Database Users

Galaxy S UART JIG & Debugging Connector

After reading through some very interesting threads about the UART and JTAG interfaces on the Galaxy S phones, I decided to build my own JIG to trigger the various modes available.
However, I didn't want to mess with splicing different resistors in, and I don't like having lots of wires hanging about. So I decided to come up with a way to choose the mode by a switch, rather than switching out different cables or using breadboards.
The resulting design is:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Parts List:
4 resistors selected from the table at http://forum.xda-developers.com/showthread.php?t=820275 (I chose 619K, 301K, 150K, and 121K).
A 4-position DIP Switch
A 2in x 3in ProtoBoard , drilled at .1in to solder everything onto.
A USB Breakout Board
A 5-pin Molex connector and plug, with wires.
An enclosure to hold it all in.
Some silicone bumpers for the enclosure.
Some standoffs and screws for mounting the board.
A Breakout Board for FT232RL USB to Serial to handle the TTL conversion.
NOTE:The FT232 adapter is upside down in the diagram, to get the pins lined up with the rest of the design.
You should insulate the FT232 from the rest of the board to avoid shorts. I used electrical tape.
The pictures below are from an old design that used the UartSBee converter. This part is unreasonably expensive for this project, shipping takes an extraordinary amount of time, and the vendor has very poor communication and customer support.
SparkFun, on the other hand, ships quickly and is very communicative. They also have a very cool IRC channel on Freenode and provide Eagle CAD libraries and drawings for many of their components.

Wow, that's pretty impressive.
I haven't had much time to work on this lately but I put my notes so far about the UART in this post.

TheBeano said:
Wow, that's pretty impressive.
I haven't had much time to work on this lately but I put my notes so far about the UART in this post.
Click to expand...
Click to collapse
Thank you! I must admit that I didn't read all the way through that thread.
Accessing the UART from userspace could be interesting, though.

Updated design. This one ought to allow all but 2 of the values listed in the table. The last two, 1000.07K and 1002K Ohms, require tolerances that are too tight to achieve without going to extraordinary expense.
I'm not especially worried about those 2, as they don't appear to be particularly interesting modes.
Code:
Value | Digi-Key Part Number
GND |
2 K | RNF14FTD2K00CT-ND
2.604 K | CMF2.61KHFCT-ND (2.61K 1%)
3.208 K | RNF14FTD3K24CT-ND (3.24K 1%)
4.014 K | RSB-4.0KRCT-ND (4.00K 1%)
4.820 K | CMF4.87KHFCT-ND (4.87K 1%)
6.030 K | 45F6K0E-ND (6.00K 1%)
8.030 K | 43F8K0E-ND (8.00K 1%)
10.030 K | P10.0KCACT-ND (10.0K 1%)
12.030 K | P12.0KCACT-ND (12.0K 1%)
14.460 K | CMF14.7KHFCT-ND (14.7K 1%)
17.260 K | CMF17.4KQFCT-ND (17.4K 1%)
20.500 K | CMF20.5KQFCT-ND
24.070 K | P24.0KCACT-ND (24.0K 1%)
28.700 K | CMF28.7KQFCT-ND
34.000 K | PPC34.0KYCT-ND
40.200 K | CMF40.2KHFCT-ND
49.900 K | RNF14FTD49K9CT-ND
64.900 K | CMF64.9KHFCT-ND
80.070 K | RNF14FTD80K6CT-ND (80.6K 1%)
102.000 K | PPCQF102KCT-ND
121.000 K | PPC121KXCT-ND
150.000 K | PPC150KYCT-ND
200.000 K | P200KCACT-ND
255.000 K | PPC255KZCT-ND
301.000 K | PPC301KYCT-ND
365.000 K | PPCQF365KCT-ND
442.000 K | PPCQF442KCT-ND
523.000 K | PPCQF523KCT-ND
619.000 K | PPCQF619KCT-ND
1000.070 K |
1002.000 K |
OPEN
I have all of the parts for the first design except for the UartSBee now. Still waiting on shipping from Hong Kong for that.
Some preliminary pictures, snapped from my Epic:

Any luck with the project? You got communication?

I'm still waiting for the UartSBee component to arrive. I will probably redesign the board to use a different converter, since SeeedStudio doesn't seem to be a reliable vendor.

[EDIT:] Changed Image link to use a hosting service that doesn't use sessions.
Finally received the UartSBee today, and got it soldered in. Tests are successful, though not quite what I wanted. I can get some output at boot, and I can get into the SBL command interpreter, but there isn't a running log output from the phone. As soon as the kernel loads, the output ceases.
Code:
Set cpu clk. from 400MHz to 800MHz.
OM=0x9, device=OnenandMux(Audi)
IROM e-fused version.
s5p_get_average_adc
s5p_get_average_adc: adc_arr = 2397
s5p_get_average_adc: adc_arr = 2351
s5p_get_average_adc: adc_arr = 2396
s5p_get_average_adc: adc_arr = 2413
s5p_get_average_adc: adc_arr = 2353
s5p_get_average_adc: adc_arr = 2405
s5p_get_average_adc: adc_arr = 2339
s5p_get_average_adc: adc_arr = 2350
s5p_get_average_adc: adc_arr = 2481
s5p_get_average_adc: adc_arr = 2445
s5p_get_average_adc: adc_max = 2481, adc_min = 2339
check_revision: REVISION_ADC_VALUE = 2318
-----------------------------------------------------------
Samsung Secondary Bootloader (SBL) v3.0
Copyright (C) Samsung Electronics Co., Ltd. 2006-2010
Board Name: ARIES REV 02
Build On: Oct 14 2010 07:13:43
-----------------------------------------------------------
Re_partition: magic code(0x0)
[PAM: ] ++FSR_PAM_Init
[PAM: ] OneNAND physical base address : 0xb0000000
[PAM: ] OneNAND virtual base address : 0xb0000000
[PAM: ] OneNAND nMID=0xec : nDID=0x60
[PAM: ] --FSR_PAM_Init
fsr_bml_load_partition: pi->nNumOfPartEntry = 12
partitions loading success
board partition information update.. source: 0x0
.Done.
read 1 units.
==== PARTITION INFORMATION ====
ID : IBL+PBL (0x0)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 0
NO_UNITS : 1
===============================
ID : PIT (0x1)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 1
NO_UNITS : 1
===============================
ID : EFS (0x14)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 2
NO_UNITS : 40
===============================
ID : SBL (0x3)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 42
NO_UNITS : 5
===============================
ID : SBL2 (0x4)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 47
NO_UNITS : 5
===============================
ID : PARAM (0x15)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 52
NO_UNITS : 20
===============================
ID : KERNEL (0x6)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 72
NO_UNITS : 30
===============================
ID : RECOVERY (0x7)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 102
NO_UNITS : 30
===============================
ID : FACTORYFS (0x16)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 132
NO_UNITS : 1074
===============================
ID : DATAFS (0x17)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 1206
NO_UNITS : 2056
===============================
ID : CACHE (0x18)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 3262
NO_UNITS : 700
===============================
ID : MODEM (0xb)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 3962
NO_UNITS : 50
===============================
loke_init: j4fs_open success..
load_lfs_parameters valid magic code and version.
load_debug_level reading debug level from file successfully(0x574f4c44).
init_fuel_gauge: vcell = 4052mV, soc = 91
reading nps status file is successfully!.
nps status=0x504d4f43
PMIC_IRQ1 = 0x20
PMIC_IRQ2 = 0x0
PMIC_IRQ3 = 0x0
PMIC_IRQ4 = 0x0
PMIC_STATUS1 = 0x40
PMIC_STATUS2 = 0x0
get_debug_level current debug level is 0x574f4c44.
aries_process_platform: Debug Level Low
keypad_scan: key value ----------------->= 0x0
CONFIG_ARIES_REV:32 , CONFIG_ARIES_REV03:48
aries_process_platform: final s1 booting mode = 0
AST_POWERON..
DISPLAY_PATH_SEL[MDNIE 0x1]is on
MDNIE setting Init start!!
vsync interrupt is off
video interrupt is off
[fb0] turn on
MDNIE setting Init end!!
Autoboot (0 seconds) in progress, press any key to stop Autoboot aborted..
SBL> help setenv
* Help : setenv
* Usage : setenv [name] [value] . .
Modify current environment info on ram
SBL> help saveenv
* Help : saveenv
* Usage : saveenv
Save cuurent environment info to flash
SBL> help printenv
* Help : printenv
* Usage : printenv
Print current environment info on ram
SBL> help reset
* Help : reset
* Usage : reboot
Reboot system
SBL> help boot
* Help : boot
* Usage : boot [kernel options]
Boot Linux with optional kernel options
SBL> help kernel
* Help : kernel
* Usage : kernel hex_adr
Change the Linux kernel base
SBL> help format
* Help : format
* Usage : format
format device
SBL> help open
* Help : open
* Usage : open
open device
SBL> help close
* Help : close
* Usage : close
close device
SBL> help erasepart
* Help : erasepart
* Usage : erasepart partition_id
erase part of units
- ex) erase 0x9(temp partition)
SBL> help eraseall
* Help : eraseall
* Usage : eraseall
erase all units
SBL> help loadkernel
* Help : loadkernel
* Usage : loadkernel
load kernel image
- loadkernel 0x80A00000 from kernel partition
SBL> help showpart
* Help : showpart
* Usage : showpart
show partition information
SBL> help delpart
* Help : delpart
* Usage : delpart
delete last partition information
SBL> help savepart
* Help : savepart
* Usage : savepart
save partition information
SBL> help nkernel
* Help : nkernel
* Usage : nkernel command
* Usage : nkernel
read kernel from flash to DDR
SBL> help nramdisk
* Help : nramdisk
* Usage : nramdisk command
* Usage : nramdisk
read ramdisk from flash to DDR
SBL> help nandread
* Help : nandread
* Usage : * Usage : nandread <PARTID> <SIZE>
read partition from flash to SDRAM(0x80000000)
SBL> help nandwrite
* Help : nandwrite
* Usage : * Usage: nandwrite <PARTID> <SIZE>
write partition from SDRAM(0x80000000) to flash
SBL> help usb
* Help : usb
* Usage : usb download command
SBL> help mmctest
* Help : mmctest
* Usage : *Usage : mmctest
SBL> help keyread
* Help : keyread
* Usage : *Usage : keyread
SBL> help readadc
* Help : readadc
* Usage : *Usage : readadc <channel>
SBL> help usb_read
* Help : usb_read
* Usage : usb_read reg
Read the usb ic register
SBL> help usb_write
* Help : usb_write
* Usage : usb_write reg, val
Read the usb ic register
SBL> help fuelgauge
* Help : fuelgauge
* Usage : *usage : fuelgauge
SBL> help pmic_read
* Help : pmic_read
* Usage : pmic_read reg
Read the pmic register
SBL> help pmic_write
* Help : pmic_write
* Usage : pmic_write reg, val
Read the pmic register
SBL> help reset_cp
* Help : reset_cp
* Usage : *Usage : reset_cp
SBL> printenv
PARAM Rev 1.3
SERIAL_SPEED : 7
LOAD_RAMDISK : 0
BOOT_DELAY : 0
LCD_LEVEL : 97
SWITCH_SEL : 5
PHONE_DEBUG_ON : 0
LCD_DIM_LEVEL : 0
LCD_DIM_TIME : 6
MELODY_MODE : 1
REBOOT_MODE : 0
NATION_SEL : 0
LANGUAGE_SEL : 0
SET_DEFAULT_PARAM : 0
PARAM_INT_13 : 0
PARAM_INT_14 : 0
VERSION : I9000XXIL
CMDLINE : console=ttySAC2,115200 loglevel=4
DELTA_LOCATION : /mnt/rsv
PARAM_STR_3 :
PARAM_STR_4 :
SBL> boot
setting param.serialnr=0x35302c2b 0xbb7d00ec
setting param.board_rev=0xb
setting param.cmdline=console=ttySAC2,115200 loglevel=4
Starting kernel at 0x32000000...

OK, a couple of quick updates:
I updated the basic 4-resistor design to avoid using the UartSBee component. Please refer to the OP.
I also figured out how to get the kernel output over the serial console. Details below.
For the kernel output, you need to make a minor tweak to your kernel's initramfs:
Code:
diff --git a/initramfs/fota.rc b/initramfs/fota.rc
index 0339c46..fa17e00 100755
--- a/initramfs/fota.rc
+++ b/initramfs/fota.rc
(at)(at) -72,8 +72,8 (at)(at) on init
mount rfs /dev/block/stl9 /system check=no
on boot
- #write /sys/class/sec/switch/uart_sel PDA
- #write /sys/class/sec/switch/usb_sel PDA
+ write /sys/class/sec/switch/uart_sel PDA
+ write /sys/class/sec/switch/usb_sel PDA
ifup lo
hostname localhost
diff --git a/initramfs/init.rc b/initramfs/init.rc
index f651b38..7dcf4f2 100644
--- a/initramfs/init.rc
+++ b/initramfs/init.rc
(at)(at) -292,6 +292,11 (at)(at) insmod /lib/modules/melfas_touchkey.ko
mount rootfs rootfs / ro remount
on boot
+# Kernel moves UART control to MODEM during boot. Put it back to PDA so we can continue capturing log output.
+
+write /sys/class/sec/switch/uart_sel PDA
+write /sys/class/sec/switch/usb_sel PDA
+
# basic network init
ifup lo
hostname localhost
diff --git a/initramfs/recovery.rc b/initramfs/recovery.rc
index 699256b..37d2f51 100755
--- a/initramfs/recovery.rc
+++ b/initramfs/recovery.rc
(at)(at) -67,8 +67,8 (at)(at) on init
#chmod 0771 /dbdata
on boot
- #write /sys/class/sec/switch/uart_sel PDA
- #write /sys/class/sec/switch/usb_sel PDA
+ write /sys/class/sec/switch/uart_sel PDA
+ write /sys/class/sec/switch/usb_sel PDA
ifup lo
hostname localhost
Compile that into a new kernel, or re-pack it into an existing one, and it should get you output like this:
Code:
Set cpu clk. from 400MHz to 800MHz.
OM=0x9, device=OnenandMux(Audi)
IROM e-fused version.
s5p_get_average_adc
s5p_get_average_adc: adc_arr = 2386
s5p_get_average_adc: adc_arr = 2434
s5p_get_average_adc: adc_arr = 2445
s5p_get_average_adc: adc_arr = 2320
s5p_get_average_adc: adc_arr = 2440
s5p_get_average_adc: adc_arr = 2370
s5p_get_average_adc: adc_arr = 2429
s5p_get_average_adc: adc_arr = 2334
s5p_get_average_adc: adc_arr = 2406
s5p_get_average_adc: adc_arr = 2415
s5p_get_average_adc: adc_max = 2445, adc_min = 2320
check_revision: REVISION_ADC_VALUE = 2331
-----------------------------------------------------------
Samsung Secondary Bootloader (SBL) v3.0
Copyright (C) Samsung Electronics Co., Ltd. 2006-2010
Board Name: ARIES REV 02
Build On: Oct 14 2010 07:13:43
-----------------------------------------------------------
Re_partition: magic code(0x0)
[PAM: ] ++FSR_PAM_Init
[PAM: ] OneNAND physical base address : 0xb0000000
[PAM: ] OneNAND virtual base address : 0xb0000000
[PAM: ] OneNAND nMID=0xec : nDID=0x60
[PAM: ] --FSR_PAM_Init
fsr_bml_load_partition: pi->nNumOfPartEntry = 12
partitions loading success
board partition information update.. source: 0x0
.Done.
read 1 units.
==== PARTITION INFORMATION ====
ID : IBL+PBL (0x0)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 0
NO_UNITS : 1
===============================
ID : PIT (0x1)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 1
NO_UNITS : 1
===============================
ID : EFS (0x14)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 2
NO_UNITS : 40
===============================
ID : SBL (0x3)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 42
NO_UNITS : 5
===============================
ID : SBL2 (0x4)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 47
NO_UNITS : 5
===============================
ID : PARAM (0x15)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 52
NO_UNITS : 20
===============================
ID : KERNEL (0x6)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 72
NO_UNITS : 30
===============================
ID : RECOVERY (0x7)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 102
NO_UNITS : 30
===============================
ID : FACTORYFS (0x16)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 132
NO_UNITS : 1074
===============================
ID : DATAFS (0x17)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 1206
NO_UNITS : 2056
===============================
ID : CACHE (0x18)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 3262
NO_UNITS : 700
===============================
ID : MODEM (0xb)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 3962
NO_UNITS : 50
===============================
loke_init: j4fs_open success..
load_lfs_parameters valid magic code and version.
load_debug_level reading debug level from file successfully(0x574f4c44).
init_fuel_gauge: vcell = 4002mV, soc = 85
reading nps status file is successfully!.
nps status=0x504d4f43
PMIC_IRQ1 = 0x20
PMIC_IRQ2 = 0x0
PMIC_IRQ3 = 0x0
PMIC_IRQ4 = 0x0
PMIC_STATUS1 = 0x40
PMIC_STATUS2 = 0x0
get_debug_level current debug level is 0x574f4c44.
aries_process_platform: Debug Level Low
keypad_scan: key value ----------------->= 0x0
CONFIG_ARIES_REV:32 , CONFIG_ARIES_REV03:48
aries_process_platform: final s1 booting mode = 0
AST_POWERON..
DISPLAY_PATH_SEL[MDNIE 0x1]is on
MDNIE setting Init start!!
vsync interrupt is off
video interrupt is off
[fb0] turn on
MDNIE setting Init end!!
Autoboot (0 seconds) in progress, press any key to stop
get_debug_level current debug level is 0x574f4c44.
get_debug_level current debug level is 0x574f4c44.
boot_kernel: Debug Level Low
Load Partion idx = (6)
Loading Partion idx = (6)
..............................done
Kernel read success from kernel partition no.6, idx.6.
setting param.serialnr=0x35302c2b 0xbb7d00ec
setting param.board_rev=0xc
setting param.cmdline=console=ttySAC2,115200
Starting kernel at 0x32000000...
Uncompressing Linux... done, booting the kernel.
[ 0.000000] Initializing cgroup subsys cpu
[ 0.000000] Linux version 2.6.35.7-gb0af48f-dirty (justin(at)TEMPEST-PC) (gcc version 4.5.1 (Sourcery G++ Lite 2010.09-51) ) #1 PREEMPT Sat Mar 26 11:34:54 CDT 2011
[ 0.000000] CPU: ARMv7 Processor [412fc082] revision 2 (ARMv7), cr=10c53c7f
[ 0.000000] CPU: VIPT nonaliasing data cache, VIPT nonaliasing instruction cache
[ 0.000000] Machine: aries
[ 0.000000] Memory policy: ECC disabled, Data cache writeback
[ 0.000000] Normal zone: 1 pages exceeds realsize 0
[ 0.000000] CPU S5PV210/S5PC110 (id 0x43110221)
[ 0.000000] S3C24XX Clocks, Copyright 2004 Simtec Electronics
[ 0.000000] S5PV210: PLL settings, A=800000000, M=667000000, E=96000000 V=54000000
[ 0.000000] S5PV210: ARMCLK=800000000, HCLKM=200000000, HCLKD=166750000
[ 0.000000] HCLKP=133400000, PCLKM=100000000, PCLKD=83375000, PCLKP=66700000
[ 0.000000] sclk_dmc: source is mout_mpll (1), rate is 166750000
[ 0.000000] sclk_onenand: source is hclk_dsys (1), rate is 166750000
[ 0.000000] sclk: source is mout_mpll (6), rate is 133400000
[ 0.000000] sclk: source is mout_mpll (6), rate is 66700000
[ 0.000000] sclk: source is mout_mpll (6), rate is 66700000
[ 0.000000] sclk: source is mout_mpll (6), rate is 66700000
[ 0.000000] sclk_mixer: source is sclk_dac (0), rate is 54000000
[ 0.000000] sclk_spdif: source is sclk_audio (0), rate is 24000000
[ 0.000000] sclk_fimc: source is ext_xtal (0), rate is 24000000
[ 0.000000] sclk_fimc: source is ext_xtal (0), rate is 24000000
[ 0.000000] sclk_fimc: source is ext_xtal (0), rate is 24000000
[ 0.000000] sclk_cam: source is xusbxti (1), rate is 24000000
[ 0.000000] sclk_cam: source is ext_xtal (0), rate is 24000000
[ 0.000000] sclk_fimd: source is mout_mpll (6), rate is 166750000
[ 0.000000] sclk_mmc: source is mout_mpll (6), rate is 51307692
[ 0.000000] sclk_mmc: source is mout_mpll (6), rate is 47642857
[ 0.000000] sclk_mmc: source is mout_mpll (6), rate is 47642857
[ 0.000000] sclk_mmc: source is mout_mpll (6), rate is 47642857
[ 0.000000] sclk_mfc: source is sclk_a2m (0), rate is 200000000
[ 0.000000] sclk_fimg2d: source is sclk_a2m (0), rate is 200000000
[ 0.000000] sclk: source is mout_mpll (1), rate is 66700000
[ 0.000000] sclk_csis: source is ext_xtal (0), rate is 24000000
[ 0.000000] sclk_spi: source is mout_epll (7), rate is 96000000
[ 0.000000] sclk_spi: source is mout_epll (7), rate is 96000000
[ 0.000000] sclk_pwi: source is ext_xtal (0), rate is 24000000
[ 0.000000] sclk_pwm: source is ext_xtal (0), rate is 24000000
[ 0.000000] sclk_mdnie: source is mout_mpll (6), rate is 166750000
[ 0.000000] sclk_mdnie_pwm: source is ext_xtal (0), rate is 24000000
[ 0.000000] s5pv210: 37748736 bytes system memory reserved for mfc at 0x30d3d000
[ 0.000000] s5pv210: 37748736 bytes system memory reserved for mfc at 0x40204000
[ 0.000000] s5pv210: 6291456 bytes system memory reserved for fimc0 at 0x42604000
[ 0.000000] s5pv210: 10137600 bytes system memory reserved for fimc1 at 0x42c04000
[ 0.000000] s5pv210: 6291456 bytes system memory reserved for fimc2 at 0x435af000
[ 0.000000] s5pv210: 8388608 bytes system memory reserved for jpeg at 0x3313d000
[ 0.000000] s5pv210: 6144000 bytes system memory reserved for fimd at 0x43baf000
[ 0.000000] Built 3 zonelists in Zone order, mobility grouping on. Total pages: 117602
[ 0.000000] Kernel command line: console=ttySAC2,115200
[ 0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[ 0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[ 0.000000] Memory: 80MB 256MB 127MB = 463MB total
[ 0.000000] Memory: 346984k/346984k available, 127128k reserved, 0K highmem
[ 0.000000] Virtual kernel memory layout:
[ 0.000000] vector : 0xffff0000 - 0xffff1000 ( 4 kB)
[ 0.000000] fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB)
[ 0.000000] DMA : 0xff000000 - 0xffe00000 ( 14 MB)
[ 0.000000] vmalloc : 0xe8000000 - 0xfc000000 ( 320 MB)
[ 0.000000] lowmem : 0xc0000000 - 0xe7f00000 ( 639 MB)
[ 0.000000] modules : 0xbf000000 - 0xc0000000 ( 16 MB)
[ 0.000000] .init : 0xc0008000 - 0xc03a9000 (3716 kB)
[ 0.000000] .text : 0xc03a9000 - 0xc0b95000 (8112 kB)
[ 0.000000] .data : 0xc0b96000 - 0xc0bda160 ( 273 kB)
[ 0.000000] SLUB: Genslabs=9, HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=4
[ 0.000000] Hierarchical RCU implementation.
[ 0.000000] RCU-based detection of stalled CPUs is disabled.
[ 0.000000] Verbose stalled-CPUs detection is disabled.
[ 0.000000] NR_IRQS:393
[ 0.000000] VIC (at)fd000000: id 0x00041192, vendor 0x41
[ 0.000000] VIC (at)fd010000: id 0x00041192, vendor 0x41
[ 0.000000] VIC (at)fd020000: id 0x00041192, vendor 0x41
[ 0.000000] VIC (at)fd030000: id 0x00041192, vendor 0x41
[ 0.000000] mult[140737]
[ 0.000000] max_delta_ns[2937815369]
[ 0.000000] min_delta_ns[30517]
[ 0.000000] rate[32768]
[ 0.000000] HZ[256]
[ 0.000000] console [ttySAC2] enabled
[ 0.455739] Calibrating delay loop... 796.20 BogoMIPS (lpj=1556480)
[ 0.540206] pid_max: default: 32768 minimum: 301
[ 0.544870] Mount-cache hash table entries: 512
[ 0.549661] Initializing cgroup subsys debug
[ 0.553570] Initializing cgroup subsys cpuacct
[ 0.557981] Initializing cgroup subsys freezer
[ 0.562432] CPU: Testing write buffer coherency: ok
[ 0.569909] regulator: core version 0.5
[ 0.572450] NET: Registered protocol family 16
[ 0.584031] ram_console: got buffer at 57f00000, size ff000
[ 0.588250] ram_console: no valid data in buffer (sig = 0x00000000)
[ 0.000000] Initializing cgroup subsys cpu
[ 0.000000] Linux version 2.6.35.7-gb0af48f-dirty (justin(at)TEMPEST-PC) (gcc version 4.5.1 (Sourcery G++ Lite 2010.09-51) ) #1 PREEMPT Sat Mar 26 11:34:54 CDT 2011
[ 0.000000] CPU: ARMv7 Processor [412fc082] revision 2 (ARMv7), cr=10c53c7f
[ 0.000000] CPU: VIPT nonaliasing data cache, VIPT nonaliasing instruction cache
[ 0.000000] Machine: aries
[ 0.000000] Memory policy: ECC disabled, Data cache writeback
[ 0.000000] Normal zone: 1 pages exceeds realsize 0
[ 0.000000] CPU S5PV210/S5PC110 (id 0x43110221)
[ 0.000000] S3C24XX Clocks, Copyright 2004 Simtec Electronics
[ 0.000000] S5PV210: PLL settings, A=800000000, M=667000000, E=96000000 V=54000000
[ 0.000000] S5PV210: ARMCLK=800000000, HCLKM=200000000, HCLKD=166750000
[ 0.000000] HCLKP=133400000, PCLKM=100000000, PCLKD=83375000, PCLKP=66700000
[ 0.000000] sclk_dmc: source is mout_mpll (1), rate is 166750000
[ 0.000000] sclk_onenand: source is hclk_dsys (1), rate is 166750000
[ 0.000000] sclk: source is mout_mpll (6), rate is 133400000
[ 0.000000] sclk: source is mout_mpll (6), rate is 66700000
[ 0.000000] sclk: source is mout_mpll (6), rate is 66700000
[ 0.000000] sclk: source is mout_mpll (6), rate is 66700000
[ 0.000000] sclk_mixer: source is sclk_dac (0), rate is 54000000
[ 0.000000] sclk_spdif: source is sclk_audio (0), rate is 24000000
[ 0.000000] sclk_fimc: source is ext_xtal (0), rate is 24000000
[ 0.000000] sclk_fimc: source is ext_xtal (0), rate is 24000000
[ 0.000000] sclk_fimc: source is ext_xtal (0), rate is 24000000
[ 0.000000] sclk_cam: source is xusbxti (1), rate is 24000000
[ 0.000000] sclk_cam: source is ext_xtal (0), rate is 24000000
[ 0.000000] sclk_fimd: source is mout_mpll (6), rate is 166750000
[ 0.000000] sclk_mmc: source is mout_mpll (6), rate is 51307692
[ 0.000000] sclk_mmc: source is mout_mpll (6), rate is 47642857
[ 0.000000] sclk_mmc: source is mout_mpll (6), rate is 47642857
[ 0.000000] sclk_mmc: source is mout_mpll (6), rate is 47642857
[ 0.000000] sclk_mfc: source is sclk_a2m (0), rate is 200000000
[ 0.000000] sclk_fimg2d: source is sclk_a2m (0), rate is 200000000
[ 0.000000] sclk: source is mout_mpll (1), rate is 66700000
[ 0.000000] sclk_csis: source is ext_xtal (0), rate is 24000000
[ 0.000000] sclk_spi: source is mout_epll (7), rate is 96000000
[ 0.000000] sclk_spi: source is mout_epll (7), rate is 96000000
[ 0.000000] sclk_pwi: source is ext_xtal (0), rate is 24000000
[ 0.000000] sclk_pwm: source is ext_xtal (0), rate is 24000000
[ 0.000000] sclk_mdnie: source is mout_mpll (6), rate is 166750000
[ 0.000000] sclk_mdnie_pwm: source is ext_xtal (0), rate is 24000000
[ 0.000000] s5pv210: 37748736 bytes system memory reserved for mfc at 0x30d3d000
[ 0.000000] s5pv210: 37748736 bytes system memory reserved for mfc at 0x40204000
[ 0.000000] s5pv210: 6291456 bytes system memory reserved for fimc0 at 0x42604000
[ 0.000000] s5pv210: 10137600 bytes system memory reserved for fimc1 at 0x42c04000
[ 0.000000] s5pv210: 6291456 bytes system memory reserved for fimc2 at 0x435af000
[ 0.000000] s5pv210: 8388608 bytes system memory reserved for jpeg at 0x3313d000
[ 0.000000] s5pv210: 6144000 bytes system memory reserved for fimd at 0x43baf000
[ 0.000000] Built 3 zonelists in Zone order, mobility grouping on. Total pages: 117602
[ 0.000000] Kernel command line: console=ttySAC2,115200
[ 0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[ 0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[ 0.000000] Memory: 80MB 256MB 127MB = 463MB total
[ 0.000000] Memory: 346984k/346984k available, 127128k reserved, 0K highmem
[ 0.000000] Virtual kernel memory layout:
[ 0.000000] vector : 0xffff0000 - 0xffff1000 ( 4 kB)
[ 0.000000] fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB)
[ 0.000000] DMA : 0xff000000 - 0xffe00000 ( 14 MB)
[ 0.000000] vmalloc : 0xe8000000 - 0xfc000000 ( 320 MB)
[ 0.000000] lowmem : 0xc0000000 - 0xe7f00000 ( 639 MB)
[ 0.000000] modules : 0xbf000000 - 0xc0000000 ( 16 MB)
[ 0.000000] .init : 0xc0008000 - 0xc03a9000 (3716 kB)
[ 0.000000] .text : 0xc03a9000 - 0xc0b95000 (8112 kB)
[ 0.000000] .data : 0xc0b96000 - 0xc0bda160 ( 273 kB)
[ 0.000000] SLUB: Genslabs=9, HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=4
[ 0.000000] Hierarchical RCU implementation.
[ 0.000000] RCU-based detection of stalled CPUs is disabled.
[ 0.000000] Verbose stalled-CPUs detection is disabled.
[ 0.000000] NR_IRQS:393
[ 0.000000] VIC (at)fd000000: id 0x00041192, vendor 0x41
[ 0.000000] VIC (at)fd010000: id 0x00041192, vendor 0x41
[ 0.000000] VIC (at)fd020000: id 0x00041192, vendor 0x41
[ 0.000000] VIC (at)fd030000: id 0x00041192, vendor 0x41
[ 0.000000] mult[140737]
[ 0.000000] max_delta_ns[2937815369]
[ 0.000000] min_delta_ns[30517]
[ 0.000000] rate[32768]
[ 0.000000] HZ[256]
[ 0.000000] console [ttySAC2] enabled
[ 0.455739] Calibrating delay loop... 796.20 BogoMIPS (lpj=1556480)
[ 0.540206] pid_max: default: 32768 minimum: 301
[ 0.544870] Mount-cache hash table entries: 512
[ 0.549661] Initializing cgroup subsys debug
[ 0.553570] Initializing cgroup subsys cpuacct
[ 0.557981] Initializing cgroup subsys freezer
[ 0.562432] CPU: Testing write buffer coherency: ok
[ 0.569909] regulator: core version 0.5
[ 0.572450] NET: Registered protocol family 16
[ 0.584031] ram_console: got buffer at 57f00000, size ff000
[ 0.588250] ram_console: no valid data in buffer (sig = 0x00000000)
[ 1.104866] console [ram-1] enabled
[ 1.108336] S5PC110 Hardware version : EVT1
[ 1.112423] HWREV is 0x1
[ 1.115541] S3C Power Management, Copyright 2004 Simtec Electronics
[ 1.121160] pmstats at 57fff000
[ 1.125591] S5PV210: Initializing architecture
[ 1.129140] s3c24xx-pwm s3c24xx-pwm.0: tin at 66700000, tdiv at 66700000, tin=divclk, base 0
[ 1.137238] s3c24xx-pwm s3c24xx-pwm.1: tin at 66700000, tdiv at 66700000, tin=divclk, base 8
[ 1.145555] s3c24xx-pwm s3c24xx-pwm.2: tin at 66700000, tdiv at 66700000, tin=divclk, base 12
[ 1.154126] s3c24xx-pwm s3c24xx-pwm.3: tin at 66700000, tdiv at 66700000, tin=divclk, base 16
[ 1.162785] regulator: pd_audio_supply: 5000 mV normal
[ 1.167826] regulator: pd_cam_supply: 5000 mV normal
[ 1.172931] regulator: pd_tv_supply: 5000 mV normal
[ 1.177785] regulator: pd_lcd_supply: 5000 mV normal
[ 1.182888] regulator: pd_g3d_supply: 5000 mV normal
[ 1.187840] regulator: pd_mfc_supply: 5000 mV normal
[ 1.197902] bio: create slab <bio-0> at 0
[ 1.201261] SCSI subsystem initialized
[ 1.204718] i2c-gpio i2c-gpio.4: using pins 247 (SDA) and 246 (SCL)
[ 1.210784] i2c-gpio i2c-gpio.5: using pins 203 (SDA) and 204 (SCL)
[ 1.217504] machine_constraints_voltage: failed to apply 1200000uV constraint to VALIVE_1.2V
[ 1.225294] max8998-pmic max8998-pmic: regulator init failed
[ 1.231021] i2c-gpio i2c-gpio.6: using pins 206 (SDA) and 209 (SCL)
[ 1.237200] i2c-gpio i2c-gpio.7: using pins 201 (SDA) and 202 (SCL)
[ 1.243533] i2c-gpio i2c-gpio.9: using pins 245 (SDA) and 244 (SCL)
[ 1.249682] i2c-gpio i2c-gpio.11: using pins 114 (SDA) and 98 (SCL)
[ 1.256001] i2c-gpio i2c-gpio.12: using pins 173 (SDA) and 172 (SCL)
[ 1.262249] i2c-gpio i2c-gpio.10: using pins 197 (SDA) and 198 (SCL)
[ 1.268727] s3c-i2c s3c2440-i2c.0: i2c-0: S3C I2C adapter
[ 1.273915] s3c-i2c s3c2440-i2c.1: i2c-1: S3C I2C adapter
[ 1.279437] s3c-i2c s3c2440-i2c.2: i2c-2: S3C I2C adapter
[ 1.284883] Advanced Linux Sound Architecture Driver Version 1.0.23.
[ 1.291413] Bluetooth: Core ver 2.15
[ 1.294433] NET: Registered protocol family 31
[ 1.298876] Bluetooth: HCI device and connection manager initialized
[ 1.305125] Bluetooth: HCI socket layer initialized
[ 1.310212] Switching to clocksource clock_source_systimer
[ 1.316683] NET: Registered protocol family 2
[ 1.320110] IP route cache hash table entries: 4096 (order: 2, 16384 bytes)
[ 1.327730] TCP established hash table entries: 16384 (order: 5, 131072 bytes)
[ 1.334353] TCP bind hash table entries: 16384 (order: 6, 327680 bytes)
[ 1.341035] TCP: Hash tables configured (established 16384 bind 16384)
[ 1.347065] TCP reno registered
[ 1.350090] UDP hash table entries: 256 (order: 1, 12288 bytes)
[ 1.356103] UDP-Lite hash table entries: 256 (order: 1, 12288 bytes)
[ 1.362534] NET: Registered protocol family 1
[ 1.549897] wake enabled for irq 165
[ 1.552138] wake disabled for irq 165
[ 1.556364] S5PV210 ADC driver, (c) 2010 Samsung Electronics
[ 1.561906] Loaded driver for PL330 DMAC-0 s3c-pl330
[ 1.566323] DBUFF-64x8bytes Num_Chans-8 Num_Peri-2 Num_Events-32
[ 1.572556] Loaded driver for PL330 DMAC-1 s3c-pl330
[ 1.577324] DBUFF-8x4bytes Num_Chans-8 Num_Peri-32 Num_Events-32
[ 1.583553] Loaded driver for PL330 DMAC-2 s3c-pl330
[ 1.588325] DBUFF-8x4bytes Num_Chans-8 Num_Peri-32 Num_Events-32
[ 1.595637] ashmem: initialized
[ 1.597799] ROMFS MTD (C) 2007 Red Hat, Inc.
[ 1.601769] yaffs built Mar 26 2011 11:35:18 Installing.
[ 1.607240] msgmni has been set to 677
[ 1.614361] alg: No test for stdrng (krng)
[ 1.617249] io scheduler noop registered
[ 1.621010] io scheduler deadline registered
[ 1.625244] io scheduler cfq registered (default)
[ 1.630095] Unable to handle kernel NULL pointer dereference at virtual address 0000001d
[ 1.637976] pgd = c0004000
[ 1.640736] [0000001d] *pgd=00000000
[ 1.644189] Internal error: Oops: 5 [#1] PREEMPT
[ 1.648779] last sysfs file:
[ 1.651807] Modules linked in:
[ 1.654763] CPU: 0 Not tainted (2.6.35.7-gb0af48f-dirty #1)
[ 1.660668] PC is at regulator_enable+0xc/0x38
[ 1.665160] LR is at s3cfb_probe+0x114/0x948
[ 1.669323] pc : [<c051b700>] lr : [<c0724e4c>] psr: a0000013
[ 1.669330] sp : c4c19e38 ip : c4c19e50 fp : c4c19e4c
[ 1.680756] r10: 00000000 r9 : 00000000 r8 : 00000000
[ 1.686042] r7 : c0ba5d58 r6 : c0bc3cbc r5 : c0ba5d60 r4 : c4cfef00
[ 1.692456] r3 : c0bc3de8 r2 : c4c19da8 r1 : c4c59402 r0 : ffffffed
[ 1.699038] Flags: NzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment kernel
[ 1.706237] Control: 10c5387d Table: 30004019 DAC: 00000017
[ 1.712035]
[ 1.712039] PC: 0xc051b680:
[ 1.716198] b680 e2555001 1afffffb ea00000e e3560000 0a00000c e1a00006 ebff7557 ea000009
[ 1.724344] b6a0 e3500000 aa000007 e1a00004 ebfff64d e1a02000 e59f0034 e59f1024 e1a03005
[ 1.732488] b6c0 eb08381d ea000003 e5943004 e3a05000 e2833001 e5843004 e1a00005 e89da878
[ 1.740636] b6e0 c0b3de59 c0a3aa66 c0b3de79 10624a48 c0b3dea1 e1a0c00d e92dd830 e24cb004
[ 1.748780] b700 e5905030 e2854050 e1a00004 eb083ed6 e1a00005 ebffff8f e1a05000 e1a00004
[ 1.756925] b720 eb083e19 e1a00005 e89da830 e1a0c00d e92dddf0 e24cb004 e3a04000 e1a07000
[ 1.765072] b740 e1a06001 e1a08001 ea000006 e5980004 e1a0a008 ebffff71 e2888008 e2505000
[ 1.773216] b760 1a000004 e2844001 e1540007 bafffff6 e3a05000 ea00000c e59f0034 e1a02005
[ 1.781365]
[ 1.781368] LR: 0xc0724dcc:
[ 1.785691] 4dcc e59f0840 ea00000a ebf7da46 e3500000 aa00000a e594002c ebf8af91 e594302c
[ 1.793754] 4dec e593202c e3520000 05932008 e1a01000 e59f0814 eb00124d e3e05015 ea0001df
[ 1.801899] 4e0c e51b0030 e59f1804 ebf7dba4 e3500000 e5840038 1a000008 e594002c ebf8af80
[ 1.810048] 4e2c e594302c e593202c e3520000 05932008 e1a01000 e59f07d8 ea00000a ebf7da29
[ 1.818192] 4e4c e3500000 aa00000a e594002c ebf8af74 e594302c e593202c e3520000 05932008
[ 1.826338] 4e6c e1a01000 e59f07ac eb001230 e3e05015 ea0001c0 e51b0030 e59f179c ebf7db87
[ 1.834483] 4e8c e3500000 e584003c 1a000008 e594002c ebf8af63 e594302c e593202c e3520000
[ 1.842629] 4eac 05932008 e1a01000 e59f0770 ea00000a ebf7da0c e3500000 aa00000a e594002c
[ 1.850777]
[ 1.850780] SP: 0xc4c19db8:
[ 1.855102] 9db8 c0bc3de8 c0bc3de8 c4c59400 c0ba5d60 c4c19de4 ffffffff c4c19e24 c0bc3cbc
[ 1.863167] 9dd8 c0ba5d58 00000000 c4c19e4c c4c19df0 c03a9a6c c03a921c ffffffed c4c59402
[ 1.871313] 9df8 c4c19da8 c0bc3de8 c4cfef00 c0ba5d60 c0bc3cbc c0ba5d58 00000000 00000000
[ 1.879458] 9e18 00000000 c4c19e4c c4c19e50 c4c19e38 c0724e4c c051b700 a0000013 ffffffff
[ 1.887602] 9e38 c4cfef00 c0ba5d60 c4c19ea4 c4c19e50 c0724e4c c051b700 c4c19e8c c4c19e60
[ 1.895749] 9e58 c4c58690 00000000 c0ba5d60 c0ba5d68 00000000 c0bc3cbc 00000000 c0ba5d60
[ 1.903895] 9e78 c4c19e94 c0ba5d60 c0ba5d60 c0bc3cbc c0bc3cbc 00000000 00000000 00000000
[ 1.912042] 9e98 c4c19eb4 c4c19ea8 c05555c4 c0724d44 c4c19ed4 c4c19eb8 c0554650 c05555b4
[ 1.920189]
[ 1.920192] IP: 0xc4c19dd0:
[ 1.924434] 9dd0 c4c19e24 c0bc3cbc c0ba5d58 00000000 c4c19e4c c4c19df0 c03a9a6c c03a921c
[ 1.932579] 9df0 ffffffed c4c59402 c4c19da8 c0bc3de8 c4cfef00 c0ba5d60 c0bc3cbc c0ba5d58
[ 1.940725] 9e10 00000000 00000000 00000000 c4c19e4c c4c19e50 c4c19e38 c0724e4c c051b700
[ 1.948869] 9e30 a0000013 ffffffff c4cfef00 c0ba5d60 c4c19ea4 c4c19e50 c0724e4c c051b700
[ 1.957018] 9e50 c4c19e8c c4c19e60 c4c58690 00000000 c0ba5d60 c0ba5d68 00000000 c0bc3cbc
[ 1.965166] 9e70 00000000 c0ba5d60 c4c19e94 c0ba5d60 c0ba5d60 c0bc3cbc c0bc3cbc 00000000
[ 1.973307] 9e90 00000000 00000000 c4c19eb4 c4c19ea8 c05555c4 c0724d44 c4c19ed4 c4c19eb8
[ 1.981454] 9eb0 c0554650 c05555b4 c0ba5d60 c0ba5d94 c0bc3cbc 00000000 c4c19ef4 c4c19ed8
[ 1.989599]
[ 1.989602] FP: 0xc4c19dcc:
[ 1.993844] 9dcc ffffffff c4c19e24 c0bc3cbc c0ba5d58 00000000 c4c19e4c c4c19df0 c03a9a6c
[ 2.001992] 9dec c03a921c ffffffed c4c59402 c4c19da8 c0bc3de8 c4cfef00 c0ba5d60 c0bc3cbc
[ 2.010140] 9e0c c0ba5d58 00000000 00000000 00000000 c4c19e4c c4c19e50 c4c19e38 c0724e4c
[ 2.018285] 9e2c c051b700 a0000013 ffffffff c4cfef00 c0ba5d60 c4c19ea4 c4c19e50 c0724e4c
[ 2.026428] 9e4c c051b700 c4c19e8c c4c19e60 c4c58690 00000000 c0ba5d60 c0ba5d68 00000000
[ 2.034574] 9e6c c0bc3cbc 00000000 c0ba5d60 c4c19e94 c0ba5d60 c0ba5d60 c0bc3cbc c0bc3cbc
[ 2.042720] 9e8c 00000000 00000000 00000000 c4c19eb4 c4c19ea8 c05555c4 c0724d44 c4c19ed4
[ 2.050865] 9eac c4c19eb8 c0554650 c05555b4 c0ba5d60 c0ba5d94 c0bc3cbc 00000000 c4c19ef4
[ 2.059012]
[ 2.059015] R1: 0xc4c59382:
[ 2.063258] 9380 73627573 65747379 0000006d 000064e3 000064e5 000064e5 000064e7 000064e7
[ 2.071404] 93a0 000064e9 000064e9 000064eb 000064eb 000064ed 000064ed 000064ef 000064ef
[ 2.079549] 93c0 65776f70 00000072 000064f3 000064f3 000064f5 000064f5 000064f7 000064f7
[ 2.087694] 93e0 000064f9 000064f9 000064fb 000064fb 000064fd 000064fd 000064ff 000064ff
[ 2.095841] 9400 66633373 73650062 616c702f 726f6674 33732f6d 31343263 64772d30 00000074
[ 2.103986] 9420 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 2.112131] 9440 66633373 00000062 00006513 00006513 00006515 00006515 00006517 00006517
[ 2.120277] 9460 00006519 00006519 0000651b 0000651b 0000651d 0000651d 0000651f 0000651f
[ 2.128421] 9480 66633373 00000062 00006523 00006523 00006525 00006525 00006527 00006527
[ 2.136570]
[ 2.136573] R2: 0xc4c19d28:
[ 2.140815] 9d28 00000005 0000001d c4c19dec c4c19d40 c03a9248 c03b0a4c c072af9c c072ae70
[ 2.148960] 9d48 c4c19d94 c4c19d58 c04788f0 c072af98 c4c19d7c c45fec30 c0ba5d68 c45fec30
[ 2.157106] 9d68 c4c19d94 c4c19d78 c0478cc0 c0478bf8 c45fec30 c03f1b44 c0bc3df0 60000013
[ 2.165250] 9d88 c4c19dcc c4c19d98 c072b258 c0729fa4 22222222 22222222 c0bc3df0 c0bc3df0
[ 2.173398] 9da8 c4c19dd4 c4c19db8 c072af7c c0729fa4 c0bc3de8 c0bc3de8 c4c59400 c0ba5d60
[ 2.181543] 9dc8 c4c19de4 ffffffff c4c19e24 c0bc3cbc c0ba5d58 00000000 c4c19e4c c4c19df0
[ 2.189688] 9de8 c03a9a6c c03a921c ffffffed c4c59402 c4c19da8 c0bc3de8 c4cfef00 c0ba5d60
[ 2.197835] 9e08 c0bc3cbc c0ba5d58 00000000 00000000 00000000 c4c19e4c c4c19e50 c4c19e38
[ 2.205981]
[ 2.205985] R3: 0xc0bc3d68:
[ 2.210226] 3d68 c072900c 00000000 00000000 00000000 c0b3d8b9 00000000 00000000 00000000
[ 2.218373] 3d88 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 2.226517] 3da8 00000000 c0b21c20 00000000 00000000 c0bc3f9c c4c15100 00000000 00000000

No need to modify the kernel.
On the captivate you can get into the SBL prompt, then type
Code:
printenv
setenv SWITCH_SEL 6543
printenv
saveenv
This changes the SWITCH_SEL value from 65 to 6543 and enables extra output. This will give you a short debug kernel output and drop you into a shell prompt .

AdamOutler said:
No need to modify the kernel.
On the captivate you can get into the SBL prompt, then type
Code:
printenv
setenv SWITCH_SEL 6543
printenv
saveenv
This changes the SWITCH_SEL value from 65 to 6543 and enables extra output. This will give you a short debug kernel output and drop you into a shell prompt .
Click to expand...
Click to collapse
Thanks! That's very good to know. Can't wait to try it.

I've been getting pms about this so ill post this video here
This should give you an idea of how to get the able prompt.

Could I use this method to debrick my galaxy? or would that require a different connection type?

Actually a nice job you´ve done so far
This project waked up my interest into looking deeper into the device.

This thread made the front page today. http://www.xda-developers.com/android/self-made-uart-jig-and-debugging-connector-for-sgs-i9000/

yhbrandon said:
Could I use this method to debrick my galaxy? or would that require a different connection type?
Click to expand...
Click to collapse
It probably depends on how the device was bricked.
From the descriptions of some of the modes in the driver header, it looks like you can supply a new image to flash. But I don't know exactly how to set that up.
It certainly is possible to force Download Mode and do some other trickery that might be used to restore a "bricked" device.
However, this is not a JTAG and can't be used to reprogram the OneNAND or anything advanced like that.
Do have a look at the original posts linked up top, they've done some more research since I originally read them and there's some really cool information there.

I'm very interested now. I bricked my captivate a few months back. I was in my early newbie stages of loading rooms. My jig won't even get to the download mode.
More research and now I have a cm7 thunderbolt. Lesson learned.

Yea I was thinking the same thing. I have experience with jtaging an Xbox and things like that. Will try

Another EE, finally, been doing software so long, and it really hertz.
GJ though
GRADUATING WITH MY BSEE (BACHELORS OF SCIENCE IN ELECTRICAL ENGINEERING) IN 6 DAYS

I'm hoping that Samsung takes notice of this: http://forum.xda-developers.com/showthread.php?p=13847930#post13847930

AdamOutler said:
I'm hoping that Samsung takes notice of this: http://forum.xda-developers.com/showthread.php?p=13847930#post13847930
Click to expand...
Click to collapse
Fantastic. I really hope that they respond, though my experience with Samsung so far doesn't leave me optimistic.

UART Output / Bootloader Hacking / Kernel Debuging

Hey guys, I set up my Arduino Mega to communicate via UART with my Infuse4g.
The UART output comes out of the USB port at 115200kbps on the D+ and D- lines when you connect a 619kOhm resistor to USB Pins 4 and 5. It can be used for kernel debugging or general hacking around.
Here's some pics of my setup.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
This emulates the "Test Board" from the KIT-S5PC110 which is used to develop the Aeries platform
You can make it do all kinds of crazy stuff....
Typical boot with battery just inserted.
Code:
1
-----------------------------------------------------------
Samsung Primitive Bootloader (PBL) v3.0
Copyright (C) Samsung Electronics Co., Ltd. 2006-2010
-----------------------------------------------------------
+n1stVPN 2688
+nPgsPerBlk 64
PBL found bootable SBL: Partition(3).
MAX8893_REG_ONOFF return val 1
MAX8893_REG_DISCHARGE return val ff
MAX8893_REG_LSTIME return val 8
MAX8893_REG_DVSRAMP return val 9
MAX8893_REG_BUCK return val 4
MAX8893_REG_LDO1 return val e
MAX8893_REG_LDO1 new val e
MAX8893_REG_LDO2 return val 10
MAX8893_REG_LDO2 new val 10
MAX8893_REG_ONOFF return val 1
MAX8893_REG_ONOFF new val 21
MAX8893_REG_ONOFF return val 21
MAX8893_REG_ONOFF new val 31
Set cpu clk. from 400MHz to 800MHz.
OM=0x9, device=OnenandMux(Audi)
IROM e-fused - Non Secure Boot Version.
-----------------------------------------------------------
Samsung Secondary Bootloader (SBL) v3.0
Copyright (C) Samsung Electronics Co., Ltd. 2006-2010
Board Name: ARIES REV 03
Build On: May 19 2011 22:17:14
-----------------------------------------------------------
Re_partition: magic code(0x0)
[PAM: ] ++FSR_PAM_Init
[PAM: ] OneNAND physical base address : 0xb0000000
[PAM: ] OneNAND virtual base address : 0xb0000000
[PAM: ] OneNAND nMID=0xec : nDID=0x50
[PAM: ] --FSR_PAM_Init
fsr_bml_load_partition: pi->nNumOfPartEntry = 12
partitions loading success
board partition information update.. source: 0x0
Now Read Images - ID : 1
.Done.
read 1 units.
==== PARTITION INFORMATION ====
ID : IBL+PBL (0x0)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 0
NO_UNITS : 1
===============================
ID : PIT (0x1)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 1
NO_UNITS : 1
===============================
ID : EFS (0x14)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 2
NO_UNITS : 40
===============================
ID : SBL (0x3)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 42
NO_UNITS : 5
===============================
ID : SBL2 (0x4)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 47
NO_UNITS : 5
===============================
ID : PARAM (0x15)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 52
NO_UNITS : 20
===============================
ID : KERNEL (0x6)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 72
NO_UNITS : 30
===============================
ID : RECOVERY (0x7)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 102
NO_UNITS : 30
===============================
ID : FACTORYFS (0x16)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 132
NO_UNITS : 1146
===============================
ID : DBDATAFS (0x17)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 1278
NO_UNITS : 536
===============================
ID : CACHE (0x18)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 1814
NO_UNITS : 130
===============================
ID : MODEM (0xb)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 1944
NO_UNITS : 60
===============================
loke_init: j4fs_open success..
load_lfs_parameters valid magic code and version.
reading nps status file is successfully!.
nps status=0x504d4f43
load_debug_level reading debug level from file successfully(0x574f4c44).
init_fuel_gauge: vcell = 3797mV, soc = 57
check_quick_start_condition- Voltage: 3797.50000, Linearized[45/60/75], Capacity: 59
init_fuel_gauge: vcell = 3797mV, soc = 57, rcomp = d01f
reading nps status file is successfully!.
nps status=0x504d4f43
PMIC_IRQ1 = 0x20
PMIC_IRQ2 = 0x0
PMIC_IRQ3 = 0x0
PMIC_IRQ4 = 0x0
PMIC_STATUS1 = 0x40
PMIC_STATUS2 = 0x0
get_debug_level current debug level is 0x574f4c44.
aries_process_platform: Debug Level Low
keypad_scan: key value ----------------->= 0x0
CONFIG_ARIES_REV:48 , CONFIG_ARIES_REV03:48
check_download: micorusb_status1 = 400, key_value = 0
aries_process_platform: final s1 booting mode = 0
DISPLAY_PATH_SEL[MDNIE 0x1]is on
MDNIE setting Init start!!
vsync interrupt is off
video interrupt is off
[fb0] turn on
MDNIE setting Init end!!
lcd_power_on_ld9040
s6e63m0_c110_spi_read_byte-------------------------: 86
DA lcd ID1 = 86
s6e63m0_c110_spi_read_byte-------------------------: 48
DB lcd ID2 = 48
s6e63m0_c110_spi_read_byte-------------------------: 44
DC lcd ID3 = 44
LCD_ID == 3
Autoboot (0 seconds) in progress, press any key to stop
get_debug_level current debug level is 0x574f4c44.
get_debug_level current debug level is 0x574f4c44.
boot_kernel: Debug Level Low
FOTA Check Bit
Read BML page=, NumPgs=
FOTA Check Bit (0xffffffff)
Load Partion idx = (6)
..............................done
Kernel read success from kernel partition no.6, idx.6.
setting param.serialnr=hex value hex value
setting param.board_rev=0x30
setting param.cmdline=console=ttySAC2,115200 loglevel=4
Starting kernel at 0x32000000...
0xF8
AST_POWERON
BOOTING COMPLETED

held enter while booting UART
Code:
Copyright (C) Samsung Electronics Co., Ltd. 2006-2010
-----------------------------------------------------------
+n1stVPN 2688
+nPgsPerBlk 64
PBL found bootable SBL: Partition(3).
MAX8893_REG_ONOFF return val 1
MAX8893_REG_DISCHARGE return val ff
MAX8893_REG_LSTIME return val 8
MAX8893_REG_DVSRAMP return val 9
MAX8893_REG_BUCK return val 2
MAX8893_REG_LDO1 return val 2
MAX8893_REG_LDO1 new val e
MAX8893_REG_LDO2 return val e
MAX8893_REG_LDO2 new val 10
MAX8893_REG_ONOFF return val 1
MAX8893_REG_ONOFF new val 21
MAX8893_REG_ONOFF return val 21
MAX8893_REG_ONOFF new val 31
Set cpu clk. from 400MHz to 800MHz.
OM=0x9, device=OnenandMux(Audi)
IROM e-fused - Non Secure Boot Version.
-----------------------------------------------------------
Samsung Secondary Bootloader (SBL) v3.0
Copyright (C) Samsung Electronics Co., Ltd. 2006-2010
Board Name: ARIES REV 03
Build On: May 19 2011 22:17:14
-----------------------------------------------------------
Re_partition: magic code(0x0)
[PAM: ] ++FSR_PAM_Init
[PAM: ] OneNAND physical base address : 0xb0000000
[PAM: ] OneNAND virtual base address : 0xb0000000
[PAM: ] OneNAND nMID=0xec : nDID=0x50
[PAM: ] --FSR_PAM_Init
fsr_bml_load_partition: pi->nNumOfPartEntry = 12
partitions loading success
board partition information update.. source: 0x0
Now Read Images - ID : 1
.Done.
read 1 units.
==== PARTITION INFORMATION ====
ID : IBL+PBL (0x0)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 0
NO_UNITS : 1
===============================
ID : PIT (0x1)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 1
NO_UNITS : 1
===============================
ID : EFS (0x14)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 2
NO_UNITS : 40
===============================
ID : SBL (0x3)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 42
NO_UNITS : 5
===============================
ID : SBL2 (0x4)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 47
NO_UNITS : 5
===============================
ID : PARAM (0x15)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 52
NO_UNITS : 20
===============================
ID : KERNEL (0x6)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 72
NO_UNITS : 30
===============================
ID : RECOVERY (0x7)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 102
NO_UNITS : 30
===============================
ID : FACTORYFS (0x16)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 132
NO_UNITS : 1146
===============================
ID : DBDATAFS (0x17)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 1278
NO_UNITS : 536
===============================
ID : CACHE (0x18)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 1814
NO_UNITS : 130
===============================
ID : MODEM (0xb)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 1944
NO_UNITS : 60
===============================
loke_init: j4fs_open success..
load_lfs_parameters valid magic code and version.
reading nps status file is successfully!.
nps status=0x504d4f43
load_debug_level reading debug level from file successfully(0x574f4c44).
init_fuel_gauge: vcell = 3777mV, soc = 48
check_quick_start_condition- Voltage: 3777.50000, Linearized[41/56/71], Capacity: 49
init_fuel_gauge: vcell = 3777mV, soc = 48, rcomp = d01f
reading nps status file is successfully!.
nps status=0x504d4f43
PMIC_IRQ1 = 0x30
PMIC_IRQ2 = 0x0
PMIC_IRQ3 = 0x0
PMIC_IRQ4 = 0x0
PMIC_STATUS1 = 0x40
PMIC_STATUS2 = 0x0
get_debug_level current debug level is 0x574f4c44.
aries_process_platform: Debug Level Low
keypad_scan: key value ----------------->= 0x0
CONFIG_ARIES_REV:48 , CONFIG_ARIES_REV03:48
check_download: micorusb_status1 = 400, key_value = 0
aries_process_platform: final s1 booting mode = 0
DISPLAY_PATH_SEL[MDNIE 0x1]is on
MDNIE setting Init start!!
vsync interrupt is off
video interrupt is off
[fb0] turn on
MDNIE setting Init end!!
lcd_power_on_ld9040
s6e63m0_c110_spi_read_byte-------------------------: 86
DA lcd ID1 = 86
s6e63m0_c110_spi_read_byte-------------------------: 48
DB lcd ID2 = 48
s6e63m0_c110_spi_read_byte-------------------------: 44
DC lcd ID3 = 44
LCD_ID == 3
Autoboot (0 seconds) in progress, press any key to stop Autoboot aborted..
SBL>
SBL>
SBL>
SBL>
SBL>
SBL>
SBL>
SBL>
SBL>
SBL>
SBL>
SBL Prompt
Code:
SBL> printenv
PARAM Rev 1.3
SERIAL_SPEED : 7
LOAD_RAMDISK : 0
BOOT_DELAY : 0
LCD_LEVEL : 97
SWITCH_SEL : 65
PHONE_DEBUG_ON : 0
LCD_DIM_LEVEL : 0
LCD_DIM_TIME : 6
MELODY_MODE : 1
REBOOT_MODE : 0
NATION_SEL : 0
LANGUAGE_SEL : 0
SET_DEFAULT_PARAM : 0
PARAM_INT_13 : 0
PARAM_INT_14 : 0
VERSION : I9000XXIL
CMDLINE : console=ttySAC2,115200 loglevel=4
DELTA_LOCATION : /mnt/rsv
PARAM_STR_3 :
PARAM_STR_4 :
SBL> setenv SWITCH_SEL 6543
argv[0] : setenv
argv[1] : SWITCH_SEL
argv[2] : 6543
value : 6543
SBL> reboot
command_loop: parse command error! (reboot)
SBL> reset
Rebooting...
SB1
-----------------------------------------------------------
Samsung Primitive Bootloader (PBL) v3.0
Copyright (C) Samsung Electronics Co., Ltd. 2006-2010
-----------------------------------------------------------
+n1stVPN 2688
+nPgsPerBlk 64
PBL found bootable SBL: Partition(3).
MAX8893_REG_ONOFF return val 31
MAX8893_REG_DISCHARGE return val ff
MAX8893_REG_LSTIME return val 8
MAX8893_REG_DVSRAMP return val 9
MAX8893_REG_BUCK return val 2
MAX8893_REG_LDO1 return val e
MAX8893_REG_LDO1 new val e
MAX8893_REG_LDO2 return val 10
MAX8893_REG_LDO2 new val 10
MAX8893_REG_ONOFF return val 31
MAX8893_REG_ONOFF new val 31
MAX8893_REG_ONOFF return val 31
MAX8893_REG_ONOFF new val 31
Set cpu clk. from 400MHz to 800MHz.
OM=0x9, device=OnenandMux(Audi)
IROM e-fused - Non Secure Boot Version.
-----------------------------------------------------------
Samsung Secondary Bootloader (SBL) v3.0
Copyright (C) Samsung Electronics Co., Ltd. 2006-2010
Board Name: ARIES REV 03
Build On: May 19 2011 22:17:14
-----------------------------------------------------------
Re_partition: magic code(0x0)
[PAM: ] ++FSR_PAM_Init
[PAM: ] OneNAND physical base address : 0xb0000000
[PAM: ] OneNAND virtual base address : 0xb0000000
[PAM: ] OneNAND nMID=0xec : nDID=0x50
[PAM: ] --FSR_PAM_Init
fsr_bml_load_partition: pi->nNumOfPartEntry = 12
partitions loading success
board partition information update.. source: 0x0
Now Read Images - ID : 1
.Done.
read 1 units.
==== PARTITION INFORMATION ====
ID : IBL+PBL (0x0)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 0
NO_UNITS : 1
===============================
ID : PIT (0x1)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 1
NO_UNITS : 1
===============================
ID : EFS (0x14)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 2
NO_UNITS : 40
===============================
ID : SBL (0x3)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 42
NO_UNITS : 5
===============================
ID : SBL2 (0x4)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 47
NO_UNITS : 5
===============================
ID : PARAM (0x15)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 52
NO_UNITS : 20
===============================
ID : KERNEL (0x6)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 72
NO_UNITS : 30
===============================
ID : RECOVERY (0x7)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 102
NO_UNITS : 30
===============================
ID : FACTORYFS (0x16)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 132
NO_UNITS : 1146
===============================
ID : DBDATAFS (0x17)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 1278
NO_UNITS : 536
===============================
ID : CACHE (0x18)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 1814
NO_UNITS : 130
===============================
ID : MODEM (0xb)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 1944
NO_UNITS : 60
===============================
loke_init: j4fs_open success..
load_lfs_parameters valid magic code and version.
reading nps status file is successfully!.
nps status=0x504d4f43
load_debug_level reading debug level from file successfully(0x574f4c44).
init_fuel_gauge: vcell = 3768mV, soc = 48
check_quick_start_condition- Voltage: 3768.75000, Linearized[40/55/70], Capacity: 49
init_fuel_gauge: vcell = 3768mV, soc = 48, rcomp = d01f
reading nps status file is successfully!.
nps status=0x504d4f43
PMIC_IRQ1 = 0x0
PMIC_IRQ2 = 0x0
PMIC_IRQ3 = 0x0
PMIC_IRQ4 = 0x0
PMIC_STATUS1 = 0x40
PMIC_STATUS2 = 0x0
get_debug_level current debug level is 0x574f4c44.
aries_process_platform: Debug Level Low
keypad_scan: key value ----------------->= 0x0
CONFIG_ARIES_REV:48 , CONFIG_ARIES_REV03:48
check_download: micorusb_status1 = 400, key_value = 0
aries_process_platform: final s1 booting mode = 0
DISPLAY_PATH_SEL[MDNIE 0x1]is on
MDNIE setting Init start!!
vsync interrupt is off
video interrupt is off
[fb0] turn on
MDNIE setting Init end!!
lcd_power_on_ld9040
s6e63m0_c110_spi_read_byte-------------------------: 86
DA lcd ID1 = 86
s6e63m0_c110_spi_read_byte-------------------------: 48
DB lcd ID2 = 48
s6e63m0_c110_spi_read_byte-------------------------: 44
DC lcd ID3 = 44
LCD_ID == 3
Autoboot (0 seconds) in progress, press any key to stop
get_debug_level current debug level is 0x574f4c44.
get_debug_level current debug level is 0x574f4c44.
boot_kernel: Debug Level Low
FOTA Check Bit
Read BML page=, NumPgs=
FOTA Check Bit (0xffffffff)
Load Partion idx = (6)
..............................done
Kernel read success from kernel partition no.6, idx.6.
setting param.serialnr=serial number.....
setting param.board_rev=0x30
setting param.cmdline=console=ttySAC2,115200 loglevel=4
Starting kernel at 0x32000000...
0xF8
AST_POWERON
BOOTING COMPLETED

All commands available at SBL Prompt.
Code:
SBL> help
Following commands are supported:
* setenv
* saveenv
* printenv
* help
* reset
* boot
* kernel
* format
* open
* close
* erasepart
* eraseall
* loadkernel
* showpart
* addpart
* delpart
* savepart
* nkernel
* nramdisk
* nandread
* nandwrite
* usb
* mmctest
* keyread
* readadc
* usb_read
* usb_write
* fuelgauge
* pmic_read
* pmic_write
To get commands help, Type "help <command>"
SBL> help setenv
* Help : setenv
* Usage : setenv [name] [value] . .
Modify current environment info on ram
SBL> help saveenv
* Help : saveenv
* Usage : saveenv
Save cuurent environment info to flash
SBL> help printenv
* Help : printenv
* Usage : printenv
Print current environment info on ram
SBL> help reset
* Help : reset
* Usage : reboot
Reboot system
SBL> help boot
* Help : boot
* Usage : boot [kernel options]
Boot Linux with optional kernel options
SBL> help kernel
* Help : kernel
* Usage : kernel hex_adr
Change the Linux kernel base
SBL> help format
* Help : format
* Usage : format
format device
SBL> help open
* Help : open
* Usage : open
open device
SBL> help close
* Help : close
* Usage : close
close device
SBL> help erasepart
* Help : erasepart
* Usage : erasepart partition_id
erase part of units
- ex) erase 0x9(temp partition)
SBL> help eraseall
* Help : eraseall
* Usage : eraseall
erase all units
SBL> help loadkernel
* Help : loadkernel
* Usage : loadkernel
load kernel image
- loadkernel 0x80A00000 from kernel partition
SBL> help showpart
* Help : showpart
* Usage : showpart
show partition information
SBL> help addpart
* Help : addpart
* Usage : addpart <id> <attr> <unit>
add partition information
- ex) addpart 0x(id) 0x1(attr) 0x10(units)
SBL> help delpart
* Help : delpart
* Usage : delpart
delete last partition information
SBL> help savepart
* Help : savepart
* Usage : savepart
save partition information
SBL> help nkernel
* Help : nkernel
* Usage : nkernel command
* Usage : nkernel
read kernel from flash to DDR
SBL> help nramdisk
* Help : nramdisk
* Usage : nramdisk command
* Usage : nramdisk
read ramdisk from flash to DDR
SBL> help nandread
* Help : nandread
* Usage : * Usage : nandread <PARTID> <SIZE>
read partition from flash to SDRAM(0x80000000)
SBL> help nandwrite
* Help : nandwrite
* Usage : * Usage: nandwrite <PARTID> <SIZE>
write partition from SDRAM(0x80000000) to flash
SBL> help usb
* Help : usb
* Usage : usb download command
SBL> help mmctest
* Help : mmctest
* Usage : *Usage : mmctest
SBL> help keyread
* Help : keyread
* Usage : *Usage : keyread
SBL> help readadc
* Help : readadc
* Usage : *Usage : readadc <channel>
SBL> help usb_read
* Help : usb_read
* Usage : usb_read reg
Read the usb ic register
SBL> help usb_write
* Help : usb_write
* Usage : usb_write reg, val
Read the usb ic register
SBL> help fuelgauge
* Help : fuelgauge
* Usage : *usage : fuelgauge
SBL> help pmic_read
* Help : pmic_read
* Usage : pmic_read reg
Read the pmic register
SBL> help pmic_write
* Help : pmic_write
* Usage : pmic_write reg, val
Read the pmic register
SBL> printenv
PARAM Rev 1.3
SERIAL_SPEED : 7
LOAD_RAMDISK : 0
BOOT_DELAY : 0
LCD_LEVEL : 97
SWITCH_SEL : 65
PHONE_DEBUG_ON : 0
LCD_DIM_LEVEL : 0
LCD_DIM_TIME : 6
MELODY_MODE : 1
REBOOT_MODE : 0
NATION_SEL : 0
LANGUAGE_SEL : 0
SET_DEFAULT_PARAM : 0
PARAM_INT_13 : 0
PARAM_INT_14 : 0
VERSION : I9000XXIL
CMDLINE : console=ttySAC2,115200 loglevel=4
DELTA_LOCATION : /mnt/rsv
PARAM_STR_3 :
PARAM_STR_4 :
SBL> showpart
board partition information update.. source: 0x0
Now Read Images - ID : 1
.Done.
read 1 units.
==== PARTITION INFORMATION ====
ID : IBL+PBL (0x0)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 0
NO_UNITS : 1
===============================
ID : PIT (0x1)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 1
NO_UNITS : 1
===============================
ID : EFS (0x14)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 2
NO_UNITS : 40
===============================
ID : SBL (0x3)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 42
NO_UNITS : 5
===============================
ID : SBL2 (0x4)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 47
NO_UNITS : 5
===============================
ID : PARAM (0x15)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 52
NO_UNITS : 20
===============================
ID : KERNEL (0x6)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 72
NO_UNITS : 30
===============================
ID : RECOVERY (0x7)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 102
NO_UNITS : 30
===============================
ID : FACTORYFS (0x16)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 132
NO_UNITS : 1146
===============================
ID : DBDATAFS (0x17)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 1278
NO_UNITS : 536
===============================
ID : CACHE (0x18)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 1814
NO_UNITS : 130
===============================
ID : MODEM (0xb)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 1944
NO_UNITS : 60
===============================
SBL> mmctest
Enable Movinand
[set_mmc_ocr] Sector Mode
[hsmmc_init] MMC card is detected
Product Name : MAG4FA
<display_card_info:935> ext_csd
<display_card_info:937>card_size: 15264
Total Card Size: 15265 MByte
SBL> keyread
keyread: row(0) col(0) read key value = 0x1
keyread: row(1) col(0) read key value = 0x2
SBL> pmic_read
---------read pmic register : multiple
(0x0 : 0x0), (0x1 : 0x0), (0x2 : 0x0), (0x3 : 0x0),
(0x4 : 0x0), (0x5 : 0xf0), (0x6 : 0x0), (0x7 : 0x0),
(0x8 : 0x40), (0x9 : 0x0), (0xa : 0xff), (0xb : 0xff),
(0xc : 0xa), (0xd : 0x80), (0xe : 0xff), (0xf : 0xff),
(0x10 : 0x3f), (0x11 : 0xef), (0x12 : 0x78), (0x13 : 0x10),
(0x14 : 0xbb), (0x15 : 0x12), (0x16 : 0x12), (0x17 : 0x12),
(0x18 : 0x12), (0x19 : 0xe), (0x1a : 0xe), (0x1b : 0x2),
(0x1c : 0x4), (0x1d : 0x86), (0x1e : 0x11), (0x1f : 0xc),
(0x20 : 0x2), (0x21 : 0x2), (0x22 : 0x30), (0x23 : 0xac),
(0x24 : 0x4), (0x25 : 0x14), (0x26 : 0x6), (0x27 : 0x10),
(0x28 : 0x2), (0x29 : 0xe), (0x2a : 0x31), (0x2b : 0x17),
This is what happens when you go into download mode... this occurs near the end of the SBL.
Code:
SBL> usb
reading nps status file is successfully!.
nps status=0x504d4f43
==> Welcome to ARIES!
==> Entering usb download mode..
DISPLAY_PATH_SEL[MDNIE 0x1]is on
MDNIE setting Init start!!
vsync interrupt is off
video interrupt is off
[fb0] turn on
MDNIE setting Init end!!
lcd_power_on_ld9040
s6e63m0_c110_spi_read_byte-------------------------: 86
DA lcd ID1 = 86
s6e63m0_c110_spi_read_byte-------------------------: 48
DB lcd ID2 = 48
s6e63m0_c110_spi_read_byte-------------------------: 44
DC lcd ID3 = 44
LCD_ID == 3

Really man...have you already taken this thing apart?
Sent from my SGH-I897 using XDA Premium App

and here's the kernel debugging.... in case the kernel locks up during boot and Android will not function correctly, it provides a shell. Authorize ahead of time so that you can use Super User.
The settings in SBL prompt are
Code:
setenv SWITCH_SEL 6543
setenv PHONE_DEBUG_ON 1
saveenv
This can be very useful for kernel devlopers
Code:
Starting kernel at 0x32000000...
Uncompressing Linux...................................................................................................................................................................................
[ 0.000000] copy: bad source 0
[ 0.000000] mout_audss: bad source 0
[ 0.090142] KERNEL:kernel_sec_get_debug_level_from_boot=0x574f4c44
[ 0.094877] KERNEL:magic_number=0x0 DEBUG LEVEL low!!
[ 0.099895] (kernel_sec_set_upload_cause) : upload_cause set 0
[ 5.833835] init: cannot find '/system/etc/install-recovery.sh', disabling 'flash_recovery'
sh: can't access tty; job control turned off
$ [ 11.433364] init: no such service 'bootanim'
[ 24.851663] init: sys_prop: permission denied uid:1000 name:wifi.interface
[ 35.227503] init: no such service 'bootanim'
[ 38.484304] init: sys_prop: permission denied uid:1000 name:dpm.allowcamera
su
sh: can't access tty; job control turned off
# dmesg|tail
<4>[ 47.443068] [email protected]
<4>[ 51.363390] mook - wm8994 TTY Off
<4>[ 51.666438] eth0: SIOCSIWSCAN : ISCAN
<4>[ 51.667822] +++: Set Broadcast ISCAN
<4>[ 53.013468] [email protected]
<4>[ 54.447852] Send Event ISCAN complete
<4>[ 54.448053] eth0 wl_iw_iscan_get_scan buflen_from_user 8192:
<4>[ 54.448067] eth0: SIOCGIWSCAN GET broadcast results
<4>[ 54.448111] wl_iw_iscan_get_scan return to WE 803 bytes APs=3
<4>[ 84.445803] wl_iw_set_ss_cache_timer_flag called
#
Looks like samsung has an autorun to reflash the recovery partition at /system/etc/install-recovery.sh

bulletproof1013 said:
Really man...have you already taken this thing apart?
Sent from my SGH-I897 using XDA Premium App
Click to expand...
Click to collapse
No, and I don't plan on it unless I have a problem that requires me to take it apart. Apparently this phone does not have bricking problems with people porting bootloaders from other devices.

I can see this being very handy indeed. Running kernels blind, having to get to at least ADB is a real pain. At least we now know this method works for the Infuse.

No bricking problems? Really?
Sent from my SGH-I897 using XDA Premium App

AdamOutler said:
No, and I don't plan on it unless I have a problem that requires me to take it apart. Apparently this phone does not have bricking problems with people porting bootloaders from other devices.
Click to expand...
Click to collapse
No bricking problems b/c we can't flash bootloaders haha. Well actually there is a way, but the only person to try said way bricked.

That's because the bootloaders are lock. well not motorola lock. I've read some where in the Galaxy tab 10.1 forum that Samsung had to lock the bootloaders because of copyright issues with media hub. if thats true Roger infuse don't offer media hub and the bootloaders for that phone are not lock. we got an update for the tab 10.1 that lock the bootloaders and the tab offer media hub could be true since Samsung are not known for locking them. I could be wrong.
Sent from my SAMSUNG-SGH-I997 using XDA Premium App

gtg465x said:
No bricking problems b/c we can't flash bootloaders haha. Well actually there is a way, but the only person to try said way bricked.
Click to expand...
Click to collapse
*raises hand* hehe
But I'm wondering if accessing the phone via UART would work with a device that's hardbricked as bad as that was? Too late to test now, it's already in the mail. ... unless I were to try flashing bootloaders like we did before? hehe

Aou said:
*raises hand* hehe
But I'm wondering if accessing the phone via UART would work with a device that's hardbricked as bad as that was? Too late to test now, it's already in the mail. ... unless I were to try flashing bootloaders like we did before? hehe
Click to expand...
Click to collapse
I have JTAG capabilities if you want to test.
You can get into download mode as long as you have SBL.
I've worked on and developed a way to turn Captivate into KIT-S5PC110 (the aeries development platform)... http://forum.xda-developers.com/showthread.php?t=1206216 It may be possible on this device.... I'm still working on my captivate.

AdamOutler said:
I have JTAG capabilities if you want to test.
You can get into download mode as long as you have SBL.
I've worked on and developed a way to turn Captivate into KIT-S5PC110 (the aeries development platform)... http://forum.xda-developers.com/showthread.php?t=1206216 It may be possible on this device.... I'm still working on my captivate.
Click to expand...
Click to collapse
Thanks, but the dead phone is gone and in the mail. I'd rather not void a warranty on this device by using JTAG. That device would not even go to download mode when using a JIG. Even the battery charging screen was gone. It was a hard brick.

AdamOutler said:
I have JTAG capabilities if you want to test.
You can get into download mode as long as you have SBL.
I've worked on and developed a way to turn Captivate into KIT-S5PC110 (the aeries development platform)... http://forum.xda-developers.com/showthread.php?t=1206216 It may be possible on this device.... I'm still working on my captivate.
Click to expand...
Click to collapse
Since you have JTAG capabilities there should be no risk of bricking. Maybe you can experiment with bootloader flashing on this phone. I can link you to gb bootloaders and custom bmlwriter flashing program if you're interested.

gtg465x said:
Since you have JTAG capabilities there should be no risk of bricking. Maybe you can experiment with bootloader flashing on this phone. I can link you to gb bootloaders and custom bmlwriter flashing program if you're interested.
Click to expand...
Click to collapse
Did you ever get a copy of BML5 from a Rogers device?

Aou said:
Did you ever get a copy of BML5 from a Rogers device?
Click to expand...
Click to collapse
Yes, but there's a bit of a problem with that. The dump of bml5 was blank. We aren't entirely sure what's going on with our bootloaders, thus the need for someone with a JTAG to test crazy ass shiz.
edit: Although it's not a pressing issue now that we have a kernel workaround for no GB bootloaders.

gtg465x said:
Since you have JTAG capabilities there should be no risk of bricking. Maybe you can experiment with bootloader flashing on this phone. I can link you to gb bootloaders and custom bmlwriter flashing program if you're interested.
Click to expand...
Click to collapse
I just gave you 1001 thanks! lol.
Just because you have a JTAG writer does not mean it's easy to JTAG a device. I would test with bootloaders if something required it, however it's not a good idea to go flashing random bootloaders ever... Only if required.
The proper way is to rework the kernel like you did.

Well, thanks to your original post, I was able to get something from the UART on my Infuse. Unfortunately, it's all garbage. Are you using a standard RS-232 connection, or TTL 5v connection? If using TTL 5v, would it be possible to use a TTL 3.3v? This is what I'm getting in putty:
½^ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZÚ¯¿¿¿Y=%#1¿_¿{!!'!=7/¿¯y*¿Y=%#1¿u'59¿y!£§¿g7£¿¥ë奥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥¥ëåëåj¤t4õ5ý¿¿¿¿¿¿¿ëåj¤Ê_5')¿¿¿¿¿ëåµ--!#¯*£ëåßg
(repeats). I get a whole new set of garbage when I put int he battery. It all looks like your video on youtube with the captivate, but it's just all garbage. I tracked down another forum post where you were getting garbage also, but then never posted the resolution.
Any help would be awesome. Thanks!

gtg465x said:
Since you have JTAG capabilities there should be no risk of bricking. Maybe you can experiment with bootloader flashing on this phone. I can link you to gb bootloaders and custom bmlwriter flashing program if you're interested.
Click to expand...
Click to collapse
I don't think he's got JTAG capabilities on the phone yet, and probably won't until he REALLY needs them.
Getting JTAG capability requires soldering a connector to the board permanently or semi-permanently, or soldering individual wires to the board only for the flash process. No one has been able to figure out any compression-spring/pogo-pin contact approach, the connector pad pitch is just too damn small.
Otherwise I'd probably have JTAG capability too. If not for the connector issue I'd be experimenting with a Bus Blaster v2.

Entropy512 said:
I don't think he's got JTAG capabilities on the phone yet, and probably won't until he REALLY needs them.
Getting JTAG capability requires soldering a connector to the board permanently or semi-permanently, or soldering individual wires to the board only for the flash process. No one has been able to figure out any compression-spring/pogo-pin contact approach, the connector pad pitch is just too damn small.
Otherwise I'd probably have JTAG capability too. If not for the connector issue I'd be experimenting with a Bus Blaster v2.
Click to expand...
Click to collapse
I can put the connector on.. assuming its 12 pin plus 4 mounting pads? I have them in stock. Its not a problem for me to solder them. I can do it.
Does anyone have some tech porn of this board, or disassembly instructions?

[Heimdall] Repartitioning Problem. C++ Developers required. Offering UnBrickable Mod.

I'm here to recruit help from XDA-Developers for open-source development. I can offer UnBrickable Mod to any Developer who thinks they can help with this C++ issue. This will allow you to play with Loki (the device's side of Odin/Heimdall) and not worry about it.
The only thing keeping the Linux and Mac platforms from being better then Windows at developing ROMs and other firmware is Heimdall's ability to repartition. Once this barrier is broken down, we will have an entire open source chain for developing and Linux will be the premeire platform for developing on Samsung devices. There will be no reason to use Closed Source Windows, Odin, or Samsung Drivers... This is the last barrier.
I am offering debug logs which show the UART output during the flashing of Heimdall and Odin.
here are Heimdall logs/uart logs: http://pastebin.com/srhG7yJA
here are Odin Uart Logs: http://pastebin.com/AiKspmxR UART coming soon.
Here are both Heimdall and Odin USB logs via Wireshark.
http://www.mediafire.com/file/2wccdcuf87q2i3l/odinheimdallUSBLog.zip
Benjamin Dobell has set up code for Heimdall here: https://github.com/Benjamin-Dobell/Heimdall/
This is not a bounty thread. It is an open source development/improvement thread. I have spoken to Benjamin Dobell, the creator of Heimdall, and he is too busy with a new job and working loads of overtime hours. He has approved of this action. Fixing this issue with Heimdall will allow the entire Samsung community to utilize Heimdall as a total replacement for Odin on all platforms.
What's my role/interest in this? I want Linux to be as good or better then Windows.. I'm an Open Source guy. I'm also not good at C++ programming language. I understand the headers, but not the CPP files. I can provide debugging and beta testing though. I've created the cross-platform Heimdall One-Click . I brought UnBrickable Mod to the Captivate and the only thing left in the entire open-source chain of software from complete destruction of data on the device to completely stock is getting Heimdall to repartition.
Once this final hurdle in Heimdall is completed, we've got a full open-source stack of cross-platform, community-based software by XDA-Developers for XDA-Developers and users. Open-Source software will be able to provide more then closed source software, and once again XDA-Developers will prove that we can do things better then the Manufacturers.

There is an issue tracking system here: https://github.com/Benjamin-Dobell/Heimdall/issues
I believe the underlying cause of all 3 of the existing issues in the Heimdall Repostiory lies with Heimdall's ability to repartition.
issue 21: "Failed to confirm end of file transfer sequence!" signifies that the information sent overran the partition area and therefore it never responded that the end was confirmed.
Issue 19: "Could not find end of file or end of file transfer, something similar." Likely the same as issue 21.
Issue 14: "Expected file part index" again, dealing with partition tables. "ERROR: Expected file part index: 0 Received: 1"
I believe all three of these issues could be worked into a single "Heimdall Repartitioning" issue for the reasons stated above.

I got some experience in C++ and Java...
once I get home ill take a look at the heimdall source, and give it a shot.

Smasher816 said:
I got some experience in C++ and Java...
once I get home ill take a look at the heimdall source, and give it a shot.
Click to expand...
Click to collapse
Hey great.. I have a special test setup with UART output.
First I totally thrashed my partition table by uploading the Bada OS SBL.. This SBL rewites partition tables. Then I used the HIBL to unbrick my phone and load a proper SBL. This is the UART during booting up to "Download Mode".
Code:
-------------------------------------------------------------
Hummingbird Interceptor Boot Loader (HIBL) v1.0
Copyright (C) Rebellos 2011
-------------------------------------------------------------
Calling IBL Stage2 ...OK
Testing DRAM1 ...OK
iRAM reinit ...OK
cleaning OTG context ...OK
Chain of Trust has been successfully compromised.
Begin unsecure download now...
0x00000000BL3 EP: 0x40244000
Download complete, hold download mode key combination.
Starting BL3 in...
Set cpu clk. from 400MHz to 800MHz.
IROM e-fused - Non Secure Boot Version.
-----------------------------------------------------------
Samsung Secondary Bootloader (SBL) v3.0
Copyright (C) Samsung Electronics Co., Modified by Rebell
Build On: Jun 8 2011 21:44:47
-----------------------------------------------------------
Re_partition: magic code(0xffffffff)
[PAM: ] ++FSR_PAM_Init
[PAM: ] OneNAND physical base address : 0xb0000000
[PAM: ] OneNAND virtual base address : 0xb0000000
[PAM: ] OneNAND nMID=0xec : nDID=0x50
[PAM: ] --FSR_PAM_Init
fsr_bml_load_partition: pi->nNumOfPartEntry = 7
partitions loading success
board partition information update.. source: 0x0
.Done.
read 1 units.
==== PARTITION INFORMATION ====
ID : *unknown id* (0x9)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 0
NO_UNITS : 1
===============================
ID : *unknown id* (0x0)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 1
NO_UNITS : 7
===============================
ID : *unknown id* (0x1)
ATTR : RW SLC (0x1001)
FIRST_UNIT : 8
NO_UNITS : 796
===============================
ID : *unknown id* (0x14)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 804
NO_UNITS : 716
===============================
ID : *unknown id* (0x15)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 1520
NO_UNITS : 372
===============================
ID : *unknown id* (0x17)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 1892
NO_UNITS : 56
===============================
ID : *unknown id* (0x18)
ATTR : RW SLC (0x1001)
FIRST_UNIT : 1948
NO_UNITS : 56
===============================
FlashDevOpen 232: Error(nErr=0x80000002)
j4fs_open 136: Error(nErr=0x40000000)
loke_init: j4fs_open failed..
init_fuel_gauge: vcell = 4051mV, soc = 82
check_quick_start_condition_with_charger- Voltage: 4051.25000, Linearized[55/70/85], Capacity: 85
init_fuel_gauge: vcell = 4051mV, soc = 82, rcomp = d01f
FlashDevRead 63: Error(offset,length,j4fs_end,nErr)=(0x40000,0x1000,0xffffffff,0x80040001)
nps status file does not exist..
nps status is incorrect!! set default status.(completed)
nps status=0x504d4f43
PMIC_IRQ1 = 0x3c
PMIC_IRQ2 = 0x0
PMIC_IRQ3 = 0x0
PMIC_IRQ4 = 0x0
PMIC_STATUS1 = 0x40
PMIC_STATUS2 = 0x2c
get_debug_level current debug level is 0x0.
get_debug_level current debug level is 0x0.
get_debug_level current debug level is 0x0.
aries_process_platform: Debug Level Invalid
keypad_scan: key value ----------------->= 0x0
CONFIG_ARIES_REV:48 , CONFIG_ARIES_REV03:48
FlashDevRead 63: Error(offset,length,j4fs_end,nErr)=(0x40000,0x1000,0xffffffff,0x80040001)
nps status file does not exist..
nps status is incorrect!! set default status.(completed)
nps status=0x504d4f43
==> Welcome to ARIES!
==> Entering usb download mode..
DISPLAY_PATH_SEL[MDNIE 0x1]is on
MDNIE setting Init start!!
vsync interrupt is off
video interrupt is off
[fb0] turn on
MDNIE setting Init end!!
Error : Current Mode is Host
EP2: 0, 2, 0; len=7
EP2: 0, 2, 0; len=7
sug: IN EP asserted
I gave the command in Heimdall to repartition and flash the boot.bin to partition 1.
Code:
heimdall flash --repartition --pit ./part.pit --1 ./boot.bin
At this point it should have downloaded the partition, saved it, and then heimdall should request the partition back and use that as its guide.
The boot.bin is only 1 block long so this log is short.
Code:
- Odin is connected!
FlashDevRead 63: Error(offset,length,j4fs_end,nErr)=(0x40000,0x1000,0xffffffff,0x80040001)
j4fs_write_file_bootloader 192: Error(nErr=0x40000000)
process_packet: request id(100), data id(0)
process_rqt_init: platform number(0x0), revision(0x0)
process_packet: request id(100), data id(1)
process_packet: request id(100), data id(2)
process_packet: request id(103), data id(0)
process_rqt_close: xmit completed!
FlashDevRead 63: Error(offset,length,j4fs_end,nErr)=(0x40000,0x1000,0xffffffff,0x80040001)
j4fs_write_file_bootloader 192: Error(nErr=0x40000000)
process_packet: request id(103), data id(1)
process_rqt_close: target reset!
ARIES MAGIC_ADDR=0x0 / INFORM5=0x12345678
and this is the log from Heimdall
Code:
Initialising connection...
Detecting device...
Claiming interface...
Attempt failed. Detaching driver...
Claiming interface again...
Setting up interface...
Beginning session...
Handshaking with Loke...
Ending session...
Rebooting device...
Re-attaching kernel driver...
At this point the device "resets" and attempts to boot from the bootloader.
If you need any testing let me know. I can compile source, I can get UART logs. I can repartition the heck out of this device as it is UnBrickable and my test phone.

