Help recovery MDM9250 modem - Android Q&A, Help & Troubleshooting

Hi all,
i've a ZTE MF286D router thas has the 4G modem broken.
The modem it self is an MDM9250 that is stuck in this way:
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.1-00311
S - IMAGE_VARIANT_STRING=MAATANAZA
S - OEM_IMAGE_VERSION_STRING=scl_xa242_062
S - Boot Interface: NAND
S - Secure Boot: Off
S - Boot Config @ 0x000a602c = 0x000000a1
S - JTAG ID @ 0x000a607c = 0x100320e1
S - OEM ID @ 0x000a6080 = 0x00000000
S - Serial Number @ 0x000a4128 = 0x19146b45
S - OEM Config Row 0 @ 0x000a4150 = 0x0900000000000000
S - OEM Config Row 1 @ 0x000a4158 = 0x0000000000000000
S - Feature Config Row 0 @ 0x000a4160 = 0x14000000000009a0
S - Feature Config Row 1 @ 0x000a4168 = 0x0342f80200000005
B - 3343 - PBL, Start
B - 6754 - bootable_media_detect_entry, Start
B - 8077 - bootable_media_detect_success, Start
B - 8081 - elf_loader_entry, Start
B - 11491 - auth_hash_seg_entry, Start
B - 11743 - auth_hash_seg_exit, Start
B - 60253 - elf_segs_hash_verify_entry, Start
B - 112850 - PBL, End
B - 127947 - SBL1, Start
B - 222253 - pm_device_init, Start
B - 282735 - PM_SET_VAL:Skip
D - 59414 - pm_device_init, Delta
B - 283924 - usb: usb: hs_phy_nondrive_start
B - 287920 - usb: usb: hs_phy_nondrive_finish
B - 291305 - boot_config_data_table_init, Start
D - 0 - boot_config_data_table_init, Delta - (0 Bytes)
B - 301431 - CDT Version:3,Platform ID:8,Major ID:1,Minor ID:0,Subtype:0
B - 308141 - sbl1_ddr_set_params, Start
D - 30 - sbl1_ddr_set_params, Delta
B - 315644 - Pre_DDR_clock_init, Start
D - 366 - Pre_DDR_clock_init, Delta
B - 330650 - pm_driver_init, Start
D - 1799 - pm_driver_init, Delta
B - 332511 - clock_init, Start
D - 183 - clock_init, Delta
B - 337177 - boot_flash_init, Start
D - 31293 - boot_flash_init, Delta
B - 445147 - Image Load, Start
D - 39345 - QSEE Image Loaded, Delta - (394044 Bytes)
B - 484492 - QSEE Execution, Start
D - 65910 - QSEE Execution, Delta
D - 213 - boot_pm_post_tz_device_init, Delta
B - 554032 - Image Load, Start
D - 19520 - RPM Image Loaded, Delta - (161732 Bytes)
B - 726357 - ZTE_POWER_ON_NORMAL
B - 779092 - Error code 3039 at boot_elf_loader.c Line 1365
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.1-00311
S - IMAGE_VARIANT_STRING=MAATANAZA
S - OEM_IMAGE_VERSION_STRING=scl_xa242_062
S - Boot Interface: NAND
S - Secure Boot: Off
S - Boot Config @ 0x000a602c = 0x000000a1
S - JTAG ID @ 0x000a607c = 0x100320e1
S - OEM ID @ 0x000a6080 = 0x00000000
S - Serial Number @ 0x000a4128 = 0x19146b45
S - OEM Config Row 0 @ 0x000a4150 = 0x0900000000000000
S - OEM Config Row 1 @ 0x000a4158 = 0x0000000000000000
S - Feature Config Row 0 @ 0x000a4160 = 0x14000000000009a0
S - Feature Config Row 1 @ 0x000a4168 = 0x0342f80200000005
B - 3343 - PBL, Start
B - 6754 - bootable_media_detect_entry, Start
B - 7468 - bootable_media_detect_success, Start
B - 7472 - elf_loader_entry, Start
B - 10881 - auth_hash_seg_entry, Start
B - 11133 - auth_hash_seg_exit, Start
B - 59645 - elf_segs_hash_verify_entry, Start
B - 112242 - PBL, End
B - 122854 - SBL1, Start
B - 213561 - pm_device_init, Start
B - 273554 - PM_SET_VAL:Skip
D - 58956 - pm_device_init, Delta
B - 274713 - usb: usb: hs_phy_nondrive_start
B - 278739 - usb: usb: hs_phy_nondrive_finish
B - 282125 - boot_config_data_table_init, Start
D - 0 - boot_config_data_table_init, Delta - (0 Bytes)
B - 292251 - CDT Version:3,Platform ID:8,Major ID:1,Minor ID:0,Subtype:0
B - 298961 - sbl1_ddr_set_params, Start
D - 30 - sbl1_ddr_set_params, Delta
B - 306464 - Pre_DDR_clock_init, Start
D - 366 - Pre_DDR_clock_init, Delta
B - 321470 - pm_driver_init, Start
D - 1799 - pm_driver_init, Delta
B - 323330 - clock_init, Start
D - 152 - clock_init, Delta
B - 328058 - boot_flash_init, Start
D - 31293 - boot_flash_init, Delta
B - 435997 - Image Load, Start
D - 39345 - QSEE Image Loaded, Delta - (394044 Bytes)
B - 475373 - QSEE Execution, Start
D - 20191 - QSEE Execution, Delta
D - 0 - post_tz_pm_init cancelled by dload, Delta
B - 499773 - High speed USB mode
B - 503036 - usb: init start
Click to expand...
Click to collapse
The modem if connected directly to the PC with an Mini-PCIe-2-USB is recognized as QUSB__BULK.
We talked about this modem also on this forum: https://eko.one.pl/forum/viewtopic.php?id=21790
I've tried various tools like:
- qdtools, but the modem refues to read\write nand
- QPST, each tool I run (except for QLIF) send a message to the modem, that prints on console a string "Memory dump allowed", the the modem reset itself in a continous loop
I've all operating system images from ZTE that can be uploaded using fastboot, but if the modem doesn't boot into this mode doesn't allow me to do anything
any suggestion?
thanks!

stich86 said:
any suggestion?
Click to expand...
Click to collapse
@stich86
Welcome to XDA. I hope you'll always find and get the support you require.
However, prior to your next posting please read the guidances that are stuck on top of every forum like
Note: Questions go in Q&A Forum
If you are posting a Question Thread post it in the Q&A forum. Technical discussion of Android development and hacking. No noobs, please. Device-specific releases should go under the appropriate device forum...
forum.xda-developers.com
and the others. I've moved the thread to Android Q&A.
Thanks for your cooperation!
Regards
Oswald Boelcke
Senior Moderator

Thanks Oswald and sorry for my mistake!

Related

gps.conf need original sgs2

Does anyone have a clean /etc/gps.conf , especially from kj3 , uk/vod -though expect same except for servers across all versions.
Can't get a gps fix .. Kj3 stock/speedmod/siyah though I have previously modified this file...
NTP_SERVER=north-america.pool.ntp.org
XTRA_SERVER_1=http://xtra1.gpsonextra.net/xtra.bin
XTRA_SERVER_2=http://xtra2.gpsonextra.net/xtra.bin
XTRA_SERVER_3=http://xtra3.gpsonextra.net/xtra.bin
SUPL_HOST=supl.google.com
SUPL_PORT=7276
Original gps.conf
jje
Thanks.will try.
Currently can't get a lock even with 10 or 11 data visible.changed modem from ki4 to ki3 but made no difference.
Another one is the sirfgps file might be worth changing . There is a post around somewhere but this is what its changed to .
#CSR SiRF plc
#PROJECT_NAME : white Space is not allowed
#UART_DRIVER : Uart Driver Path
#RESET_GPIO : Reset GPIO Driver Path
#ONOFF_GPIO : OnOff GPIO Driver Path
#EXTERNAL_LNA : 1 - use External LNA, 0 - use Internal LNA only
#REF_CLOCK_26MHZ: 1 - use 26MHz TCXO, 0 - use 16.369MHz TCXO
#UART_BAUD_RATE : 0 - 115200bps 1 - 230400, 2 - 460800, 3 - 57600
#FREQUENCY_AIDING : 0 - Disable, 1 - Enable
#SENSOR_AIDING : 0 - Disable, 1 - Enable
#SET_ID_IMSI : 1 - Use IMSI for SET ID, 0 - Use MSISDN for SET ID, especially for Japan Network Operators
#DEBUGGING_FILES : 0 - no log file, 1 - log files enabled
#SSL_ENABLED : 0 - SSL Disabled, 1 - SSL Enabled
#CERTI_VERSION : 0 - TLSv1 , 1 - SSLv3 , 2 - SSLv23
#CP_RESPONSETIME : 0 - no priority, 1 - resposne priority time, 2 - resposne priority position ,3 - resposne priority use entire response time
#REAIDING=20
#CONTROL_PLANE : 1 - CP Enabled, 0 - CP Disabled, for MP3 player or PND
#ATT_NETWORK_OPERATOR : 1 - for AT&T, 0 - for other network operator
PROJECT=SAMSUNG_S5PC210
UART_DRIVER=/dev/s3c2410_serial1
RESET_GPIO=/sys/devices/virtual/sec/gps/GPS_nRST/value
ONOFF_GPIO=/sys/devices/virtual/sec/gps/GPS_PWR_EN/value
EXTERNAL_LNA=1
REF_CLOCK_26MHZ=1
UART_BAUD_RATE=2
FREQUENCY_AIDING=1
SENSOR_AIDING=1
SET_ID_IMSI=1
DEBUGGING_FILES=0
SSL_ENABLED=0
CERTI_VERSION=0
CP_RESPONSETIME=2
CONTROL_PLANE=1
ATT_NETWORK_OPERATOR=0
EMC_ENABLE=1
LOG_PATH=/sdcard/gps/csr
Thanks.couldn't get it working so reflashed same rom (voda uk kj3) (no wipe) and rerooted with speedmod.
Gps fix fine quick.
Now back to ki1 modem (as shipped), but it was probably a bad config somewhere
Thanks for the info

Bricked Huawei HiSilicon phones - Honor P6, Mate, 4C etc... way to unbrick???

