| Home | Forums | Register | FAQ | Search | Today's Posts | Mark Forums Read |
|
Welcome to the misticriver forums. You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today! If you have any problems with the registration process or your account login, please contact contact us. |
![]() |
|
|
LinkBack | Thread Tools | Display Modes |
|
|||
|
I confirm shamrockman's RS232 serial port break'in.
My PMP was not good working (HDD spin up pb and PMP overheat) so I diseassembled it and bagan to try to repair it. The serial port gave me some characters when booting. I put a ST232CN (MAX232 like chip for converting serial RS232 voltages between logic levels - ttl 5v - to RS232 levels - -12/+12) between my PMP and my computer. The RS232 is not stable (sometimes getting bad character) on my PMP but my PMP is bad working, I repeat. I user hyperterminal with these options : PORT PARAMETERS : ================ speed : 115200 bauds bits : 8 parity : none stop bits : 1 flow control : none TERMINAL EMULATION PARAMETERS : ==================== ======== terminal keys backdel = Ctrl+H terminal emulation type : VT100 input traduction : JIS decay ASCII conf : box checked : - force ASCII input in 7 bits - automatic carriage return PROOF OF CONCEPT : ================= FIRMWARE BOOTLOADER : ------------------------- +-------------------------------------+ | Welcome to the | | rrload bootloader | | | | Version: v5.36-9-pmu-MP | | PMP Version: 0005 | | Datecode: 0400831d | | Platform: DM270 | | ARM clock: 94500 kHz | | SDRAM clock: 108000 kHz | | 64Mbyte sdram | +-------------------------------------+ MAIN MENU --------- 1. Load [comp] from I/O port... 2. Store RAM [comp] to Flash... 3. View/Edit Params... 4. Boot Kernel/filesystem (boot_auto) 5. CmdLine Mode 6. Print memory map f. Print flash chip information r. Run Default Boot Cmd E. Erase [comp] from Flash... Which? KERNEL BOOT OK : ------------------ ---------------------------------------------------- Manufacturer's ID = 0x00BF [SST] Device ID = 0x235B [SST39VF3201] ---------------------------------------------------- Default Cmd: boot_auto Press <Enter> before countdown expires to intercept. 3 2 1 executing boot_auto Command line overrides = Jumping to 0x0424A000 Linux version 2.4.19-uc1 (root@lyoung) (gcc version 2.96 20000110 (experimental)) #4 2004. 11. 05. (1]) 17:21:30 KST pmp version 0xa Processor: ARM/VLSI ARM 7 TDMI revision 0 Architecture: TMS320DM270 Development Module PP 0 set gio dir reserve_bootmem_core : address 04240000 below node_boot_start Unused memory region: 04402000 - 045FFFFF (2040 Kbytes) On node 0 totalpages: 4096 zone(0): 0 pages. zone(1): 4096 pages. zone(2): 0 pages. Kernel command line: root=/dev/rom0 Console: colour dummy device 80x30 Calibrating delay loop... 23.39 BogoMIPS Memory: 16MB = 16MB total Memory: 16192KB available (1088K code, 669K data, 40K init) Dentry cache hash table entries: 2048 (order: 2, 16384 bytes) Inode cache hash table entries: 1024 (order: 1, 8192 bytes) Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes) Page-cache hash table entries: 4096 (order: 2, 16384 bytes) POSIX conformance testing by UNIFIX Linux NET4.0 for Linux 2.4 Based upon Swansea University Computer Society NET3.039 Starting kswapd powerkery ret => 0, majornum = 201 DM270 Frame Buffer Driver Cadenux, LLC Copyright (C) 2002 /dev/fb0: SDRAM 0x02baa000-0x02c567ff and 0x02c56800-0x02d02fff /dev/fb1: SDRAM 0x02d03000-0x02daf7ff /dev/fb2: SDRAM 0x026a6060-0x026fc45f /dev/fb3: SDRAM 0x026fc460-0x0275285f EEPROM value : 1 draw splash width : 0x140, height 0xf0 , ptr 0x26a6060 pmp_initial_draw value : 3 , i2cData.value : 4 REGION CODE : 2 ret => 0, majornum = 199 dm270pmp matrixkey init ret => 0, majornum = 195 ttyS00 at 0x00030300 (irq = 12) ttyS01 at 0x00030380 (irq = 13) Uniform Multi-Platform E-IDE driver Revision: 6.31 ide: Assuming 50MHz system bus speed for PIO modes; override with idebus=xx ES0,ES1,ES2 ide irq set ES0,ES1,ES2 IDE GIO SET start powerkey timer DM270 IDE configured as device 0 dm270pmp_hddoff_time r init IDE: waiting for drives to settle... hda: TOSHIBA MK4004GAH, ATA DISK drive ide0 at 0x6a00020-0x6a00027,0x6a0001c on irq 29 hda: 78126048 sectors (40001 MB), CHS=77506/16/63 Partition check: hda: [PTBL] [4863/255/63] hda1 Blkmem copyright 1998,1999 D. Jeff Dionne Blkmem copyright 1998 Kenneth Albanowski Blkmem 1 disk images: 0: 4000020-423E01F [VIRTUAL 4000020-423E01F] (RO) RAMDISK driver initialized: 16 RAM disks of 1024K size 1024 blocksize loop: loaded (max 8 devices) SCSI subsystem driver Revision: 1.00 ES0,ES1,ES2, PP0 USB IRQ GIO SET usb.c: registered new driver usbdevfs usb.c: registered new driver hub [Gagamel] enable GIO 7 => enable EINT7 [Gagamel] start hcd_1161_init ........ Chip_id = 6123 1161-HC Detected hc_alloc_1161 : init usb.c: new USB bus registered, assigned bus number 1 hub.c: USB hub found hub.c: 1 port detected ==> 1161-HC Entered Suspend 1161-HC Initialization Successful Initializing USB Mass Storage driver... usb.c: registered new driver usb-storage USB Mass Storage support registered. FAT: bogus logical sector size 35184 FAT: bogus logical sector size 35184 VFS: Mounted root (romfs filesystem) readonly. /bin/mount -t proc proc /proc afraxus: flggs: 0xc0ed0000, string_flags make ramdisk 1024 352 inodes 1024 blocks Firstdatazone=15 (15) Zonesize=1024 Maxsize=268966912 afraxus: flggs: 0xc0ed0000, string_flags afraxus: flggs: 0xc0ed0000, string_flags insmod binfmt_xflat & dspvif Using /lib/modules/2.4.19-uc1/binfmt_xflat.o BINFMT_XFLAT: Extended flat loader Using /lib/modules/2.4.19-uc1/dispbuf.o Display Driver v1.2.10, Copyright (C) 2003 Ingenient Technologies, Inc. Using /lib/modules/2.4.19-uc1/dspvif.o DSP/VIF Interrupt Driver v4.0.7, Copyright (C) 2003 Ingenient Technologies, Inc. queue_reset: resetting queue... hddfreespace check boot2nd unzip bmp object Free Size : 22480 run inputserv & SIGHDD :shared memory attached at 4669360 +++[41]+++++++ 9 ++++++++ ************** 41 ******** Old SIGUSR1 sighandler at (nil) New SIGUSR1 sighandler at 0x42254a0 Old SIGUSR2 sighandler at (nil) New SIGUSR2 sighandler at 0x422552c Old SIGALRM sighandler at (nil) New SIGALRM sighandler at 0x42255bc init: rc status 0 pmu_detect open msgq_id = 0 err = 0 dsp_intr_open: DSP_INTR opened queue_reset: resetting queue... dsp_intr_ioctl: DSP_INTR Attached err = 0 fileInfo : 4669360}; sCODE.ucLang : 2 bright level : 60 ======== ======== eqMode : 0 ======== ======== MSDOS FS: IO charset iso8859-15 0[0] 1[0] 2[0] 3[0] 4[0] 0[0] 1[0] 2[0] 3[0] 4[0] 0[0] 1[0] 2[0] 3[0] 4[0] 0[0] 1[0] 2[0] 3[0] 4[0] 0[0] 1[0] 2[0] 3[0] 4[0] Serial # = 44T32643T =========> [020444T32643T] set_voleme load setup tuner info 1st is 84 load setup tuner Band is 2 Tuner Mode : 1 Tuner Band : 2 Tuner is_stereo : 0 Tuner wantFreq : 9310 Tuner chPos : 4 Tuner number of memory : 20 Tuner saved channel : 0 (9040) Tuner saved channel : 1 (9090) Tuner saved channel : 2 (9130) Tuner saved channel : 3 (9260) Tuner saved channel : 4 (9310) Tuner saved channel : 5 (9350) Tuner saved channel : 6 (9390) Tuner saved channel : 7 (9410) Tuner saved channel : 8 (9520) Tuner saved channel : 9 (9540) Tuner saved channel : 10 (9760) Tuner