IRC log for #htc-linux on 20070920

00:04.25Kevin2BabelO: Hrmm.  Okay.  Thanks.
00:06.11BabelOKevin2: good night and sorry if i can't help on this, my last build was from may
00:20.48*** join/#htc-linux TimRiker (n=timr@rikers.org)
00:30.21*** join/#htc-linux huhlig (n=UhligH@68-189-77-13.dhcp.wtvl.ca.charter.com)
00:57.36*** join/#htc-linux Hawk|- (n=Hawk@p5B17CAA9.dip0.t-ipconnect.de)
01:17.14ImCoKeMaNanyone around?
01:17.47Kevin2Nope.
01:17.53ImCoKeMaNdamn
01:18.20ImCoKeMaNhow's it going kevin?
01:19.51Kevin2I'm okay.  Nothing really new here.
01:20.39Kevin2How 'bout yourself?
01:20.59ImCoKeMaNi'm back to trying to figure out how to get the titan SPL to be loaded to ram from HaRET and started that way
01:21.20ImCoKeMaNit's rebased at 8c000000 (0 physical)
01:22.21Kevin2Remind me what needs to be done again?  You have a modified SPL which you want to load into ram, and then you need to jump to the IPL?
01:22.49ImCoKeMaNthe titan doesn't use an IPL so i'd want to try to jump straight to teh SPL
01:23.00ImCoKeMaNthen see what i need to do from there
01:23.29Kevin2And the SPL is loaded at the start of ram?  (What is the ram base on titan?)
01:23.51ImCoKeMaNyeah it's loaded at 0 and 32mb in ram
01:24.04ImCoKeMaN0x8c000000
01:24.31Kevin2Hrmm.  The physical address is 0x8c000000?  (I don't understand what you mean by "loaded at 0".)
01:24.42ImCoKeMaNi'm pretty new to the haret world so i may be a little slow
01:25.03ImCoKeMaNthe physcical address is 0x0 virtual is 0x8c000000
01:25.21ImCoKeMaNlike when i did pwf i started at 0x0 to dump it
01:26.30ImCoKeMaNi'm trying to gain knowledge and willing to work on my own as much as i can, but i'm sure i'll need a lot of help
01:26.49ImCoKeMaNwell, hopefully not too much, but some for sure
01:27.17Kevin2Generally physical address 0x0 is the flash.  You can't just overwrite flash.
01:28.32ImCoKeMaNhmm ok thought it was ram
01:29.31ImCoKeMaNcr2 posted this on the xda wiki about it:
01:29.32ImCoKeMaN0xac000000   0x00000000   7   drv_global, bt_buf, flash_buf, lcd_buf
01:29.37Speedy2Do any of the HTC devices that run Linux have WiFi built-in?
01:31.18Kevin2Speedy2: Several devices have built-in wifi.  (Universal, Apache, Hermes, etc.)  However, many of the devices aren't well supported in linux yet.
01:31.28ImCoKeMaNin the mmu map though it shows 8c000000 as 0x0 also though and the SPL is rebased there when checking it in IDA
01:31.37Speedy2Kevin2:  I see.
01:31.53Speedy2I was excited to hear about Qtopia running on the HTCs (it's meaningful since they've released the source to the phone apps, etc)
01:33.06Kevin2ImCoKeMaN: What do you mean by "rebased there"?
01:35.23ImCoKeMaNin IDA when you open it to look at the assembly code you have to give it the start and loading address
01:38.25Kevin2ImCoKeMaN: So, what you're trying to do is modify the SPL and then jump into it?
01:38.53ImCoKeMaNyup, first i'll load a diff version one that i haven't modified though just to prove to myself i have the idea right
01:39.54Kevin2Okay.  But I don't see how you're going to be able to modify the flash (if it is flash).
01:40.34Kevin2Why don't you try writing to the 0x0 address and see if the write takes.  Use pfw 0x0 ...
01:40.49ImCoKeMaNmakes sense
01:45.19ImCoKeMaNthe write took
01:46.03Kevin2What commands did you use?
01:46.18ImCoKeMaNbefore:HaRET(5)# pdump 0x0
01:46.18ImCoKeMaN00000000 | ea0003fe
01:46.42ImCoKeMaNthen....HaRET(5)# pdump 0x0
01:46.42ImCoKeMaN00000000 | ea0003fe
01:46.52ImCoKeMaNwhoops recopy
01:47.06ImCoKeMaNHaRET(7)# pfw 0x0 1 1
01:47.06ImCoKeMaNHaRET(8)# pdump 0x0 0x5
01:47.07ImCoKeMaN00000000 | 00000001 000
01:47.22ImCoKeMaN(stripped some excess in there)
01:49.11Kevin2Okay.  So, what you want to do is change the preloader() function in linboot.cpp so that it copies your image to 0x0 and then jumps to 0x0.
01:49.30ImCoKeMaNawesome
01:49.50ImCoKeMaNnow unfortunately i'm in windows lol but i'll get there
01:51.40ImCoKeMaNi thought the concept should be about that simple, we'll see how well it works out when i'm done.  Thanks for the help
01:51.57Kevin2np
02:27.22*** join/#htc-linux ltxda2 (n=anon@c-98-196-125-205.hsd1.tx.comcast.net) [NETSPLIT VICTIM]
02:27.22*** join/#htc-linux toi (n=pleemans@d5152D3B4.access.telenet.be)
02:27.23*** join/#htc-linux gw280 (n=george@vm.gwright.org.uk)
02:27.23*** join/#htc-linux thinko (n=jdoe6alp@smaug.rackdragon.com) [NETSPLIT VICTIM]
02:44.58*** join/#htc-linux imcokeman (n=imcokema@rrcs-67-78-122-67.sw.biz.rr.com)
03:53.06*** join/#htc-linux Ramacher (n=Ramacher@adsl-75-54-42-50.dsl.snantx.sbcglobal.net)
04:01.52fone_fanatichey pof
04:02.16fone_fanaticand shadowmite...
04:02.32fone_fanaticanyone?
04:03.18*** part/#htc-linux fone_fanatic (n=Ramacher@adsl-75-54-42-50.dsl.snantx.sbcglobal.net)
04:27.09*** join/#htc-linux dion (n=dion@inhex.net)
04:32.39*** join/#htc-linux ImCoKeMaN (n=me@rrcs-67-78-122-67.sw.biz.rr.com)
04:55.38*** part/#htc-linux CrAsH_x64 (n=crash@84.78.99.40)
05:24.49*** join/#htc-linux pleemans (n=peter@leemanpe.ugent.be)
05:28.36*** join/#htc-linux _law_ (n=law@mail.stiftadmont.at)
05:43.08*** join/#htc-linux huhlig (n=UhligH@68-189-77-13.dhcp.wtvl.ca.charter.com)
06:22.18*** join/#htc-linux snua12 (n=admin@113-70-207-85.strcechy.adsl-llu.static.bluetone.cz)
06:50.07*** join/#htc-linux rob_w (n=bob@Mb71a.m.pppool.de)
07:03.23*** join/#htc-linux Marex (n=Marex@gwfm4-3-214.802.cz)
07:17.46*** join/#htc-linux sadeness_ (n=LamersIn@nat2.rlan.ru)
07:29.26*** join/#htc-linux kiozen (n=oeichler@p54922C1E.dip0.t-ipconnect.de)
07:34.29*** join/#htc-linux rob__w (n=bob@X10c7.x.pppool.de)
07:56.36*** join/#htc-linux the_sys0p (i=nroberts@123.57.208.20)
08:04.18*** join/#htc-linux rob_w (n=bob@X1652.x.pppool.de)
08:17.24*** join/#htc-linux rob__w (n=bob@X1887.x.pppool.de)
08:19.01*** join/#htc-linux Marex_Yggdrasil (n=Marex@gwfm4-3-213.802.cz)
08:23.13*** join/#htc-linux Marex_Yggdrasil (n=Marex@gwfm4-3-213.802.cz)
08:23.30*** join/#htc-linux Marex (n=Marex@gwfm4-3-213.802.cz)
08:26.41*** join/#htc-linux rob_w (n=bob@X1a00.x.pppool.de)
08:37.16*** join/#htc-linux DTMonterrey (n=evandro@cornelius.estig.ipb.pt)
08:39.08BabelO_hi
08:45.30*** join/#htc-linux rob__w (n=bob@X1e08.x.pppool.de)
09:08.21*** join/#htc-linux rob_w (n=bob@M80cb.m.pppool.de)
09:24.33*** join/#htc-linux ellisway (n=ellis@homealone.good1.com)
09:30.28*** join/#htc-linux youshe (n=youshe@jaalon.org)
09:32.41cr2_BabelO_: does qte4.3.0 work ?
