[TOOL] sbf_flash (linux & macos) - Defy Android Development

I found a working tool for linux (works better than RSDLite, you see what it really flashed)
It works for all motorola sbf including Defy and Atrix
Code:
[email protected]:/work/flash_defy# sbf_flash ./firmware.sbf
SBF FLASH 1.23 (mbm)
http://opticaldelusion.org
=== firmware.sbf ===
Index[1]: Unexpected chip 32
Index[2]: Unexpected chip 32
Index[3]: Unexpected chip 32
Index[4]: Unexpected chip 32
Index[5]: Unexpected chip 32
Index[6]: Unexpected chip 32
Index[7]: Unexpected chip 32
Index[8]: Unexpected chip 32
Index[9]: Unexpected chip 32
00: RDL03 0x82000000-0x8204CFFF 8736 AP
01: CG32 0xC7A00000-0xC7A207FF 4805 AP
02: CG34 0xB0700000-0xB07047FF AB80 AP
03: CG35 0xB1000000-0xB17FFFFF FE64 AP
04: CG42 0xB0800000-0xB0862FFF 29BD AP
05: CG45 0xB0C00000-0xB0F007FF 8CDF AP
06: CG47 0xB1800000-0xB1FFFFFF 6040 AP
07: CG61 0xB0B00000-0xB0B7FFFF FA19 AP
08: CG64 0xB0000000-0xB00047FF 85D0 AP
09: CG65 0xB0180000-0xB01847FF 2409 AP
>> waiting for phone: Connected.
>> uploading RDL03: 100.0%
-- OK
>> verifying ramloader
-- OK
>> executing ramloader
-- OK
>> waiting for phone: Connected.
>> sending erase
-- OK
>> uploading CG32: 100.0%
-- OK
>> uploading CG34: 100.0%
-- OK
>> uploading CG35: 100.0%
-- OK
>> uploading CG42: 100.0%
-- OK
>> uploading CG45: 100.0%
-- OK
>> uploading CG47: 100.0%
-- OK
>> uploading CG61: 100.0%
-- OK
>> uploading CG64: 100.0%
-- OK
>> uploading CG65: 100.0%
-- OK
>> verifying CG32
-- OK
>> verifying CG34
-- OK
>> verifying CG35
-- OK
>> verifying CG42
-- OK
>> verifying CG45
-- OK
>> verifying CG47
-- OK
>> verifying CG61
-- OK
>> verifying CG64
-- OK
>> verifying CG65
-- OK
>> rebooting
Code:
sbf_flash [options] [sbf file]
-f - force; attempt to continue on error
-v - verbose output (of CDT)
-r - read CDT information from the phone
-x - extract sbf file
-d - download cg from phone
--cgname [file] - upload/download cgname
matches any cgname shown with -r
optional file arg for contents
Examples
========
sbf_flash file.sbf
upload file.sbf
sbf_flash -v -r
display detailed CDT information
sbf_flash -r --boot file.sbf
sbf_flash -r --boot boot.img file.sbf
upload boot, optionally using boot.img as the contents
sbf_flash -r -d --boot
sbf_flash -r -d --boot boot.img
download boot, if boot.img isn't specified it will be
saved using the cgname ("boot") as the filename
sbf_flash -r
This will read the CDT from the phone, displaying the names and locations of each codegroup on flash.
sbf_flash -x file.sbf
Extract codegroups from sbf file; files will be named according to codegroup, eg: CG30.img
sbf_flash -r -x file.sbf
Extract codegroups from sbf file, name according to CDT information.
sbf_flash -r --recovery file.sbf
Read the CDT, flash only the recovery codegroup from file.sbf.
sbf_flash -r --recovery recovery.img file.sbf
Same as above but writes the contents of recovery.img to recovery instead of using the sbf. (sbf file only used for ramloader)
Notes
The -r option must be specified before any options involving the CDT. The "--recovery" can be any name shown in the CDT, optionally followed by data which overrides the sbf contents; in other words you can write arbitrary data to any location on the flash -- be careful.
Code:
[email protected]:/work/flash_defy# sbf_flash -r
SBF FLASH 1.23 (mbm)
http://opticaldelusion.org
>> waiting for phone: Connected.
CG64 0xB0000000-0xB001FFFF mbr
CG63 0xB0020000-0xB003FFFF mbmloader
CG30 0xB0080000-0xB00FFFFF mbm
CG55 0xB0100000-0xB017FFFF mbmbackup
CG65 0xB0180000-0xB01FFFFF ebr
CG56 0xB0200000-0xB027FFFF bploader
CG31 0xB0280000-0xB02FFFFF cdt.bin
CG38 0xB0300000-0xB06FFFFF pds
CG34 0xB0700000-0xB077FFFF lbl
CG57 0xB0780000-0xB07FFFFF lbl_backup
CG42 0xB0800000-0xB08FFFFF logo.bin
CG41 0xB0900000-0xB0AFFFFF sp
CG61 0xB0B00000-0xB0B7FFFF devtree
CG62 0xB0B80000-0xB0BFFFFF devtree_backup
CG45 0xB0C00000-0xB0FFFFFF bpsw
CG35 0xB1000000-0xB17FFFFF boot
CG47 0xB1800000-0xB1FFFFFF recovery
CG33 0xB2000000-0xB2DFFFFF cdrom
CG44 0xB2E00000-0xB2E7FFFF misc
CG43 0xB2E80000-0xB2EFFFFF cid
CG53 0xB2F00000-0xB32FFFFF kpanic
CG39 0xB3300000-0xC79FFFFF system
CG32 0xC7A00000-0xC7A7FFFF prek
CG46 0xC7A80000-0xC7AFFFFF pkbackup
CG40 0xC7B00000-0xD42FFFFF cache
CG37 0xD4300000-0xEFFFFFFF userdata
Links
=====
HomePage : http://blog.opticaldelusion.org/search/label/sbf_flash
HOWTO
Dump a partition (to be fixed for defy) :
sample to dump kpanic partition :
Code:
sbf_flash -r -f -d --kpanic
v1.23 output error on read : RX(7): [02]ERR[1e][8a][03]

Never worked on my Mac.
Sent from my MB525 using XDA App

psicodelico said:
Never worked on my Mac.
Sent from my MB525 using XDA App
Click to expand...
Click to collapse
install VMWare fusion

hmm the Read-From-Device mode doesnt seems to work

Epsylon3 said:
install VMWare fusion
Click to expand...
Click to collapse
Why? sbf_flash is a tool for Mac OS. Nowadays I use VirtualBox to run RDS on Windows.

Darwin version is there : http://dl.opticaldelusion.org/sbf_flash.osx

Can you flash CG38 with the new tool? here's a CG38.smg
http://forum.xda-developers.com/showpost.php?p=10499252&postcount=12

no, in fact i'm debugging that since 5 hours with usb traces etc
So... what i ve found : We need a sbf containing this smg... because RAMDL present in each SBF is protected, so we cannot add something not present... we can only remove some of smg.
For the extract problem... it seems the READ command doesnt exists in RAMDL
I'm in contact with "mbm", the author of the tool, he is in openwrt team (linux routers)
Commands i found in the Boot loader (Motorola PCS Flash Interface) :
// RQINFO.0 (return cg partition table)
// RQHW 01FF000xxxxxxx
// RQSW ERROR NOT FOUND
// RQVN 00060601xxxxxxx,0006060xxxxxxxx,FFFFFFFFFFFFFFFF
// RQPI err
// ADDR.8200008A
// BIN (write)
// JUMP.8200008A (code jump, interresting)
// RQSF err
// UPGRADE.REQ_STAT err
// ERASE ACK.ERASE
// RQP
// RQSN
// RQSF
// RQRC.82000000,8204CFFF
// RQRC.82000000,8204CFFF
// RQRCS.B0000000,B00047FF
// RESTART
// ERASE
// RQFI
// POWER_DOWN
// PRDCT
// RQFI
// RQCS
// RQUID
but my problem is maybe not in "pds" ... could be in "sp" also or "bploader" ... 3 smgs not present in sbfs...

2.3.3 ROM sbf_flash -v -r (In fact, I find the result of all the ROMs are the same)
Code:
[[email protected] sbf]# ./sbf_flash -v -r
SBF FLASH 1.23 (mbm)
http://opticaldelusion.org
>> waiting for phone: Connected.
nfields 7
CG_num: 64
CG_name: mbr
signature_type: 1
start_addr: 0xb0000000
end_addr: 0xb001ffff
signature_start_addr: 0x83003800
signature_end_addr: 0x83003fff
CG_num: 63
CG_name: mbmloader
signature_type: 0
start_addr: 0xb0020000
end_addr: 0xb003ffff
signature_start_addr: 0x8701ff80
signature_end_addr: 0x8702077f
CG_num: 30
CG_name: mbm
signature_type: 0
start_addr: 0xb0080000
end_addr: 0xb00fffff
signature_start_addr: 0x8934f800
signature_end_addr: 0x8934ffff
CG_num: 55
CG_name: mbmbackup
signature_type: 0
start_addr: 0xb0100000
end_addr: 0xb017ffff
signature_start_addr: 0xffffffff
signature_end_addr: 0xffffffff
CG_num: 65
CG_name: ebr
signature_type: 1
start_addr: 0xb0180000
end_addr: 0xb01fffff
signature_start_addr: 0x83013800
signature_end_addr: 0x83013fff
CG_num: 56
CG_name: bploader
signature_type: 0
start_addr: 0xb0200000
end_addr: 0xb027ffff
signature_start_addr: 0xffffffff
signature_end_addr: 0xffffffff
CG_num: 31
CG_name: cdt.bin
signature_type: 1
start_addr: 0xb0280000
end_addr: 0xb02fffff
signature_start_addr: 0x89073800
signature_end_addr: 0x89073fff
CG_num: 38
CG_name: pds
signature_type: 0
start_addr: 0xb0300000
end_addr: 0xb06fffff
signature_start_addr: 0xffffffff
signature_end_addr: 0xffffffff
CG_num: 34
CG_name: lbl
signature_type: 1
start_addr: 0xb0700000
end_addr: 0xb077ffff
signature_start_addr: 0x80d03800
signature_end_addr: 0x80d03fff
CG_num: 57
CG_name: lbl_backup
signature_type: 1
start_addr: 0xb0780000
end_addr: 0xb07fffff
signature_start_addr: 0x80d03800
signature_end_addr: 0x80d03fff
CG_num: 42
CG_name: logo.bin
signature_type: 0
start_addr: 0xb0800000
end_addr: 0xb08fffff
signature_start_addr: 0x86f6f800
signature_end_addr: 0x86f6ffff
CG_num: 41
CG_name: sp
signature_type: 0
start_addr: 0xb0900000
end_addr: 0xb0afffff
signature_start_addr: 0x892af800
signature_end_addr: 0x892affff
CG_num: 61
CG_name: devtree
signature_type: 1
start_addr: 0xb0b00000
end_addr: 0xb0b7ffff
signature_start_addr: 0x8910f800
signature_end_addr: 0x8910ffff
CG_num: 62
CG_name: devtree_backup
signature_type: 1
start_addr: 0xb0b80000
end_addr: 0xb0bfffff
signature_start_addr: 0x8910f800
signature_end_addr: 0x8910ffff
CG_num: 45
CG_name: bpsw
signature_type: 2
start_addr: 0xb0c00000
end_addr: 0xb0ffffff
signature_start_addr: 0x644ff800
signature_end_addr: 0x644fffff
CG_num: 35
CG_name: boot
signature_type: 1
start_addr: 0xb1000000
end_addr: 0xb17fffff
signature_start_addr: 0x818ff800
signature_end_addr: 0x818fffff
CG_num: 47
CG_name: recovery
signature_type: 1
start_addr: 0xb1800000
end_addr: 0xb1ffffff
signature_start_addr: 0x818ff800
signature_end_addr: 0x818fffff
CG_num: 33
CG_name: cdrom
signature_type: 5
start_addr: 0xb2000000
end_addr: 0xb2dfffff
signature_start_addr: 0x8bdbf800
signature_end_addr: 0x8bdbffff
CG_num: 44
CG_name: misc
signature_type: 0
start_addr: 0xb2e00000
end_addr: 0xb2e7ffff
signature_start_addr: 0xffffffff
signature_end_addr: 0xffffffff
CG_num: 43
CG_name: cid
signature_type: 0
start_addr: 0xb2e80000
end_addr: 0xb2efffff
signature_start_addr: 0xffffffff
signature_end_addr: 0xffffffff
CG_num: 53
CG_name: kpanic
signature_type: 0
start_addr: 0xb2f00000
end_addr: 0xb32fffff
signature_start_addr: 0xffffffff
signature_end_addr: 0xffffffff
CG_num: 39
CG_name: system
signature_type: 5
start_addr: 0xb3300000
end_addr: 0xc79fffff
signature_start_addr: 0x9efbf800
signature_end_addr: 0x9efbffff
CG_num: 32
CG_name: prek
signature_type: 1
start_addr: 0xc7a00000
end_addr: 0xc7a7ffff
signature_start_addr: 0x8a71f800
signature_end_addr: 0x8a71ffff
CG_num: 46
CG_name: pkbackup
signature_type: 1
start_addr: 0xc7a80000
end_addr: 0xc7afffff
signature_start_addr: 0x8a71f800
signature_end_addr: 0x8a71ffff
CG_num: 40
CG_name: cache
signature_type: 0
start_addr: 0xc7b00000
end_addr: 0xd42fffff
signature_start_addr: 0xffffffff
signature_end_addr: 0xffffffff
CG_num: 37
CG_name: userdata
signature_type: 0
start_addr: 0xd4300000
end_addr: 0xefffffff
signature_start_addr: 0xffffffff
signature_end_addr: 0xffffffff
+27
Usage: ./sbf_flash <filename>

i got this trying to find the CG names, any ideas?
HTML:
v1.23 output error on read : RX(7): [02]ERR[1e][8a][03]

can this be used instead of nandroid to download from phone via usb to workstation?

VerizonKoolaid said:
can this be used instead of nandroid to download from phone via usb to workstation?
Click to expand...
Click to collapse
No, that is possible but will only works on your device
But you have now the new feature "Share system" (Mass storage) in bootmenu 1.0.4

Can this be used to extract a radio from one phone, and install it on another?
(Somewhat old thread bump, sorry)

I couldn't get it to work with my Mac (stuck "waiting for phone" after executing ramloader...).
But it worked like a charm with my Xubuntu!
Saved my Defy.
(I've used the universal-binary version)

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
My phone went for a service cos it was water damaged..gave my phone to some local guy..he removed the shield and exposed this part of my defy..thought this could be of some use..that's why posted this
Sent from my Defy

My bro frm whr u learnt English
Sent from my MB525 using xda premium

Why bro from where you learn em...indian people dont use full form of words...they are used to such kinda habit in messaging/texting..Ignore that.
Didn't know you're from India..! .
And stop spamming
This ain't facebook..
Sent from my MB526 using Tapatalk 2

I just want to ask if I could do this with only one code?
I mean something like this:
Code:
./sbf_flash -r --boot --devtree file.sbf
And can I extract boot with
Code:
./sbf_flash -r -d --boot boot.img
?
Because I tried and it showed error, but boot.img was there in folder after all?!

Hi, tried this with a defy, getting errors:
Code:
Index[1]: Unexpected chip 32
>> Verifying CG32
Chechsum error (Expected 0x4805, Got 0x4a05)
!! failed
>> Verifying CG34
usb_bulk_read -110
!! failed
>> Verifying CG53
usb_bulk_write -110
!! failed
>> Verifying CG65
usb_bulk_write -19
!! failed
It looks like writing (or reading) fails, resulting in checksum errors.
The phone currently does not boot, that's the bootloader:
Code:
Bootloader
09.10
[B]Code Corrupt[/B]
Battery OK
OK to Program
Connect USB Data Cable
I did MD5 of the downloads, they are all good.
Tried --recovery as well, similar errors.
I hope its not bricked.

Related

[Q] Partition error, Formatting partition 2 BCT.. FAILED!

Sorry for my English.
eee pad transformer 32gb flashed on prime 1.5 everything seemed to be ok
have not yet made a wipe to get rid of the boot lock screen. It does not work.
CWM does not mount data partition. Factory Reset does not work.
With nvflash partitiontable.txt downloaded and compared it with flash.cfg, they are different.
CWM can't mount "/data" partition, and error with formating
nvflash.exe --bct transformer.bct --setbct --configfile flash.cfg --create --bl bootloader.bin --odmdata 0x300d8011 --sbk 0x1682CCD8 0x8A1A43EA 0xA532EEB6 0xECFE1D98 --go
Nvflash started
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 3
chip sku: 0x8
chip uid: 0x033c208344007097
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 2
device config fuse: 0
sdram config strap: 0
sending file: transformer.bct
- 4080/4080 bytes sent
transformer.bct sent successfully
odm data: 0x300d8011
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader.bin
| 943193/943193 bytes sent
bootloader.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
setting device: 2 3
creating partition: BCT
creating partition: PT
creating partition: EBT
creating partition: SOS
creating partition: LNX
creating partition: BAK
creating partition: GP1
creating partition: APP
creating partition: CAC
creating partition: MSC
creating partition: USP
creating partition: PER
creating partition: YTU
creating partition: UDA
creating partition: GPT
Formatting partition 2 BCT please wait.. FAILED!
command failure: create failed (bad data)
bootloader status: partition table is required for this command (code: 8) message: nverror:0x2 (0x2) flags: 0
Click to expand...
Click to collapse
"my size" - from nvflash --getpartitiontable partitiontable.txt
Code:
# name my size flash.cfg
2 BCT 3 145 728 3 145 728
3 PT 524 288 4 096 !!!
4 EBT 4 194 304 4 194 304
5 SOS 5 242 880 5 242 880
6 LNX 8 388 608 8 388 608
7 BAK 5 242 880 5 242 880
8 GP1 1 048 576 1 048 576
9 APP 536 870 912 536 870 912
10 CAC 555 220 992 554 700 800 !!!
11 MSC 2 097 152 2 097 152
12 USP 555 220 992 554 700 800 !!!
13 PER 5 242 880 5 242 880
14 YTU 524 288 524 288
15 UDA 29 249 503 232 18 432 !!!
16 GPT 524 288 …
Backuped partitions with nvflash transoformer.bct:
Code:
file size name
3 145 728 02_BCT_raw.img
524 288 03_PT_raw.img
4 194 304 04_EBT_raw.img
5 242 880 05_SOS_raw.img
8 388 608 06_LNX_raw.img
5 242 880 07_BAK_raw.img
1 048 576 08_GP1_raw.img
536 870 912 09_APP_raw.img
555 220 992 10_CAC_raw.img
2 097 152 11_MSC_raw.img
555 220 992 12_USP_raw.img
5 242 880 13_PER_raw.img
524 288 14_YTU_raw.img
524 288 16_GPT_raw.img
Need help. How to fix it?
PAD is now loaded with the screen here like http://forum.xda-developers.com/showthread.php?p=13981326
nvflash no stitches, I made a backup, flash, then did another backup, which compared the md5 sections reflashed, nothing has changed
nvflash not working
Did you find a resolution to this problem? I'm having the same issue.
What model is your TF? B60, etc? Your SBK is correct, but it seems like your layour is different from the bct. Have you tried redownloading the files and starting from scratch? Maybe some of the NVflash files are corrupted.
Just FYI, if you use NVFlash to backup the partitions, do not restore partition 2 or 4:
Originally Posted by rayman84
Just FYI, you *don't* want to restore partition 2 and 4 at the very least. (and probably others!)
Partition 2 and 4 are encrypted. nvflash does not decrypt it when --read'ing, but at least during --create, it does encrypt it. I'm not entirely sure whether it encrypts it during --download, but if it does, the tablet will appear bricked after flashing.
http://forum.xda-developers.com/showthread.php?t=1129308
msticninja said:
What model is your TF? B60, etc? Your SBK is correct, but it seems like your layour is different from the bct. Have you tried redownloading the files and starting from scratch? Maybe some of the NVflash files are corrupted.
Just FYI, if you use NVFlash to backup the partitions, do not restore partition 2 or 4:
Originally Posted by rayman84
Just FYI, you *don't* want to restore partition 2 and 4 at the very least. (and probably others!)
Partition 2 and 4 are encrypted. nvflash does not decrypt it when --read'ing, but at least during --create, it does encrypt it. I'm not entirely sure whether it encrypts it during --download, but if it does, the tablet will appear bricked after flashing.
http://forum.xda-developers.com/showthread.php?t=1129308
Click to expand...
Click to collapse
Mine is a B60. I originally did the nvflash and it worked great for a week. Then yesterday it gave me the 'enter your password' screen. So I tried a cwm factory reset and a hard reset, neither of which have helped. I then redownloaded the files and tried reflashing and it quits on the partition 2 error. I'm guessing I'll have to go pick up another tablet.
Gave a warranty repair, a month now picks nothing to do with it can not. Now you have a new brick.

[Q] Problem with Heimdall

I try to use the new version of Heimdall but when starting to flash I had the following error:
Code:
Heimdall v1.3.0, Copyright (c) 2010-2011, Benjamin Dobell, Glass Echidna
This software is provided free of charge. Copying and redistribution is
encouraged.
If you appreciate this software and you would like to support future
development please consider donating:
Initialising connection...
Detecting device...
ERROR: Failed to access device. libusb error: -3
Is there anybody that could explain the problem ?
However my SGS-2 is detect in the utilities tab.
Thanks for your answers.
Django313 said:
I try to use the new version of Heimdall but when starting to flash I had the following error:
Code:
Heimdall v1.3.0, Copyright (c) 2010-2011, Benjamin Dobell, Glass Echidna
This software is provided free of charge. Copying and redistribution is
encouraged.
If you appreciate this software and you would like to support future
development please consider donating:
Initialising connection...
Detecting device...
ERROR: Failed to access device. libusb error: -3
Is there anybody that could explain the problem ?
However my SGS-2 is detect in the utilities tab.
Thanks for your answers.
Click to expand...
Click to collapse
Heimdall is flashing software? Why not use Odin?
As far as I understand Heimdall is for use on Galaxy S, not S2.
theo80 said:
Heimdall is flashing software? Why not use Odin?
As far as I understand Heimdall is for use on Galaxy S, not S2.
Click to expand...
Click to collapse
Because Heimdall is stable, reliable, open-source, cross-platform, allows for a large degree of flashing freedom and is guaranteed to be legal. None of these are true for Odin. Although not necessarily overly important Heimdall also flashes substantially faster.
Also as of 1.3.0 Heimdall Frontend now supports Heimdall Firmware Packages, which are by far a superior than attempting to flash several description-less tar archives with Odin.
EDIT: Heimdall works with all Galaxy S devices, except the Droid Charge, which we've had difficulties with. Which is another advantage over Odin; one version of Heimdall works with all devices so there's less confusion about versions.
Django313 said:
I try to use the new version of Heimdall but when starting to flash I had the following error:
Code:
Heimdall v1.3.0, Copyright (c) 2010-2011, Benjamin Dobell, Glass Echidna
This software is provided free of charge. Copying and redistribution is
encouraged.
If you appreciate this software and you would like to support future
development please consider donating:
Initialising connection...
Detecting device...
ERROR: Failed to access device. libusb error: -3
Is there anybody that could explain the problem ?
However my SGS-2 is detect in the utilities tab.
Thanks for your answers.
Click to expand...
Click to collapse
What OS are you running? If it's Windows make sure you follow the README and install the drivers.
@Benjamin Dobell
Yes, I use heimdall 1.3.0 on Kubuntu 11.04.
I read your e-mail and I try to launch Heimdall with sudo and it works !
but it's finished bad, resulting in a "half-bricked" SGS-2.
the flash of the datafs partition, when reaching 100% freeze and heimdall sent the error that it couldn't load datafs. ending the session...
I try twice flashing my phone:
- one with my own built heimdall-firmware-packages
- the other was custom flashing.
both failed.
The third flashing I made with odin in a virtualbox, and succeeded.
here is the results when launching Heimdall in a terminal :
Code:
[email protected]:~$ sudo heimdall-frontend
[sudo] password for didier:
Error: "/var/tmp/kdecache-didier" is owned by uid 1000 instead of uid 0.
QInotifyFileSystemWatcherEngine::addPaths: inotify_add_watch failed: Aucun fichier ou dossier de ce type
QFileSystemWatcher: failed to add paths: /home/didier/.config/ibus/bus
KGlobal::locale::Warning your global KLocale is being recreated with a valid main component instead of a fake component, this usually means you tried to call i18n related functions before your main component was created. You should not do that since it most likely will not work
Error: "/tmp/kde-didier" is owned by uid 1000 instead of uid 0.
Error: "/tmp/ksocket-didier" is owned by uid 1000 instead of uid 0.
kdeinit4: Shutting down running client.
Connecting to deprecated signal QDBusConnectionInterface::serviceOwnerChanged(QString,QString,QString)
Error: "/tmp/ksocket-didier" is owned by uid 1000 instead of uid 0.
Error: "/tmp/kde-didier" is owned by uid 1000 instead of uid 0.
Error: "/var/tmp/kdecache-didier" is owned by uid 1000 instead of uid 0.
kbuildsycoca4 running...
Error: "/var/tmp/kdecache-didier" is owned by uid 1000 instead of uid 0.
Error: "/var/tmp/kdecache-didier" is owned by uid 1000 instead of uid 0.
Error: "/var/tmp/kdecache-didier" is owned by uid 1000 instead of uid 0.
Error: "/tmp/ksocket-didier" is owned by uid 1000 instead of uid 0.
Error: "/var/tmp/kdecache-didier" is owned by uid 1000 instead of uid 0.
[email protected]:~$
Django313 said:
@Benjamin Dobell
Yes, I use heimdall 1.3.0 on Kubuntu 11.04.
I read your e-mail and I try to launch Heimdall with sudo and it works !
but it's finished bad, resulting in a "half-bricked" SGS-2.
the flash of the datafs partition, when reaching 100% freeze and heimdall sent the error that it couldn't load datafs. ending the session...
I try twice flashing my phone:
- one with my own built heimdall-firmware-packages
- the other was custom flashing.
both failed.
Click to expand...
Click to collapse
In regards to sudo permissions being required, I just did a bit of searching and I found some information (although it may have been old) that Kubuntu's udev rules are in a different location to Ubuntu's. I also found separate information indicating that Kubuntu is using an outdated udev rules specification. Either of these two things would cause the -3 permissions error without running Heimdall as a super user.
Do you know exactly what the error was you received from Heimdall when flashing failed? The output from Heimdall Frontend only contains the permissions errors and aren't related to the flashing process. When you use Heimdall Frontend, Heimdall's output is displayed in "Status" section of the "Flash" tab so that it can easily be copy and paste.
By the way if your phone gets stuck in a "half-bricked" state again then it can usually be fixed by going to the "Utilities" tab and running the "Close PC Screen" action. This doesn't repair any corrupted files on device (if there are any). This literally just tells the phone that it should at least try boot up, instead of displaying the phone <--> PC screen.
Help please
trying to run heimdall 1.3.0 on Mac OS 10.5.8, I have qt/xcode installed, still doesn't seem to work. everytime i run frontend and try to detect my device (samsung captivate)or save my .pit file I get "FRONTEND ERROR Heimdall crash"
Any suggestions ?
ERROR: Failed to access device. libusb error: -12
Win7 x64
Installed drivers:
Heimdall v1.3.0, Copyright (c) 2010-2011, Benjamin Dobell, Glass Echidna http://www.glassechidna.com.au
This software is provided free of charge. Copying and redistribution is
encouraged.
If you appreciate this software and you would like to support future
development please consider donating:
http://www.glassechidna.com.au/donate/
Initialising connection...
Detecting device...
Claiming interface...
Setting up interface...
Beginning session...
Handshaking with Loke...
Uploading PITERROR: Failed to send end session packet!
ERROR: Failed to send file part packet!
PIT upload failed!
Ending session...
Odin works, back to odin.
Problem with heimdall on mac 0s 10.5.8
Crappyvate said:
trying to run heimdall 1.3.0 on Mac OS 10.5.8, I have qt/xcode installed, still doesn't seem to work. everytime i run frontend and try to detect my device (samsung captivate)or save my .pit file I get "FRONTEND ERROR Heimdall crash"
Any suggestions ?
Click to expand...
Click to collapse
@benjamin
Problem solved after updating to osx 10.6
