Page 1 of 3
[App] Movie Player Seek Patch
Posted: Sat Feb 15, 2014 10:37 pm
by sectroyer
This is stable version of Seek Movie patch for E series. It allows settings time values for both KEY_LEFT/KEY_RIGHT and also adds support for KEY_UP/KEY_DOWN.
For me it works all the time and allows setting seek values multiple times without the need to restart TV. Please test it, post your TV model, firmware version and debug (-d) output
Sample usage:
Code: Select all
./seekpatch -n exeDSP --up 60 --down -60 --left -30 --right 30 -d
New, much more stable version. Please test and post your results
Update:
New dynamic version

Re: [App] Movie Player Seek Patch
Posted: Sun Feb 16, 2014 10:02 am
by juusso
T-GAPDEUC-1016
Code: Select all
Seekpatch v0.3.2 by sectroyer
./seekpatch -n exeDSP -d
pc=41cdb670 lr=41cdb65c sp=becc4088 fp=5b0e13c
r0=fffffe00 r1=80
r2=1 r3=0
Register values before memory allocation.
pc=41cdb670 lr=41cdb65c sp=becc4088 fp=5b0e13c
r0=fffffe00 r1=80
r2=1 r3=0
symbol: exit -> @0x419132c0
symbol: valloc -> @0x419537e0
symbol: mprotect -> @0x419b2be0
<command stopped at this moment - no activity in console window...>
result: left/right -/+ 15 sec in mediaplayer, but in console process has not been finished (no exit/quit?)
Re: [App] Movie Player Seek Patch
Posted: Sun Feb 16, 2014 11:33 am
by sectroyer
juuso wrote:T-GAPDEUC-1016
Code: Select all
Seekpatch v0.3.2 by sectroyer
./seekpatch -n exeDSP -d
pc=41cdb670 lr=41cdb65c sp=becc4088 fp=5b0e13c
r0=fffffe00 r1=80
r2=1 r3=0
Register values before memory allocation.
pc=41cdb670 lr=41cdb65c sp=becc4088 fp=5b0e13c
r0=fffffe00 r1=80
r2=1 r3=0
symbol: exit -> @0x419132c0
symbol: valloc -> @0x419537e0
symbol: mprotect -> @0x419b2be0
<command stopped at this moment - no activity in console window...>
result: left/right -/+ 15 sec in mediaplayer, but in console process has not been finished (no exit/quit?)
This patch is not for you. E series only

Still working on D version

Re: [App] Movie Player Seek Patch
Posted: Sun Feb 16, 2014 12:53 pm
by zoelechat
Works here

(T-MST10PDEUC-1042.0 on UE40ES6540)
Patch takes ~12 seconds to complete (during this time, TV is completely held, can't even change channel)
Code: Select all
./seekpatch -p `pidof exeDSP` --left -60 --right 60 --down -300 --up 300 -d
Code: Select all
pc=428234dc lr=428234c8 sp=bebefef8 fp=72bc50c
r0=fffffe00 r1=80
r2=1 r3=0
Register values before memory allocation.
pc=428234dc lr=428234c8 sp=bebefef8 fp=72bc50c
r0=fffffe00 r1=80
r2=1 r3=0
symbol: exit -> @0x422e7cdc
symbol: valloc -> @0x423244c0
symbol: mprotect -> @0x42379c80
Register values after valloc call.
pc=422e7cdc lr=423247ec sp=bebefef8 fp=72bc50c
r0=901e000 r1=1000
r2=3 r3=1203bff
Register values after mprotect call.
pc=422e7cdc lr=422e7cdc sp=bebefef8 fp=72bc50c
r0=0 r1=1000
r2=7 r3=1203bff
Address of allocated memory: @0x0901e000
Register values after cleanup.
pc=428234dc lr=428234c8 sp=bebefef8 fp=72bc50c
r0=fffffe00 r1=80
r2=1 r3=0
symbol: _ZN18CMMPEventProcVideo17t_ProcessKeyEventEPK7PTEvent -> @0x024ce4a8
symbol: _ZN19CMMPPlayEngineVideo4SkipEi -> @0x024dacdc
First patch location found at: @0x024ce5a4
Second patch location found at: @0x024cf284
Third patch location found at: @0x024cf880
Patching completed!
It seems that using command without keys options as juuso' example above mostly cause exeDSP crash. But by experience I know that my TV likes to crash easily, can't draw meaningful conlusions
In my opinion, if you want more people to test, you should explain in first post what's the use of patch and how to use it /syntax/example...
edit: I confirm it is possible to patch consecutive times and different values without rebooting TV...
Re: [App] Movie Player Seek Patch
Posted: Sun Feb 16, 2014 1:04 pm
by sectroyer
zoelechat wrote:Works here

(T-MST10PDEUC-1042.0 on UE40ES6540)
Patch takes ~12 seconds to complete (during this time, TV is completely held, can't even change channel)
Code: Select all
./seekpatch -p `pidof exeDSP` --left 60 --right 60 --down 300 --up 300 -d
Code: Select all
pc=428234dc lr=428234c8 sp=bebefef8 fp=72bc50c
r0=fffffe00 r1=80
r2=1 r3=0
Register values before memory allocation.
pc=428234dc lr=428234c8 sp=bebefef8 fp=72bc50c
r0=fffffe00 r1=80
r2=1 r3=0
symbol: exit -> @0x422e7cdc
symbol: valloc -> @0x423244c0
symbol: mprotect -> @0x42379c80
Register values after valloc call.
pc=422e7cdc lr=423247ec sp=bebefef8 fp=72bc50c
r0=901e000 r1=1000
r2=3 r3=1203bff
Register values after mprotect call.
pc=422e7cdc lr=422e7cdc sp=bebefef8 fp=72bc50c
r0=0 r1=1000
r2=7 r3=1203bff
Address of allocated memory: @0x0901e000
Register values after cleanup.
pc=428234dc lr=428234c8 sp=bebefef8 fp=72bc50c
r0=fffffe00 r1=80
r2=1 r3=0
symbol: _ZN18CMMPEventProcVideo17t_ProcessKeyEventEPK7PTEvent -> @0x024ce4a8
symbol: _ZN19CMMPPlayEngineVideo4SkipEi -> @0x024dacdc
First patch location found at: @0x024ce5a4
Second patch location found at: @0x024cf284
Third patch location found at: @0x024cf880
Patching completed!
It seems that using command without keys options as juuso' example above mostly cause exeDSP crash. But by experience I know that my TV likes to crash easily, can't draw meaningful conlusions
In my opinion, if you want more people to test, you should explain in first post what's the use of patch and how to use it /syntax/example...
edit: I confirm it is possible to patch consecutive times and different values without rebooting TV...
Could you tell me where it hangs up for this 12 seconds? What is the output at that moment? Also if you could post your exeDSP somewhere I would be grateful

This patch is still under development so I will change first post once it becomes more stable

Re: [App] Movie Player Seek Patch
Posted: Sun Feb 16, 2014 1:25 pm
by zoelechat
It holds exactly between:
and
Code: Select all
Register values after valloc call.
It holds only on first patch after TV start. If I try consecutive ones, they're nearly instantaneous.
In fact I'm not sure that exeDSP crash depends on command line options or not. It seems to be mostly random, but when it happens, it is also exactly there (during this ~12sec hold)
Just give me the time to upload my exeDSP somewhere and I send you PM link...

(edit: done)
Re: [App] Movie Player Seek Patch
Posted: Sun Feb 16, 2014 2:15 pm
by sectroyer
And if TV doesn't crash the patch works okay for you ?
Re: [App] Movie Player Seek Patch
Posted: Sun Feb 16, 2014 2:18 pm
by zoelechat
sectroyer wrote:And if TV doesn't crash the patch works okay for you ?
Yes, perfectly. Only on movies of course, not PVR.

Re: [App] Movie Player Seek Patch
Posted: Sun Feb 16, 2014 2:26 pm
by sectroyer
zoelechat wrote:sectroyer wrote:And if TV doesn't crash the patch works okay for you ?
Yes, perfectly. Only on movies of course, not PVR.

Okay so the patch is probably okay and it's your TVs fault

It maybe the case that this new (memjack2) way of patching is unstable for some devices. For my devices I can execute this patch even 20-30 times in a row and everything works fine. BTW after fixing D series support the same goes for juuso

I will analyze your exeDSP and let you know if there are any differences

Just to be sure but the moment when it hangs up it's way before actual patching

But wait a minute I have some other idea

It maybe some anti debugging issues. Please try running attached adbgfix with this command:
It's possible that after this one the seekpatch will be stable and will no longer crash your TV

Re: [App] Movie Player Seek Patch
Posted: Sun Feb 16, 2014 2:37 pm
by zoelechat
Anti-debug fix tells me that it is already patched (probably by one of the bugficks' modules I already have installed)
So, that makes no difference of course to launch it or not
I'm sure that it is not patching itself that cause *sometimes* crash. Crash is due to hold, both are related I think (~watchdog? It is OFF though)