09:36.58*** join/#htc-linux rob__w (n=bob@X0fe8.x.pppool.de)
09:50.19*** join/#htc-linux psokolovsky (n=psokolov@82.193.99.11)
09:50.22BabelO_cr2_ : yes, still understanding modem class :)
09:50.52BabelO_cr2_ : yesturday , i test, bluetooth, wifi, voip ( only connect to server as yi have no mic )
09:51.01BabelO_suspend / resume works well
09:51.08cr2_no mic ?
09:51.26BabelO_now, i try to understand on can i have modem working
09:51.31cr2_we need to investigate it.
09:51.32cr2_ok
09:51.54BabelO_cr2_: no mic, bluangel sound driver does not support reccord at the moment, i don't know if magician have it
09:52.29cr2_we need to talk to pH5
09:54.11BabelO_cr2_ : anyway,  qtopia speak with ti Calypso without problem, i set line discipline to 16 and it is ok now
09:56.00*** join/#htc-linux rob_w (n=bob@Mb8c7.m.pppool.de)
09:59.39cr2_good.
09:59.49BabelO_cr2_ : good ;) i need to start with this http://doc.trolltech.com/qtopia4.2/syscust-gsm.html
09:59.49cr2_will you create an image ?
09:59.58cr2_ok.
10:00.18BabelO_cr2_ : i have one on by Blueangel sdcard, i can upload it  on the evening
10:00.26cr2_ok, thanks.
10:00.55cr2_the only remaining thing is the kernel+ramdisk linked into haret.
10:01.00BabelO_i m just cuious about sound plugin, but this one is after, phone can work without
10:01.08cr2_ok.
10:01.28cr2_we need an action list to finish the damn thing :)
10:02.08BabelO_agrre with that ;)
10:02.46BabelO_just a little thing can you point me to wiki page where virser_atcmd.dll is configured for logging ?
10:03.17cr2_xpanel or atdbg ?
10:03.54cr2_it's a bit different on different devices.
10:03.59BabelO_cr2_ : atdbg, what xpanel dbg can see in log file ?
10:04.17cr2_xpanel is missing on most phones
10:04.27BabelO_i have it on artemis ;)
10:04.42BabelO_mayube you see it in registrydump
10:05.04cr2_enabling GSM AT command logging in wince with phm regedit, which you can use to set SOFTWARE\OEM\?ATDbgLog
10:05.15cr2_it's on sable
10:05.28cr2_can be HTC\ATDbgLog
10:05.33cr2_or something like that.
10:06.55cr2_in regpath "HKLM\SOFTWARE\HTC\ATDbgLog", set key Enable=1
10:07.14cr2_in regpath "HKLM\SOFTWARE\HTC\XPanel", set Enable=1
10:07.16cr2_on hima
10:07.24cr2_http://www.xs4all.nl/~itsme/projects/xda/xda-ii.html
10:07.50BabelO_thanks :), i think i use it to sse all comand i can override in qtopia with vendor plugin
10:09.29*** join/#htc-linux rob__w (n=bob@X1565.x.pppool.de)
10:15.51cr2_just document then in wiki for one omap850 phone.
10:17.55cr2_hehe. the tffs.o is included in the source.
10:18.51cr2_ther symbols look a bit different from motorola's
10:20.04cr2_flRegisterDOCG4
10:20.09cr2_now it's clear why.
10:21.12cr2_yes, a lot of new G4 and H1 functions.
10:29.54*** join/#htc-linux rob_w (n=bob@X1b1d.x.pppool.de)
10:35.12cr2_BabelO_: what is p300wlan ?
10:36.46BabelO_cr2_ : don't know, where do you see that ?
10:37.13cr2_qtopia source has some binary kernel modules
10:37.50cr2_hehe. it's socket's wifi SD card.
10:37.55cr2_very interesting.
10:38.00cr2_seems to be sdio.
10:39.35cr2_very well.
10:39.57cr2_hmm. did you hardcode the sdio stack into this driver ?
10:40.08cr2_will explain the driver size :)
10:46.38BabelO_cr2_ : we have it in next kernel release, right ?
10:47.39cr2_only for the gps afaik.
10:47.53cr2_it's like pcmcia
10:48.13cr2_you need a driver for each device class
10:48.17cr2_serial was the easiest
10:48.23BabelO_cr2_ : so it is just a pcmcia like driver for acx10 chipset, lol
10:49.24cr2_yes.
10:49.28BabelO_he he i have an sql query which take 80 lines
10:49.48cr2_but the newer acx100 54mbit chipsets also use sdio for something.
10:49.51BabelO_i think i look at it after macdonald :)
10:50.11BabelO_cr2_ : yes mine use sdio
10:50.24cr2_they are all the same.
10:51.48*** join/#htc-linux gundam (n=gundam@slackware.it/staff/gundam)
10:54.57BabelO_i like qtopia documentation ;) http://doc.trolltech.com/qtopia4.2/qsignalsource.html
11:19.00*** join/#htc-linux _law_ (n=law@mail.stiftadmont.at)
11:30.39*** join/#htc-linux anYc (i=mario@hadince17.hadiko.uni-karlsruhe.de)
11:40.03*** join/#htc-linux kiozen (n=oeichler@p54922AFC.dip0.t-ipconnect.de)
11:43.08cr2_BabelO_: qt docs are excellent
11:54.48BabelO_cr2_ : are you able to compile roadmap for arm ?
11:59.25*** join/#htc-linux anYc (i=mario@hadince17.hadiko.uni-karlsruhe.de)
12:07.03BabelO_cr2_ : about accel graphics, it look like there is a sample for imageon 2380
12:07.05BabelO_http://doc.trolltech.com/4.3-snapshot/qtopiacore-ahigl.html
12:09.09cr2_2380 ? where is it used.
12:09.30cr2_i can compile for arm, but i need qtopia headers and libraries.
12:09.41cr2_i'll try to commit my changes to CVS.
12:11.27*** join/#htc-linux gundam (n=gundam@slackware.it/staff/gundam)
12:13.56cr2_BabelO_: it's more of an opengl use example
12:15.55BabelO_cr2_ : yes, but they speak about OpneGL ES from ati. List of thing to do should be very long...
12:19.56*** join/#htc-linux rob_w (n=bob@M8330.m.pppool.de)
12:39.35*** join/#htc-linux rob__w (n=bob@X0a3f.x.pppool.de)
12:43.12*** join/#htc-linux anYc_ (i=mario@hadince17.hadiko.uni-karlsruhe.de)
12:49.51*** join/#htc-linux rob_w (n=bob@Mb761.m.pppool.de)
13:08.06*** join/#htc-linux skodde (n=skodde@unaffiliated/skodde)
13:09.14*** join/#htc-linux rob_w (n=bob@Mb0a4.m.pppool.de)
14:15.41*** join/#htc-linux Othello (i=nobody@gateway/tor/x-ad372619abba3e10)
15:23.05*** join/#htc-linux gundam (n=gundam@slackware.it/staff/gundam)
15:31.18*** join/#htc-linux dion (n=dion@inhex.net)
15:33.25*** join/#htc-linux pleemans (n=peter@d51A5E76A.access.telenet.be)
16:00.54*** join/#htc-linux TimRiker (n=timr@001-815-970.area1.spcsdns.net)
16:22.49*** join/#htc-linux pH5 (n=ph5@e178193185.adsl.alicedsl.de)
16:44.52ImCoKeMaNany haret experts around?