saved channel : 11 (9780) Tuner saved channel : 12 (9820) Tuner saved channel : 13 (9860) Tuner saved channel : 14 (9930) Tuner saved channel : 15 (9950) Tuner saved channel : 16 (10030) Tuner saved channel : 17 (10070) Tuner saved channel : 18 (10110) Tuner saved channel : 19 (10230) /mnt/Root/iRiverSys/etc/tmpAudioNaviResume.i rv error : No such file or directory Invalid Value Menu_PLAY_process Menu_Mch_video_proce ss curPos=>0 read playlistname fail strListName=>Jan0106 3227.m3u listNum=>0 MarkMode=>FALSE curPath=>/mnt/Root/files/ WSZ:0, WSP:0, WEP:-1, WCP:-1, CP:-1 Menu_Mch_navi_proces s Sincerely, pmp.breker, pmp.breaker AT gmail.com Last edited by Astec : February 18th, 2006 at 07:21 AM. |
|
|||
|
|||
|
ShamrockMan :
Without your inspiration, your work, your discovers and all the works of the people around, I never could get my PMP repaired. I know you are developping a new firmware. Please join the IRC chat of the forum and I would be pleased to talk about it. |
|
|||
|
[PMP rooted][job's done]
[Rooted the PMP][job's done 20060219 0045]
I don't know if I am the first in the world or in the forum to have done that but I have rooted my PMP preriquist : - serial port hack by shamrockman + linux box - linux knowlegde - hexadecimal editor - genromfs tool - the source of the 2.03 method : ========= The source of the 2.03 is on the net. In this package, there are two interesting files : - linux.rr : the linux kernel which is run by the pmp - fs.img.rr : the base filesystem with binaries and init script big steps : 1) copy the fs.img.rr to fs.img.rr.work 2) edit fs.img.rr.work with hexa editor and remove the rrload header (3 lines) 3) mount the fs.img.rr.work locally (fs type : romfs) 4) copy all the files mounted to an other directory 5) modify the file /etc/inittab and remove the # on the first line 5) use genromfs to generate a new filesystem image 6) add the headers cut in step 2 to this file 7) verify the size of the new generated filesystem image is equal to the original fs.img.rr 9) serial load linux.rr 10) serial load fs.img.rr 11) boot them 12) enjoy the root on the serial terminal of your PMP ==================== =================== PROOF OF CONCEPT ==================== =================== war_target login: root Jan 3 06:51:39 login[133]: root login on `ttyS0' BusyBox v0.60.3 (2004.09.06-05:39+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands. # cd /proc # cat cpuinfo Processor : ARM/VLSI ARM 7 TDMI rev 0 (v3l) BogoMIPS : 23.39 Hardware : TMS320DM270 Development Module Revision : 0000 Serial : 0000000000000000 # cat interrupts 0: 329634 timer 2: 3293660 dispbuf 11: 0 dsp_intr 12: 4196 serial 20: 0 col0 21: ` 0 col1 22: 154 col2 23: 0 power 24: 0 pmu 25: 0 usbdevice 26: 13 1161-OHCI-HC 29: 18204 ide0 33: 0 tv 34: 0 lcd Err: 0 # ==================== === |
|
|||
|
geek term
To root means getting a shell with root (superuser) rights. In the PMP context, it means that I get acces to the running linux on the PMP board and it is a good beginning. |
|
|||
|
well done indeed.
I asked the question because I suspected that the other two uses of the word were not your intent... 1) Rooted - adjective. stuffed up, not working, broken 2) Rooted - verb, to have sexual intercourse with a
__________________
![]() |
|
|||
|
Quote:
__________________
PMP-140 User....and REALLY UNhappy. Man I hope someone finishes ShamrockMan's firmware! |
|
|||
|
Aww i wish i could help somehow, if only i wasn't 16, in school and that I had programming knowledge. I feel kinda selfish just sitting out and waiting for all you guys to do heaps of work.
|