol: exit -> @0x422e7cdc
symbol: valloc -> @0x423244c0
symbol: mprotect -> @0x42379c80
Register values after valloc  call.
pc=422e7cdc lr=423247ec sp=bebefef8 fp=72bc50c
r0=901e000 r1=1000
r2=3 r3=1203bff
Register values after mprotect call.
pc=422e7cdc lr=422e7cdc sp=bebefef8 fp=72bc50c
r0=0 r1=1000
r2=7 r3=1203bff
Address of allocated memory: @0x0901e000
Register values after cleanup.
pc=428234dc lr=428234c8 sp=bebefef8 fp=72bc50c
r0=fffffe00 r1=80
r2=1 r3=0
symbol: _ZN18CMMPEventProcVideo17t_ProcessKeyEventEPK7PTEvent -> @0x024ce4a8
symbol: _ZN19CMMPPlayEngineVideo4SkipEi -> @0x024dacdc
First patch location found at: @0x024ce5a4
Second patch location found at: @0x024cf284
Third patch location found at: @0x024cf880
Patching completed!

It seems that using command without keys options as juuso' example above mostly cause exeDSP crash. But by experience I know that my TV likes to crash easily, can't draw meaningful conlusions

Code: Select all

./seekpatch -n exeDSP -d

In my opinion, if you want more people to test, you should explain in first post what's the use of patch and how to use it /syntax/example...

edit: I confirm it is possible to patch consecutive times and different values without rebooting TV...

[sectroyer]

Works here (T-MST10PDEUC-1042.0 on UE40ES6540)
Patch takes ~12 seconds to complete (during this time, TV is completely held, can't even change channel)

Code: Select all

./seekpatch -p `pidof exeDSP` --left 60 --right 60 --down 300 --up 300 -d

SpoilerShow

Code: Select all

pc=428234dc lr=428234c8 sp=bebefef8 fp=72bc50c
r0=fffffe00 r1=80
r2=1 r3=0
Register values before memory allocation.
pc=428234dc lr=428234c8 sp=bebefef8 fp=72bc50c
r0=fffffe00 r1=80
r2=1 r3=0
symbol: exit -> @0x422e7cdc
symbol: valloc -> @0x423244c0
symbol: mprotect -> @0x42379c80
Register values after valloc  call.
pc=422e7cdc lr=423247ec sp=bebefef8 fp=72bc50c
r0=901e000 r1=1000
r2=3 r3=1203bff
Register values after mprotect call.
pc=422e7cdc lr=422e7cdc sp=bebefef8 fp=72bc50c
r0=0 r1=1000
r2=7 r3=1203bff
Address of allocated memory: @0x0901e000
Register values after cleanup.
pc=428234dc lr=428234c8 sp=bebefef8 fp=72bc50c
r0=fffffe00 r1=80
r2=1 r3=0
symbol: _ZN18CMMPEventProcVideo17t_ProcessKeyEventEPK7PTEvent -> @0x024ce4a8
symbol: _ZN19CMMPPlayEngineVideo4SkipEi -> @0x024dacdc
First patch location found at: @0x024ce5a4
Second patch location found at: @0x024cf284
Third patch location found at: @0x024cf880
Patching completed!

It seems that using command without keys options as juuso' example above mostly cause exeDSP crash. But by experience I know that my TV likes to crash easily, can't draw meaningful conlusions

Code: Select all

./seekpatch -n exeDSP -d

In my opinion, if you want more people to test, you should explain in first post what's the use of patch and how to use it /syntax/example...

edit: I confirm it is possible to patch consecutive times and different values without rebooting TV...

Could you tell me where it hangs up for this 12 seconds? What is the output at that moment? Also if you could post your exeDSP somewhere I would be grateful This patch is still under development so I will change first post once it becomes more stable

[zoelechat]

It holds exactly between:

Code: Select all

symbol: mprotect -> @0x42379c80

and

Code: Select all

Register values after valloc  call.

It holds only on first patch after TV start. If I try consecutive ones, they're nearly instantaneous.

In fact I'm not sure that exeDSP crash depends on command line options or not. It seems to be mostly random, but when it happens, it is also exactly there (during this ~12sec hold)

Just give me the time to upload my exeDSP somewhere and I send you PM link... (edit: done)

[sectroyer]

And if TV doesn't crash the patch works okay for you ?

[zoelechat]

And if TV doesn't crash the patch works okay for you ?

Yes, perfectly. Only on movies of course, not PVR.

[sectroyer]

And if TV doesn't crash the patch works okay for you ?

Yes, perfectly. Only on movies of course, not PVR.

Okay so the patch is probably okay and it's your TVs fault It maybe the case that this new (memjack2) way of patching is unstable for some devices. For my devices I can execute this patch even 20-30 times in a row and everything works fine. BTW after fixing D series support the same goes for juuso I will analyze your exeDSP and let you know if there are any differences Just to be sure but the moment when it hangs up it's way before actual patching But wait a minute I have some other idea It maybe some anti debugging issues. Please try running attached adbgfix with this command:

Code: Select all

./adbgfix -n exeDSP -d

It's possible that after this one the seekpatch will be stable and will no longer crash your TV

[zoelechat]

Anti-debug fix tells me that it is already patched (probably by one of the bugficks' modules I already have installed)
So, that makes no difference of course to launch it or not

I'm sure that it is not patching itself that cause *sometimes* crash. Crash is due to hold, both are related I think (~watchdog? It is OFF though)