00:04.25 | Kevin2 | BabelO: Hrmm. Okay. Thanks. |
00:06.11 | BabelO | Kevin2: good night and sorry if i can't help on this, my last build was from may |
00:20.48 | *** join/#htc-linux TimRiker (n=timr@rikers.org) |
00:30.21 | *** join/#htc-linux huhlig (n=UhligH@68-189-77-13.dhcp.wtvl.ca.charter.com) |
00:57.36 | *** join/#htc-linux Hawk|- (n=Hawk@p5B17CAA9.dip0.t-ipconnect.de) |
01:17.14 | ImCoKeMaN | anyone around? |
01:17.47 | Kevin2 | Nope. |
01:17.53 | ImCoKeMaN | damn |
01:18.20 | ImCoKeMaN | how's it going kevin? |
01:19.51 | Kevin2 | I'm okay. Nothing really new here. |
01:20.39 | Kevin2 | How 'bout yourself? |
01:20.59 | ImCoKeMaN | i'm back to trying to figure out how to get the titan SPL to be loaded to ram from HaRET and started that way |
01:21.20 | ImCoKeMaN | it's rebased at 8c000000 (0 physical) |
01:22.21 | Kevin2 | Remind me what needs to be done again? You have a modified SPL which you want to load into ram, and then you need to jump to the IPL? |
01:22.49 | ImCoKeMaN | the titan doesn't use an IPL so i'd want to try to jump straight to teh SPL |
01:23.00 | ImCoKeMaN | then see what i need to do from there |
01:23.29 | Kevin2 | And the SPL is loaded at the start of ram? (What is the ram base on titan?) |
01:23.51 | ImCoKeMaN | yeah it's loaded at 0 and 32mb in ram |
01:24.04 | ImCoKeMaN | 0x8c000000 |
01:24.31 | Kevin2 | Hrmm. The physical address is 0x8c000000? (I don't understand what you mean by "loaded at 0".) |
01:24.42 | ImCoKeMaN | i'm pretty new to the haret world so i may be a little slow |
01:25.03 | ImCoKeMaN | the physcical address is 0x0 virtual is 0x8c000000 |
01:25.21 | ImCoKeMaN | like when i did pwf i started at 0x0 to dump it |
01:26.30 | ImCoKeMaN | i'm trying to gain knowledge and willing to work on my own as much as i can, but i'm sure i'll need a lot of help |
01:26.49 | ImCoKeMaN | well, hopefully not too much, but some for sure |
01:27.17 | Kevin2 | Generally physical address 0x0 is the flash. You can't just overwrite flash. |
01:28.32 | ImCoKeMaN | hmm ok thought it was ram |
01:29.31 | ImCoKeMaN | cr2 posted this on the xda wiki about it: |
01:29.32 | ImCoKeMaN | 0xac000000 0x00000000 7 drv_global, bt_buf, flash_buf, lcd_buf |
01:29.37 | Speedy2 | Do any of the HTC devices that run Linux have WiFi built-in? |
01:31.18 | Kevin2 | Speedy2: Several devices have built-in wifi. (Universal, Apache, Hermes, etc.) However, many of the devices aren't well supported in linux yet. |
01:31.28 | ImCoKeMaN | in the mmu map though it shows 8c000000 as 0x0 also though and the SPL is rebased there when checking it in IDA |
01:31.37 | Speedy2 | Kevin2: I see. |
01:31.53 | Speedy2 | I was excited to hear about Qtopia running on the HTCs (it's meaningful since they've released the source to the phone apps, etc) |
01:33.06 | Kevin2 | ImCoKeMaN: What do you mean by "rebased there"? |
01:35.23 | ImCoKeMaN | in IDA when you open it to look at the assembly code you have to give it the start and loading address |
01:38.25 | Kevin2 | ImCoKeMaN: So, what you're trying to do is modify the SPL and then jump into it? |
01:38.53 | ImCoKeMaN | yup, first i'll load a diff version one that i haven't modified though just to prove to myself i have the idea right |
01:39.54 | Kevin2 | Okay. But I don't see how you're going to be able to modify the flash (if it is flash). |
01:40.34 | Kevin2 | Why don't you try writing to the 0x0 address and see if the write takes. Use pfw 0x0 ... |
01:40.49 | ImCoKeMaN | makes sense |
01:45.19 | ImCoKeMaN | the write took |
01:46.03 | Kevin2 | What commands did you use? |
01:46.18 | ImCoKeMaN | before:HaRET(5)# pdump 0x0 |
01:46.18 | ImCoKeMaN | 00000000 | ea0003fe |
01:46.42 | ImCoKeMaN | then....HaRET(5)# pdump 0x0 |
01:46.42 | ImCoKeMaN | 00000000 | ea0003fe |
01:46.52 | ImCoKeMaN | whoops recopy |
01:47.06 | ImCoKeMaN | HaRET(7)# pfw 0x0 1 1 |
01:47.06 | ImCoKeMaN | HaRET(8)# pdump 0x0 0x5 |
01:47.07 | ImCoKeMaN | 00000000 | 00000001 000 |
01:47.22 | ImCoKeMaN | (stripped some excess in there) |
01:49.11 | Kevin2 | Okay. So, what you want to do is change the preloader() function in linboot.cpp so that it copies your image to 0x0 and then jumps to 0x0. |
01:49.30 | ImCoKeMaN | awesome |
01:49.50 | ImCoKeMaN | now unfortunately i'm in windows lol but i'll get there |
01:51.40 | ImCoKeMaN | i thought the concept should be about that simple, we'll see how well it works out when i'm done. Thanks for the help |
01:51.57 | Kevin2 | np |
02:27.22 | *** join/#htc-linux ltxda2 (n=anon@c-98-196-125-205.hsd1.tx.comcast.net) [NETSPLIT VICTIM] |
02:27.22 | *** join/#htc-linux toi (n=pleemans@d5152D3B4.access.telenet.be) |
02:27.23 | *** join/#htc-linux gw280 (n=george@vm.gwright.org.uk) |
02:27.23 | *** join/#htc-linux thinko (n=jdoe6alp@smaug.rackdragon.com) [NETSPLIT VICTIM] |
02:44.58 | *** join/#htc-linux imcokeman (n=imcokema@rrcs-67-78-122-67.sw.biz.rr.com) |
03:53.06 | *** join/#htc-linux Ramacher (n=Ramacher@adsl-75-54-42-50.dsl.snantx.sbcglobal.net) |
04:01.52 | fone_fanatic | hey pof |
04:02.16 | fone_fanatic | and shadowmite... |
04:02.32 | fone_fanatic | anyone? |
04:03.18 | *** part/#htc-linux fone_fanatic (n=Ramacher@adsl-75-54-42-50.dsl.snantx.sbcglobal.net) |
04:27.09 | *** join/#htc-linux dion (n=dion@inhex.net) |
04:32.39 | *** join/#htc-linux ImCoKeMaN (n=me@rrcs-67-78-122-67.sw.biz.rr.com) |
04:55.38 | *** part/#htc-linux CrAsH_x64 (n=crash@84.78.99.40) |
05:24.49 | *** join/#htc-linux pleemans (n=peter@leemanpe.ugent.be) |
05:28.36 | *** join/#htc-linux _law_ (n=law@mail.stiftadmont.at) |
05:43.08 | *** join/#htc-linux huhlig (n=UhligH@68-189-77-13.dhcp.wtvl.ca.charter.com) |
06:22.18 | *** join/#htc-linux snua12 (n=admin@113-70-207-85.strcechy.adsl-llu.static.bluetone.cz) |
06:50.07 | *** join/#htc-linux rob_w (n=bob@Mb71a.m.pppool.de) |
07:03.23 | *** join/#htc-linux Marex (n=Marex@gwfm4-3-214.802.cz) |
07:17.46 | *** join/#htc-linux sadeness_ (n=LamersIn@nat2.rlan.ru) |
07:29.26 | *** join/#htc-linux kiozen (n=oeichler@p54922C1E.dip0.t-ipconnect.de) |
07:34.29 | *** join/#htc-linux rob__w (n=bob@X10c7.x.pppool.de) |
07:56.36 | *** join/#htc-linux the_sys0p (i=nroberts@123.57.208.20) |
08:04.18 | *** join/#htc-linux rob_w (n=bob@X1652.x.pppool.de) |
08:17.24 | *** join/#htc-linux rob__w (n=bob@X1887.x.pppool.de) |
08:19.01 | *** join/#htc-linux Marex_Yggdrasil (n=Marex@gwfm4-3-213.802.cz) |
08:23.13 | *** join/#htc-linux Marex_Yggdrasil (n=Marex@gwfm4-3-213.802.cz) |
08:23.30 | *** join/#htc-linux Marex (n=Marex@gwfm4-3-213.802.cz) |
08:26.41 | *** join/#htc-linux rob_w (n=bob@X1a00.x.pppool.de) |
08:37.16 | *** join/#htc-linux DTMonterrey (n=evandro@cornelius.estig.ipb.pt) |
08:39.08 | BabelO_ | hi |
08:45.30 | *** join/#htc-linux rob__w (n=bob@X1e08.x.pppool.de) |
09:08.21 | *** join/#htc-linux rob_w (n=bob@M80cb.m.pppool.de) |
09:24.33 | *** join/#htc-linux ellisway (n=ellis@homealone.good1.com) |
09:30.28 | *** join/#htc-linux youshe (n=youshe@jaalon.org) |
09:32.41 | cr2_ | BabelO_: does qte4.3.0 work ? |
09:36.58 | *** join/#htc-linux rob__w (n=bob@X0fe8.x.pppool.de) |
09:50.19 | *** join/#htc-linux psokolovsky (n=psokolov@82.193.99.11) |
09:50.22 | BabelO_ | cr2_ : yes, still understanding modem class :) |
09:50.52 | BabelO_ | cr2_ : yesturday , i test, bluetooth, wifi, voip ( only connect to server as yi have no mic ) |
09:51.01 | BabelO_ | suspend / resume works well |
09:51.08 | cr2_ | no mic ? |
09:51.26 | BabelO_ | now, i try to understand on can i have modem working |
09:51.31 | cr2_ | we need to investigate it. |
09:51.32 | cr2_ | ok |
09:51.54 | BabelO_ | cr2_: no mic, bluangel sound driver does not support reccord at the moment, i don't know if magician have it |
09:52.29 | cr2_ | we need to talk to pH5 |
09:54.11 | BabelO_ | cr2_ : anyway, qtopia speak with ti Calypso without problem, i set line discipline to 16 and it is ok now |
09:56.00 | *** join/#htc-linux rob_w (n=bob@Mb8c7.m.pppool.de) |
09:59.39 | cr2_ | good. |
09:59.49 | BabelO_ | cr2_ : good ;) i need to start with this http://doc.trolltech.com/qtopia4.2/syscust-gsm.html |
09:59.49 | cr2_ | will you create an image ? |
09:59.58 | cr2_ | ok. |
10:00.18 | BabelO_ | cr2_ : i have one on by Blueangel sdcard, i can upload it on the evening |
10:00.26 | cr2_ | ok, thanks. |
10:00.55 | cr2_ | the only remaining thing is the kernel+ramdisk linked into haret. |
10:01.00 | BabelO_ | i m just cuious about sound plugin, but this one is after, phone can work without |
10:01.08 | cr2_ | ok. |
10:01.28 | cr2_ | we need an action list to finish the damn thing :) |
10:02.08 | BabelO_ | agrre with that ;) |
10:02.46 | BabelO_ | just a little thing can you point me to wiki page where virser_atcmd.dll is configured for logging ? |
10:03.17 | cr2_ | xpanel or atdbg ? |
10:03.54 | cr2_ | it's a bit different on different devices. |
10:03.59 | BabelO_ | cr2_ : atdbg, what xpanel dbg can see in log file ? |
10:04.17 | cr2_ | xpanel is missing on most phones |
10:04.27 | BabelO_ | i have it on artemis ;) |
10:04.42 | BabelO_ | mayube you see it in registrydump |
10:05.04 | cr2_ | enabling GSM AT command logging in wince with phm regedit, which you can use to set SOFTWARE\OEM\?ATDbgLog |
10:05.15 | cr2_ | it's on sable |
10:05.28 | cr2_ | can be HTC\ATDbgLog |
10:05.33 | cr2_ | or something like that. |
10:06.55 | cr2_ | in regpath "HKLM\SOFTWARE\HTC\ATDbgLog", set key Enable=1 |
10:07.14 | cr2_ | in regpath "HKLM\SOFTWARE\HTC\XPanel", set Enable=1 |
10:07.16 | cr2_ | on hima |
10:07.24 | cr2_ | http://www.xs4all.nl/~itsme/projects/xda/xda-ii.html |
10:07.50 | BabelO_ | thanks :), i think i use it to sse all comand i can override in qtopia with vendor plugin |
10:09.29 | *** join/#htc-linux rob__w (n=bob@X1565.x.pppool.de) |
10:15.51 | cr2_ | just document then in wiki for one omap850 phone. |
10:17.55 | cr2_ | hehe. the tffs.o is included in the source. |
10:18.51 | cr2_ | ther symbols look a bit different from motorola's |
10:20.04 | cr2_ | flRegisterDOCG4 |
10:20.09 | cr2_ | now it's clear why. |
10:21.12 | cr2_ | yes, a lot of new G4 and H1 functions. |
10:29.54 | *** join/#htc-linux rob_w (n=bob@X1b1d.x.pppool.de) |
10:35.12 | cr2_ | BabelO_: what is p300wlan ? |
10:36.46 | BabelO_ | cr2_ : don't know, where do you see that ? |
10:37.13 | cr2_ | qtopia source has some binary kernel modules |
10:37.50 | cr2_ | hehe. it's socket's wifi SD card. |
10:37.55 | cr2_ | very interesting. |
10:38.00 | cr2_ | seems to be sdio. |
10:39.35 | cr2_ | very well. |
10:39.57 | cr2_ | hmm. did you hardcode the sdio stack into this driver ? |
10:40.08 | cr2_ | will explain the driver size :) |
10:46.38 | BabelO_ | cr2_ : we have it in next kernel release, right ? |
10:47.39 | cr2_ | only for the gps afaik. |
10:47.53 | cr2_ | it's like pcmcia |
10:48.13 | cr2_ | you need a driver for each device class |
10:48.17 | cr2_ | serial was the easiest |
10:48.23 | BabelO_ | cr2_ : so it is just a pcmcia like driver for acx10 chipset, lol |
10:49.24 | cr2_ | yes. |
10:49.28 | BabelO_ | he he i have an sql query which take 80 lines |
10:49.48 | cr2_ | but the newer acx100 54mbit chipsets also use sdio for something. |
10:49.51 | BabelO_ | i think i look at it after macdonald :) |
10:50.11 | BabelO_ | cr2_ : yes mine use sdio |
10:50.24 | cr2_ | they are all the same. |
10:51.48 | *** join/#htc-linux gundam (n=gundam@slackware.it/staff/gundam) |
10:54.57 | BabelO_ | i like qtopia documentation ;) http://doc.trolltech.com/qtopia4.2/qsignalsource.html |
11:19.00 | *** join/#htc-linux _law_ (n=law@mail.stiftadmont.at) |
11:30.39 | *** join/#htc-linux anYc (i=mario@hadince17.hadiko.uni-karlsruhe.de) |
11:40.03 | *** join/#htc-linux kiozen (n=oeichler@p54922AFC.dip0.t-ipconnect.de) |
11:43.08 | cr2_ | BabelO_: qt docs are excellent |
11:54.48 | BabelO_ | cr2_ : are you able to compile roadmap for arm ? |
11:59.25 | *** join/#htc-linux anYc (i=mario@hadince17.hadiko.uni-karlsruhe.de) |
12:07.03 | BabelO_ | cr2_ : about accel graphics, it look like there is a sample for imageon 2380 |
12:07.05 | BabelO_ | http://doc.trolltech.com/4.3-snapshot/qtopiacore-ahigl.html |
12:09.09 | cr2_ | 2380 ? where is it used. |
12:09.30 | cr2_ | i can compile for arm, but i need qtopia headers and libraries. |
12:09.41 | cr2_ | i'll try to commit my changes to CVS. |
12:11.27 | *** join/#htc-linux gundam (n=gundam@slackware.it/staff/gundam) |
12:13.56 | cr2_ | BabelO_: it's more of an opengl use example |
12:15.55 | BabelO_ | cr2_ : yes, but they speak about OpneGL ES from ati. List of thing to do should be very long... |
12:19.56 | *** join/#htc-linux rob_w (n=bob@M8330.m.pppool.de) |
12:39.35 | *** join/#htc-linux rob__w (n=bob@X0a3f.x.pppool.de) |
12:43.12 | *** join/#htc-linux anYc_ (i=mario@hadince17.hadiko.uni-karlsruhe.de) |
12:49.51 | *** join/#htc-linux rob_w (n=bob@Mb761.m.pppool.de) |
13:08.06 | *** join/#htc-linux skodde (n=skodde@unaffiliated/skodde) |
13:09.14 | *** join/#htc-linux rob_w (n=bob@Mb0a4.m.pppool.de) |
14:15.41 | *** join/#htc-linux Othello (i=nobody@gateway/tor/x-ad372619abba3e10) |
15:23.05 | *** join/#htc-linux gundam (n=gundam@slackware.it/staff/gundam) |
15:31.18 | *** join/#htc-linux dion (n=dion@inhex.net) |
15:33.25 | *** join/#htc-linux pleemans (n=peter@d51A5E76A.access.telenet.be) |
16:00.54 | *** join/#htc-linux TimRiker (n=timr@001-815-970.area1.spcsdns.net) |
16:22.49 | *** join/#htc-linux pH5 (n=ph5@e178193185.adsl.alicedsl.de) |
16:44.52 | ImCoKeMaN | any haret experts around? |
16:49.18 | *** join/#htc-linux BabelO (n=Fabrice@lun34-2-82-238-28-28.fbx.proxad.net) |
16:50.08 | pH5 | hi ImCoKeMaN, BabelO |
16:50.17 | ImCoKeMaN | hey |
16:54.41 | *** join/#htc-linux snua12 (n=admin@113-70-207-85.strcechy.adsl-llu.static.bluetone.cz) |
16:55.23 | BabelO | hi pH5 , ImCoKeMaN |
16:55.44 | ImCoKeMaN | done a new step with titan and SPL with haret, but still not where i want to be |
16:56.48 | ImCoKeMaN | it looks like i'm able to get it to load the SPL from a zImage file, but it doesnt seem to fully communicate with USB like it should |
17:03.38 | ImCoKeMaN | well seems like the issue is being complicated by the usb port and those connections itself not just the loading i'm doing |
17:08.06 | cr2_ | ImCoKeMaN: hi. |
17:08.14 | ImCoKeMaN | hey cr2 |
17:08.44 | cr2_ | ImCoKeMaN: can you check if it's RAM at 0x10000000 ? |
17:09.02 | cr2_ | i'm confused about the RAM size on titan. |
17:09.05 | ImCoKeMaN | see if i can write to it? p or v? |
17:09.09 | cr2_ | p |
17:09.13 | cr2_ | only p |
17:09.28 | ImCoKeMaN | k one sec |
17:11.40 | ImCoKeMaN | looks like i can write to it with pfw |
17:11.53 | ImCoKeMaN | pdumped, pfw, pdump again and it's different |
17:12.25 | cr2_ | hmm. interesting. |
17:12.54 | cr2_ | so 96 MB ??? |
17:13.22 | ImCoKeMaN | advertized as 64 |
17:13.57 | ImCoKeMaN | i wonder if the 0x0 and 0x(32mb heh) are actually teh same cuz the spl is found at both |
17:14.13 | cr2_ | yes, for the wince. |
17:14.46 | cr2_ | 32MB is not mapped. |
17:14.57 | ImCoKeMaN | weird |
17:17.42 | ImCoKeMaN | looks like the SPL i loaded into ram and booted (successfully) still can't access the radio image now |
17:19.26 | *** join/#htc-linux ltxda (n=ltxda@c-98-196-125-205.hsd1.tx.comcast.net) |
17:20.27 | cr2_ | look at my notes: |
17:20.33 | cr2_ | Rom size 256 ? |
17:21.25 | cr2_ | hehe. you have motherboard serial number. |
17:23.18 | cr2_ | 1024-256=768 ? |
17:23.44 | ImCoKeMaN | ok what part of this are you asking me and what is just your notes? |
17:27.48 | cr2_ | notes are here: http://wiki.xda-developers.com/index.php?pagename=TitanMemoryMap |
17:28.28 | cr2_ | bbl |
17:34.30 | ImCoKeMaN | i gotta go too see ya |
18:24.03 | BabelO | pH5: around ? |
18:24.38 | BabelO | pH5: where can i get small code to setup line discipline ? |
18:25.03 | *** join/#htc-linux kiozen (n=oeichler@rgnb-4db08036.pool.einsundeins.de) |
18:26.40 | BabelO | ok found ;) |
18:29.59 | pH5 | BabelO: :) |
18:32.15 | cr2_ | pH5: hi |
18:32.21 | pH5 | hi cr2_ |
18:32.31 | cr2_ | pH5: what do we know about the serial ports on omap850 ? |
18:34.05 | pH5 | cr2_: not sure. we know the memory ranges, they are uarts and I'd say should be supported by the 8250 driver. |
18:36.58 | cr2_ | BabelO has some problems with that. |
18:37.26 | *** join/#htc-linux gilgamesh (n=zode@34.158.mariettafiber.net) |
18:37.36 | pH5 | BabelO: did you have any success with the omap clocks / hangup issue? |
18:38.18 | BabelO | pH5: no i did not found :( |
18:38.26 | BabelO | pH5: always hand when i start top |
18:38.42 | BabelO | cr2_: if i rememnber well you have same issue on hermes before ? |
18:39.30 | *** join/#htc-linux DTMonterrey (n=evandro@213.13.228.211) |
18:40.30 | cr2_ | BabelO: i don't understand the wince serial clock settings on hermes. |
18:44.47 | BabelO | pH5: i have a small issue with line discipline, it return me a blank line before at command return, any idea ? |
18:45.12 | *** join/#htc-linux TimRiker (n=timr@001-815-970.area1.spcsdns.net) |
18:45.15 | cr2_ | ImCoKeMaN: do you know how these 256MB ROM are set up ? |
18:45.37 | pH5 | BabelO: do you have a complete dmesg log of it? n_tihtc currently spews everything into the kernel ring buffer. |
18:45.51 | BabelO | yes |
18:46.48 | BabelO | pH5: http://pastebin.ca/704976 |
18:46.50 | pH5 | could be a bug in the discipline, or some difference between ma/ba. |
18:46.53 | pH5 | I'll have a look |
18:49.18 | cr2_ | BabelO: Alignment trap: qpe (2066) PC=0x41126e7c Instr=0xe5974008 Address=0x000a0d53 FSR 0x0f3 |
18:49.38 | cr2_ | something to be disassembled. |
18:51.45 | BabelO | cr2_: yes qtopia segfault |
18:52.09 | *** join/#htc-linux kiozen (n=oeichler@rgnb-4db08036.pool.einsundeins.de) |
18:52.40 | *** join/#htc-linux hlbot (n=adm@iclem.net) |
18:52.43 | pH5 | cr2_: gdb |
18:53.58 | BabelO | pH5: what is modem speed to connect to ? |
18:54.25 | pH5 | BabelO: 115200 |
18:55.12 | BabelO | pH5: so i m ok, but ATE0\r\r\nOK\r\n gave me a blank line with \r\r |
18:55.32 | cr2_ | BabelO: in your code ? :) |
18:55.35 | BabelO | pH5: last time with gnokii i manage it |
18:55.54 | BabelO | cr2_: why in my code ? |
18:59.27 | BabelO | cr2_: with qtopia it return that http://pastebin.ca/704986 |
18:59.32 | pH5 | BabelO: it seems the ba always injects a blank line before any reply |
19:00.15 | pH5 | the first reply (line 21) in your log is \r\nOK\r\n already |
19:00.34 | pH5 | as long as echo is enabled (ATE1) you get <echo>\r\r\nOK\r\n |
19:01.38 | cr2_ | BabelO: but it does not fault there. |
19:02.19 | BabelO | so i need to fix that in qtopia code ? or do you think there is an atcommand ? because minicom do it properly |
19:03.02 | pH5 | BabelO: should be. compare the minicom dmesg log with the one you just sent. |
19:03.12 | BabelO | ok don't move ;) |
19:09.47 | BabelO | ok move :) http://pastebin.ca/705002 |
19:10.44 | BabelO | pH5: maybe it is init string ? |
19:12.47 | pH5 | what is the reply in line 9 to? "\r\r\nHTC\r\n\r\nOK\r\n" |
19:13.10 | pH5 | and you see in line 88: "\r\nOK\r\n" |
19:13.29 | BabelO | pH5: it reply to at+cgmi with HTC+blank line+OK |
19:13.41 | pH5 | there's always a CR-LF before the ok, it seems. |
19:13.43 | *** join/#htc-linux Tjikkun (n=tjikkun@82-204-54-115.dsl.bbeyond.nl) |
19:14.39 | pH5 | does it also have this in ATE0 mode? |
19:14.52 | pH5 | and in ATV0? |
19:15.01 | BabelO | i try |
19:15.41 | pH5 | I wonder what the standards say. Should empty lines be ignored in normal AT mode? |
19:16.08 | cr2_ | unsolicited junk ? |
19:16.39 | cr2_ | BabelO: filter them out in userspace. |
19:17.07 | BabelO | cr2_: i m looking for correct entry point in qtopia |
19:17.17 | BabelO | lot of classes :( |
19:17.59 | pH5 | cr2_: agreed. that is certainly stuff for userspace. |
19:18.09 | pH5 | we should patch the radio rom to fix this ;) |
19:18.17 | cr2_ | pH5: sure :) |
19:18.57 | cr2_ | pH5: details on radio: http://www.xs4all.nl/~itsme/projects/xda/xda-ii.html |
19:19.15 | cr2_ | xda-ii gsm memory map |
19:19.46 | pH5 | I want a ti calypso register map ;) |
19:20.08 | cr2_ | 0xffd* and 0xffe* |
19:20.22 | cr2_ | the cpu is made by TI, so it should be similar to omap :) |
19:21.45 | BabelO | pH5: do i need channel 0x12 too ? |
19:21.59 | cr2_ | pH5: http://www.xs4all.nl/~itsme/projects/xda/xdagsm-info.html |
19:24.01 | cr2_ | BabelO: you can see raw output from the multichannel protocol in \Storage\XPanelLog*.pco files |
19:24.17 | pH5 | cr2_: hmmh. "rather difficult to reverse engineer. many thumb/arm code switches, ..." |
19:24.29 | pH5 | that's what stopped my, too. back then. |
19:24.33 | pH5 | s/my/me/ |
19:25.26 | pH5 | I guess the big unreadable rom images copied to ram he mentions are the code for the DSP. |
19:31.20 | cr2_ | probably |
19:32.40 | BabelO | pH5: you are right with atv0e0 no blank line :( |
19:33.37 | pH5 | rejoice, problem solved. |
19:34.10 | pH5 | is there a c54x disassembler somewhere? |
19:34.35 | cr2_ | what's that ? |
19:34.42 | cr2_ | included in ida ? |
19:35.14 | cr2_ | http://gcc-c54x.berlios.de/ |
19:36.32 | pH5 | yes, interesting |
20:03.51 | *** join/#htc-linux skodde (n=skodde@unaffiliated/skodde) |
20:08.50 | BabelO | pH5: ats4 command line :) |
20:11.01 | ImCoKeMaN | cr2_: this is the pdocread -l info for partitions on titan |
20:11.19 | ImCoKeMaN | C:\data\Titan\itsutilsbin-20070323>pdocread -l |
20:11.19 | ImCoKeMaN | 220.38M (0xdc60000) FLASHDR |
20:11.19 | ImCoKeMaN | | 3.12M (0x31f000) Part00 |
20:11.20 | ImCoKeMaN | | 3.13M (0x320000) Part01 |
20:11.20 | ImCoKeMaN | | 50.88M (0x32e0000) Part02 |
20:11.20 | ImCoKeMaN | | 163.25M (0xa340000) Part03 |
20:11.22 | ImCoKeMaN | <PROTECTED> |
20:11.24 | ImCoKeMaN | | 10.00M (0xa00000) PART00 |
20:11.58 | cr2_ | ImCoKeMaN: so you think it's one chip? |
20:12.22 | ImCoKeMaN | well those partitions are all different on different rom versions so it would seem that way |
20:12.36 | ImCoKeMaN | i can get you the one for some wm5 ones and the other sprint one too |
20:12.59 | cr2_ | do you know the purpose of these partitions ? |
20:13.18 | cr2_ | your RAM dump say something about it. |
20:13.28 | ImCoKeMaN | the 3 meg ones look to have some xip codes in them |
20:13.37 | ImCoKeMaN | the ~50 is OS the larger is storage |
20:13.44 | ImCoKeMaN | 10 is the extrom |
20:16.00 | cr2_ | 163 ? |
20:16.01 | *** join/#htc-linux toi (n=pleemans@d5152D3B4.access.telenet.be) |
20:16.26 | cr2_ | dwNumBlocks: 1768 dwBytesPerBlock 131072 |
20:16.51 | cr2_ | expr 1768 \* 131072 |
20:16.58 | cr2_ | 231735296 |
20:17.34 | cr2_ | it's 221MB ? |
20:18.05 | cr2_ | yes, looks like FLASHDR |
20:20.32 | cr2_ | look at this line: |
20:20.34 | cr2_ | flashn_dm_init_structures: +memset:0xac2a0000 |
20:20.56 | cr2_ | is it a virtual address ? |
20:21.36 | cr2_ | i think yes. |
20:22.34 | cr2_ | flashn_dm_reset_buffer = ac2a1140 |
20:23.05 | ltxda | anyone have info or tools to partition/repartition DOC on Athena? |
20:23.27 | cr2_ | then comes that: Tai: dwRetAddr=0xac3a0010 |
20:23.47 | cr2_ | ltxda: it's G4 m-doc |
20:24.36 | cr2_ | ltxda: i've seen the tffs modules for the greenphone today. is it kernel 2.4.20 ? |
20:24.38 | ltxda | cr2_, how would i find that? Google or other source? Sorry just learning. :-) |
20:24.53 | ltxda | not sure how to answer since i'm VERY green on the subject. |
20:25.03 | cr2_ | then you can boot this kernel and use linux 'dformat' or how it is called. |
20:25.23 | ltxda | oh kewl |
20:25.24 | cr2_ | i wanted to say that it's doable. |
20:25.31 | ltxda | gotcha |
20:25.32 | cr2_ | in principle :) |
20:25.39 | cr2_ | with available tools |
20:25.46 | ltxda | that's what i was hoping |
20:25.52 | ltxda | cooking ROM and wanted to merge partitions |
20:26.12 | cr2_ | the trick is to boot 2.4.20 kernel on athena ;) |
20:26.52 | ltxda | it's not booting atm? |
20:27.28 | cr2_ | ltxda: do you really want to do it ? i don't like to mess with m-doc with the initial bootloader in it. |
20:27.43 | cr2_ | i've booted only 2.6.* kernel |
20:27.47 | ltxda | ah i see |
20:27.56 | ltxda | i think u gave me one to boot a while back...which was that? |
20:28.25 | cr2_ | don't rememeber. 2.6.19 probably |
20:28.48 | cr2_ | i'm looking at the athena dlls once again. |
20:29.04 | cr2_ | time to push linux forward on athena |
20:29.26 | ltxda | ok let me know what you need...I have a few people that can help test...I can dedicate more time now. |
20:29.59 | cr2_ | the touchscreen and cpld drivers are already there, just need some modifications. |
20:30.00 | cr2_ | ok. |
20:30.38 | ltxda | just lemme know bro. Have about 3-5 people that would probably participate in testing...from our Athena Project core team. |
20:31.04 | ltxda | only issue wiht using linux tools is we can't make everyone load to linux to partition their DOC. LOL |
20:31.33 | ImCoKeMaN | depends how easy you make the linux install |
20:31.38 | ltxda | do you think the buzzdev tool can do this on DOC? if so, link? |
20:31.50 | ltxda | ImCoKeMaN, yea i know. It can be tiny and the user would never know it was Linux... |
20:31.58 | ltxda | they would just see something happening then be ready to flash. |
20:32.41 | ImCoKeMaN | i made sfx that was able to dump the SPL from their phone and ftp it to a place for me to check it |
20:33.06 | cr2_ | ltxda: it's not needed. i think that the risk is too high. those who reflash wince on DoC are also crazy :) |
20:33.14 | ImCoKeMaN | just had to have it activesynced and run the exe and it did everything else, but it scared too many when you make them type hex in haret |
20:33.32 | ImCoKeMaN | i'd agree with cr2 there |
20:33.39 | ltxda | cr2_, reflash wince on DoC? sorry if stupid question just want to make sure i understand. |
20:34.00 | ImCoKeMaN | well i hope me meant repartition |
20:34.14 | ltxda | reflash = repartition? |
20:34.21 | cr2_ | ltxda: both. |
20:34.32 | cr2_ | your wince is also on DoC. |
20:34.41 | ltxda | yes |
20:34.51 | cr2_ | i'm thinking about DoC as a bootloader. |
20:34.57 | ltxda | we flash cooked ROM, but now want to repartition. LOL |
20:35.02 | cr2_ | don#t touch it if it does not break . |
20:35.09 | ltxda | isn't bootloader seperate? |
20:35.21 | ltxda | or it's in there? |
20:35.25 | cr2_ | it's logically separate, but it's the same NAND. |
20:35.34 | ltxda | ah |
20:36.10 | ImCoKeMaN | well i'm trying to be crazy and reflash my titan heh |
20:36.16 | ltxda | lol |
20:36.18 | ltxda | flashing is nothing. |
20:36.34 | ltxda | ImCoKeMaN, oh u mean reflash the bootloader? |
20:37.00 | ImCoKeMaN | well not sure yet if that will be needed, but i'm trying to work on a softbootloader to get it started |
20:37.12 | ltxda | anyone have buzzdev tool/s? |
20:37.15 | cr2_ | there is no opensource mdoc-G3/4 driver. i've only documented the internal registers. |
20:37.32 | Shadowmite | you have the tffs sdk? |
20:38.04 | cr2_ | Shadowmite: there are 2 linux 2.4 kernel modules |
20:38.10 | Shadowmite | otherwise known as the long lost sdk that sandisk forgot about |
20:38.11 | Shadowmite | :) |
20:38.36 | *** join/#htc-linux cmonex (n=xy6091@j7nl0jgna7.adsl.datanet.hu) |
20:38.37 | ltxda | anyone have these tools available? |
20:38.38 | cr2_ | Shadowmite: and the wince IPL. |
20:38.40 | cmonex | hi |
20:38.43 | ltxda | hi |
20:39.00 | ltxda | cr2_, do you have the sdk available bro? or buzzdev tools? |
20:39.04 | ltxda | or anyone else? |
20:39.17 | cr2_ | ltxda: isn't it in the itsutils ? |
20:39.52 | cmonex | what isnt? |
20:40.04 | Shadowmite | eh? yea, the ipl, and spl should both be on the doc I imagine in a unpartitioned area |
20:40.42 | Shadowmite | cmonex, have you tried just reversing trueffs.dll? |
20:40.45 | ImCoKeMaN | haven't seen any IPL info for any CDMA devices yet |
20:40.46 | cmonex | they are in something called binary partitions |
20:40.58 | cmonex | Shadowmite: i didnt try anytihng in this 5 minutes since i saw the buzzdev thread |
20:41.10 | cmonex | which says "I try to resize my extended ROM, but I still get the 'FL_IOCTL_FORMAT_PHYSICAL_DRIVE failed' error" |
20:41.15 | Shadowmite | ImCoKeMaN, I have the treo 650 cdma ipl... |
20:41.19 | cmonex | that made it obvious its just trueffs |
20:41.21 | Shadowmite | which is a rip of a htc devices |
20:41.25 | cmonex | which is what olipro wouldnt answer |
20:41.37 | ImCoKeMaN | hmm interesting |
20:42.05 | cmonex | BTW |
20:42.11 | ImCoKeMaN | i was able to load teh SPL as a zImage with a modded haret and get it to load, but it won't access teh radio for the CID, maybe the IPL is still needed |
20:42.12 | cmonex | i didnt ever see pdocread dumping an IPL |
20:42.25 | cmonex | but i remember reading the IPL is in the first block |
20:42.49 | Shadowmite | umm |
20:42.51 | cmonex | so, say the IPL is unpartitioned, the SPL is in a binary partition |
20:42.53 | ImCoKeMaN | the weird part is it's not in the rom dumps for the titan either |
20:43.01 | cmonex | so the IPL can be dumped only using pmemdump |
20:43.02 | Shadowmite | on the treo 650 the CID was also tossed into that unpartitioned space |
20:43.09 | Shadowmite | is it possible you overwrote it? |
20:43.15 | cmonex | or maybe with an unlocked bootloader :) |
20:43.24 | cmonex | ImCoKeMaN: |
20:43.34 | cmonex | if you want to do SSPL, you have to patch IPL not to load the SPL from nand |
20:43.34 | Shadowmite | htc used to toss all tokens into that area |
20:43.43 | cmonex | unless you directly tried jumping to SPL |
20:43.47 | cmonex | but that may not be the best idea |
20:44.16 | ImCoKeMaN | well the reason i tried jumping straight to spl is because i wasn't able to find anything indicating info about an IPL in the titan |
20:44.24 | cmonex | there is an IPL, rest assured |
20:44.31 | cmonex | do you have itsutils handy ? |
20:44.39 | ImCoKeMaN | yea |
20:44.53 | Shadowmite | cmonex, I think he overwrote the ipl with a bootloader |
20:45.01 | cmonex | Shadowmite: the ipl is at 0x0 |
20:45.06 | Shadowmite | the cpu's micro calls the ipl initially doesn't it? |
20:45.12 | ImCoKeMaN | thats the spl in mine |
20:45.16 | cmonex | ummm |
20:45.19 | cmonex | SPL is not designed to run from 0x0 |
20:45.29 | ImCoKeMaN | when i dump 0x0 thats when i got teh SPL |
20:45.37 | cr2_ | cmonex: on G3/4 m-doc yes. |
20:45.48 | cmonex | cr2_: on any nand |
20:45.52 | cmonex | with ARM |
20:45.58 | cr2_ | cmonex: this msm7500 seems to be different. i don#t understand how it boots |
20:46.08 | cmonex | whats msm7500? |
20:46.08 | Shadowmite | heh |
20:46.12 | cr2_ | cmonex: http://wiki.xda-developers.com/index.php?pagename=HTC_DiskOnChip |
20:46.19 | Shadowmite | qualcom and their BS NDA's |
20:46.28 | Shadowmite | cmonex, the cpu IS the cellcore chipset |
20:46.46 | cr2_ | cmonex: the IPL is in the first 0x800 bytes. |
20:46.53 | cmonex | i saw that page a while ago, and? |
20:47.03 | cmonex | 0x800, well, depends on implementation :) |
20:47.31 | cr2_ | msm7500 has RAM at 0x0 |
20:47.42 | cr2_ | and in this RAM you have the SPL. |
20:48.01 | cr2_ | who copies SPL there ? |
20:48.13 | cr2_ | http://wiki.xda-developers.com/index.php?pagename=TitanMemoryMap |
20:48.21 | cmonex | IPL copies SPL there |
20:48.23 | cr2_ | this is a msm7500-based phone |
20:48.24 | cmonex | usually |
20:48.34 | cr2_ | well, but where is the IPL ? |
20:48.36 | cmonex | hmm ram at 0x0 |
20:48.38 | cmonex | physically? |
20:48.42 | ImCoKeMaN | yup |
20:48.44 | cr2_ | yes. |
20:48.44 | ImCoKeMaN | i wrote to it |
20:49.01 | cmonex | is that link relevant now? |
20:49.02 | Shadowmite | cmonex, this is a preview of the kasier |
20:49.04 | cmonex | the titan one |
20:49.10 | cmonex | i'm confused now with all these links |
20:49.11 | cr2_ | cmonex: some omap CPUs can boot from 0x0800000 |
20:49.44 | cmonex | ok, then the IPL is there |
20:49.50 | *** join/#htc-linux gilgamesh (n=zode@216.235.158.34) |
20:49.57 | Shadowmite | the kaiser seems to have a linux radio bootloader |
20:49.59 | cr2_ | on these ARM-based cpus, yes. |
20:50.13 | cmonex | i dont see a problem.... there is a reset vector that will eventually lead to another code, and so on |
20:50.22 | cr2_ | Shadowmite: it's the ARM9 part of the CPU. |
20:50.38 | cr2_ | cmonex: we have no CPU docs, that's the problem ;-) |
20:50.42 | Shadowmite | heh, dual core cellular core chip... that's just insane |
20:50.42 | cmonex | ah |
20:50.42 | Shadowmite | :) |
20:50.48 | cmonex | i guess play around then :/ |
20:50.56 | cr2_ | cmonex: trying... |
20:51.11 | cmonex | :) |
20:51.20 | cmonex | i dont even know what device this is about |
20:51.24 | cmonex | kaiser? |
20:51.25 | ImCoKeMaN | i was jsut happy to get teh SPL loaded at all today i was able to load the old version and access it with the info commands in mtty |
20:51.34 | ImCoKeMaN | htc titan sprint mogul |
20:51.41 | cmonex | i meant cr2_ |
20:51.46 | cr2_ | cmonex: all new htc phones use this new cpu. |
20:51.54 | cmonex | including titan? |
20:51.58 | ImCoKeMaN | yup |
20:52.05 | ltxda | cr2_, even athena or new as in after athena? |
20:52.06 | cmonex | oh, interesting. |
20:52.12 | cmonex | so the problem is you dont have ipl dump? |
20:52.15 | cmonex | ltxda: noo |
20:52.19 | cmonex | athena is just xscale |
20:52.25 | cr2_ | ltxda: athena is pxa270, but it's an obsolete chip ;) |
20:52.29 | ltxda | ok, was making sure i understood. |
20:52.32 | ltxda | right |
20:52.34 | cmonex | why is it obsolete ? ... |
20:52.38 | ImCoKeMaN | i suppose that's the problem yeah |
20:52.40 | ltxda | my chip :-( |
20:52.51 | cr2_ | cmonex: who produces it ? |
20:52.56 | Shadowmite | obsolete cause it's prime was 2004! |
20:52.58 | Shadowmite | :P |
20:53.02 | ltxda | lol |
20:53.18 | Shadowmite | the sammy clone is better in a few ways |
20:53.20 | ltxda | but it still runs nice. i can't wait for the athena replacement to come out. |
20:53.23 | cr2_ | cmonex: intel sold pxa to marvell |
20:53.27 | cmonex | who cares |
20:53.27 | Shadowmite | but this new qualcomm seems to be taking over |
20:53.31 | cmonex | i dont think it's obsolete |
20:53.33 | cmonex | it is perfectly usable |
20:53.44 | cr2_ | who makes pxa3xx, without providing any docs at all! |
20:54.09 | cmonex | and i dont need to see my name all the time |
20:54.22 | cr2_ | cmonex: it's a great and well-documeted chip, but it's nmot produced anymore. |
20:54.28 | cmonex | and ? |
20:54.46 | cmonex | dont call everything obsolete |
20:54.50 | cmonex | geez, what is my PC then |
20:54.51 | cr2_ | htc moves to samsung and qualcomm |
20:54.55 | ltxda | cr2_, so the athena is the last device we'll be seeing the chip in? |
20:55.03 | cr2_ | soon you'll forget that there are pxa270-based phones. |
20:55.06 | cmonex | its almost 5 years old |
20:55.15 | ltxda | cmonex, lol |
20:55.16 | cr2_ | ltxda: i guess so. |
20:55.21 | ltxda | cr2_, gotcha. |
20:55.25 | ltxda | good info to know. |
20:55.26 | cmonex | compared to that the pxa270 is just fine |
20:55.34 | ltxda | :-) |
20:55.55 | ltxda | man i can't wait for the next athena. |
20:56.40 | ImCoKeMaN | an IPL from a different phone wouldn't really help here for the titan right? and they probly protect the IPL fairly well in the titan |
20:56.57 | Shadowmite | the pxa27x is a excellent chip |
20:57.00 | cr2_ | pxa27x is a fast "high-end" chip that consumes too much power. |
20:57.01 | cmonex | no |
20:57.03 | cmonex | it wont help |
20:57.04 | cr2_ | compared to the others. |
20:57.11 | Shadowmite | the problem is not enough devices used the faster clocked versions of it |
20:57.21 | cr2_ | that's why it's not so great for the cellphones. |
20:57.23 | cmonex | whatever is "too much power" |
20:57.35 | ImCoKeMaN | burn your hands hot |
20:57.42 | Shadowmite | the iphone's 600+ mhz cpu is pretty awesome for a cellphone |
20:57.51 | cr2_ | iphone uses samsung |
20:57.58 | Shadowmite | yes... |
20:58.00 | cmonex | and no one knows its frwequency |
20:58.03 | cmonex | it may be 400mhz |
20:58.09 | cr2_ | i guess so |
20:58.21 | cmonex | its some new armv6 chip |
20:58.23 | Shadowmite | umm, we know it's over 600 I'm fairly certain |
20:58.30 | Shadowmite | I'll have to find ya the link |
20:58.32 | cmonex | ok |
20:58.36 | cr2_ | Shadowmite: for the ALU ? |
20:58.37 | cmonex | i saw such links |
20:58.40 | cmonex | then they were refuted |
20:58.45 | ltxda | and it locks up just like WM6 :-P |
20:59.05 | Shadowmite | lol |
20:59.10 | Shadowmite | ltxda, no, not really |
20:59.17 | Shadowmite | it only locks on third party software |
20:59.22 | Shadowmite | which is why apple tried to block it |
20:59.26 | ltxda | i've seen a stock one lock up |
20:59.27 | cmonex | apple sucks |
20:59.29 | Shadowmite | of course that didn't work too well |
20:59.33 | cr2_ | lol |
20:59.37 | cmonex | if thats the only reason for blocking software |
20:59.47 | ltxda | it was on a show...the guy was showing it...a guy from apple and as he was browsing or something something it totally locked up on him..LOL |
21:00.01 | Shadowmite | heh |
21:00.23 | ltxda | i was surprised |
21:00.23 | cr2_ | i think it was billy gates with the htc universal :) |
21:00.27 | ltxda | lol |
21:00.28 | ImCoKeMaN | ok well i think i'm out for a while now |
21:00.29 | Shadowmite | mine has only crashed 3 times, all when I was running a 3rd party app that was flakey, 2 of which were navizon gps! |
21:00.31 | Shadowmite | :) |
21:00.47 | ltxda | Shadowmite, gotcha. |
21:00.53 | Shadowmite | anyway, I gotta head home... bbl |
21:02.18 | cmonex | cr2_: to go back to the previous topic..so you dumped the entire memory map and found no code that could be at a possible reset vector? |
21:03.37 | cr2_ | i didn't find the IPL string. |
21:03.43 | cr2_ | only SPL and wince kernel |
21:03.59 | cr2_ | and since the SPL is in RAM, i'm confused. |
21:04.14 | cr2_ | i'm also not quite sure where is the NAND located. |
21:04.18 | ImCoKeMaN | seeing you confused can'y be good |
21:04.21 | cr2_ | and how it is accessed. |
21:04.45 | cmonex | maybe the IPL has no strings |
21:04.46 | cr2_ | ImCoKeMaN: confused == i've not understood it immediately :) |
21:05.03 | ImCoKeMaN | hehe ok i'll give you a couple minutes then =) |
21:05.08 | cr2_ | maybe. |
21:05.10 | cmonex | you found no code other than SPL and CE kernel/OS? |
21:05.26 | cr2_ | need to find out how the flash is accessed anyway. |
21:05.29 | ImCoKeMaN | when you use the dutty tool to dump teh nbh there is no IPL like there are on gsm phones |
21:05.33 | cmonex | ive seen on MIPS, it can be just 20 lines of opcodes before it jumps to a different place |
21:05.41 | cmonex | hmm, how does SPL startup look like? |
21:05.54 | cmonex | it can be just 20 lines of opcodes: i mean at reset |
21:05.54 | cr2_ | cmonex: i#ve found the linux microkernel and qualcomm phone control code. |
21:05.59 | cmonex | cool |
21:06.57 | cr2_ | hmm. what is 'Tai' ? |
21:07.13 | cmonex | ImCoKeMaN could you send me the SPL..i1m curious |
21:07.21 | ImCoKeMaN | hehe sure |
21:07.25 | ImCoKeMaN | C:\data\Titan\itsutilsbin-20070323>pdocread -l |
21:07.25 | ImCoKeMaN | 220.38M (0xdc60000) FLASHDR |
21:07.25 | ImCoKeMaN | | 3.12M (0x31f000) Part00 |
21:07.25 | ImCoKeMaN | | 3.13M (0x320000) Part01 |
21:07.25 | ImCoKeMaN | | 50.88M (0x32e0000) Part02 |
21:07.26 | ImCoKeMaN | | 163.25M (0xa340000) Part03 |
21:07.28 | ImCoKeMaN | <PROTECTED> |
21:07.30 | ImCoKeMaN | | 10.00M (0xa00000) PART00 |
21:07.32 | ImCoKeMaN | damnit sorry bad buffer |
21:07.44 | ImCoKeMaN | ftp://ppcgeeks:ezupload@ftp.ppcgeeks.com/Titan/Users/ImCoKeMaN/SPL.nb |
21:08.22 | cr2_ | cmonex: do you know how to load SPL in ida _properly_ ? |
21:08.39 | ImCoKeMaN | rebase this one at 8c000000 |
21:08.41 | cmonex | i wont answer basic questions ... |
21:08.46 | cr2_ | LOL |
21:08.47 | cmonex | :) |
21:08.56 | ltxda | so basically there are no tools available to repartition the DOC unless u use linux? |
21:08.59 | ltxda | or did i miss something? |
21:09.01 | ltxda | <PROTECTED> |
21:09.11 | ImCoKeMaN | you missed a lot, but not on that topic =) |
21:09.21 | cr2_ | cmonex: i mean that both mappings are visible at the same time. |
21:09.27 | ltxda | ImCoKeMaN, damn you! LOL |
21:09.36 | ltxda | i'm learning, give me a break. |
21:10.13 | ImCoKeMaN | so am I just used my first custom compiled haret today |
21:10.24 | ltxda | nice! |
21:10.33 | ltxda | ur a "little" ahead of me. LOL |
21:11.04 | ltxda | ImCoKeMaN, private use or releasing to public? |
21:11.04 | ImCoKeMaN | i still feel like a n00b asking cr2, kevin and olipro questions though |
21:11.08 | cmonex | cr2_: what mappings do you mean ? |
21:11.16 | cmonex | 0x8cxxxxx and ? |
21:11.17 | ltxda | ImCoKeMaN, give ur self time bro. |
21:11.18 | ImCoKeMaN | this is just for testing making a spl laod to ram |
21:11.36 | cmonex | btw, usually the simplest way is to dump it with dumprom and load the extracted nk.exe. took me months before realizing that... :P |
21:11.39 | ltxda | i'm going to have to get my Hermes back from my mom to test on. i won't brick my athena...hell no. |
21:11.56 | cmonex | thats only for CE bootloaders of course |
21:12.01 | cmonex | which have normal romheader etc |
21:12.43 | cr2_ | cmonex: the plain physical mapping, i.e. no 0x8c* & such. |
21:12.53 | cr2_ | nk.exe != bootloader ;) |
21:13.16 | cmonex | what would i need the physical mapping for when specifying the base ? |
21:13.27 | cmonex | nk.exe is bootloader in CE bootloaders with romheader |
21:14.09 | cr2_ | IPL runs with physical mapping. and a big chunk of SPL too. |
21:14.24 | cr2_ | so for SPL i need both. |
21:14.38 | ltxda | brb on mbl |
21:14.41 | cr2_ | never was able to do it directly. |
21:14.41 | cmonex | that part usually doesnt really use hard coded addresses |
21:14.47 | cmonex | so the base doesnt matter for it |
21:15.07 | cr2_ | depends on the SPL. |
21:15.11 | cmonex | of course i didnt see this device yet, but thats the case for most devices |
21:15.23 | ImCoKeMaN | this one is def unique =) |
21:15.47 | cmonex | "big chunk" well most ive seen turn the MMU on quite early |
21:17.53 | ImCoKeMaN | would my ida db help at all to speed up the repeated c pressing? |
21:18.00 | cmonex | whats at 0x10000000 ? |
21:18.04 | cmonex | with this device |
21:18.18 | cr2_ | nk.exe |
21:18.19 | cmonex | ImCoKeMaN: if loaded as nk.exe ida will happily try and disassemble most of it :) |
21:18.29 | *** join/#htc-linux ellisway (n=ellis@homealone.good1.com) |
21:18.44 | ImCoKeMaN | hmmm i'll have to try that |
21:18.46 | cmonex | it disassembled this one right away just fine |
21:18.55 | cmonex | it likes to have the PE header, you know :) |
21:19.08 | cmonex | cr2_: i.e. kernel? :) |
21:19.11 | cmonex | ok |
21:19.31 | cr2_ | yes |
21:19.52 | *** join/#htc-linux ltxdaMBL (n=ltxdaMBL@mc908fa48.tmodns.net) |
21:19.58 | ltxdaMBL | howdie |
21:20.00 | cmonex | the other direction turns MMU on right away:P |
21:20.33 | cmonex | there must be some IPL somewhere else... |
21:21.58 | ImCoKeMaN | hmm i think i'm missing something in the IDA loading cmonex |
21:22.02 | cmonex | yes? |
21:22.13 | cmonex | i used: dumprom -5 -d dumpfolder spl.nb |
21:23.25 | ImCoKeMaN | i dont see how to get it to load as nk.exe to auto disassemble |
21:23.48 | cmonex | i ran this command on spl.nb |
21:23.55 | cmonex | then picked up the resulting nk.exe |
21:24.17 | cmonex | what happened, any error? |
21:24.46 | cmonex | ...anyway there has to be some IPL. |
21:24.49 | ImCoKeMaN | i haven't made the nk.exe |
21:25.04 | cmonex | this SPL doesnt look like it starts up with an IPL code |
21:25.18 | cmonex | get dumprom.exe from itsme site, and use: dumprom -5 -d dumpfolder spl.nb |
21:26.37 | cmonex | (i always found it funny it gets called nk.exe :) ) |
21:28.35 | ltxdaMBL | yea funny |
21:28.49 | cmonex | :) |
21:28.54 | ltxdaMBL | ;-p |
21:28.59 | cmonex | i guess thats just how it gets built whehn the NB is made |
21:29.19 | cmonex | ltxda: i sent you some msg's in private, should i resend to ltxdaMBL? |
21:29.27 | ltxdaMBL | no |
21:29.36 | cmonex | oh ok |
21:29.43 | ltxdaMBL | ill chk when i get hm |
21:29.47 | cmonex | soon? |
21:29.52 | ltxdaMBL | driving atm |
21:29.59 | ltxdaMBL | 30min |
21:30.03 | cmonex | ok |
21:30.05 | cmonex | :) |
21:30.05 | ltxdaMBL | approx |
21:30.18 | ltxdaMBL | :-) |
21:30.33 | ltxdaMBL | lovd my athena |
21:30.36 | ltxdaMBL | e |
21:30.41 | cmonex | grr lucky :P |
21:30.48 | ltxdaMBL | lol |
21:30.50 | cmonex | :) |
21:31.14 | ltxdaMBL | if i wreck ill save athenafirst |
21:31.15 | ltxdaMBL | lol |
21:31.29 | ImCoKeMaN | wow kickass trick for IDA cmonex, thanks |
21:32.00 | ltxdaMBL | yes young jedi it is kickass indeed |
21:32.02 | ltxdaMBL | lol |
21:32.44 | cmonex | np :) |
21:32.50 | ltxdaMBL | may the schwartz b with u |
21:32.59 | ltxdaMBL | lol |
21:34.48 | cr2_ | ImCoKeMaN: do these names say you anything ? http://pastebin.ca/705171 |
21:34.51 | ltxdaMBL | um, that was funny |
21:35.08 | cr2_ | these are some "partitions" |
21:35.51 | cr2_ | <PROTECTED> |
21:35.51 | cr2_ | <PROTECTED> |
21:36.54 | ImCoKeMaN | the splash ones are decoded with dutty tool as is the extrom |
21:37.05 | cmonex | yeah |
21:37.10 | cmonex | splahs is the boot screen |
21:37.15 | ImCoKeMaN | yup |
21:37.20 | cmonex | WLAN is.. i assume wlan data stored in there |
21:37.30 | cr2_ | yes. |
21:37.34 | cmonex | i dunno the rest:P |
21:37.42 | ImCoKeMaN | rf_nv probly phone radio? |
21:37.45 | cr2_ | QCSBL is qualcomm bootloader ? |
21:38.01 | cmonex | where did you get this list? |
21:38.07 | cr2_ | SBL is secondary bootloader. |
21:38.21 | cr2_ | cmonex: aarm_partition_table |
21:38.25 | cr2_ | see above |
21:38.41 | cr2_ | NV is nonvolatile |
21:38.50 | cr2_ | what is MFG ? sounds familiar. |
21:39.04 | ImCoKeMaN | manufacturer? |
21:39.20 | cr2_ | G? |
21:39.29 | cr2_ | APPS and EXTROM is ok. |
21:39.33 | ImCoKeMaN | manufagchurer? |
21:39.42 | cr2_ | they are at the end of your list too. |
21:41.06 | ImCoKeMaN | .data:8C2A0EDC aHtcimageiplOk DCB "HTCIMAGEIPL - OK",0 ; DATA XREF: .text:off_8C02410C |
21:41.12 | ImCoKeMaN | IPL! |
21:43.23 | cmonex | yea there must be one somewhere |
21:43.52 | cmonex | it could even be that it was at 0x0, who knows :( |
21:44.06 | cmonex | i saw corrupt IPL in htc universal too |
21:44.09 | cmonex | at 0 |
21:44.22 | cmonex | (but thats xscale anyway... :P ) |
21:44.36 | ImCoKeMaN | and it overwrites itself? |
21:44.50 | cmonex | not fully on uni |
21:44.58 | cmonex | i was still able to get it out of there :) |
21:45.30 | cmonex | ovwerwriting itself wouldnt work if the actually running code overwrites itself |
21:46.34 | cr2_ | cmonex: pxa resets at 0x0. this one has 32MB RAM at 0x0 -> http://wiki.xda-developers.com/index.php?pagename=TitanMemoryMap |
21:46.56 | cmonex | thats what i said by |
21:46.59 | cmonex | [23:44:32] <cmonex> (but thats xscale anyway... :P ) |
21:47.12 | cmonex | so you fully dumped memory map and nothing nowhere ? |
21:47.38 | cr2_ | i'm documenting the memory map. at least trying. |
21:48.04 | cmonex | fun eh ? :P |
21:48.20 | cr2_ | sigh |
21:48.29 | cmonex | :O |
21:49.21 | cr2_ | i'll better move to athena :) |
21:49.32 | cmonex | :P :P |
21:49.39 | cmonex | good idea :)) |
21:49.45 | cr2_ | but the ATI dll is not much better. maybe even worse. |
21:49.47 | Shadowmite | no |
21:49.59 | Shadowmite | you use suitcases TO move, you can't move to a suitcase... |
21:50.26 | cmonex | ?? |
21:50.33 | cr2_ | http://wiki.xda-developers.com/index.php?pagename=ATIHW |
21:50.43 | Shadowmite | (I'm calling the athena oversized baggage) |
21:50.44 | cr2_ | hermes has the same chip. |
21:51.16 | cr2_ | Shadowmite: you can connect your 700Gig raid to athena :) |
21:51.37 | Shadowmite | lol, I can NFS mount my 700gig raid on my iphone |
21:51.38 | Shadowmite | :P |
21:51.43 | cr2_ | if wince would not have beed such piece of shit. |
21:51.52 | cmonex | wince is ok.. :P |
21:52.01 | cmonex | (sorry i see what channel i'm on now..) |
21:52.03 | cmonex | :) |
21:52.07 | cr2_ | lol |
21:52.19 | cr2_ | can you mount 700G disk on wince ? |
21:52.36 | ltxdaMBL | lol |
21:54.19 | cmonex | didnt try |
21:54.21 | cmonex | dont have 700G |
21:54.36 | cmonex | all i know is, 100 works |
21:55.08 | cmonex | :) |
21:56.39 | cr2_ | ok. |
22:00.30 | Shadowmite | can you implement RSA in 2 lines of code with a keysize over 4096 in wince? (better question...) |
22:00.32 | Shadowmite | lol |
22:01.11 | ltxdaMBL | i can map to 2 terabyte raid array via wif on wince |
22:01.13 | ltxdaMBL | there |
22:01.15 | ltxdaMBL | lol |
22:01.36 | ltxdaMBL | bbl8r |
22:02.35 | cr2_ | you can run haret on wince. that says everything about its security. |
22:02.38 | cmonex | RSA: no idea. |
22:02.54 | cmonex | cr2_: security and wince is a non existant combination before CE6 |
22:03.16 | cmonex | for example, you can happily overwrite code that belongs to the kernel, i was happily using that for debugging sometimes :) |
22:03.26 | cr2_ | ce6 is better ? |
22:03.31 | cmonex | yeah CE6 is totally different |
22:04.00 | cmonex | you cant enter kernel mode so easily, etc, some api's are deprecated (setkmode stuff) |
22:04.19 | cmonex | the virtual memory map is different too |
22:04.29 | cr2_ | cmonex: lol. run ida on the titan's nk.exe |
22:04.36 | cmonex | yeah? |
22:04.39 | cmonex | which nk |
22:04.42 | cmonex | kernel or bootl? |
22:05.17 | cr2_ | kernel |
22:05.28 | cmonex | ok..i dont have it, maybe if you send it.. :) |
22:05.33 | cmonex | but why should i run ida on it? |
22:05.49 | cr2_ | it has setkmode |
22:05.58 | cmonex | it isn't CE6.. |
22:06.02 | cmonex | just CE 5.02 |
22:06.05 | Shadowmite | have you figured out why the titan resets on reboot if sd is in it yet? |
22:06.11 | cmonex | so why wouldnt it have setkmode :) |
22:06.27 | cmonex | i dont know why it is a common mistake to assume WM6 runs on CE6. it DOES NOT |
22:07.25 | cr2_ | ok, i see. |
22:08.12 | ImCoKeMaN | i know why it's a common mistake... |
22:08.18 | cmonex | why? |
22:08.26 | ImCoKeMaN | 6 |
22:08.41 | cmonex | well, yeah MS is silly to have named it WM6... |
22:08.46 | cmonex | should be WM5SE... |
22:08.47 | ImCoKeMaN | hehe |
22:08.49 | cmonex | :) |
22:17.28 | ltxda2 | back for a few |
22:18.02 | cmonex | :) |
22:18.04 | cmonex | hey |
22:18.51 | ltxda | hi |
22:18.51 | ltxda | :-) |
22:19.09 | ltxda | does anyone have access to Platform Builder? |
22:19.42 | cmonex | i have 4.2 installed |
22:19.49 | cmonex | and have 4.1, 5.0, 6.0 on dvd |
22:19.55 | ltxda | can i get it? |
22:19.56 | cmonex | planning to install 5.0 :) |
22:20.07 | cmonex | well they are quite big. but i can give you download links |
22:20.08 | ltxda | can you upload an ISO of the DVD for me or too large for u? |
22:20.13 | ltxda | links for sure please. |
22:20.16 | cmonex | i have 40kbyte/s upload... :S |
22:20.18 | cmonex | ok |
22:20.18 | ltxda | i appreciate this |
22:20.21 | cmonex | which version, 5.0? |
22:20.22 | ltxda | ok |
22:20.22 | cmonex | :) |
22:20.27 | ltxda | all three versions |
22:20.35 | ltxda | most popular first and most used. |
22:20.36 | cmonex | well 5.0 is for CE 5 |
22:20.37 | ltxda | please |
22:20.41 | cmonex | that would be most relevant for you |
22:20.43 | ltxda | and will also work for 6 right? |
22:20.46 | cmonex | CE6 is too different (6.0) |
22:20.49 | ltxda | as i read |
22:20.53 | cmonex | WM5 = WM6 = PB5 |
22:20.55 | ltxda | CE6 is for 6 but won't work for 5 |
22:20.56 | cmonex | 5.0 |
22:21.02 | ltxda | so 5 would be best yes |
22:21.07 | cmonex | ok.. 1 sec :) |
22:21.10 | ltxda | since 5 works for 5 & 6 |
22:21.17 | ltxda | u see i'm learning and reading. :-) |
22:21.19 | cmonex | wm6 you mean? |
22:21.21 | cmonex | :P |
22:21.25 | ltxda | yes |
22:21.28 | cmonex | :D |
22:21.29 | cmonex | ok |
22:21.38 | cr2_ | cmonex: can you pack the .h files ? |
22:21.40 | cmonex | http://hpcmonex.net/PB5_ce5serial_trial.txt |
22:21.47 | cmonex | mmm, well, there are lots of .h files.. :) |
22:21.58 | cmonex | and some .c too ;) |
22:22.13 | ltxda | cr2_, i can put on my ftp once i have it for you. |
22:22.19 | cr2_ | i mean nkarm.h and such. |
22:22.19 | ltxda | just lemme know bro. |
22:22.25 | ltxda | i can extract all files u want. |
22:22.26 | cmonex | you mean the kernel stuff? |
22:22.30 | cmonex | btw, i dont have it installed now |
22:22.33 | cmonex | only 4.2 right now |
22:23.01 | cr2_ | yes, the MODULE structure and similar. |
22:23.18 | cmonex | is 4.2 ok for you? |
22:23.18 | cr2_ | btw, is it possible to find platform builder 2.11 somewhere ? |
22:23.25 | cmonex | 2.11 ... .i wish! :D :D |
22:23.29 | cmonex | but why do you want 2.11? |
22:23.32 | cr2_ | i'd like to see the same struct too :) |
22:23.32 | ltxda | should i look for 2.11? |
22:23.35 | cmonex | isnt that like......obsolete? :P |
22:23.37 | cr2_ | i have jornada820 |
22:23.41 | cmonex | woow! you do?! |
22:23.47 | cmonex | i have 720/728 ;) |
22:23.50 | cmonex | saw a 820 once |
22:23.59 | cr2_ | i like obsolete technically superiour things :) |
22:24.00 | cmonex | i knew someone who used to have PB 2.11 (boughtr it with his money, wow) |
22:24.02 | cmonex | but he lost it..... |
22:24.08 | cmonex | so no chance ..... :( |
22:24.11 | cmonex | cr2_: right ;) |
22:24.16 | cmonex | you know hpcfactor.com by any chance ? |
22:24.25 | cr2_ | yes. |
22:24.29 | cmonex | :) heh |
22:24.48 | cr2_ | cmonex: http://jornada820.sourceforge.net/ |
22:25.36 | cmonex | is it your page? |
22:25.41 | cr2_ | more or less |
22:26.06 | cr2_ | btw, it supported 1024x768 beamer VGA output |
22:26.11 | cr2_ | athena can't that ;-) |
22:26.23 | cmonex | oh |
22:26.33 | cmonex | heh |
22:26.48 | cmonex | hmm, the jornada 728 can too, with a cf vga card.. :P |
22:27.02 | cr2_ | it had USB host. |
22:27.15 | cr2_ | 720/8 was not using it. |
22:27.24 | cr2_ | on sa1101 |
22:27.57 | cr2_ | a nice dotcom era device. |
22:28.24 | cr2_ | i have aero8000 too. |
22:28.48 | cmonex | hehe |
22:28.55 | cmonex | i once had that aero here for a few weeks |
22:28.58 | cmonex | to play with it |
22:29.09 | cmonex | both wifi and BT worked in it at first try.. :) |
22:29.18 | cmonex | so that SH4 is not THAT bad |
22:29.30 | cr2_ | i've bought a 64MB EDO SODIMM for it. |
22:29.35 | cmonex | yea, |
22:29.41 | cmonex | that was the only device with standard sodimm |
22:29.43 | cr2_ | SH4 has hw fp |
22:29.51 | cmonex | nice |
22:29.53 | cr2_ | yes. |
22:29.56 | cmonex | :) |
22:30.04 | cmonex | i had extended battery for it too :P |
22:30.16 | cr2_ | battery was too small |
22:30.25 | cr2_ | but the 800x600 LCD is still unbeatable |
22:30.39 | cr2_ | it was nice and bright. |
22:30.58 | cr2_ | and there was a linux port for it too :) |
22:31.19 | cr2_ | but the guy did not manage the PCMCIA controller |
22:31.27 | cr2_ | so it bitrotted. |
22:32.06 | cr2_ | unfortunately i can't port one nice wince program to it. |
22:32.21 | ltxda | quick question guys...Athena BSP and WM6 source...where would one find such a thing? |
22:32.23 | cr2_ | because 2.11 did not use aygshell |
22:32.46 | cr2_ | athena bsp . hehe. |
22:32.51 | ltxda | lol |
22:32.52 | ltxda | what? |
22:32.57 | cmonex | well, the ext battery was fine |
22:33.03 | cmonex | as for aygshell |
22:33.13 | ltxda | cr2_, what bro? |
22:33.14 | cmonex | there is one that is um.. quite dummy.. but works to some extent ;) |
22:33.17 | cmonex | on ce 2.11... |
22:33.19 | cmonex | someone wrote one |
22:33.41 | cmonex | athena BSP: you wish..eh.. HTC has it. |
22:33.54 | cr2_ | ltxda: it must be very fine warez ;-) |
22:33.54 | cmonex | WM6 source... at microsoft :) |
22:34.02 | cmonex | very very fine :) |
22:34.21 | cmonex | cr2_: what is the wince program ? |
22:34.22 | ltxda | ok i'll ask someone for it then. |
22:34.24 | cr2_ | i've heard that there is a universal bsp . in the wild 8) |
22:34.36 | cmonex | univeresal? htc universal? |
22:34.44 | ltxda | good question...was just going to ask. |
22:34.47 | ltxda | lol |
22:35.04 | cr2_ | cmonex: yes. htc universal |
22:35.07 | cr2_ | cmonex: http://roadmap.cvs.sourceforge.net/roadmap/roadmap_editor |
22:35.26 | cr2_ | i've worked around the aygshell by using the standard menu |
22:35.47 | cr2_ | but wince2.11 does not support AddMenuItem or something like that. |
22:35.54 | cr2_ | so i've given up . for now. |
22:37.05 | cr2_ | cmonex: this is a better link http://www.freemap.co.il/roadmap |
22:37.51 | cmonex | mmm |
22:37.54 | cr2_ | i have even compiled it with arm-wince-g++ |
22:38.00 | cmonex | so where is the BSP!!:) |
22:38.06 | cmonex | i have htc uni :) |
22:38.16 | cr2_ | but not for 2.11 |
22:38.27 | cr2_ | cmonex: in the good hands. on xda-dev :) |
22:39.18 | cmonex | whose hands? :) |
22:43.46 | cr2_ | i don#t have it. and i prefer not to have it :) |
22:45.06 | cmonex | why? |
22:45.16 | cmonex | why wouldnt it be good to have it? |
22:45.39 | BabelO | cr2_: vi command to replace all ? it is not s/false/true/g; ? |
22:49.31 | cr2_ | cmonex: i prefer clean RE, and not the leaked bsps. |
22:50.09 | cr2_ | BabelO: qtopia4.3.0 for ba image ? |
22:50.21 | cmonex | cr2_: more challenge? |
22:50.24 | BabelO | cr2_: ok, but without modem ;) |
22:51.02 | cr2_ | cmonex: you learn much more this was. and afaik there are no other bsps. |
22:51.12 | cr2_ | s/was/way/ |
22:51.18 | cmonex | with a bsp you could have fully working linux on the uni finally. |
22:51.25 | cmonex | you do learn more , of course.... |
22:51.28 | cmonex | ...and much more slowly |
22:52.00 | cr2_ | i have 99% of the needed data on the universal anyway. |
22:52.06 | cmonex | phone works well ? |
22:52.26 | cmonex | hmm, if the goal is a fully working linux, it is better to have that BSP, if the goal is learning and having fun while developing, then maybe not... |
22:53.06 | cr2_ | it works, but we need to write a qualcomm modem driver for qtopia. bsp is of no use here. |
22:53.22 | cmonex | i thought it would reveal how the modem / phone driver works. |
22:53.28 | cmonex | should be part of the bsp |
22:53.47 | cmonex | or you mean |
22:53.58 | cmonex | you guys are just lazy to write it properly... ? :P (but have all the info needed) |
22:54.09 | cr2_ | http://handhelds.org/moin/moin.cgi/HTC_GSM |
22:54.22 | cr2_ | on the universal ? yes, that's true ... |
22:54.39 | cmonex | heh, sad |
22:54.55 | cmonex | it would be fun to play with it but without a comfortably working phone...umm |
22:55.45 | cr2_ | we will have it soon. |
22:56.04 | cr2_ | thanks to trolls releasing the full phone source. |
22:56.12 | cmonex | isn't it good to have it? |
22:56.18 | cmonex | you can decide not to use it |
22:56.25 | cmonex | but if you need it it would be available and that's good |
22:57.16 | cr2_ | we need to write some linux c++ code. that's all. |
22:57.31 | cmonex | ok but why did you use the word trolls |
22:57.34 | cr2_ | and to make this code cooperate with the kernel. |
22:58.03 | cr2_ | http://qtopia.net http://troll.no |
22:58.13 | cmonex | ok |
23:01.33 | cr2_ | BabelO: can you upload it somewhere ? |
23:01.40 | cr2_ | oh it's so late... |
23:01.43 | cr2_ | good night |
23:01.55 | BabelO | cr2_: yes i post link once iupload finish |
23:26.34 | BabelO | cr2_: get it from here http://linuxbox2.free.fr/blueangel/qtopia/ |
23:26.36 | BabelO | goodnight |
23:40.23 | *** part/#htc-linux gilgamesh (n=zode@216.235.158.34) |