Hi people.
I have new bricked Huawei Honor 4c with HiSilicon Kirin 620 octacore (Hi6620) Hardly bricked.
I`ve unlocked bootloader and custom recovery used to flash it with my own update.zip from other phone (with LTE support). At the end of flashing - it turned off and bricked.
BUT! After connecting to PC via USB it flashes GREEN and RED leds a few times and after windows determines it as a device with USB\VID_12D1&PID_3609&REV_0000 and named as 䕇䕎䥎 ㄰㌲㔴㜶㤸 .
It is Huawei`s VID. And after a lot of search I found a driver for it - and device became HUAWEI USB-COM 1.0. But nothing else.
No flash utility, nothing. HiSilicon-IDT for K3 processor doesn`t work.
After another searches I found very similar device - it`s named HiKey board. Based on Hisilicon Kirin processor too https://www.96boards.org/.
This board is base around the HiSilicon Kirin 6220 eight-core ARM Cortex-A53 64-bit SoC running at 1.2GHz and delivering over 10,000 Dhrystone VAX MIPS total performance. The SoC also delivers high performance 3D graphics support with its ARM Mali 450-MP4 GPU.
1GB 800MHz LPDDR3 DRAM, 4GB eMMC Flash Storage and the standard 96Boards microSD v3.0 socket provide high performance. Flexible storage options and connectivity are available through 802.11a/b/g/n WiFi, Bluetooth 4.0 LE, three high speed USB 2.0 ports (1 OTG), an HDMI 1.3 1080p video output with audio, and Maker, DSI display and CSI camera interfaces. The board is the standard 96Boards credit-card form factor powered by an 8-18V DC 2A power supply.
Click to expand...
Click to collapse
As we can see - it is very close to ours phone.
It is fully documented and has a lot of spec about proc and other.
And in it`s manual written about recovery procedure after damage of ROM - when device is powered on - it is in "download mode" for 90 seconds - abslolutly like mine phone - after 90 second it turns off from windows.
In short - it is ability to write 2 fastboot images (fastboot1.img and fastboot2.img) in RAM, launch them and using fastboot command flash images to eMMC. They use SERIAL COM PORT to manipulate with device.
It uses utility called "hisi-idt.py" - it is a python script for Linux based machines.
I`ve Installed Linux Mint and try it.
And I`ve some result - first image is going fine and I receive "Done"
But second image is always "Failed". And fastboot command "fastboot devices" do not list any devices.
Viewing binaries from my ROM (Fastboot.img and Fastboot1.img) in HEX - I can see load addresses to ROM are the same as in python script. It is 0xf9800800 and 0x0700000 for both images.
But.... have no success. It looks like I`m close to the goal.
Any ideas?
Noone intersted in?
I`ve found UART Rx Tx points on the motherboard and now I can get some debug info.
I see I can load images into RAM but...
Code:
debug EMMC boot: print init OK
debug EMMC boot: send RST_N .
debug EMMC boot: start eMMC boot......
OnChipRom: fastboot1 Verif sucess !
[BDID]boardid: 745 <7.4.5>
battery ocv is 4141 mv
�����������������������������������������������������壂�{��?O
H�����������w!!I㡡�v�J�ơ�����硾�B����9�F�F�$�/"�0D�c���������f��B���B�f��B�rreset device done.
start enum.
enum done intr
Enum is starting.
usb reset intr
enum done intr
NULL package
NULL package
USB ENUM OK.
init ser device done....
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
uFileAddress=ss=f9800800
start armboot download mode
[BDID]boardid: 745 <7.4.5>
battery 펟v���W�����ʝcn�g������
H�����������w!!I㡡�v�J�ơ�����硾�B����9�F�F�$�/"�0D�c���������f��B���B�f���gc姾����fB�ʔ
thats all for a while
i have same problem pleas tell me if you fix it
michfood said:
Noone intersted in?
I`ve found UART Rx Tx points on the motherboard and now I can get some debug info.
I see I can load images into RAM but...
Code:
debug EMMC boot: print init OK
debug EMMC boot: send RST_N .
debug EMMC boot: start eMMC boot......
OnChipRom: fastboot1 Verif sucess !
[BDID]boardid: 745 <7.4.5>
battery ocv is 4141 mv
�����������������������������������������������������壂�{��?O
H�����������w!!I㡡�v�J�ơ�����硾�B����9�F�F�$�/"�0D�c���������f��B���B�f��B�rreset device done.
start enum.
enum done intr
Enum is starting.
usb reset intr
enum done intr
NULL package
NULL package
USB ENUM OK.
init ser device done....
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
USB:: Err!! Unknown USB setup packet!
NULL package
uFileAddress=ss=f9800800
start armboot download mode
[BDID]boardid: 745 <7.4.5>
battery 펟v���W�����ʝcn�g������
H�����������w!!I㡡�v�J�ơ�����硾�B����9�F�F�$�/"�0D�c���������f��B���B�f���gc姾����fB�ʔ
thats all for a while
Click to expand...
Click to collapse
Hello, can you uload somewere the python file to have a look at it? Also the log you have provided to us it's the whole log?
no the log is not full.
it changes UART speed while booting.
script:
Code:
#!/usr/bin/python
#-*- coding: utf-8 -*-
import os
import os.path
import serial, time
import array
import sys, getopt
class bootdownload(object):
'''
Hisilicon boot downloader
>>> downloader = bootdownload()
>>> downloader.download(filename)
'''
# crctab calculated by Mark G. Mendel, Network Systems Corporation
crctable = [
0x0000, 0x1021, 0x2042, 0x3063, 0x4084, 0x50a5, 0x60c6, 0x70e7,
0x8108, 0x9129, 0xa14a, 0xb16b, 0xc18c, 0xd1ad, 0xe1ce, 0xf1ef,
0x1231, 0x0210, 0x3273, 0x2252, 0x52b5, 0x4294, 0x72f7, 0x62d6,
0x9339, 0x8318, 0xb37b, 0xa35a, 0xd3bd, 0xc39c, 0xf3ff, 0xe3de,
0x2462, 0x3443, 0x0420, 0x1401, 0x64e6, 0x74c7, 0x44a4, 0x5485,
0xa56a, 0xb54b, 0x8528, 0x9509, 0xe5ee, 0xf5cf, 0xc5ac, 0xd58d,
0x3653, 0x2672, 0x1611, 0x0630, 0x76d7, 0x66f6, 0x5695, 0x46b4,
0xb75b, 0xa77a, 0x9719, 0x8738, 0xf7df, 0xe7fe, 0xd79d, 0xc7bc,
0x48c4, 0x58e5, 0x6886, 0x78a7, 0x0840, 0x1861, 0x2802, 0x3823,
0xc9cc, 0xd9ed, 0xe98e, 0xf9af, 0x8948, 0x9969, 0xa90a, 0xb92b,
0x5af5, 0x4ad4, 0x7ab7, 0x6a96, 0x1a71, 0x0a50, 0x3a33, 0x2a12,
0xdbfd, 0xcbdc, 0xfbbf, 0xeb9e, 0x9b79, 0x8b58, 0xbb3b, 0xab1a,
0x6ca6, 0x7c87, 0x4ce4, 0x5cc5, 0x2c22, 0x3c03, 0x0c60, 0x1c41,
0xedae, 0xfd8f, 0xcdec, 0xddcd, 0xad2a, 0xbd0b, 0x8d68, 0x9d49,
0x7e97, 0x6eb6, 0x5ed5, 0x4ef4, 0x3e13, 0x2e32, 0x1e51, 0x0e70,
0xff9f, 0xefbe, 0xdfdd, 0xcffc, 0xbf1b, 0xaf3a, 0x9f59, 0x8f78,
0x9188, 0x81a9, 0xb1ca, 0xa1eb, 0xd10c, 0xc12d, 0xf14e, 0xe16f,
0x1080, 0x00a1, 0x30c2, 0x20e3, 0x5004, 0x4025, 0x7046, 0x6067,
0x83b9, 0x9398, 0xa3fb, 0xb3da, 0xc33d, 0xd31c, 0xe37f, 0xf35e,
0x02b1, 0x1290, 0x22f3, 0x32d2, 0x4235, 0x5214, 0x6277, 0x7256,
0xb5ea, 0xa5cb, 0x95a8, 0x8589, 0xf56e, 0xe54f, 0xd52c, 0xc50d,
0x34e2, 0x24c3, 0x14a0, 0x0481, 0x7466, 0x6447, 0x5424, 0x4405,
0xa7db, 0xb7fa, 0x8799, 0x97b8, 0xe75f, 0xf77e, 0xc71d, 0xd73c,
0x26d3, 0x36f2, 0x0691, 0x16b0, 0x6657, 0x7676, 0x4615, 0x5634,
0xd94c, 0xc96d, 0xf90e, 0xe92f, 0x99c8, 0x89e9, 0xb98a, 0xa9ab,
0x5844, 0x4865, 0x7806, 0x6827, 0x18c0, 0x08e1, 0x3882, 0x28a3,
0xcb7d, 0xdb5c, 0xeb3f, 0xfb1e, 0x8bf9, 0x9bd8, 0xabbb, 0xbb9a,
0x4a75, 0x5a54, 0x6a37, 0x7a16, 0x0af1, 0x1ad0, 0x2ab3, 0x3a92,
0xfd2e, 0xed0f, 0xdd6c, 0xcd4d, 0xbdaa, 0xad8b, 0x9de8, 0x8dc9,
0x7c26, 0x6c07, 0x5c64, 0x4c45, 0x3ca2, 0x2c83, 0x1ce0, 0x0cc1,
0xef1f, 0xff3e, 0xcf5d, 0xdf7c, 0xaf9b, 0xbfba, 0x8fd9, 0x9ff8,
0x6e17, 0x7e36, 0x4e55, 0x5e74, 0x2e93, 0x3eb2, 0x0ed1, 0x1ef0,
]
startframe = {
'hi3716cv200':[0xFE,0x00,0xFF,0x01,0x00,0x00,0x00,0x04,0x00,0x00,0x02,0x01]
}
headframe = {
'hi3716cv200':[0xFE,0x00,0xFF,0x01,0x00,0x00,0x00,0x04,0x00,0x00,0x02,0x01]
}
bootheadaddress = {
'hi3716cv200':0xF9800800
}
bootdownloadaddress = {
'hi3716cv200':0x07000000
}
BOOT_HEAD_LEN = 0x4F00
MAX_DATA_LEN = 0x400
def __init__(self,chiptype,serialport):
try:
self.s = serial.Serial(port=serialport, baudrate=115200, timeout=1)
except serial.serialutil.SerialException:
#no serial connection
self.s = None
print "\nFailed to open serial!", serialport
sys.exit(2)
self.chip = chiptype
def __del__(self):
if self.s != None:
self.s.close()
def calc_crc(self, data, crc=0):
for char in data:
crc = ((crc << 8) | ord(char)) ^ self.crctable[(crc >> 8) & 0xff]
for i in range(0,2):
crc = ((crc << 8) | 0) ^ self.crctable[(crc >> 8) & 0xff]
return crc & 0xffff
def getsize(self, filename):
st = os.stat(filename)
return st.st_size
def sendframe(self, data, loop):
for i in range(1, loop):
self.s.flushOutput()
self.s.write(data)
self.s.flushInput()
try:
ack = self.s.read()
if len(ack) == 1:
if ack == chr(0xaa):
return None
except:
return None
print 'failed'
def sendstartframe(self):
self.s.setTimeout(0.01)
data = array.array('B', self.startframe[self.chip]).tostring()
crc = self.calc_crc(data)
data += chr((crc >> 8)&0xff)
data += chr(crc&0xff)
self.sendframe(data,10000)
def sendheadframe(self,length,address):
self.s.setTimeout(0.03)
self.headframe[self.chip][4] = (length>>24)&0xff
self.headframe[self.chip][5] = (length>>16)&0xff
self.headframe[self.chip][6] = (length>>8)&0xff
self.headframe[self.chip][7] = (length)&0xff
self.headframe[self.chip][8] = (address>>24)&0xff
self.headframe[self.chip][9] = (address>>16)&0xff
self.headframe[self.chip][10] = (address>>8)&0xff
self.headframe[self.chip][11] = (address)&0xff
data = array.array('B', self.headframe[self.chip]).tostring()
crc = self.calc_crc(data)
data += chr((crc >> 8)&0xff)
data += chr(crc&0xff)
self.sendframe(data,16)
def senddataframe(self,seq,data):
self.s.setTimeout(0.15)
head = chr(0xDA)
head += chr(seq&0xFF)
head += chr((~seq)&0xFF)
data = head + data
crc = self.calc_crc(data)
data += chr((crc >> 8)&0xff)
data += chr(crc&0xff)
self.sendframe(data,32)
def sendtailframe(self,seq):
data = chr(0xED)
data += chr(seq&0xFF)
data += chr((~seq)&0xFF)
crc = self.calc_crc(data)
data += chr((crc >> 8)&0xff)
data += chr(crc&0xff)
self.sendframe(data,16)
def senddata(self, data, address):
length=len(data)
self.sendheadframe(length,address)
seq=1
while length > self.MAX_DATA_LEN:
self.senddataframe(seq,data[(seq-1)*self.MAX_DATA_LEN:seq*self.MAX_DATA_LEN])
seq = seq+1
length = length-self.MAX_DATA_LEN
self.senddataframe(seq,data[(seq-1)*self.MAX_DATA_LEN:])
self.sendtailframe(seq+1)
def download(self, filename1, filename2):
f=open(filename1,"rb")
data = f.read()
f.close()
print 'Sending', filename1, '...'
self.senddata(data,self.bootheadaddress[self.chip])
print 'Done\n'
if filename2:
f=open(filename2,"rb")
data = f.read()
f.close()
print 'Sending', filename2, '...'
self.senddata(data,self.bootdownloadaddress[self.chip])
print 'Done\n'
def burnboot(chiptype, serialport, filename1, filename2=''):
downloader = bootdownload(chiptype, serialport)
downloader.download(filename1, filename2)
def startterm(serialport=0):
try:
miniterm = Miniterm(
serialport,
115200,
'N',
rtscts=False,
xonxoff=False,
echo=False,
convert_outgoing=2,
repr_mode=0,
)
except serial.SerialException, e:
sys.stderr.write("could not open port %r: %s\n" % (port, e))
sys.exit(1)
miniterm.start()
miniterm.join(True)
miniterm.join()
def main(argv):
'''
img2 = 'fastboot2.img'
'''
img1 = 'fastboot1.img'
img2 = ''
dev = '/dev/serial/by-id/usb-䕇䕎䥎_㄰㌲㔴㜶㤸-if00-port0'
try:
opts, args = getopt.getopt(argv,"hd:",["img1=","img2="])
except getopt.GetoptError:
print 'hisi-idt.py -d device --img1 <fastboot1> --img2 <fastboot2>'
sys.exit(2)
for opt, arg in opts:
if opt == '-h':
print 'hisi-idt.py -d device --img1 <fastboot1> --img2 <fastboot2>'
sys.exit()
elif opt in ("-d"):
dev = arg
elif opt in ("--img1"):
img1 = arg
elif opt in ("--img2"):
img2 = arg
print '+----------------------+'
print ' Serial: ', dev
print ' Image1: ', img1
print ' Image2: ', img2
print '+----------------------+\n'
if not os.path.isfile(img1):
print "Image don't exists:", img1
sys.exit(1)
if (img2):
if not os.path.isfile(img2):
print "Image don't exists:", img2
sys.exit(1)
burnboot('hi3716cv200', dev, img1, img2)
if __name__ == "__main__":
main(sys.argv[1:])
logs:
Code:
��������������������������������������������������������������������������������������������������������������������������0
===>vbus_is_high!
fastboot1 charger_type:CHARGER_TYPE_PC
get_hw_config_int,hw_afreq:1200000.
get_efuse_value,efuse ATE_flag temp:0x0af00000.
ATE PASS,ate flag value:0x00000001.
get_efuse_value,efuse acpu_freq change level:0x8e186100.
get_efuse_value,efuse afreq change level val:0x00000000.
get_efuse_value,efuse acpu_freq level:0x8e186100.
get_efuse_value,efuse acpu freq sys level:0x00000000.
###INFO###,soc_freq = hw_afreq, efuse_afreq:1200000,hw_afreq:1200000.
efuse ACPU 1.4G HPM:0.
efuse ACPU 1.2G HPM:0.
efuse ACPU 960M HPM:0.
fastboot: acpu_dvfs_init successful!
begin get voltage by hpm...
prof[729000]: hpm_dly_exp = 0x00000cb0, hpm_dly_exit = 0x00000cf6!
prof[960000]: hpm_dly_exp = 0x00000cb6, hpm_dly_exit = 0x00000cfc!
prof[1200000]: hpm_dly_exp = 0x00000e94, hpm_dly_exit = 0x00000eda!
acpu support freq num:5
volt:0x0000004a 0x0000004a 0x0000004a 0x0000004a 0x00000057
acpu_get_dvfs_volt,g_afreq_max_pro is :5��acpu max freq:1200000.
#### success !!!!! set_acpu_freq: acpu support freq num is 5 and start is 4 .
get_ddr_type 1; (lpddr2: 0; lpddr3: 1)
pass the func addr: [0xfff81b10]: 0xf980d044ddr_init(): get_ddr_type: 1
ddr freq: 800000
in lpddr3_init: mode: 0; freq_config: 800
switch ddr voltage: 1.25V -> 1.2V
lpddr3_init 150
lpddr3_150_rank0_init_pass
lpddr3_150_rank1_init_pass
lpddr3_init 266
lpddr3_266_rank0_init_pass
lpddr3_266_rank1_init_pass
lpddr3_init 400
lpddr3_400_rank0_init_pass
lpddr3_400_rank1_init_pass
switch ddr voltage: 1.2V -> 1.25V
lpddr3_init 533
lpddr3_rank0_phydraminit_pass
lpddr3_cat_pass
lpddr3_533_rank0_init_pass
rdet_lbs_passrdet_ds_passrdet_rbs_av_passwdet_lbs_passwdet_ds_passwdet_rbs_av_passlpddr3_533_rank1_init_pass
lpddr3_init 800
lpddr3_rank0_phydraminit_pass
lpddr3_cat_pass
lpddr3_800_rank0_init_pass
rdet_lbs_passrdet_ds_passrdet_rbs_av_passwdet_lbs_passwdet_ds_passwdet_rbs_av_passlpddr3_800_rank1_init_pass
ERROR: tmp_freq: 0
tmp_freq: 400000
MR8 value=:0x0000005b
MR5 value=:0x00000001
Samsung DDR
MR6 value=:0x00000004
MR5 value=:0x00000000
[MR7,MR6,MR5]=:0x00000401
ddr init pll1 0x00007800!ddrc_qos_init done
bootloader_logger got buffer at 0x07300000, size 0x00040000
bootloader_logger: no valid data in buffer , (sig = 0x43474244)
[emmc_set_card_ready]emmc id:0xb64432c9 0x520644c1 0x474e4433 0x15010038
[emmc_set_card_ready]manufid: 0x00000015
DDR mode emmc
--error: gps/ldo16
[SEC]check_oem_hw: carrier_id = 0x00000000
DX_BIV_SwImageVerification image id is 0x00000011, return is 0xf1000002 !
execute_load_fastboot2: In secure mode and fastboot2 verify failed!
Load fastboot2 failed!
hw_error_print : led = 12. func = 0. err = 0.
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
enter fatal_exception!
Unrecovery Error, go to onchiprom usbloader!
USB Soft Disconnect
��������������������������������������������������������������������������������������������������������������������������0
===>vbus_is_high!
fastboot1 charger_type:CHARGER_TYPE_PC
get_hw_config_int,hw_afreq:1200000.
get_efuse_value,efuse ATE_flag temp:0x0af00000.
ATE PASS,ate flag value:0x00000001.
get_efuse_value,efuse acpu_freq change level:0x8e186100.
get_efuse_value,efuse afreq change level val:0x00000000.
get_efuse_value,efuse acpu_freq level:0x8e186100.
get_efuse_value,efuse acpu freq sys level:0x00000000.
###INFO###,soc_freq = hw_afreq, efuse_afreq:1200000,hw_afreq:1200000.
efuse ACPU 1.4G HPM:0.
efuse ACPU 1.2G HPM:0.
efuse ACPU 960M HPM:0.
fastboot: acpu_dvfs_init successful!
begin get voltage by hpm...
prof[729000]: hpm_dly_exp = 0x00000caf, hpm_dly_exit = 0x00000cf5!
prof[960000]: hpm_dly_exp = 0x00000cb5, hpm_dly_exit = 0x00000cfb!
prof[1200000]: hpm_dly_exp = 0x00000e90, hpm_dly_exit = 0x00000ed6!
acpu support freq num:5
volt:0x0000004a 0x0000004a 0x0000004a 0x0000004a 0x00000057
acpu_get_dvfs_volt,g_afreq_max_pro is :5��acpu max freq:1200000.
#### success !!!!! set_acpu_freq: acpu support freq num is 5 and start is 4 .
get_ddr_type 1; (lpddr2: 0; lpddr3: 1)
pass the func addr: [0xfff81b10]: 0xf980d044ddr_init(): get_ddr_type: 1
ddr freq: 800000
in lpddr3_init: mode: 0; freq_config: 800
switch ddr voltage: 1.25V -> 1.2V
lpddr3_init 150
lpddr3_150_rank0_init_pass
lpddr3_150_rank1_init_pass
lpddr3_init 266
lpddr3_266_rank0_init_pass
lpddr3_266_rank1_init_pass
lpddr3_init 400
lpddr3_400_rank0_init_pass
lpddr3_400_rank1_init_pass
switch ddr voltage: 1.2V -> 1.25V
lpddr3_init 533
lpddr3_rank0_phydraminit_pass
lpddr3_cat_pass
lpddr3_533_rank0_init_pass
rdet_lbs_passrdet_ds_passrdet_rbs_av_passwdet_lbs_passwdet_ds_passwdet_rbs_av_passlpddr3_533_rank1_init_pass
lpddr3_init 800
lpddr3_rank0_phydraminit_pass
lpddr3_cat_pass
lpddr3_800_rank0_init_pass
rdet_lbs_passrdet_ds_passrdet_rbs_av_passwdet_lbs_passwdet_ds_passwdet_rbs_av_passlpddr3_800_rank1_init_pass
ERROR: tmp_freq: 0
tmp_freq: 400000
MR8 value=:0x0000005b
MR5 value=:0x00000001
Samsung DDR
MR6 value=:0x00000004
MR5 value=:0x00000000
[MR7,MR6,MR5]=:0x00000401
ddr init pll1 0x00007800!ddrc_qos_init done
bootloader_logger got buffer at 0x07300000, size 0x00040000
bootloader_logger: no valid data in buffer , (sig = 0x43474244)
[emmc_set_card_ready]emmc id:0xb64432c9 0x520644c1 0x474e4433 0x15010038
[emmc_set_card_ready]manufid: 0x00000015
DDR mode emmc
--error: gps/ldo16
[SEC]check_oem_hw: carrier_id = 0x00000000
DX_BIV_SwImageVerification image id is 0x00000011, return is 0xf1000002 !
execute_load_fastboot2: In secure mode and fastboot2 verify failed!
Load fastboot2 failed!
hw_error_print : led = 12. func = 0. err = 0.
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
[fastboot]:k3_led_green_on
enter fatal_exception!
Unrecovery Error, go to onchiprom usbloader!
USB Soft Disconnect
��������������������������������������������������������������������������������������������������������������������������́v
nUpdate debug uart baudRate to :921600
===>vbus_is_high!
fastboot1 download_mode:1
fastboot1 charger_type:CHARGER_TYPE_PC
get_hw_config_int,hw_afreq:1200000.
get_efuse_value,efuse ATE_flag temp:0x0af00000.
ATE PASS,ate flag value:0x00000001.
get_efuse_value,efuse acpu_freq change level:0x8e186100.
get_efuse_value,efuse afreq change level val:0x00000000.
get_efuse_value,efuse acpu_freq level:0x8e186100.
get_efuse_value,efuse acpu freq sys level:0x00000000.
###INFO###,soc_freq = hw_afreq, efuse_afreq:1200000,hw_afreq:1200000.
efuse ACPU 1.4G HPM:0.
efuse ACPU 1.2G HPM:0.
efuse ACPU 960M HPM:0.
fastboot: acpu_dvfs_init successful!
begin get voltage by hpm...
prof[729000]: hpm_dly_exp = 0x00000cad, hpm_dly_exit = 0x00000cf3!
prof[960000]: hpm_dly_exp = 0x00000cad, hpm_dly_exit = 0x00000cf3!
prof[1200000]: hpm_dly_exp = 0x00000e88, hpm_dly_exit = 0x00000ece!
acpu support freq num:5
volt:0x0000004a 0x0000004a 0x0000004a 0x0000004a 0x00000057
acpu_get_dvfs_volt,g_afreq_max_pro is :5��acpu max freq:1200000.
#### success !!!!! set_acpu_freq: acpu support freq num is 5 and start is 4 .
get_ddr_type 1; (lpddr2: 0; lpddr3: 1)
pass the func addr: [0xfff81b10]: 0xf980d044ddr_init(): get_ddr_type: 1
ddr freq: 800000
in lpddr3_init: mode: 0; freq_config: 800
switch ddr voltage: 1.25V -> 1.2V
lpddr3_init 150
lpddr3_150_rank0_init_pass
lpddr3_150_rank1_init_pass
lpddr3_init 266
lpddr3_266_rank0_init_pass
lpddr3_266_rank1_init_pass
lpddr3_init 400
lpddr3_400_rank0_init_pass
lpddr3_400_rank1_init_pass
switch ddr voltage: 1.2V -> 1.25V
lpddr3_init 533
lpddr3_rank0_phydraminit_pass
lpddr3_cat_pass
lpddr3_533_rank0_init_pass
rdet_lbs_passrdet_ds_passrdet_rbs_av_passwdet_lbs_passwdet_ds_passwdet_rbs_av_passlpddr3_533_rank1_init_pass
lpddr3_init 800
lpddr3_rank0_phydraminit_pass
lpddr3_cat_pass
lpddr3_800_rank0_init_pass
rdet_lbs_passrdet_ds_passrdet_rbs_av_passwdet_lbs_passwdet_ds_passwdet_rbs_av_passlpddr3_800_rank1_init_pass
ERROR: tmp_freq: 0
tmp_freq: 400000
MR8 value=:0x0000005b
MR5 value=:0x00000001
Samsung DDR
MR6 value=:0x00000004
MR5 value=:0x00000000
[MR7,MR6,MR5]=:0x00000401
ddr init pll1 0x00007800!ddrc_qos_init done
bootloader_logger got buffer at 0x07300000, size 0x00040000
bootloader_logger: found existing buffer, size 1044, addr 24
USB_DOWNLOAD_MODE
timestamp: 0xfff2c982
return from fastboot1!
uFileAddress=ss=07000000
uFileAddress=ss=07000000
uFileAddress=ss=07000000
image verify failed!
@michfood hmm okay i had a look. As i can understand your phone doesn't accept the second fastboot.img. I don't think that the problem is the crctable. Maybe you have a wrong fastboot.img?? Try to get a new dump from an another phone.
If your image it's an original dump then there is no reason why it fails to pass the check. The reason why i think the crc signature it's correct it is because you are able to download both images(i saw more details in 96boards forum).
the second image do not start.
after loading first - it says:
"timestamp: 0xfff2c982
return from fastboot1!
uFileAddress=ss=07000000
image verify failed!"
so it is returned from fastboot1 to onchip loader and tries to load second image - but fails.
have no possibility to look normal boot as all phones are under guaranty - nobody want to solder uart pins
Actually i didn't said to you to look at a normal boot uart log. In a normal boot you'll just see the kernel booting. Maybe you second fastboot.img is faulty...
the second boot is correct - from the update.app, as the first one
there is a thought that message "image verify failed" is an onchip loader message after fastboot2 loads, runs, made some checks of other partitions (broken) (with no UART messages) and exits with some error code.
here we can see difference between boot from eMMC (left) and boot from RAM (right)
http://clip2net.com/s/3mFVeRi
No, i think fastboot2 doesn't boot at all. Look at ths:
Code:
execute_load_fastboot2: In secure mode and fastboot2 verify failed!
If you try to load only one fastboot.img? what happens?
you just look at log booting from emmc. while booting from ram - no such message.
and once more - after loading first fastboot to RAM it exits with message "return from fastboot1" and tries to load second file to RAM. read carefully
I've got a honor 4x which uses the same chipset. Mine is also bricked but loads into Fastboot&rescue mode, which does not allow me to update the fastboot image due to a signature verify problem (BL31 image). This is related to ARM Trusted Firmware. Also, it does not load a new update.app from the SDCARD - Simply hangs on the logo screen. Therefore, I need to force it to flash a new fastboot.img. I read the HiKey user guide, and noticed there's a J15 SEL jumper, where, when closed, will attempt to program the flash from USB OTG source. Before a pull my phone apart, I would like to know whether anybody has tried flashing a new fastboot.img via USB OTG via closing the J15 SEL jumper and whether it worked. Or if there's any other way to boot my own fastboot.img
some info. i`m looking for motherboard on ali.. have no success
Same problem
michfood said:
Hi people.
I have new bricked Huawei Honor 4c with HiSilicon Kirin 620 octacore (Hi6620) Hardly bricked.
I`ve unlocked bootloader and custom recovery used to flash it with my own update.zip from other phone (with LTE support). At the end of flashing - it turned off and bricked.
BUT! After connecting to PC via USB it flashes GREEN and RED leds a few times and after windows determines it as a device with USB\VID_12D1&PID_3609&REV_0000 and named as 䕇䕎䥎 ㄰㌲㔴㜶㤸 .
It is Huawei`s VID. And after a lot of search I found a driver for it - and device became HUAWEI USB-COM 1.0. But nothing else.
No flash utility, nothing. HiSilicon-IDT for K3 processor doesn`t work.
After another searches I found very similar device - it`s named HiKey board. Based on Hisilicon Kirin processor too https://www.96boards.org/.
As we can see - it is very close to ours phone.
It is fully documented and has a lot of spec about proc and other.
And in it`s manual written about recovery procedure after damage of ROM - when device is powered on - it is in "download mode" for 90 seconds - abslolutly like mine phone - after 90 second it turns off from windows.
In short - it is ability to write 2 fastboot images (fastboot1.img and fastboot2.img) in RAM, launch them and using fastboot command flash images to eMMC. They use SERIAL COM PORT to manipulate with device.
It uses utility called "hisi-idt.py" - it is a python script for Linux based machines.
I`ve Installed Linux Mint and try it.
And I`ve some result - first image is going fine and I receive "Done"
But second image is always "Failed". And fastboot command "fastboot devices" do not list any devices.
Viewing binaries from my ROM (Fastboot.img and Fastboot1.img) in HEX - I can see load addresses to ROM are the same as in python script. It is 0xf9800800 and 0x0700000 for both images.
But.... have no success. It looks like I`m close to the goal.
Any ideas?
Click to expand...
Click to collapse
Hi,
I'm stucked in the same hard brick. Could you provide a download link for the driver you found?
Are there news about progresses with this issue?
Thank you very much, I'll try to help if you want
In China,Hisilicon Kirin 620 is hi6210,not 6620.You can get the source code of HUAWEI Honor 4C from:http://emuirom123.dbankcloud.com/Cherrymini_kernel_[Android 5.1 EMUI3.1].tar.gz?rid=1520
It is for the China Mobile version(CHM-TL00H) with Kirin 620.
Chinese version Kirin 620 runs 8×A53 1.2GHz cores and ARM Mali-450 MP4 Gpu.The baseband of hisilicon kirin 620 is Balong V8R1SFT.
Sorry for my bad English.
来自搭载Android 2.3 GingerBread的华为Y220-T10
JackLenz said:
Hi,
I'm stucked in the same hard brick. Could you provide a download link for the driver you found?
Are there news about progresses with this issue?
Thank you very much, I'll try to help if you want
Click to expand...
Click to collapse
still nothing
zhaozihanzzh said:
In China,Hisilicon Kirin 620 is hi6210,not 6620.You can get the source code of HUAWEI Honor 4C from:http://emuirom123.dbankcloud.com/Cherrymini_kernel_[Android 5.1 EMUI3.1].tar.gz?rid=1520
It is for the China Mobile version(CHM-TL00H) with Kirin 620.
Chinese version Kirin 620 runs 8×A53 1.2GHz cores and ARM Mali-450 MP4 Gpu.The baseband of hisilicon kirin 620 is Balong V8R1SFT.
Sorry for my bad English.
来自搭载Android 2.3 GingerBread的华为Y220-T10
Click to expand...
Click to collapse
thanks for info - but how it helps?
michfood said:
still nothing
Click to expand...
Click to collapse
And what about the driver link?
I found some source code on github, maybe it could be useful
https://github.com/muhammadfahadbaig/android_vendor_huawei_hi6210sft

