Skip to content

Instantly share code, notes, and snippets.

@Python1320

Python1320/_MC800S_CCTV_notes.md

Last active September 12, 2024 15:57
Show Gist options
  • Save Python1320/121b98d3573831c61ab9fd52484b20ba to your computer and use it in GitHub Desktop.
Save Python1320/121b98d3573831c61ab9fd52484b20ba to your computer and use it in GitHub Desktop.
Download ZIP
MC800S CCTV hacking
Raw
_MC800S_CCTV_notes.md

Closest to center pin is TX, 3.3v

Hold enter to enter uboot during boot:

Anjoy # printenv
Mstarbin=20150709
bootargs=ubi.mtd=UBI,2048 root=/dev/mtdblock8 rootfstype=squashfs ro init=/linuxrc LX_MEM=0xffe0000 mma_heap=mma_heap_name0,miu=0,sz=0x9E9C000 mma_heap=mma_heap_ipu,miu=0,sz=0x164000 cma=2M mtdparts=nand0:768k@1280k(IPL0),384k(IPL_CUST0),384k(IPL_CUST1),384k(UBOOT0),384k(UBOOT1),256k(ENV0),0x500000(KERNEL),0x500000(RECOVERY),0x2000000(rootfs),0x200000(MISC),0x500000(DATA),-(UBI)
bootcmd=nand read.e 0x22000000 KERNEL 0x500000; bootm 0x22000000;nand read.e 0x22000000 RECOVERY 0x500000; bootm 0x22000000
ethact=sstar_emac
ethaddr=00:30:1b:ba:02:db
fileaddr=21000000
filesize=E6F000
mtddevname=IPL0
mtddevnum=0
mtdids=nand0=nand0
mtdparts=mtdparts=nand0:768k@1280k(IPL0),384k(IPL_CUST0),384k(IPL_CUST1),384k(UBOOT0),384k(UBOOT1),256k(ENV0),0x500000(KERNEL),0x500000(RECOVERY),0x2000000(rootfs),0x200000(MISC),0x500000(DATA),-(UBI)
partition=nand0,0
stderr=serial
stdin=serial
stdout=serial

Environment size: 940/131068 bytes
Anjoy # help
?       - alias for 'help'
aes     - Control Mstar AES engine
base    - print or set address offset
bootm   - boot application image from memory
bootp   - boot image via network using BOOTP/TFTP protocol
btime   - Show booting time
chpart  - change active partition
cmp     - memory compare
cp      - memory copy
crc32   - checksum calculation
dbg     - set debug message level. Default level is INFO
dcache  - enable or disable data cache
debug   - Disable uart rx via PAD_DDCA to use debug tool
dhcp    - boot image via network using DHCP/TFTP protocol
do_ECC  - Enable or disable internal ecc. #do_ECC 0 (disable), do_ECC (enable)
do_bbm  - Swap block (winbond only), #do_bbm LBA PBA
dstar   - script via SD/MMC
eeprom  - EEPROM sub-system
env     - environment handling commands
estar   - script via network
estart  - EMAC start
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls   - list files in a directory (default /)
fatsize - determine a file's size
go      - start application at address 'addr'
gpio    - Config gpio port
help    - print command description/usage
i2c     - I2C sub-system
icache  - enable or disable instruction cache
initDbgLevel- Initial varaible 'dbgLevel'
loop    - infinite loop on address range
macaddr - setup EMAC MAC addr
md      - memory display
mm      - memory modify (auto-incrementing address)
mmc     - MMC sub system
mmcinfo - display MMC info
mssdmmc - Mstar SD/MMC IP Verification System
mstar   - script via TFTP
mtdparts- define flash/nand partitions
mw      - memory write (fill)
mxp     - MXP function for Mstar MXP partition
nand    - NAND sub-system
nboot   - boot from NAND device
nm      - memory modify (constant address)
otpctrl - Used for otp program/read.
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
readbbm - Read BBM table
readcis - Read cis block content
reset   - Perform RESET of the CPU
riu     - riu  - riu command

run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
sdstar  - script via sd package
secauth - Control Sstar security authenticate sequence
setenv  - set environment variables
sf      - SPI flash sub-system
sfbin   - for uploading sf image to a server(via network using TFTP protocol)
sigauth - Only verify digital signature and aes
srcfg   - sensor pin and mclk configuration.
test_sig- Test runAuthenticate2

tftpboot- boot image via network using TFTP protocol
uart    - UART sub-system
ubi     - ubi commands
udpbc   - Send or receive UDP broadcast to/from server using UDP protocol
version - print monitor, compiler and linker version
writecis- Search CIS in dram then write to spinand.
Anjoy # vrsion
Unknown command 'vrsion' - try 'help'
Anjoy # version

U-Boot 2015.01 (Dec 30 2020 - 17:13:26)
arm-linux-gnueabihf-gcc (GCC) 9.1.0
GNU ld (Linaro_Binutils-2019.11.13) 2.33
Anjoy # eeprom
eeprom - EEPROM sub-system

Usage:
eeprom read  addr off cnt
eeprom write addr off cnt
       - read/write `cnt' bytes at EEPROM offset `off'
Anjoy #

