| 01:04.21 | *** join/#htc-linux Funnyface (n=user734@245.89-11-146.nextgentel.com) |
| 01:32.17 | *** part/#htc-linux Funnyface (n=user734@245.89-11-146.nextgentel.com) |
| 01:48.35 | flyback | http://www.facebook.com/photo.php?pid=30354253&id=1419593893 <--- omg the horror, oh wait that's me |
| 01:49.12 | flyback | nm url won't work |
| 02:01.39 | *** join/#htc-linux x29a_ (n=x29a@f053225170.adsl.alicedsl.de) |
| 02:29.46 | *** join/#htc-linux swc|666 (n=infidel2@unaffiliated/swc666/x-4934821) |
| 02:31.13 | *** join/#htc-linux BHSPitMonkey (n=stephen@unaffiliated/bhspitmonkey) |
| 02:49.47 | *** join/#htc-linux kam187 (n=kam187@87.194.204.58) |
| 02:49.55 | kam187 | hey guys |
| 02:50.53 | kam187 | i'm trying to figure out the memory map for the MSM7200A |
| 02:56.41 | kam187 | also what memory is ADSP, MDP, GPU, CAMERA etc allocated from? changing its sizes in the kernel doesnt seem to affect memory available to the system |
| 03:10.51 | *** join/#htc-linux Tulga (n=chatzill@203.91.113.10) |
| 03:11.28 | *** join/#htc-linux nate2 (n=nate@cpe-76-168-200-146.socal.res.rr.com) |
| 03:11.51 | Tulga | someone knows s3c2442 processor? |
| 03:25.28 | *** join/#htc-linux g55 (n=g55@rgnb-5d8747f4.pool.mediaWays.net) |
| 03:35.59 | tmzt | kam187: wiki.htc-linux.org |
| 03:36.05 | *** join/#htc-linux bagpuss_thecat (n=bagpuss_@2001:41c8:1:5253:0:0:0:2) |
| 03:36.05 | *** join/#htc-linux alphaone|gone (n=alphaone@2001:638:602:af01:0:0:0:1) |
| 03:36.05 | *** join/#htc-linux jos (i=Jos@2a02:348:33:584a:0:0:0:1) [NETSPLIT VICTIM] |
| 03:36.40 | tmzt | toa: ifconfig wlan1 up |
| 03:37.57 | tmzt | toi: what is diam500 bank layout? |
| 03:56.12 | *** join/#htc-linux Tulga (n=chatzill@203.91.113.10) |
| 04:02.00 | Tulga | tmzt: are you there? |
| 04:41.16 | *** join/#htc-linux thedicemaster2 (n=thedicem@j89051.upc-j.chello.nl) |
| 04:53.51 | *** join/#htc-linux docc_ (n=docc@static.88-198-83-83.clients.your-server.de) |
| 04:53.51 | *** join/#htc-linux tuples_ (n=Tuple@tuple.xen.prgmr.com) |
| 04:53.54 | *** join/#htc-linux pigeon_ (n=pigeon@eth5284.nsw.adsl.internode.on.net) |
| 05:02.02 | *** join/#htc-linux goxboxlive (n=jrs@mail2.hjellnesconsult.no) |
| 05:12.06 | *** join/#htc-linux droid0011 (n=g1@p4FDCF393.dip.t-dialin.net) |
| 05:29.44 | F22 | cr2: MSVCR90.dll is part of Microsoft's Visual C++ 2008 redistributable runtime library. It has dependencies so just dropping in the file by itself isn't enough. You can download the package directly from Microsoft. http://www.microsoft.com/downloadS/details.aspx?familyid=A5C84275-3B97-4AB7-A40D-3802B2AF5FC2&displaylang=en |
| 05:36.09 | kam187 | tmzt: i dont see any memory maps there |
| 05:36.22 | kam187 | Can i assume the lower 32mb of SMI is the baseband? |
| 05:56.16 | *** join/#htc-linux bagpuss_thecat (n=bagpuss_@2001:41c8:1:5253:0:0:0:2) |
| 05:56.17 | *** join/#htc-linux alphaone|gone (n=alphaone@2001:638:602:af01:0:0:0:1) |
| 05:56.17 | *** join/#htc-linux jos (i=Jos@2a02:348:33:584a:0:0:0:1) [NETSPLIT VICTIM] |
| 06:28.38 | kam187 | what is 'stacked memory' ? |
| 06:33.28 | kam187 | do they mean PoP? i.e physically stacked? |
| 06:38.46 | *** join/#htc-linux leobaillard (n=leobaill@leobaillard.org) [NETSPLIT VICTIM] |
| 06:39.05 | *** join/#htc-linux alphaone|gone (n=alphaone@2001:638:602:af01:0:0:0:1) |
| 06:39.58 | *** join/#htc-linux dilinger (n=dilinger@LUNGE.MIT.EDU) |
| 06:40.28 | *** join/#htc-linux tmzt (n=tmzt@adsl-99-51-211-69.dsl.akrnoh.sbcglobal.net) |
| 06:42.54 | *** join/#htc-linux thedicemaster (n=thedicem@j89051.upc-j.chello.nl) [NETSPLIT VICTIM] |
| 06:43.00 | *** join/#htc-linux Foxdie (n=foxdie@mendoza.bhm.mmnet.co.uk) [NETSPLIT VICTIM] |
| 06:45.30 | *** join/#htc-linux BHSPitLappy (n=BHSPitLa@unaffiliated/bhspitmonkey) |
| 06:46.31 | *** join/#htc-linux Weiss (n=taw27@zazu.bitwiz.org.uk) |
| 06:46.32 | *** join/#htc-linux bagpuss_thecat (n=bagpuss_@2001:41c8:1:5253:0:0:0:2) |
| 06:47.20 | *** join/#htc-linux Jos (i=Jos@Lithium.Jossie90.info) [NETSPLIT VICTIM] |
| 06:54.44 | *** join/#htc-linux kiozen (n=kiozen@rgnb-5d87d838.pool.mediaWays.net) |
| 06:59.03 | *** join/#htc-linux zack84a2 (n=zack84a@74.7.181.194) |
| 07:17.52 | *** join/#htc-linux Ekips (i=spike@d51A460C9.access.telenet.be) |
| 07:18.14 | *** join/#htc-linux nate2 (n=nate@cpe-76-168-200-146.socal.res.rr.com) |
| 07:26.23 | *** join/#htc-linux stamppot (i=d4cb1b12@gateway/web/freenode/x-rpblucivsbgkqpql) |
| 07:41.05 | *** join/#htc-linux Tulga (n=chatzill@203.91.113.10) |
| 07:44.16 | *** join/#htc-linux BabelO (n=fcr@lun34-2-82-238-28-28.fbx.proxad.net) |
| 07:55.16 | *** join/#htc-linux itchy8me (n=itchy8me@ip80-116-211-87.adsl2.static.versatel.nl) |
| 07:59.07 | kam187 | hmm confused |
| 08:23.13 | *** join/#htc-linux timebomb (n=tb@e177136209.adsl.alicedsl.de) |
| 08:25.21 | Epsylon3 | =) |
| 08:28.46 | kam187 | what gets loaded in the lower 7mb of EBI/linux memory, i can see the kernel accounts for about 5.6 mb, but what about the rest |
| 08:34.53 | *** join/#htc-linux Squarc (n=Squarc@82-217-32-29.cable.quicknet.nl) |
| 08:39.01 | *** join/#htc-linux MethoS- (n=clemens@134.102.106.250) |
| 08:44.28 | *** join/#htc-linux luc_ (i=c3441fe7@gateway/web/freenode/x-gkvcwaxtijoowcjf) |
| 08:46.11 | *** join/#htc-linux itchy8me_ (i=57d37450@gateway/web/freenode/x-hlxpsxdfslxxivcj) |
| 08:48.16 | Epsylon3 | sorry, i need to go... |
| 08:50.11 | *** join/#htc-linux kiozen (n=oeichler@p5492142F.dip0.t-ipconnect.de) |
| 08:54.07 | *** join/#htc-linux itchy8me (n=itchy8me@ip80-116-211-87.adsl2.static.versatel.nl) |
| 09:07.08 | *** join/#htc-linux FR^2 (i=frr@frquadrat.de) |
