Remove shell input filtration - Revision history

Juzis28: /* Theory */

2013-05-27T09:17:07Z

‎Theory

Juzis28: /* Theory */

2013-05-27T09:14:57Z

‎Theory

Juzis28: /* Theory */

2013-01-06T16:38:06Z

‎Theory

Juzis28 at 09:29, 6 January 2013

2013-01-06T09:29:28Z

Juzis28 at 09:28, 6 January 2013

2013-01-06T09:28:12Z

Juzis28: /* Patch kernel image */

2013-01-06T08:30:24Z

‎Patch kernel image

Juzis28: /* Patch kernel image */

2013-01-06T08:02:59Z

‎Patch kernel image

Juzis28 at 06:38, 6 January 2013

2013-01-06T06:38:41Z

Juzis28: Please add info, correct my style/gramatic errors. Thanks!

2013-01-05T20:57:16Z

Please add info, correct my style/gramatic errors. Thanks!

Juzis28: Created page with " ==References== [http://forum.samygo.tv/viewtopic.php?f=10&t=2165 Support forum]"

2013-01-05T17:15:27Z

Created page with "<placeholder> ==References== [http://forum.samygo.tv/viewtopic.php?f=10&t=2165 Support forum]"

New page

<placeholder>
==References==
[http://forum.samygo.tv/viewtopic.php?f=10&t=2165 Support forum]

@@ Line 12: / Line 12: @@
 (Enter system command)
   SELP#>
-Function in n_tty.c:
+Function in /drivers/char/n_tty.c:
   int allow_char[] = { 48, 49, 50, 51, 52, 53, 54, 55, 56, 57 /* 0~9 */, 32 /*space*/, 13 /*enter*/, 8 /*backspace*/ };
                           ..

@@ Line 12: / Line 12: @@
 (Enter system command)
   SELP#>
-From patched n_tty.c:
+Function in n_tty.c:
   int allow_char[] = { 48, 49, 50, 51, 52, 53, 54, 55, 56, 57 /* 0~9 */, 32 /*space*/, 13 /*enter*/, 8 /*backspace*/ };
                           ..

@@ Line 1: / Line 1: @@
 = Theory =
-Starting B series CI+ TV models, Samsung patched n_tty.c to cripple the console at kernel level. So it is not possible to get full unrestricted shell trough ExLink cable, even the required menu exists on TDM. All what is possible - input HEX chars A-Z, 0...9.<br>
+Starting B series CI+ TV models, Samsung patched n_tty.c to cripple the console at kernel level. So it is not possible to get full unrestricted shell trough ExLink cable, even the required menu exists on TDM. All what is possible - input HEX chars A-F, 0...9.<br>
 Example (T-VALDEUC) how to get in to shell trough ExLink:
   10041004 {Enter}
@@ Line 34: / Line 34: @@
 Unlimited shell access might be useful in developing, repair if TV is bricked or any other emergency situations.
 = How To =
 '''We have few possibilities to get unrestricted root access via exlink cable:'''

@@ Line 88: / Line 88: @@
   sync
   sync
-{{red|If you get ANY error, DO NOT REBOOT or POWER OFF TV, ask for help and wait for the help.}}
+'''{{red|If you get ANY error while restoring partitions, DO NOT REBOOT or POWER OFF TV, ask for help and wait...}}'''

@@ Line 12: / Line 12: @@
 (Enter system command)
   SELP#>
-From patched n_tty.c: (B series sources)
+From patched n_tty.c:
   int allow_char[] = { 48, 49, 50, 51, 52, 53, 54, 55, 56, 57 /* 0~9 */, 32 /*space*/, 13 /*enter*/, 8 /*backspace*/ };
                           ..
@@ Line 65: / Line 65: @@
 With such patch we escaped from that input filtration loop and can input whatever we need now.
 * Save new kernel image
-* '''[[Hashes#Calculating_hashes | Calculate]] required hashes for new kernel
+* '''[[Hashes#Calculating_hashes | Calculate]]''' new cmac blocks (hashes) for new kernel:
 * '''[[Hash_partition_structure | Edit hashes file]]''' (cmac bloks (hashes) of appdata.img, exe.img, Image and rootfs.img are stored in some separate partition on TV).
 :If you miss this step, you get TV reboot every 30 sec, which is initialized by authuld due hashes mismatch.
-:Calculating and comparing of hashes can be done with '''chkhash''' (Instructions and download)
+* Connect to TV (telnet/ssh) and restore both (Image and hash partition) with new files you`ve made. It is MANDATORY to flash both partition at one TV session. If you reboot TV with just one partition re-flashed, you get cyclic reboot by authuld, where repair is almost impossible if no full root access at boot time is available.<br>
-* Connect to TV (telnet/ssh) and restore both (Image and hash partition) with new files you`ve made. It is MANDATORY to flash both partition at one TV session. If you reboot TV with just one partition re-flashed, you get cyclic reboot by authuld, where repair is almost impossible if no full root access at boot time is available.
+Decide what is your active partition set (on C/D/E series here are two sets of rootfs+kernel, active and alternative). For this goal you have to check for console output:
-* If no errors came, reboot TV. And pray :)
+ cat /proc/cmdline
+The output for '''1st set''' should look:
+ root=/dev/tfsr6 console=ttyS1 quiet
+This means active firmware uses '''first''' set of partitions, kernel=/dev/bml0/'''{{red|5}}''', rootfs=/dev/bml0/'''{{red|6}}''' and hashes are checked from /dev/bml0/'''{{red|9}}'''<br>
-'''{{red|To Be Added, WIP}}'''
+Output for '''2nd set''':
+ root=/dev/tfsr8 console=ttyS1 quiet
+This means active firmware uses '''second''' set of partitions, kernel=/dev/bml0/'''{{red|7}}''', rootfs=/dev/bml0/'''{{red|8}}''' and hashes are checked from /dev/bml0/'''{{red|10}}'''<br>
+''In example we got the 2nd partition set is used and we have to restore bml0/7 with patched kernel and bml0/10 with correct hashes:''
+ bml.restore /dev/bml0/7 /dtv/usb/sda1/bml7_VAL_3015_patched.dmp

@@ Line 48: / Line 48: @@
 <font size="3">'''Steps:'''</font size>
 * Use dump of kernel`s partition or decrypt kernel using '''[http://sourceforge.net/p/samygo/code/1246/tree/patcher/trunk SamyGO Firmware patcher]''' (example):
-  SamyGO.py decrypt_all ./T-CHLCIPDEUC
+  SamyGO.py decrypt_all ./T-VALDEUC
 * Open decrypted kernel image in HEX editor
 * Search for HEX string

@@ Line 47: / Line 47: @@
 <br><br>
 <font size="3">'''Steps:'''</font size>
-* Open kernel image in HEX editor
+* Use dump of kernel`s partition or decrypt kernel using '''[http://sourceforge.net/p/samygo/code/1246/tree/patcher/trunk SamyGO Firmware patcher]''' (example):
 * Search for HEX string
 30 92 E7 04 20 82 E2 04 00 53 E1 02 00 00 {{red|0A}}
@@ Line 64: / Line 66: @@
 * Save new kernel image
 * '''[[Hashes#Calculating_hashes | Calculate]] required hashes for new kernel
-* '''[[Hash_partition_structure | Edit hashes file]]''' (cmac bloks (hashes) of appdata.img, exe.img, Image and rootfs.img are stored in some separate partition on TV). If you miss this step, you get TV reboot every 30 sec, which is initialized by authuld due hashes mismatch. Calculating and comparing of hashes can be done with '''chkhash''' (Instructions and download)
+* '''[[Hash_partition_structure | Edit hashes file]]''' (cmac bloks (hashes) of appdata.img, exe.img, Image and rootfs.img are stored in some separate partition on TV).
 * Connect to TV (telnet/ssh) and restore both (Image and hash partition) with new files you`ve made. It is MANDATORY to flash both partition at one TV session. If you reboot TV with just one partition re-flashed, you get cyclic reboot by authuld, where repair is almost impossible if no full root access at boot time is available.
 * If no errors came, reboot TV. And pray :)
@@ Line 83: / Line 87: @@
 B series CI+ devices, firmwares T-CHUCIP*, T-CHLCIP*, T-CHL5CIP*, T-CHL6CIP*<br>
 C series T-VAL* family firmwares<br>
 = References =
 [http://forum.samygo.tv/viewtopic.php?f=10&t=2165 Support forum]