Advertisement
Guest User

Broly MIPS32 AC55U now known as DeBrickashaw Ferguson

a guest
Apr 26th, 2017
1,244
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 15.84 KB | None | 0 0
  1. 1 https://pastebin.com/gyzLGKEs first successful mips32 compile
  2. 2 https://pastebin.com/nHzYRDps copied over missing libc files/tidied up (missed copying c++ over in this one)
  3. 3 https://pastebin.com/AzFHxnPD libqmi (glib 2.52 and util-linux 2.29 upgraded as well)
  4. 4 https://pastebin.com/Cyh8eivj minidlna update
  5. 5 https://pastebin.com/L9w8arvC gudev added
  6. 6 https://pastebin.com/h2xFLf2V php7 updates etc
  7. 7 https://pastebin.com/bHPpZrRx updated ar71xx for 4.9 (also did it for ar934x platform ["wasp"--mips74k])
  8. 8 https://pastebin.com/zsdTjjKQ status update on the firmware (not really exclusive to the AC55U, just packing it using mkimage vs lzma-loader etc).
  9.  
  10. well,
  11.  
  12. now i know why a qca955x chipset was a freakin' 69 dollar STEAL at STAPLES of all places (i got memoryexpress to pricematch), lol.
  13.  
  14. bloody thing is using the mips AR9331.dtsi, and a weird-ass bootloader that results in the FW looking for UBI before u-boot *and* after (WTF?).
  15.  
  16. w/e lol i totally expected to brick this shit.
  17.  
  18. brick dump:
  19. ath> ? ubi
  20. ubi part [part] - Show or set current partition
  21. ubi detach - Detach UBI device.
  22. ubi info [l[ayout]]|[w[layout]] - Display volume and ubi layout information
  23. ubi create[vol] volume [size] [type] - create volume name with size
  24. ubi write[vol] address volume size - Write volume from address with size
  25. ubi read[vol] address volume [size] [offset] - Read volume to address with size
  26. [Legends]
  27. volume: character name
  28. size: specified in bytes
  29. type: s[tatic] or d[ynamic] (default=dynamic)
  30.  
  31. ath> ubi detach
  32. ath> ubi create
  33. Error, no UBI device/partition selected!
  34. ath> ? mtd
  35. mtdparts
  36.    - list partition table
  37. mtdparts delall
  38.    - delete all partitions
  39. mtdparts del part-id
  40.    - delete partition (e.g. part-id = nand0,1)
  41. mtdparts add <mtd-dev> <size>[@<offset>] [<name>] [ro]
  42.    - add partition
  43. mtdparts default
  44.    - reset partition table to defaults
  45.  
  46. -----
  47.  
  48. this command uses three environment variables:
  49.  
  50. 'partition' - keeps current partition identifier
  51.  
  52. partition  := <part-id>
  53. <part-id>  := <dev-id>,part_num
  54.  
  55. 'mtdids' - linux kernel mtd device id <-> u-boot device id mapping
  56.  
  57. mtdids=<idmap>[,<idmap>,...]
  58.  
  59. <idmap>    := <dev-id>=<mtd-id>
  60. <dev-id>   := 'nand'|'nor'|'onenand'<dev-num>
  61. <dev-num>  := mtd device number, 0...
  62. <mtd-id>   := unique device tag used by linux kernel to find mtd device (mtd->name)
  63.  
  64. 'mtdparts' - partition list
  65.  
  66. mtdparts=mtdparts=<mtd-def>[;<mtd-def>...]
  67.  
  68. <mtd-def>  := <mtd-id>:<part-def>[,<part-def>...]
  69. <mtd-id>   := unique device tag used by linux kernel to find mtd device (mtd->name)
  70. <part-def> := <size>[@<offset>][<name>][<ro-flag>]
  71. <size>     := standard linux memsize OR '-' to denote all remaining space
  72. <offset>   := partition start offset within the device
  73. <name>     := '(' NAME ')'
  74. <ro-flag>  := when set to 'ro' makes partition read-only (not used, passed to kernel)
  75. ath> ? nand
  76. nand info                  - show available NAND devices
  77. nand device [dev]     - show or set current device
  78. nand read[.jffs2]     - addr off size
  79. nand write[.jffs2]    - addr off size - read/write `size' bytes starting
  80.     at offset `off' to/from memory address `addr'
  81. nand erase [clean] [off size] - erase `size' bytes from
  82.    offset `off' (entire device if not specified)
  83. nand bad - show bad blocks
  84. nand dump[.oob] off - dump page
  85.  
  86. ath> mtdparts
  87.  
  88. device nand0 <nand0>, # parts = 2
  89.  #: name                size            offset          mask_flags
  90.  0: Bootloader          0x000e0000      0x00000000      0
  91.  1: environment         0x00020000      0x000e0000      0
  92.  
  93. active partition: nand0,0 - (Bootloader) 0x000e0000 @ 0x00000000
  94.  
  95. defaults:
  96. mtdids  : nor0=ath-nor0
  97. mtdparts: none
  98. ath> mtdparts add<INTERRUPT>
  99. ath> printenv
  100. bootcmd=tftp
  101. bootdelay=2
  102. baudrate=115200
  103. ethaddr=0x00:0xaa:0xbb:0xcc:0xdd:0xee
  104. preferred_nic=eth1
  105. mtdids=nand0=nand0
  106. filesize=2758000
  107. fileaddr=81000000
  108. ipaddr=192.168.1.1
  109. serverip=192.168.1.11
  110. autostart=no
  111. bootfile=dd-wrt.v24-K4-RT_AC55U.trx
  112. ethact=eth0
  113. mtdparts=mtdparts=nand0:896k(Bootloader),128k(environment)
  114. stdin=serial
  115. stdout=serial
  116. stderr=serial
  117. partition=nand0,0
  118. mtddevnum=0
  119. mtddevname=Bootloader
  120.  
  121. Environment size: 406/131068 bytes
  122. ath> mtdparts add nand0 0x07e00000@0x00100000 UBI_DEV
  123. ath> mtdparts
  124.  
  125. device nand0 <nand0>, # parts = 3
  126.  #: name                size            offset          mask_flags
  127.  0: Bootloader          0x000e0000      0x00000000      0
  128.  1: environment         0x00020000      0x000e0000      0
  129.  2: UBI_DEV             0x07e00000      0x00100000      0
  130.  
  131. active partition: nand0,0 - (Bootloader) 0x000e0000 @ 0x00000000
  132.  
  133. defaults:
  134. mtdids  : nor0=ath-nor0
  135. mtdparts: none
  136. ath> ubi info
  137. Error, no UBI device/partition selected!
  138. ath> setenv mtdparts mtdparts=nand0:896k(Bootloader),128k(environment),126m(UBI_DEV)
  139. ath> saveenv
  140. Saving Environment to NAND...
  141. Erasing Nand...Writing to Nand... done
  142. ath> reset
  143. __________________sri____________________
  144. 944x BootROM Ver. (asic) 1.0 [Nov  8 2011 13:42:57]
  145. _________________________________________
  146. find_hif: bootstrap = 0x31e50
  147. Nand Flash init
  148. otp_get_nand_table: 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0
  149. ONFI: Control Setting = 0xb44
  150. hdr: [0xffffffff : 0xffffffff : 0xffffffff : 0xffffffff]
  151. nand_load_fw: read 2097151 pages
  152. ExcCode 03 -> TLB(store)
  153. EPC bfc01a28, BadVAddr ffffffff, Cause 0000000c, Status 10400006
  154.  
  155. R0 (r0) = 00000000  R8 (t0) = ffffffff  R16(s0) = bd000000  R24(t8) = 01010000
  156. R1 (at) = 00000001  R9 (t1) = bd0009b4  R17(s1) = 00000800  R25(t9) = bfc01284
  157. R2 (v0) = 000000ff  R10(t2) = 00000000  R18(s2) = 00030000  R26(k0) = ffffffff
  158. R3 (v1) = 00000001  R11(t3) = bd000520  R19(s3) = 00010000  R27(k1) = bd007bf0
  159. R4 (a0) = ffffffff  R12(t4) = 00000000  R20(s4) = 00000800  R28(gp) = 87e265b0
  160. R5 (a1) = bd004010  R13(t5) = 00000500  R21(s5) = ffffffff  R29(sp) = bd007f58
  161. R6 (a2) = 000007ef  R14(t6) = 86dab2bc  R22(s6) = ffffffff  R30(fp) = 00000000
  162. R7 (a3) = ffffffff  R15(t7) = 86dab2b8  R23(s7) = bd000000  R31(ra) = bfc060ac
  163.  
  164. [bd007f58]  00000000  bfc090b0  001fffff  bfc0917c
  165. [bd007f68]  ffffffff  00000040  ffffffff  ffffffff
  166. [bd007f78]  000007f0  00040000  bd000000  bd000000
  167. [bd007f88]  00030000  b8060004  b8060000  bd000000
  168. [bd007f98]  87e1c000  87e1d608  87e20c04  bfc018dc
  169. [bd007fa8]  122fc8b5  228100a6  933102a2  60eca292
  170. [bd007fb8]  b2a8a96f  2809a828  62a22bae  fba342af
  171. [bd007fc8]  ab488a5b  8fa40e2f  cbe4546a  00000000
  172. [bd007fd8]  87e26d74  00000000  00000001  b8060004
  173. [bd007fe8]  00000184  bfc004fc
  174. __________________sri____________________
  175. 944x BootROM Ver. (asic) 1.0 [Nov  8 2011 13:42:57]
  176. _________________________________________
  177. find_hif: bootstrap = 0x31e50
  178. Nand Flash init
  179. otp_get_nand_table: 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0
  180. ONFI: Control Setting = 0xb44
  181. hdr: [0xffffffff : 0xffffffff : 0xffffffff : 0xffffffff]
  182. nand_load_fw: read 2097151 pages
  183. ExcCode 03 -> TLB(store)
  184. EPC bfc01a28, BadVAddr ffffffff, Cause 0000000c, Status 10400006
  185.  
  186. R0 (r0) = 00000000  R8 (t0) = ffffffff  R16(s0) = bd000000  R24(t8) = ff5a9f3f
  187. R1 (at) = 00000001  R9 (t1) = bd0009b4  R17(s1) = 00000800  R25(t9) = bfc01284
  188. R2 (v0) = 000000ff  R10(t2) = 00000000  R18(s2) = 00030000  R26(k0) = ffffffff
  189. R3 (v1) = 00000001  R11(t3) = bd000520  R19(s3) = 00010000  R27(k1) = bd007bf0
  190. R4 (a0) = ffffffff  R12(t4) = 00000000  R20(s4) = 00000800  R28(gp) = ffb7f19f
  191. R5 (a1) = bd004010  R13(t5) = 00000500  R21(s5) = ffffffff  R29(sp) = bd007f58
  192. R6 (a2) = 000007ef  R14(t6) = fbfeffbd  R22(s6) = ffffffff  R30(fp) = 00000000
  193. R7 (a3) = ffffffff  R15(t7) = 95cef9ff  R23(s7) = bd000000  R31(ra) = bfc060ac
  194.  
  195. [bd007f58]  00000000  bfc090b0  001fffff  bfc0917c
  196. [bd007f68]  ffffffff  00000040  ffffffff  ffffffff
  197. [bd007f78]  000007f0  00040000  bd000000  bd000000
  198. [bd007f88]  00030000  b8060004  b8060000  bd000000
  199. [bd007f98]  f7cc490f  bb6cffb7  ab2f4d4f  bfc018dc
  200. [bd007fa8]  122f88b5  738120bc  933102b2  60ada211
  201. [bd007fb8]  b2896949  0909b8a8  723a6bb6  fb6142bd
  202. [bd007fc8]  ab48aa57  8fac8f6f  cf345c68  7fdefcf3
  203. [bd007fd8]  33ebbfbc  797e7ceb  dbfd1fab  b8060004
  204. [bd007fe8]  00000184  bfc004fc
  205. __________________sri____________________
  206. 944x BootROM Ver. (asic) 1.0 [Nov  8 2011 13:42:57]
  207. _________________________________________
  208. find_hif: bootstrap = 0x31e50
  209. Nand Flash init
  210. otp_get_nand_table: 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0
  211. ONFI: Control Setting = 0xb44
  212. hdr: [0xffffffff : 0xffffffff : 0xffffffff : 0xffffffff]
  213. nand_load_fw: read 2097151 pages
  214. ExcCode 03 -> TLB(store)
  215. EPC bfc01a28, BadVAddr ffffffff, Cause 0000000c, Status 10400006
  216.  
  217. R0 (r0) = 00000000  R8 (t0) = ffffffff  R16(s0) = bd000000  R24(t8) = ff52bf3f
  218. R1 (at) = 00000001  R9 (t1) = bd0009b4  R17(s1) = 00000800  R25(t9) = bfc01284
  219. R2 (v0) = 000000ff  R10(t2) = 00000000  R18(s2) = 00030000  R26(k0) = ffffffff
  220. R3 (v1) = 00000001  R11(t3) = bd000520  R19(s3) = 00010000  R27(k1) = bd007bf0
  221. R4 (a0) = ffffffff  R12(t4) = 00000000  R20(s4) = 00000800  R28(gp) = efb7f19f
  222. R5 (a1) = bd004010  R13(t5) = 00000500  R21(s5) = ffffffff  R29(sp) = bd007f58
  223. R6 (a2) = 000007ef  R14(t6) = fbfef7bd  R22(s6) = ffffffff  R30(fp) = 00000000
  224. R7 (a3) = ffffffff  R15(t7) = 9dcef9ff  R23(s7) = bd000000  R31(ra) = bfc060ac
  225.  
  226.  
  227. previous boot:
  228.  
  229. __________________sri____________________
  230. 944x BootROM Ver. (asic) 1.0 [Nov  8 2011 13:42:57]
  231. _________________________________________
  232. find_hif: bootstrap = 0x31e50
  233. Nand Flash init
  234. otp_get_nand_table: 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0
  235. ONFI: Control Setting = 0xb44
  236. hdr: [0xbd004000 : 0xbd004000 : 0x3000 : 0x87d46a94]
  237. nand_load_fw: read 6 pages
  238. nand_load_fw: 0x10000 0x800 0xbd0047f0
  239. nand_load_fw: 0x20000 0x800 0xbd004ff0
  240. nand_load_fw: 0x30000 0x800 0xbd0057f0
  241. nand_load_fw: 0x40000 0x800 0xbd005ff0
  242. nand_load_fw: 0x50000 0x800 0xbd0067f0
  243. f/w 0 read complete, jumping to 0xbd004000
  244. RT-AC55U bl stage1 ver: 1.0.0.8
  245. init PLL & DDR
  246.  
  247. sri
  248. Scorpion 1.0
  249. ath_ddr_initial_config(321): (16bit) ddr2 init
  250. ... done
  251. *** Warning *** : PCIe WLAN Module not found !!!
  252. ... done
  253. fw1: Nand Init
  254. uboot hdr: [0xa0100000 : 0xa0100000 : 0x3b800 : 0x153e39a8]
  255. ......................................................................................................................
  256.  
  257.  
  258. U-Boot 1.1.4-g5589c4e5 (Jul 24 2014 - 08:59:49)
  259.  
  260. RT-AC55U bootloader version: 1.0.0.8
  261. ap135 - Scorpion 1.0DRAM:  128 MB
  262. ASUS RT-AC55U gpio init : wps / reset pin
  263. Atheros on-chip NAND FLash Controller Driver, Version 0.1 (c) 2010 Atheros Communications, Ltd.
  264. Ath Nand ID[87ff0024]: ef:f1:80:95:00
  265. ONFI WINBOND     W29N01GV          
  266.  NAND 128MiB 3,3V 8-bit [128MB]
  267. ====== NAND Parameters ======
  268. sc = 0x87ff0000 bbt = 0x86dcc008 bbt_size = 0x100 nf_ctrl = 0x344
  269. page = 0x800 block = 0x20000 oob = 0x40
  270. size = 128MB
  271. Creating 1 MTD partitions on "nand0":
  272. 0x00100000-0x07f00000 : "mtd=2"
  273. UBI: attaching mtd1 to ubi0
  274. UBI: physical eraseblock size:   131072 bytes (128 KiB)
  275. UBI: logical eraseblock size:    126976 bytes
  276. UBI: smallest flash I/O unit:    2048
  277. UBI: VID header offset:          2048 (aligned 2048)
  278. UBI: data offset:                4096
  279. UBI: max. sequence number:       13404
  280. UBI: attached mtd1 to ubi0
  281. UBI: MTD device name:            "mtd=2"
  282. UBI: MTD device size:            126 MiB
  283. UBI: number of good PEBs:        1008
  284. UBI: number of bad PEBs:         0
  285. UBI: number of corrupted PEBs:   0
  286. UBI: max. allowed volumes:       128
  287. UBI: wear-leveling threshold:    4096
  288. UBI: number of internal volumes: 1
  289. UBI: number of user volumes:     7
  290. UBI: available PEBs:             30
  291. UBI: total number of reserved PEBs: 978
  292. UBI: number of PEBs reserved for bad PEB handling: 10
  293. UBI: max/mean erase counter: 103/13
  294. UBI: image sequence number:  0
  295. UBI:   vol_id  reserved_pebs  alignment  data_pad  vol_type  usable_leb_size  used_ebs  used_bytes  last_eb_bytes  corrupted  upd_marker  name_len  name
  296. UBI:        0              1          1         0   dynamic            1f000         1       1f000          1f000          0           0         5  nvram
  297. UBI:        1              2          1         0   dynamic            1f000         2       3e000          1f000          0           0         7  Factory
  298. UBI:        2              2          1         0   dynamic            1f000         2       3e000          1f000          0           0         8  Factory2
  299. UBI:        3            18d          1         0   dynamic            1f000       18d     3013000          1f000          0           0         5  linux
  300. UBI:        4            18d          1         0   dynamic            1f000       18d     3013000          1f000          0           0         6  linux2
  301. UBI:        5             2a          1         0   dynamic            1f000        2a      516000          1f000          0           0         4  lsdk
  302. UBI:        6             7b          1         0   dynamic            1f000        7b      ee5000          1f000          0           0         5  jffs2
  303. UBI: 7fffefff              2          1         0   dynamic            1f000         2       3e000              2          0           0         d  layout volume
  304. UBI volume [jffs2] size ee5000 smaller than 1f000!
  305. Read 0x1f000 bytes from volume [Factory] offset 0x0 to 86d8ccc8
  306. EEPROM set 0: OK (version 13)
  307. Read 0x1f000 bytes from volume [Factory] offset 0x1f000 to 86d8ccc8
  308. EEPROM set 1: OK (version 13)
  309. Read 0x1f000 bytes from volume [Factory2] offset 0x0 to 86d8ccc8
  310. EEPROM set 2: OK (version 13)
  311. Read 0x1f000 bytes from volume [Factory2] offset 0x1f000 to 86d8ccc8
  312. EEPROM set 3: OK (version 13)
  313. Read 0x1f000 bytes from volume [Factory] offset 0x0 to 86dcc110
  314. Select EEPROM set 0 at offset 0x0.
  315. Maximum malloc length: 16384 KBytes
  316. mem_malloc_start/brk/end: 0x86dcc000/86e46000/87dec000
  317. *** Warning *** : PCIe WLAN Module not found !!!
  318. In:    serial
  319. Out:   serial
  320. Err:   serial
  321.        0: hdr1 [ 0xbd004000,bd004000,00003000,87d46a94 ], hdr2 [ 0xa0100000,a0100000,0003b800,153e39a8 ]
  322.    40000: hdr1 [ 0xbd004000,bd004000,00003000,87d46a94 ], hdr2 [ 0xa0100000,a0100000,0003b800,153e39a8 ]
  323.    80000: hdr1 [ 0xbd004000,bd004000,00003000,87d46a94 ], hdr2 [ 0xa0100000,a0100000,0003b800,153e39a8 ]
  324.    c0000: hdr1 [ 0xbd004000,bd004000,00003000,87d46a94 ], hdr2 [ 0xa0100000,a0100000,0003b800,153e39a8 ]
  325. bootloader-0: 0x0-40000, len 3e800/40000, buf 87f0789c: OK
  326. bootloader-1: 0x40000-80000, len 3e800/40000, buf 87f4789c: OK
  327. bootloader-2: 0x80000-c0000, len 3e800/40000, buf 87f8789c: OK
  328. bootloader-3: 0xc0000-e0000, len 70000/80000, buf 87fc789c: fragment
  329. choose bootloader-0 at 87f0789c, length 3e800 bytes
  330. Net:   ath_gmac_enet_initialize...
  331. athrs_sgmii_res_cal: cal value = 0x1
  332. Fetching MAC Address from factory
  333. Fetching MAC Address from factory
  334. ath_gmac_enet_initialize: reset mask:c02200
  335. Scorpion  ----> S17 PHY *
  336. Vlan config...
  337. TEST: FINAL REG VAL after TX Calibration - 0x86000000
  338. TEST: FINAL XMII VAL after RX Calibration - 0x96000000
  339. TEST: FINAL ETH_CFG VAL after RX Calibration - 0x00000001
  340. athrs17_reg_init: complete
  341. : cfg1 0x80000000 cfg2 0x7335
  342. eth0: 34:97:f6:62:be:50
  343. eth0 up
  344. athrs17_reg_init_wan done
  345. SGMII in forced mode
  346. athr_gmac_sgmii_setup SGMII done
  347. : cfg1 0x800c0000 cfg2 0x7214
  348. eth1: 34:97:f6:62:be:50
  349. eth1 up
  350. eth0, eth1
  351. Setting XTAL_ADDRESS 0x18116290 to 0x458ba14f
  352.  
  353. Please choose the operation:
  354.    1: Load System code to SDRAM via TFTP.
  355.    2: Load System code then write to Flash via TFTP.
  356.    3: Boot System code via Flash (default).
  357.    4: Entr boot command line interface.
  358.    7: Load Boot Loader code then write to Flash via Serial.
  359.    9: Load Boot Loader code then write to Flash via TFTP.
  360.    L: Load LSDK NART firmware, write to Flash via TFTP and reboot.
  361.  0
  362.    3: Boot System code via Flash (default).
  363.  
  364. RT-AC55U bootloader version: 1.0.0.8
  365. MAC Address: 34:97:F6:62:BE:50
  366. ## Checking 2nd firmware at a21ae000 ...
  367. Read 0x40 bytes from volume [linux2] offset 0x0 to 87fe8450
  368.    Image Name:  
  369.    Created:      2016-12-01  12:09:14 UTC
  370.    Image Type:   MIPS Linux Kernel Image (lzma compressed)
  371.    Data Size:    32100611 Bytes = 30.6 MB
  372.    Load Address: 80060000
  373.    Entry Point:  80060000
  374. Read 0x1e9d103 bytes from volume [linux2] offset 0x40 to 81000000
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement