切换到宽版
  • 13481阅读
  • 54回复

求教各位如何修改这个机顶盒固件? [复制链接]

上一主题 下一主题
在线edit009

发帖
2746
M币
643
专家
2
粉丝
37
只看该作者 20楼 发表于: 2017-08-08
除非你是卖盒子的,不然折腾一个网上没有的方案是闲的蛋疼。
离线oness

发帖
2322
M币
2902
专家
4
粉丝
34
只看该作者 21楼 发表于: 2017-08-09
回 webpad 的帖子
webpad:为啥要接TTL? 因为你可以导出recovery分区,修改recovery,让它不验证OTA刷机包的签名或者改成验证已知的签名。具体百度
 (2017-08-07 09:06) 回 webpad 的帖子

大侠,我把杜邦针焊上去试了一下,果然是TTL,但是出来一个问题,一大溜字符串是冒出来了,可是按键盘却无反应,也就是说TX针有反应,RX针没反应,我用万用表测量了,TX和RX两根杜邦针对地都是10K左右的阻值,应该是通的,我用的是securecrt软件连接的,怎么晃动杜邦针,也不像是接触不良的样子,而这个TTL线一直使用到现在没出过问题,这是为什么呢?
离线oness

发帖
2322
M币
2902
专家
4
粉丝
34
只看该作者 22楼 发表于: 2017-08-09
回 edit009 的帖子
edit009:除非你是卖盒子的,不然折腾一个网上没有的方案是闲的蛋疼。 (2017-08-08 18:56) 回 edit009 的帖子

并非是从无到有,而是有一个底包的,只需要修改一下即可,如果说连底包都没有去整一个ROM出来,那确实没必要折腾
离线webpad

发帖
220
M币
292
专家
2
粉丝
19
只看该作者 23楼 发表于: 2017-08-10
oness:大侠,我把杜邦针焊上去试了一下,果然是TTL,但是出来一个问题,一大溜字符串是冒出来了,可是按键盘却无反应,也就是说TX针有反应,RX针没反应,我用万用表测量了,TX和RX两根杜邦针对地都是10K左右的阻值,应该是通的,我用的是securecrt软件连接的,怎么晃动杜邦针,也不像是 .. (2017-08-09 21:17) 

上SecureCRT终端log截图,最好保存 log,传上来。 从盒子加电那一刻开始的log

内容来自Android手机客户端

离线oness

发帖
2322
M币
2902
专家
4
粉丝
34
只看该作者 24楼 发表于: 2017-08-11
回 webpad 的帖子
webpad:上SecureCRT终端log截图,最好保存 log,传上来。 从盒子加电那一刻开始的log
 (2017-08-10 11:53) 回 webpad 的帖子

敲键盘没有任何反应,只有下面的启动log
System startup

Reg Version:  v1.1.0
Reg Time:     2014-1-1711:22:30
Reg Name:     hi3719mdmo1a_hi3719mv100_ddr3_1gbyte_16bitx2_4layers_emmc.xlsm

Fastboot 3.3.0-svn589 (zs@yinhe-B880G2) (Aug 06 2014 - 11:07:15)

Fastboot:      Version 3.3.0
Build Date:    Aug  6 2014, 11:07:37
CPU:           Hi3719Mv100
Boot Media:    eMMC
DDR Size:      1GB

Check nand flash controller v610. found
Special NAND id table Version 1.36
Nand ID: 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
No NAND device found!!!

Check spi flash controller v350. found
Can't find a valid spi flash chip.
Can't find a valid spi flash chip.

MMC/SD controller initialization.
MMC/SD Card:
    MID:         0x11
    Read Block:  512 Bytes
    Write Block: 512 Bytes
    Chip Size:   3776M Bytes (High Capacity)
    Name:        "004G9"
    Chip Type:   MMC
    Version:     4.0
    Speed:       25000000Hz
    Bus Width:   8bit
    Boot Addr:   0 Bytes

Boot Env on eMMC
    Env Offset:          0x00100000
    Env Size:            0x00010000
    Env Range:           0x00010000


SDK Version: HiSTBAndroidV500R001C00CP0006_v2014031717

press the key!!
get key 0 2
mac:00:1D:08:B0:82:03

Reserve Memory
    Start Addr:          0x3FFFF000
    Bound Addr:          0x3CE9000
    Free  Addr:          0x3F2EE000
    Alloc Block:  Addr        Size
                  0x3F2EE000       8192
                  0x3F2F1000       3133440
                  0x3F5EF000       3686400
                  0x3F974000       1658880
                  0x3FB0A000       3686400
                  0x3FE8F000       12288
                  0x3FE93000       1048576
                  0x3FF94000       212992
                  0x3FFC9000       8192
                  0x3FFCC000       204800