| 09:11.19 | *** join/#htc-linux kvaster (n=kvaster@93.84.112.80) |
| 09:24.41 | *** join/#htc-linux tjs_bsd (n=tjs@mail.CDPA.cc) |
| 09:27.22 | *** join/#htc-linux tjs_bsd (n=tjs@mail.CDPA.cc) |
| 09:34.13 | *** join/#htc-linux AstainHellbring (n=AstainHe@unaffiliated/astainhellbring) |
| 09:43.17 | phh | kam187: "stacked memory' is SMI |
| 09:43.41 | phh | SMI is just a fast memory, you can put whatever you want in it, but AMSS takes 21MB in it |
| 09:44.02 | phh | don't know for the lower 7MB |
| 09:44.37 | phh | (amss=radio=arm9) |
| 09:47.32 | kam187 | ahhh |
| 09:47.51 | kam187 | i think the lower 7 is just the kernel i guess |
| 09:48.21 | kam187 | so on this phone i see.. |
| 09:48.51 | kam187 | SMI64 (Internal RAM, 64Mb) |
| 09:48.51 | kam187 | 00000000->02000000 FREE? (32 Mb) |
| 09:48.51 | kam187 | 02000000->02800000 MDP ( 8 Mb) |
| 09:48.51 | kam187 | 02800000->03500000 ADSP (13 Mb) |
| 09:48.51 | kam187 | 03500000->04000000 CAMERA (11 Mb) |
| 09:48.57 | kam187 | what's in the lower 32mb of SMI64? |
| 09:49.29 | phh | which board ? |
| 09:49.40 | kam187 | its a samsung galaxy android phone, MSM7200 |
| 09:49.43 | phh | (i like having source code :D) |
| 09:49.46 | *** join/#htc-linux Squarc (n=Squarc@82-217-32-29.cable.quicknet.nl) |
| 09:49.51 | kam187 | so i'm looking at the source code |
| 09:49.56 | phh | kam187: samsung galaxy = I7500 ? |
| 09:49.59 | kam187 | yeah |
| 09:50.13 | phh | ok i already have its source code :D |
| 09:50.20 | kam187 | hehe |
| 09:50.33 | kam187 | i see that all MSM chips leave 32mb of SMI free |
| 09:50.54 | kam187 | if its a SMI32 chip, all the other stuff (camera etc) gets allocated in EBI |
| 09:50.55 | phh | "we" use only 21MB |
| 09:51.03 | phh | for raph/diam |
| 09:51.20 | phh | for AMSS |
| 09:51.31 | kam187 | ok so, is there any way to check how much is used? is it = AMSS file size? |
| 09:51.44 | phh | your amss file size is 32MB actually |
| 09:52.04 | phh | our* |
| 09:52.27 | phh | don't know how to now that |
| 09:52.28 | kam187 | ok, but if i check the samsung one, and check where the baseband ends i can calculate how much is free? or not? |
| 09:53.17 | kam187 | ok so baseband uses upto 32mb then :) we dont know how much! |
| 09:53.22 | kam187 | next question :) |
| 09:53.34 | phh | you can try to reduce it a little bit if you need to |
| 09:53.44 | kam187 | if android only see's 109mb, what happened to the 128-109 = 19mb ? |
| 09:53.54 | phh | kam187: MDP/ADSP/CAMERA |
| 09:54.11 | kam187 | but thats in SMI (upper 32mb) |
| 09:54.17 | phh | oh. |
| 09:54.29 | phh | it's supposed to be in source code anyway |
| 09:54.37 | kam187 | yeah i see it |
| 09:54.53 | kam187 | but the max available is always only 109mb |
| 09:55.24 | phh | where is the memory layout defined in the source code ? |
| 09:55.34 | kam187 | board-init.c |
| 09:55.35 | phh | oh board-comet.c |
| 09:55.38 | phh | hu ? |
| 09:55.51 | phh | ok both. |
| 09:55.58 | phh | is "comet" the name of your board ? |
| 09:56.03 | kam187 | samsung uses board-init.c |
| 09:56.08 | phh | ok comet is snapdragon |
| 09:56.11 | kam187 | samsung's source is just stupid! |
| 09:56.19 | kam187 | they 'hacked' what was there :p |
| 09:56.38 | phh | i don't know where they got snapdragon's source code ... |
| 09:56.42 | kam187 | EBI (External RAM) |
| 09:56.42 | kam187 | 10000000->10028000 ?? |
| 09:56.42 | kam187 | 10028000->1040ffff : Kernel text |
| 09:56.42 | kam187 | 10410000->105611fb : Kernel data |
| 09:56.42 | kam187 | 105611fb->10700000 ?? |
| 09:56.43 | kam187 | 10700000->10F00000 GPU1 (8 Mb) |
| 09:56.45 | kam187 | 10F00000->11000000 FB (1 Mb) |
| 09:56.47 | kam187 | 11000000->16D00000 FREE |
| 09:56.49 | kam187 | and |
| 09:56.52 | kam187 | SMI64 (Internal RAM, 64Mb) |
| 09:56.53 | kam187 | 00000000->02000000 FREE? (32 Mb) |
| 09:56.55 | kam187 | 02000000->02800000 MDP ( 8 Mb) |
| 09:56.57 | kam187 | 02800000->03500000 ADSP (13 Mb) |
| 09:56.59 | kam187 | 03500000->04000000 CAMERA (11 Mb) |
| 09:57.12 | kam187 | so i can move GPU1 and FB into SMI64 (the upper 32mb) by reducing the other stuff |
| 09:57.32 | phh | i already tried moving GPU1 to SMI, it just won't work |
| 09:57.40 | phh | don't know why |
| 09:57.51 | phh | but you can move FB yes |
| 09:57.54 | *** join/#htc-linux JoshuaL (n=JoshuaL@unaffiliated/joshual) |
| 09:57.59 | kam187 | it works fine here :) |
| 09:58.05 | phh | btw GPU0 is in SMI |
| 09:58.11 | kam187 | yeah |
| 09:58.14 | kam187 | i saw that |
| 09:58.19 | kam187 | that's stacked |
| 09:58.28 | kam187 | CONFIG_MSM_STACKED_MEMORY: ¦ |
| 09:58.30 | kam187 | This option is used to indicate the presence of on-die stacked memory. When present this memory bank is used for a high speed shared memory interface. When not present regular RAM is used. |
| 09:59.50 | phh | smi base is 0x100000 ?!? |
| 10:00.05 | kam187 | its a different bank |
| 10:01.10 | phh | anyway some EBI is taken too by AMSS |
| 10:01.22 | kam187 | ahhh |
| 10:01.26 | kam187 | that makes sense |
| 10:01.40 | phh | but not that much |
| 10:02.00 | kam187 | well there's 19mb missing from EBI |
| 10:02.10 | phh | we have 12MB |
| 10:02.34 | kam187 | so android see's 116mb? |
| 10:02.51 | phh | no, GPU1 is in 8MB in the end of ebi :p |
| 10:03.18 | kam187 | ok so u see 116 - 8 = 108mb? |
| 10:03.23 | kam187 | with GPU1 in EBI |
| 10:03.32 | phh | yes |
| 10:03.38 | kam187 | but android would still see 116mb at boot i guess |
| 10:03.44 | phh | no |
| 10:04.05 | kam187 | on the samsung it see's 109mb, then allocates GPU1 and FB from that |
| 10:04.10 | kam187 | dmesg | grep allocate |
| 10:04.15 | phh | not here |
