Un pò di info tecniche sul smt-t5040
Ciao a tutti ,
visto il periodo di ferie ho deciso di smanettare con il suddetto decoder.
Visto che sono in possesso di un adattatore seriale , ho deciso di aprire il coperchio e verificare che ci fosse sotto .
Con il fidato tester ho trovato la polarità della ejtag (3.8v ) , del pettine j11 (quello vicino alla cpu ) , di seguito la pedinatura :
Pin 1 positivo
Pin 2 massa
Pin 3 RX
Pin 4 TX
Vi riporto tutte le fasi di boot ( trattasi di linux su broadcom) :
Shmoo Version=3.0
DDR Freq=0x0000018C
%00000001%S=00000000
G=00000001
R=00000000
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
R=00000001
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
R=00000002
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
R=00000003
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
R=00000004
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
R=00000005
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=00000006
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=00000007
000000000000000000000000000000000000000000000000000000000000000000000000000000101111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=00000008
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=00000009
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=0000000A
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=0000000B
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=0000000C
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=0000000D
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=0000000E
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=0000000F
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=00000010
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=00000011
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=00000012
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=00000013
000000000000000000000000000000000000000000000000000000000000000000000000000000011111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=00000014
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=00000015
000000000000000000000000000000000000000000000000000000000000000000000000000000101111111111111111111111111111111111111111111111111111111111111111100000000000000000000000000000000000000000000000
R=00000016
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=00000017
000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111110000000000000000000000000000000000000000000000
R=00000018
000000000000000000000000000000000000000000000000000000000000000000000000000000111111101011111111101111101101111011111111111111001010011101110111110000000000000000000000000000000000000000000000
R=00000019
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
R=0000001A
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
R=0000001B
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
R=0000001C
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
R=0000001D
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
R=0000001E
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
G=00000001 R=0000000E W=0000000F
0000111111111111111111111000000
0001111111111111111111111000000
0000011111111111111111111000000
0000111111111111111111111110000
0111111111111111111111111000000
0011111111111111111111111100000
0001111111111111111111111000000
0000111111111111111111111000000
ESooooR3
COPY CODE
COMPARE CODE
4567
BCM97405B1 CFE v2.13, CFE core v2.4, Endian Mode: Little
BSECK VERSION: 1.1.0.0
Build Date: Wed Apr 28 23:33:42 2010 (Space_Tsai@space-tsai)
Copyright (C) Broadcom Corporation.
******************************************
DDR Freq: 396MHz
CPU speed: 405MHz
Memory Config: 64-bit UMA
Device Tech: 512Mb
Total memory: 256MB
Total flash: 32MB
Initializing USB.
USB: Locating Class 09 Vendor 0000 Product 0000: USB Hub
CFE initialized.
-->AUTO START = boot -z -elf flash0.kernel: 'rootfstype=cramfs root=/dev/mtdblock1 mem=72M console=ttyS2,115200'
Loader:elf Filesys:raw Dev:flash0.kernel File: Options:rootfstype=cramfs root=/dev/mtdblock1 mem=72M console=ttyS2,115200
Loading: 0x80001000/3306472 0x8032a000/421124 0x80390d04/172816 Entry address is 0x8036a000
TP1 Entry Address at 0x80000ffc = 8036a000
Starting program at 0x8036a000
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
Memory: 67456k/262144k available (2930k kernel code, 194560k reserved, 558k data, 156k init, 0k highmem)
Mount-cache hash table entries: 512
Checking for 'wait' instruction... available.
plat_prepare_cpus: ENABLING 2nd Thread...
TP0: prom_boot_secondary: Kick off 2nd CPU...
CPU revision is: 0002a044
FPU revision is: 00130001
Primary instruction cache 32kB, physically tagged, 2-way, linesize 64 bytes.
Primary data cache 64kB, 4-way, linesize 64 bytes.
Synthesized TLB refill handler (23 instructions).
Brought up 2 CPUs
migration_cost=1000
NET: Registered protocol family 16
registering PCI controller with io_map_base unset
registering PCI controller with io_map_base unset
SCSI subsystem initialized
usbcore: registered new driver usbfs
usbcore: registered new driver hub
NET: Registered protocol family 2
IP route cache hash table entries: 2048 (order: 1, 8192 bytes)
TCP established hash table entries: 8192 (order: 4, 65536 bytes)
TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
TCP: Hash tables configured (established 8192 bind 4096)
TCP reno registered
brcm-pm: disabling power to USB block
brcm-pm: disabling power to ENET block
brcm-pm: disabling power to SATA block
NTFS driver 2.1.27 [Flags: R/O].
JFFS2 version 2.2. (NAND) (SUMMARY) (C) 2001-2006 Red Hat, Inc.
io scheduler noop registered
io scheduler anticipatory registered (default)
io scheduler deadline registered
io scheduler cfq registered
Serial: 8250/16550 driver $Revision: 1.90 $ 3 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 22) is a 16550A
serial8250: ttyS1 at MMIO 0x0 (irq = 66) is a 16550A
serial8250: ttyS2 at MMIO 0x0 (irq = 67) is a 16550A
loop: loaded (max 8 devices)
brcm-pm: enabling power to ENET block
Broadcom BCM7413 P21 Ethernet Network Device v2.0 Mar 29 2010 21:49:46
Config Internal PHY Through MDIO: Auto-negotiation timed-out
: 10 MB Half-Duplex (assumed)
init link_change_task
PPP generic driver version 2.4.2
NET: Registered protocol family 24
BCM97XXX flash device: 0x02000000 @ 0x1e000000
Broadcom 9xxxx mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
Amd/Fujitsu Extended Query Table at 0x0040
Broadcom 9xxxx mapped flash: CFI does not contain boot bank location. Assuming top.
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Creating 9 MTD partitions on "Broadcom 9xxxx mapped flash":
0x0000000000000000-0x0000000000000020 : "header"
mtd: partition "header" doesn't end on an erase block -- force read-only
0x0000000000000020-0x0000000001200000 : "app"
mtd: partition "app" doesn't start on an erase block boundary -- force read-only
0x0000000001200000-0x0000000001ac0000 : "appdata"
0x0000000001ac0000-0x0000000001b60000 : "cas"
0x0000000001b60000-0x0000000001c00000 : "navdata"
0x0000000001c00000-0x0000000001d20000 : "loader"
0x0000000001d20000-0x0000000001fc0000 : "app1"
0x0000000001fc0000-0x0000000001fe0000 : "hdcp"
0x0000000001fe0000-0x0000000002000000 : "nvram"
ehci_hcd_brcm_init: Initializing 2 EHCI controller(s)
brcm-pm: enabling power to USB block
10 Dec 2004 USB 2.0 'Enhanced' Host Controller (EHCI) Driver (EHCI-brcm-0)
drivers/usb/host/ehci-brcm.c: starting brcm EHCI USB Controller
- USB h/w setup mode <B>
- USB power enable set for active HIGH mode
brcm-ehci brcm-ehci.0: BRCM EHCI
brcm-ehci brcm-ehci.0: new USB bus registered, assigned bus number 1
brcm-ehci brcm-ehci.0: irq 62, io mem 0x10480300
brcm-ehci brcm-ehci.0: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
10 Dec 2004 USB 2.0 'Enhanced' Host Controller (EHCI) Driver (EHCI-brcm-1)
drivers/usb/host/ehci-brcm.c: starting brcm EHCI USB Controller
brcm-ehci-1 brcm-ehci-1.1: BRCM EHCI
brcm-ehci-1 brcm-ehci-1.1: new USB bus registered, assigned bus number 2
brcm-ehci-1 brcm-ehci-1.1: irq 57, io mem 0x10480500
brcm-ehci-1 brcm-ehci-1.1: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 2 ports detected
ohci_hcd_brcm_init: Initializing 2 OHCI controller(s)
2005 April 22 USB 1.1 'Open' Host Controller (OHCI) Driver (OHCI-brcm-0)
drivers/usb/host/ohci-brcm.c: starting brcm OHCI USB Controller
- Resetting at b0480408
<-- brcm_start_hc
brcm-ohci-0 brcm-ohci-0.0: BRCM OHCI
brcm-ohci-0 brcm-ohci-0.0: new USB bus registered, assigned bus number 3
brcm-ohci-0 brcm-ohci-0.0: irq 63, io mem 0x10480400
usb usb3: configuration #1 chosen from 1 choice
hub 3-0:1.0: USB hub found
hub 3-0:1.0: 2 ports detected
2005 April 22 USB 1.1 'Open' Host Controller (OHCI) Driver (OHCI-brcm-1)
drivers/usb/host/ohci-brcm.c: starting brcm OHCI USB Controller
- Resetting at b0480608
<-- brcm_start_hc
brcm-ohci-1 brcm-ohci-1.1: BRCM OHCI
brcm-ohci-1 brcm-ohci-1.1: new USB bus registered, assigned bus number 4
brcm-ohci-1 brcm-ohci-1.1: irq 64, io mem 0x10480600
usb usb4: configuration #1 chosen from 1 choice
hub 4-0:1.0: USB hub found
hub 4-0:1.0: 2 ports detected
Initializing USB Mass Storage driver...
usbcore: registered new driver usb-storage
USB Mass Storage support registered.
pegasus: v0.6.13 (2005/11/13), Pegasus/Pegasus II USB Ethernet driver
usbcore: registered new driver pegasus
drivers/usb/net/rtl8150.c: rtl8150 based usb-ethernet driver v0.6.2 (2004/08/27)
usbcore: registered new driver rtl8150
usbcore: registered new driver asix
i8042.c: i8042 controller self test timeout.
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
VFS: Mounted root (cramfs filesystem) readonly.
Freeing unused kernel memory: 156k freed
init started: BusyBox v1.11.1 (2008-12-11 16:39:01 PST)
starting pid 1, tty '': '/etc/init.d/rcS'
Mount /proc fs
rm: cannot remove '/etc/resolv.conf': Read-only file system
Linux Start......
start services
start user services
Prepare to run APP
bcmdriver: module license 'Proprietary' taints kernel.
Fail to try mount /dev/sda1 to /mnt/usb
Fail toBCMDRV: Initializing bcmdriver version $ 9 $
try mount /dev/BCMDRV: Using Interrupt Definition for 7405b0-smp (uname -a)
sda to /mnt/usb
BCMDRV: Total intc words=3,Total Irqs=97
BCMDRV: Global Interrupt Mask 0:0xD3DF7FFF,1:0x1CBF95D3,2:0x00000000,3:0x00000000
BCMDRV: Initialization complete...
NEXUS_Frontend_Probe1211
NEXUS_Frontend_Probe1211 init ucCount = 0, errCode = 0
NEXUS_Frontend_Probe1211 init Success
##############################
( LSB - 0x0 )( MSB - 0x0 )
##############################
##############################
(Version - 0x2 )
##############################
xargs: kill: terminated by signal 11
===============================================
AltiCaptor(tm) 2010/04/28-21:33-(bogus@SP3-dev)
===============================================
===============================================
AltiCaptor(tm) Alticast Corp.
Platform : MIPS R3000-Linux-2.6.12
Version : 2010/04/28-21:33-(bogus@SP3-dev)
Serial : 10436
Path : /home/bogus/italy/samsung/g4.samsung
===============================================
*** 00:00:12.124 box_norflash: flashdrv_probe: addr:0x44ab8000
AltiCaptorpreference 'TimeShift' not found|Thread[NavSuite-NavEventQueue-0,8,main]|2000.01.01 02:00:22
##############################
( LSB - 0x0 )( MSB - 0x0 )
##############################
##############################
(Version - 0x2 )
##############################
Purtroppo non riesco ad avere nessuna shell disponibile per smanettare nel sistema , ma solo una console di debug di ALICAST che vi riporto :
================================= ALTICAST DEBUG API LIST ================================
dbg/msg/warn/err/none : Change log level (e.g. err)
dbg/msg/warn/err/none compname : Change log level of the component (e.g. msg channel)
dump : Stack dump in debug mode
dump2 : Stack dump in nolog mode
gc : Do manual GC.
mem : Print memory status.
blockkey : Ignore all key event.
unblockkey : Release blocking keys.
prtkeycode : Print remocon key values.
sendkey code : Send remocon key (e.g sendkey 427)
aging add keycode interval(msec.) : Add aging scenario (e.g aging add 427 4000)
aging reset : Clear aging scenario.
aging start : Start Aging scenario.
aging stop : Stop Aging scenario.
idle : Start/Stop priority 0 busy waiting task.
f : Toggle test flag.
createtask priority : Create and run a task with given priority (e.g createTask 100)
============================================================================================
Good Luck
============================================================================================
Per ora questo e tutto
