IRC log for #openezx on 20100120

00:40.27*** join/#openezx Sleep_Walker (n=Sleep@193.179.96.131)
02:13.21*** join/#openezx johanbr (n=j@blk-222-216-252.eastlink.ca)
02:17.08*** join/#openezx Sleep-Walker (n=Sleep@193.179.96.131)
02:51.32*** join/#openezx Noctambulist (n=Sleep@193.179.96.131)
05:21.11*** join/#openezx Sleep_Walker (n=Sleep@193.179.96.131)
07:01.19*** join/#openezx l403 (n=l@85.132.159.239)
08:39.31*** join/#openezx stefan_schmidt (n=stefan@w0804.wlan.rz.tu-bs.de)
08:44.43*** join/#openezx marex (n=marex@vasut.kolej.mff.cuni.cz)
09:06.55*** join/#openezx ao2 (n=ao2@2001:1418:117:0:0:0:0:1)
09:09.17yangHi ao2
09:09.31ao2hi
09:14.46[mbm]wow, people do actually talk in this channel ;)
09:24.32ao2:)
09:27.36[mbm]still playing with the droid bootloader
09:29.04ao2[mbm], can you tell me the result you get when you send RQHW to droid?
09:30.12ao2and also I was thinking that you can use ADDR to scan the memory range the bootloader allow access to
09:30.46[mbm]any idea what RQUID is?
09:32.21[mbm]RQHW: RSHW01FF002C6CFFFFFF
09:32.54ao2no, sorry, never heard of RQUID, could it be related to signing kernels?
09:33.07[mbm]not really sure
09:33.19[mbm]takes a 4 byte argument
09:33.28[mbm]always seems to return the exact same result though
09:33.36ao2ok, I am adding that RSHW to out RQHW database
09:34.25[mbm]the 2C6C is the bootloader version
09:37.31ao2Decoding it using the code from a780-blob we get:
09:37.33ao2Motorola Droid
09:37.33ao2descriptor_type: 1
09:37.33ao2hw_chipset_type: 255
09:37.33ao2ma_type: 0
09:37.33ao2growth0: 44
09:37.34ao2growth1: 108
09:37.36ao2product_sub_type: 255
09:37.38ao2version_number: 65535
09:37.57[mbm]btw, there are some serious security implications to the concept of reading/writing the entire flash from the bootloader
09:38.26[mbm]don't think that's decoded properly
09:41.14[mbm]the screen quite literally says "Bootloader 2C.6C"
09:51.34*** join/#openezx florian_kc (n=fuchs@Maemo/community/contributor/florian)
09:54.15janneg_[mbm]: are bootloader dumps of the droid available somewhere? I would like to compare them to the milestone bootloaders
09:56.03[mbm]yeah, it's mbm.bin in the 2.0.1 update.zip that kicked off the droid rooting
09:56.24[mbm]can't remember the url but it should be easy enough to google for
09:56.58[mbm]more interesting is the cdt
09:57.27[mbm]be interested to see the cdt from a milestone
09:59.32janneg_I'm not yet exactly sure how I can get the entire flash
09:59.51[mbm]you have a rooted milestone?
09:59.54janneg_it's only ccompletely mapped in the recovery image
09:59.56janneg_yes
10:00.22[mbm]what mtds are visible?
10:02.43janneg_pds, cid, misc, boot, recovery, cache, cdrom, system, userdata, cust, kpanic
10:04.01[mbm]wtf is cust?
10:06.18[mbm]cdrom also sounds interesting; explains the cdrom mode in the usb driver
10:07.00janneg_mounted to /system/etc/motorola and contains motorola customizations
10:07.01[mbm]interesting
10:09.27[mbm]well, the mtd partitions are defined on the kernel commandline, if you can replace either the boot or recovery kernels you can just alter the commandline
10:09.28janneg_I can't, partitions seems to be signed
10:09.34[mbm]ok, what abotu loading arbitrary kernel modules?
10:09.58[mbm]could remap the mtds with a module
10:09.58janneg_seems to work
10:10.25janneg_like in drivers/mtd/maps
10:10.47[mbm]yep
10:25.27[mbm]hmm not seeing any readily available handles to the mtd_info object
10:52.18janneg_get_mtd_device_nm?
10:53.23[mbm]ah, yep that'd work
11:14.09[mbm]did the unmodified update.zip for the milestone get posted anywhere?
11:22.52[mbm]found it; looks interesting
11:26.58*** join/#openezx toi (n=toi@d54C2A96D.access.telenet.be)
11:28.43janneg_the boot.img has the same signature like data at the same offset
11:29.49[mbm]yeah, from the looks of the droid they have the option of signing stuff, they just don't
11:30.30[mbm]any luck with the kernel module?
11:31.15janneg_not yet started
11:32.43[mbm]http://pastebin.com/m715a81e7 .. not sure if it'd actually work
11:34.56[mbm]interesting how the milestone update is packed completely different from the droid updates
12:01.00*** join/#openezx Sleep-Walker (n=Sleep@193.179.96.131)
12:03.27janneg_[mbm]: seems to work after fixing the obvious typos. thanks
12:04.36[mbm]cool.
12:06.39janneg_boot is the wrong mtd device though
12:06.59[mbm]oh?
12:08.23janneg_it looks like it's only the boot mtd partition
12:09.15[mbm]didn't dig into the api, figured with an mtd_info handle you could just append partitions
12:10.50[mbm]on the droid from recovery you can see a partion labeled cdt which is a complete partition map
12:12.24[mbm]that'll also tell you what areas of the flash require signatures
12:12.39janneg_I have the complete partition map from the recovery cmdline
12:13.17[mbm]you sure about that? recovery only maps out sections of the flash that it needs to update
12:13.55janneg_using" omap-nand.0" as mtd device freezes and reboots the milestone :(
12:13.56[mbm]if you go look at the sizes and offsets of the mtd partitions you'll find there are some pretty large gaps
12:14.21janneg_mtdparts=omap2-nand.0:128k(mbmloader),640k(mbm),640k(mbmbackup),384k(bploader),384k(cdt),1536k(pds),384k(lbl),384k(lbl_backup),384k(cid),1536k(sp),384k(devtree),640k(logo),384k(misc),3584k(boot),3840k(bpsw),4608k(recovery),8960k(cdrom),384k(unused0),179840k(system),384k(unused1),106m(cache),201856k(userdata),1536k(cust),384k(unused2),2m(kpanic),512k(rsv)'
12:14.21[mbm]huh?
12:14.36[mbm]oh that's interesting
12:15.14[mbm]mtdparts=omap2-nand.0:640k@128k(mbm),384k@1408k(cdt),384k@3328k(lbl),384k@6272k(misc),3584k(boot),4608k(recovery),143744k(system),94848k(cache),268032k(userdata),2m(kpanic)
12:17.15[mbm]so the crash, was that the module?
12:17.36janneg_yes, after module load
12:18.50[mbm]probably not a great idea to give it a handle to a partition map in the module and then crash the module to unload it
12:19.10[mbm]might need to do a return 0 just so the module stays loaded and you don't have a pointer deref problem
12:20.55janneg_I already have a return 0;
12:21.39[mbm]I usually take the lazy route and return an error just to unload the module without writing an exit
12:22.00janneg_nothing interesting in adb logcat
12:22.12[mbm]crash would be in adb bugreport
12:22.18[mbm]gets logged to kpanic
12:29.28*** join/#openezx Sleep-Walker (n=Sleep@193.179.96.131) [NETSPLIT VICTIM]
12:30.41*** join/#openezx mickeyl (n=nnmickey@80.81.242.146)
12:30.41*** join/#openezx tmzt (n=tmzt@99.164.34.42)
12:38.07*** join/#openezx tmzt (n=tmzt@99.164.34.42)
12:38.07*** join/#openezx mpurcell (n=mpurcell@sholes.info) [NETSPLIT VICTIM]
12:38.07*** join/#openezx agd5f (n=alex@static-74-96-105-7.washdc.fios.verizon.net) [NETSPLIT VICTIM]
12:38.07*** join/#openezx sabrod (n=fred@mic92-8-82-234-143-184.fbx.proxad.net) [NETSPLIT VICTIM]
12:38.07*** join/#openezx uwe_ (n=uwe_@dslb-088-066-176-255.pools.arcor-ip.net) [NETSPLIT VICTIM]
12:38.07*** join/#openezx ao2 (n=ao2@2001:1418:117:0:0:0:0:1) [NETSPLIT VICTIM]
12:42.40*** join/#openezx l403 (n=l@85.132.159.239) [NETSPLIT VICTIM]
12:42.40*** join/#openezx Sleep-Walker (n=Sleep@193.179.96.131) [NETSPLIT VICTIM]
12:42.40*** join/#openezx janneg_ (n=janne@chybek.jannau.net) [NETSPLIT VICTIM]
12:42.40*** join/#openezx florian (n=fuchs@Maemo/community/contributor/florian) [NETSPLIT VICTIM]
12:43.17*** join/#openezx mickeyl (n=nnmickey@80.81.242.146) [NETSPLIT VICTIM]
12:45.28*** join/#openezx bartv (n=bart@thisnet.xs4all.nl) [NETSPLIT VICTIM]
12:45.28*** join/#openezx ghane (n=ghane@1-1-4-27a.mdp.mlm.bostream.se) [NETSPLIT VICTIM]
12:45.28*** join/#openezx parmaster (i=par@dipole.idlepattern.com)
12:45.28*** join/#openezx punkass (i=rad@unaffiliated/punkass) [NETSPLIT VICTIM]
12:45.28*** join/#openezx TheTrash (n=rtrsh@82-169-3-152.ip.telfort.nl) [NETSPLIT VICTIM]
12:45.28*** join/#openezx stefan___t (n=root@vs1141105.vserver.de) [NETSPLIT VICTIM]
12:50.11*** join/#openezx mickeyl (n=nnmickey@80.81.242.146)
12:54.34*** join/#openezx Sleep-Walker (n=Sleep@193.179.96.131)
12:54.34*** join/#openezx l403 (n=l@85.132.159.239) [NETSPLIT VICTIM]
12:54.34*** join/#openezx Noctambulist (n=Sleep@193.179.96.131)
12:58.00*** join/#openezx tmzt (n=tmzt@99.164.34.42)
12:58.00*** join/#openezx ao2 (n=ao2@2001:1418:117:0:0:0:0:1) [NETSPLIT VICTIM]
12:58.00*** join/#openezx uwe_ (n=uwe_@dslb-088-066-176-255.pools.arcor-ip.net)
12:58.00*** join/#openezx sabrod (n=fred@mic92-8-82-234-143-184.fbx.proxad.net)
12:58.00*** join/#openezx agd5f (n=alex@static-74-96-105-7.washdc.fios.verizon.net) [NETSPLIT VICTIM]
12:58.00*** join/#openezx mpurcell (n=mpurcell@sholes.info)
13:00.35*** join/#openezx james__ (n=james@gimel.esc.cam.ac.uk)
13:14.21*** join/#openezx mickeyl (n=nnmickey@80.81.242.146) [NETSPLIT VICTIM]
13:15.54*** join/#openezx james__ (n=james@gimel.esc.cam.ac.uk)
13:18.34*** join/#openezx jamesmck (n=james@gimel.esc.cam.ac.uk) [NETSPLIT VICTIM]
13:18.34*** join/#openezx Noctambulist (n=Sleep@193.179.96.131)
13:18.34*** join/#openezx l403 (n=l@85.132.159.239) [NETSPLIT VICTIM]
13:18.34*** join/#openezx Sleep_Talker (n=Sleep@193.179.96.131)
13:33.30*** join/#openezx toi (n=toi@d54C2A96D.access.telenet.be)
13:33.58*** join/#openezx tmzt (n=tmzt@99.164.34.42)
13:33.58*** join/#openezx ao2 (n=ao2@2001:1418:117:0:0:0:0:1) [NETSPLIT VICTIM]
13:33.58*** join/#openezx uwe_ (n=uwe_@dslb-088-066-176-255.pools.arcor-ip.net)
13:33.59*** join/#openezx sabrod (n=fred@mic92-8-82-234-143-184.fbx.proxad.net) [NETSPLIT VICTIM]
13:33.59*** join/#openezx agd5f (n=alex@static-74-96-105-7.washdc.fios.verizon.net) [NETSPLIT VICTIM]
13:33.59*** join/#openezx mpurcell (n=mpurcell@sholes.info) [NETSPLIT VICTIM]
13:35.11*** join/#openezx florian (n=fuchs@Maemo/community/contributor/florian)
13:35.11*** join/#openezx janneg_ (n=janne@chybek.jannau.net) [NETSPLIT VICTIM]
13:35.39*** join/#openezx mickeyl (n=nnmickey@80.81.242.146) [NETSPLIT VICTIM]
13:39.29*** join/#openezx Sleep_Walker (n=Sleep@193.179.96.131)
13:39.29*** join/#openezx l403 (n=l@85.132.159.239) [NETSPLIT VICTIM]
13:39.37*** mode/#openezx [+o ao2] by ChanServ
13:39.52*** topic/#openezx by ao2 -> "OpenEZX Developer Lounge -- http://www.openezx.org -- Facebook group: http://www.facebook.com/group.php?gid=291471230258"
13:40.07*** mode/#openezx [-o ao2] by ChanServ
13:40.33*** mode/#openezx [+o ao2] by ChanServ
13:40.40*** topic/#openezx by ao2 -> OpenEZX Developer Lounge -- http://www.openezx.org -- Facebook group: http://www.facebook.com/group.php?gid=291471230258
13:40.43*** mode/#openezx [-o ao2] by ChanServ
13:42.17*** join/#openezx bartv (n=bart@thisnet.xs4all.nl) [NETSPLIT VICTIM]
13:42.17*** join/#openezx ghane (n=ghane@1-1-4-27a.mdp.mlm.bostream.se) [NETSPLIT VICTIM]
13:42.17*** join/#openezx parmaster (i=par@dipole.idlepattern.com) [NETSPLIT VICTIM]
13:42.17*** join/#openezx punkass (i=rad@unaffiliated/punkass) [NETSPLIT VICTIM]
13:42.17*** join/#openezx TheTrash (n=rtrsh@82-169-3-152.ip.telfort.nl) [NETSPLIT VICTIM]
13:42.17*** join/#openezx stefan___t (n=root@vs1141105.vserver.de) [NETSPLIT VICTIM]
14:31.22*** join/#openezx Sleep_Walker (n=Sleep@193.179.96.131)
16:26.58*** join/#openezx johanbr (n=j@JBrannlund2.MathStat.Dal.Ca)
16:31.19*** join/#openezx toi (n=toi@d54C2A96D.access.telenet.be)
16:57.05*** join/#openezx marex (n=marex@vasut.kolej.mff.cuni.cz)
17:15.41*** join/#openezx toi (n=toi@d54C2A96D.access.telenet.be)
17:30.02*** join/#openezx pH5 (n=ph5@e178213051.adsl.alicedsl.de)
18:41.55*** join/#openezx marex (n=marex@vasut.kolej.mff.cuni.cz)
18:43.50*** join/#openezx file (n=file@asterisk/developer-and-muffin-lover/file)
18:45.45*** part/#openezx file (n=file@asterisk/developer-and-muffin-lover/file)
19:08.24*** join/#openezx florian (n=fuchs@Maemo/community/contributor/florian)
21:04.28*** join/#openezx stefan_schmidt (n=stefan@p5B037653.dip.t-dialin.net)
22:24.57*** join/#openezx l403 (n=l@85.132.159.239)

Generated by irclog2html.pl Modified by Tim Riker to work with infobot.