Восстановление прошивки и сброс пароля XM с помощью USB UART

[bulka58807]

У меня 16 канальные платы 1в1 как ваша, модель 140.

Ну я думаю снова выпаивать и заливать дамп нет смысла, раз он пищит и проц греется жутко.

[dede]

Лучше проверить

[Sonya]

Но у меня 16-канальник. Или этот дамп нормально подойдет?

Дамп для следующих устройств:
AHB7004T-H-V2
AHB7008T-MH-V2
AHB7008T-MH-V3
AHB7016T-LM-V2
AHB7016T-LM-V3

[artemnv]

Добрый день, а для NAND можно инструкцию,как дамп сделать и как восстанавливать? Буду очень благодарен.

[Sonya]

Для NAND флеши всё тоже самое, только вместо команды sf надо давать nand. Просто у меня нет такого рега, а было бы неплохо получить от такого логи на команды:
help
printenv
nanв
и т.д.

[artemnv]

hisilicon # help
? - alias for 'help'
base - print or set address offset
bootm - boot application image from memory
bootp - boot image via network using BOOTP/TFTP protocol
cmp - memory compare
cp - memory copy
crc32 - checksum calculation
decjpg - jpgd - decode jpeg picture.

erase_env- erase_env erase the environment

getinfo - print hardware information
go - start application at address 'addr'
help - print command description/usage
loadb - load binary file over serial line (kermit mode)
loady - load binary file over serial line (ymodem mode)
loop - infinite loop on address range
md - memory display
mii - MII utility commands
mm - memory modify (auto-incrementing address)
mtest - simple RAM read/write test
mw - memory write (fill)
nand - NAND sub-system
nboot - boot from NAND device
nm - memory modify (constant address)
ping - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
rarpboot- boot image via network using RARP/TFTP protocol
reset - Perform RESET of the CPU
saveenv - save environment variables to persistent storage
setenv - set environment variables
setvobg - setvobg - set vo backgroud color.
- setvobg [dev color]
sf - SPI flash sub-system
startgx - startgx - open graphics layer.
- startgx [layer addr stride x y w h]

startvo - startvo - open interface of vo device.
- startvo [dev type sync]
stopgx - stopgx - close graphics layer.
- stopgx [layer]
stopvo - stopvo - close interface of vo device.
- stopvo [dev]
tftp - tftp - download or upload image via network using TFTP protocol
update - update uboot
update kernel
update rfs
update logo
update all

usb - USB sub-system
usbboot - boot from USB device
version - print monitor version




hisilicon # printev
Unknown command 'printev' - try 'help'
hisilicon # printenv
bootargs=mem=132M console=ttyAMA0,115200 root=/dev/mtdblock2 rootfstype=yaffs2 mtdparts=hinand:1M(uboot),3M(kernel),90M(rfs),20M(app),10M(config),4M(logo)
bootcmd=nand read 0x82000000 0x100000 0x300000;bootm 0x82000000
bootdelay=1
baudrate=115200
ethaddr=00:00:23:34:45:66
netmask=255.255.254.0
bootfile="uImage"
phyaddr0=1
uboot_postfix=.bin.3521
kernel_postfix=.img.3521
rfs_postfix=.yaffs.3521
cfg_postfix=.jffs2.3521
logo_postfix=.jpeg.3521
ipaddr=192.168.1.17
server=192.168.1.12
ipdaddr=192.168.1.10
serverip=192.168.1.12
gatewayip=192.168.1.1
subnetmask=255.255.255.0
stdin=serial
stdout=serial
stderr=serial
verify=n
jpeg_addr=80b412ac
jpeg_size=0x40000
vobuf=8083e500
ver=U-Boot 2010.06 (Mar 22 2013 - 10:27:59)

Environment size: 721/262140 bytes

[artemnv]

РЕГ у меня висит на заставке, может прошивку какую нибудь дадите на него, ниже лог загрузки:


U-Boot 2010.06 (Mar 22 2013 - 10:27:59)

DRAM: 256 MiB
NAND: Special Nand id table Version 1.35
Nand ID: 0xEC 0xF1 0x00 0x95 0x40 0xEC 0xF1 0x00
Nand(Hardware): Block:128KB Page:2KB Chip:128MB*1 OOB:64B ECC:1bit
128 MiB
Check spi flash controller v300. found
Can't find a valid spi flash chip.
Can't find a valid spi flash chip.
In: serial
Out: serial
Err: serial
judge ddr init
user init finish.
PHY not link!

NAND read: device 0 offset 0x7c00000, size 0x40000
262144 bytes read: OK
mmu_enable
<<imgwidth=1024, imgheight=768, linebytes=2048>>
decode success!!!!
dev 0 set background color!
dev 2 set background color!
dev 0 opened!
dev 2 opened!
graphic layer 0 opened!
graphic layer 2 opened!
Hit any key to stop autoboot: 0

NAND read: device 0 offset 0x100000, size 0x300000
3145728 bytes read: OK
## Booting kernel from Legacy Image at 82000000 ...
Image Name: Linux-3.0.8
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 2562056 Bytes = 2.4 MiB
Load Address: 80008000
Entry Point: 80008000
Loading Kernel Image ... OK
OK

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
Linux version 3.0.8 (root@localhost.localdomain) (gcc version 4.4.1 (Hisilicon_v100(gcc4.4-290+uclibc_0.9.32.1+eabi+linuxpthread)) ) #99 Thu Mar 21 22:55:18 HKT 2013
CPU: ARMv7 Processor [413fc090] revision 0 (ARMv7), cr=10c53c7f
CPU: VIPT nonaliasing data cache, VIPT aliasing instruction cache
Machine: godarm
Memory policy: ECC disabled, Data cache writeback
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 33528
Kernel command line: mem=132M console=ttyAMA0,115200 root=/dev/mtdblock2 rootfstype=yaffs2 mtdparts=hinand:1M(uboot),3M(kernel),90M(rfs),20M(app),10M(config),4M(logo)
PID hash table entries: 1024 (order: 0, 4096 bytes)
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
Memory: 132MB = 132MB total
Memory: 128720k/128720k available, 6448k reserved, 0K highmem
Virtual kernel memory layout:
vector : 0xffff0000 - 0xffff1000 ( 4 kB)
fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB)
DMA : 0xffc00000 - 0xffe00000 ( 2 MB)
vmalloc : 0xc8800000 - 0xfe000000 ( 856 MB)
lowmem : 0xc0000000 - 0xc8400000 ( 132 MB)
modules : 0xbf000000 - 0xc0000000 ( 16 MB)
.init : 0xc0008000 - 0xc0029000 ( 132 kB)
.text : 0xc0029000 - 0xc048e000 (4500 kB)
.data : 0xc048e000 - 0xc04b03a0 ( 137 kB)
.bss : 0xc04b03c4 - 0xc0506da0 ( 347 kB)
SLUB: Genslabs=13, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
NR_IRQS:128 nr_irqs:128 128
sched_clock: 32 bits at 155MHz, resolution 6ns, wraps every 27709ms
sched_clock: wrong multiply/shift: 432960413>>26 vs calculated 3463683303>>29
sched_clock: fix multiply/shift to avoid scheduler hiccups
Console: colour dummy device 80x30
Calibrating delay loop... 1849.75 BogoMIPS (lpj=9248768)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
Serial: AMBA PL011 UART driver
uart:0: ttyAMA0 at MMIO 0x20080000 (irq = 40) is a PL011 rev2
console [ttyAMA0] enabled
uart:1: ttyAMA1 at MMIO 0x20090000 (irq = 41) is a PL011 rev2
uart:2: ttyAMA2 at MMIO 0x200a0000 (irq = 42) is a PL011 rev2
uart:3: ttyAMA3 at MMIO 0x200b0000 (irq = 43) is a PL011 rev2
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
cfg80211: Calling CRDA to update world regulatory domain
Switching to clocksource timer1
NET: Registered protocol family 2
IP route cache hash table entries: 2048 (order: 1, 8192 bytes)
TCP established hash table entries: 8192 (order: 4, 65536 bytes)
TCP bind hash table entries: 8192 (order: 3, 32768 bytes)
TCP: Hash tables configured (established 8192 bind 8192)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
NetWinder Floating Point Emulator V0.97 (double precision)
L2cache cache controller enabled
VFS: Disk quotas dquot_6.5.2
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.16)
msgmni has been set to 251
sn is 0
sn is 0
sn is 0
sn is 0
sn is 0
sn is 0
sn is 4
sn is 6d
encryption ok
sqy test his lot is : 0x28 0xe0 0x5a 0xdc 0x4c 0x61 0x10 0x10
ReadConfigZone 0xff
ReadConfigZone 0xff
ReadConfigZone 0xff
encryption ok
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
io scheduler noop registered
io scheduler deadline registered (default)
io scheduler cfq registered
brd: module loaded
loop: module loaded
ahci: SSS flag set, parallel bus scan disabled
ahci ahci.0: AHCI 0001.0200 32 slots 2 ports 3 Gbps 0x3 impl platform mode
ahci ahci.0: flags: ncq sntf stag pm led clo only pmp pio slum part ccc sxs boh
scsi0 : ahci_platform
scsi1 : ahci_platform
ata1: SATA max UDMA/133 mmio [mem 0x10080000-0x1008ffff] port 0x100 irq 68
ata2: SATA max UDMA/133 mmio [mem 0x10080000-0x1008ffff] port 0x180 irq 68
Spi id table Version 1.22
Hisilicon Spi Flash Controller V300 New Device Driver, Version 1.10
Check Spi Flash Controller V300 New.
Found
Special nand id table Version 1.35
Hisilicon Nand Flash Controller V301 Device Driver, Version 1.10
Nand ID: 0xEC 0xF1 0x00 0x95 0x40 0xEC 0xF1 0x00
Nand(Hardware): Block:128KB Page:2KB Chip:128MB OOB:64B ECC:1bit
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit)
6 cmdlinepart partitions found on MTD device hinand
Creating 6 MTD partitions on "hinand":
0x000000000000-0x000000100000 : "uboot"
0x000000100000-0x000000400000 : "kernel"
0x000000400000-0x000005e00000 : "rfs"
0x000005e00000-0x000007200000 : "app"
0x000007200000-0x000007c00000 : "config"
0x000007c00000-0x000008000000 : "logo"
Fixed MDIO Bus: probed
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
usbcore: registered new interface driver rt2500usb
usbcore: registered new interface driver rt73usb
usbmon: debugfs is not available
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
hiusb-ehci hiusb-ehci.0: HIUSB EHCI
hiusb-ehci hiusb-ehci.0: new USB bus registered, assigned bus number 1
hiusb-ehci hiusb-ehci.0: irq 63, io mem 0x100b0000
hiusb-ehci hiusb-ehci.0: USB 0.0 started, EHCI 1.00
ata1: SATA link down (SStatus 0 SControl 300)
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
hiusb-ohci hiusb-ohci.0: HIUSB OHCI
hiusb-ohci hiusb-ohci.0: new USB bus registered, assigned bus number 2
hiusb-ohci hiusb-ohci.0: irq 64, io mem 0x100a0000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 2 ports detected
usbcore: registered new interface driver cdc_acm
cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
usbcore: registered new interface driver cdc_wdm
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver ums-alauda
usbcore: registered new interface driver ums-datafab
usbcore: registered new interface driver ums-freecom
usbcore: registered new interface driver ums-isd200
usbcore: registered new interface driver ums-jumpshot
usbcore: registered new interface driver ums-sddr09
usbcore: registered new interface driver ums-sddr55
usbcore: registered new interface driver mdc800
mdc800: v0.7.5 (30/10/2000):USB Driver for Mustek MDC800 Digital Camera
usbcore: registered new interface driver usbserial
USB Serial support registered for generic
usbcore: registered new interface driver usbserial_generic
usbserial: USB Serial Driver core
mousedev: PS/2 mouse device common for all mice
usbcore: registered new interface driver usbhid
usbhid: USB HID core driver
TCP cubic registered
Initializing XFRM netlink socket
NET: Registered protocol family 17
NET: Registered protocol family 15
lib80211: common routines for IEEE802.11 drivers
Registering the dns_resolver key type
registered taskstats version 1
▒ata2: SATA link down (SStatus 0 SControl 300)
yaffs: dev is 32505858 name is "mtdblock2" rw
yaffs: passed flags ""
VFS: Mounted root (yaffs2 filesystem) on device 31:2.
Freeing init memory: 132K

_ _ _ _ _ _ _ _ _ _ _ _
\ _ _ _ _ _ ___
/ /__/ \ |_/
/ __ / - _ ___
/ / / / / /
_ _ _ _/ / / \_/ \_ ______
___________\___\__________________

[RCS]: /etc/init.d/S00devs
[RCS]: /etc/init.d/S01udev
Jan 1 00:00:08 udevd (513): /proc/513/oom_adj is deprecated, please use /proc/513/oom_score_adj instead.
udevd[513]: main: error opening /dev/null: No such file or directory
[RCS]: /etc/init.d/S02toe
STMMAC driver:
platform registration...
done!
Set system config register 0x200300ec with value 0x003f003f
done!
DWMAC1000 - user ID: 0x10, Synopsys ID: 0x36
Enhanced descriptor structure
MACADDR in get is 0:0:0:0:0:0
no valid MAC address for MAC 0;please, use ifconfig or nwhwconfig!
eth0 - (dev. name: stmmaceth - id: 0, IRQ #119
IO base addr: 0xc89c0000)
STMMAC MII Bus: probed
eth0: PHY ID 00221513 at 0 IRQ 0 (1:00)
eth0: PHY ID 00221513 at 1 IRQ -6 (1:01) active
stmmac_reset: RESET COMPLETE!

**************************************************
* TNK driver built on Feb 27 2013 at 16:29:38
* TNK driver mode is BYPASS
**************************************************
stmmac: Rx Checksum Offload Engine supported
[RCS]: /etc/init.d/S03ants
SDK_TYPE type is 16d1
init hotplug
start hotplug ok
*** Board tools : ver0.0.1_20120501 ***
[debug]: {source/utils/cmdshell.c:166}cmdstr:himm
0x20110168: 0x00000004 --> 0x00003FF2
[END]
Hisilicon Media Memory Zone Manager
hi3521_base: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
Hisilicon UMAP device driver interface: v3.00
load sys.ko for Hi3521...OK!
Load tde.ko ...OK!
load venc.ko for Hi3521...OK!
load group.ko for Hi3521...OK!
load chnl.ko for Hi3521...OK!
load h264e.ko for Hi3521...OK!
load rc.ko ....OK!
load jpege.ko for Hi3521...OK!
load vou.ko ....OK!
load vpss.ko ....OK!
load vda.ko ....OK!
load region.ko ....OK!
load vdec.ko ....OK
load vhd firmware.ko OK
load hdmi.ko ....OK!
Load jpeg6b.ko success. (SDK_VERSION:[jpeg6bv1.0] Build Time:[Jan 15 2013, 22:13:54])
rtusb init rt2870 --->
usbcore: registered new interface driver rt2870
USB Serial support registered for GSM modem (1-port)
usbcore: registered new interface driver option
option: v0.7.2:USB Driver for GSM modems
rm: can't remove '/usr/etc/config.tar.gz': No such file or directory
mkdir: can't create directory '/usr/etc/tmp': File exists
mkdir: can't create directory '/usr/etc/var': File exists
mkdir: can't create directory '/usr/etc/var/run': File exists
mkdir: can't create directory '/usr/etc/var/lock': File exists
mkdir: can't create directory '/usr/etc/ppp': File exists
mkdir: caneth0: generated random MAC address 3a:93:ee:61:f4:35
't create directMACADDR in set is 3a:93:ee:61:f4:35
ory '/usr/etc/ppp/peers': File exists
rm: can't remove '/usr/etc/tmp/qtembedded-0/fonts/fontdb': No such file or directory
hwclock: settimeofday: Invalid argument
[RCS]: /etc/init.d/S80network
/etc/init.d/S03ants: line 39: ./ants_dvr: not found
Auto login as root ...
Jan 1 00:00:10 login[873]: root login on 'ttyS000'
sysinit: can't load library 'liblogger.so'
Welcome to HiLinux.
None of nfsroot found in cmdline.
#

[Sonya]

Вот пример, как слить дамп.

Код: Выделить всё

setenv serverip 192.168.1.100
setenv ipaddr 192.168.1.10
nand probe 0; nand read 0x82000000 0x0 0x1000000; tftp 0x82000000 dump.bin 0x1000000

Чтобы подобрать прошивку, нужен старый дамп. Как сольёте, выложите сюда.

[dede]

Для нанд не нужно probe делать, вот там хелп для нанда:

Код: Выделить всё

nand    - NAND sub-system
nand info               - show available NAND devices
nand device [dev]  - show or set current device
nand read[.jffs2]  - addr off|partition size
nand write[.jffs2] - addr off|partition size
  read/write `size' bytes at offset `off' to/from memory address `addr'
nand erase [clean] [off size] - erase `size' bytes from
  offset `off' (entire device if not specified)
nand bad - show bad blocks
nand dump[.oob] off - dump page
nand scrub - really clean NAND erasing bad blocks (UNSAFE)
nand markbad off - mark bad block at offset (UNSAFE)
nand biterr off - make a bit error at offset (UNSAFE)
nand lock [tight] [status] - bring nand to lock state or display locked pages
nand unlock [offset] [size] - unlock section

[dede]

РЕГ у меня висит на заставке, может прошивку какую нибудь дадите на него, ниже лог загрузки:
#

Тема про ХМ, у вас однозначно не ХМ, а ANTS.

[artemnv]

Слил дамп https://yadi.sk/d/_MQSupGn3ZxcqK

[Sonya]

Действительно, у вас не XM, я не обратил внимание.
Лучше создать отдельную тему, так будет правильнее.
А дамп на самом деле другого размера (128Мб), его нужно сливать, указав размер 0x8000000