| 10:04.50 | phh | the memory bank defined (so where the kernel takes memory) is : |
| 10:04.52 | phh | #define MSM_LINUX_BASE MSM_EBI_BASE |
| 10:04.52 | phh | #define MSM_LINUX_SIZE 0x6b00000 |
| 10:05.04 | phh | which is 107MB |
| 10:05.14 | kam187 | ahh |
| 10:05.30 | phh | and GPU1 is taken after these 107MB |
| 10:05.38 | kam187 | hmm interesting |
| 10:05.47 | kam187 | on the samsung its not :-/ |
| 10:06.21 | phh | let me check i'm quite sure it is |
| 10:06.30 | phh | oh, they did it cleaner than we did |
| 10:10.14 | phh | kam187: what is the physical address of FB memory ? |
| 10:11.24 | phh | >= 0x16D00000 ? |
| 10:11.28 | phh | (in dmesg) |
| 10:12.29 | kam187 | 2 secs |
| 10:13.44 | kam187 | 10700000->10F00000 GPU1 (8 Mb) |
| 10:13.45 | kam187 | 10F00000->11000000 FB (1 Mb) |
| 10:13.52 | phh | ok so they are wrong |
| 10:13.54 | kam187 | so that's in the EBI range |
| 10:14.11 | kam187 | it doesn't use the base, it just asks to allocate a region, page aligned (for GPU1) |
| 10:14.55 | phh | line 1664, set addr to MSM_EBI_BASE+MSM_EBI_ADDR and line 1671 to MSM_EBI_BASE+MSM_EBI_ADDR+MSM_GPU1_SIZE |
| 10:15.45 | phh | it seems their memory layout hasn't been well checked |
| 10:16.05 | phh | i still can't be sure |
| 10:18.27 | kam187 | hmm i'll try that after the current test :) |
| 10:18.37 | kam187 | we're trying to put the FB in the lower 32mb |
| 10:18.42 | kam187 | our AMSS seems to be 19.73mb |
| 10:31.17 | kam187 | is AMSS compressed? |
| 10:43.36 | phh | don't know |
| 10:44.30 | kam187 | its not :) just checked it |
| 11:02.10 | kam187 | so the AMSS is actually just under 18mb |
| 11:02.17 | kam187 | and gets loaded at the top of EBI |
| 11:02.26 | kam187 | and also in the bottom 32mb of SMI64 |
| 11:02.38 | phh | it uses 18MB of EBI ? |
| 11:02.44 | kam187 | the last mb of the bottom 32mb (31 -> 32mb) is shared SRAM between ARM9/11 |
| 11:02.56 | kam187 | yeah i dunno wtf its loaded to both |
| 11:03.07 | kam187 | i can see the load address in the EBI file |
| 11:03.13 | kam187 | 0x16E00000 |
| 11:17.33 | kam187 | crazy wastage of 19mb in EBI and/or 32mb in SMI |
| 11:18.38 | kam187 | what a stupid architecture :-/ |
| 11:19.41 | phh | you'd prefer 42 memory chips ? |
| 11:19.59 | kam187 | no i mean wtf do u need AMSS in SMI and EBI |
| 11:20.16 | kam187 | there's no real difference between them, except one is on an external bus and one internal |
| 11:29.55 | *** join/#htc-linux dzo (n=dzo@mail.marginz.co.nz) |
| 11:39.03 | kam187 | hmm |
| 11:39.18 | kam187 | i think the SMI holds 'shared memory' and the top of EBI has the Baseband |
| 11:39.58 | phh | 18MB of shared memory is a lot |
| 11:40.04 | phh | err 32 ? |
| 11:40.34 | kam187 | i thought so too, but it makes more sense than having two basebands! |
| 11:40.36 | kam187 | i see this |
| 11:40.48 | kam187 | <PROTECTED> |
| 11:40.48 | kam187 | <PROTECTED> |
| 11:40.48 | kam187 | int msm_shared_ram_phys = 0x00100000; |
| 11:40.56 | kam187 | which is 1mb |
| 11:41.01 | kam187 | but then in the board-init i see this |
| 11:41.10 | kam187 | msm_shared_ram_phys = 0x01F00000; |
| 11:41.13 | kam187 | which is 31mb |
| 11:41.26 | kam187 | and the last mb is shared between the arm 9 and 11 aparently |
| 11:42.23 | kam187 | or maybe thats the address of the shared memory |
| 11:43.31 | *** join/#htc-linux balans (n=BRPOLDB@212-123-149-239.ip.telfort.nl) |
| 11:51.58 | *** join/#htc-linux dzo_ (n=dzo@mail.marginz.co.nz) |
| 12:05.33 | *** join/#htc-linux Spacy213 (n=casper@a80-101-159-228.adsl.xs4all.nl) |
| 12:13.59 | *** join/#htc-linux dzo_ (n=dzo@mail.marginz.co.nz) |
| 12:33.55 | *** join/#htc-linux marex (n=marex@vasut.kolej.mff.cuni.cz) |
| 12:37.25 | *** join/#htc-linux dzo (n=dzo@mail.marginz.co.nz) |
| 12:37.38 | *** join/#htc-linux yoyey (n=yoann@bro69-3-82-237-160-83.fbx.proxad.net) |
| 12:46.54 | *** part/#htc-linux yoyey (n=yoann@bro69-3-82-237-160-83.fbx.proxad.net) |
| 12:50.50 | *** join/#htc-linux swc|666 (n=infidel2@unaffiliated/swc666/x-4934821) |
| 12:58.30 | *** join/#htc-linux dzo_ (n=dzo@mail.marginz.co.nz) |
| 13:22.04 | *** join/#htc-linux dzo (n=dzo@mail.marginz.co.nz) |
| 13:24.24 | *** join/#htc-linux Zinbolic (n=zinbolic@84.238.80.215) |
| 13:39.42 | phh | mdrobnak: cellid is coded in current git |
| 13:39.53 | phh | in requestRegistrationState |
| 13:41.46 | *** join/#htc-linux kvaster (n=kvaster@93.84.112.80) |
| 13:43.59 | *** join/#htc-linux dzo (n=dzo@mail.marginz.co.nz) |
| 13:46.28 | kam187 | hmm very odd |
| 13:46.36 | phh | kam187: ? |
| 13:46.41 | kam187 | I can use parts of lower SMI, but not other parts |
| 13:46.46 | kam187 | it seems totally random |
| 13:46.52 | phh | hehe |
| 13:46.58 | phh | raph have same problem for EBI2 |
| 13:47.10 | kam187 | there is only one EB1 tho |
| 13:47.20 | kam187 | *EBI |
| 13:48.03 | phh | noone actually tried using EBI2 for diam anyway |
| 13:48.06 | phh | (ok i tried just once |
| 13:48.06 | phh | ) |
| 13:53.19 | *** join/#htc-linux xixx (n=xixx@cpmsq.epam.com) |
| 14:03.45 | *** join/#htc-linux leobaillard2 (n=leobaill@leobaillard.org) |
| 14:25.53 | *** join/#htc-linux dzo (n=dzo@mail.marginz.co.nz) |
| 14:28.01 | *** join/#htc-linux sdt555 (n=titus@147.145.40.44) |
| 14:29.14 | *** join/#htc-linux kvaster (n=kvaster@93.84.112.80) |
| 14:44.37 | *** part/#htc-linux sdt555 (n=titus@147.145.40.44) |
| 14:48.01 | *** join/#htc-linux x29a (n=x29a@unaffiliated/x29a) |
| 14:54.33 | *** join/#htc-linux kvaster (n=kvaster@93.84.112.80) |
| 15:01.49 | *** join/#htc-linux dzo_ (n=dzo@mail.marginz.co.nz) |
| 15:02.52 | *** join/#htc-linux kvaster (n=kvaster@93.84.112.80) |
| 15:15.08 | kam187 | got a datasheet :p |
| 15:15.08 | kam187 | not much help tho |
| 15:15.10 | kam187 | its all about hardware reg's et |
| 15:15.11 | kam187 | c |
| 15:15.22 | phh | which datasheet ? |
| 15:16.19 | kam187 | 7200 one |
| 15:16.42 | phh | it can be of some help actually |
| 15:16.51 | phh | it just need some time to understand and use it :p |
| 15:17.43 | kam187 | what i thought about the SMI, EBI etc seem correct |
| 15:17.46 | kam187 | but i dont get why there are two copies of everything |
| 15:18.35 | *** join/#htc-linux pH5 (n=ph5@e178208003.adsl.alicedsl.de) |
| 15:32.04 | *** join/#htc-linux dzo (n=dzo@mail.marginz.co.nz) |
| 15:32.10 | *** join/#htc-linux makikvues (n=a@makikvues.sh.cvut.cz) |
| 15:32.19 | makikvues | hi |
| 15:32.38 | makikvues | are there some arm linux developers :) ? |
| 15:32.55 | makikvues | or somebody who can help me with haret ? |
| 15:33.21 | phh | maybe just ask |
| 15:34.31 | makikvues | how can i get GPIO numbers for correct ipaq functions ( i mean eg. wifi, bluetooth ) ? |
| 15:34.58 | phh | it's written in the wiki ... |
| 15:35.09 | makikvues | yeah i know but |
| 15:35.53 | makikvues | it would be usefull if i had some example on concrete function/GPIO |
| 15:36.15 | makikvues | and i haven't found this on wiki |
| 15:36.25 | *** join/#htc-linux swc|666 (n=infidel2@unaffiliated/swc666/x-4934821) |
| 15:36.54 | phh | http://handhelds.org/moin/moin.cgi/HaRET_20Documentation |
| 15:36.56 | phh | isn't that enough ? |
| 15:37.04 | phh | the "polling gpios" part |
| 15:39.01 | makikvues | hmm ok i'll try harder... |
| 15:39.31 | phh | what would you need more than that ? |
| 15:40.49 | makikvues | ok it just need a better look at this maybe |
| 15:42.51 | makikvues | do you have some experience with porting linux to ipaq 614? |
| 15:43.13 | makikvues | i'm new to this |
| 15:44.10 | phh | your question is stupid ... either someone has already ported linux to it and you won't have anything to do, or noone did, and the answer is obvious ... |
| 15:45.13 | makikvues | do you want to argue or what? |
| 15:45.32 | makikvues | so do you have some porting experience? |
| 15:45.41 | phh | yes |
| 15:45.48 | phh | for linux to ipaq 614 no |
| 15:45.53 | makikvues | ok |
| 15:47.10 | kam187 | hmm is there any easy way to read from /dev/mem in android? |
| 15:47.12 | kam187 | any tools? |
| 15:47.29 | phh | kam187: /dev/mem driver is currently broken afaik anyway |
| 15:47.45 | kam187 | this is a real android phone tho |
| 15:47.59 | phh | but busybox has a devmem tool |
| 15:48.45 | kam187 | oh? |
| 15:49.06 | phh | but you'll have to build it |
| 15:49.18 | kam187 | got it :) |
| 15:49.28 | kam187 | cant i use dd |
| 15:49.47 | phh | mmm |
| 15:49.59 | phh | i'd say you can, but if there is such tools maybe you can't |
| 15:51.06 | kam187 | yup failed |
| 15:51.26 | phh | most likely because /dev/mem is broken, but i can't say for sure |
| 15:51.46 | kam187 | works ok |
| 15:51.54 | kam187 | but only 1 word at a time |
| 15:52.13 | phh | Oo |
| 15:53.15 | kam187 | # devmem |
| 15:53.15 | kam187 | devmem |
| 15:53.15 | kam187 | BusyBox v1.15.1 (2009-09-24 15:48:43 CEST) multi-call binary |
| 15:53.16 | kam187 | Usage: devmem ADDRESS [WIDTH [VALUE]] |
| 15:53.16 | kam187 | Read/write from physical address |
| 15:53.16 | kam187 | <PROTECTED> |
| 15:53.18 | kam187 | <PROTECTED> |
| 15:53.20 | kam187 | <PROTECTED> |
| 15:53.22 | kam187 | # devmem 0 |
| 15:53.24 | kam187 | devmem 0 |
| 15:53.26 | kam187 | 0xEA000006 |
| 15:53.28 | kam187 | # |
| 15:58.49 | *** join/#htc-linux yoyey (n=yoann@bro69-3-82-237-160-83.fbx.proxad.net) |
| 15:59.02 | kam187 | interesting |
| 15:59.24 | phh | kam187: ? |
| 15:59.27 | kam187 | i can only read SMI (8mb), linux memory and the upper bank of SMI64 |
| 15:59.46 | phh | yes amss part is protected |
| 16:00.11 | kam187 | thats why i cant allocate anything into its space! |
| 16:00.35 | kam187 | that sucks |
| 16:00.39 | phh | hum upper bank of SMI64 is strange |
| 16:00.47 | phh | oh not sorry |
| 16:01.00 | phh | no* |
| 16:01.49 | *** join/#htc-linux nate2 (n=nate@cpe-76-168-200-146.socal.res.rr.com) |
| 16:01.58 | kam187 | so really there's no way to write into the AMSS section |
| 16:03.04 | phh | according to cr2 there is |
| 16:03.13 | kam187 | cr2? |
| 16:03.15 | phh | kam187: you have the datasheet you might check :p |
| 16:03.39 | kam187 | there isnt much in there about it |
| 16:03.50 | phh | you alread read everything ? |
| 16:04.00 | kam187 | i skimmed it |
| 16:04.05 | kam187 | i read datasheets all day! |
| 16:08.02 | kam187 | #define AMSS_FLASH_BASE(A9BOOT_FLASH_BASE + A9BOOT_FLASH_LEN) |
| 16:08.03 | kam187 | #define AMSS_BLOCK_NUM165 |
| 16:08.03 | kam187 | #define AMSS_FLASH_LENBLOCK_SIZE * AMSS_BLOCK_NUM |
| 16:08.03 | kam187 | #define AMSS_START_BLOCKAMSS_FLASH_BASE / BLOCK_SIZE |
| 16:08.04 | kam187 | :] |
| 16:39.12 | kam187 | hmm yeah AMSS seems to be protected |
| 16:40.45 | tmzt | flash or ram? |
| 16:40.53 | phh | both |
| 16:40.59 | *** join/#htc-linux thedicemaster (n=thedicem@j89051.upc-j.chello.nl) |
| 16:41.00 | kam187 | ram |
| 16:41.13 | kam187 | i'm trying to move some stuff into the low 32mb of SMI |
| 16:41.17 | tmzt | you have mpu? |
| 16:41.27 | kam187 | mpu? |
| 16:41.28 | tmzt | you know how to disable it in haret? |
| 16:41.41 | phh | kam187: this one is in the datasheet :p |
| 16:41.42 | kam187 | oh, no this is a samsung galaxy :) |
| 16:41.55 | kam187 | phh: page? |
| 16:42.02 | phh | ouch |
| 16:42.18 | phh | 108 |
| 16:42.31 | tmzt | galaxy? |
| 16:42.36 | tmzt | how are you booting? |
| 16:43.13 | kam187 | i'm compiling a kernel and creating a boot.img |
| 16:43.19 | kam187 | its a MSM7200 android device |
| 16:43.52 | kam187 | i know its not really HTC-Linux, but you guys seem to understand the low level hardware :) |
| 16:44.10 | tmzt | it's similar |
| 16:44.23 | tmzt | are you dumping an image or something? |
| 16:44.25 | kam187 | i see all the alocation on upper 32mb of SMI |
| 16:44.28 | tmzt | msm7200a? |
| 16:44.33 | kam187 | yeah MSM7200A |
| 16:44.41 | tmzt | ok |
| 16:44.50 | tmzt | 7200 is older, like vogue/kaiser |
| 16:44.59 | kam187 | EBI (External RAM) |
| 16:44.59 | kam187 | 10000000->10028000 ?? |
| 16:44.59 | kam187 | 10028000->1040ffff : Kernel text |
| 16:44.59 | kam187 | 10410000->105611fb : Kernel data |
| 16:44.59 | kam187 | 105611fb->10700000 ?? |
| 16:44.59 | kam187 | 10700000->10F00000 GPU1 (8 Mb) |
| 16:45.01 | kam187 | 10F00000->11000000 FB (1 Mb) |
| 16:45.03 | kam187 | 11000000->16D00000 FREE |
| 16:45.05 | kam187 | 16D00000->16E00000 [missing 1mb] |
| 16:45.07 | kam187 | 16E00000->18000000 AMSS ?(18mb) |
| 16:45.09 | kam187 | that's EBI |
| 16:45.16 | kam187 | SMI64 (Internal RAM, 64Mb) |
| 16:45.17 | kam187 | 00000000->02000000 FREE? (32 Mb) |
| 16:45.17 | kam187 | 02000000->02800000 MDP ( 8 Mb) |
| 16:45.17 | kam187 | 02800000->03500000 ADSP (13 Mb) |
| 16:45.19 | kam187 | 03500000->04000000 CAMERA (11 Mb) |
| 16:45.20 | tmzt | text sounds the same as everything but hero |
| 16:45.21 | kam187 | thats SMI |
| 16:45.32 | tmzt | what are you dumping? |
| 16:45.42 | kam187 | so i assume the top 18mb of EBI is the AMSS |
| 16:46.04 | kam187 | i actually want to find any extra ram in the lower 32mb of SMI to free up more for android OS |
| 16:46.21 | phh | kam187: by the way, to they use ramzswap ? |
| 16:46.35 | phh | s/to/do/ |
| 16:46.40 | kam187 | no, but we have compiled a kernel etc with compcache |
| 16:46.41 | tmzt | official? |
| 16:46.46 | tmzt | don't think so |
| 16:46.57 | phh | kam187: ok |
| 16:47.03 | tmzt | how do you flash galaxy? |
| 16:47.11 | phh | kam187: if you have any success please report, diamonds have the same memory layout :) |
| 16:47.14 | kam187 | its not security locked, so u just create an image and flash it |
| 16:47.44 | tmzt | nice |
| 16:47.49 | kam187 | yeah :) |
| 16:47.52 | tmzt | do you know the format? |
| 16:48.13 | kam187 | its just a yaffs image i think. I havnt actually made a boot.img myself |
| 16:48.35 | kam187 | i got another guy Drakaz working with me, he's doing all that - i'm lazy to set it up :P |
| 16:48.51 | kam187 | knows very little about android itself |
| 16:49.02 | tmzt | well that's not an android thing |
| 16:49.21 | tmzt | the difference is the other devices were htc and we already know how to flash them |
| 16:49.32 | *** join/#htc-linux Gnutoo (n=gnutoo@host25-145-dynamic.51-79-r.retail.telecomitalia.it) |
| 16:49.33 | tmzt | we being #htc-linux #xda-devs etc |
| 16:49.36 | kam187 | i'm trying to get my head around how the memory works here tho |
| 16:49.46 | tmzt | boot.img is kernel+initrd |
| 16:49.56 | kam187 | yeah i figured that :) |
| 16:49.57 | tmzt | so you flash loose files or zip them? |
| 16:50.24 | kam187 | u make a kernel etc, then pack them into a boot.img, then use odin to flash them |
| 16:50.33 | kam187 | its a tool that tools to the low level bootloader of the phone |
| 16:50.41 | kam187 | *talks |
| 16:51.05 | tmzt | right |
| 16:51.07 | tmzt | ok |
| 16:51.11 | kam187 | anyway |
| 16:51.21 | tmzt | and the yaffs and the rest of the image? |
| 16:51.35 | tmzt | dzo pasted something to disable ram mpu from haret |
| 16:51.51 | kam187 | from what i understand here we have SMI (8mb) which is some fast stacked RAM which GPU0 is allocated to |
| 16:51.52 | tmzt | if you have lowlevel monitor stuff in the bootloader you could try that |
| 16:51.55 | *** part/#htc-linux yoyey (n=yoann@bro69-3-82-237-160-83.fbx.proxad.net) |
| 16:51.58 | tmzt | yes |
| 16:52.00 | kam187 | we dont :( |
| 16:52.12 | kam187 | then there's SMI64, which is the 64mb internal RAM |
| 16:52.25 | tmzt | well you could trick memory hotplug to let you enable a bank |
| 16:52.25 | kam187 | and the upper 32mb are allocated in the board-init.c/.h files |
| 16:52.41 | kam187 | ok |
| 16:52.49 | tmzt | or make a kernel mmap driver for the region and use it as swap if that doesn't work |
| 16:52.55 | tmzt | right |
| 16:53.11 | kam187 | then the lower 32mb is a mystery, but i assume it holds the AMSS |
| 16:53.17 | tmzt | but you would have to disable mpu from early kernel which is really hard to debug |
| 16:53.28 | tmzt | without at least serial |
| 16:53.40 | kam187 | doh |
| 16:53.58 | tmzt | you could try a prebootloader |
| 16:54.00 | tmzt | simple |
| 16:54.10 | tmzt | setup r0 as mtype |
| 16:54.18 | tmzt | setup atags |
| 16:54.22 | tmzt | setup atagsp to kernel |
| 16:54.31 | tmzt | look up arm bootloader protocol |
| 16:54.38 | tmzt | or www.arm.linux.org.uk |
| 16:54.44 | kam187 | ok |
| 16:54.47 | tmzt | boot to kernel |
| 16:54.51 | kam187 | i'm a tad confused now :p |
| 16:55.06 | tmzt | you can also test it and see if you can panic bootloader |
| 16:55.20 | tmzt | people.openezx.org/tmzt/green7.S |
| 16:55.35 | kam187 | so wait what i dont get is |
| 16:56.02 | kam187 | if the lower 32mb holds the AMMS, and the radio bootloader etc - similar to the diamond etc |
| 16:56.16 | kam187 | then why is the max addressible part of EBI only 109mb |
| 16:56.32 | kam187 | GPU1 and FB arent in EBI anymore |
| 16:56.48 | kam187 | so where's the top 19mb |
| 16:57.52 | phh | have you tried running up to 115 ? |
| 16:58.04 | kam187 | yeah, the kernel doesnt boot |
| 16:58.16 | kam187 | even one byte over 109 and it wont have it |
| 16:58.56 | kam187 | so 109mb = 01 6D 00 00 |
| 16:59.10 | kam187 | i can see at the end of the AMSS file 01 6E 00 00 |
| 16:59.15 | kam187 | so i assume its being loaded there |
| 17:00.19 | kam187 | but why have AMSS in EBI and low 32mb SMI?! |
| 17:00.32 | kam187 | or if its in EBI, whats in low SMI 32mb then? |
| 17:01.20 | kam187 | also busybox's devmem can read 00000000 -> 000800000 which is the stacked SMI (8mb) |
| 17:01.41 | kam187 | it can read 02000000 -> 04000000 which is top 32mb of SMI |
| 17:02.09 | kam187 | but it cant read the bottom of SMI32, or EBI above the 109mb (> 016D0000) |
| 17:02.34 | AstainHellbring | how goes it? |
| 17:05.58 | kam187 | bad :p |
| 17:08.26 | AstainHellbring | orry to hear that kam187 what device you fighting? |
| 17:08.39 | kam187 | samsung galaxy (android phone) |
| 17:15.50 | *** join/#htc-linux kiozen_ (n=kiozen@rgnb-5d87d838.pool.mediaWays.net) |
| 17:27.51 | *** join/#htc-linux marex (n=marex@vasut.kolej.mff.cuni.cz) |
| 17:28.08 | kam187 | what is preventing me reading above the 109m boundry? |
| 17:28.17 | kam187 | is it AMSS protection or protection in the mem driver? |
| 17:36.14 | AstainHellbring | cool kam187 |
| 17:45.39 | *** join/#htc-linux ali1234 (n=al@robotfuzz.co.uk) |
| 17:46.06 | *** part/#htc-linux ali1234 (n=al@robotfuzz.co.uk) |
| 17:46.25 | *** join/#htc-linux BHSPitMonkey (n=stephen@unaffiliated/bhspitmonkey) |
| 17:53.43 | *** join/#htc-linux kvaster (n=kvaster@live.bn.by) |
| 18:00.47 | *** join/#htc-linux stickboy (n=anonymou@128.153.179.191) |
| 18:06.18 | tmzt | samsung kernel doesn't have /dev/mem disabled? |
| 18:06.40 | tmzt | sorry, I meant panic arm9 |
| 18:06.44 | tmzt | not bootloader |
| 18:07.21 | tmzt | kam187: could be either, you need to fix the drivers in the android kernel |
| 18:07.27 | *** join/#htc-linux mufumbo (n=mufumbo@71-6-82-200.static-ip.telepacific.net) |
| 18:07.29 | kam187 | ah |
| 18:08.03 | tmzt | saerch the logs for mpu diable haret |
| 18:08.07 | tmzt | disable |
| 18:08.11 | kam187 | cool |
| 18:08.21 | tmzt | site:irclog.netripper.com |
| 18:09.16 | *** join/#htc-linux onen|openBmap (n=quassel@vbo91-1-89-87-201-85.dsl.club-internet.fr) |
| 18:15.28 | *** join/#htc-linux BHSPitMonkey (n=stephen@unaffiliated/bhspitmonkey) |
| 18:28.47 | *** join/#htc-linux timebomb (n=tb@85.183.24.211) |
| 18:34.31 | *** join/#htc-linux Reactor16 (n=Reactor1@41.105.62.94) |
| 18:35.03 | *** join/#htc-linux cr2 (n=cr2@ip-109-85-113-54.web.vodafone.de) |
| 18:39.00 | *** join/#htc-linux Reactor16 (i=Reactor1@93.182.132.110) |
| 18:39.15 | cr2 | kam187: do you have the samsung amss binary ? |
| 18:41.06 | *** join/#htc-linux kvaster (n=kvaster@live.bn.by) |
| 18:58.19 | *** join/#htc-linux FR^2 (i=frr@frquadrat.de) |
| 18:59.48 | *** join/#htc-linux luc_ (n=luc@89-115-128-35.cl.ipv4ilink.net) |
| 19:02.30 | *** join/#htc-linux itchy8me (n=itchy8me@ip80-116-211-87.adsl2.static.versatel.nl) |
| 19:03.55 | *** join/#htc-linux furtardo (n=mks@nat/yahoo/x-lpjaddxxcflveauz) |
| 19:21.38 | *** part/#htc-linux FR^2 (i=frr@frquadrat.de) |
| 19:24.35 | *** join/#htc-linux luc_ (n=luc@89-115-128-35.cl.ipv4ilink.net) |
| 19:30.10 | itchy8me | heya |
| 19:30.13 | Reactor16 | Any one help to unlock htc S710 |
| 19:34.00 | itchy8me | i'm trying to build busybox for the blackstone.. using "make ARCH=arm CROSS_COMPILE=arm-none-linux-gnueabi", however when booting the kernel and trying to start busybox shell through init script it tells me it cannot find /init. |
| 19:34.42 | itchy8me | when i replace the busybox binary that i compiled with one that was built buy you guys it goes into the shell |
| 19:34.52 | itchy8me | am i building the binary incorrectly? |
| 19:35.16 | itchy8me | buy=by* |
| 19:48.51 | Gnutoo | wow: |
| 19:49.16 | Gnutoo | http://pastebin.com/m302b131a |
| 19:49.16 | Gnutoo | I think I'm on the good road |
| 19:49.54 | Gnutoo | also: Starting playback... \n A: 0.0 (00.0) of 206.0 (03:26.0) ??,?% |
| 19:51.56 | phh | great job |
| 19:52.05 | Gnutoo | no it still doesn't work |
| 19:52.16 | Gnutoo | but... |
| 19:52.28 | phh | it still a progress |
| 19:52.29 | phh | i gues |
| 19:52.29 | Gnutoo | I'm a lot more advanced than before |
| 19:52.30 | Gnutoo | yes |
| 19:52.33 | Gnutoo | a lot of progress |
| 19:52.49 | Gnutoo | basically I hardcoded that to test: |
| 19:53.08 | Gnutoo | 4800 as len |
| 19:53.26 | Gnutoo | and 0 as frame->used after |
| 19:53.39 | Gnutoo | and commented frame = prtd->out + prtd->out_tail; |
| 19:53.42 | Gnutoo | I'll pastebin code |
| 19:53.51 | Gnutoo | and of course mplayer passes the ioctl |
| 19:53.56 | Gnutoo | and sleep |
| 19:54.16 | Gnutoo | s |
| 19:54.22 | Gnutoo | *sleeps |
| 19:55.11 | Gnutoo | http://pastebin.com/m223c9a95 |
| 19:56.23 | Gnutoo | the problems occurs between |
| 19:56.48 | Gnutoo | line 444 and line 447 |
| 19:56.56 | Gnutoo | that's why I tried that |
| 19:57.04 | Gnutoo | so if I find the good thing it could work |
| 20:17.31 | *** join/#htc-linux itchy8me (n=itchy8me@ip80-116-211-87.adsl2.static.versatel.nl) |
| 20:19.38 | *** join/#htc-linux gehzumteufel (n=gehzumte@174-127-18-210.static-ip.telepacific.net) |
| 20:19.48 | gehzumteufel | 'ello |
| 20:20.17 | itchy8me | oi |
| 20:20.32 | *** join/#htc-linux dream_kill (n=nospam@92.56.53.50) |
| 20:21.03 | itchy8me | how do i build busybox for the blackstone? |
| 20:21.28 | itchy8me | i'm doing "make ARCH=arm CROSS_COMPILE=arm-none-linux-gnueabi" |
| 20:21.46 | itchy8me | but when booting it says "cannot execute /init" |
| 20:23.03 | itchy8me | while if i replace the bicnary i built for a precompiled binary built for my device it bots all the way into the busybox shell |
| 20:25.14 | phh | do you have the libc busybox is linked with ? |
| 20:25.19 | phh | or built static ? |
| 20:26.17 | itchy8me | ummm.. :-/ |
| 20:26.42 | itchy8me | i downloaded the sources and am trying to build it in it's directory |
| 20:26.53 | itchy8me | static? |
| 20:27.07 | phh | ... |
| 20:29.36 | *** join/#htc-linux yoyey (n=yoann@lns-bzn-49f-81-56-185-87.adsl.proxad.net) |
| 20:29.56 | itchy8me | ldd ./busybox |
| 20:29.58 | itchy8me | not a dynamic executable |
| 20:32.15 | itchy8me | phh: whats the difference between the two? |
| 20:33.14 | phh | static is selfsufficient |
| 20:33.54 | *** join/#htc-linux xperia2 (n=chatzill@zux182-249.adsl.green.ch) |
| 20:36.59 | itchy8me | how do i know if i'm building it statically or not? |
| 20:37.20 | phh | it's in the make menuconfig |
| 20:41.01 | itchy8me | doh!.. thanks phh |
| 20:41.43 | *** join/#htc-linux ali1234 (n=al@robotfuzz.co.uk) |
| 20:43.37 | cr2 | phh: hi. 460800 works ? |
| 20:43.41 | phh | cr2: yup |
| 20:45.59 | cr2 | ok. |
| 20:46.02 | *** join/#htc-linux CoKeSero (n=imcokema@pool-96-240-154-40.hrbgpa.fios.verizon.net) |
| 20:46.06 | cr2 | then 921600 is the next |
| 20:46.11 | phh | yes |
| 20:46.28 | phh | i guess 921600 will be fixed at the same time as 4M |
| 20:47.18 | cr2 | yes |
| 20:47.41 | cr2 | i've looked at the hcitool source today |
| 20:48.27 | cr2 | the 'len' is not needed, and the rest will be read in with strtol() |
| 20:48.45 | cr2 | so it's |
| 20:49.10 | cr2 | hcitool cmd ogf ocf *data |
| 20:50.47 | *** join/#htc-linux rsanches_ (n=mufumbo@71-6-82-200.static-ip.telepacific.net) |
| 20:58.40 | *** join/#htc-linux SOG (n=SOG@n058152148054.netvigator.com) |
| 21:09.14 | cr2 | phh: do you have windows ? |
| 21:09.20 | phh | no |
| 21:10.44 | cr2 | i'm still fighting with wine |
| 21:11.15 | phh | to do what ? |
| 21:11.24 | cr2 | imgfs2dump |
| 21:12.31 | cr2 | wine vcredist_x86.exe |
| 21:12.37 | cr2 | err:seh:raise_exception Unhandled exception code c0000005 flags 0 addr 0x455383 |
| 21:12.47 | phh | ouch |
| 21:12.51 | phh | can't help on that one |
| 21:13.43 | cr2 | gehzumteufel: ping |
| 21:15.45 | cr2 | phh: have you tried this one ? |
| 21:15.48 | cr2 | <PROTECTED> |
| 21:16.02 | gehzumteufel | sorry |
| 21:16.16 | cr2 | phh: must be between these -> |
| 21:16.20 | gehzumteufel | Got a few friends that have called me via Skype so been distracted |
| 21:16.20 | cr2 | <PROTECTED> |
| 21:16.21 | cr2 | <PROTECTED> |
| 21:17.50 | *** join/#htc-linux stickboy (n=anonymou@128.153.210.116) |
| 21:18.21 | *** join/#htc-linux g55 (n=g55@rgnb-5d87c5b3.pool.mediaWays.net) |
| 21:18.25 | phh | i already have this one |
| 21:18.30 | cr2 | phh: sorry. |
| 21:18.36 | cr2 | should be |
| 21:18.38 | cr2 | <PROTECTED> |
| 21:29.58 | phh | cr2: doesn't work, timeout as usual |
| 21:35.02 | phh | cr2: anyhow, i'd prefer you work on gps or camera :D |
| 21:35.47 | phh | or FM doc who knows. |
| 21:39.55 | cr2 | :) |
| 21:40.13 | cr2 | for FM there are 3 commands |
| 21:40.19 | cr2 | and many registers |
| 21:40.41 | cr2 | what were the fm AT commands ? |
| 21:41.11 | cr2 | we also can test the read BT addr command |
| 21:43.46 | *** join/#htc-linux rosseaux (i=znc@129-167-19-84.nbiserv.com) |
| 21:44.41 | *** join/#htc-linux Squarc (n=Squarc@82-217-32-29.cable.quicknet.nl) |
| 21:48.13 | tmzt | hey cr2 |
| 21:48.38 | tmzt | cr2: try cabextract? |
| 21:48.47 | tmzt | or unshield/orange |
| 21:49.24 | tmzt | itchy8me: it is |
| 21:49.46 | tmzt | itchy8me: you have the wrong toolchain, just strings PIPE grep lib |
| 21:53.30 | yoyey | Do you know the g-sensor chipset name on the blackstone ? |
| 21:53.44 | cr2 | err:module:attach_process_dlls "MSVCR90.dll" failed to initialize, aborting |
| 21:54.01 | cr2 | yoyey: mmutrace the i2c |
| 21:54.19 | cr2 | tmzt: does it work for you ? |
| 21:54.29 | tmzt | what? |
| 21:54.33 | cr2 | tmzt: on topa/rhod rom ? |
| 21:54.43 | cr2 | ImgfsToDump_3.3_beta2 |
| 21:54.43 | tmzt | on vcredist.exe |
| 21:54.45 | yoyey | cr2:thanks |
| 21:54.49 | tmzt | in wine |
| 21:54.50 | tmzt | yes |
| 21:54.55 | cr2 | weird |
| 21:54.55 | tmzt | 3.3beta? |
| 21:54.59 | cr2 | yes |
| 21:55.11 | cr2 | the older ones were working. also LRK |
| 21:55.22 | tmzt | it doesn't build the symbols |
| 21:55.28 | tmzt | but it does dump xip |
| 21:55.31 | tmzt | and imgfs |
| 21:55.47 | cr2 | btw, 7za can unpack .wim archives, may be adapted for msflsh50 ? |
| 21:56.05 | cr2 | i need some files from imgfs |
| 21:59.22 | cr2 | gehzumteufel: can you try the latest topa-linload and paste the log ? |
| 21:59.31 | gehzumteufel | Yeah will do |
| 22:01.03 | townkat | anyone worked on making this things a rom ? i am thinking at any kind of initial progres, not a final version, i know there is still alot of work to be done on image itself,, ehh ? |
| 22:05.10 | gehzumteufel | cr2 what do I need to put in the startup.txt? |
| 22:05.38 | cr2 | gehzumteufel: nothing |
| 22:05.56 | gehzumteufel | There was no log that spat out when I ran haret |
| 22:06.13 | gehzumteufel | But it crashed at a seemingly similar point |
| 22:09.25 | cr2 | gehzumteufel: ram_console log after the linload hangs |
| 22:09.54 | cr2 | pwf ramconsole 0x0e0000 0x20000 |
| 22:10.07 | cr2 | hmm. afair it did not work on rhod ;) |
| 22:15.06 | gehzumteufel | Yeah I don't think it does |
| 22:16.50 | itchy8me | tmzt: the static build option wasn't set in menuconfig (busybox-1.14.1, it's working now :) |
| 22:17.10 | itchy8me | may i say.. |
| 22:17.14 | itchy8me | you guys rock |
| 22:19.09 | cr2 | 30000089 |
| 22:19.10 | cr2 | hmm |
| 22:25.41 | gehzumteufel | cr2: http://dl.getdropbox.com/u/1979320/ramconsole |
| 22:27.28 | cr2 | gehzumteufel: yeah, it's something else |
| 22:27.51 | *** join/#htc-linux marex (n=marex@vasut.kolej.mff.cuni.cz) |
| 22:32.55 | *** join/#htc-linux rzk_ (n=rzk@daemonet.ru) |
| 22:38.29 | cr2 | gehzumteufel: can you dump the rhod nk.exe ? |
| 22:38.50 | cr2 | phh: i suggest a bruteforce BT fm trace approach |
| 22:38.58 | phh | bruteforce ?!? |
| 22:39.12 | cr2 | phh: do you have your nand dump ? |
| 22:39.27 | cr2 | yes |
| 22:39.31 | phh | somewhere yes. |
| 22:39.40 | gehzumteufel | I don't know how |
| 22:39.46 | cr2 | can you extract FMS.dll ? |
| 22:40.13 | phh | i think i already did before mmm |
| 22:40.14 | cr2 | gehzumteufel: pwf rhodnk 0x10000000 0x300000 |
| 22:40.38 | phh | cr2: http://husson.hd.free.fr/FMS.dll |
| 22:40.40 | cr2 | phh: then we need to find the HCI send buffer there ;) |
| 22:40.41 | phh | you already asked for it before :p |
| 22:40.47 | phh | ouch |
| 22:41.02 | cr2 | i'll look |
| 22:41.20 | cr2 | find where it is mapped, and mmutrace it |
| 22:41.41 | cr2 | wince writes there, before it goes into HCI transmit |
| 22:42.23 | cr2 | phh: lsmod for FMS.dll ? |
| 22:42.30 | phh | lsmod .. ? |
| 22:42.36 | cr2 | phh: in haret |
| 22:42.43 | phh | blah |
| 22:42.47 | cr2 | You don't have permission to access the requested object. It is either read-protected or not readable by the server. |
| 22:42.51 | phh | oops. |
| 22:42.58 | phh | better ? :) |
| 22:43.05 | phh | groumpf i have to reboot to wince |
| 22:43.22 | cr2 | yes |
| 22:44.42 | cr2 | send_fm_event_af_jump: oldFreq=0x%d, newFreq=0x%d |
| 22:45.29 | cr2 | 0xb reg ? |
| 22:45.34 | *** join/#htc-linux swc|666 (n=infidel2@unaffiliated/swc666/x-4934821) |
| 22:46.00 | *** join/#htc-linux F22 (n=pcm@c-68-82-52-241.hsd1.nj.comcast.net) |
| 22:46.12 | itchy8me | tmz: what would i have been looking for if i had used "strings <file> | grep lib"? dependecies? |
| 22:46.36 | phh | itchy8me: if you built it static, this is useless |
| 22:47.06 | cr2 | Send HCI opcode(%x)--- |
| 22:47.07 | cr2 | Send HCI opcode(%x)+++ |
| 22:47.47 | phh | 1076 fl=00000000 mid=867bf76c pid=00000000 gusg=001 pusg=004 base=78690000 size=00012000 hmod=867BF76C mod=fms.dll exe=^M |
| 22:48.04 | itchy8me | phh: and if i had built it with libc links? |
| 22:48.28 | phh | itchy8me: you'll have to copy every lib it is linked to |
| 22:48.32 | phh | (including ld-linux.so.2) |
| 22:48.49 | cr2 | phh: ok, maybe we should trace the whole .data segment ? |
| 22:49.01 | gehzumteufel | cr2 http://dl.getdropbox.com/u/1979320/rhodnk |
| 22:49.06 | gehzumteufel | it isn't finished yet |
| 22:49.17 | phh | cr2: that might be a lot of data no ? |
| 22:49.46 | cr2 | phh: mmutrace will look only for changes |
| 22:49.53 | cr2 | .data of FMS.dll |
| 22:49.54 | phh | yes but even that |
| 22:50.03 | phh | anyway, what's the address ? |
| 22:50.15 | cr2 | not so easy ;) |
| 22:50.24 | cr2 | FM_GetMoSt |
| 22:50.26 | phh | ok i'll let you do the maths :p |
| 22:50.31 | cr2 | btw, what is MoSt ? |
| 22:50.45 | phh | don't know. |
| 22:50.52 | phh | MobileStation ? |
| 22:51.12 | cr2 | ? |
| 22:51.20 | phh | seems stupid ok. |
| 22:52.33 | cr2 | [K] DEX_RTC_ALARM |
| 22:52.35 | cr2 | [K] DEX_VBUS |
| 22:52.36 | cr2 | [K] DEX_BATT |
| 22:52.38 | cr2 | [K] DEX_USBID |
| 22:52.47 | cr2 | i think we don't demux these ;) |
| 22:53.38 | cr2 | GSENSOR_MOT |
| 22:54.09 | phh | oh that make me think that i have to code some gyroscope android driver |
| 22:54.29 | phh | oh well, most games don't use it anyway. |
| 22:57.43 | phh | cr2: so anything i should trace ? |
| 23:00.38 | cr2 | phh: vd around 0x78690000 ? |
| 23:01.18 | phh | error while reading address |
| 23:01.23 | phh | exception* |
| 23:01.33 | cr2 | look at dump mmu |
| 23:01.58 | cr2 | which pages are mapped after (virt)0x78690000 |
| 23:03.46 | cr2 | SetAUDIOLOOPBACK |
| 23:03.53 | cr2 | SetAUDIO(3) |
| 23:04.06 | *** join/#htc-linux kvaster (n=kvaster@live.bn.by) |
| 23:05.14 | phh | i should look for AT commands ? |
| 23:06.50 | phh | cr2: ? |
| 23:07.51 | cr2 | set Mo/St |
| 23:07.58 | cr2 | Mono Stereo i guess |
| 23:08.59 | cr2 | do you have the 'dump mmu' output ? |
| 23:09.42 | phh | what am i supposed to do with it ? |
| 23:09.49 | phh | search what''s next to 0x78690000 ? |
| 23:10.45 | cr2 | yes |
| 23:10.49 | cr2 | <PROTECTED> |
| 23:10.51 | cr2 | SEND_COMMAND: ogf=0x3f ocf=0x137 1 -> |
| 23:10.52 | cr2 | ACTION_SEND_COMMAND: 0x01 0x37 0xfd 0x01 0x01 |
| 23:11.01 | cr2 | should be easy with hcitool |
| 23:11.21 | phh | hcitool cmd 0x3f 0x137 0x01 0x37 0xfd 0x01 0x01 ? |
| 23:11.26 | cr2 | no |
| 23:11.39 | cr2 | hcitool cmd 0x3f 0x137 0x1 |
| 23:11.47 | phh | we need to upload FM firmware no ? |
| 23:12.01 | cr2 | i think yes |
| 23:12.14 | cr2 | or we write a separate app |
| 23:12.56 | cr2 | the callbacks are most important |
| 23:17.05 | *** join/#htc-linux timebomb (n=tb@e177136209.adsl.alicedsl.de) |
| 23:18.10 | cr2 | # FM ON |
| 23:18.11 | cr2 | SEND_COMMAND: ogf=0x3f ocf=0x137 1 -> |
| 23:18.12 | cr2 | ACTION_SEND_COMMAND: 0x01 0x37 0xfd 0x01 -> payload -> 0x01 |
| 23:18.19 | cr2 | looks better now. |
| 23:21.08 | phh | time to sleep |
| 23:22.52 | *** part/#htc-linux yoyey (n=yoann@lns-bzn-49f-81-56-185-87.adsl.proxad.net) |
| 23:37.30 | *** join/#htc-linux kvaster_ (n=kvaster@live.bn.by) |
| 23:56.08 | *** join/#htc-linux Squarc (n=Squarc@82-217-32-29.cable.quicknet.nl) |