Anjoy # mtdparts

device nand0 <nand0>, # parts = 12
 #: name                size            offset          mask_flags
 0: IPL0                0x000c0000      0x00140000      0
 1: IPL_CUST0           0x00060000      0x00200000      0
 2: IPL_CUST1           0x00060000      0x00260000      0
 3: UBOOT0              0x00060000      0x002c0000      0
 4: UBOOT1              0x00060000      0x00320000      0
 5: ENV0                0x00040000      0x00380000      0
 6: KERNEL              0x00500000      0x003c0000      0
 7: RECOVERY            0x00500000      0x008c0000      0
 8: rootfs              0x02000000      0x00dc0000      0
 9: MISC                0x00200000      0x02dc0000      0
10: DATA                0x00500000      0x02fc0000      0
11: UBI                 0x04b40000      0x034c0000      0

active partition: nand0,0 - (IPL0) 0x000c0000 @ 0x00140000

defaults:
mtdids  : nand0=nand0
mtdparts: mtdparts=nand0:0xC0000@0x140000(NPT),-(UBI)



setenv serverip 10.0.0.1
setenv ipaddr 10.0.0.222
tftp 0x22000000 mtdblock8.new.bin
nand erase.part rootfs
nand write 0x22000000 rootfs ${filesize}

root password is set runtime by squashfs-root/opt/ch/mainctrl. Remove flag.set.passwd to stop this behaviour: squashfs-root/opt/ch# rm flag.set.passwd

mksquashfs squashfs-root /srv/tftp/mtdblock8.new.bin -comp xz -noappend

Raw
bootlog_nocam.log
Anjoy # reset
resetting ...
IPL 85ea583
D-11
HW Reset
MCP1866_4X
miupll_400MHz
256MB
BIST0_0001-OK
Load IPL_CUST from SPINAND
BlSize 00006200
Checksum OK
JMP+++
IPL_CUST 85ea583
_IPLCustSNandOp
Load BL from SPINAND
decomp_size=0x00071c64
U-Boot 2015.01 (Dec 30 2020 - 17:13:26)
Version: I6E#g#######
I2C: ready
DRAM:
WARNING: Caches not enabled
SPINAND_I: SPINAND: _MDrv_SPINAND_GET_INFO: Found SPINAND INFO
(0xC8) (0x51)
SPINAND: board_nand_init: CIS contains part info
128 MiB
MMC: MStar SD/MMC: 0
In: serial
Out: serial
Err: serial
Net: MAC Address 00:30:1B:BA:02:DB
Auto-Negotiation...
Link Status Speed:100 Full-duplex:1
sstar_emac
Warning: sstar_emac using MAC address from net device
run udpbc
uuid 0x8169 0xdc93 0xa1f0 178055864877417
uuid = 178055864877417
setenv ipaddr 192.168.1.240 --> return 0
macaddr 82 69 dc 93 a1 f0
MAC Address 82:69:DC:93:A1:F0
MC800S_V0: Send upgrade request, ready to receive...
recv from 10.0.9.6:51150, dest port=6667, len=172
recv from 10.0.6.6:49153, dest port=6667, len=172
uboot net upgrade timeout
NAND read: device 0 offset 0x3c0000, size 0x500000
Time:980086 us, speed:5349 KB/s
5242880 bytes read: OK
## Booting kernel from Legacy Image at 22000000 ...
Image Name: MVX4##I6E#g#######KL_LX409##[BR:
Image Type: ARM Linux Kernel Image (lzma compressed)
Data Size: 2431200 Bytes = 2.3 MiB
Load Address: 20008000
Entry Point: 20008000
Verifying Checksum ... OK
Uncompressing Kernel Image ...
[XZ] !!!reserved 0x21000000 length=0x 1000000 for xz!!
XZ: uncompressed size=0x4cc000, ret=7
OK
atags:0x20000000
Starting kernel ...
Booting Linux on physical CPU 0x0
Linux version 4.9.84 (root@ubuntu) (gcc version 9.1.0 (GCC) ) #34 SMP PREEMPT Fri Sep 17 08:40:46 CST 2021
CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=50c5387d
CPU: div instructions available: patching division code
CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
early_atags_to_fdt() success
OF: fdt:Machine model: INFINITY6E SSC012B-S01A
LXmem is 0xffe0000 PHYS_OFFSET is 0x20000000
Add mem start 0x20000000 size 0xffe0000!!!!
LX_MEM = 0x20000000, 0xffe0000
LX_MEM2 = 0x0, 0x0
LX_MEM3 = 0x0, 0x0
EMAC_LEN= 0x0
DRAM_LEN= 0x0
deal_with_reserve_mma_heap memblock_reserve success mma_config[0].reserved_start=
0x26144000
deal_with_reserve_mma_heap memblock_reserve success mma_config[1].reserved_start=
0x25fe0000
cma: Reserved 2 MiB at 0x25c00000
Memory policy: Data cache writealloc
[infinity6e_smp_init_cpus]
percpu: Embedded 13 pages/cpu @c5f9c000 s21464 r8192 d23592 u53248
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 64992
Kernel command line: ubi.mtd=UBI,2048 root=/dev/mtdblock8 rootfstype=squashfs ro init=/linuxrc LX_MEM=0xffe0000 mma_heap=mma_heap_name0,miu=0,sz=0x9E9C000 mma_heap=mma_heap_ipu,miu=0,sz=0x164000 cma=2M mtdparts=nand0:768k@1280k(IPL0),384k(IPL_CUST0),384k(IPL_CUST1),384k(UBOOT0),384k(UBOOT1),256k(ENV0),0x500000(KERNEL),0x500000(RECOVERY),0x2000000(rootfs),0x200000(MISC),0x500000(DATA),-(UBI)
PID hash table entries: 1024 (order: 0, 4096 bytes)
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
Memory: 88496K/262016K available (2963K kernel code, 219K rwdata, 1392K rodata, 168K init, 188K bss, 171472K reserved, 2048K cma-reserved)
Virtual kernel memory layout:
vector : 0xffff0000 - 0xffff1000 ( 4 kB)
fixmap : 0xffc00000 - 0xfff00000 (3072 kB)
vmalloc : 0xd0000000 - 0xff800000 ( 760 MB)
lowmem : 0xc0000000 - 0xcffe0000 ( 255 MB)
modules : 0xbf800000 - 0xc0000000 ( 8 MB)
.text : 0xc0008000 - 0xc02ed134 (2965 kB)
.init : 0xc0472000 - 0xc049c000 ( 168 kB)
.data : 0xc049c000 - 0xc04d2c00 ( 219 kB)
.bss : 0xc04d4000 - 0xc05033a0 ( 189 kB)
SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
Preemptible hierarchical RCU implementation.
Build-time adjustment of leaf fanout to 32.
RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
RCU: Adjusting geometry for rcu_fanout_leaf=32, nr_cpu_ids=2
NR_IRQS:16 nr_irqs:16 16
ms_init_main_intc: np->name=ms_main_intc, parent=gic
ms_init_pm_intc: np->name=ms_pm_intc, parent=ms_main_intc
ss_init_gpi_intc: np->name=ms_gpi_intc, parent=ms_main_intc
Find CLK_ven_pll, hook ms_venpll_ops
Find CLK_cpupll_clk, hook ms_cpuclk_ops
arm_arch_timer: Architected cp15 timer(s) running at 6.00MHz (virt).
clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x1623fa770, max_idle_ns: 440795202238 ns
sched_clock: 56 bits at 6MHz, resolution 166ns, wraps every 4398046511055ns
Switching to timer-based delay loop, resolution 166ns
console [ttyS0] enabled
Calibrating delay loop (skipped), value calculated using timer frequency.. 12.00 BogoMIPS (lpj=60000)
pid_max: default: 4096 minimum: 301
Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
CPU: Testing write buffer coherency: ok
CPU0: update cpu_capacity 1024
CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
Setting up static identity map for 0x20008240 - 0x2000828c
[infinity6e_boot_secondary]
CPU1: update cpu_capacity 1024
CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
Brought up 2 CPUs
SMP: Total of 2 processors activated (24.00 BogoMIPS).
CPU: All CPU(s) started in SVC mode.
devtmpfs: initialized
VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
futex hash table entries: 16 (order: -2, 1024 bytes)
NET: Registered protocol family 16
DMA: preallocated 256 KiB pool for atomic coherent allocations
Version : MVX4##I6E#g#######KL_LX409##[BR:g]#XVM
GPIO: probe end[Padmux]reset PAD42(reg 0x103c00:6f; mask0x7) t0 SD1_MODE_2 (org: I2C0_MODE_1)
[Padmux]reset PAD49(reg 0x103c00:60; mask0x180) t0 GPIO (org: EJ_MODE_1)
hw-breakpoint: found 5 (+1 reserved) breakpoint and 4 watchpoint registers.
hw-breakpoint: maximum watchpoint size is 8 bytes.
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
clocksource: Switched to clocksource arch_sys_counter
NET: Registered protocol family 2
TCP established hash table entries: 2048 (order: 1, 8192 bytes)
TCP bind hash table entries: 2048 (order: 3, 40960 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
UDP hash table entries: 128 (order: 0, 6144 bytes)
UDP-Lite hash table entries: 128 (order: 0, 6144 bytes)
NET: Registered protocol family 1
RPC: Registered named UNIX socket transport module.
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
hw perfevents: enabled with armv7_cortex_a7 PMU driver, 5 counters available
workingset: timestamp_bits=30 max_order=15 bucket_order=0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
NFS: Registering the id_resolver key type
Key type id_resolver registered
Key type id_legacy registered
ntfs: driver 2.1.32 [Flags: R/O].
jffs2: version 2.2. (NAND) (SUMMARY) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.26)
io scheduler noop registered
io scheduler deadline registered (default)
Infinity6e PHY probe, base:fd2a4600
set wifi to low
set wifi to high
IRLED driver v2.0 20210914
libphy: Fixed MDIO Bus: probed
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
Mstar_ehc_init version:20180309
ehci monitor start running
i2c /dev entries driver
1f221000.uart0: ttyS0 at MMIO 0x0 (irq = 45, base_baud = 10800000) is a unknown
ms_uart: probe of 1f221200.uart1 failed with error -22
1f220400.uart2: ttyS2 at MMIO 0x0 (irq = 49, base_baud = 10800000) is a unknown
[MS_PM_INTC] hw:9 -> v:71
[MS_PM_INTC] hw:10 -> v:72
>> [sdmmc] ms_sdmmc_probe
>> [sdmmc_0] Probe Platform Devices
>> [sdmmc_1] Probe Platform Devices
MSYS: DMEM request: [emac0_buff]:0x00000812
MSYS: DMEM request: [emac0_buff]:0x00000812 success, CPU phy:@0x25C48000, virt:@0xC5C48000
libphy: mdio: probed
mdio_bus mdio-bus@emac0: /soc/emac0/mdio-bus/ethernet-phy@0 has invalid PHY address
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 0
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 1
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 2
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 3
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 4
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 5
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 6
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 7
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 8
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 9
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 10
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 11
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 12
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 13
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 14
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 15
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 16
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 17
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 18
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 19
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 20
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 21
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 22
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 23
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 24
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 25
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 26
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 27
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 28
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 29
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 30
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 31
[emac_phy_connect][3328] connected mac emac0 to PHY at mdio-bus@emac0:00 [uid=11112222, driver=SStar 10/100 Ethernet Phy]
ms_rtcpwc 1f006800.rtcpwc: rtc core: registered 1f006800.rtcpwc as rtc0
MSYS: DMEM request: [AESDMA_ENG]:0x00001000
MSYS: DMEM request: [AESDMA_ENG]:0x00001000 success, CPU phy:@0x25C49000, virt:@0xC5C49000
MSYS: DMEM request: [AESDMA_ENG1]:0x00001000
MSYS: DMEM request: [AESDMA_ENG1]:0x00001000 success, CPU phy:@0x25C4A000, virt:@0xC5C4A000
[ms_cpufreq_init] Current clk=796917760
[i6e][pwm] use ms_pwm->group_data
[NOTICE]pwm-isr(62) success. If not i6e or i6b0, pls confirm it on .dtsi
mstar_spinand_probe: mstar_spinand enableClock
MSYS: DMEM request: [BDMA]:0x00000840
MSYS: DMEM request: [BDMA]:0x00000840 success, CPU phy:@0x25C4B000, virt:@0xC5C4B000
MDrv_SPINAND_Init: Detected ID: MID =c2, DID =12
_dumpNandInformation:warning, Bytes / Page : 2048
_dumpNandInformation:warning, Pages / Block: 64
_dumpNandInformation:warning, Sector/ Page : 512
_dumpNandInformation:warning, Spare / Page : 64
_dumpNandInformation:warning, Current config r:1 w:1 drv:1
mstar_spinand_probe: Magic memcmp pass
mstar_spinand_probe: Get partition (Block 0 : page 1)
mstar_spinand_probe: CIS contains part info
mstar_spinand_probe: Before nand_scan()...
12 cmdlinepart partitions found on MTD device nand0
mstar_spinand_probe: Mtd parts parse
Creating 12 MTD partitions on "nand0":
0x000000140000-0x000000200000 : "IPL0"
0x000000200000-0x000000260000 : "IPL_CUST0"
0x000000260000-0x0000002c0000 : "IPL_CUST1"
0x0000002c0000-0x000000320000 : "UBOOT0"
0x000000320000-0x000000380000 : "UBOOT1"
0x000000380000-0x0000003c0000 : "ENV0"
0x0000003c0000-0x0000008c0000 : "KERNEL"
0x0000008c0000-0x000000dc0000 : "RECOVERY"
0x000000dc0000-0x000002dc0000 : "rootfs"
0x000002dc0000-0x000002fc0000 : "MISC"
0x000002fc0000-0x0000034c0000 : "DATA"
0x0000034c0000-0x000008000000 : "UBI"