Porting kexec hardboot to LG L1 II

Hi,
I've read the porting kexec hardboot wiki: https://github.com/Tasssadar/multirom/wiki/Porting-kexec-hardboot and, in particular, the following step:
Hard-reboot in arch/arm/kernel/relocate_kernel.S
Can be found here in the patch for mako. This can often be the hardest thing to find out. Try to look for restart.c or reboot.c or something like that in your device's arch/arm/mach-xxx folder and port the restart sequence from that file to assembler. If you are using Tegra 2/3 or MSM SoC, chances are reboot methods currently (or very similar to them) in the patch will work.
Click to expand...
Click to collapse
So, the porting guide says the restart sequence should be ported from restart.c to relocate_kernel.S.
Exactly, what function I've to port from restart.c? Any ideas?
Ok, I've ported the restart sequence into relocate_kernel.S. The patch just needs the following changes:
Code:
#elif defined(CONFIG_ARCH_MSM7X27)
#include <mach/msm_iomap.h>
Code:
#elif defined(CONFIG_ARCH_MSM7X27)
/* Restart using the PMIC chip, see mach-msm/restart.c */
mov r0, #3
ldr r1, =0x00100000
str r0, [r1]
ldr r0, =0x77665501
str r0, [r1, #0x08]
mov r0, #0
str r0, [r1, #0x0C]
mov r0, #1
ldr r1, =0xc0100418
str r0, [r1]
loop: b loop
Many thanks to a msm dev guy for the help and explanations, which I've translated into assembly code shown above :good:
Now, the next part of the porting kexec hardboot wiki says:
Reserving memory for kexec-hardboot page
Can be found here in the patch for mako. You need to find a place where reserving memory is safe, typicaly somewhere around where memory for ram_console is reserved. It probably will be in the board's file. I usually register the page just before the ram_console, which is before the end of the first memory bank.
Click to expand...
Click to collapse
So, my question is: what board's file is the porting guide pointing to? Any ideas?
Ok, I've reserved memory for kexec-hardboot page. This part can be done if board-msm7x27a_v1.c board's file (located into arch/arm/mach-msm/lge/v1 directory) is changed as follows:
Code:
static void __init msm7x27a_reserve(void)
{
reserve_info = &msm7x27a_reserve_info;
msm_reserve();
#ifdef CONFIG_KEXEC_HARDBOOT
// Reserve space for hardboot page, just before the ram_console
struct membank* bank = &meminfo.bank[0];
phys_addr_t start = bank->start + bank->size - SZ_1M - SZ_1M;
int ret = memblock_remove(start, SZ_1M);
if(!ret)
pr_info("Hardboot page reserved at 0x%X\n", start);
else
pr_err("Failed to reserve space for hardboot page at 0x%X!\n", start);
#endif
}
Now, the next part of the porting kexec hardboot wiki says:
Setting KEXEC_HB_PAGE_ADDR
Can be found here in the patch for mako. This is highly device-specific. Either apply the patch without this value (-> set it to beggining of the System RAM) and grep dmesg for the value you printk in memory reservation ("Hardboot page reserved at 0x%X") or look into /proc/iomem to see where the first bank of System RAM ends, substract size of ram_console ram and size of the hardboot page from that and you should get the right address.
Click to expand...
Click to collapse
This is my /proc/iomem:
Code:
00200000-0fefffff : System RAM
00208000-0098207b : Kernel code
009b2000-00c03f87 : Kernel data
0ff3e000-0ff3efff : crash_log
20000000-2b4fffff : System RAM
98000000-9807ffff : lcd01
9c000000-9c07ffff : lcd02
a0000000-a001ffff : kgsl_3d0_reg_memory
a0000000-a001ffff : kgsl-3d0
a0200000-a0200fff : msm_serial_hs.0
a0300000-a0300fff : uartdm_resource
a0400000-a0400fff : msm_sdcc.1
a0500000-a0500fff : msm_sdcc.2
a0600000-a0600fff : msm_sdcc.3
a0800000-a08003ff : msm_hsusb_host.0
a0800000-a08003ff : msm_hsusb
a0800000-a08003ff : msm_otg
a0d00000-a0d00fff : base
a0e00000-a0e00fff : pbus_phys_addr
a0f00000-a0ffffff : csic
a0f00000-a0ffffff : msm_csic
a1000000-a10fffff : csic
a1000000-a10fffff : msm_csic
a1200000-a1200fff : gsbi_qup_i2c_addr
a1200000-a1200fff : qup_i2c
a1280000-a1280fff : qup_phys_addr
a1280000-a1280fff : qup_i2c
a1300000-a1300fff : gsbi_qup_i2c_addr
a1300000-a1300fff : qup_i2c
a1380000-a1380fff : qup_phys_addr
a1380000-a1380fff : qup_i2c
a8600000-a8600fff : clk_ctl
a9700000-a9700fff : msm_dmov
a9a00000-a9a00fff : msm_serial.0
a9a00000-a9a00fff : msm_serial
aa200000-aa2f1007 : mdp
c0400000-c0400fff : pl310_erp
In particular, line related to the first bank of System RAM says:
Code:
00200000-0fefffff : System RAM
So, should I subtract size of ram_console ram and size of the hardboot page from 0fefffff in order to get the right value for KEXEC_HB_PAGE_ADDR? And, should I use SZ_1M for the size of hardboot page? Any ideas?
Ok, I've set KEXEC_HB_PAGE_ADDR. Briefly, I've subtracted size of the hardboot page (SZ_1M) and size of ram_console (LGE_RAM_CONSOLE_SIZE) from the end address of the System RAM first bank (0ff00000 = 0fefffff + 1). This part can be done if memory.h (located into arch/arm/mach-msm/include/mach directory) is changed as follows:
Code:
#if defined(CONFIG_KEXEC_HARDBOOT)
#if defined(CONFIG_MACH_MSM7X25A_V1)
#define KEXEC_HB_PAGE_ADDR UL(0x0FDC2000)
#else
#error "Adress for kexec hardboot page not defined"
#endif
#endif
Now, the next part of the porting kexec hardboot wiki says:
Setting kexec_hardboot_hook
Can be found here in the patch for mako. This method should contain some device-specific code which needs to be executed during the reboot sequence. Again, can be found in restart.c or reboot.c or something like that in your device's arch/arm/mach-xxx. Chances are you don't need to set anything in here.
Click to expand...
Click to collapse
So, what device-specific code (which needs to be executed during the reboot sequence) should this method contain, in my particular case? Can I just use only pm8xxx_reset_pwr_off function, as in the patch for mako? Any ideas?

Flashtool 0.9.23.2 error (have googled intensively b4 posting)

hello everyone
device is SGP712 (unlocked bootloader , LineageOS 7.1.2 )
Flashtool is 0.9.23.2 (runing on linux debian)
sudo flashtool correctly sees the device connecting in either fastboot or flash mode. (no issues there , or so it seems)
objective: flash an ftf file made from an xperifirm download. (to revert to stock rom)
I select flashmode, then browse to the made ftf , I do not check any choice in wipe/exclude
leave the buffer at its default 512K
click on flash.
I get these two errors:
Code:
ERROR - (X10flash.java:735) - null
ERROR - (X10flash.java:736) - Error flashing. Aborted
(tried different ftf , same error)
activated DEBUG logging and i see the repetition of this patern:
Code:
DEBUG - (USBFlashLinux.java:57) - OUT : CommandID : 9 / Flags : false,true,false / Data length : 1 / Data CRC32 : EE 0E 61 2C
DEBUG - (USBFlashLinux.java:75) - Reading packet from phone
DEBUG - (USBFlashLinux.java:81) - IN : CommandID : 9 / Flags : false,false,false / Data length : 0 / Data CRC32 : 00 00 00 00
with each commandID the out is false,true,false and the in is false,false,false
data crc out is always different then data crc in
here is a pruned DEBUG log at the following url (can't post url as i'm rather new here)
http : // txt.do / dmoq3
anyhelp would be much appreciated.
You need https://developer.sonymobile.com/downloads/tool/flash-tool-for-xperia-devices/
will give it a try and report here. thx for the pointer.
THANK YOU.
I used the aforementioned flashtool , selected latest firmware in list.
I have now an SGP712 with official android 7.1.1 and unlocked bootloader.
i can take it from here. thank you.
As this is an old post I found I too have the same issue. I have downloaded source code from github and made small changes to find out crc32 output but didnt understand what it does. Can i know how do you get that debug level information in console. Which flashtool you use and how do you get it. Also I tried flashtool by sony with no success. It doesn't recognize my device G3116 Sony xperia XA1.

General BOOT LOG FOR XIAOMI MI 11 LITE 5G

Handling Cmd: reboot-bootloader
Rebooting the device into bootloader mode
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELSUPPORTFLAGS
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_POWERDOWN
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELSUPPORTFLAGS
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_POWERDOWN
Start EBS [279413]
App Log Flush : 0 ms
ScmArmV8ExitBootServicesHandler, Status = 0x0.
Exit EBS [279586] UEFI End
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.MXF.1.0-00773-LAHAINA-1
S - IMAGE_VARIANT_STRING=SocCedrosLAA
S - OEM_IMAGE_VERSION_STRING=c5-xm-ota-bd006.bj
S - Boot Interface: UFS
S - Secure Boot: On
S - Boot Config @ 0x00786070 = 0x00000041
S - JTAG ID @ 0x00786130 = 0x001590e1
S - OEM ID @ 0x00786138 = 0x00720000
S - Serial Number @ 0x00786134 = 0xcc773c71
S - Feature Config Row 0 @ 0x00784148 = 0x0000000000000000
S - Feature Config Row 1 @ 0x00784150 = 0x0000000000000000
S - Core 0 Frequency, 1516 MHz
S - PBL Patch Ver: 2
D - 8926 - pbl_apps_init_timestamp
D - 37267 - bootable_media_detect_timestamp
D - 955 - bl_elf_metadata_loading_timestamp
D - 7991 - bl_hash_seg_auth_timestamp
D - 7166 - bl_elf_loadable_segment_loading_timestamp
D - 4660 - bl_elf_segs_hash_verify_timestamp
D - 16951 - bl_sec_hash_seg_auth_timestamp
D - 802 - bl_sec_segs_hash_verify_timestamp
D - 23 - pbl_populate_shared_data_and_exit_timestamp
S - 84741 - PBL, End
B - 92811 - SBL1, Start
B - 211426 - SBL1 BUILD @ 13:55:24 on Apr 12 2022
B - 215482 - usb: usb_shared_hs_phy_init: hs phy cfg size , 0xc
D - 224632 - sbl1_hw_init
B - 315766 - UFS INQUIRY ID: SKhynix H9HQ15AECMBDAR A043
B - 317932 - UFS Boot LUN: 1
D - 109800 - boot_media_init
D - 0 - smss_load_cancel
B - 337726 - SMSS - Image Load, Start
D - 3050 - SMSS - Image Loaded, Delta - (0 Bytes)
D - 4484 - Auth Metadata
D - 5582 - sbl1_xblconfig_init
B - 352488 - XBL Config - Image Load, Start
D - 0 - shrm_load_cancel
B - 360205 - SHRM - Image Load, Start
D - 4087 - Auth Metadata
D - 1189 - Segments hash check
D - 12383 - SHRM - Image Loaded, Delta - (39616 Bytes)
D - 30 - boot_default_cdt_init
B - 381402 - Using default CDT
D - 3477 - boot_cdt_init
B - 387960 - CDT - Image Load, Start
B - 390766 - CDT Version:3,Platform ID:34,Major ID:1,Minor ID:0,Subtype:0
D - 16561 - sbl1_hw_platform_pre_ddr
D - 0 - devcfg init
B - 416904 - PM: pm_device_pre_init 0xf0a0: 0x0
B - 416935 - PMIC A:2.0 B:2.2 C:2.2 D:2.0 F:2.1
B - 423370 - PM: Reset by PSHOLD
B - 426207 - PM: Reset Type: Hard Reset
B - 429531 - PM: PON by SYSOK
B - 678076 - PM: SET_VAL:Skip
B - 678381 - PM: pm_device_post_init 0xf0a0: 0x0
B - 681156 - PM: 0xf0ed: 0x3
B - 685884 - PM: 0xf241: 0x0
B - 688842 - PM: 0xf23f: 0x0
B - 691770 - PM: 0xf067: 0xa
B - 694729 - PM: 0xf0f2: 0xf
B - 697687 - PM: 0xf047: 0xc5
B - 700646 - PM: 0xf060: 0x66
B - 703696 - PM: 0xE44C: 0x42
B - 706746 - PM: 0xE44D: 0xe
B - 709765 - PM: 0xE453: 0xa6
B - 712724 - PM: 0xE432: 0x40
B - 715835 - PM: PSI: b0x04_v0x12
B - 722118 - PM: Device Init # SPMI Transn: 15042
D - 314851 - pm_device_init, Delta
B - 727028 - pm_driver_init, Start
B - 739106 - PM: Driver Init # SPMI Transn: 558
D - 8632 - pm_driver_init, Delta
B - 743803 - PM: CHG Type in CHG init : 0
B - 747616 - PM: 0x2706: 0xa
B - 751367 - PM: 0x2707: 0xa
B - 754326 - PM: 0x2708: 0xa
B - 757284 - PM: 0x2709: 0xa
B - 761219 - PM: Battery ID: 101246Ohm
B - 763323 - PM: VBAT: 4273mV IBAT: 103mA
B - 767075 - PM: CHG Init # SPMI Transn: 15660
B - 771131 - vsense_init, Start
D - 0 - vsense_init, Delta
D - 380762 - sbl1_hw_pre_ddr_init
D - 0 - boot_dload_handle_forced_dload_timeout
D - 2958 - sbl1_load_ddr_training_data
B - 796538 - Pre_DDR_clock_init, Start
D - 92 - Pre_DDR_clock_init, Delta
D - 12871 - sbl1_ddr_set_params
B - 808219 - sbl1_ddr_init, Start
B - 811635 - LP4 DDR detected
D - 14609 - sbl1_ddr_init, Delta
B - 826184 - DSF version = 262.0.18
B - 829569 - Manufacturer ID = 6, Device Type = 7
B - 833138 - Rank 0 size = 2048 MB, Rank 1 size = 4096 MB
D - 29860 - sbl1_ddr_init
D - 0 - boot_pre_ddi_entry
B - 846253 - do_ddr_training, Start
D - 214 - sbl1_load_gsort_data
B - 892430 - DDR: Start of DDR Training Restore
B - 896029 - Current DDR Freq = 1555 MHz
B - 897096 - Max enabled DDR Freq = 2092 MHz
B - 901092 - DDR: End of DDR Training Restore
D - 56028 - do_ddr_training, Delta
D - 63836 - sbl1_do_ddr_training
D - 153 - sbl1_load_gsort_data
B - 916921 - magic str match
B - 920307 - magic_str: gsort, test_trigger_bitmap: 0
B - 923265 - gsort_versionffset:8.val:0x1
B - 928450 - trigger bit map is null
D - 19215 - sbl1_do_ddr_gsort
D - 518 - boot_ddi_entry
B - 939522 - Pimem init cmd, entry
D - 9150 - Pimem init cmd, exit
B - 951874 - External heap init, Start
B - 954955 - External heap init, End
B - 961756 - log rotate_flag=0
D - 22936 - sbl1_post_ddr_init
D - 30 - sbl1_hw_init_secondary
B - 970113 - ADC done - mv: 127941, percent: 4471
B - 973651 - ADC done - mv: 1629368, percent: 56949
B - 977220 - chiptype: 450, projectid adc within range 3800 to 5125, hwid adc within range 55047 to 58857
B - 987925 - ProjectType:6 ProductName:renoir HwLevel:MP HwCountry:GL HwId:0x190000
D - 28914 - sbl1_hw_get_mihwinfo
B - 999881 - DDR - Image Load, Start
B - 1003389 - usb: UFS Serial - 263ba23e
B - 1007079 - usb: chgr - SDP_CHARGER
B - 1011410 - usb: usb_shared_hs_phy_init: hs phy cfg size , 0xc
D - 17233 - boot_fedl_check
B - 1020804 - APDP - Image Load, Start
D - 3203 - APDP - Image Loaded, Delta - (64 Bytes)
D - 0 - boot_dload_dump_security_regions
D - 0 - ramdump_load_cancel
B - 1037244 - RamDump - Image Load, Start
D - 3324 - RamDump - Image Loaded, Delta - (0 Bytes)
D - 0 - boot_update_abnormal_reset_status
D - 0 - boot_cache_set_memory_barrier
D - 0 - boot_smem_debug_init
D - 427 - boot_smem_init
D - 31 - boot_smem_alloc_for_minidump
D - 92 - boot_smem_store_pon_status
D - 30 - sbl1_hw_platform_smem
D - 0 - sbl1_hw_store_mihwinfo_smem
D - 31 - boot_smem_store_ddr_status
D - 61 - boot_ddr_share_data_to_aop
D - 366 - boot_clock_init_rpm
D - 0 - boot_vsense_copy_to_smem
D - 0 - boot_populate_ram_partition_table
D - 0 - boot_populate_ddr_details_shared_table
D - 0 - sbl1_tlmm_init
D - 0 - sbl1_efs_handle_cookies
B - 1107943 - OEM_MISC - Image Load, Start
D - 3782 - OEM_MISC - Image Loaded, Delta - (64 Bytes)
B - 1115812 - QTI_MISC - Image Load, Start
D - 5520 - QTI_MISC - Image Loaded, Delta - (0 Bytes)
B - 1130513 - PM: PM Total Mem Allocated: 2684
D - 5429 - sbl1_pm_aop_pre_init_wrapper
B - 1135545 - AOP - Image Load, Start
D - 4392 - Auth Metadata
D - 1555 - Segments hash check
D - 13725 - AOP - Image Loaded, Delta - (202056 Bytes)
B - 1152595 - QSEE Dev Config - Image Load, Start
D - 4087 - Auth Metadata
D - 458 - Segments hash check
D - 13054 - QSEE Dev Config - Image Loaded, Delta - (40464 Bytes)
B - 1174646 - QSEE - Image Load, Start
D - 20832 - Auth Metadata
D - 20740 - Segments hash check
D - 83753 - QSEE - Image Loaded, Delta - (3588097 Bytes)
B - 1261937 - set bob err_flag[0] = 0x0
B - 1267336 - set bob err_flag[1] = 0x0
B - 1271179 - set bob err_flag[2] = 0x0
B - 1275022 - set bob err_flag[3] = 0x0
D - 17141 - sbl1_hw_play_vibr
B - 1282708 - SEC - Image Load, Start
D - 4118 - Auth Metadata
D - 213 - Segments hash check
D - 10522 - SEC - Image Loaded, Delta - (7252 Bytes)
B - 1296555 - CPUCPFW - Image Load, Start
D - 20404 - Auth Metadata
D - 15006 - Segments hash check
D - 46726 - CPUCPFW - Image Loaded, Delta - (111592 Bytes)
B - 1352309 - QHEE - Image Load, Start
D - 4209 - Auth Metadata
D - 8723 - Segments hash check
D - 16500 - QHEE - Image Loaded, Delta - (1949313 Bytes)
B - 1372134 - APPSBL - Image Load, Start
D - 4148 - Auth Metadata
D - 10126 - Segments hash check
D - 22905 - APPSBL - Image Loaded, Delta - (2379776 Bytes)
D - 0 - sbl1_save_appsbl_index
B - 1404311 - SBL1, End
D - 1314916 - SBL1, Delta
S - Flash Throughput, 211951 KB/s (8478072 Bytes, 40474 us)
S - DDR Frequency, 1555 MHz
B - 1418494 - restore bob err_flag[4] = 0x0
B - 1420964 - restore bob err_flag[5] = 0x0
B - 1425173 - restore bob err_flag[6] = 0x0
B - 1429382 - restore bob err_flag[7] = 0x0
UEFI Start [ 1613]
- 0x09FC01000 [ 1615] Sec.efi
ASLR : ON
DEP : ON (RTB)
Timer Delta : +2 mS
RAM Entry 0 : Base 0x0080000000 Size 0x003A800000
RAM Entry 1 : Base 0x0100000000 Size 0x0100000000
RAM Entry 2 : Base 0x00C0000000 Size 0x0040000000
Total Available RAM : 6056 MB (0x017A800000)
Total Installed RAM : 6144 MB (0x0180000000)
Init 1 aux cores of 7
Init CPU core 1
> Scheduler up on Core 1
UEFI Ver : 6.0.220412.BOOT.MXF.1.0-00773-LAHAINA-1
Build Info : 64b Apr 12 2022 13:55:59
Boot Device : UFS
PROD Mode : TRUE
Retail : TRUE
PM0: 47, PM1: 48, PM2: 49, PM3: 50, PM5: 52,
Module cannot re-initialize DAL module environment
UFS INQUIRY ID: SKhynix H9HQ15AECMBDAR A043
UFS Boot LUN: 1
HW Wdog Setting from PCD : Disabled
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_INIT
Setvariable Logo Image returned Success
LogoCompressedBlockNum:116 LogoCompressedBytesNum:472176
DecompressBufferSize:31104218 ScratchSize:131072
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELDTINFO
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPLATFORMINFO
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELSUPPORTFLAGS
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELSUPPORTFLAGS
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_POWERUP
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELCONFIG
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_RESETPANEL
Offset cmd: 0x39 0x06
MIDynamic DSI readback = 00 readSize = 2, uRetryCount = 1
MIDynamic-Detected: readSize: 2, readback: 0x0000
Detected panel id: 0x00
DisplayDxe: K9 42 02 0b amoled dsc cmd
DisplayDxe: Resolution 1080x2400 (1 intf)
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPLATFORMINFO
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELSUPPORTFLAGS
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_POWERUP
smem_alloc_ex: SMEM alloc_ex failed with err=-3! smem_type=478, remote=3, size=32, flags=0x40000000.smem_alloc_ex: SMEM alloc_ex failed with err=-3! smem_type=478, remote=13, size=32, flags=0x40000000.ChargerLib:: ChargerLibTarget_HWInit Charger PlatHWConfig = 1, (overrided by CFG item)
ChargerLib:: ChargerLibTarget_HWInit PlatformType = 34: ChargerHW = 1, GaugeHW = 1
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101203
QcomChargerDxe:: ChargerPlatform_Init Enabled WDOG.
QcomChargerDxe:: ChargerPlatform_Init Successfully Success
do_authentication
entery AuthenticateDS28E16
entery DS28E16_get_page_status_retry
entery DS28E16_Read_RomID_retry
Ready to write 0x33 to maxim IC!
RomID = 9F,D3,31,11,15,F0,04,CA
crc_low_first = CA
entery DS28E16_cmd_computeS_Secret_retry
computeS_Secret:
computeS_Secret:
entery DS28E16_cmd_computeReadPageAuthentication_retry
Seeds:
host data
battery verify ok: 1
Battery verified result:1
Ready to write 0x33 to maxim IC!
RomID = 9F,D3,31,11,15,F0,04,CA
crc_low_first = CA
Battery verified chip ok result:1
Battery verified value:0x30
read once_run_flag=0
read load_adsp_value=0x0
read load_adsp_value=0x30
QcomChagerDxe: Set boot service variable <BattVerifiedResult> = androidboot.batt_verified_result=11
QcomChargerDxe:: ChargerPlatform_Init battery verified Successfully = Success
UsbConfigLibOpenProtocols: PMI version (0x30)
UsbConfigInit: Failed to attach USB Arid 0x0 HAL IOMMU domain Result = (0x14)
UsbConfigInit: Failed to attach USB Arid 0x1 HAL IOMMU domain Result = (0x14)
UsbConfigPortsQueryConnectionChange: usbport->connectstate: ATT
ButtonsDxeTest: Keypress SDAM data payload 0
ISENSE TOTAL TIME 1ms
smem_get_addr: SMEM get addr failed! smem_type=628MinidumpTADxe: Minidump TA loading not enabled.
Disp init wait [ 2598]
DisplayDxe: pFrameBufferBase = 0xE1000000
DisplayDxe: uFrameBufferSize = 10368000
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SW_RENDERER
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELSUPPORTFLAGS
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SETGPIOSTATE
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SETGPIOSTATE
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_RESETPANEL
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_SETBACKLIGHT
Read Dsi White Color Coordinate Register: 01 F3 02 09 09 03 01 05
Read White Color Coordinate: 01 F3 02 09 09 03 01 05
DispalyDxe: Set boot service variable <DisplayOledPanelWp> = androidboot.oled_wp=01f3020909030105
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPLATFORMINFO
[Cedros] eDisplayId:0, Config = MDPPLATFORM_CONFIG_GETPANELSUPPORTFLAGS
Display_Utils_RenderSplashScreen USE IMAGEFV
Display_Utils_RenderSplashScreen: hw_country GL, uLogoIndex = 4
DeCompressLogoData: Setvariable Logo Image returned Success
DeCompressLogoData: Setvariable Logo Image returned LG!!9
DeCompressLogoData: LogoCompressedBlockNum:57 LogoCompressedBytesNum:231346
DeCompressLogoData: DecompressBufferSize:77760558 ScratchSize:131072
LoadBitmapImageFromLogoData USE IMAGEFV
DisplayUtils: enter render.
DisplayUtils: Display_Utils_RenderBGRTImage end Status:0
-----------------------------
Platform Init [ 3006] BDS
INFO: UEFI NV tables are enabled as VOLATILE!
UEFI Ver : 6.0.220412.BOOT.MXF.1.0-00773-LAHAINA-1
Platform : IDP
Subtype : 0
Boot Device : UFS
Chip Name : SM_CEDROS
Chip Ver : 1.0
Chip Serial Number : 0xCC773C71
-----------------------------
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101203
ChargerLib:: ChargerLib_GetBatteryID BATT_ID_2 = 101203
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101228
ChargerLib:: ChargerLib_GetBatteryID BATT_ID_2 = 101228
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101203
TNT BatteryVoltage::= 4282
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101252
TNT BatteryVoltage::= 4282
ChargerLib:: ChargerLib_GetErrors pChargingError = 0
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101252
ChargerLib:: ChargerLib_GetBatteryID BATT_ID_2 = 101252
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101277
TNT BatteryVoltage::= 4282
QcomChargerDxe:: ChargerPlatform_ChkChgFwLoadRequired VBatt = 4282 V, gThresholdVbatt = 3600 V
QcomChargerDxe:: ChargerPlatform_ChkChgFwLoadRequired Chg Fw Load not required boot to HLOS
read once_run_flag=1
read load_adsp_value=0x30
read load_adsp_value=0x30
QcomChargerDxe:: ChargerPlatform_ChkChgFwLoadRequired boot to hlos, set load_adsp_value=0
ChargerLib:: ChargerLibTarget_GetBatteryID BATT_ID_2 = 101302
TNT BatteryVoltage::= 4282
UEFI Total : 1430 ms
POST Time [ 3044] OS Loader
Loader Build Info: Apr 12 2022 14:33:58
QseeResponse->result = 0xFFFFFFFF
Status = 0x7
VB: RWDeviceState: Succeed using rpmb!
ProjectType:0x6 hw_id:0x190000 hw_level:MP
Total DDR Size: 0x000000017A800000
Partition not found : oem_misc1
Get Partition info for oem_misc1 failed
PON Reason is 1 cold_boot:1
ProjectType:0x6 hw_id:0x190000 hw_level:MP
Total DDR Size: 0x000000017A800000
getting IsColdBoot reset status: 1, key: 0
MpDevice!!
KeyPress:0, BootReason:2
Fastboot=1, Recovery:1
Launching fastboot
Fastboot Build Info: Apr 12 2022 14:33:27
usb_shared_hs_phy_init: hs phy cfg size: 12
usb_shared_ss_phy_init: ss phy cfg size: 143
ssusb_phy_init_success_lane_B: 1
SSUsb1InitCommon: End of SSusb1initcommon coreType 5
Fastboot: Initializing...
Token Length: 128
Fastboot: Processing commands
LoadBitmapImageFromLogoData USE IMAGEFV
Picture 1 Successfully load
DisplayUtils: enter render.
DisplayUtils: Display_Utils_RenderBGRTImage end Status:0
Picture 1 Successfully render
display picture 1 [ 3360]
Dev_Common_Speed: Dev Bus Speed: High, state 2

Categories

Resources