16:49.18*** join/#htc-linux BabelO (n=Fabrice@lun34-2-82-238-28-28.fbx.proxad.net)
16:50.08pH5hi ImCoKeMaN, BabelO
16:50.17ImCoKeMaNhey
16:54.41*** join/#htc-linux snua12 (n=admin@113-70-207-85.strcechy.adsl-llu.static.bluetone.cz)
16:55.23BabelOhi pH5 , ImCoKeMaN
16:55.44ImCoKeMaNdone a new step with titan and SPL with haret, but still not where i want to be
16:56.48ImCoKeMaNit looks like i'm able to get it to load the SPL from a zImage file, but it doesnt seem to fully communicate with USB like it should
17:03.38ImCoKeMaNwell seems like the issue is being complicated by the usb port and those connections itself not just the loading i'm doing
17:08.06cr2_ImCoKeMaN: hi.
17:08.14ImCoKeMaNhey cr2
17:08.44cr2_ImCoKeMaN: can you check if it's RAM at 0x10000000  ?
17:09.02cr2_i'm confused about the RAM size on titan.
17:09.05ImCoKeMaNsee if i can write to it? p or v?
17:09.09cr2_p
17:09.13cr2_only p
17:09.28ImCoKeMaNk one sec
17:11.40ImCoKeMaNlooks like i can write to it with pfw
17:11.53ImCoKeMaNpdumped, pfw, pdump again and it's different
17:12.25cr2_hmm. interesting.
17:12.54cr2_so 96 MB ???
17:13.22ImCoKeMaNadvertized as 64
17:13.57ImCoKeMaNi wonder if the 0x0 and 0x(32mb heh) are actually teh same cuz the spl is found at both
17:14.13cr2_yes, for the wince.
17:14.46cr2_32MB is not mapped.
17:14.57ImCoKeMaNweird
17:17.42ImCoKeMaNlooks like the SPL i loaded into ram and booted (successfully) still can't access the radio image now
17:19.26*** join/#htc-linux ltxda (n=ltxda@c-98-196-125-205.hsd1.tx.comcast.net)
17:20.27cr2_look at my notes:
17:20.33cr2_Rom size 256 ?
17:21.25cr2_hehe. you have motherboard serial number.
17:23.18cr2_1024-256=768 ?
17:23.44ImCoKeMaNok what part of this are you asking me and what is just your notes?
17:27.48cr2_notes are here: http://wiki.xda-developers.com/index.php?pagename=TitanMemoryMap
17:28.28cr2_bbl
17:34.30ImCoKeMaNi gotta go too see ya
18:24.03BabelOpH5: around ?
18:24.38BabelOpH5: where can i get small code to setup line discipline ?
18:25.03*** join/#htc-linux kiozen (n=oeichler@rgnb-4db08036.pool.einsundeins.de)
18:26.40BabelOok found ;)
18:29.59pH5BabelO: :)
18:32.15cr2_pH5: hi
18:32.21pH5hi cr2_
18:32.31cr2_pH5: what do we know about the serial ports on omap850 ?
18:34.05pH5cr2_: not sure. we know the memory ranges, they are uarts and I'd say should be supported by the 8250 driver.
18:36.58cr2_BabelO has some problems with that.
18:37.26*** join/#htc-linux gilgamesh (n=zode@34.158.mariettafiber.net)
18:37.36pH5BabelO: did you have any success with the omap clocks / hangup issue?
18:38.18BabelOpH5: no i did not found :(
18:38.26BabelOpH5: always hand when i start top
18:38.42BabelOcr2_: if i rememnber well you have same issue on hermes before ?
18:39.30*** join/#htc-linux DTMonterrey (n=evandro@213.13.228.211)
18:40.30cr2_BabelO: i don't understand the wince serial clock settings on hermes.
18:44.47BabelOpH5: i have a small issue with line discipline, it return me a blank line before at command return, any idea ?
18:45.12*** join/#htc-linux TimRiker (n=timr@001-815-970.area1.spcsdns.net)
18:45.15cr2_ImCoKeMaN: do you know how these 256MB ROM are set up ?
18:45.37pH5BabelO: do you have a complete dmesg log of it? n_tihtc currently spews everything into the kernel ring buffer.
18:45.51BabelOyes
18:46.48BabelOpH5: http://pastebin.ca/704976
18:46.50pH5could be a bug in the discipline, or some difference between ma/ba.
18:46.53pH5I'll have a look
18:49.18cr2_BabelO: Alignment trap: qpe (2066) PC=0x41126e7c Instr=0xe5974008 Address=0x000a0d53 FSR 0x0f3
18:49.38cr2_something to be disassembled.
18:51.45BabelOcr2_: yes qtopia  segfault
18:52.09*** join/#htc-linux kiozen (n=oeichler@rgnb-4db08036.pool.einsundeins.de)
18:52.40*** join/#htc-linux hlbot (n=adm@iclem.net)
18:52.43pH5cr2_: gdb
18:53.58BabelOpH5: what is modem speed to connect to ?
18:54.25pH5BabelO: 115200
18:55.12BabelOpH5: so i  m ok, but ATE0\r\r\nOK\r\n gave me a blank line with \r\r
18:55.32cr2_BabelO: in your code ? :)
18:55.35BabelOpH5: last time with gnokii i manage it
18:55.54BabelOcr2_: why in my code ?
18:59.27BabelOcr2_: with qtopia it return that http://pastebin.ca/704986
18:59.32pH5BabelO: it seems the ba always injects a blank line before any reply
19:00.15pH5the first reply (line 21) in your log is \r\nOK\r\n already
19:00.34pH5as long as echo is enabled (ATE1) you get <echo>\r\r\nOK\r\n
19:01.38cr2_BabelO: but it does not fault there.
19:02.19BabelOso i need to fix that in qtopia code ? or do you think there is an atcommand ?  because minicom do it properly
19:03.02pH5BabelO: should be. compare the minicom dmesg log with the one you just sent.
19:03.12BabelOok don't move ;)
19:09.47BabelOok move :) http://pastebin.ca/705002
19:10.44BabelOpH5: maybe it is init string ?
19:12.47pH5what is the reply in line 9 to? "\r\r\nHTC\r\n\r\nOK\r\n"
19:13.10pH5and you see in line 88: "\r\nOK\r\n"
19:13.29BabelOpH5: it reply to at+cgmi with HTC+blank line+OK
19:13.41pH5there's always a CR-LF before the ok, it seems.
19:13.43*** join/#htc-linux Tjikkun (n=tjikkun@82-204-54-115.dsl.bbeyond.nl)
19:14.39pH5does it also have this in ATE0 mode?
19:14.52pH5and in ATV0?
19:15.01BabelOi try
19:15.41pH5I wonder what the standards say. Should empty lines be ignored in normal AT mode?
19:16.08cr2_unsolicited junk ?
19:16.39cr2_BabelO: filter them out in userspace.
19:17.07BabelOcr2_: i m looking for correct entry point in qtopia
19:17.17BabelOlot of classes :(
19:17.59pH5cr2_: agreed. that is certainly stuff for userspace.
19:18.09pH5we should patch the radio rom to fix this ;)
19:18.17cr2_pH5: sure :)
19:18.57cr2_pH5: details on radio:  http://www.xs4all.nl/~itsme/projects/xda/xda-ii.html
19:19.15cr2_xda-ii gsm memory map
19:19.46pH5I want a ti calypso register map ;)
19:20.08cr2_0xffd* and 0xffe*
19:20.22cr2_the cpu is made by TI, so it should be similar to omap :)
19:21.45BabelOpH5: do i need channel 0x12 too ?
19:21.59cr2_pH5: http://www.xs4all.nl/~itsme/projects/xda/xdagsm-info.html
19:24.01cr2_BabelO: you can see raw output from the multichannel protocol in \Storage\XPanelLog*.pco files
19:24.17pH5cr2_: hmmh. "rather difficult to reverse engineer. many thumb/arm code switches, ..."
19:24.29pH5that's what stopped my, too. back then.
19:24.33pH5s/my/me/
19:25.26pH5I guess the big unreadable rom images copied to ram he mentions are the code for the DSP.
19:31.20cr2_probably
19:32.40BabelOpH5: you are right with atv0e0 no blank line :(
19:33.37pH5rejoice, problem solved.
19:34.10pH5is there a c54x disassembler somewhere?
19:34.35cr2_what's that ?
19:34.42cr2_included in ida ?
19:35.14cr2_http://gcc-c54x.berlios.de/
19:36.32pH5yes, interesting
20:03.51*** join/#htc-linux skodde (n=skodde@unaffiliated/skodde)
20:08.50BabelOpH5: ats4 command line :)
20:11.01ImCoKeMaNcr2_: this is the pdocread -l info for partitions on titan
20:11.19ImCoKeMaNC:\data\Titan\itsutilsbin-20070323>pdocread -l
20:11.19ImCoKeMaN220.38M (0xdc60000) FLASHDR
20:11.19ImCoKeMaN|           3.12M (0x31f000) Part00
20:11.20ImCoKeMaN|           3.13M (0x320000) Part01
20:11.20ImCoKeMaN|          50.88M (0x32e0000) Part02
20:11.20ImCoKeMaN|         163.25M (0xa340000) Part03
20:11.22ImCoKeMaN<PROTECTED>
20:11.24ImCoKeMaN|          10.00M (0xa00000) PART00
20:11.58cr2_ImCoKeMaN: so you think it's one chip?
20:12.22ImCoKeMaNwell those partitions are all different on different rom versions so it would seem that way
20:12.36ImCoKeMaNi can get you the one for some wm5 ones and the other sprint one too
20:12.59cr2_do you know the purpose of these partitions ?
20:13.18cr2_your RAM dump say something about it.
20:13.28ImCoKeMaNthe 3 meg ones look to have some xip codes in them
20:13.37ImCoKeMaNthe ~50 is OS the larger is storage
20:13.44ImCoKeMaN10 is the extrom
20:16.00cr2_163 ?
20:16.01*** join/#htc-linux toi (n=pleemans@d5152D3B4.access.telenet.be)
20:16.26cr2_dwNumBlocks: 1768 dwBytesPerBlock 131072
20:16.51cr2_expr 1768 \* 131072
20:16.58cr2_231735296
20:17.34cr2_it's 221MB ?
20:18.05cr2_yes, looks like FLASHDR
20:20.32cr2_look at this line:
20:20.34cr2_flashn_dm_init_structures: +memset:0xac2a0000
20:20.56cr2_is it a virtual address ?
20:21.36cr2_i think yes.
20:22.34cr2_flashn_dm_reset_buffer = ac2a1140
20:23.05ltxdaanyone have info or tools to partition/repartition DOC on Athena?
20:23.27cr2_then comes that: Tai: dwRetAddr=0xac3a0010
20:23.47cr2_ltxda: it's G4 m-doc
20:24.36cr2_ltxda: i've seen the tffs modules for the greenphone today. is it kernel 2.4.20 ?
20:24.38ltxdacr2_, how would i find that?  Google or other source?  Sorry just learning.  :-)
20:24.53ltxdanot sure how to answer since i'm VERY green on the subject.
20:25.03cr2_then you can boot this kernel and use linux 'dformat' or how it is called.
20:25.23ltxdaoh kewl
20:25.24cr2_i wanted to say that it's doable.
20:25.31ltxdagotcha
20:25.32cr2_in principle :)
20:25.39cr2_with available tools
20:25.46ltxdathat's what i was hoping
20:25.52ltxdacooking ROM and wanted to merge partitions
20:26.12cr2_the trick is to boot 2.4.20 kernel on athena ;)
20:26.52ltxdait's not booting atm?
20:27.28cr2_ltxda: do you really want to do it ? i don't like to mess with m-doc with the initial bootloader in it.
20:27.43cr2_i've booted only 2.6.* kernel
20:27.47ltxdaah i see
20:27.56ltxdai think u gave me one to boot a while back...which was that?
20:28.25cr2_don't rememeber. 2.6.19 probably
20:28.48cr2_i'm looking at the athena dlls once again.
20:29.04cr2_time to push linux forward on athena
20:29.26ltxdaok let me know what you need...I have a few people that can help test...I can dedicate more time now.
20:29.59cr2_the touchscreen and cpld drivers are already there, just need some modifications.
20:30.00cr2_ok.
20:30.38ltxdajust lemme know bro.  Have about 3-5 people that would probably participate in testing...from our Athena Project core team.
20:31.04ltxdaonly issue wiht using linux tools is we can't make everyone load to linux to partition their DOC. LOL
20:31.33ImCoKeMaNdepends how easy you make the linux install
20:31.38ltxdado you think the buzzdev tool can do this on DOC?  if so, link?
20:31.50ltxdaImCoKeMaN, yea i know.  It can be tiny and the user would never know it was Linux...
20:31.58ltxdathey would just see something happening then be ready to flash.
20:32.41ImCoKeMaNi made sfx that was able to dump the SPL from their phone and ftp it to a place for me to check it
20:33.06cr2_ltxda: it's not needed. i think that the risk is too high. those who reflash wince on DoC are also crazy :)
20:33.14ImCoKeMaNjust had to have it activesynced and run the exe and it did everything else, but it scared too many when you make them type hex in haret
20:33.32ImCoKeMaNi'd agree with cr2 there
20:33.39ltxdacr2_, reflash wince on DoC? sorry if stupid question just want to make sure i understand.
20:34.00ImCoKeMaNwell i hope me meant repartition
20:34.14ltxdareflash = repartition?
20:34.21cr2_ltxda: both.
20:34.32cr2_your wince is also on DoC.
20:34.41ltxdayes
20:34.51cr2_i'm thinking about DoC as a bootloader.
20:34.57ltxdawe flash cooked ROM, but now want to repartition. LOL
20:35.02cr2_don#t touch it if it does not break .
20:35.09ltxdaisn't bootloader seperate?
20:35.21ltxdaor it's in there?
20:35.25cr2_it's logically separate, but it's the same NAND.
20:35.34ltxdaah
20:36.10ImCoKeMaNwell i'm trying to be crazy and reflash my titan heh
20:36.16ltxdalol
20:36.18ltxdaflashing is nothing.
20:36.34ltxdaImCoKeMaN, oh u mean reflash the bootloader?
20:37.00ImCoKeMaNwell not sure yet if that will be needed, but i'm trying to work on a softbootloader to get it started
20:37.12ltxdaanyone have buzzdev tool/s?
20:37.15cr2_there is no opensource mdoc-G3/4 driver. i've only documented the internal registers.
20:37.32Shadowmiteyou have the tffs sdk?
20:38.04cr2_Shadowmite: there are 2 linux 2.4 kernel modules
20:38.10Shadowmiteotherwise known as the long lost sdk that sandisk forgot about
20:38.11Shadowmite:)
20:38.36*** join/#htc-linux cmonex (n=xy6091@j7nl0jgna7.adsl.datanet.hu)
20:38.37ltxdaanyone have these tools available?
20:38.38cr2_Shadowmite: and the wince IPL.
20:38.40cmonexhi
20:38.43ltxdahi
20:39.00ltxdacr2_, do you have the sdk available bro? or buzzdev tools?
20:39.04ltxdaor anyone else?
20:39.17cr2_ltxda: isn't it in the itsutils ?
20:39.52cmonexwhat isnt?
20:40.04Shadowmiteeh? yea, the ipl, and spl should both be on the doc I imagine in a unpartitioned area
20:40.42Shadowmitecmonex, have you tried just reversing trueffs.dll?
20:40.45ImCoKeMaNhaven't seen any IPL info for any CDMA devices yet
20:40.46cmonexthey are in something called binary partitions
20:40.58cmonexShadowmite: i didnt try anytihng in this 5 minutes since i saw the buzzdev thread
20:41.10cmonexwhich says "I try to resize my extended ROM, but I still get the 'FL_IOCTL_FORMAT_PHYSICAL_DRIVE failed' error"
20:41.15ShadowmiteImCoKeMaN, I have the treo 650 cdma ipl...
20:41.19cmonexthat made it obvious its just trueffs
20:41.21Shadowmitewhich is a rip of a htc devices
20:41.25cmonexwhich is what olipro wouldnt answer
20:41.37ImCoKeMaNhmm interesting
20:42.05cmonexBTW
20:42.11ImCoKeMaNi was able to load teh SPL as a zImage with a modded haret and get it to load, but it won't access teh radio for the CID, maybe the IPL is still needed
20:42.12cmonexi didnt ever see pdocread dumping an IPL
20:42.25cmonexbut i remember reading the IPL is in the first block
20:42.49Shadowmiteumm
20:42.51cmonexso, say the IPL is unpartitioned, the SPL is in a binary partition
20:42.53ImCoKeMaNthe weird part is it's not in the rom dumps for the titan either
20:43.01cmonexso the IPL can be dumped only using pmemdump
20:43.02Shadowmiteon the treo 650 the CID was also tossed into that unpartitioned space
20:43.09Shadowmiteis it possible you overwrote it?
20:43.15cmonexor maybe with an unlocked bootloader :)
20:43.24cmonexImCoKeMaN:
20:43.34cmonexif you want to do SSPL, you have to patch IPL not to load the SPL from nand
20:43.34Shadowmitehtc used to toss all tokens into that area
20:43.43cmonexunless you directly tried jumping to SPL
20:43.47cmonexbut that may not be the best idea
20:44.16ImCoKeMaNwell the reason i tried jumping straight to spl is because i wasn't able to find anything indicating info about an IPL in the titan
20:44.24cmonexthere is an IPL, rest assured
20:44.31cmonexdo you have itsutils handy ?
20:44.39ImCoKeMaNyea
20:44.53Shadowmitecmonex, I think he overwrote the ipl with a bootloader
20:45.01cmonexShadowmite: the ipl is at 0x0
20:45.06Shadowmitethe cpu's micro calls the ipl initially doesn't it?
20:45.12ImCoKeMaNthats the spl in mine
20:45.16cmonexummm
20:45.19cmonexSPL is not designed to run from 0x0
20:45.29ImCoKeMaNwhen i dump 0x0 thats when i got teh SPL
20:45.37cr2_cmonex: on G3/4 m-doc yes.
20:45.48cmonexcr2_: on any nand
20:45.52cmonexwith ARM
20:45.58cr2_cmonex: this msm7500 seems to be different. i don#t understand how it boots
20:46.08cmonexwhats msm7500?
20:46.08Shadowmiteheh
20:46.12cr2_cmonex: http://wiki.xda-developers.com/index.php?pagename=HTC_DiskOnChip
20:46.19Shadowmitequalcom and their BS NDA's
20:46.28Shadowmitecmonex, the cpu IS the cellcore chipset
20:46.46cr2_cmonex: the IPL is in the first 0x800 bytes.
20:46.53cmonexi saw that page a while ago, and?
20:47.03cmonex0x800, well, depends on implementation :)
20:47.31cr2_msm7500 has RAM at 0x0
20:47.42cr2_and in this RAM you have the SPL.
20:48.01cr2_who copies SPL there ?
20:48.13cr2_http://wiki.xda-developers.com/index.php?pagename=TitanMemoryMap
20:48.21cmonexIPL copies SPL there
20:48.23cr2_this is a msm7500-based phone
20:48.24cmonexusually
20:48.34cr2_well, but where is the IPL ?
20:48.36cmonexhmm ram at 0x0
20:48.38cmonexphysically?
20:48.42ImCoKeMaNyup
20:48.44cr2_yes.
20:48.44ImCoKeMaNi wrote to it
20:49.01cmonexis that link relevant now?
20:49.02Shadowmitecmonex, this is a preview of the kasier
20:49.04cmonexthe titan one
20:49.10cmonexi'm confused now with all these links
20:49.11cr2_cmonex: some omap CPUs can boot from 0x0800000
20:49.44cmonexok, then the IPL is there
20:49.50*** join/#htc-linux gilgamesh (n=zode@216.235.158.34)
20:49.57Shadowmitethe kaiser seems to have a linux radio bootloader
20:49.59cr2_on these ARM-based cpus, yes.
20:50.13cmonexi dont see a problem.... there is a reset vector that will eventually lead to another code, and so on
20:50.22cr2_Shadowmite: it's the ARM9 part of the CPU.
20:50.38cr2_cmonex: we have no CPU docs, that's the problem ;-)
20:50.42Shadowmiteheh, dual core cellular core chip... that's just insane
20:50.42cmonexah
20:50.42Shadowmite:)
20:50.48cmonexi guess play around then :/
20:50.56cr2_cmonex: trying...
20:51.11cmonex:)
20:51.20cmonexi dont even know what device this is about
20:51.24cmonexkaiser?
20:51.25ImCoKeMaNi was jsut happy to get teh SPL loaded at all today i was able to load the old version and access it with the info commands in mtty
20:51.34ImCoKeMaNhtc titan sprint mogul
20:51.41cmonexi meant cr2_
20:51.46cr2_cmonex: all new htc phones use this new cpu.
20:51.54cmonexincluding titan?
20:51.58ImCoKeMaNyup
20:52.05ltxdacr2_, even athena or new as in after athena?
20:52.06cmonexoh, interesting.
20:52.12cmonexso the problem is you dont have ipl dump?
20:52.15cmonexltxda: noo
20:52.19cmonexathena is just xscale
20:52.25cr2_ltxda: athena is pxa270, but it's an obsolete chip ;)
20:52.29ltxdaok, was making sure i understood.
20:52.32ltxdaright
20:52.34cmonexwhy is it obsolete ? ...
20:52.38ImCoKeMaNi suppose that's the problem yeah
20:52.40ltxdamy chip :-(
20:52.51cr2_cmonex: who produces it ?
20:52.56Shadowmiteobsolete cause it's prime was 2004!
20:52.58Shadowmite:P
20:53.02ltxdalol
20:53.18Shadowmitethe sammy clone is better in a few ways
20:53.20ltxdabut it still runs nice.  i can't wait for the athena replacement to come out.
20:53.23cr2_cmonex: intel sold pxa to marvell
20:53.27cmonexwho cares
20:53.27Shadowmitebut this new qualcomm seems to be taking over
20:53.31cmonexi dont think it's obsolete
20:53.33cmonexit is perfectly usable
20:53.44cr2_who makes pxa3xx, without providing any docs at all!
20:54.09cmonexand i dont need to see my name all the time
20:54.22cr2_cmonex: it's a great and well-documeted chip, but it's nmot produced anymore.
20:54.28cmonexand ?
20:54.46cmonexdont call everything obsolete
20:54.50cmonexgeez, what is my PC then
20:54.51cr2_htc moves to samsung and qualcomm
20:54.55ltxdacr2_, so the athena is the last device we'll be seeing the chip in?
20:55.03cr2_soon you'll forget that there are pxa270-based phones.
20:55.06cmonexits almost 5 years old
20:55.15ltxdacmonex, lol
20:55.16cr2_ltxda: i guess so.
20:55.21ltxdacr2_, gotcha.
20:55.25ltxdagood info to know.
20:55.26cmonexcompared to that the pxa270 is just fine
20:55.34ltxda:-)
20:55.55ltxdaman i can't wait for the next athena.
20:56.40ImCoKeMaNan IPL from a different phone wouldn't really help here for the titan right? and they probly protect the IPL fairly well in the titan
20:56.57Shadowmitethe pxa27x is a excellent chip
20:57.00cr2_pxa27x is a fast "high-end" chip that consumes too much power.
20:57.01cmonexno
20:57.03cmonexit wont help
20:57.04cr2_compared to the others.
20:57.11Shadowmitethe problem is not enough devices used the faster clocked versions of it
20:57.21cr2_that's why it's not so great for the cellphones.
20:57.23cmonexwhatever is "too much power"
20:57.35ImCoKeMaNburn your hands hot
20:57.42Shadowmitethe iphone's 600+ mhz cpu is pretty awesome for a cellphone
20:57.51cr2_iphone uses samsung
20:57.58Shadowmiteyes...
20:58.00cmonexand no one knows its frwequency
20:58.03cmonexit may be 400mhz
20:58.09cr2_i guess so
20:58.21cmonexits some new armv6 chip
20:58.23Shadowmiteumm, we know it's over 600 I'm fairly certain
20:58.30ShadowmiteI'll have to find ya the link
20:58.32cmonexok
20:58.36cr2_Shadowmite: for the ALU ?
20:58.37cmonexi saw such links
20:58.40cmonexthen they were refuted
20:58.45ltxdaand it locks up just like WM6  :-P
20:59.05Shadowmitelol
20:59.10Shadowmiteltxda, no, not really
20:59.17Shadowmiteit only locks on third party software
20:59.22Shadowmitewhich is why apple tried to block it
20:59.26ltxdai've seen a stock one lock up
20:59.27cmonexapple sucks
20:59.29Shadowmiteof course that didn't work too well
20:59.33cr2_lol
20:59.37cmonexif thats the only reason for blocking software
20:59.47ltxdait was on a show...the guy was showing it...a guy from apple and as he was browsing or something something it totally locked up on him..LOL
21:00.01Shadowmiteheh
21:00.23ltxdai was surprised
21:00.23cr2_i think it was billy gates with the htc universal :)
21:00.27ltxdalol
21:00.28ImCoKeMaNok well i think i'm out for a while now
21:00.29Shadowmitemine has only crashed 3 times, all when I was running a 3rd party app that was flakey, 2 of which were navizon gps!
21:00.31Shadowmite:)
21:00.47ltxdaShadowmite, gotcha.
21:00.53Shadowmiteanyway, I gotta head home... bbl
21:02.18cmonexcr2_: to go back to the previous topic..so you dumped the entire memory map and found no code that could be at a possible reset vector?
21:03.37cr2_i didn't find the IPL string.
21:03.43cr2_only SPL and wince kernel
21:03.59cr2_and since the SPL is in RAM, i'm confused.
21:04.14cr2_i'm also not quite sure where is the NAND located.
21:04.18ImCoKeMaNseeing you confused can'y be good
21:04.21cr2_and how it is accessed.
21:04.45cmonexmaybe the IPL has no strings
21:04.46cr2_ImCoKeMaN: confused == i've not understood it immediately :)
21:05.03ImCoKeMaNhehe ok i'll give you a couple minutes then =)
21:05.08cr2_maybe.
21:05.10cmonexyou found no code other than SPL and CE kernel/OS?
21:05.26cr2_need to find out how the flash is accessed anyway.
21:05.29ImCoKeMaNwhen you use the dutty tool to dump teh nbh there is no IPL like there are on gsm phones
21:05.33cmonexive seen on MIPS, it can be just 20 lines of opcodes before it jumps to a different place
21:05.41cmonexhmm, how does SPL startup look like?
21:05.54cmonexit can be just 20 lines of opcodes: i mean at reset
21:05.54cr2_cmonex: i#ve found the linux microkernel and qualcomm phone control code.
21:05.59cmonexcool
21:06.57cr2_hmm. what is 'Tai' ?
21:07.13cmonexImCoKeMaN could you send me the SPL..i1m curious
21:07.21ImCoKeMaNhehe sure
21:07.25ImCoKeMaNC:\data\Titan\itsutilsbin-20070323>pdocread -l
21:07.25ImCoKeMaN220.38M (0xdc60000) FLASHDR
21:07.25ImCoKeMaN|           3.12M (0x31f000) Part00
21:07.25ImCoKeMaN|           3.13M (0x320000) Part01
21:07.25ImCoKeMaN|          50.88M (0x32e0000) Part02
21:07.26ImCoKeMaN|         163.25M (0xa340000) Part03
21:07.28ImCoKeMaN<PROTECTED>
21:07.30ImCoKeMaN|          10.00M (0xa00000) PART00
21:07.32ImCoKeMaNdamnit sorry bad buffer
21:07.44ImCoKeMaNftp://ppcgeeks:ezupload@ftp.ppcgeeks.com/Titan/Users/ImCoKeMaN/SPL.nb
21:08.22cr2_cmonex: do you know how to load SPL in ida _properly_ ?
21:08.39ImCoKeMaNrebase this one at 8c000000
21:08.41cmonexi wont answer basic questions ...
21:08.46cr2_LOL
21:08.47cmonex:)
21:08.56ltxdaso basically there are no tools available to repartition the DOC unless u use linux?
21:08.59ltxdaor did i miss something?
21:09.01ltxda<PROTECTED>
21:09.11ImCoKeMaNyou missed a lot, but not on that topic =)
21:09.21cr2_cmonex: i mean that both mappings are visible at the same time.
21:09.27ltxdaImCoKeMaN, damn you! LOL
21:09.36ltxdai'm learning, give me a break.
21:10.13ImCoKeMaNso am I just used my first custom compiled haret today
21:10.24ltxdanice!
21:10.33ltxdaur a "little" ahead of me.  LOL
21:11.04ltxdaImCoKeMaN, private use or releasing to public?
21:11.04ImCoKeMaNi still feel like a n00b asking cr2, kevin and olipro questions though
21:11.08cmonexcr2_: what mappings do you mean ?
21:11.16cmonex0x8cxxxxx and ?
21:11.17ltxdaImCoKeMaN, give ur self time bro.
21:11.18ImCoKeMaNthis is just for testing making a spl laod to ram
21:11.36cmonexbtw, usually the simplest way is to dump it with dumprom and load the extracted nk.exe. took me months before realizing that... :P
21:11.39ltxdai'm going to have to get my Hermes back from my mom to test on.  i won't brick my athena...hell no.
21:11.56cmonexthats only for CE bootloaders of course
21:12.01cmonexwhich have normal romheader etc
21:12.43cr2_cmonex: the plain physical mapping, i.e. no 0x8c* & such.
21:12.53cr2_nk.exe != bootloader ;)
21:13.16cmonexwhat would i need the physical mapping for when specifying the base ?
21:13.27cmonexnk.exe is bootloader in CE bootloaders with romheader
21:14.09cr2_IPL runs with physical mapping. and a big chunk of SPL too.
21:14.24cr2_so for SPL i need both.
21:14.38ltxdabrb on mbl
21:14.41cr2_never was able to do it directly.
21:14.41cmonexthat part usually doesnt really use hard coded addresses
21:14.47cmonexso the base doesnt matter for it
21:15.07cr2_depends on the SPL.
21:15.11cmonexof course i didnt see this device yet, but thats the case for most devices
21:15.23ImCoKeMaNthis one is def unique =)
21:15.47cmonex"big chunk" well most ive seen turn the MMU on quite early
21:17.53ImCoKeMaNwould my ida db help at all to speed up the repeated c pressing?
21:18.00cmonexwhats at 0x10000000 ?
21:18.04cmonexwith this device
21:18.18cr2_nk.exe
21:18.19cmonexImCoKeMaN: if loaded as nk.exe ida will happily try and disassemble most of it :)
21:18.29*** join/#htc-linux ellisway (n=ellis@homealone.good1.com)
21:18.44ImCoKeMaNhmmm i'll have to try that
21:18.46cmonexit disassembled this one right away just fine
21:18.55cmonexit likes to have the PE header, you know :)
21:19.08cmonexcr2_: i.e. kernel? :)
21:19.11cmonexok
21:19.31cr2_yes
21:19.52*** join/#htc-linux ltxdaMBL (n=ltxdaMBL@mc908fa48.tmodns.net)
21:19.58ltxdaMBLhowdie
21:20.00cmonexthe other direction turns MMU on right away:P
21:20.33cmonexthere must be some IPL somewhere else...
21:21.58ImCoKeMaNhmm i think i'm missing something in the IDA loading cmonex
21:22.02cmonexyes?
21:22.13cmonexi used: dumprom -5 -d dumpfolder spl.nb
21:23.25ImCoKeMaNi dont see how to get it to load as nk.exe to auto disassemble
21:23.48cmonexi ran this command on spl.nb
21:23.55cmonexthen picked up the resulting nk.exe
21:24.17cmonexwhat happened, any error?
21:24.46cmonex...anyway there has to be some IPL.
21:24.49ImCoKeMaNi haven't made the nk.exe
21:25.04cmonexthis SPL doesnt look like it starts up with an IPL code
21:25.18cmonexget dumprom.exe from itsme site, and use: dumprom -5 -d dumpfolder spl.nb
21:26.37cmonex(i always found it funny it gets called nk.exe :) )
21:28.35ltxdaMBLyea funny
21:28.49cmonex:)
21:28.54ltxdaMBL;-p
21:28.59cmonexi guess thats just how it gets built whehn the NB is made
21:29.19cmonexltxda: i sent you some msg's in private, should i resend to ltxdaMBL?
21:29.27ltxdaMBLno
21:29.36cmonexoh ok
21:29.43ltxdaMBLill chk when i get hm
21:29.47cmonexsoon?
21:29.52ltxdaMBLdriving atm
21:29.59ltxdaMBL30min
21:30.03cmonexok
21:30.05cmonex:)
21:30.05ltxdaMBLapprox
21:30.18ltxdaMBL:-)
21:30.33ltxdaMBLlovd my athena
21:30.36ltxdaMBLe
21:30.41cmonexgrr lucky :P
21:30.48ltxdaMBLlol
21:30.50cmonex:)
21:31.14ltxdaMBLif i wreck ill save athenafirst
21:31.15ltxdaMBLlol
21:31.29ImCoKeMaNwow kickass trick for IDA cmonex, thanks
21:32.00ltxdaMBLyes young jedi it is kickass indeed
21:32.02ltxdaMBLlol
21:32.44cmonexnp :)
21:32.50ltxdaMBLmay the schwartz b with u
21:32.59ltxdaMBLlol
21:34.48cr2_ImCoKeMaN: do these names say you anything ? http://pastebin.ca/705171
21:34.51ltxdaMBLum, that was funny
21:35.08cr2_these are some "partitions"
21:35.51cr2_<PROTECTED>
21:35.51cr2_<PROTECTED>
21:36.54ImCoKeMaNthe splash ones are decoded with dutty tool as is the extrom
21:37.05cmonexyeah
21:37.10cmonexsplahs is the boot screen
21:37.15ImCoKeMaNyup
21:37.20cmonexWLAN is.. i assume wlan data stored in there
21:37.30cr2_yes.
21:37.34cmonexi dunno the rest:P
21:37.42ImCoKeMaNrf_nv probly phone radio?
21:37.45cr2_QCSBL is qualcomm bootloader ?
21:38.01cmonexwhere did you get this list?
21:38.07cr2_SBL is secondary bootloader.
21:38.21cr2_cmonex: aarm_partition_table
21:38.25cr2_see above
21:38.41cr2_NV is nonvolatile
21:38.50cr2_what is MFG ? sounds familiar.
21:39.04ImCoKeMaNmanufacturer?
21:39.20cr2_G?
21:39.29cr2_APPS and EXTROM is ok.
21:39.33ImCoKeMaNmanufagchurer?
21:39.42cr2_they are at the end of your list too.
21:41.06ImCoKeMaN.data:8C2A0EDC aHtcimageiplOk  DCB "HTCIMAGEIPL - OK",0 ; DATA XREF: .text:off_8C02410C
21:41.12ImCoKeMaNIPL!
21:43.23cmonexyea there must be one somewhere
21:43.52cmonexit could even be that it was at 0x0, who knows :(
21:44.06cmonexi saw corrupt IPL in htc universal too
21:44.09cmonexat 0
21:44.22cmonex(but thats xscale anyway... :P )
21:44.36ImCoKeMaNand it overwrites itself?
21:44.50cmonexnot fully on uni
21:44.58cmonexi was still able to get it out of there :)
21:45.30cmonexovwerwriting itself wouldnt work if the actually running code overwrites itself
21:46.34cr2_cmonex: pxa resets at 0x0. this one has 32MB RAM at 0x0 -> http://wiki.xda-developers.com/index.php?pagename=TitanMemoryMap
21:46.56cmonexthats what i said by
21:46.59cmonex[23:44:32] <cmonex> (but thats xscale anyway... :P )
21:47.12cmonexso you fully dumped memory map and nothing nowhere ?
21:47.38cr2_i'm documenting the memory map. at least trying.
21:48.04cmonexfun eh ? :P
21:48.20cr2_sigh
21:48.29cmonex:O
21:49.21cr2_i'll better move to athena :)
21:49.32cmonex:P :P
21:49.39cmonexgood idea :))
21:49.45cr2_but the ATI dll is not much better. maybe even worse.
21:49.47Shadowmiteno
21:49.59Shadowmiteyou use suitcases TO move, you can't move to a suitcase...
21:50.26cmonex??
21:50.33cr2_http://wiki.xda-developers.com/index.php?pagename=ATIHW
21:50.43Shadowmite(I'm calling the athena oversized baggage)
21:50.44cr2_hermes has the same chip.
21:51.16cr2_Shadowmite: you can connect your 700Gig raid to athena :)
21:51.37Shadowmitelol, I can NFS mount my 700gig raid on my iphone
21:51.38Shadowmite:P
21:51.43cr2_if wince would not have beed such piece of shit.
21:51.52cmonexwince is ok.. :P
21:52.01cmonex(sorry i see what channel i'm on now..)
21:52.03cmonex:)
21:52.07cr2_lol
21:52.19cr2_can you mount 700G disk on wince ?
21:52.36ltxdaMBLlol
21:54.19cmonexdidnt try
21:54.21cmonexdont have 700G
21:54.36cmonexall i know is, 100 works
21:55.08cmonex:)
21:56.39cr2_ok.
22:00.30Shadowmitecan you implement RSA in 2 lines of code with a keysize over 4096 in wince? (better question...)
22:00.32Shadowmitelol
22:01.11ltxdaMBLi can map to 2 terabyte raid array via wif on wince
22:01.13ltxdaMBLthere
22:01.15ltxdaMBLlol
22:01.36ltxdaMBLbbl8r
22:02.35cr2_you can run haret on wince. that says everything about its security.
22:02.38cmonexRSA: no idea.
22:02.54cmonexcr2_: security and wince is a non existant combination before CE6
22:03.16cmonexfor example, you can happily overwrite code that belongs to the kernel, i was happily using that for debugging sometimes :)
22:03.26cr2_ce6 is better ?
22:03.31cmonexyeah CE6 is totally different
22:04.00cmonexyou cant enter kernel mode so easily, etc, some api's are deprecated (setkmode stuff)
22:04.19cmonexthe virtual memory map is different too
22:04.29cr2_cmonex: lol. run ida on the titan's nk.exe
22:04.36cmonexyeah?
22:04.39cmonexwhich nk
22:04.42cmonexkernel or bootl?
22:05.17cr2_kernel
22:05.28cmonexok..i dont have it, maybe if you send it.. :)
22:05.33cmonexbut why should i run ida on it?
22:05.49cr2_it has setkmode
22:05.58cmonexit isn't CE6..
22:06.02cmonexjust CE 5.02
22:06.05Shadowmitehave you figured out why the titan resets on reboot if sd is in it yet?
22:06.11cmonexso why wouldnt it have setkmode :)
22:06.27cmonexi dont know why it is a common mistake to assume WM6 runs on CE6. it DOES NOT
22:07.25cr2_ok, i see.
22:08.12ImCoKeMaNi know why it's a common mistake...
22:08.18cmonexwhy?
22:08.26ImCoKeMaN6
22:08.41cmonexwell, yeah MS is silly to have named it WM6...
22:08.46cmonexshould be WM5SE...
22:08.47ImCoKeMaNhehe
22:08.49cmonex:)
22:17.28ltxda2back for a few
22:18.02cmonex:)
22:18.04cmonexhey
22:18.51ltxdahi
22:18.51ltxda:-)
22:19.09ltxdadoes anyone have access to Platform Builder?
22:19.42cmonexi have 4.2 installed
22:19.49cmonexand have 4.1, 5.0, 6.0 on dvd
22:19.55ltxdacan i get it?
22:19.56cmonexplanning to install 5.0 :)
22:20.07cmonexwell they are quite big. but i can give you download links
22:20.08ltxdacan you upload an ISO of the DVD for me or too large for u?
22:20.13ltxdalinks for sure please.
22:20.16cmonexi have 40kbyte/s upload... :S
22:20.18cmonexok
22:20.18ltxdai appreciate this
22:20.21cmonexwhich version, 5.0?
22:20.22ltxdaok
22:20.22cmonex:)
22:20.27ltxdaall three versions
22:20.35ltxdamost popular first and most used.
22:20.36cmonexwell 5.0 is for CE 5
22:20.37ltxdaplease
22:20.41cmonexthat would be most relevant for you
22:20.43ltxdaand will also work for 6 right?
22:20.46cmonexCE6 is too different (6.0)
22:20.49ltxdaas i read
22:20.53cmonexWM5 = WM6 = PB5
22:20.55ltxdaCE6 is for 6 but won't work for 5
22:20.56cmonex5.0
22:21.02ltxdaso 5 would be best yes
22:21.07cmonexok.. 1 sec :)
22:21.10ltxdasince 5 works for 5 & 6
22:21.17ltxdau see i'm learning and reading.  :-)
22:21.19cmonexwm6 you mean?
22:21.21cmonex:P
22:21.25ltxdayes
22:21.28cmonex:D
22:21.29cmonexok
22:21.38cr2_cmonex: can you pack the .h files ?
22:21.40cmonexhttp://hpcmonex.net/PB5_ce5serial_trial.txt
22:21.47cmonexmmm, well, there are lots of .h files.. :)
22:21.58cmonexand some .c too ;)
22:22.13ltxdacr2_, i can put on my ftp once i have it for you.
22:22.19cr2_i mean nkarm.h and such.
22:22.19ltxdajust lemme know bro.
22:22.25ltxdai can extract all files u want.
22:22.26cmonexyou mean the kernel stuff?
22:22.30cmonexbtw, i dont have it installed now
22:22.33cmonexonly 4.2 right now
22:23.01cr2_yes, the MODULE structure and similar.
22:23.18cmonexis 4.2 ok for you?
22:23.18cr2_btw, is it possible to find platform builder 2.11 somewhere ?
22:23.25cmonex2.11 ... .i wish! :D :D
22:23.29cmonexbut why do you want 2.11?
22:23.32cr2_i'd like to see the same struct too :)
22:23.32ltxdashould i look for 2.11?
22:23.35cmonexisnt that like......obsolete? :P
22:23.37cr2_i have jornada820
22:23.41cmonexwoow! you do?!
22:23.47cmonexi have 720/728 ;)
22:23.50cmonexsaw a 820 once
22:23.59cr2_i like obsolete technically superiour things :)
22:24.00cmonexi knew someone who used to have PB 2.11 (boughtr it with his money, wow)
22:24.02cmonexbut he lost it.....
22:24.08cmonexso no chance ..... :(
22:24.11cmonexcr2_: right ;)
22:24.16cmonexyou know hpcfactor.com by any chance ?
22:24.25cr2_yes.
22:24.29cmonex:) heh
22:24.48cr2_cmonex: http://jornada820.sourceforge.net/
22:25.36cmonexis it your page?
22:25.41cr2_more or less
22:26.06cr2_btw, it supported 1024x768 beamer VGA output
22:26.11cr2_athena can't that ;-)
22:26.23cmonexoh
22:26.33cmonexheh
22:26.48cmonexhmm, the jornada 728 can too, with a cf vga card.. :P
22:27.02cr2_it had USB host.
22:27.15cr2_720/8 was not using it.
22:27.24cr2_on sa1101
22:27.57cr2_a nice dotcom era device.
22:28.24cr2_i have aero8000 too.
22:28.48cmonexhehe
22:28.55cmonexi once had that aero here for a few weeks
22:28.58cmonexto play with it
22:29.09cmonexboth wifi and BT worked in it at first try.. :)
22:29.18cmonexso that SH4 is not THAT bad
22:29.30cr2_i've bought a 64MB EDO SODIMM for it.
22:29.35cmonexyea,
22:29.41cmonexthat was the only device with standard sodimm
22:29.43cr2_SH4 has hw fp
22:29.51cmonexnice
22:29.53cr2_yes.
22:29.56cmonex:)
22:30.04cmonexi had extended battery for it too :P
22:30.16cr2_battery was too small
22:30.25cr2_but the 800x600 LCD is still unbeatable
22:30.39cr2_it was nice and bright.
22:30.58cr2_and there was a linux port for it too :)
22:31.19cr2_but the guy did not manage the PCMCIA controller
22:31.27cr2_so it bitrotted.
22:32.06cr2_unfortunately i can't port one nice wince program to it.
22:32.21ltxdaquick question guys...Athena BSP and WM6 source...where would one find such a thing?
22:32.23cr2_because 2.11 did not use aygshell
22:32.46cr2_athena bsp . hehe.
22:32.51ltxdalol
22:32.52ltxdawhat?
22:32.57cmonexwell, the ext battery was fine
22:33.03cmonexas for aygshell
22:33.13ltxdacr2_, what bro?
22:33.14cmonexthere is one that is um.. quite dummy.. but works to some extent ;)
22:33.17cmonexon ce 2.11...
22:33.19cmonexsomeone wrote one
22:33.41cmonexathena BSP: you wish..eh.. HTC has it.
22:33.54cr2_ltxda: it must be very fine warez ;-)
22:33.54cmonexWM6 source... at microsoft :)
22:34.02cmonexvery very fine :)
22:34.21cmonexcr2_: what is the wince program ?
22:34.22ltxdaok i'll ask someone for it then.
22:34.24cr2_i've heard that there is a universal bsp . in the wild 8)
22:34.36cmonexuniveresal? htc universal?
22:34.44ltxdagood question...was just going to ask.
22:34.47ltxdalol
22:35.04cr2_cmonex: yes. htc universal
22:35.07cr2_cmonex: http://roadmap.cvs.sourceforge.net/roadmap/roadmap_editor
22:35.26cr2_i've worked around the aygshell by using the standard menu
22:35.47cr2_but wince2.11 does not support AddMenuItem or something like that.
22:35.54cr2_so i've given up . for now.
22:37.05cr2_cmonex: this is a better link http://www.freemap.co.il/roadmap
22:37.51cmonexmmm
22:37.54cr2_i have even compiled it with arm-wince-g++
22:38.00cmonexso where is the BSP!!:)
22:38.06cmonexi have htc uni :)
22:38.16cr2_but not for 2.11
22:38.27cr2_cmonex: in the good hands. on xda-dev :)
22:39.18cmonexwhose hands? :)
22:43.46cr2_i don#t have it. and i prefer not to have it :)
22:45.06cmonexwhy?
22:45.16cmonexwhy wouldnt it be good to have it?
22:45.39BabelOcr2_: vi command to replace all ? it is not s/false/true/g; ?
22:49.31cr2_cmonex: i prefer clean RE, and not the leaked bsps.
22:50.09cr2_BabelO: qtopia4.3.0 for ba image ?
22:50.21cmonexcr2_: more challenge?
22:50.24BabelOcr2_: ok, but without modem ;)
22:51.02cr2_cmonex: you learn much more this was. and afaik there are no other bsps.
22:51.12cr2_s/was/way/
22:51.18cmonexwith a bsp you could have fully working linux on the uni finally.
22:51.25cmonexyou do learn more , of course....
22:51.28cmonex...and much more slowly
22:52.00cr2_i have 99% of the needed data on the universal anyway.
22:52.06cmonexphone works well ?
22:52.26cmonexhmm, if the goal is a fully working linux, it is better to have that BSP, if the goal is learning and having fun while developing, then maybe not...
22:53.06cr2_it works, but we need to write a qualcomm modem driver for qtopia. bsp is of no use here.
22:53.22cmonexi thought it would reveal how the modem / phone driver works.
22:53.28cmonexshould be part of the bsp
22:53.47cmonexor you mean
22:53.58cmonexyou guys are just lazy to write it properly... ? :P (but have all the info needed)
22:54.09cr2_http://handhelds.org/moin/moin.cgi/HTC_GSM
22:54.22cr2_on the universal ? yes, that's true ...
22:54.39cmonexheh, sad
22:54.55cmonexit would be fun to play with it but without a comfortably working phone...umm
22:55.45cr2_we will have it soon.
22:56.04cr2_thanks to trolls releasing the full phone source.
22:56.12cmonexisn't it good to have it?
22:56.18cmonexyou can decide not to use it
22:56.25cmonexbut if you need it it would be available and that's good
22:57.16cr2_we need to write some linux c++ code. that's all.
22:57.31cmonexok but why did you use the word trolls
22:57.34cr2_and to make this code cooperate with the kernel.
22:58.03cr2_http://qtopia.net http://troll.no
22:58.13cmonexok
23:01.33cr2_BabelO: can you upload it somewhere ?
23:01.40cr2_oh it's so late...
23:01.43cr2_good night
23:01.55BabelOcr2_: yes i post link once iupload finish
23:26.34BabelOcr2_: get it from here http://linuxbox2.free.fr/blueangel/qtopia/
23:26.36BabelOgoodnight
23:40.23*** part/#htc-linux gilgamesh (n=zode@216.235.158.34)

Generated by irclog2html.pl Modified by Tim Riker to work with infobot.