mstar notify driver install successfully
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
NET: Registered protocol family 17
Key type dns_resolver registered
[mstar_pm_init] resume_pbase=0x200114B5, suspend_imi_vbase=0xD0057000
ThumbEE CPU extension supported.
Registering SWP/SWPB emulation handler
ubi0: attaching mtd11
ubi0: scanning is finished
ubi0: attached mtd11 (name "UBI", size 75 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 602, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 1, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 3/2, WL threshold: 4096, image sequence number: 0
ubi0: available PEBs: 49, total reserved PEBs: 553, PEBs reserved for bad PEB handling: 20
ubi0: background thread "ubi_bgt0d" started, PID 526
ms_rtcpwc 1f006800.rtcpwc: setting system clock to 1970-01-01 00:15:10 UTC (910)
OF: fdt:not creating '/sys/firmware/fdt': CRC check failed
VFS: Mounted root (squashfs filesystem) readonly on device 31:8.
devtmpfs: mounted
This architecture does not have kernel memory protection.
[emac_phy_link_adjust] EMAC Link Up
cat: can't open '/sys/devices/soc0/machine': No such file or directory
mount: can't find devpts in /etc/fstab
net.core.rmem_default = 163840
net.core.rmem_max = 163840
net.core.wmem_default = 524288
net.core.wmem_max = 1048576
net.ipv4.tcp_mem = 924 1232 1848
net.ipv4.tcp_rmem = 4096 87380 325120
net.ipv4.tcp_wmem = 4096 131072 393216
mount: mounting none on /sys failed: Device or resource busy
mount: mounting none on /sys/kernel/debug/ failed: Device or resource busy
mkdir: can't create directory '/var/lock': Read-only file system
umount: can't unmount /mnt/usb: Invalid argument
UBIFS (ubi0:0): background thread "ubifs_bgt0_0" started, PID 552
UBIFS (ubi0:0): recovery needed
UBIFS (ubi0:0): recovery completed
UBIFS (ubi0:0): UBIFS: mounted UBI device 0, volume 0, name "data"
UBIFS (ubi0:0): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
UBIFS (ubi0:0): FS size: 65900544 bytes (62 MiB, 519 LEBs), journal size 3301376 bytes (3 MiB, 26 LEBs)
UBIFS (ubi0:0): reserved for root: 3112645 bytes (3039 KiB)
UBIFS (ubi0:0): media format: w4/r0 (latest is w4/r0), UUID AEB20C2C-77A3-4E01-9BC1-5E91D7253949, small LPT model
jffs2: notice: (553) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[CSI] probe
Request CSI IRQ[0]#30
CSI interrupt registered
vif driver probe
Create device file. vif_ints,0
jpe driver probed
[Isp_Driver_Init]
[s32CurClkIdx] = 0
[ISP] Request IRQ: 29, 57
[IspMid_Driver_Init]
ispsclttl:0
DivpProcInit 526
module [sys] init
config...... cmdpath:/config/config_tool, argv0:load_config
config...... cmdpath:/config/config_tool, argv1:/misc/config.ini
config...... cmdpath:/config/config_tool, argv2:/misc/PQConfig.ini
config...... cmdpath:/config/config_tool, argv3:(null)
module [sensor] init
module [mipitx] init
module [ao] init
module [rgn] init
module [ldc] init
module [vpe] init
module [shadow] init
module [gyro] init
module [vif] init
module [venc] init Mar 1 2021 15:16:44
module [panel] init
module [disp] init
module [ipu] init
module [divp] init
module [ai] init
module [vdisp] init
CamOsMutexInit already inited, LR:0xBF829C3B
CamOsMutexInit already inited, LR:0xBF829C3B
net.core.rmem_default = 163840
net.core.rmem_max = 163840
net.core.wmem_default = 524288
net.core.wmem_max = 1048576
net.ipv4.tcp_mem = 924 1232 1848
net.ipv4.tcp_rmem = 4096 87380 325120
net.ipv4.tcp_wmem = 4096 131072 393216
(none) login: 10501 procman [main:1630] detected sensor type is 769
found MI_SYS_ReadUuid in /lib/libmi_sys.so
procman SN: EF00000000AE5574
10765 procman [redirect_print:1436] procman enable console
/opt/ch/unicode_16x16.font: font count: 21131
# # # # # #
# # # # # # #######
############ # ######## # # # #
# # # # #### ##### #### ## ## ## ###### ##### ## ############# ##### # #
# # # # # ## ## ## ## ## #### ## ## ## ## ## #### # # # # # #
# ## # ## ## ## ## ## ## ## ### ### ## ## ## ## ## # # # # # #
###### ###### # ############# ## ## ## ## ## ## ## # ## ## ## ## ## ## ######### # # # # # ###### ######
############### # # ## ##### ## ## ## ## # ## ##### ##### ## ## # # # # ### # # #
###### ###### # # # # # ## ## ## ###### ## # ## ## ## ## ###### # # # # # # # # # # ###### ######
# # # # ## ## ## ## ## ## ## ## ## ## ## ## ## ####### # # # # # # # # #
## # # ######## ## ## ## ## ## ## ## ## ## ## ## ## ## # # # # # # # #
## # # # #### ## #### ## ## ## ## ###### ## ## ## ## # # # # # # #
## # # # # # # # # # #
# ## # # # # # # # # # # #
## # ############ # # # # ## # # # #
### # # # ## # # # # ###
11309 procman [redirect_print:1468] procman disable console
[MS_PM_INTC] hw:2 -> v:73
[MS_PM_INTC] hw:3 -> v:74
[MS_PM_INTC] hw:21 -> v:75
[MS_PM_INTC] hw:5 -> v:76
[MS_PM_INTC] hw:6 -> v:77
(none) login: adminu8DevId=0
u8DevId=1
u8DevId=2
HDN_sample 0, extheight 0
CamOsTsemInit already inited, LR:0xBF807FD7
chipidx 3, revision 2
CmdqProcInit 821
CmdQ Free ID = 0, IspLocalCmdQHnd = 0xbf921548
ioc eRunningMode=24
CamOsMutexInit already inited, LR:0xBF83CF99
[0] AE=1, AWB=0, AF=0, nFlagCus3A = 0x02
[0] AE=1, AWB=1, AF=0, nFlagCus3A = 0x0A
[0] AE=1, AWB=1, AF=1, nFlagCus3A = 0x1A
===== [MhalCameraOpen] begin ===== VifMask : 0
Ch= 0, SNR ID: 0x0, VifCh = 0x0, PreOpen = 0
3DNR = 2, Rotation = 0, AckTie : 0
(W, H): (1920, 1080)
PixelFmt: 2, BayerID: 3, YuvOrder: 0
Mode: 0, HdrType: 0
GroupID: 0, Sync3A Type: 0
[CameraReadIqData] isp root is /config/iqfile, nCh = 0
Password: [emac_phy_link_adjust] EMAC Link Up
[DIP] Virtual IRQ: 27
Create mi dev0
Create mi dev0
[MI WRN ]: _MI_VENC_CreateMiDevice[7796]: mi device:0 has been inited
Create mi dev1
Create mhal DEV0.
[ven-w][wrap] illegal width and height. will use default value (3840 2176)
[ven-m][wrap] venc_dev_preset:1406 GetMMaHeapName s32Ret=0xa009201f, u8MMAHeapName=.
[ven-m][wrap] fw_path /config/venc_fw/chagall.bin
Create mhal DEV1.
[ven-w][wrap] venc MMA callback function duplicate registration Force OverWrite!!
[ven-w][wrap] venc dev created, not support set E_MHAL_VENC_MAX_ENCODE_RESOLUTION, pls set before createdev
Create mhal DEV2.
client [745] connected, module:ipu
au8SetProId[0]:0x71
miu_number:0,start:0x25fe0000,end:0x26144000,flag:1
_hal_to_cpu_isr invalid isr 1
[MI WRN ]: MI_SYS_IMPL_ConfigPrivateMMAPool[5594]: The current project supports MMU, and the private pool is disabled by default
IRCUT control too fast from last time, modify timer
[_MI_AO_Init:1248] Init Ao Gain.
IRCUT close
[_MI_AI_IMPL_AllocTmpBuffer:3844] tmp buffer addr[d2af4000].
Login incorrect
IPNC login: [PWM] mstar_pwm_config duty_ns=0, period_ns=20000
reg=x1F203210(x1019) clk=12000000, period=x257
reg=x1F203208(x1019) clk=12000000, u32Duty=x0
[PWM] mstar_pwm_config duty_ns=100, period_ns=20000
reg=x1F203210(x1019) clk=12000000, period=x257
reg=x1F203208(x1019) clk=12000000, u32Duty=x257
[PWM] mstar_pwm_enable
[PWM] mstar_pwm_config duty_ns=0, period_ns=20000
reg=x1F203210(x1019) clk=12000000, period=x257
reg=x1F203208(x1019) clk=12000000, u32Duty=x0
[PWM] mstar_pwm_config duty_ns=0, period_ns=20000
reg=x1F203290(x1019) clk=12000000, period=x257
reg=x1F203288(x1019) clk=12000000, u32Duty=x0
[PWM] mstar_pwm_config duty_ns=1, period_ns=20000
reg=x1F203290(x1019) clk=12000000, period=x257
reg=x1F203288(x1019) clk=12000000, u32Duty=x5
[PWM] mstar_pwm_enable
[PWM] mstar_pwm_config duty_ns=0, period_ns=20000
reg=x1F203290(x1019) clk=12000000, period=x257
reg=x1F203288(x1019) clk=12000000, u32Duty=x0
Raw
extract_tftp.sh
On CCTV:
mount -t proc none /proc
ifconfig...
tftp -p -l /dev/mtdblock1 -r mtdblock1.bin 10.0.0.1
tftp -p -l /dev/mtdblock2 -r mtdblock2.bin 10.0.0.1
tftp -p -l /dev/mtdblock3 -r mtdblock3.bin 10.0.0.1
tftp -p -l /dev/mtdblock4 -r mtdblock4.bin 10.0.0.1
tftp -p -l /dev/mtdblock5 -r mtdblock5.bin 10.0.0.1
tftp -p -l /dev/mtdblock6 -r mtdblock6.bin 10.0.0.1
tftp -p -l /dev/mtdblock7 -r mtdblock7.bin 10.0.0.1
tftp -p -l /dev/mtdblock8 -r mtdblock8.bin 10.0.0.1
tftp -p -l /dev/mtdblock9 -r mtdblock9.bin 10.0.0.1
tftp -p -l /dev/mtdblock10 -r mtdblock10.bin 10.0.0.1
tftp -p -l /dev/mtdblock11 -r mtdblock11.bin 10.0.0.1
On server:
for i in `seq 1 11`;do touch "mtdblock$i.bin";chmod 777 "mtdblock$i.bin";done
Raw
passwd_generator_pseudo.c
void root_password_changer(void)
{
size_t anjsome_strlen;
char *isok;
char *isok2;
int iVar1;
undefined4 final_password;
undefined4 failurecode_2_maybe;
ushort failurecode;
char passwd_fspart [32];
undefined serialnumber_str [32];
char anjvision_and_something [256];
undefined md5_encoded_struct [24];
char md5_encoded_struct_str [232];
char acStack264 [256];
iVar1 = access("/opt/ch/flag.set.passwd",0);
if (iVar1 == -1) {
return;
}
GetSN(serialnumber_str);
memset(anjvision_and_something,0,0x100);
memset(md5_encoded_struct,0,0x100);
sprintf(anjvision_and_something,"%s%s","ANJVISION",serialnumber_str);
anjsome_strlen = strlen(anjvision_and_something);
our_md5_encode(md5_encoded_struct,anjvision_and_something,anjsome_strlen);
if (DAT_00073b24 == 0x1106) {
final_password = 0x3f454c5f;
failurecode_2_maybe = 0x31567536;
failurecode = failurecode & 0xff00;
}
else {
if (DAT_00073b24 == 0xb106 || (DAT_00073b24 == 0xb016 || DAT_00073b24 == 0xb007)) {
final_password = 0x77717a6a;
failurecode_2_maybe = 0x73617265;
failurecode = failurecode & 0xff00;
}
else {
strcpy((char *)&final_password,md5_encoded_struct_str);
}
}
read_file_to_buffer("/etc/flag.customize",passwd_fspart,0x20);
isok = strstr(passwd_fspart,(char *)&DAT_0005bbe0);
if (isok == (char *)0x0) {
isok2 = strstr(passwd_fspart,"_CWYY");
if (isok2 != (char *)0x0) {
final_password = 0x69796b53;
failurecode_2_maybe = 0x73406370;
failurecode = 0x7464;
}
}
else {
final_password = 0x7a737753;
failurecode_2_maybe = 0x36367763;
failurecode = failurecode & 0xff00;
}
sprintf(acStack264,"echo -e \"%s\n%s\" | passwd root",&final_password,&final_password);
system(acStack264);
system(acStack264);
return;
}
Raw
replace_init.log
Anjoy # printenv
Mstarbin=20150709
bootargs=ubi.mtd=UBI,2048 root=/dev/mtdblock8 rootfstype=squashfs ro init=/linuxrc LX_MEM=0xffe0000 mma_heap=mma_heap_name0,miu=0,sz=0x9E9C000 mma_heap=mma_heap_ipu,miu=0,sz=0x164000 cma=2M mtdparts=nand0:768k@1280k(IPL0),384k(IPL_CUST0),384k(IPL_CUST1),384k(UBOOT0),384k(UBOOT1),256k(ENV0),0x500000(KERNEL),0x500000(RECOVERY),0x2000000(rootfs),0x200000(MISC),0x500000(DATA),-(UBI)
bootcmd=nand read.e 0x22000000 KERNEL 0x500000; bootm 0x22000000;nand read.e 0x22000000 RECOVERY 0x500000; bootm 0x22000000
ethact=sstar_emac
ethaddr=00:30:1b:ba:02:db
fileaddr=21000000
filesize=E6F000
mtddevname=IPL0
mtddevnum=0
mtdids=nand0=nand0
mtdparts=mtdparts=nand0:768k@1280k(IPL0),384k(IPL_CUST0),384k(IPL_CUST1),384k(UBOOT0),384k(UBOOT1),256k(ENV0),0x500000(KERNEL),0x500000(RECOVERY),0x2000000(rootfs),0x200000(MISC),0x500000(DATA),-(UBI)
partition=nand0,0
stderr=serial
stdin=serial
stdout=serial
Environment size: 940/131068 bytes
Anjoy # setenv bootargs =ubi.mtd=UBI,2048 root=/dev/mtdblock8 rootfstype=squashfs ro init=/bin/sh LX_MEM=0xffe0000 mma_heap=mma_heap_name0,miu=0,sz=0x9E9C000 mma_heap=mma_heap_ipu,miu=0,sz=0x164000 cma=2M mtdparts=nand0:768k@1280k(IPL0),384k(IPL_CUST0),384k(IPL_CUST1),384k(UBOOT0),384k(UBOOT1),256k(ENV0),0x500000(KERNEL),0x500000(RECOVERY),0x2000000(rootfs),0x200000(MISC),0x500000(DATA),-(UBI)
Anjoy # nand read.e 0x22000000 KERNEL 0x500000; bootm 0x22000000;
NAND read: device 0 offset 0x3c0000, size 0x500000