there seem to be issues between Heimdall 1.3 on Leopard 10.5 and certain binaries. Heimdall command line does not execute and just crashes.
I'm getting a similar error on Arch Linux running Heimdall v1.3.0 with my Fascinate:
Code:
Initialising connection...
Detecting device...
ERROR: Failed to access device. libusb error: 4
I do have the proper udev rules in place:
Code:
$ lsusb | grep Samsung
Bus 002 Device 068: ID 04e8:6601 Samsung Electronics Co., Ltd Mobile Phone
I couldn't get Heimdall to even detect the device on my MacBook Pro running 10.6.8. I don't have access to a Windows machine to do further testing, and have had a lot of issues trying to update pretty much anything on my phone after I rooted and put a Superclean ROM on a few months ago. Here's my current setup: pastie.org/2358372
Today I tried to flash my SGS-II with heimdall 1.3.0 on Linux Kubuntu 11.04.
I used the latest firmware XXKH3 and it failed as it did with the firmware XXKG6 few weeks ago. Just after it downloaded the file "datafs" it freeze resulting in a half-bricked phone.
Certainly there is a bug in heimdall at this point because all the others files are correctly downloaded.
the question is : why ?
I'm on Mac OsX 10.6.8, and after tried to flash my firmware using the downloaded PIT from my device, Heimdall told me that there were an error with libusb while it was trying to upload the PIT.
My SGS got semi-bricked, and after putting it to download mode again and unchecking Repartition in Heimdall, everything was fine with the flashing.
So, the question is... is there a bug with repartitioning? is it possible to use my device's PIT to repartition?
Need new bootloader for EPIC? How do I tell?
All, I picked up an EPIC from someone and they put DK28 on it which is a bit of a dead end. All searches turned up needing Odin and I don't have a Windows box. I then found Heimdall and then this thread here:
http://forum.xda-developers.com/showthread.php?t=1353310
This all looks promising but then I've read where I need to update the bootloader if I'm using a Mac. My question is, with an EPIC of somewhat unknown past, how do I know if I have the right bootloader on it? DK28 is the leaked Froyo that never got OTA'd. I want to get this EPIC back onto the OTA track so it can get Gingerbread. I've found CWM flashable images but the modem seems to be the biggest struggle. Of course, if Heimdall works, the thread above looks like it will get me all that I want.
So if anyone can help and tell me how to figure out if I've got the right bootloader and won't get the black screen problem, that would be cool.
thanks peterb
Need some help please
My device got messed up and I know nothing about using Linux or fixing partitions with ADB, I have the partition tables I need to fix it but I have no clue and no one in our community knows how to change the "head" sectors from four to ONE. Please this is my partition list from heimdal
Entry Count: 14
Unknown 1: 15718400
Unknown 2: 1
Unknown 3: 0
Unknown 4: 0
Unknown 5: 7703
Unknown 6: 237
Unknown 7: 62704
Unknown 8: 18
--- Entry #0 ---
Unused: No
Chip Identifier: 2 (Unused: %
s
)
Partition Identifier: 1
Partition Flags: 1 (R)
Unknown 1: 0
Partition Block Size: 256
Partition Block Count: 1
Unknown 2: 0
Unknown 3: 0
Partition Name: IBL+PBL
Filename: boot.bin
--- Entry #1 ---
Unused: No
Chip Identifier: 2 (Unused: %
s
)
Partition Identifier: 2
Partition Flags: 1 (R)
Unknown 1: 0
Partition Block Size: 256
Partition Block Count: 1
Unknown 2: 0
Unknown 3: 0
Partition Name: PIT
Filename: YPG70_8G-0304.pit
--- Entry #2 ---
Unused: No
Chip Identifier: 2 (Unused: %
s
)
Partition Identifier: 3
Partition Flags: 1 (R)
Unknown 1: 0
Partition Block Size: 256
Partition Block Count: 5
Unknown 2: 0
Unknown 3: 0
Partition Name: SBL
Filename: Sbl.bin
--- Entry #3 ---
Unused: No
Chip Identifier: 2 (Unused: %
s
)
Partition Identifier: 4
Partition Flags: 1 (R)
Unknown 1: 0
Partition Block Size: 256
Partition Block Count: 5
Unknown 2: 6226025
Unknown 3: 7143533
Partition Name: SBL2
Filename: Sbl.bin
--- Entry #4 ---
Unused: No
Chip Identifier: 2 (Unused: %
s
)
Partition Identifier: 5
Partition Flags: 1 (R)
Unknown 1: 0
Partition Block Size: 256
Partition Block Count: 20
Unknown 2: 0
Unknown 3: 0
Partition Name: PARAM
Filename: param.lfs
--- Entry #5 ---
Unused: No
Chip Identifier: 2 (Unused: %
s
)
Partition Identifier: 6
Partition Flags: 1 (R)
Unknown 1: 0
Partition Block Size: 256
Partition Block Count: 40
Unknown 2: 39021280
Unknown 3: 7143533
Partition Name: EFS
Filename: efs.rfs
--- Entry #6 ---
Unused: No
Chip Identifier: 2 (Unused: %
s
)
Partition Identifier: 7
Partition Flags: 1 (R)
Unknown 1: 0
Partition Block Size: 256
Partition Block Count: 30
Unknown 2: 36662408
Unknown 3: 0
Partition Name: KERNEL
Filename: zImage
--- Entry #7 ---
Unused: No
Chip Identifier: 2 (Unused: %
s
)
Partition Identifier: 8
Partition Flags: 1 (R)
Unknown 1: 0
Partition Block Size: 256
Partition Block Count: 30
Unknown 2: 6684793
Unknown 3: 3014771
Partition Name: RECOVERY
Filename: zImage
--- Entry #8 ---
Unused: No
Chip Identifier: 2 (Unused: %
s
)
Partition Identifier: 9
Partition Flags: 1 (R)
Unknown 1: 0
Partition Block Size: 256
Partition Block Count: 1160
Unknown 2: 0
Unknown 3: 0
Partition Name: FACTORYFS
Filename: factoryfs.rfs
--- Entry #9 ---
Unused: No
Chip Identifier: 2 (Unused: %
s
)
Partition Identifier: 10
Partition Flags: 1 (R)
Unknown 1: 0
Partition Block Size: 256
Partition Block Count: 536
Unknown 2: 6684780
Unknown 3: 115
Partition Name: DBDATAFS
Filename: dbdata.rfs
--- Entry #10 ---
Unused: No
Chip Identifier: 2 (Unused: %
s
)
Partition Identifier: 11
Partition Flags: 1 (R)
Unknown 1: 0
Partition Block Size: 256
Partition Block Count: 256
Unknown 2: 115
Unknown 3: 115
Partition Name: CACHE
Filename: cache.rfs
--- Entry #11 ---
Unused: No
Chip Identifier: 2 (Unused: %
s
)
Partition Identifier: 12
Partition Flags: 1 (R)
Unknown 1: 0
Partition Block Size: 256
Partition Block Count: 7696
Unknown 2: 0
Unknown 3: 0
Partition Name: DATAFS
Filename: datafs.rfs
--- Entry #12 ---
Unused: No
Chip Identifier: 2 (Unused: %
s
)
Partition Identifier: 13
Partition Flags: 1 (R)
Unknown 1: 0
Partition Block Size: 256
Partition Block Count: 20516
Unknown 2: 0
Unknown 3: 0
Partition Name: USERFS
Filename: userfs_8G.rfs
--- Entry #13 ---
Unused: No
Chip Identifier: 2 (Unused: %
s
)
Partition Identifier: 0
Partition Flags: 1 (R)
Unknown 1: 0
Partition Block Size: 0
Partition Block Count: 0
Unknown 2: 0
Unknown 3: 0
Partition Name: GANG
Filename: inand_8G.bin
Ending session...
Rebooting device...
Heyo guys, idk if this can be seen as somehow relate to this topic, cuz its a diff problem with heimdall than originally mentioned in this thread, but my problem is that while trying to flash twrp, my sm-a750fn got half-bricked, and odin didnt want to flash the phones stock ROM, beeing stuck at establishing a connection, so i went and tried to flash it via heimdall-frontend, without sudo cuz else id have issues with the pit not beeing recognised, and everytime i try to flash smth, no matter what .img, be it recovery, boot, misc, etc, heimdall gets stuck at 93% and later gets a fail msg:
"Heimdall v1.4.1
Copyright (c) 2010-2014 Benjamin Dobell, Glass Echidna
Glass Echidna
This software is provided free of charge. Copying and redistribution is
encouraged.
If you appreciate this software and you would like to support future
development please consider donating:
Donate | Glass Echidna
Initialising connection...
Detecting device...
Claiming interface...
Setting up interface...
Initialising protocol...
Protocol initialisation successful.
Beginning session...
Some devices may take up to 2 minutes to respond.
Please be patient!
Session begun.
Downloading device's PIT file...
PIT file download successful.
Uploading BOOT
0%
1%
2%
3%
4%
5%
[...]
80%
81%
82%
83%
84%
85%
86%
87%
88%
89%
90%
91%
92%
93%
ERROR: Failed to confirm end of file transfer sequence!
ERROR: BOOT upload failed!
Ending session...
ERROR: Failed to send end session packet!
Releasing device interface..."
The phone also shows like bout 45% of progress:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

[Q] No MBR found after flashing image files into a board

I have a Samsung development board. After flash ICS images files into internal storage, at first time it can boot to android animation but failed to go to launcher; when i boot it again, it report 'NO MBR is found at SD/MMC', and can not be flashed. I use MMC command to create the partition and flash it, same error occurs. u-boot log is:
reading kernel device 0 Start 6144, Count 10240
mmc read 0 0x40008000 6144 10240
MMC read: dev # 0, block # 6144, count 10240 ... there are pending interrupts 0x00000008
error during transfer: 0x00008024
mmc read failed
-1 blocks read: ERROR
completed
reading ramdisk device 0 Start 16384, Count 10240
mmc read 0 0x41000000 16384 10240
MMC read: dev # 0, block # 16384, count 10240 ... there are pending interrupts 0x00000008
[ERROR] response timeout error : 00002104 cmd 18
mmc read failed
-19 blocks read: ERROR
completed

(Q) fastboot zimage zImage

Hello,
I'm trying flash zImage, but get some erros:
$ fastboot flash zimage zImage
target didn't report max-download-size
sending 'zimage' (4370 KB)...
OKAY [ 0.427s]
writing 'zimage'...
FAILED (remote: partition table doesn't exist)
finished. total time: 0.482s
How to solve it?
Tks,
Demiank
demiank said:
Hello,
I'm trying flash zImage, but get some erros:
$ fastboot flash zimage zImage
target didn't report max-download-size
sending 'zimage' (4370 KB)...
OKAY [ 0.427s]
writing 'zimage'...
FAILED (remote: partition table doesn't exist)
finished. total time: 0.482s
How to solve it?
Tks,
Demiank
Click to expand...
Click to collapse
Which device is this? Also some theories.
- zimage isn't the name of the actual partition, cd to /dev/block/platform/xxxxx/by-name/ to see your list of partitions
- the image you're flashing doesn't have correct syntax. To fast via flashboot, the syntax is... fastboot flash (partition) (image) . So an example would be fastboot flash recovery twrp.img . You need to remember the file extension such as .img or whatever it is for your image. Also make sure you specify the directory such as fastboot flash recovery C:\Users\xxx\Downloads\twrp.img if you aren't in the current directory.
demiank said:
Hello,
I'm trying flash zImage, but get some erros:
$ fastboot flash zimage zImage
target didn't report max-download-size
sending 'zimage' (4370 KB)...
OKAY [ 0.427s]
writing 'zimage'...
FAILED (remote: partition table doesn't exist)
finished. total time: 0.482s
How to solve it?
Tks,
Demiank
Click to expand...
Click to collapse
zImage is a kernel file and it is in the boot.img. you have to unpack your boot.img and replace the existing zImage with new one and repack boot.img again.
Then flash through fastboot mode by "fastboot flash boot boot.img"
So, you want to flash it in boot partition.
The device is LG e615 (2012/2013 device). This don't have a boot partition. I just found a boot.img in cwm backup. The command " fastboot boot zImage" generate a boot.img file.
demiank said:
The device is LG e615 (2012/2013 device). This don't have a boot partition. I just found a boot.img in cwm backup. The command " fastboot boot zImage" generate a boot.img file.
Click to expand...
Click to collapse
$ fastboot boot zImage
creating boot image...
creating boot image - 4478976 bytes
Downloading 'boot.img' OKAY [ 0.416s]
booting OKAY [ 0.159s]
Finished. Total time: 0.650s
Device don't boot and lost fastboot connection;
[email protected]:/ $ cat /proc/partitions
major minor #blocks name
179 0 3817472 mmcblk0
179 1 20 mmcblk0p1
179 2 1003 mmcblk0p2
179 3 1024 mmcblk0p3
179 4 1 mmcblk0p4
179 5 4096 mmcblk0p5
179 6 4096 mmcblk0p6
179 7 4096 mmcblk0p7
179 8 24576 mmcblk0p8
179 9 8192 mmcblk0p9
179 10 4096 mmcblk0p10
179 11 4096 mmcblk0p11
179 12 28672 mmcblk0p12
179 13 28672 mmcblk0p13
179 14 624640 mmcblk0p14
179 15 8192 mmcblk0p15
179 16 102400 mmcblk0p16
179 17 8192 mmcblk0p17
179 18 8192 mmcblk0p18
179 19 12288 mmcblk0p19
179 20 2823168 mmcblk0p20
179 21 4096 mmcblk0p21
179 22 1024 mmcblk0p22
179 23 16384 mmcblk0p23
179 32 7761920 mmcblk1
179 33 7760896 mmcblk1p1
[email protected]:/ $ ls /
acct
cache
config
d
data
default.prop
dev
etc
fstab.m4ds
init
init.goldfish.rc
init.lge.early.rc
init.lge.rc
init.lge.usb.sh
init.m4ds.rc
init.m4ds.usb.rc
init.qcom.class_core.sh
init.qcom.class_main.sh
init.qcom.rc
init.qcom.ril.path.sh
init.qcom.sh
init.qcom.usb.rc
init.qcom.usb.sh
init.rc
init.target.rc
lgdms.fota.rc
lgdms.fota_update.rc
mnt
mpt
persist
persist-lg
proc
res
root
sbin
sdcard
storage
sys
system
ueventd.goldfish.rc
ueventd.m4ds.rc
ueventd.qcom.rc
ueventd.rc
vendor
[email protected]:/ # cat fstab.m4ds
# Android fstab file.
# The filesystem that contains the filesystem checker binary (typically /system) cannot
# specify MF_CHECK, and must come before any filesystems that do specify MF_CHECK
#TODO: Add 'check' as fs_mgr_flags with data partition.
# Currently we dont have e2fsck compiled. So fs check would failed.
#<src> <mnt_point> <type> <mnt_flags and options> <fs_mgr_flags>
#LGE chage partition
#/dev/block/platform/msm_sdcc.3/by-num/p12 /system ext4 ro,barrier=1 wait
#/dev/block/platform/msm_sdcc.3/by-num/p13 /data ext4 nosuid,nodev,barrier=1,noauto_da_alloc wait
#LGE_CHANGE_S [[email protected]] 20120926:Adding /data partition
/dev/block/platform/msm_sdcc.3/by-num/p14 /system ext4 ro,barrier=1,noatime wait
/dev/block/platform/msm_sdcc.3/by-num/p20 /data ext4 nosuid,nodev,noatime,barrier=1,noauto_da_alloc,errors=continue check
Where is my stock zImage or boot.img? How to flash this zImage after compile it following the LG readme.txt:
"2. Kernel Build
- Untar opensource packages of kernel.tar.gz using following command at the android folder
a)$tar xvzf kernel.tar.gz
- When you compile the kernel source code, you have to add google original prebuilt source(toolchain)
into the android folder.
- cd kernel
- export ARCH=arm
- export CROSS_COMPILE=../prebuilt/linux-x86/toolchain/arm-eabi-4.4.3/bin/arm-eabi-
- make m4-rev11_defconfig
- make zImage
3. After Build, You Can find the build image at arch/arm/boot"
Tks for all replies, but i don't understand how to flash my new kernel compiled by me.

Mi Stick stuck on boot logo (bricked?)

Hello everybody.
A couple of years ago I bought a Mi Stick for my mother, to use connected to an old LED tv she had. She used just 3 o 4 times tops with a Netflix account my brother shared with her. The device was practically new. My brother stopped paying Netflix a couple of months ago so she stopped using the device altogether so I disconnected it. But yesterday she told me my brother started paying Netflix again and told me to connect the MiStick to her TV again. Surprisingly, the device is now stuck on the boot logo:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
I'm really angry because the device had very little use and especially because I live in third world ****hole: a new MiStick costs almost 4 times more now. It's not like I have couple of dollars getting dust on a drawer somewhere and I can go buy another one.
Anyway, I know it's possible to flash/unbrick a MiBox, I did it some time ago. Anybody knows if it's possible to the same with the Mi Stick??? I googled about it but I didn't find anything.
Thank you for your time.
hello, my Mi TV Stick MDZ-24-AA also unfortunately hangs all the time on the logo, checked on various cables and on a decent power supply
through the remote control (arrow + OK) does not want to enter the bootloader
I have purchased PL2303HX converter
According to the instructions from https://forum.xda-developers.com/t/help-pleas...-no-power-led-no-video.4452819/#post-87044521
and partially supported by Ruslan's film
With a backup downloaded from https://disk-yandex-ru.translate.goog/d/aL5Xo...en&_x_tr_hl=en&_x_tr_pto=wapp&_x_tr_hist=true
Using Putty and ADB
I went through the entire installation process
Unfortunately, my mi stick still hangs on the logo: / What could be the cause? Is my mi stick still salvageable?
kedzior.kedzior said:
I have purchased PL2303HX converter
Using Putty and ...
I went through the entire installation process
Unfortunately, my mi stick still hangs on the logo
Click to expand...
Click to collapse
With the PL2303HX connected to the uart while the device is booting (to a hung state), what is shown in the uart log while the device is trying to boot?
Are you able to get a prompt over the uart as shown in the video?
Functioner said:
With the PL2303HX connected to the uart while the device is booting (to a hung state), what is shown in the uart log while the device is trying to boot?
Are you able to get a prompt over the uart as shown in the video?
Click to expand...
Click to collapse
GXL:BL1:9ac50e:bb16dc;FEAT:BDFD71BC:0;POC:3;RCY:0;EMMC:0;READ:0;0.0;0.0;CHK:0;
TE: 138335
BL2 Built : 10:18:52, Sep 14 2020. gxl g9f162b4-dirty - [email protected]
set vcck to 1120 mv
set vddee to 1000 mv
id=3
DDR4 board
CPU clk: 1200MHz
DDR scramble enabled
DDR4 chl: Rank0+1 @ 1056MHz - FAIL
DDR4 chl: Rank0 @ 1056MHz
bist_test rank: 0 19 05 2e 28 16 3a 17 02 2d 2b 1d 3a 17 02 2c 2c 1c 3d 18 02 2f 27 16 38 706 - PASS
Rank0: 1024MB(auto)-2T-18
AddrBus test pass!
eMMC boot @ 0
sw8 s
emmc switch 3 ok
BL2: rpmb counter: 0x00000020
emmc switch 0 ok
Load fip header from eMMC, src: 0x0000c200, des: 0x01400000, size: 0x00004000, part: 0
aml log : R1024 check pass!
New fip structure!
Load bl30 from eMMC, src: 0x00010200, des: 0x01700000, size: 0x0000d600, part: 0
aml log : R1024 check pass!
Load bl31 from eMMC, src: 0x00020200, des: 0x01700000, size: 0x0002b400, part: 0
aml log : R1024 check pass!
Load bl32 from eMMC, src: 0x0004c200, des: 0x01700000, size: 0x0003e200, part: 0
aml log : R1024 check pass!
Load bl33 from eMMC, src: 0x0008c200, des: 0x01700000, size: 0x00080e00, part: 0
aml log : R1024 check pass!
NOTICE: BL3-1: v1.0(release):129a6bc
NOTICE: BL3-1: Built : 17:09:37, Apr 25 2019
[BL31]: GXL CPU setup!
NOTICE: BL3-1: GXL secure boot!
NOTICE: BL3-1: BL33 decompress pass
mpu_config_enable:system pre init ok
dmc sec lock
[Image: gxl_v1.1.3377-2941e55e3 2020-07-08 17:19:09 [email protected]]
OPS=0xb4
21 0d b4 00 6b a3 4a 05 e8 35 9e 81 38 16 4f b7
[0.733983 Inits done]
secure task start!
high task start!
low task start!
INFO: BL3-2: ATOS-V2.4-239-g48b8c37d #1 Wed Feb 5 09:34:09 UTC 2020 arm
INFO: BL3-2: Chip: GXL Rev: D (21 - B0:2)
INFO: BL3-2: crypto engine DMA
INFO: BL3-2: secure time TEE
INFO: BL3-2: CONFIG_DEVICE_SECURE 0xb200000e
U-Boot 2015.01-g2e3e77d-dirty (Nov 07 2020 - 00:20:15), Build: jenkins-aquaman-664
DRAM: 1 GiB
Relocation Offset is: 36e80000
gpio: pin gpiodv_24 (gpio 43) value is 1
register usb cfg[0][1] = 0000000037f4c4f8
[CANVAS]canvas init
MMC: aml_priv->desc_buf = 0x0000000033e80ab0
aml_priv->desc_buf = 0x0000000033e82df0
SDIO Port B: 0, SDIO Port C: 1
co-phase 0x2, tx-dly 0, clock 400000
co-phase 0x2, tx-dly 0, clock 400000
co-phase 0x2, tx-dly 0, clock 400000
emmc/sd response timeout, cmd8, status=0x1ff2800
emmc/sd response timeout, cmd55, status=0x1ff2800
co-phase 0x2, tx-dly 0, clock 400000
co-phase 0x2, tx-dly 0, clock 40000000
[mmc_startup] mmc refix success
init_part() 297: PART_TYPE_AML
[mmc_init] mmc init success
aml log : R1024 check pass!
start dts,buffer=0000000033e85640,dt_addr=0000000033e85640
get_partition_from_dts() 71: ret 0
parts: 17
00: logo 0000000000800000 1
01: recovery 0000000001800000 1
02: misc 0000000000800000 1
03: dtbo 0000000000800000 1
04: cri_data 0000000000800000 2
05: param 0000000001000000 2
06: boot 0000000001000000 1
set has_boot_slot = 0
07: rsv 0000000001000000 1
08: tee 0000000002000000 1
09: vendor 0000000006400000 1
10: odm 0000000001400000 1
11: metadata 0000000001000000 1
12: vbmeta 0000000000200000 1
13: system 000000005ac00000 1
14: product 0000000006a00000 1
15: cache 0000000010000000 2
16: data ffffffffffffffff 4
init_part() 297: PART_TYPE_AML
eMMC/TSD partition table have been checked OK!
crc32_s:0x1577dad == storage crc_pattern:0x1577dad!!!
crc32_s:0xee152b83 == storage crc_pattern:0xee152b83!!!
crc32_s:0x7fd3b243 == storage crc_pattern:0x7fd3b243!!!
mmc env offset: 0x17400000
In: serial
Out: serial
Err: serial
reboot_mode=cold_boot
[store]To run cmd[emmc dtb_read 0x1000000 0x40000]
_verify_dtb_checksum()-2755: calc 6955a20f, store 6955a20f
_verify_dtb_checksum()-2755: calc 6955a20f, store 6955a20f
dtb_read()-2972: total valid 2
update_old_dtb()-2953: do nothing
aml log : R1024 check pass!
vpu: clk_level in dts: 7
vpu: set clk: 666667000Hz, readback: 666666667Hz(0x300)
vpu: vpu_clk_gate_init_off finish
vpp: vpp_init
hpd_state=0
vpp: vpp_matrix_update: 2
cvbs performance type = 6, table = 0
cvbs_config_hdmipll_gxl
cvbs_set_vid2_clk
the HHI_VDAC_CNTL0 =b0001
the HHI_VDAC_CNTL0 =b0200
the HHI_VDAC_CNTL1 =0
the HHI_VDAC_CNTL1 =8
amlkey_init() enter!
[EFUSE_MSG]keynum is 4
[BL31]: tee size: 0
[BL31]: tee size: 0
[BL31]: tee size: 0
[BL31]: tee size: 0
[KM]Error:f[key_manage_query_size]L507:key[region] not programed yet
CONFIG_AVB2: avb2
Start read misc partition datas!
info->magic =
info->version_major = 1
info->version_minor = 0
info->slots[0].priority = 15
info->slots[0].tries_remaining = 7
info->slots[0].successful_boot = 0
info->slots[1].priority = 14
info->slots[1].tries_remaining = 7
info->slots[1].successful_boot = 0
info->crc32 = -1075449479
active slot = 0
wipe_data=successful
wipe_cache=successful
upgrade_step=2
reboot_mode:::: cold_boot
[OSD]load fb addr from dts:/meson-fb
[OSD]fb_addr for logo: 0x3f800000
[OSD]load fb addr from dts:/meson-fb
[OSD]fb_addr for logo: 0x3f800000
[OSD]VPP_OFIFO_SIZE:0xfff00fff
[CANVAS]addr=0x3f800000 width=5760, height=2160
[OSD]osd_hw.free_dst_data: 0,719,0,575
Command: bcb uboot-command
Start read misc partition datas!
BCB hasn't any datas,exit!
do_monitor_bt_cmdline
gpio: pin GPIOX_17 (gpio 17) value is 0
gpio: pin GPIOX_17 (gpio 17) value is 1
gpio: pin GPIOX_18 (gpio 18) value is 1
hw_config_start:state = 3
bt_cmdline: fw downloaded
no recovery mod!
gpio: pin GPIOX_8 (gpio 8) value is 1
Hit Enter or space or Ctrl+C key to stop autoboot -- : 0
CONFIG_SYSTEM_AS_ROOT: systemroot
system_mode: 1
CONFIG_AVB2: avb2
active_slot: normal avb2: 1
Err imgread(L328):Fmt unsupported!genFmt 0x0 != 0x3
InUsbBurn
[MSG]sof
Set Addr 4
Get DT cfg
Get DT cfg
Get DT cfg
set CFG
Get DT cfg
Get DT cfg
Get DT cfg
Get DT cfg
waitIdentifyTime(751) > timeout(750)
(Re)start USB...
USB0: USB3.0 XHCI init start
Register 2000140 NbrPorts 2
Starting the controller
USB XHCI 1.00
scanning bus 0 for devices... 1 USB Device(s) found
scanning usb for storage devices... 0 Storage Device(s) found
** Bad device usb 0 **
** Bad device usb 0 **
active_slot: normal
Err imgread(L328):Fmt unsupported!genFmt 0x0 != 0x3
gxl_aquaman_v1#
kedzior.kedzior said:
Err imgread(L328):Fmt unsupported!genFmt 0x0 != 0x3
Click to expand...
Click to collapse
The above error might be an issue.
at the prompt:
gxl_aquaman_v1#
type:
printenv
and post the output.
Functioner said:
The above error might be an issue.
at the prompt:
gxl_aquaman_v1#
type:
printenv
and post the output.
Click to expand...
Click to collapse
gxl_aquaman_v1#printenv
1080p60hz_deepcolor=444,12bit
480p60hz_deepcolor=rgb,8bit
EnableSelinux=permissive
active_slot=normal
avb2=1
baudrate=115200
bcb_cmd=get_avb_mode;get_valid_slot;
boardid=3
boot_part=boot
bootargs=init=/init console=ttyS0,115200 no_console_suspend earlycon=aml_uart,0xc81004c0 ramoops.pstore_en=1 ramoops.record_size=0x8000 ramoops.console_size=0x4000 ro rootwait skip_initramfs reboot_mode_android=normal androidboot.selinux=permissive logo=osd1,loaded,0x3d800000,576cvbs maxcpus=4 vout=576cvbs,enable hdmimode=1080p60hz frac_rate_policy=1 cvbsmode=576cvbs hdmitx=,444,12bit cvbsdrv=0 androidboot.firstboot=0 jtag=apao androidboot.veritymode=enforcing androidboot.hardware=amlogic androidboot.btmacaddr=00:00:00:00:00:00 androidboot.wifimac=00:00:00:00:00:00 androidboot.wificountrycode=US androidboot.bootloader= androidboot.serialno=26919800002433906 androidboot.boardid=3 androidboot.region=none androidboot.reboot_mode=cold_boot page_trace=on androidboot.rpmb_state=0 aml_dt= recovery_part={recovery_part} recovery_offset={recovery_offset} aml_dt= recovery_part={recovery_part} recovery_offset={recovery_offset}
bootcmd=run storeboot
bootdelay=1
bootup_offset=0x1133b50
bootup_size=0x5eec7a
btmac=00:00:00:00:00:00
cmdline_keys=keyman init 0x1234; setkeys;
colorattribute=444,12bit
cvbs_drv=0
cvbsmode=576cvbs
display_bpp=24
display_color_bg=0
display_color_fg=0xffff
display_color_index=24
display_height=576
display_layer=osd1
display_width=720
dtb_mem_addr=0x1000000
factory_reset_poweroff_protect=echo wipe_data=${wipe_data}; echo wipe_cache=${wipe_cache};if test ${wipe_data} = failed; then run init_display; run storeargs;if usb start 0; then run recovery_from_udisk;fi;run recovery_from_flash;fi; if test ${wipe_cache} = failed; then run init_display; run storeargs;if usb start 0; then run recovery_from_udisk;fi;run recovery_from_flash;fi;
fb_addr=0x3d800000
fb_height=1080
fb_width=1920
fdt_high=0x20000000
firstboot=0
frac_rate_policy=1
fs_type=ro rootwait skip_initramfs
hdmimode=1080p60hz
identifyWaitTime=750
init_display=get_rebootmode;echo reboot_mode:::: ${reboot_mode};if test ${reboot_mode} = quiescent; then setenv reboot_mode_android quiescent;run storeargs;setenv bootargs ${bootargs} androidboot.quiescent=1;osd open;osd clear;else if test ${reboot_mode} = recovery_quiescent; then setenv reboot_mode_android quiescent;run storeargs;setenv bootargs ${bootargs} androidboot.quiescent=1;osd open;osd clear;else setenv reboot_mode_android normal;run storeargs;osd open;osd clear;imgread pic logo bootup $loadaddr;bmp display $bootup_offset;bmp scale; fi;fi;
initargs=init=/init console=ttyS0,115200 no_console_suspend earlycon=aml_uart,0xc81004c0 ramoops.pstore_en=1 ramoops.record_size=0x8000 ramoops.console_size=0x4000
jtag=apao
loadaddr=1080000
lock=10001000
maxcpus=4
outputmode=576cvbs
page_trace=on
preboot=run cmdline_keys;run bcb_cmd; run factory_reset_poweroff_protect;run upgrade_check;run init_display;run storeargs;bcb uboot-command;run switch_bootmode;
reboot_mode=cold_boot
reboot_mode_android=normal
recovery_from_flash=get_valid_slot;echo active_slot: ${active_slot};if test ${active_slot} = normal; then setenv bootargs ${bootargs} aml_dt=${aml_dt} recovery_part={recovery_part} recovery_offset={recovery_offset};if itest ${upgrade_step} == 3; then if ext4load mmc 1:2 ${dtb_mem_addr} /recovery/dtb.img; then echo cache dtb.img loaded; fi;if ext4load mmc 1:2 ${loadaddr} /recovery/recovery.img; then echo cache recovery.img loaded; wipeisb; bootm ${loadaddr}; fi;else fi;if imgread kernel ${recovery_part} ${loadaddr} ${recovery_offset}; then wipeisb; bootm ${loadaddr}; fi;else setenv bootargs ${bootargs} aml_dt=${aml_dt} recovery_part=${boot_part} recovery_offset=${recovery_offset};if imgread kernel ${boot_part} ${loadaddr}; then bootm ${loadaddr}; fi;fi;
recovery_from_udisk=setenv bootargs ${bootargs} aml_dt=${aml_dt} recovery_part={recovery_part} recovery_offset={recovery_offset};if fatload usb 0 ${loadaddr} aml_autoscript; then autoscr ${loadaddr}; fi;if fatload usb 0 ${loadaddr} recovery.img; then if fatload usb 0 ${dtb_mem_addr} dtb.img; then echo udisk dtb.img loaded; fi;wipeisb; bootm ${loadaddr};fi;
recovery_offset=0
recovery_part=recovery
region=none
rpmb_state=0
sdc_burning=sdc_burn ${sdcburncfg}
sdcburncfg=aml_sdc_burn.ini
serialno=26919800002433906
sn2=3236393139383030303032343333393036
stderr=serial
stdin=serial
stdout=serial
storeargs=get_rebootmode;setenv bootargs ${initargs} ${fs_type} reboot_mode_android=${reboot_mode_android} androidboot.selinux=${EnableSelinux} logo=${display_layer},loaded,${fb_addr},${outputmode} maxcpus=${maxcpus} vout=${outputmode},enable hdmimode=${hdmimode} frac_rate_policy=${frac_rate_policy} cvbsmode=${cvbsmode} hdmitx=${cecconfig},${colorattribute} cvbsdrv=${cvbs_drv} androidboot.firstboot=${firstboot} jtag=${jtag}; setenv bootargs ${bootargs} androidboot.veritymode=enforcing androidboot.hardware=amlogic androidboot.btmacaddr=${btmac} androidboot.wifimac=${wifimac} androidboot.wificountrycode=${wifi_ccode} androidboot.bootloader=${bootloader} androidboot.serialno=${serialno} androidboot.boardid=${boardid} androidboot.region=${region} androidboot.reboot_mode=${reboot_mode};setenv bootargs ${bootargs} page_trace=${page_trace};setenv bootargs ${bootargs} androidboot.rpmb_state=${rpmb_state};
storeboot=get_system_as_root_mode;echo system_mode: ${system_mode};if test ${system_mode} = 1; then setenv fs_type ro rootwait skip_initramfs;run storeargs;fi;get_valid_slot;get_avb_mode;echo active_slot: ${active_slot} avb2: ${avb2};if test ${active_slot} != normal; then setenv bootargs ${bootargs} androidboot.slot_suffix=${active_slot};fi;if test ${avb2} = 0; then if test ${active_slot} = _a; then setenv bootargs ${bootargs} root=/dev/mmcblk0p23;else if test ${active_slot} = _b; then setenv bootargs ${bootargs} root=/dev/mmcblk0p24;fi;fi;fi;if imgread kernel ${boot_part} ${loadaddr}; then bootm ${loadaddr}; fi;run update;
switch_bootmode=get_rebootmode;if test ${reboot_mode} = factory_reset; then setenv reboot_mode_android normal;run storeargs;run recovery_from_flash;else if test ${reboot_mode} = update; then setenv reboot_mode_android normal;run storeargs;run update;else if test ${reboot_mode} = quiescent; then setenv reboot_mode_android quiescent;run storeargs;setenv bootargs ${bootargs} androidboot.quiescent=1;else if test ${reboot_mode} = recovery_quiescent; then setenv reboot_mode_android quiescent;run storeargs;setenv bootargs ${bootargs} androidboot.quiescent=1;run recovery_from_flash;else if test ${reboot_mode} = cold_boot; then setenv reboot_mode_android normal;run storeargs;else if test ${reboot_mode} = fastboot; then setenv reboot_mode_android normal;run storeargs;fastboot;fi;fi;fi;fi;fi;fi;if monitor_bt_cmdline; then run update; fi;
system_mode=1
try_auto_burn=update 700 750;
update=run try_auto_burn; if usb start 0; then run recovery_from_udisk;fi;run recovery_from_flash;
upgrade_check=echo upgrade_step=${upgrade_step}; if itest ${upgrade_step} == 3; then run init_display; run storeargs; run update;else fi;
upgrade_step=2
usb_burning=update 1000
wifi_ccode=US
wifimac=00:00:00:00:00:00
wipe_cache=successful
wipe_data=successful
Environment size: 7334/65532 bytes
I'm not sure if imgread is being called by the normal boot process, or a recovery process because the device failed to boot.
At the uart prompt type:
imgread dtb boot 0x1000000
imgread kernel boot 0x1080000
bootm 0x1080000
and post the output.
If it's the same error as before, the boot partition might not be flashed with the correct image.
gxl_aquaman_v1#imgread dtb boot 0x1000000
Err imgread(L220):Fmt unsupported! only support 0x3
gxl_aquaman_v1#imgread kernel boot 0x1080000
Err imgread(L328):Fmt unsupported!genFmt 0x0 != 0x3
gxl_aquaman_v1#imgread kernel boot 0x1080000
Err imgread(L328):Fmt unsupported!genFmt 0x0 != 0x3
gxl_aquaman_v1#<INTERRUPT>
gxl_aquaman_v1#bootm 0x1080000
aml log : Sig Check 1830
kedzior.kedzior said:
gxl_aquaman_v1#imgread dtb boot 0x1000000
Err imgread(L220):Fmt unsupported! only support 0x3
Click to expand...
Click to collapse
Are you able to flash the boot partition with the boot image again?
Which version of the firmware did you flash?
Are you able to flash the boot partition with the boot image again?
Yes
Which version of the firmware did you flash?
https://disk.yandex.ru/d/aL5XolrdAbTJ0g How to check it?
Other than this one I have no other
Did you flash it with fastboot or burn mode?
According to the instructions from the post https://forum.xda-developers.com/t/help-please-mdz-24-aa-no-power-led-no-video.4452819/post-87044521
but one of the commands "fastboot oem unlock" not working
"astboot flashing unlock" worked
"fastboot flashing unlock_critical" worked
I notice from the environment that the bootloader is currently locked.
The russian guy in the video mentioned that it is important to keep the older version of the bootloader, because the newer version could lock you out.
What I would try is starting fastboot, and then using the ota source files, flashing all of the partitions again, except NOT the bootloader.
What you could try first is just flashing the boot partition again from whatever firmware you used the last time.
Unfortunately, I do not have the previous works version :/
kedzior.kedzior said:
https://disk.yandex.ru/d/aL5XolrdAbTJ0g How to check it?
Click to expand...
Click to collapse
I will check that version, and will also check which version is the newest version.
At the uart prompt, type:
get_bootloaderversion
and post the version.
Functioner said:
At the uart prompt, type:
get_bootloaderversion
and post the version.
Click to expand...
Click to collapse
gxl_aquaman_v1#get_bootloaderversion
Nieznane polecenie 'get_bootloaderversion' - spróbuj 'help'
C:\adb>fastboot getvar version-bootloader
version-bootloader: U-Boot 2015.01-g2e3e77d-dirty
Finished. Total time: 0.003s
The version of the firmware in backup-Restore.rar from the above yandex link is r293:
Xiaomi/aquaman/aquaman:9/PI/293:user/release-keys
This is quite old. It's from May 26 2020.
If you flashed the tee image from that download, it could have corrupted your device.
thank you very much for your help and your time. I will continue to try to bring my stick back to life
kedzior.kedzior said:
thank you very much for your help and your time. I will continue to try to bring my stick back to life
Click to expand...
Click to collapse
sure, good luck.

Categories

Resources