Press Ctrl+C to stop autoboot

MMC read: dev # 0, block # 307200, count 20480 ... 20480 blocks read: OK
## Booting kernel from Legacy Image at 01ffffc0 ...
   Image Name:   Linux-3.4.67_s40
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    6954424 Bytes = 6.6 MiB
   Load Address: 02000000
   Entry Point:  02000000
   Verifying Checksum ... OK
   XIP Kernel Image ... OK
OK

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
Booting Linux on physical CPU 0
Linux version 3.4.67_s40 (zs@yinhe-B880G2) (gcc version 4.4.1 (Hisilicon_v200(gcc4.4-290+glibc-2.11+eabi+nptl)) ) #3 Wed Dec 14 14:32:18 CST 2016
CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7), cr=10c53c7d
CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
Machine: bigfish
Invalid PDM tag, errno:0
DSP run memory space at 0x02000000, size: 0x00800000 Bytes.
cma: CMA: reserved 360 MiB at 19000000
ion heap:common get no cma device
ion platform device:
ion platform device:
cma: CMA: reserved 16 MiB at 18000000
Memory policy: ECC disabled, Data cache writeback
CPU: Hi3719mv100
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 163840
Kernel command line: mem=1G console=ttyAMA0,115200 blkdevparts=mmcblk0:1M(fastboot),1M(bootargs),10M(recovery),2M(deviceinfo),8M(baseparam),8M(pqparam),20M(logo),20M(logobak),40M(fastplay),40M(fastplaybak),40M(kernel),20M(misc),500M(system),1024M(userdata),100M(cache),100M(dvbdata),-(sdcard) mmz=ddr,0,0,360M coherent_pool=1M
PID hash table entries: 2048 (order: 1, 8192 bytes)
Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
Memory: 384MB 264MB = 648MB total
Memory: 622856k/622856k available, 425720k reserved, 264888K highmem
Virtual kernel memory layout:
    vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
    vmalloc : 0xf0000000 - 0xff000000   ( 240 MB)
    lowmem  : 0xc0000000 - 0xef800000   ( 760 MB)
    pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
    modules : 0xbf000000 - 0xbfe00000   (  14 MB)
      .text : 0xc0008000 - 0xc0ce6408   (13178 kB)
      .init : 0xc0ce7000 - 0xc0d7da14   ( 603 kB)
      .data : 0xc0d7e000 - 0xc0eba9e8   (1267 kB)
       .bss : 0xc0ebaa0c - 0xc113e718   (2576 kB)
SLUB: Genslabs=11, HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
NR_IRQS:160
sched_clock: 32 bits at 24MHz, resolution 41ns, wraps every 178956ms
Console: colour dummy device 80x30
Calibrating delay loop... 2383.87 BogoMIPS (lpj=1191936)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
ftrace: allocating 28538 entries in 84 pages
hw perfevents: enabled with ARMv7 Cortex-A9 PMU driver, 7 counters available
Setting up static identity map for 0x9c67a8 - 0x9c6800
L310 cache controller enabled
l2x0: 8 ways, CACHE_ID 0x410000c9, AUX_CTRL 0x72440001, Cache size: 262144 B
[32 FATAL-HI_PQ]:PQ_DRV_GetFlashPqBin[2540]:
-------PQ bin param is not burned--
[44 ERROR-Invalid]:MCE_Init[1804]:ERR: get PDM Param
NET: Registered protocol family 16
DMA: preallocated 1024 KiB pool for atomic coherent allocations
SRAM: SRAM Manager initializing ..., line:57
SRAM: SRAM Manager initialized, line:93
hw-breakpoint: found 5 (+1 reserved) breakpoint and 1 watchpoint registers.
hw-breakpoint: maximum watchpoint size is 4 bytes.
Serial: AMBA PL011 UART driver
uart:0: ttyAMA0 at MMIO 0xf8b00000 (irq = 81) is a PL011 rev2
console [ttyAMA0] enabled
uart:1: ttyAMA1 at MMIO 0xf8006000 (irq = 82) is a PL011 rev2
uart:2: ttyAMA2 at MMIO 0xf8b02000 (irq = 83) is a PL011 rev2
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Linux video capture interface: v2.00
Advanced Linux Sound Architecture Driver Version 1.0.25.
Bluetooth: Core ver 2.16
NET: Registered protocol family 31
Bluetooth: HCI device and connection manager initialized
Bluetooth: HCI socket layer initialized
Bluetooth: L2CAP socket layer initialized
Bluetooth: SCO socket layer initialized
Switching to clocksource timer2
NET: Registered protocol family 2
IP route cache hash table entries: 16384 (order: 4, 65536 bytes)
TCP established hash table entries: 65536 (order: 7, 524288 bytes)
TCP bind hash table entries: 65536 (order: 6, 262144 bytes)
TCP: Hash tables configured (established 65536 bind 65536)
TCP: reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
RPC: Registered named UNIX socket transport module.
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
NetWinder Floating Point Emulator V0.97 (double precision)
highmem bounce pool size: 64 pages
VFS: Disk quotas dquot_6.5.2
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
squashfs: version 4.0 (2009/01/31) Phillip Lougher
jffs2: version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.18)
msgmni has been set to 699
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 253)
io scheduler noop registered
io scheduler deadline registered (default)
io scheduler cfq registered
brd: module loaded
loop: module loaded
input: Hi keyboard as /devices/virtual/input/input0
input: Hi mouse as /devices/virtual/input/input1
input: qwerty as /devices/virtual/input/input2
Hi Android vinput driver init successful!
Spi id table Version 1.30
Check Spi Flash Controller V350. Found
Found Nand Flash Controller V610.
Nand ID: 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
No NAND device found
himii: probed
Up port phy at 0x01 is connect
PHY himii:1f not found
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
hiusb-ehci hiusb-ehci.0: HIUSB EHCI
hiusb-ehci hiusb-ehci.0: new USB bus registered, assigned bus number 1
hiusb-ehci hiusb-ehci.0: irq 98, io mem 0xf9890000
hiusb-ehci hiusb-ehci.0: USB 0.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
hiusb-ohci hiusb-ohci.0: HIUSB OHCI
hiusb-ohci hiusb-ohci.0: new USB bus registered, assigned bus number 2
hiusb-ohci hiusb-ohci.0: irq 99, io mem 0xf9880000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 2 ports detected
usbcore: registered new interface driver cdc_wdm
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver usbserial
usbserial: USB Serial Driver core
usbcore: registered new interface driver option
USB Serial support registered for GSM modem (1-port)
mousedev: PS/2 mouse device common for all mice
usbcore: registered new interface driver uvcvideo
USB Video Class driver (1.1.1)
device-mapper: ioctl: 4.22.0-ioctl (2011-10-19) initialised: dm-devel@redhat.com
usbcore: registered new interface driver btusb
usb 1-2: new high-speed USB device number 2 using hiusb-ehci
hub 1-2:1.0: USB hub found
hub 1-2:1.0: 4 ports detected
hi_mci0: eMMC/MMC/SD Device NOT detected!
usb 1-2.1: new high-speed USB device number 3 using hiusb-ehci
usbcore: registered new interface driver usbhid
usbhid: USB HID core driver
ashmem: initialized
logger: created 256K log 'log_main'
logger: created 256K log 'log_events'
logger: created 256K log 'log_radio'
logger: created 256K log 'log_system'
Load hi_gfx2d.ko success.               (SDK_VERSION:[HiSTBAndroidV500R001C00CP0006_v2014031717] Build Time:[Dec 14 2016, 14:18:56])
Mali: Mali device driver loaded
usbcore: registered new interface driver snd-usb-audio
oprofile: using arm/armv7-ca9
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (9732 buckets, 38928 max)
ctnetlink v0.93: registering with nfnetlink.
NF_TPROXY: Transparent proxy support initialized, version 4.1.0
NF_TPROXY: Copyright (c) 2006-2007 BalaBit IT Ltd.
xt_time: kernel timezone is -0000
IPVS: Registered protocols ()
IPVS: Connection hash table configured (size=4096, memory=32Kbytes)
IPVS: Creating netns size=760 id=0
IPVS: ipvs loaded.
ip_tables: (C) 2000-2006 Netfilter Core Team
ipt_CLUSTERIP: ClusterIP Version 0.8 loaded successfully
arp_tables: (C) 2002 David S. Miller
TCP: cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
NET: Registered protocol family 17
Bluetooth: RFCOMM TTY layer initialized
Bluetooth: RFCOMM socket layer initialized
Bluetooth: RFCOMM ver 1.11
Bluetooth: BNEP (Ethernet Emulation) ver 1.3
Bluetooth: BNEP filters: protocol multicast
Bluetooth: HIDP (Human Interface Emulation) ver 1.2
lib80211: common routines for IEEE802.11 drivers
VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 4
Load hi_tde.ko success.         (SDK_VERSION:[HiSTBAndroidV500R001C00CP0006_v2014031717] Build Time:[Dec 14 2016, 14:19:40])
Load hi_fb.ko success.          (SDK_VERSION:[HiSTBAndroidV500R001C00CP0006_v2014031717] Build Time:[Dec 14 2016, 14:19:21])
Load hi_jpegdec.ko success.             (SDK_VERSION:[HiSTBAndroidV500R001C00CP0006_v2014031717] Build Time:[Dec 14 2016, 14:19:26])
asoc: aiao-hifi <-> hisi-i2s mapping ok
Load hi_png.ko success.         (SDK_VERSION:[HiSTBAndroidV500R001C00CP0006_v2014031717] Build Time:[Dec 14 2016, 14:19:35])
ALSA device list:
  #0: HISI-AIAO
Warning: unable to open an initial console.
Freeing init memory: 600K
init (1): /proc/1/oom_adj is deprecated, please use /proc/1/oom_score_adj instead.
init: cannot open '/initlogo.rle'
mmc0: new high speed MMC card at address 0001
mmcblk0: mmc0:0001 004G90 3.68 GiB
mmcblk0boot0: mmc0:0001 004G90 partition 1 2.00 MiB
mmcblk0boot1: mmc0:0001 004G90 partition 2 2.00 MiB
mmcblk0: p1(fastboot) p2(bootargs) p3(recovery) p4(deviceinfo) p5(baseparam) p6(pqparam) p7(logo) p8(logobak) p9(fastplay) p10(fastplaybak) p11(kernel) p12(misc) p13(system) p14(userdata) p15(cache) p16(dvbdata) p17(sdcard)
mmcblk0boot1: unknown partition table
mmcblk0boot0: unknown partition table
EXT4-fs (mmcblk0p13): mounted filesystem with ordered data mode. Opts: (null)
EXT4-fs (mmcblk0p14): recovery complete
EXT4-fs (mmcblk0p14): mounted filesystem with ordered data mode. Opts: (null)
EXT4-fs (mmcblk0p15): recovery complete
EXT4-fs (mmcblk0p15): mounted filesystem with ordered data mode. Opts: (null)
EXT4-fs (mmcblk0p16): recovery complete
EXT4-fs (mmcblk0p16): mounted filesystem with ordered data mode. Opts: (null)
init: cannot find '/system/bin/rild', disabling 'ril-daemon'
init: cannot find '/system/etc/install-recovery.sh', disabling 'flash_recovery'
init: cannot find '/system/bin/dtvserver', disabling 'dtvserver'
ufsd: module license 'Commercial product' taints kernel.
Disabling lock debugging due to kernel taint
ufsd:: trace mask set to 0000000f
ufsd: driver (lke_8.9.0 lke_8.9.0_r212074_b33, LBD=ON, delalloc, acl, ioctl, bdi, sd, fua, tr) loaded at bf000000
NTFS support included
optimized: speed
Build_for__Huawei_Hi3716cv200_k3.4.35_2013-05-09_with_lock_debugging_lke_8.9.0_r212074_b33

[3370 ERROR-HI_MODULE]:ModuleMgr_FindNodeByName[133]:not found out the module name:SkyPlay_1224 node
[3379 ERROR-HI_MODULE]:ModuleMgr_FindNodeByID[164]:not found out the module id:0x00000100 node
warning: `zygote' uses 32-bit capabilities (legacy support in use)
[86400066 ERROR-HI_MODULE]:ModuleMgr_FindNodeByName[133]:not found out the module name:himultiscreen_1966 node
[86400076 ERROR-HI_MODULE]:ModuleMgr_FindNodeByID[164]:not found out the module id:0x00000101 node
lowmemorykiller: lowmem_shrink: convert oom_adj to oom_score_adj:
lowmemorykiller: oom_adj 0 => oom_score_adj 0
lowmemorykiller: oom_adj 1 => oom_score_adj 58
lowmemorykiller: oom_adj 2 => oom_score_adj 117
lowmemorykiller: oom_adj 4 => oom_score_adj 235
lowmemorykiller: oom_adj 9 => oom_score_adj 529
lowmemorykiller: oom_adj 15 => oom_score_adj 1000
ADDRCONF(NETDEV_UP): eth0: link is not ready
cfg80211: Calling CRDA to update world regulatory domain
RTL871X: module init start
RTL871X: rtl8188eu v4.3.0.6_12167.20140828
RTL871X: build time: Dec 14 2016 14:34:57
bFWReady == _FALSE call reset 8051...
RTL871X: rtw_ndev_init(wlan0)
RTL871X: rtw_ndev_init(p2p0)
usbcore: registered new interface driver rtl8188eu
RTL871X: module init ret=0
ufsd: failed to mount mmcblk0p17
FAT-fs (mmcblk0p17): bogus number of reserved sectors
FAT-fs (mmcblk0p17): Can't find a valid FAT filesystem
EXT4-fs (mmcblk0p17): recovery complete
EXT4-fs (mmcblk0p17): mounted filesystem with ordered data mode. Opts: share
ADDRCONF(NETDEV_UP): p2p0: link is not ready
ADDRCONF(NETDEV_UP): wlan0: link is not ready
device wlan0 entered promiscuous mode
RTL871X: rtw_set_802_11_connect(wlan0)  fw_state=0x00000008
RTL871X: start auth
RTL871X: auth success, start assoc
RTL871X: assoc success
ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
RsvdPageNum: 8
RTL871X: send eapol packet
RTL871X: send eapol packet
RTL871X: set pairwise key camid:4, addr:8c:21:0a:3f:d5:ee, kid:0, type:AES
RTL871X: set group key camid:5, addr:8c:21:0a:3f:d5:ee, kid:1, type:AES
init: sys_prop: permission denied uid:1000  name:java.net.preferIPv4Stack
init: sys_prop: permission denied uid:1000  name:java.net.preferIPv6Addresses
[-955460506 ERROR-HI_MODULE]:ModuleMgr_FindNodeByName[133]:not found out the module name:Hidlna_Proc_2335 node
[-955460496 ERROR-HI_MODULE]:ModuleMgr_FindNodeByID[164]:not found out the module id:0x00000102 node
[-955460178 ERROR-HI_MODULE]:ModuleMgr_FindNodeByName[133]:not found out the module name:SkyPlay_3087 node
[-955460168 ERROR-HI_MODULE]:ModuleMgr_FindNodeByID[164]:not found out the module id:0x00000103 node
init: untracked pid 3151 exited
init: untracked pid 3189 exited
init: untracked pid 3186 exited
离线webpad

发帖
220
M币
292
专家
2
粉丝
19
只看该作者 25楼 发表于: 2017-08-11
不懂就百度翻译,这句话多明显  

内容来自Android手机客户端

离线webpad

发帖
220
M币
292
专家
2
粉丝
19
只看该作者 26楼 发表于: 2017-08-11
Press Ctrl+C to stop autoboot

内容来自Android手机客户端

离线oness

发帖
2322
M币
2902
专家
4
粉丝
34
只看该作者 27楼 发表于: 2017-08-11
回 webpad 的帖子
webpad:Press Ctrl+C to stop autoboot
 (2017-08-11 10:42) 回 webpad 的帖子

在securecrt上按任何按键都没反应,包括这个组合键,我都试过了,我以前也TTL刷过路由器,知道这些组合键
老大,我也有一定基础的,一些简单的方法我也都试过了
RX、TX与USB接地外壳有10K的阻值,说明杜邦针焊接没有问题,GND针对地阻值极小,很容易找,剩下的就是VCC了,VCC我没有接,同时log字符也显示出来了,说明接线线序也是对的,又因为同时用了两根TTL线做测试,有一根还是刚买的新的一次都没用过,所以这也很大概率的排除了TTL线有故障的问题,是不是?
在线tjdpangq

发帖
412
M币
1823
专家
2
粉丝
49
只看该作者 28楼 发表于: 2017-08-11
回 oness 的帖子
oness:在securecrt上按任何按键都没反应,包括这个组合键,我都试过了,我以前也TTL刷过路由器,知道这些组合键
老大,我也有一定基础的,一些简单的方法我也都试过了
RX、TX与USB接地外壳有10K的阻值,说明杜邦针焊接没有问题,GND针对地阻值极小,很容易找,剩下的就是VCC了,VCC我没 .. (2017-08-11 11:03) 回 oness 的帖子

看看这句“Image Type:   ARM Linux Kernel Image (uncompressed)”
你的这个机顶盒采用的操作系统是Linux,不是安卓系统,不能安装APK应用。
离线oness

发帖
2322
M币
2902
专家
4
粉丝
34
只看该作者 29楼 发表于: 2017-08-11
回 tjdpangq 的帖子
下面是底包固件里的文件结构,跟安卓固件差不多啊




本文内容包含图片或附件,获取更多资讯,请 登录 后查看;或者 注册 成为会员获得更多权限
快速回复
限80 字节
温馨提示:所有技术区严禁灌水,“沙发”“顶”字样;禁止广告贴;以免被删除
 
上一个 下一个