I believe the device uses the SBL> prompt when it is in download mode.. You can see from this UART log that the device attempted to "saveenv" but it could not. http://code.google.com/p/badadroid/...ompare_logs/SBL_mode_help.txt?spec=svn61&r=57
It also returned the same "FlashDevRead 63 error)
The final action the device needs to do is "savepart" if the partition tables were saved after the pit were uploaded then it would be good to go. There are several other commands as well.. "addpart" and "removepart".. If it comes to using this, let me know. I've worked with Benjamin Dobell's libpit before and I can help out greatly with repartitioning as I've worked extensively in the SBL prompt.
I'm not sure how the Download Mode works exactly, but if it uses the SBL prompt, then I can write pseudocode of how it should work.

This probably isn't going to help much, but it may be a start.
I figured the best way to solve this would be to find the differences between a successful Odin flash and an unsuccessful Heimdall flash. So I delved right in to the wireshark dumps. It seems likely that Heimdall is missing a step.
I do not understand the protocol (yet), but I can see the raw data in the stream. In the Heimdall process, there is some protocol traffic, then the entire PIT file is sent, then some more protocol traffic, then the kernel data is sent. But in the Odin process, there is some protocol traffic, then the entire PIT file is sent, then some more protocol traffic, then the PIT file is sent again in 512 byte chunks, then some protocol traffic (more than usual), and then the kernel data is sent.
At the moment, I can't be sure if this is functionally equivalent or not. I'll need to do quite a bit of deciphering on the protocol to get up to speed on what's really going on. Unfortunately, this is the sort of thing that's easiest if one can watch the action in real time, but as I only have my one phone that I need for work, that's not really an option for me at this time.
Hopefully, I'll return with more info after I've absorbed the communication layer details to see what the non-data chatter actually is.

Could that extra protocol data possibly be Odin commanding delete partitions and add partitions? I'm hypothesizing... nothing more. I see some similarities to the UART logs during SBL> prompt and Odin, so I'm thinking that maybe the SBL prompt is used, or at least some of the methods... In this thread you can see all of the SBL commands http://forum.xda-developers.com/showthread.php?t=1209288
Sure it's from an Infuse, but they're all based on i9000 which is like the mother of our entire generation of devices. The SBLs are interchangeable with different entry points for each "version".

AdamOutler said:
Could that extra protocol data possibly be Odin commanding delete partitions and add partitions? I'm hypothesizing... nothing more. I see some similarities to the UART logs during SBL> prompt and Odin, so I'm thinking that maybe the SBL prompt is used, or at least some of the methods... In this thread you can see all of the SBL commands http://forum.xda-developers.com/showthread.php?t=1209288
Sure it's from an Infuse, but they're all based on i9000 which is like the mother of our entire generation of devices. The SBLs are interchangeable with different entry points for each "version".
Click to expand...
Click to collapse
I have a feeling that it is using the SBL prompt somehow after the flash because everything else seems pretty much identical (besides the timing). If anyone needs to understand the protocol then I recommend just looking at Heimdall's source code, in particular the packet header files store all the constants that are sent and received over USB.

Found the problem - the End Transfer packet is missing. There is also some additional strangeness, though.
Heimdall:
Packet 1: 65 00 00 00 (Init pit transfer)
Packet 2: 65 00 00 00 02 00 00 00 D0 06 00 00 (Want to send 1744 bytes)
Packet 3: [full contents of pit]
Packet 4: 66 00 00 00 (Init file transfer - probably starting the kernel send)​
Odin:
Packet 1: 65 00 00 00 (Init pit transfer)
Packet 2: 65 00 00 00 02 00 00 00 D0 06 00 00 (Want to send 1744 bytes)
Packet 3: [full contents of pit]
Packet 4: 65 00 00 00 03 00 00 00 D0 06 00 00 (Finished sending 1744 bytes)​
The odd part is what odin does next, after the "finished sending":
Packet 5: 65 00 00 00 01 00 00 00 (Dump pit file)
Packet 6: 65 00 00 00 02 00 00 00 00 00 00 00 (Sending chunk 0)
Packet 7: [first 512 bytes of pit]
Packet 8: 65 00 00 00 02 00 00 00 01 00 00 00 (Sending chunk 1)
Packet 9: [next 512 bytes of pit]
Packet 10: 65 00 00 00 02 00 00 00 02 00 00 00 (Sending chunk 2)
Packet 11: [next 512 bytes of pit]
Packet 12: 65 00 00 00 02 00 00 00 03 00 00 00 (Sending chunk 3)
Packet 13: [next 512 bytes of pit]
- repeat for 8 chunks - data past the end of the actual pit file is sent as zeroes -
Packet 22: 65 00 00 00 03 00 00 00 (Done)
Packet 23: 66 00 00 00 (Init file transfer - probably kernel)​
I couldn't begin to tell you why any of this exists at all, but my strong suspicion is that duplicating the Odin behavior will make Heimdall work properly.

So, Adam, the first thing I would try would be to simply add the "finished sending" packet. Try recompiling with this replacement for BridgeManager.cpp and this additional file EndPitFilePacket.h in the project.

psych0phobia said:
So, Adam, the first thing I would try would be to simply add the "finished sending" packet. Try recompiling with this replacement for BridgeManager.cpp and this additional file EndPitFilePacket.h in the project.
Click to expand...
Click to collapse
That did it! Problem solved!
1.I uploaded the Bada bootloaders to my device in order to totally destroy my partition tables.
2.I tried to flash with heimdall 1.3 and it did not work to restore
3.I compiled and installed the new 1.3modified version
4.I flashed with heimdall 1.3modified and it worked
to be sure I repeated the Bada bootloaders once again. The only thing wrong with my device now is that it has no /efs/ partition... which is understandable because bada turned the OneNAND into it's *****.
Great job psych0phobia If you need anything from me just let me know. I mean anything ...
Let me know when you can spare your device so I can modify it. Please push this change upstream.

Here's the UART log
Code:
[���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������
Uart negotiation Error
-------------------------------------------------------------
Hummingbird Interceptor Boot Loader (HIBL) v1.0
Copyright (C) Rebellos 2011
-------------------------------------------------------------
Calling IBL Stage2 ...OK
Testing DRAM1 ...OK
iRAM reinit ...OK
cleaning OTG context ...OK
Chain of Trust has been successfully compromised.
Begin unsecure download now...
0x00000000BL3 EP: 0x40244000
Download complete, hold download mode key combination.
Starting BL3 in...
Set cpu clk. from 400MHz to 800MHz.
IROM e-fused - Non Secure Boot Version.
-----------------------------------------------------------
Samsung Secondary Bootloader (SBL) v3.0
Copyright (C) Samsung Electronics Co., Modified by Rebell
Build On: Jun 8 2011 21:44:47
-----------------------------------------------------------
Re_partition: magic code(0x0)
[PAM: ] ++FSR_PAM_Init
[PAM: ] OneNAND physical base address : 0xb0000000
[PAM: ] OneNAND virtual base address : 0xb0000000
[PAM: ] OneNAND nMID=0xec : nDID=0x50
[PAM: ] --FSR_PAM_Init
fsr_bml_load_partition: pi->nNumOfPartEntry = 12
partitions loading success
board partition information update.. source: 0x0
.Done.
read 1 units.
==== PARTITION INFORMATION ====
ID : IBL+PBL (0x0)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 0
NO_UNITS : 1
===============================
ID : PIT (0x1)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 1
NO_UNITS : 1
===============================
ID : EFS (0x14)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 2
NO_UNITS : 40
===============================
ID : SBL (0x3)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 42
NO_UNITS : 5
===============================
ID : SBL2 (0x4)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 47
NO_UNITS : 5
===============================
ID : PARAM (0x15)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 52
NO_UNITS : 20
===============================
ID : KERNEL (0x6)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 72
NO_UNITS : 30
===============================
ID : RECOVERY (0x7)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 102
NO_UNITS : 30
===============================
ID : FACTORYFS (0x16)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 132
NO_UNITS : 1146
===============================
ID : DBDATAFS (0x17)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 1278
NO_UNITS : 536
===============================
ID : CACHE (0x18)
ATTR : RW STL SLC (0x1101)
FIRST_UNIT : 1814
NO_UNITS : 140
===============================
ID : MODEM (0xb)
ATTR : RO SLC (0x1002)
FIRST_UNIT : 1954
NO_UNITS : 50
===============================
loke_init: j4fs_open success..
load_lfs_parameters valid magic code and version.
reading nps status file is successfully!.
nps status=0x504d4f43
load_debug_level reading debug level from file successfully(0x574f4c44).
init_fuel_gauge: vcell = 4192mV, soc = 90
check_quick_start_condition_with_charger- Voltage: 4192.50000, Linearized[77/92/100], Capacity: 94
init_fuel_gauge: vcell = 4192mV, soc = 90, rcomp = d01f
reading nps status file is successfully!.
nps status=0x504d4f43
PMIC_IRQ1 = 0x28
PMIC_IRQ2 = 0x0
PMIC_IRQ3 = 0x0
PMIC_IRQ4 = 0x0
PMIC_STATUS1 = 0x40
PMIC_STATUS2 = 0x2c
get_debug_level current debug level is 0x574f4c44.
aries_process_platform: Debug Level Low
keypad_scan: key value ----------------->= 0x0
CONFIG_ARIES_REV:48 , CONFIG_ARIES_REV03:48
reading nps status file is successfully!.
nps status=0x504d4f43
==> Welcome to ARIES!
==> Entering usb download mode..
DISPLAY_PATH_SEL[MDNIE 0x1]is on
MDNIE setting Init start!!
vsync interrupt is off
video interrupt is off
[fb0] turn on
MDNIE setting Init end!!
Error : Current Mode is Host
EP2: 0, 2, 0; len=7
EP2: 0, 2, 0; len=7
sug: IN EP asserted
- Odin is connected!
set_nps_update_start: set nps start flag successfully.
process_packet: request id(100), data id(0)
process_rqt_init: platform number(0x0), revision(0x0)
process_packet: request id(100), data id(1)
process_packet: request id(100), data id(2)
process_packet: request id(101), data id(0)
process_packet: request id(101), data id(2)
process_packet: request id(101), data id(3)
[FNW: ] STL read to partition ID: 20
Done.
read 25 units.
partition_backup: efs. meta data=3(units), real size=6553600
.....Done.
read 5 units.
partition_backup: sbl. buf=0x46e00000, size=1310720(bytes)
.....Done.
read 5 units.
partition_backup: sbl2. buf=0x46f40000, size=1310720(bytes)
fsr_bml_format_device start
set_dynamic_partition: pit magic code=0x12349876
bbm format success
bbm_erase_all: step 1. Start unit=1, End unit=2.
.
bbm_erase_all: step 1. Start unit=52, End unit=2004.
..............................................................................................................................................................................................................................................
bbm eraseall success.
fsr_bml_load_partition: pi->nNumOfPartEntry = 12
partitions loading success
Erasing: 1 to 2
.
bbm erase part success
.Done.
Written 1 units.
current percent: 0 (1/1110)
board partition information update.. source: 0x403ee838
Erasing: 2 to 42
........................................
bbm erase part success
[FNW: ] STL formatted (partition ID: 20)
[FNW:INF] nVol : 0, partition_id : 20, stSTLInfo.nTotalLogScts : 12800, buf :0x46400000
TotalLogSct : 12800, size : 6553600
Done.
Written 25 units.
current percent: 2 (26/1110)
Erasing: 42 to 47
.....
bbm erase part success
.....Done.
Written 5 units.
current percent: 2 (31/1110)
Erasing: 47 to 52
.....
bbm erase part success
.....Done.
Written 5 units.
current percent: 3 (36/1110)
process_packet: request id(102), data id(0)
process_packet: request id(102), data id(2)
process_packet: request id(102), data id(3)
process_rqt_xmit: size(5445016), id(6), final(1)
Save Image (KERNEL) to flash ......
Erasing: 72 to 102
..............................
bbm erase part success
.....................Done.
Written 21 units.
current percent: 5 (57/1110)
current write_count=1
process_packet: request id(102), data id(0)
process_packet: request id(102), data id(2)
process_packet: request id(102), data id(3)
process_rqt_xmit: size(12582912), efs_clear(0), boot_update(0), final(1)
xmit_complete_phone: cp partition found!(11)
Save Image (MODEM) to flash ......
Erasing: 1954 to 2004
..................................................
bbm erase part success
................................................Done.
Written 48 units.
current percent: 9 (105/1110)
current write_count=1
process_packet: request id(102), data id(0)
process_packet: request id(102), data id(2)
process_packet: request id(102), data id(3)
process_rqt_xmit: size(104857600), id(22), final(0)
Save Image (FACTORYFS) to flash ......
Erasing: 132 to 1278
..............................................................................................................................................................................................................................................
bbm erase part success
[FNW: ] STL formatted (partition ID: 22)
[FNW:INF] nVol : 0, partition_id : 22, stSTLInfo.nTotalLogScts : 569344, buf :0x46400000
TotalLogSct : 204800, size : 104857600
Done.
Written 394 units.
current percent: 45 (505/1110)
current write_count=1
process_packet: request id(102), data id(2)
process_packet: request id(102), data id(3)
process_rqt_xmit: size(104857600), id(22), final(0)
Save Image (FACTORYFS) to flash ......
[FNW:INF] nVol : 0, partition_id : 22, stSTLInfo.nTotalLogScts : 569344, buf :0x46400000
TotalLogSct : 204800, size : 104857600
Done.
Written 394 units.
current percent: 81 (905/1110)
current write_count=2
process_packet: request id(102), data id(2)
process_packet: request id(102), data id(3)
process_rqt_xmit: size(58163200), id(22), final(1)
Save Image (FACTORYFS) to flash ......
[FNW:INF] nVol : 0, partition_id : 22, stSTLInfo.nTotalLogScts : 569344, buf :0x46400000
TotalLogSct : 113600, size : 58163200
Done.
Written 219 units.
current percent: 101 (1127/1110)
current write_count=3
process_packet: request id(102), data id(0)
process_packet: request id(102), data id(2)
process_packet: request id(102), data id(3)
process_rqt_xmit: size(1376256), id(23), final(1)
Save Image (DBDATAFS) to flash ......
Erasing: 1278 to 1814
..............................................................................................................................................................................................................................................
bbm erase part success
[FNW: ] STL formatted (partition ID: 23)
[FNW:INF] nVol : 0, partition_id : 23, stSTLInfo.nTotalLogScts : 263168, buf :0x46400000
TotalLogSct : 2688, size : 1376256
Done.
Written 6 units.
current percent: 102 (1133/1110)
current write_count=1
process_packet: request id(102), data id(0)
process_packet: request id(102), data id(2)
process_packet: request id(102), data id(3)
process_rqt_xmit: size(1245184), id(24), final(1)
Save Image (CACHE) to flash ......
Erasing: 1814 to 1954
............................................................................................................................................
bbm erase part success
[FNW: ] STL formatted (partition ID: 24)
[FNW:INF] nVol : 0, partition_id : 24, stSTLInfo.nTotalLogScts : 64000, buf :0x46400000
TotalLogSct : 2432, size : 1245184
Done.
Written 5 units.
current percent: 102 (1138/1110)
current write_count=1
save param.blk, size: 5268
FlashDevRead 63: Error(offset,length,j4fs_end,nErr)=(0x40000,0x1000,0xfffff,0x80040001)
j4fs_write_file_bootloader 192: Error(nErr=0x40000000)
process_packet: request id(102), data id(0)
process_packet: request id(102), data id(2)
process_packet: request id(102), data id(3)
process_rqt_xmit: size(262144), id(0), final(1)
Save Image (IBL+PBL) to flash ......
binary version: EVT1.
boot.bin is the one-binary.
relocate & fusing continue..
completed.
Erasing: 0 to 1
.
bbm erase part success
.Done.
Written 1 units.
current percent: 102 (1139/1110)
current write_count=1
process_packet: request id(102), data id(0)
process_packet: request id(102), data id(2)
process_packet: request id(102), data id(3)
process_rqt_xmit: size(1310720), id(3), final(1)
Save Image (SBL) to flash ......
=== SBL signature information ===
File Size : 677052
=================================
read part info
id = 0x3
attr = 0x1002
first unin = 0x2a
number units = 0x5
pages per unit = 0x40
n1st page = 0xa80, page offset = 0x13f, len = 0x48
read part info
id = 0x4
attr = 0x1002
first unin = 0x2f
number units = 0x5
pages per unit = 0x40
n1st page = 0xbc0, page offset = 0x13f, len = 0x48
Found bootable SBL ID: 4
save SBL partition id: 3
Erasing: 42 to 47
.....
bbm erase part success
.....Done.
Written 5 units.
current percent: 103 (1144/1110)
current write_count=1
save sbl id: 3 / erase sbl id: 4
.
process_packet: request id(102), data id(0)
process_packet: request id(102), data id(2)
process_packet: request id(102), data id(3)
process_rqt_xmit: size(872448), id(21), final(1)
Save Image (PARAM) to flash ......
FlashDevClose 262: Error(nErr=0x80040001)
Erasing: 52 to 72
....................
bbm erase part success
[FNW: ] STL formatted (partition ID: 21)
[FNW:INF] nVol : 0, partition_id : 21, stSTLInfo.nTotalLogScts : 2560, buf :0x46400000
TotalLogSct : 1704, size : 872448
Done.
Written 4 units.
current percent: 103 (1148/1110)
current write_count=1
set_nps_update_start: set nps start flag successfully.
process_packet: request id(103), data id(0)
process_rqt_close: xmit completed!
set_nps_update_completed: set nps completed flag successfully.
process_packet: request id(103), data id(1)
process_rqt_close: target reset!
ARIES MAGIC_ADDR=0x0 / INFORM5=0x12345678
1
-----------------------------------------------------------
Samsung Primitive Bootloader (PBL) v3.0
Copyright (C) Samsung Electronics Co., Ltd. 2006-2010
-----------------------------------------------------------
+n1stVPN 2688
+nPgsPerBlk 64
PBL found bootable SBL: Partition(3).
Set cpu clk. from 400MHz to 800MHz.
IROM e-fused - Non Secure Boot Version.
-----------------------------------------------------------
Samsung Secondary Bootloader (SBL) v3.0
Copyright (C) Samsung Electronics Co., Ltd. 2006-2010
Board Name: ARIES REV 03
Build On: Jun 8 2011 21:44:47
-----------------------------------------------------------
Re_partition: magic code(0x0)
[PAM: ] ++FSR_PAM_Init
[PAM: ] OneNAND physical base address : 0xb0000000
[PAM: ] OneNAND virtual base address : 0xb0000000
[PAM: ] OneNAND nMID=0xec : nDID=0x50
[PAM: ] --FSR_PAM_Init
fsr_bml_load_partition: pi->nNumOfPartEntry = 12
......... everything after this is standard data... just included this far to show it booted.
Everything worked..
Would you like WireShark to verify things?
As far as logging, the only thing I could see is this:
Code:
FlashDevRead 63: Error(offset,length,j4fs_end,nErr)=(0x40000,0x1000,0xfffff,0x80040001)
j4fs_write_file_bootloader 192: Error(nErr=0x40000000)
which means it tried to read some garbage from the OneNAND and failed.

AdamOutler said:
That did it! Problem solved!
1.I uploaded the Bada bootloaders to my device in order to totally destroy my partition tables.
2.I tried to flash with heimdall 1.3 and it did not work to restore
3.I compiled and installed the new 1.3modified version
4.I flashed with heimdall 1.3modified and it worked
to be sure I repeated the Bada bootloaders once again. The only thing wrong with my device now is that it has no /efs/ partition... which is understandable because bada turned the OneNAND into it's *****.
Great job psych0phobia If you need anything from me just let me know. I mean anything ...
Let me know when you can spare your device so I can modify it. Please push this change upstream.
Click to expand...
Click to collapse
Yay for a properly working Heimdall! Once this fix gets officially implemented I'll update my Heimdall =D
How much do you charge to make the Captivate Unbrickable? X3

I have a darn huge iq... Classified as genius level... Yet, try as I might, cannot make head or tail of Adams post...
Sent from my cell phone. DUH.

psycho2097 said:
I have a darn huge iq... Classified as genius level... Yet, try as I might, cannot make head or tail of Adams post...
Sent from my cell phone. DUH.
Click to expand...
Click to collapse
Don't give me credit... this is the real genius here...
psych0phobia said:
So, Adam, the first thing I would try would be to simply add the "finished sending" packet. Try recompiling with this replacement for BridgeManager.cpp and this additional file EndPitFilePacket.h in the project.
Click to expand...
Click to collapse
Basically, heimdall could not repartition the OneNAND. I identifed the problem, provided detailed debug level information and asked for help. psych0phobia looked at the Odin/Loki protocol, learned it, found the differences between Odin and Heimdall based on the output of both programs and then wrote the fix. Make sure you thank him. Thank Benjamin Dobell as well, he wrote Heimdall in the first place.
now... if you want to compile it under Linux... open a terminal and copy-pasta.
Code:
sudo apt-get install build-essential curl git
mkdir heimdall
cd heimdall
git clone https://github.com/Benjamin-Dobell/Heimdall.git
cd Heimdall/heimdall
curl http://android.merseine.us/BridgeManager.cpp> ./BridgeManger.cpp
curl http://android.merseine.us/EndPitFilePacket.h >./EndPitFilePacket.h
cd ..
cd ..
cd libpit
./configure
make
cd ..
cd heimdall
./configure
make
sudo make install
This will give Heimdall the ability to fully recover a bad partition table.
NOTE: This should only be used until a version greater then Heimdall 1.3.0 is released.

Yea, kinda got that part.... So my understanding would be now we can successfully flash nexus s. Firmware without screwing everything up... Right? In layman-geek's terms, not super-duper-mega-geek terms....
Sent from my cell phone. DUH.

psycho2097 said:
Yea, kinda got that part.... So my understanding would be now we can successfully flash nexus s. Firmware without screwing everything up... Right? In layman-geek's terms, not super-duper-mega-geek terms....
Sent from my cell phone. DUH.
Click to expand...
Click to collapse
I wont say anything about nexus s just yet... We have a 100% open-source, DIY, and free method of restoring a device to stock. Linux, UnBrickable Mod and heimdall.

In other words....
In yo face jtag

whiteguypl said:
In other words....
In yo face jtag
Click to expand...
Click to collapse
Hell yeah! 3 cheers 4 the unbrickable mod!
Sent from my cell phone. DUH.

Just thought I should let you guys know that I've pushed the source for the 1.3.1 updates to Github and it includes a fix, thanks psych0phobia! 1.3.1 also includes substantially improved no-reboot functionality that allows Heimdall to detect and use an existing session (i.e. previous operation with the --no-reboot parameter). Basically this means that you can do things like dump your PIT and then flash your phone without rebooting in between.
I should note that I kind of forgot to update the make files So it won't actually build on Linux/OS X until I do that when I get home (at work now). Windows users can give it whirl though.

[for devs][info] Eclair boot log

Code:
D/ ( 1123): MOTO_PUPD: mot_boot_mode
D/ ( 1123): MOTO_PUPD: cid_recover_boot=0x00
D/ ( 1123): MOTO : pwr_rsn = POWERUPREASON : 0x00004000
D/ ( 1123): MBM_VERSION : 0x00008089
D/ ( 1123): MBM_LOADER_VERSION : 0x000005a0
D/ ( 1123): FLAT_DEV_TREE_ADDRESS : 0xffffffff
D/ ( 1123): BATTERY_STATUS_AT_BOOT : 0x0001
D/ ( 1123): CID_RECOVER_BOOT : 0x00
D/ ( 1123):
D/ ( 1123): MOTO_PUPD: powerup_reason=0x00004000
D/ ( 1123): MOTO_PUPD: mot_boot_mode 12m: 0
I/vold ( 1126): Android Volume Daemon version 2.0
I/DEBUG ( 1127): debuggerd: Aug 4 2010 22:34:36
I/DBVC ( 1129): atvc_pal_production_part: start
I/DBVC ( 1129): atvc_pal_init_factory_state: start
I/DBVC ( 1129): atvc_pal_init_factory_state: determined out of factory state
I/DBVC ( 1129): atval_pal_read_datablock: enter
I/DBVC ( 1129): atval_pal_read_datablock: getting size of datablock
I/DBVC ( 1129): atval_pal_read_datablock: exit
I/DBVC ( 1129): atval_enforce_android_policy: validation failed. all disabled.
I/DBVC ( 1129): read handset resource access flags:
I/DBVC ( 1129): 0x00000000
I/DBVC ( 1129): atval_setup_properties: valid datablock - setting flags
I/usbd ( 1136): main(): Start usbd - version 1.2
I/usbd ( 1136): main(): Initializing uevent_socket
I/usbd ( 1136): main(): Initializing usb_device_mode
I/usbd ( 1136): main(): Initializing usbd socket
I/usbd ( 1136): usbd_get_cable_status(): cable_type = usb
I/usbd ( 1136):
I/usbd ( 1136): usbd_get_cable_status(): current usb_online = 1
I/usbd ( 1136): main(): Initial Cable State = Cable Attached
I/usbd ( 1136): main(): get event from usb_device_fd
I/usbd ( 1136): main(): devbuf: none:adb_enable:none
I/usbd ( 1136): rc: 20 usbd_curr_cable_status: 0
I/usbd ( 1136): main(): pcSwitchbuf = none
I/usbd ( 1136): main(): adbEnablebuf: adb_enable
I/usbd ( 1136): main(): length = 5
I/usbd ( 1136): main(): enubuf: none
E/vold ( 1126): Unable to chdir to /sys/class/mmc_host/mmc0/slot_name (Not a directory)
E/vold ( 1126): Error bootstrapping card '/sys/class/mmc_host/mmc0/slot_name' (Not a directory)
I/vold ( 1126): New MMC card 'USD ' (serial 1286609949) added @ /devices/platform/mmci-omap-hs.0/mmc_host/mmc0/mmc0:b368
I/DBVC ( 1129): atval_enforce_android_policy: finalize the properties
I/DBVC ( 1129): atval_finalize_properties: START
I/DBVC ( 1129): atval_finalize_properties: parse property file
I/DBVC ( 1129): atval_finalize_properties: rename
I/vold ( 1126): Disk (blkdev 179:0), 15661056 secs (7647 MB) 3 partitions
I/vold ( 1126): New blkdev 179.0 on media USD , media path /devices/platform/mmci-omap-hs.0/mmc_host/mmc0/mmc0:b368, Dpp 3
I/vold ( 1126): Partition (blkdev 179:1), 13625344 secs (6653 MB) type 0xb
I/vold ( 1126): New blkdev 179.1 on media USD , media path /devices/platform/mmci-omap-hs.0/mmc_host/mmc0/mmc0:b368, Dpp 2
I/vold ( 1126): Partition (blkdev 179:2), 1114112 secs (544 MB) type 0x83
I/vold ( 1126): New blkdev 179.2 on media USD , media path /devices/platform/mmci-omap-hs.0/mmc_host/mmc0/mmc0:b368, Dpp 1
I/vold ( 1126): Partition (blkdev 179:3), 919552 secs (449 MB) type 0x82
I/vold ( 1126): New blkdev 179.3 on media USD , media path /devices/platform/mmci-omap-hs.0/mmc_host/mmc0/mmc0:b368, Dpp 0
I/vold ( 1126): Evaluating dev '/devices/platform/mmci-omap-hs.0/mmc_host/mmc0/mmc0:b368/block/mmcblk0' for mountable filesystems for '/sdcard'
I/vold ( 1126): Aborting start of /sdcard (bootstrap = 1)
I/vold ( 1126): Volmgr not ready to handle device
D/vold ( 1126): Bootstrapping complete
W/bplogd ( 1139): -WARNING- main(): BP datalogging is not allowed. bplog_property=0.
W/bplogd ( 1139): -WARNING- main(): Access token is required to allow it.
I/usbd ( 1136): process_usb_uevent_message(): cable type: usb
I/usbd ( 1136): process_usb_uevent_message(): USB online
I/usbd ( 1136): main(): Cable Status Changed, need to notify Cable Status to App
I/usbd ( 1136): main(): get event from usb_device_fd
I/usbd ( 1136): main(): devbuf: none:none:get_desc
I/usbd ( 1136): rc: 18 usbd_curr_cable_status: 0
I/usbd ( 1136): main(): pcSwitchbuf = none
I/usbd ( 1136): main(): adbEnablebuf: none
I/usbd ( 1136): main(): length = 9
I/usbd ( 1136): main(): enubuf: get_desc
I/usbd ( 1136): main(): received get_descriptor, enum in progress
I/usbd ( 1136): process_usb_uevent_message(): cable type: usb
I/usbd ( 1136): process_usb_uevent_message(): USB online
I/usbd ( 1136): main(): Spurious Cable Event, Ignore
I/usbd ( 1136): main(): get event from usb_device_fd
I/usbd ( 1136): main(): devbuf: none:none:enumerated
I/usbd ( 1136): rc: 20 usbd_curr_cable_status: 0
I/usbd ( 1136): main(): pcSwitchbuf = none
I/usbd ( 1136): main(): adbEnablebuf: none
I/usbd ( 1136): main(): length = 11
I/usbd ( 1136): main(): enubuf: enumerated
I/usbd ( 1136): main(): recieved enumerated
I/usbd ( 1136): main(): usbd_app_fd = -1
I/BATTD ( 1135): Battd USB INSERT = Success
I/BATTD ( 1135): Battd Init = Success
I/BATTD ( 1135): RTC Log SBCM Init=1335521694664
I/BATTD ( 1135): SBCM_GLUE: UNABLE TO OPEN FILE /config/public/batt_offset_data
I/BATTD ( 1135): SBCM_GLUE: BATT DATA READ - SUCCESS
I/BATTD ( 1135): SBCM_GLUE: BATT DATA READ - SUCCESS
I/BATTD ( 1135): SBCM_GLUE: BATT DATA READ - SUCCESS
I/BATTD ( 1135): SBCM_GLUE: BATT DATA RETRIVAL SUCCESS
I/BATTD ( 1135): SBCM_GLUE: CutOff Threshold is 3200 mV
I/BATTD ( 1135): SBCM_GLUE_EVENT_INIT=Initialization
I/BATTD ( 1135): SBCM_GLUE ****Battery Phasing start ****
I/BATTD ( 1135): SBCM_GLUE offset_batti = -2
I/BATTD ( 1135): SBCM_GLUE slope_batti = 128
I/BATTD ( 1135): SBCM_GLUE offset_chrgi = -3
I/BATTD ( 1135): SBCM_GLUE slope_chrgi = 123
I/BATTD ( 1135): SBCM_GLUE offset_battp = 4
I/BATTD ( 1135): SBCM_GLUE slope_battp = 128
I/BATTD ( 1135): SBCM_GLUE offset_bp = 0
I/BATTD ( 1135): SBCM_GLUE slope_bp = 128
I/BATTD ( 1135): SBCM_GLUE offset_battt = 1
I/BATTD ( 1135): SBCM_GLUE slope_battt = 128
I/BATTD ( 1135): SBCM_GLUE offset_chrgv = 1
I/BATTD ( 1135): SBCM_GLUE slope_chrgv = 127
I/BATTD ( 1135): SBCM_GLUE ****Battery Phasing end ****
I/BATTD ( 1135): SBCM_GLUE temp safe = 328
I/BATTD ( 1135): SBCM_GLUE temp warn = 333
I/BATTD ( 1135): SBCM_GLUE temp cool = 338
I/BATTD ( 1135): SBCM_GLUE temp phased safe raw = 0x59
I/BATTD ( 1135): SBCM_GLUE temp phased warn raw = 0x4b
I/BATTD ( 1135): SBCM_GLUE temp phased cool raw = 0x3f
I/BATTD ( 1135): SBCM_GLUE temp safe unphased raw = 0x58
I/BATTD ( 1135): SBCM_GLUE temp warn unphased raw = 0x4a
I/BATTD ( 1135): SBCM_GLUE temp cool unphased raw = 0x3e
I/BATTD ( 1135): Coulomb Counter Enabled=1
I/BATTD ( 1135): SBCM_ALGORITHM_task_handler()return=686979
I/BATTD ( 1135): while(SBCM_GLUE_atod_pending)=2
I/BATTD ( 1135): SBCM_ALGORITHM_task_handler()return=0xA7BBD
I/BATTD ( 1135): while(SBCM_GLUE_atod_pending)=4
I/BATTD ( 1135): File /data/battd/cc_data opened!
I/BATTD ( 1135): Value from cc file Percentage = 802962722
I/BATTD ( 1135): SBCM_ALGORITHM_task_handler()return=0xA7B81
I/BATTD ( 1135): Timeout=10
I/BATTD ( 1135): Event from SBCM Driver=Batt Detection Interrupt
I/BATTD ( 1135): SBCM_GLUE ****Battery BRT Read ****
I/SSM ( 1167): Signals
I/SSM ( 1167): Sockets
E/SSM ( 1167): Failed open; status=-1 / errno=-2
D/panic_daemon( 1170): Bind socket is successful
D/panic_daemon( 1170): Listen of GKI-panic_daemon socket is successful
W/panic_daemon( 1170): /data/panic exists.
W/panic_daemon( 1170): /data/panic/apr exists.
I/usbd ( 1136): process_usb_uevent_message(): cable type: usb
I/usbd ( 1136): process_usb_uevent_message(): USB online
I/usbd ( 1136): main(): Spurious Cable Event, Ignore
I/ ( 1178): Main_fmradioserver::ServiceManager: 0xae20
I/FMRadioStackService( 1178): FMRadioStackService created
I/FMRadioStackService( 1178): onFirstRef:: run thread to power on bt device
D/AndroidRuntime( 1141):
D/AndroidRuntime( 1141): >>>>>>>>>>>>>> AndroidRuntime START <<<<<<<<<<<<<<
D/AndroidRuntime( 1141): CheckJNI is OFF
I/AndroidRuntime( 1141): JNI options: '-Xjniopts:warnonly'
D/dalvikvm( 1141): Precise GC configured ON
D/dalvikvm( 1141): creating instr width table
I/SSM ( 1167): fd_ipc=7
E/SSM ( 1167): Open device :/dev/input/even error!
E/SSM ( 1167): Open device :/dev/input/even error!
E/SSM ( 1167): Open device :/dev/input/even error!
E/SSM ( 1167): Open device :/dev/input/even error!
E/SSM ( 1167): Open device :/dev/input/even error!
E/SSM ( 1167): Open device :/dev/input/even error!
E/SSM ( 1167): Open device :/dev/input/even error!
E/SSM ( 1167): Couldn't find or open input driver (No such file or directory)
E/SSM ( 1167): Failed to open descriptor for input device driver for flip; errno=-2
W/SSM ( 1167): No input driver device interface
I/SSM ( 1167): fd_ssd=10
I/SSM ( 1167): fd_pmp=11
I/SSM ( 1167): fd_uevents=12
I/SSM ( 1167): Done: SSMGR Daemon Initialized
I/SSM ( 1167): capacity 0
I/SSM ( 1167): PA Boost - Battery TOO LOW
I/ ( 1142): ServiceManager: 0xae30
D/AudioHardwareMot( 1142): AudioMgr:mixer fd = 7, errno = Unknown error: 0
D/AudioMgrIPC( 1142): AudioMgr:IPC: Inside am_aipcm_init
D/AudioMgrIPC( 1142): AudioMgr:IPC: Inside am_aipcm_init-mux_txrx_fd= 8, errno = Unknown error: 0
D/AudioMgrIPC( 1142): AudioMgr:IPC: Read thread spawned
D/AudioPostProcessor( 1142): AudioMgr:AudioPostProcessor()
D/AudioPostProcessor( 1142): AudioMgr:No debug parameters in /data; checking ro.product.name
D/AudioPostProcessor( 1142): AudioMgr:ro.product.name value = STR_RTRU
D/AudioPostProcessor( 1142): AudioMgr:/system/bin/ap_gain.bin file size is 50371
D/AudioPostProcessor( 1142): AudioMgr:Read format version 0x308, content version 0000 from /system/bin/ap_gain.bin
D/AudioMgrIPC( 1142): AudioMgr:am_aipcm_read_thread called
D/AudioMgrIPC( 1142): AudioMgr:Setting Select ipc_fd
D/AudioPostProcessor( 1142): AudioMgr:Successfully parsed parameters from /system/bin/ap_gain.bin
D/AudioMsgHandler( 1142): The new thread spawned successfully
D/AudioHardwareMot( 1142): AudioMgr:setMode(NORMAL)
I/CameraService( 1142): CameraService started: pid=1142
D/AudioMsgHandler( 1142): server_fd = 10
D/AudioHardwareMot( 1142): AudioMgr:AudioHardwareMot::openOutputStream enter
D/AudioHardwareMot( 1142): AudioMgr:AudioHardwareMot: AudioStreamOutMot
D/AudioHardwareMot( 1142): AudioMgr:AudioStreamOutMot::set(0xafb0, 2, 0, 0 0)
I/BATTD ( 1135): SBCM_GLUE ****BRT SUCCESS****
I/BATTD ( 1135): BM_BATT_DATA: status valid
I/BATTD ( 1135): BM_BATT_DATA: uid valid
I/BATTD ( 1135): BM_BATT_DATA: family_code = 137
I/BATTD ( 1135): BM_BATT_DATA: uid_lsb = 0
I/BATTD ( 1135): BM_BATT_DATA: uid_msb = 80
I/BATTD ( 1135): BM_BATT_DATA: page_2_checksum = 0
I/BATTD ( 1135): BM_BATT_DATA: page_3_checksum = 0
I/BATTD ( 1135): BM_BATT_DATA: cpyrght_vld = 1
I/BATTD ( 1135): SBCM CORE convert_rom_data: bcap= 1390, raw= 0x8b
I/BATTD ( 1135): BATTD_SetBattCapacity BATT CAP = 182199
I/BATTD ( 1135): SBCM_GLUE BATT CAP = 1390
D/AudioHardwareMot( 1142): AudioMgr:bufSize from kernel = 8192
I/AudioFlinger( 1142): AudioFlinger's thread 0xba40 ready to run
I/BATTD ( 1135): Event from SBCM Driver=Coulomb Counter Calibration Interrupt
D/AudioHardwareMot( 1142): AudioMgr:bufSize from kernel = 8192
D/AudioHardwareMot( 1142): AudioMgr:bufSize from kernel = 8192
D/AudioHardwareMot( 1142): AudioMgr:bufSize from kernel = 8192
D/AudioHardwareMot( 1142): AudioMgr:AudioStreamOutMot::standby called
D/AudioHardwareMot( 1142): AudioMgr:AudioStreamOutMot::setParameters() routing=2
D/AudioHardwareMot( 1142): AudioMgr:set output routing 2
D/AudioHardwareMot( 1142): AudioMgr:doRouting called
D/AudioHardwareMot( 1142): AudioMgr:Routing to speaker
D/AudioHardwareMot( 1142): AudioMgr:configPostProcessor() called with accy = 0
D/AudioPostProcessor( 1142): AudioMgr:configPostProcessing() called, inputAccy= 27, outputAccy= 0, sampleRate= 44100, ringtoneMode= 0
D/AudioPostProcessor( 1142): AudioMgr:updatePostProcessor calling SuperAPI parser with:
D/AudioPostProcessor( 1142): accy=8
D/AudioPostProcessor( 1142): config=0
D/AudioPostProcessor( 1142): SE_level_index=1
D/AudioHardwareMot( 1142): AudioMgr:Gain for Input accy = 0 is 28
D/AudioHardwareMot( 1142): AudioMgr:Gain for Output accy = 0 is 11
D/AudioHardwareMot( 1142): AudioMgr:setVoiceVolume called with vol = 1.000000, converted intVol = 7
D/AudioMgrIPC( 1142): AudioMgr:am_aipcm_set_volume_req() called with vol_level = 7, vol_type = 2
D/AudioMgrIPC( 1142): AudioMgr:IPC: message sent for message id 3
D/AudioMgrIPC( 1142): AudioMgr:select returned, need to do a read
D/AudioMgrIPC( 1142): AudioMgr:[am_aipcm_read_func]:[ENTER IPC HANDLE FUNCTION], [line]:495
D/AudioMgrIPC( 1142): AudioMgr:IPC: header.data_legth is 18
D/AudioMgrIPC( 1142): AudioMgr:IPC: msg_id = 8000
D/AudioMgrIPC( 1142): AudioMgr:IPC: TAG is 0x8100
D/AudioMgrIPC( 1142): AudioMgr:IPC: Length is 0x4
D/AudioMgrIPC( 1142): AudioMgr:am_aipcm_read_func called, from BP message the tag is: 8100, msg_id is:8000
D/AudioMgrIPC( 1142): AudioMgr:IPC: TAG is 0x8101
D/AudioMgrIPC( 1142): AudioMgr:IPC: Length is 0x4
D/AudioMgrIPC( 1142): AudioMgr:IPC: Ack received for message with id = 3
I/SktdrmService( 1142): [SktdrmService] instantiate. current uid:1013
I/SktdrmService( 1142): [SktdrmService] Const.
I/BATTD ( 1135): set_charge_voltage=4200
I/BATTD ( 1135): set_charge_current=500
D/AndroidRuntime( 1141): --- registering native functions ---
I/SamplingProfilerIntegration( 1141): Profiler is disabled.
I/Zygote ( 1141): Preloading classes...
D/dalvikvm( 1141): GC freed 795 objects / 50696 bytes in 2ms
D/dalvikvm( 1141): GC freed 299 objects / 18400 bytes in 2ms
D/dalvikvm( 1141): GC freed 309 objects / 19496 bytes in 3ms
D/dalvikvm( 1141): GC freed 215 objects / 13656 bytes in 3ms
D/dalvikvm( 1141): GC freed 416 objects / 26632 bytes in 4ms
D/skia ( 1141): ------ build_power_table 1.4
D/skia ( 1141): ------ build_power_table 0.714286
D/dalvikvm( 1141): GC freed 415 objects / 28408 bytes in 4ms
D/dalvikvm( 1141): Trying to load lib /system/lib/libmedia_jni.so 0x0
D/dalvikvm( 1141): Added shared lib /system/lib/libmedia_jni.so 0x0
D/dalvikvm( 1141): Trying to load lib /system/lib/libexif.so 0x0
D/dalvikvm( 1141): Added shared lib /system/lib/libexif.so 0x0
D/dalvikvm( 1141): GC freed 2350 objects / 122560 bytes in 6ms
D/dalvikvm( 1141): Trying to load lib /system/lib/libmedia_jni.so 0x0
D/dalvikvm( 1141): Shared lib '/system/lib/libmedia_jni.so' already loaded in same CL 0x0
D/dalvikvm( 1141): Trying to load lib /system/lib/libmedia_jni.so 0x0
D/dalvikvm( 1141): Shared lib '/system/lib/libmedia_jni.so' already loaded in same CL 0x0
D/dalvikvm( 1141): Trying to load lib /system/lib/libmedia_jni.so 0x0
D/dalvikvm( 1141): Shared lib '/system/lib/libmedia_jni.so' already loaded in same CL 0x0
D/dalvikvm( 1141): Trying to load lib /system/lib/libmedia_jni.so 0x0
D/dalvikvm( 1141): Shared lib '/system/lib/libmedia_jni.so' already loaded in same CL 0x0
D/dalvikvm( 1141): GC freed 3790 objects / 197000 bytes in 10ms
D/dalvikvm( 1141): GC freed 463 objects / 26424 bytes in 10ms
D/dalvikvm( 1141): GC freed 294 objects / 17024 bytes in 13ms
D/dalvikvm( 1141): GC freed 204 objects / 11464 bytes in 11ms
D/dalvikvm( 1141): GC freed 172 objects / 9232 bytes in 12ms
D/dalvikvm( 1141): Trying to load lib /system/lib/libsrec_jni.so 0x0
D/dalvikvm( 1141): Added shared lib /system/lib/libsrec_jni.so 0x0
D/dalvikvm( 1141): Trying to load lib /system/lib/libsrec_jni.so 0x0
D/dalvikvm( 1141): Shared lib '/system/lib/libsrec_jni.so' already loaded in same CL 0x0
E/asset ( 1141): Looking for resource asset in '/system/framework/framework-res.apk'
E/asset ( 1141): MAS: Leave getLocalizationResFilePath ap:
D/dalvikvm( 1141): GC freed 300 objects / 34896 bytes in 15ms
D/dalvikvm( 1141): GC freed 127 objects / 24624 bytes in 17ms
D/dalvikvm( 1141): GC freed 343 objects / 38696 bytes in 22ms
D/dalvikvm( 1141): GC freed 414 objects / 25624 bytes in 18ms
D/dalvikvm( 1141): Trying to load lib /system/lib/libwebcore.so 0x0
D/dalvikvm( 1141): Added shared lib /system/lib/libwebcore.so 0x0
D/dalvikvm( 1141): GC freed 378 objects / 21600 bytes in 20ms
D/dalvikvm( 1141): GC freed 453 objects / 29144 bytes in 21ms
D/dalvikvm( 1141): GC freed 267 objects / 26528 bytes in 22ms
D/dalvikvm( 1141): GC freed 378 objects / 27048 bytes in 21ms
D/dalvikvm( 1141): GC freed 1083 objects / 91968 bytes in 26ms
D/dalvikvm( 1141): GC freed 664 objects / 35928 bytes in 26ms
D/dalvikvm( 1141): GC freed 709 objects / 41224 bytes in 24ms
D/dalvikvm( 1141): GC freed 735 objects / 40600 bytes in 35ms
D/dalvikvm( 1141): GC freed 12264 objects / 448488 bytes in 32ms
D/dalvikvm( 1141): GC freed 11289 objects / 478208 bytes in 32ms
D/dalvikvm( 1141): GC freed 9907 objects / 437592 bytes in 40ms
D/dalvikvm( 1141): GC freed 8690 objects / 494384 bytes in 33ms
D/dalvikvm( 1141): GC freed 8206 objects / 490912 bytes in 38ms
D/dalvikvm( 1141): GC freed 7956 objects / 488440 bytes in 37ms
D/dalvikvm( 1141): GC freed 7120 objects / 395192 bytes in 33ms
D/dalvikvm( 1141): GC freed 847 objects / 51408 bytes in 37ms
D/dalvikvm( 1141): GC freed 540 objects / 38872 bytes in 33ms
D/dalvikvm( 1141): GC freed 460 objects / 31216 bytes in 35ms
D/dalvikvm( 1141): GC freed 426 objects / 29600 bytes in 33ms
I/Zygote ( 1141): ...preloaded 1942 classes in 4145ms.
D/dalvikvm( 1141): GC freed 117 objects / 14848 bytes in 34ms
I/Zygote ( 1141): Preloading resources...
D/dalvikvm( 1141): GC freed 5 objects / 224 bytes in 40ms
D/dalvikvm( 1141): GC freed 187 objects / 9152 bytes in 38ms
D/dalvikvm( 1141): GC freed 140 objects / 7520 bytes in 34ms
D/dalvikvm( 1141): GC freed 250 objects / 11920 bytes in 32ms
I/Zygote ( 1141): ...preloaded 48 resources in 307ms.
I/Zygote ( 1141): ...preloaded 15 resources in 6ms.
D/dalvikvm( 1141): GC freed 112 objects / 8656 bytes in 35ms
D/dalvikvm( 1141): GC freed 227 objects / 9016 bytes in 32ms
D/dalvikvm( 1141): GC freed 24 objects / 944 bytes in 37ms
I/dalvikvm( 1141): Splitting out new zygote heap
I/dalvikvm( 1141): System server process 1390 has been created
I/Zygote ( 1141): Accepting command socket connections
D/dalvikvm( 1390): Trying to load lib /system/lib/libandroid_servers.so 0x0
D/dalvikvm( 1390): Added shared lib /system/lib/libandroid_servers.so 0x0
E/BatteryService( 1390): ttaOnlinePath not found
I/sysproc ( 1390): Entered system_init()
I/sysproc ( 1390): ServiceManager: 0x11cb20
I/SurfaceFlinger( 1390): SurfaceFlinger is starting
I/SurfaceFlinger( 1390): SurfaceFlinger's main thread ready to run. Initializing graphics H/W...
D/libEGL ( 1390): loaded /system/lib/egl/libGLES_android.so
D/libEGL ( 1390): loaded /system/lib/egl/libEGL_POWERVR_SGX530_121.so
D/libEGL ( 1390): loaded /system/lib/egl/libGLESv1_CM_POWERVR_SGX530_121.so
D/libEGL ( 1390): loaded /system/lib/egl/libGLESv2_POWERVR_SGX530_121.so
I/SurfaceFlinger( 1390): EGL informations:
I/SurfaceFlinger( 1390): # of configs : 30
I/SurfaceFlinger( 1390): vendor : Android
I/SurfaceFlinger( 1390): version : 1.4 Android META-EGL
I/SurfaceFlinger( 1390): extensions: EGL_KHR_image EGL_KHR_image_base EGL_KHR_image_pixmap EGL_ANDROID_image_native_buffer EGL_ANDROID_swap_rectangle EGL_ANDROID_get_render_buffer
I/SurfaceFlinger( 1390): Client API: OpenGL ES
I/SurfaceFlinger( 1390): EGLSurface: 8-8-8-8, config=0x1
E/libEGL ( 1390): eglSetSwapRectangleANDROID:1743 error 3008 (EGL_BAD_DISPLAY)
I/SurfaceFlinger( 1390): flags : 00110000
I/SurfaceFlinger( 1390): OpenGL informations:
I/SurfaceFlinger( 1390): vendor : Imagination Technologies
I/SurfaceFlinger( 1390): renderer : PowerVR SGX 530
I/SurfaceFlinger( 1390): version : OpenGL ES-CM 1.1
I/SurfaceFlinger( 1390): extensions: GL_OES_byte_coordinates GL_OES_fixed_point GL_OES_single_precision GL_OES_matrix_get GL_OES_read_format GL_OES_compressed_paletted_texture GL_OES_point_sprite GL_OES_point_size_array GL_OES_matrix_palette GL_OES_draw_texture GL_OES_query_matrix GL_OES_texture_env_crossbar GL_OES_texture_mirrored_repeat GL_OES_texture_cube_map GL_OES_blend_subtract GL_OES_blend_func_separate GL_OES_blend_equation_separate GL_OES_stencil_wrap GL_OES_extended_matrix_palette GL_OES_framebuffer_object GL_OES_rgb8_rgba8 GL_OES_depth24 GL_OES_stencil8 GL_OES_compressed_ETC1_RGB8_texture GL_OES_mapbuffer GL_OES_EGL_image GL_EXT_multi_draw_arrays GL_OES_required_internalformat GL_IMG_read_format GL_IMG_texture_compression_pvrtc GL_IMG_texture_format_BGRA8888 GL_EXT_texture_format_BGRA8888 GL_IMG_texture_stream GL_IMG_vertex_program
I/sysproc ( 1390): System server: starting Android runtime.
I/sysproc ( 1390): System server: starting Android services.
I/SystemServer( 1390): Entered the Android system server!
I/sysproc ( 1390): System server: entering thread pool.
I/SystemServer( 1390): Entropy Service
I/SystemServer( 1390): Power Manager
I/SystemServer( 1390): Activity Manager
I/ActivityManager( 1390): Memory class: 28
D/libEGL ( 1398): loaded /system/lib/egl/libGLES_android.so
E/SurfaceFlinger( 1390): eglSwapBuffers: EGL error 0x3008 (EGL_BAD_DISPLAY)
D/libEGL ( 1398): loaded /system/lib/egl/libEGL_POWERVR_SGX530_121.so
D/libEGL ( 1398): loaded /system/lib/egl/libGLESv1_CM_POWERVR_SGX530_121.so
D/libEGL ( 1398): loaded /system/lib/egl/libGLESv2_POWERVR_SGX530_121.so
W/UsageStats( 1390): Usage stats version changed; dropping
W/zipro ( 1398): Unable to open zip '/data/local/bootanimation.zip': No such file or directory
I/dalvikvm( 1390): Debugger thread not active, ignoring DDM send (t=0x41504e4d l=32)
I/SystemServer( 1390): Telephony Registry
I/SystemServer( 1390): Package Manager
I/Installer( 1390): connecting...
I/installd( 1145): new connection
D/dalvikvm( 1390): GC freed 3840 objects / 208984 bytes in 127ms
I/PackageManager( 1390): Libs: javax.obex:/system/framework/javax.obex.jar com.motorola.con2vcard:/system/framework/com.motorola.con2vcard.jar android.test.runner:/system/framework/android.test.runner.jar com.motorola.android.syncml:/system/framework/com.motorola.android.syncml.jar com.google.android.gtalkservice:/system/framework/com.google.android.gtalkservice.jar com.motorola.aui:/system/framework/com.motorola.aui.jar com.motorola.android.dlna:/system/framework/com.motorola.android.dlna.jar com.motorola.atcmd.pluginMgr:/system/framework/com.motorola.atcmd.pluginMgr.jar com.motorola.atcmd.base:/system/framework/com.motorola.atcmd.base.jar com.google.android.datamessaging:/system/framework/com.google.android.datamessaging.jar com.google.android.maps:/system/framework/com.google.android.maps.jar com.motorola.android.image:/system/framework/com.motorola.android.image.jar com.motorola.android.mediasync:/system/framework/com.motorola.android.mediasync.jar com.motorola.android.camera:/system/framework/com.motorola.android.camera.jar
I/PackageManager( 1390): Features: android.hardware.wifi android.hardware.location.network android.hardware.telephony android.hardware.location android.hardware.touchscreen.multitouch android.hardware.sensor.compass android.hardware.camera android.hardware.bluetooth android.hardware.sensor.proximity android.hardware.sensor.light android.hardware.location.gps android.hardware.telephony.gsm android.hardware.camera.autofocus android.hardware.touchscreen android.hardware.sensor.accelerometer android.software.live_wallpaper android.hardware.camera.flash
D/dalvikvm( 1390): GC freed 5178 objects / 345456 bytes in 102ms
W/PackageManager( 1390): Library not found: /system/framework/com.google.android.datamessaging.jar
I/dalvikvm( 1390): Zip is good, but no classes.dex inside, and no .odex file in the same directory
W/PackageManager( 1390): Exception reading jar: /system/framework/mot-framework-res.apk
W/PackageManager( 1390): java.io.IOException: /system/framework/mot-framework-res.apk
W/PackageManager( 1390): at dalvik.system.DexFile.isDexOptNeeded(Native Method)
W/PackageManager( 1390): at com.android.server.PackageManagerService.<init>(PackageManagerService.java:527)
W/PackageManager( 1390): at com.android.server.PackageManagerService.main(PackageManagerService.java:335)
W/PackageManager( 1390): at com.android.server.ServerThread.run(SystemServer.java:116)
I/dalvikvm( 1390): Zip is good, but no classes.dex inside, and no .odex file in the same directory
W/PackageManager( 1390): Exception reading jar: /system/framework/googlelogin-client.jar
W/PackageManager( 1390): java.io.IOException: /system/framework/googlelogin-client.jar
W/PackageManager( 1390): at dalvik.system.DexFile.isDexOptNeeded(Native Method)
W/PackageManager( 1390): at com.android.server.PackageManagerService.<init>(PackageManagerService.java:527)
W/PackageManager( 1390): at com.android.server.PackageManagerService.main(PackageManagerService.java:335)
W/PackageManager( 1390): at com.android.server.ServerThread.run(SystemServer.java:116)
D/PackageManager( 1390): Scanning app dir /system/framework

[GUIDE] Build AOSP for zerofltexx by Astrubale

DELETED

but there is some aosp build usable ( incall micro working on fine ) for galaxy s 6?
thanks for the guide Master

supera3 said:
but there is some aosp build usable ( incall micro working on fine ) for galaxy s 6?
thanks for the guide Master
Click to expand...
Click to collapse
Depend on what source zero-common, zerofltexx and kernel are based.

Very cool guide, I'll have to give this a shot later just for fun! Sorry for doubting you before.

If there are new commits, before ". build/envsetup.sh" tipe "repo sync" for upgrade.

Hi @Astrubale,
I tried to build cm-13.0 with your tutorial, but build fails non-stop on:
Code:
target SharedLib: libexpat (/home/sebek/android/system/out/target/product/zerofltexx/obj/SHARED_LIBRARIES/libexpat_intermediates/LINKED/libexpat.so)
/home/sebek/android/system/out/target/product/zerofltexx/obj/SHARED_LIBRARIES/libexpat_intermediates/lib/xmlparse.o: file not recognized: File format not recognized
collect2: error: ld returned 1 exit status
build/core/shared_library_internal.mk:80: recipe for target '/home/sebek/android/system/out/target/product/zerofltexx/obj/SHARED_LIBRARIES/libexpat_intermediates/LINKED/libexpat.so' failed
make: *** [/home/sebek/android/system/out/target/product/zerofltexx/obj/SHARED_LIBRARIES/libexpat_intermediates/LINKED/libexpat.so] Error 1
make: *** Waiting for unfinished jobs....
make[3]: Nothing to be done for 'dtbs'.
or
Code:
/home/sebek/android/system/out/target/product/zerofltexx/obj/SHARED_LIBRARIES/libcrypto_intermediates/android_compat_hacks.o: file not recognized: File format not recognized
collect2: error: ld returned 1 exit status
build/core/shared_library_internal.mk:80: recipe for target '/home/sebek/android/system/out/target/product/zerofltexx/obj/SHARED_LIBRARIES/libcrypto_intermediates/LINKED/libcrypto.so' failed
make: *** [/home/sebek/android/system/out/target/product/zerofltexx/obj/SHARED_LIBRARIES/libcrypto_intermediates/LINKED/libcrypto.so] Error 1
make: *** Waiting for unfinished jobs....
make: Leaving directory '/home/sebek/android/system'
The solution is to remove xmlparse.o or android_compat_hacks.o and I guess it continues the build. Almost at the end of compilation (I presume) it throws out that very error and after a while I get:
Code:
/home/sebek/android/system/kernel/samsung/exynos7420/scripts/Makefile.fwinst:45: target '/lib/firmware/tsp_stm/stm_z1.fw' given more than once in the same rule
/home/sebek/android/system/kernel/samsung/exynos7420/scripts/Makefile.fwinst:45: target '/lib/firmware/abov/abov_valley.fw' given more than once in the same rule
make[1]: Leaving directory '/home/sebek/android/system/kernel/samsung/exynos7420'
make[1]: Entering directory '/home/sebek/android/system/kernel/samsung/exynos7420'
INSTALL net/ipv4/tcp_htcp.ko
INSTALL net/ipv4/tcp_westwood.ko
/home/sebek/android/system/kernel/samsung/exynos7420/scripts/Makefile.fwinst:45: target '../../system/lib/firmware/tsp_stm/stm_z1.fw' given more than once in the same rule
/home/sebek/android/system/kernel/samsung/exynos7420/scripts/Makefile.fwinst:45: target '../../system/lib/firmware/abov/abov_valley.fw' given more than once in the same rule
DEPMOD 3.10.61
make[1]: Leaving directory '/home/sebek/android/system/kernel/samsung/exynos7420'
make: Leaving directory '/home/sebek/android/system'
#### make failed to build some targets (26:29 (mm:ss)) ####
Maybe you'd be willing to give me some advice on how I could finish this build ? I am building on Ubuntu 16.04, dl'd the newest kernel from Brandon's git repo.
My best

djseban2 said:
Hi @Astrubale,
I tried to build cm-13.0 with your tutorial, but build fails non-stop on:
Code:
target SharedLib: libexpat (/home/sebek/android/system/out/target/product/zerofltexx/obj/SHARED_LIBRARIES/libexpat_intermediates/LINKED/libexpat.so)
/home/sebek/android/system/out/target/product/zerofltexx/obj/SHARED_LIBRARIES/libexpat_intermediates/lib/xmlparse.o: file not recognized: File format not recognized
collect2: error: ld returned 1 exit status
build/core/shared_library_internal.mk:80: recipe for target '/home/sebek/android/system/out/target/product/zerofltexx/obj/SHARED_LIBRARIES/libexpat_intermediates/LINKED/libexpat.so' failed
make: *** [/home/sebek/android/system/out/target/product/zerofltexx/obj/SHARED_LIBRARIES/libexpat_intermediates/LINKED/libexpat.so] Error 1
make: *** Waiting for unfinished jobs....
make[3]: Nothing to be done for 'dtbs'.
or
Code:
/home/sebek/android/system/out/target/product/zerofltexx/obj/SHARED_LIBRARIES/libcrypto_intermediates/android_compat_hacks.o: file not recognized: File format not recognized
collect2: error: ld returned 1 exit status
build/core/shared_library_internal.mk:80: recipe for target '/home/sebek/android/system/out/target/product/zerofltexx/obj/SHARED_LIBRARIES/libcrypto_intermediates/LINKED/libcrypto.so' failed
make: *** [/home/sebek/android/system/out/target/product/zerofltexx/obj/SHARED_LIBRARIES/libcrypto_intermediates/LINKED/libcrypto.so] Error 1
make: *** Waiting for unfinished jobs....
make: Leaving directory '/home/sebek/android/system'
The solution is to remove xmlparse.o or android_compat_hacks.o and I guess it continues the build. Almost at the end of compilation (I presume) it throws out that very error and after a while I get:
Code:
/home/sebek/android/system/kernel/samsung/exynos7420/scripts/Makefile.fwinst:45: target '/lib/firmware/tsp_stm/stm_z1.fw' given more than once in the same rule
/home/sebek/android/system/kernel/samsung/exynos7420/scripts/Makefile.fwinst:45: target '/lib/firmware/abov/abov_valley.fw' given more than once in the same rule
make[1]: Leaving directory '/home/sebek/android/system/kernel/samsung/exynos7420'
make[1]: Entering directory '/home/sebek/android/system/kernel/samsung/exynos7420'
INSTALL net/ipv4/tcp_htcp.ko
INSTALL net/ipv4/tcp_westwood.ko
/home/sebek/android/system/kernel/samsung/exynos7420/scripts/Makefile.fwinst:45: target '../../system/lib/firmware/tsp_stm/stm_z1.fw' given more than once in the same rule
/home/sebek/android/system/kernel/samsung/exynos7420/scripts/Makefile.fwinst:45: target '../../system/lib/firmware/abov/abov_valley.fw' given more than once in the same rule
DEPMOD 3.10.61
make[1]: Leaving directory '/home/sebek/android/system/kernel/samsung/exynos7420'
make: Leaving directory '/home/sebek/android/system'
#### make failed to build some targets (26:29 (mm:ss)) ####
Maybe you'd be willing to give me some advice on how I could finish this build ? I am building on Ubuntu 16.04, dl'd the newest kernel from Brandon's git repo.
My best
Click to expand...
Click to collapse
Can you send me a screen of /android/system/kernel/samsung/exynos7420/ ?

Astrubale said:
Can you send me a screen of /android/system/kernel/samsung/exynos7420/ ?
Click to expand...
Click to collapse
Sure, it looks like this:
hxxp://imgur.com/M5sAjIo
@edit: I deleted exynos7420 dir and unzipped it (dl'd zip from github) once again, this time through Terminal. Turned out it was something wrong with that, therefore I succeded with building the ROM, but my S6 hangs on "Kernel is not seandroid enforcing", after flashing the ROM (tough luck, I guess). What's more I tried flahyboy's ROM, to see if it's maybe something wrong with my S6 - well, you can say flahyboy's ROM starts instantly, but in-call mic is not working. I'd be grateful for any hints on what might be wrong. One and only thing I noticed is flahyboy's ROM is slightly greater in size (~40MB) that mine.. maybe the build solution did not add something to my zip.. Anyway - great tutorial, thanks for that. Installing AOSP just made me even more anxious to wait for making this system stable :good:

djseban2 said:
Sure, it looks like this:
hxxp://imgur.com/M5sAjIo
@edit: I deleted exynos7420 dir and unzipped it (dl'd zip from github) once again, this time through Terminal. Turned out it was something wrong with that, therefore I succeded with building the ROM, but my S6 hangs on "Kernel is not seandroid enforcing", after flashing the ROM (tough luck, I guess). What's more I tried flahyboy's ROM, to see if it's maybe something wrong with my S6 - well, you can say flahyboy's ROM starts instantly, but in-call mic is not working. I'd be grateful for any hints on what might be wrong. One and only thing I noticed is flahyboy's ROM is slightly greater in size (~40MB) that mine.. maybe the build solution did not add something to my zip.. Anyway - great tutorial, thanks for that. Installing AOSP just made me even more anxious to wait for making this system stable :good:
Click to expand...
Click to collapse
Thank, but can you compile now?

Astrubale said:
Thank, but can you compile now?
Click to expand...
Click to collapse
Yeah, I compiled it at last, but if i flash the zip from out folder, then the phone hangs on first bootsplash ("Galaxy S6") with "Kernel is not seandroid enforcing"

djseban2 said:
Yeah, I compiled it at last, but if i flash the zip from out folder, then the phone hangs on first bootsplash ("Galaxy S6") with "Kernel is not seandroid enforcing"
Click to expand...
Click to collapse
Search for errors inside /proc/last_kmsg

Wow cool clean and easy Guide. Thanks for this.
Weil try myself on that.

Astrubale said:
Search for errors inside /proc/last_kmsg
Click to expand...
Click to collapse
Code:
Samsung S-Boot 4.0 for SM-G920F (Apr 22 2016 - 16:59:51)
EXYNOS7420 EVT 1.3 (Base on ARM CortexA53)
3048MB / 0MB / Rev 11 / G920FXXU3DPDP / (PKG_ID 0x0) / LOT_ID N3N1P / RST_STAT (0x10000)
__if_pmic_rev_init - MUIC API is not ready!
MON: 0x8(1)
MON[0] = (1)[0x1c, 0x7a]
MON[1] = (2)[0x1a, 0x56]
MON[2] = (3)[0x1a, 0x3d]
MON[3] = (4)[0x1c, 0x4e]
MON[4] = (5)[0x1a, 0x39]
MON[5] = (6)[0x1a, 0x30]
MON[6] = (7)[0x15, 0x44]
MON[7] = (0)[0x0c, 0x07]
pmic_asv_init
(ASV_TBL_BASE+0x00)[11:0] bigcpu_asv_group = 2184
(ASV_TBL_BASE+0x00)[15:12] bigcpu_ssa0 = 0
(ASV_TBL_BASE+0x00)[27:16] littlecpu_asv_group = 2457
(ASV_TBL_BASE+0x00)[31:28] littlecpu_ssa0 = 0
(ASV_TBL_BASE+0x04)[11:0] g3d_asv_group = 2184
(ASV_TBL_BASE+0x04)[15:12] g3d_ssa0 = 0
(ASV_TBL_BASE+0x04)[27:16] mif_asv_group = 2184
(ASV_TBL_BASE+0x04)[31:28] mif_ssa0 = 0
(ASV_TBL_BASE+0x08)[11:0] int_asv_group = 3276
(ASV_TBL_BASE+0x08)[15:12] int_ssa0 = 6
(ASV_TBL_BASE+0x08)[27:16] cam_disp_asv_group = 2184
(ASV_TBL_BASE+0x08)[31:28] cam_disp_ssa0 = 0
(ASV_TBL_BASE+0x0C)[3:0] dvfs_asv_table_version = 15
(ASV_TBL_BASE+0x0C)[4] asv_group_type = 0
(ASV_TBL_BASE+0x0C)[7:5] reserved01 = 0
(ASV_TBL_BASE+0x0C)[8] shift_type = 0
(ASV_TBL_BASE+0x0C)[9] ssa1_enable = 0
(ASV_TBL_BASE+0x0C)[10] ssa0_enable = 1
(ASV_TBL_BASE+0x0C)[15:11] reserved02 = 0
(ASV_TBL_BASE+0x0C)[16] asv_method = 1
(ASV_TBL_BASE+0x0C)[31:17] reserved03 = 0
(ASV_TBL_BASE+0x10)[3:0] main_asv_group = 0
(ASV_TBL_BASE+0x10)[7:4] main_asv_ssa = 0
(ASV_TBL_BASE+0x10)[11:8] bigcpu_ssa1 = 0
(ASV_TBL_BASE+0x10)[15:12] littlecpu_ssa1 = 0
(ASV_TBL_BASE+0x10)[19:16] g3d_ssa1 = 0
(ASV_TBL_BASE+0x10)[23:20] mif_ssa1 = 0
(ASV_TBL_BASE+0x10)[27:24] int_ssa1 = 0
(ASV_TBL_BASE+0x10)[31:28] cam_disp_ssa1 = 0
(ASV_TBL_BASE+0x14)[8:0] bigcpu_ssa_ema = 0
(ASV_TBL_BASE+0x14)[17:9] littlecpu_ssa_ema = 0
(ASV_TBL_BASE+0x14)[26:18] g3d_ssa_ema = 0
(ASV_TBL_BASE+0x14)[31:27] reserved04 = 0
chip_status = f, bin2_efuse = 0
muic_register_max77843_apis
muic_is_max77843 chip_id:0x43 muic_id:0xb5 -> matched.
MUIC rev = MAX77843(181)
init_multi_microusb_ic Active MUIC 0xb5
max77843_init_microusb_ic: MUIC: CDETCTRL:0x2d
max77843_init_microusb_ic: MUIC: CONTROL1:0x00
max77843_init_microusb_ic: MUIC: CONTROL2:0x3b
max77843_muic_get_adc_value: STATUS1:0x1f
max77843_muic_get_adc_value: ADC:0x1f
max77843_muic_get_adc_value: STATUS1:0x1f
max77843_muic_get_adc_value: ADC:0x1f
max77843_muic_get_chg_typ: STATUS2:0x00
max77843_muic_get_chg_typ: CHGTYP:0x00
max77843_muic_get_adc_value: STATUS1:0x1f
max77843_muic_get_adc_value: ADC:0x1f
max77843_muic_get_chg_typ: STATUS2:0x00
max77843_muic_get_chg_typ: CHGTYP:0x00
load Secure Payload done.
Chip ID : 060f4d16dd28 / 0x00007700
EL3 monitor information => Built : 16:48:28, Jan 18 2016
bConfigDescrLock: 1
sw_lock success
sw_lock success
sw_lock success
SCSI CMD : 55 11 00 00 00 00 00 00 14 00
SCSI Response(01) : Target Failure
SCSI Status(02) : max77843_set_muic_uart_early: MUIC: CONTROL1: 0x00
max77843_muic_get_adc_value: STATUS1:0x1f
max77843_muic_get_adc_value: ADC:0x1f
[Debug Info.]
S-BOOT : VERSION_-+F0
SecureOS : 20 (MB)
- read_bl1
blk_bread_bootsector: LUN 1, from 0x0, size 0x10, buffer 0x45708000
Verify_Binary_Signature 0x45720120 [email protected], [email protected]
pit_check_signature (PIT) valid.
PARAM ENV VERSION: v1.0..
blk_bread_bootsector: LUN 1, from 0xffe, size 0x1, buffer 0x441204c0
initialize_ddi_data: usable! (3:0xf), warranty reason : (0x0303)
MAGIC_RAM_BASE: 4000000, MAGIC_RAM_BASE2: 100001, ompin: 2000a
[ldfw] Pass LDFW partition!
[ldfw] read whole CM partition from the storage
ldfw: 0th ldfw's version 0x20151027 name : CryptoManagerV20
ldfw: 1th ldfw's version 0x20151203 name : fmp_fw
ldfw: init ldfw(s). whole ldfws size 0x204110
[ldfw] try to init 2 ldfw(s). except 0 ldfw 2 ldfw(s) have been inited done.
[mobi_drv] add: 0x43e71940, size: 11401
MobiCore IDLE flag = 0
MobiCore Driver loaded and RTM IDLE!
[OTP] 27 bit read: 0x5
[OTP] 22 bit read: 0x0
[OTP] 21 bit read: 0x0
[OTP] 23 bit read: 0x1
[OTP] 26 bit read: 0x1
[OTP] NANTIRBK0 bit reading: start
[OTP] NANTIRBK0: 3 bit
[OTP] 28 bit read: 0x1
[OTP] 29 bit read: 0x0
[OTP] 30 bit read: 0x1
[OTP] 25 bit read: 0x1
[OTP] ETC value: 0
[EFUSE] SMC Read the 0x0 ...
[EFUSE] SMC Read Count value: 3
[EFUSE] SMC Read the 0x1 ...
[EFUSE] SMC Read Count value: 1
[EFUSE] SMC Read the 0x2 ...
[EFUSE] SMC Read Count value: 0
[EFUSE] SMC Read the 0x3 ...
[EFUSE] SMC Read Count value: 1
(1,5) vs (1,5)
[EFUSE] This is commercial device.
set_tzpc_secureport: successfully protected 0
eSE Protection!!
Authenticated data read request (Swapped)
Authenticated data read response (Swapped)
RPMB: get hmac value: success
HMAC compare success !!
update_rpmb_version skip.
initialize_secdata_rpmb: usable! (0x52504d42)
DDR SIZE: 3G (0xc0000000)
LPDDR4 manufacturer : Micron
bin2_efuse = 0
[TMU] 52, 53, 51, 51
UFS vendor: SAMSUNG
FW rev : 0200
product : KLUBG4G1BD-E0B1
UFS size (GB) : 32
UFS ID : XXXXXXXXXXXXXXXX
lun:196 Query Response : 0xfc
lun:196 Query Response : 0xfc
lun:196 Query Response : 0xfc
lun:196 Query Response : 0xfc
dNumAllocUnits error at LU7 0 0
PROVISION : FAIL
PROVISION : FAIL
max77843_muic_api_print_init_regs: INTMASK[1:0x00, 2:0x00, 3:0x00]
max77843_muic_api_print_init_regs: MUIC: CDETCTRL:0x2d
max77843_muic_api_print_init_regs: MUIC: CONTROL1:0x00
max77843_muic_api_print_init_regs: MUIC: CONTROL2:0x3b
max77843_muic_api_print_init_regs: MUIC: CONTROL3:0x00
max77843_muic_api_print_init_regs: MUIC: CONTROL4[0x16]:0xb2
init_ific : MAX77843(0)
init_ific : MAX77843(0)
set_float_voltage: max77843 battery cv voltage 0x9c
set_charger_state: buck(1), chg(1), reg(0x05)
max77843_get_charger_status: Invalid charger
set_auto_current: get_charger_status(0)
max77843_muic_get_adc_value: STATUS1:0x1f
max77843_muic_get_adc_value: ADC:0x1f
max77843_muic_get_chg_typ: STATUS2:0x00
max77843_muic_get_chg_typ: CHGTYP:0x00
max77843_muic_get_adc_value: STATUS1:0x1f
max77843_muic_get_adc_value: ADC:0x1f
max77843_muic_get_chg_typ: STATUS2:0x00
max77843_muic_get_chg_typ: CHGTYP:0x00
get_wireless_charger_detect: wireless check 0
get_wireless_charger_detect : CHG_DTLS(0x00)
set_auto_current: unknown_state, curr(475)
max77843_get_charger_status: Invalid charger
get_wireless_charger_detect: wireless check 0
get_wireless_charger_detect : CHG_DTLS(0x00)
set_charger_current: chg curr(137), in curr(0)
max77843_get_charger_status: Invalid charger
get_wireless_charger_detect: wireless check 0
get_wireless_charger_detect : CHG_DTLS(0x00)
fuelguage : wpc_status(0)
set_charger_state: buck(1), chg(0), reg(0x04)
init_fuel_gauge: Start!!
init_fuel_gauge : MAX77843(0)
max77843_muic_get_adc_value: STATUS1:0x1f
max77843_muic_get_adc_value: ADC:0x1f
adc_read_temp temp_adc = 1852
init_fuel_gauge temp = 25
init_fuel_gauge : MAX77843(0)
init_fuel_gauge: Battery type : SDI, capacity: 5177, status: 128
init_fuel_gauge: Already initialized (0x1439, SDI type)
check_validation_with_tablesoc: Start!!
fuel_gauge_read_soc: SOC(32), data(0x209a)
fuel_gauge_read_ocv: VFOCV(3774), data(0xbcba)
calculate_table_soc : low(0) high(6) mid(7) table_soc(0)
calculate_table_soc : low(4) high(6) mid(3) table_soc(0)
calculate_table_soc : low(6) high(6) mid(5) table_soc(0)
calculate_table_soc : low(7) high(6) mid(6) table_soc(0)
calculate_table_soc: vcell [3774] table_soc [31]
differ(1), table_soc(31), RepSOC(32)
max77843_muic_get_adc_value: STATUS1:0x1f
max77843_muic_get_adc_value: ADC:0x1f
max77843_muic_get_chg_typ: STATUS2:0x00
max77843_muic_get_chg_typ: CHGTYP:0x00
fuel_gauge_read_vcell: VCELL(3716), data(0xb9d8)
vcell(3716),soc_diff_limit(50), low_temp_reset(0)
fuel_gauge_read_ocv: VFOCV(3774), data(0xbcba)
fuel_gauge_read_vcell: VCELL(3716), data(0xb9d8)
fuel_gauge_read_soc: SOC(32), data(0x209a)
fuel_gauge_read_vfsoc: VFSOC(30), data(0x1ef3)
init_fuel_gauge : OCV(3774), VCELL(3716), SOC(32), VFSOC(30)
AP_PMIC_SDA = 1
PMIC_ID = 0x12
OTP:0x78 PWR_SEQ:1 G3D_OCP:1 PSoff:1 INT_Volt:1
PMIC_STATUS1 = 0x2f PWRON JIGONB ACOKB MR2B PWRON1S
PMIC_STATUS2 = 0x11 RTC60SE RTC1SE
PMIC_PWRONSRC = 0x08 MRST
PMIC_OFFSRC = 0x00
PMIC_INT1 = 0xc3 PWRONF PWRONR PWRON1S MRB
PMIC_INT2 = 0x11 RTC60S RTC1S
PMIC_INT3 = 0x80 RSVD
PMIC_RTC_CTRL = 0x02
PMIC_RTC_SMPL = 0x83
RTC TIME: 2016-08-13 07:27:29(0x40)AM
s5p_check_keypad: 0x10110000
s5p_check_keypad: recovery mode
set_oneshot_recovery: recovery mode set! sys_bootm=0x80000
s5p_check_reboot_mode: INFORM3 = 0 ... skip
ATLAS_PLL = 1200MHz APOLLO_PLL = 1200MHz MIF_PLL = 3104MHz
MFC_PLL = 468MHz CCI_PLL = 532MHz
BUS0_PLL = 1600MHz BUS1_PLL = 668MHz
board_uart_rustproof ifc_sense: 0
-user build & not FAC
-rustproof mode Enabled
s5p_check_upload: MAGIC(0x4000000), RST_STAT(0x10000)
max77843_muic_get_adc_value: STATUS1:0x1f
max77843_muic_get_adc_value: ADC:0x1f
s5p_check_upload: debug level is LO! (mask: 0x220)
max77843_ific_set_mrstb: TOPSYS: MAINCTRL1[0x02]: [0x07]+[0x07]->[0x07]
s5p_check_upload: disable dump_gpr
max77843_muic_get_adc_value: STATUS1:0x1f
max77843_muic_get_adc_value: ADC:0x1f
s5p_check_download: 0
max77843_muic_get_adc_value: STATUS1:0x1f
max77843_muic_get_adc_value: ADC:0x1f
max77843_get_charger_status: Invalid charger
get_wireless_charger_detect: wireless check 0
get_wireless_charger_detect : CHG_DTLS(0x00)
check_pm_status: charger is not detected
fuel_gauge_read_vcell: VCELL(3718), data(0xb9ea)
check_pm_status: voltage(3718) is ok
check_pm_status: 7 sec reset, continue.
scr_draw_image: draw 'logo.jpg'...
read 'logo.jpg'(112504) completed.
board_set_dev_pm: s2mpb02 enable for display
42, 0, 13, 0x420013
DETECTED LCD TYPE : S6E3HA2
mipi-dsi driver(CMD mode) has been probed.
decon-int: ver0, max win7, command mode, hw trigger
single dsi mode
decon0 registered successfully
afw flag is Unknown [afw flag : 00 00 00 00]
secure info base: 45720000 and SMC Num = 0x83000013
secure smc success!!! [ret = 0]
Set debug level to low(4f4c)
DMV: Successfully informed TZ of boot mode: Recovery
load_kernel: loading boot image from 139264..
kernel size = 0x114f000, ramdisk size = 0x5fc000
dt_size:1454080, dt_actual:1454080
Verify_Binary_Signature 0x45720120 [email protected], [email protected]
Kernel Image
Verify_Binary_Signature: failed.(-18022398)
pit_check_signature (RECOVERY) invalid.
[TIMA trusted boot]: SEANDROID ENFORCING
Set invalid sign flag
No need to update kernel type.
[EFUSE] warranty bit is already set.
ace_hash_sha_digest: passed.(0)
tboot ctx base: 45720248
SMC Num = 0x83000001
mobismc success!!! [ret = 0]
SMC Num = 0x83000007
mobismc for tima info success!!! [ret = 0]
Pass. DTBH size is smaller than a page.
<dtbh_header Info>
magic:0x48425444, version:0x00000002, num_entries:0x00000008
<device info>
chip_id: 0x00001cfc
platform_id: 0x000050a6
subtype_id: 0x217584da
hw_rev: 0x0000000b
dt_entry[06]
chip_id: 0x00001cfc
platform_id: 0x000050a6
subtype_id: 0x217584da
hw_rev: 0x0000000a
hw_rev_end: 0x0000000b
offset: 0x0010a000
dtb size: 0x0002c800
Selected entry hw_ver : 11
dt_entry of hw_rev 10 is loaded at 0x4a000000.(182272 Bytes)
[EFUSE] RB count: device(0x3), binary(0x3)
[OTP] SW LOCK Success
DDI value :0x0000000f
sw_lock success
sw_lock success
Forced Enable KAP
Warranty Bit Set - Blowing KAP_VIOLATION_FUSE
KAP status = 5afe0003
ATAG_CORE: 5 54410001 0 0 0
ATAG_MEM: 4 54410002 20000000 40000000
ATAG_MEM: 4 54410002 20000000 60000000
ATAG_MEM: 4 54410002 20000000 80000000
ATAG_MEM: 4 54410002 20000000 A0000000
ATAG_MEM: 4 54410002 20000000 C0000000
ATAG_MEM: 4 54410002 1E800000 E0000000
ATAG_SERIAL: 4 54410006 XXXXXXXX XXXXXXXX
ATAG_INITRD2: 4 54420005 43000000 5fbd8f
ATAG_REVISION: 3 54410007 b
check_rustproof [0,0] On
ucs flag is Unknown
ucs flag : 00 00 00 00
ATAG_CMDLINE: f0 54410009 'console=ram loglevel=4 bootmode=2 sec_debug.level=0 sec_watchdog.sec_pet=5 androidboot.hardware=samsungexynos7420 androidboot.debug_level=0x4f4c ess_setup=0x46000000 [email protected] [email protected] charging_mode=0x3000 s3cfb.bootloaderfb=0xe2a00000 sysscope=0x6b090719 lcdtype=4325395 consoleblank=0 lpj=239616 sec_debug.reset_reason=5 ehci_hcd.park=3 oops=panic pmic_info=35 cordon=c34c0eba5576148dc662cf43a6352c3b connie=SM-G920F_OPEN_EUR_c3811d70601ea690b7b0b2afca80be2c fg_reset=0 androidboot.emmc_checksum=3 androidboot.boot_salescode= androidboot.odin_download=1 androidboot.bootloader=G920FXXU3DPDP androidboot.selinux=enforcing androidboot.security_mode=1526595585 androidboot.ucs_mode=0 androidboot.hw_rev=11 androidboot.warranty_bit=1 androidboot.hmac_mismatch=0 androidboot.sec_atd.tty=/dev/ttySAC1 androidboot.serialno=XXXXXXXXXXXXXXXX snd_soc_core.pmdown_time=1000 zero_sdchg_ic=0 androidboot.fmp_config=0'
ATAG_NONE: 0 0
pack_atags: ramdisk size start 0x43000000, size 0x5fbd8f
Updating device tree @0x4a000000: done
Starting kernel at 0x40205000...
SWITCH_SEL(3)
BOOTING TIME : 2895
Here it is, mate. I can't seem to find anything suspicious besides
Code:
dNumAllocUnits error at LU7 0 0
PROVISION : FAIL
PROVISION : FAIL
but I can only guess

Hi I am having problems compiling due to the kernel. Which kernel source should I use? How should I configure it? Help pleaase

Added "extract files" guide.

Whenever I try to download the CyanogenMod repo, I get this error:
error: Exited sync due to fetch errors
I've tried using: repo sync -f and: repo sync --force-sync
I'm trying to download the CM13 repo.
I've also followed the steps exactly as they were written.

I'm trying to build cm-14.0. Fails at
HTML:
Starting build with ninja
ninja: Entering directory `.'
ninja: error: '/home/julian/android/system/out/target/product/zerofltexx/obj_arm/SHARED_LIBRARIES/libsecril-client_intermediates/export_includes', needed by '/home/julian/android/system/out/target/product/zerofltexx/obj_arm/SHARED_LIBRARIES/audio.primary.universal7420_intermediates/import_includes', missing and no known rule to make it
build/core/ninja.mk:151: recipe for target 'ninja_wrapper' failed
make: *** [ninja_wrapper] Error 1
make: Leaving directory '/home/julian/android/system'
.
Any ideas what could be wrong?
/android/system/kernel/samsung/exynos7420 contains github.com/CyanogenMod/android_kernel_samsung_exynos7420 cm-14.0.
Thanks for the great guide anyway