Re: MDOC G4 - md8832

[Eric Miao <eric.y.miao@xxxxxxxxx>]

On Wed, Feb 25, 2009 at 3:22 PM, Cristobal Rosa <cristobalrosa@xxxxxxxxx> wrote:> Hi Eric,> thanks for answering,>> It is a pretty hard, took a couple of weeks studying how to do it and I can> not find solution.> I tried the following:>> - Using pdocread (from xda developers), but some partitions of the memory> are locked.> - Using a JTAG connection, but there is a switch circuit before the micro> and i can't access to the memory. I tried to disable this switch by writting> some pxa register, but in user mode i can't change the value of this> register. .... I don't know how i can access in supervisor mode to the pxa> ...
Actually you can mmap(/dev/mem) to write directly to registers if you havesuperuser privilege. Google for a sample for this.
> I'm looking for TrueFFS SDK and BDK but I have not yet achieved.>> umm..... i'm going crazy....>>>>>>> 2009/2/25 Eric Miao <eric.y.miao@xxxxxxxxx>>>>> On Tue, Feb 24, 2009 at 8:20 PM, Cristobal Rosa <cristobalrosa@xxxxxxxxx>>> wrote:>> > Hello guys,>> >>> > First, excuse me for my english.>> >>> > Well, I've PDA with an Intel Bulverde pxa270 processor with an MDoc>> > MD8832>> > (Disk on chip) flash memory. I need to modify the bootloader but i can't>> > access to it.>> >>> >  Can someone help me?>> >>>>> Well, you have a long way to go for that.>>>> Normally, vendors would do some work to prevent end user modifying (or>> inspecting) the internal from their final products. They said it's to>> protect>> the device from being bricked, but that's not true, they don't even want>> their binary to be disclosed :)>>>> So the first step you have to figure out is how to get access to that.>> If you have a ready OS on it, you can search for tools on that OS to>> see if you are able to read/write directly from the OS. (direct write>> is dangerous to make it bricked, you are warned). That way, you>> figure out the flash layout and possibly more information.>>>> Alternatively, you can try find if there is a JTAG connection, however,>> the device could be possibly fused to prevent JTAG debugging, but>> at least you can try your luck. A serial port may further help during>> your later debugging.>>>> Anyway, the first source is google, and see if someone else has>> already been doing this.>>>> > Thanks in advance>> > ------------------------------------------------------------------->> > List admin: http://lists.arm.linux.org.uk/mailman/listinfo/linux-arm>> > FAQ:        http://www.arm.linux.org.uk/mailinglists/faq.php>> > Etiquette:  http://www.arm.linux.org.uk/mailinglists/etiquette.php>> >>>>>>>>> -->> Cheers>> - eric>>


-- Cheers- eric
-------------------------------------------------------------------List admin: http://lists.arm.linux.org.uk/mailman/listinfo/linux-armFAQ:        http://www.arm.linux.org.uk/mailinglists/faq.phpEtiquette:  http://www.arm.linux.org.uk/mailinglists/etiquette.php