Time:1008800 us, speed:5197 KB/s
5242880 bytes read: OK
## Booting kernel from Legacy Image at 22000000 ...
Image Name: MVX4##I6E#g#######KL_LX409##[BR:
Image Type: ARM Linux Kernel Image (lzma compressed)
Data Size: 2431200 Bytes = 2.3 MiB
Load Address: 20008000
Entry Point: 20008000
Verifying Checksum ... OK
Uncompressing Kernel Image ...
[XZ] !!!reserved 0x21000000 length=0x 1000000 for xz!!
XZ: uncompressed size=0x4cc000, ret=7
OK
atags:0x20000000
Starting kernel ...
Booting Linux on physical CPU 0x0
Linux version 4.9.84 (root@ubuntu) (gcc version 9.1.0 (GCC) ) #34 SMP PREEMPT Fri Sep 17 08:40:46 CST 2021
CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=50c5387d
CPU: div instructions available: patching division code
CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
early_atags_to_fdt() success
OF: fdt:Machine model: INFINITY6E SSC012B-S01A
LXmem is 0xffe0000 PHYS_OFFSET is 0x20000000
Add mem start 0x20000000 size 0xffe0000!!!!
LX_MEM = 0x20000000, 0xffe0000
LX_MEM2 = 0x0, 0x0
LX_MEM3 = 0x0, 0x0
EMAC_LEN= 0x0
DRAM_LEN= 0x0
deal_with_reserve_mma_heap memblock_reserve success mma_config[0].reserved_start=
0x26144000
deal_with_reserve_mma_heap memblock_reserve success mma_config[1].reserved_start=
0x25fe0000
cma: Reserved 2 MiB at 0x25c00000
Memory policy: Data cache writealloc
[infinity6e_smp_init_cpus]
percpu: Embedded 13 pages/cpu @c5f9c000 s21464 r8192 d23592 u53248
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 64992
Kernel command line: =ubi.mtd=UBI,2048 root=/dev/mtdblock8 rootfstype=squashfs ro init=/bin/sh LX_MEM=0xffe0000 mma_heap=mma_heap_name0,miu=0,sz=0x9E9C000 mma_heap=mma_heap_ipu,miu=0,sz=0x164000 cma=2M mtdparts=nand0:768k@1280k(IPL0),384k(IPL_CUST0),384k(IPL_CUST1),384k(UBOOT0),384k(UBOOT1),256k(ENV0),0x500000(KERNEL),0x500000(RECOVERY),0x2000000(rootfs),0x200000(MISC),0x500000(DATA),-(UBI)
PID hash table entries: 1024 (order: 0, 4096 bytes)
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
Memory: 88496K/262016K available (2963K kernel code, 219K rwdata, 1392K rodata, 168K init, 188K bss, 171472K reserved, 2048K cma-reserved)
Virtual kernel memory layout:
vector : 0xffff0000 - 0xffff1000 ( 4 kB)
fixmap : 0xffc00000 - 0xfff00000 (3072 kB)
vmalloc : 0xd0000000 - 0xff800000 ( 760 MB)
lowmem : 0xc0000000 - 0xcffe0000 ( 255 MB)
modules : 0xbf800000 - 0xc0000000 ( 8 MB)
.text : 0xc0008000 - 0xc02ed134 (2965 kB)
.init : 0xc0472000 - 0xc049c000 ( 168 kB)
.data : 0xc049c000 - 0xc04d2c00 ( 219 kB)
.bss : 0xc04d4000 - 0xc05033a0 ( 189 kB)
SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
Preemptible hierarchical RCU implementation.
Build-time adjustment of leaf fanout to 32.
RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
RCU: Adjusting geometry for rcu_fanout_leaf=32, nr_cpu_ids=2
NR_IRQS:16 nr_irqs:16 16
ms_init_main_intc: np->name=ms_main_intc, parent=gic
ms_init_pm_intc: np->name=ms_pm_intc, parent=ms_main_intc
ss_init_gpi_intc: np->name=ms_gpi_intc, parent=ms_main_intc
Find CLK_ven_pll, hook ms_venpll_ops
Find CLK_cpupll_clk, hook ms_cpuclk_ops
arm_arch_timer: Architected cp15 timer(s) running at 6.00MHz (virt).
clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x1623fa770, max_idle_ns: 440795202238 ns
sched_clock: 56 bits at 6MHz, resolution 166ns, wraps every 4398046511055ns
Switching to timer-based delay loop, resolution 166ns
console [ttyS0] enabled
Calibrating delay loop (skipped), value calculated using timer frequency.. 12.00 BogoMIPS (lpj=60000)
pid_max: default: 4096 minimum: 301
Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
CPU: Testing write buffer coherency: ok
CPU0: update cpu_capacity 1024
CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
Setting up static identity map for 0x20008240 - 0x2000828c
[infinity6e_boot_secondary]
CPU1: update cpu_capacity 1024
CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
Brought up 2 CPUs
SMP: Total of 2 processors activated (24.00 BogoMIPS).
CPU: All CPU(s) started in SVC mode.
devtmpfs: initialized
VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
futex hash table entries: 16 (order: -2, 1024 bytes)
NET: Registered protocol family 16
DMA: preallocated 256 KiB pool for atomic coherent allocations
Version : MVX4##I6E#g#######KL_LX409##[BR:g]#XVM
GPIO: probe end[Padmux]reset PAD42(reg 0x103c00:6f; mask0x7) t0 SD1_MODE_2 (org: I2C0_MODE_1)
[Padmux]reset PAD49(reg 0x103c00:60; mask0x180) t0 GPIO (org: EJ_MODE_1)
hw-breakpoint: found 5 (+1 reserved) breakpoint and 4 watchpoint registers.
hw-breakpoint: maximum watchpoint size is 8 bytes.
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
clocksource: Switched to clocksource arch_sys_counter
NET: Registered protocol family 2
TCP established hash table entries: 2048 (order: 1, 8192 bytes)
TCP bind hash table entries: 2048 (order: 3, 40960 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
UDP hash table entries: 128 (order: 0, 6144 bytes)
UDP-Lite hash table entries: 128 (order: 0, 6144 bytes)
NET: Registered protocol family 1
RPC: Registered named UNIX socket transport module.
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
hw perfevents: enabled with armv7_cortex_a7 PMU driver, 5 counters available
workingset: timestamp_bits=30 max_order=15 bucket_order=0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
NFS: Registering the id_resolver key type
Key type id_resolver registered
Key type id_legacy registered
ntfs: driver 2.1.32 [Flags: R/O].
jffs2: version 2.2. (NAND) (SUMMARY) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.26)
io scheduler noop registered
io scheduler deadline registered (default)
Infinity6e PHY probe, base:fd2a4600
set wifi to low
set wifi to high
IRLED driver v2.0 20210914
libphy: Fixed MDIO Bus: probed
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
ehci monitor start running
Mstar_ehc_init version:20180309
i2c /dev entries driver
1f221000.uart0: ttyS0 at MMIO 0x0 (irq = 45, base_baud = 10800000) is a unknown
ms_uart: probe of 1f221200.uart1 failed with error -22
1f220400.uart2: ttyS2 at MMIO 0x0 (irq = 49, base_baud = 10800000) is a unknown
[MS_PM_INTC] hw:9 -> v:71
[MS_PM_INTC] hw:10 -> v:72
>> [sdmmc] ms_sdmmc_probe
>> [sdmmc_0] Probe Platform Devices
>> [sdmmc_1] Probe Platform Devices
MSYS: DMEM request: [emac0_buff]:0x00000812
MSYS: DMEM request: [emac0_buff]:0x00000812 success, CPU phy:@0x25C48000, virt:@0xC5C48000
libphy: mdio: probed
mdio_bus mdio-bus@emac0: /soc/emac0/mdio-bus/ethernet-phy@0 has invalid PHY address
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 0
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 1
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 2
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 3
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 4
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 5
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 6
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 7
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 8
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 9
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 10
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 11
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 12
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 13
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 14
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 15
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 16
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 17
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 18
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 19
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 20
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 21
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 22
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 23
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 24
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 25
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 26
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 27
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 28
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 29
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 30
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 31
[emac_phy_connect][3328] connected mac emac0 to PHY at mdio-bus@emac0:00 [uid=11112222, driver=SStar 10/100 Ethernet Phy]
ms_rtcpwc 1f006800.rtcpwc: rtc core: registered 1f006800.rtcpwc as rtc0
MSYS: DMEM request: [AESDMA_ENG]:0x00001000
MSYS: DMEM request: [AESDMA_ENG]:0x00001000 success, CPU phy:@0x25C49000, virt:@0xC5C49000
MSYS: DMEM request: [AESDMA_ENG1]:0x00001000
MSYS: DMEM request: [AESDMA_ENG1]:0x00001000 success, CPU phy:@0x25C4A000, virt:@0xC5C4A000
[ms_cpufreq_init] Current clk=796917760
[i6e][pwm] use ms_pwm->group_data
[NOTICE]pwm-isr(62) success. If not i6e or i6b0, pls confirm it on .dtsi
mstar_spinand_probe: mstar_spinand enableClock
MSYS: DMEM request: [BDMA]:0x00000840
MSYS: DMEM request: [BDMA]:0x00000840 success, CPU phy:@0x25C4B000, virt:@0xC5C4B000
MDrv_SPINAND_Init: Detected ID: MID =c2, DID =12
_dumpNandInformation:warning, Bytes / Page : 2048
_dumpNandInformation:warning, Pages / Block: 64
_dumpNandInformation:warning, Sector/ Page : 512
_dumpNandInformation:warning, Spare / Page : 64
_dumpNandInformation:warning, Current config r:1 w:1 drv:1
mstar_spinand_probe: Magic memcmp pass
mstar_spinand_probe: Get partition (Block 0 : page 1)
mstar_spinand_probe: CIS contains part info
mstar_spinand_probe: Before nand_scan()...
12 cmdlinepart partitions found on MTD device nand0
mstar_spinand_probe: Mtd parts parse
Creating 12 MTD partitions on "nand0":
0x000000140000-0x000000200000 : "IPL0"
0x000000200000-0x000000260000 : "IPL_CUST0"
0x000000260000-0x0000002c0000 : "IPL_CUST1"
0x0000002c0000-0x000000320000 : "UBOOT0"
0x000000320000-0x000000380000 : "UBOOT1"
0x000000380000-0x0000003c0000 : "ENV0"
0x0000003c0000-0x0000008c0000 : "KERNEL"
0x0000008c0000-0x000000dc0000 : "RECOVERY"
0x000000dc0000-0x000002dc0000 : "rootfs"
0x000002dc0000-0x000002fc0000 : "MISC"
0x000002fc0000-0x0000034c0000 : "DATA"
0x0000034c0000-0x000008000000 : "UBI"
mstar notify driver install successfully
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
NET: Registered protocol family 17
Key type dns_resolver registered
[mstar_pm_init] resume_pbase=0x200114B5, suspend_imi_vbase=0xD0057000
ThumbEE CPU extension supported.
Registering SWP/SWPB emulation handler
ms_rtcpwc 1f006800.rtcpwc: setting system clock to 1970-01-01 01:12:14 UTC (4334)
OF: fdt:not creating '/sys/firmware/fdt': CRC check failed
VFS: Mounted root (squashfs filesystem) readonly on device 31:8.
devtmpfs: mounted
This architecture does not have kernel memory protection.
/bin/sh: can't access tty; job control turned off
/ # [emac_phy_link_adjust] EMAC Link Up
ls
bin data lib opt tmp
bootconfig dev linuxrc proc usr
config etc misc sbin var
customer home mnt sys vendor
/ # uname -a
Linux (none) 4.9.84 #34 SMP PREEMPT Fri Sep 17 08:40:46 CST 2021 armv7l GNU/Linux
/ #
@Python1320
Copy link
Author

Python1320 commented Sep 23, 2023 •
edited
Loading

https://ipcamtalk.com/threads/serial-connection-to-module.67951/

https://wx.comake.online/doc/d8clf27cnes2-SSD20X/index.html

https://www.aliexpress.com/item/1005003738087454.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment