| 03:17.32 | *** join/#openezx kundancool (~kundancoo@14.195.0.17) |
| 03:17.58 | kundancool | Good Morning evrybody |
| 03:22.28 | *** join/#openezx florian (~fuchs@Maemo/community/contributor/florian) |
| 03:30.32 | kundancool | WyrM: can you tell me is there any way to load gen-blob to memory of e6 without entering the MBM flash mode? |
| 03:31.01 | WyrM | hi. |
| 03:31.09 | WyrM | kundancool: not via usb. |
| 03:31.21 | kundancool | ? |
| 03:31.55 | kundancool | actually 3 days ago I was flashing my E6 using moto-boot-usb |
| 03:32.11 | kundancool | and I created a bash script to do all that process |
| 03:32.12 | WyrM | no mbm means the phone will not listen on the usb port, so you cant load anything with usb. |
| 03:32.54 | kundancool | WyrM: so how can I write MBM back to phone ? |
| 03:33.07 | WyrM | you can use jtag to recover mbm. |
| 03:33.22 | WyrM | or remove the flash bga and use a flash programmer. |
| 03:33.26 | WyrM | jtag is easier :) |
| 03:33.43 | kundancool | I don't have jtag tools |
| 03:33.53 | kundancool | I only have USB cable |
| 03:34.34 | WyrM | with usb its not possible, sorry :( |
| 03:34.36 | kundancool | well can you tell me where can I get JTAG ? |
| 03:34.40 | WyrM | i left code on boot_usb to alert the user in case its going to overwrite mbm area. |
| 03:34.49 | WyrM | didnt it alert you? |
| 03:35.05 | kundancool | actually I used the script |
| 03:35.14 | kundancool | that made the alert go background |
| 03:35.30 | WyrM | you can build a jtag cable, or buy one. |
| 03:35.40 | kundancool | how can I build ? |
| 03:35.54 | WyrM | i have one from tincantools.com, cheap and works. |
| 03:36.15 | kundancool | can you give me link to that please |
| 03:37.10 | WyrM | http://www.tincantools.com/product.php?productid=16134&cat=251&page=1 |
| 03:37.24 | WyrM | never used it on ezx phones, but should work ok. |
| 03:39.13 | kundancool | so how will i connect JTAG pins to e6? |
| 03:40.27 | WyrM | i dont know the pinout. |
| 03:40.39 | WyrM | seatch for the schematics, or on motorolafans.com |
| 03:41.38 | WyrM | you can also consider paying somebody to recover the phone for you. |
| 03:42.48 | WyrM | if you have no experience with a soldering iron you may damage a test point, and then you will no longer be able to use jtag. |
| 03:53.02 | kundancool | WyrM: can you tell me some technical details about E6 |
| 03:53.16 | kundancool | like about flash memory and motherboard |
| 03:53.37 | WyrM | i dont remember much stuff :) |
| 03:53.45 | WyrM | wiki is probably better reference. |
| 03:53.50 | kundancool | I suppose E6 has 64MB NAND flash |
| 03:54.02 | WyrM | hum.. |
| 03:54.08 | kundancool | I didn't get any info about these |
| 03:54.14 | WyrM | there is no nand on gen2 phones IIRC. |
| 03:54.33 | WyrM | if there is, then its probably DiskOnChip NAND like gen1 phones. |
| 03:54.34 | kundancool | you mean its NOR ? |
| 03:54.55 | WyrM | yes, gen2 is NOR only AFAIK. |
| 03:55.43 | kundancool | what is "AFAIK" ? |
| 03:55.52 | WyrM | As Far As I Know. |
| 03:56.27 | kundancool | ok |
| 03:56.42 | kundancool | and whats the name of the board ? |
| 03:56.49 | kundancool | is it BEAGAL BOARD ? |
| 03:57.05 | WyrM | you mean reference board? |
| 03:57.36 | WyrM | e6 is probably based on intel lubbock, or some other pxa devel board from intel. |
| 03:57.51 | WyrM | i cant remember all their names :) |
| 03:57.57 | kundancool | ok |
| 03:58.03 | kundancool | thanks |
| 03:58.34 | WyrM | beagle board is omap from Texas Instruments. EZX uses PXA27x from Intel. |
| 04:06.25 | kundancool | WyrM: so you have used JTAG on any other device ? |
| 04:06.59 | WyrM | yes. |
| 04:07.13 | WyrM | for both recovering/flashing and debugging. |
| 04:07.22 | kundancool | i mean if a JTAG device support only two modem signals : TXD, RXD |
| 04:07.36 | kundancool | can it be used to recover my E6 ? |
| 04:08.16 | WyrM | jtag is not just a serial port. |
| 04:08.52 | WyrM | rxd+txd+gnd is not jtag, you cant use it to recover your e6, sorry. |
| 04:09.37 | kundancool | so what is it actually ? |
| 04:10.15 | WyrM | its a low level debug interface. |
| 04:10.26 | WyrM | you can do lots of fun stuff to the processor. |
| 04:10.36 | WyrM | including loading code to it :) |
| 04:12.54 | kundancool | :( I just want to repair my E6 as it has no problem other than no MBM |
| 04:13.07 | WyrM | I think you should look for some electronics professional help in your city. |
| 04:13.34 | kundancool | actually I would like to try these JTAG stuff with my A1200 |
| 04:13.54 | kundancool | as my A1200 has really got enough damage to be repaired (can be used now) |
| 04:14.25 | kundancool | do you think the people who used to flash phones to repair it can do this ? |
| 04:14.26 | WyrM | if you dont know what jtag is, then you probably will not be able to recover it yourself, or risk damaging it even more. |
| 04:15.21 | WyrM | tell then what you have done: "I erased the bootloader", and then ask: "What can you do to fix it?" |
| 04:15.37 | WyrM | if they say "JTAG" then they probably can fix it ;) |
| 04:15.49 | WyrM | most people will say "replace mainboard" |
| 04:15.59 | WyrM | its up for you to decide. |
| 04:17.23 | kundancool | well suppose someone manages to use JTAG |
| 04:17.43 | kundancool | but where is the bootloader that should be flashed? |
| 04:17.59 | WyrM | 0x0 |
| 04:18.08 | kundancool | no.... |
| 04:18.11 | WyrM | oh. |
| 04:18.16 | kundancool | I didn't mean the address |
| 04:18.26 | WyrM | you mean, you want the software? |
| 04:18.33 | WyrM | you can read it from another e6. |
| 04:18.41 | WyrM | or even from your a1200. |
| 04:18.51 | kundancool | well a good thing is that |
| 04:18.53 | WyrM | use gen-blob to read 128k from 0x0 |
| 04:19.01 | WyrM | READ |
| 04:19.05 | kundancool | I have my 64MB NOR backup |
| 04:19.08 | WyrM | dont write to 0x0 again :) |
| 04:19.26 | kundancool | I created when I opened the box of my phone |
| 04:19.50 | kundancool | surely I will not do this sort of mistakes again |
| 04:19.52 | WyrM | ok, then just use "dd" to read the first 128k of your flash dump, thats mbm |
| 04:20.44 | kundancool | so if I manage to flash starting 128K data from that backup to address 0x0 will my phone boot again ? |
| 04:20.57 | WyrM | mbm will boot. |
| 04:21.19 | WyrM | then you can use boot_usb/gen-blob to flash everything else. |
| 04:21.37 | WyrM | you can also flash everything through jtag, but its slower. |
| 04:22.02 | kundancool | how much time it will take to flash 128K data to flash ? |
| 04:22.25 | WyrM | less than 10 minutes :) |
| 04:22.42 | kundancool | :) |
| 04:23.14 | kundancool | well to attach e6 to JTAG is it require to remove any metal shield ? |
| 04:23.36 | kundancool | I mean there are many shield on board for protection |
| 04:24.05 | WyrM | i think you will need to remove some shielding. |
| 04:24.09 | WyrM | not sure though. |
| 04:24.35 | kundancool | I suppose only if the JTAG connectors are under the shield |
| 04:24.58 | WyrM | yes. |
| 04:25.12 | WyrM | but there are no connectors :) |
| 04:25.36 | WyrM | just test pads. it will need some careful soldering. |
| 04:25.45 | kundancool | well I will try consult a professional for JTAG process |
| 04:26.20 | kundancool | well from your words I can feel that you enjoy JTAG with your devices |
| 04:26.26 | kundancool | am I right ? |
| 04:26.35 | WyrM | lol |
| 04:26.38 | WyrM | not really :) |
| 04:27.01 | WyrM | i do it when needed. jtag is always a pain in the a**. |
| 04:27.15 | kundancool | yes it is |
| 04:28.18 | kundancool | how much test pads does JTAG supports |
| 04:28.23 | kundancool | or a device can have |
| 04:29.52 | WyrM | at least 6. |
| 04:30.17 | WyrM | standard connectors are 14 or 20 pins. |
| 04:30.53 | WyrM | there a lot of other test pads on ezx boards, but they are not related to jtag. |
| 04:34.04 | kundancool | WyrM: can you please create a -f (force) check in moto-boot-usb so that it asks for -f argument to flash MBM |
| 04:34.12 | kundancool | or any other secure area |
| 04:34.44 | kundancool | or any question and input stuff |
| 04:34.47 | kundancool | like |
| 04:35.06 | kundancool | flash to address 0x0 ? [y/n] |
| 04:35.13 | kundancool | something like that |
| 04:35.41 | kundancool | so that I and other people can use moto-boot-usb without any risk to flash the phones |
| 04:36.08 | WyrM | its not risk free. :) |
| 04:36.24 | WyrM | You should have read the disclaimer.. "No Warranties". |
| 04:36.26 | kundancool | it is atleast for me |
| 04:36.43 | kundancool | I know thats why I am not claiming for any warranties |
| 04:36.47 | kundancool | :) |
| 04:36.50 | WyrM | AND... It does make a lot of noise if you are trying to flash to 0x0. |
| 04:37.18 | WyrM | IIRC, a message gets repeated 60 times, once per second, on a 60 second countdown. |
| 04:37.22 | WyrM | lol |
| 04:37.26 | WyrM | ugly stuff ;) |
| 04:37.44 | kundancool | yes |
| 04:38.52 | kundancool | so will you do it please |
| 04:39.20 | kundancool | I think it will hardly take 15 min of your precious time |
| 04:39.30 | kundancool | Please grant that time to this Please :) |
| 04:40.19 | WyrM | i dont have any openezx stuff on this pc. (not even the ssh key needed to commit code). |
| 04:40.37 | WyrM | it will probably be easier if you ask the current project maintainer, ao2. |
| 04:40.47 | WyrM | he can do it if he thinks its needed :) |
| 04:49.09 | kundancool | WyrM: you created gen-blob ? |
| 04:49.30 | kundancool | can you tell me why it shows error if there is no SD card in phone |
| 04:49.48 | kundancool | I mean i can not use gen-blob without SD card |
| 04:51.28 | WyrM | gen-blob is a hack on motorola's blob source code, which is based on open source blob. i did not create it :) |
| 04:51.38 | WyrM | there is some code to load a kernel from flash too. |
| 04:51.50 | WyrM | IIRC, some flag you need to write somewhere on flash. |
| 04:52.00 | WyrM | dont remember the details, should be on wiki. |
| 04:55.07 | kundancool | WyrM: suppose if I want to flash my A1200 using moto-boot-usb and gen-blob but without sd will it flash my phone ? |
| 05:11.37 | WyrM | yes |
| 05:12.03 | WyrM | just press vol+ while inserting the battery. |
| 05:12.10 | WyrM | or vol-, dont remember :) |
| 05:12.30 | kundancool | well I am not using Dual boot |
| 05:13.10 | WyrM | then press while you send gen-blob via usb |
| 05:13.15 | WyrM | should work too. |
| 05:14.00 | kundancool | well this would be helpful |
| 05:15.28 | WyrM | time to sleep :) |
| 05:15.33 | kundancool | :) |
| 05:15.36 | kundancool | Good Night |
| 05:15.36 | WyrM | 2am on Brazil. |
| 05:15.43 | WyrM | bye! |
| 05:15.48 | kundancool | 10:45 AM India |
| 05:32.32 | kundancool | WyrM: you there ? |
| 05:33.30 | kundancool | can you tell me whether a standard JTAG connector can be used on other board/devices or not ? |
| 05:45.47 | *** join/#openezx kundancool (~kundancoo@14.195.0.17) |
| 05:49.49 | *** join/#openezx Marex_ (vasum7am@u-sl.ms.mff.cuni.cz) |
| 05:50.22 | *** part/#openezx kundancool (~kundancoo@14.195.0.17) |
| 07:59.09 | *** join/#openezx ao2 (~ao2@2001:1418:117::1) |
| 08:06.17 | *** join/#openezx bluelightning (~paul@83.217.123.106) |
| 08:06.17 | *** join/#openezx bluelightning (~paul@pdpc/supporter/professional/bluelightning) |
| 08:44.56 | *** join/#openezx pixel___ (~root@p4FC40164.dip0.t-ipconnect.de) |
| 08:44.56 | *** join/#openezx EuroTrash (~rtrsh@82-169-3-152.ip.telfort.nl) |
| 08:44.56 | *** join/#openezx CoreDuo (coreduo@2001:470:b163::15) |
| 09:00.22 | *** join/#openezx Marex_ (vasum7am@u-sl.ms.mff.cuni.cz) |
| 10:20.37 | *** join/#openezx lclaudio (~lclaudio@187.59.13.9) |
| 10:43.41 | *** join/#openezx kundancool (~kundancoo@14.195.96.5) |
| 10:44.33 | kundancool | Hi everybody |
| 10:45.18 | kundancool | ao2: I asked WyrM for the change in moto-boot-usb code for flashing at address 0x0 |
| 10:45.28 | kundancool | he said you can do that |
| 10:45.52 | ao2 | yes I can |
| 10:46.06 | ao2 | remind me on the weekend please |
| 10:46.15 | kundancool | oh sure |
| 10:48.50 | ao2 | kundancool, just in case I forgot to do that before |
| 10:48.59 | ao2 | any news about the broken phone? |
| 10:49.25 | kundancool | no still |
| 10:49.30 | kundancool | in front of me |
| 10:49.41 | kundancool | as a Steel Brick |
| 10:50.38 | kundancool | ao2: WyrM said that it can be repaired through JTAG flashing |
| 10:50.42 | kundancool | but I am not good as WyrM so its not possible for me to repair myself |
| 10:52.38 | kundancool | but I am waiting for few days so that I can go back to service center to claim warranty |
| 10:53.12 | kundancool | as without my E6 my development regarding EZX has been stopped |
| 10:54.33 | ao2 | kundancool, I hope you fix it then :) |
| 10:54.51 | ao2 | what were you doing with EZX phones btw? |
| 10:55.52 | kundancool | I was trying to study the ezx kernel so that I can build the latest kernel for e6 |
| 10:56.02 | kundancool | that can support SDHC |
| 10:56.39 | kundancool | there are serveral patches available but they are some how messed up in my pc |
| 10:57.50 | kundancool | actually the reason behind these things is I like to learn alot |
| 10:58.21 | kundancool | and openezx really helped me alot learning about ezx and my phone ;) |
| 11:13.30 | *** join/#openezx kundancool (~kundancoo@14.195.96.5) |
| 11:22.12 | *** join/#openezx CoreDuo (coreduo@2001:470:b163::15) |
| 12:44.03 | *** join/#openezx pixel___ (~root@p4FC40385.dip0.t-ipconnect.de) |
| 13:05.29 | *** join/#openezx kundancool (~kundancoo@27.107.255.39) |
| 15:18.05 | kundancool | WyrM: you there? |
| 15:51.43 | CIA-18 | OpenEZX: 03Antonio Ospite <ospite@studenti.unina.it> 07ezx/current * raae8398e9e 10openezx/include/linux/rfkill-regulator.h: |
| 15:51.43 | CIA-18 | OpenEZX: ezx/rfkill-bluetooth: fix a checkpatch.pl ERROR, trailing white space |
| 15:51.43 | CIA-18 | OpenEZX: Signed-off-by: Antonio Ospite <ospite@studenti.unina.it> |
| 16:10.58 | kundancool | ao2: do you have mbm of e6 ? |
| 16:11.50 | kundancool | dd if=backup-firmware of=mbm bs=128k count=1 conv=notrunc |
| 16:12.16 | ao2 | kundancool, never had an e6, sorry |
| 16:12.21 | kundancool | i tried this but the file that comes out only has \xFF hex |
| 16:12.29 | kundancool | I mean |
| 16:12.54 | kundancool | it has only one king of hex values I suppose MBM is empty |
| 16:13.05 | ao2 | "bs" skips the first 128k, isn't that where mbm is supposed to be? |
| 16:13.16 | kundancool | oops |
| 16:13.20 | ao2 | ah, bs is _size_ sorry |
| 16:13.25 | ao2 | I was srong |
| 16:13.27 | kundancool | actually i never used dd |
| 16:13.28 | ao2 | wrong |
| 16:13.57 | kundancool | then the command is right ? |
| 16:14.23 | ao2 | if you want to get the fist 128k, then yes, it looks like it is right |
| 16:14.30 | ao2 | I have to go BTW, sorry |
| 16:14.40 | kundancool | ok |
| 16:14.42 | ao2 | we can talk in a couple of hours |
| 16:14.56 | kundancool | but WyrM said first 128k is mbm |
| 16:16.50 | *** join/#openezx shoragan________ (~shoragan@sicherheitsschwankung.de) |
| 16:16.54 | *** join/#openezx yang (yang@gNewSense.linuxshell.org) |
| 16:18.52 | *** join/#openezx Guest5810 (yang@freenode/sponsor/cacert.assurer.yang) |
| 16:34.27 | *** join/#openezx uwe_ (~uwe_@dslb-188-105-021-172.pools.arcor-ip.net) |
| 16:36.45 | WyrM | kundancool: IIRC, first 128k is mbm, you shouldn't get 0xFF. |
| 16:37.07 | WyrM | check the wiki, i may be wrong about mbm position/size |
| 16:37.23 | kundancool | well i just saw that starting 4 bytes are only changed hex values |
| 16:37.36 | kundancool | then all are \xFF |
| 16:37.56 | kundancool | does that means mbm is of only 4 bytes ? |
| 16:39.18 | kundancool | WyrM: can you give me a link to the wiki page which has info about mbm position and size |
| 16:40.37 | WyrM | http://wiki.openezx.org/Internal_Flash |
| 16:41.05 | WyrM | mbm is 128k at 128k, so, dd bs=128k skip=1 count=1 |
| 16:41.51 | WyrM | err, 256k at 128k. |
| 16:42.13 | WyrM | dd bs=128k skip=1 count=2 |
| 16:42.42 | kundancool | I used this to extract mbm from my backup |
| 16:42.45 | kundancool | dd if=backup-firmware of=mbm bs=128k count=1 conv=notrunc |
| 16:44.14 | WyrM | there is no need for "conv". |
| 16:44.28 | WyrM | and skip=1 count=2 should give you the correct data. |
| 16:44.43 | WyrM | remember to flash it at 128k(0x20000) with jtag later |
| 16:45.28 | kundancool | I am confused |
| 16:45.49 | kundancool | I will flash this 128k mbm at 0x0 or at 0x20000 ? |
| 16:46.13 | WyrM | discard the mbm file you have please. |
| 16:46.36 | WyrM | now do: |
| 16:46.38 | WyrM | dd if=backup-file of=mbm bs=128k skip=1 count=2 |
| 16:46.47 | WyrM | you will have a 256k file that contains mbm |
| 16:46.58 | WyrM | then flash the 256k file to 0x20000 |
| 16:49.25 | kundancool | since the 256k file is from address 0x0 |
| 16:49.39 | kundancool | I am getting confused why to flash it to 0x20000 |
| 16:50.03 | WyrM | its not from 0x0 |
| 16:50.08 | WyrM | its from 0x20000 |
| 16:50.15 | WyrM | note the "skip=1" |
| 16:50.23 | WyrM | it skips 128k :) |
| 16:53.13 | kundancool | strange analysis result |
| 16:53.17 | kundancool | address 0x0 = 87 C0 00 EA |
| 16:53.19 | kundancool | address 0x20000= 87 C0 00 EA |
| 16:54.56 | WyrM | ? |
| 16:56.01 | kundancool | I used an hex editor to check the hex values of my 64MB NOR backup |
| 16:56.19 | kundancool | and at 0x0 and 0x20000 I found same values |
| 16:56.26 | kundancool | and in between only \xFF |
| 16:57.55 | WyrM | well.. i dont remember everything.. But as pxa entry point is at 0x0, there should be at least a jmp instruction at 0x0 to jump to 0x20000 where mbm is, which is also important for the phone to boot. |
| 16:58.17 | WyrM | so you will need to flash 4 bytes to 0x0 and 256k to 0x20000 |
| 16:59.00 | WyrM | or just backup/flash the first 384k to keep things simpler :) |
| 16:59.29 | kundancool | I will flash 1MB if that makes my phone Alive |
| 17:03.03 | kundancool | does this 64MB backup include BP part also ? |
| 17:03.13 | WyrM | no |
| 17:04.16 | kundancool | then where is BP ? |
| 17:17.05 | *** join/#openezx stefan_schmidt (~stefan@p5B03669C.dip.t-dialin.net) |
| 17:31.59 | kundancool | EZX AP bootloader : 2005-JUN-07 |
| 17:37.03 | kundancool | Good Night everybody bye! |
| 17:37.05 | *** part/#openezx kundancool (~kundancoo@27.107.255.39) |
| 17:50.21 | *** join/#openezx toi (~peter@d54C2AA76.access.telenet.be) |
| 19:53.57 | *** join/#openezx flo_lap (~fuchs@Maemo/community/contributor/florian) |