Announcement

Collapse
No announcement yet.

Boot Issue - ZTE ZX10 B760HS3 - amlogic s805x - Android 7.1.2 - IPTV STB

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    Boot Issue - ZTE ZX10 B760HS3 - amlogic s805x - Android 7.1.2 - IPTV STB

    Hello everyone, hope you all are doing well.

    I have ZTE smart tv box its amlogic s805x android 7.1.2 / 1GB/8GB.
    it comes with a telecom iptv subscription.
    I have putty access thorugh USB2TTL and i can reboot to bootloader console and then i use update command to detect the device with PC with usb male to male cable and so i can use backup and restore commands to pull and push firmware.

    Now the problem is that when i modify or root the system.img, and enable selinux " update bulkcmd "setenv -f EnableSelinux permissive" , update bulkcmd "saveenv" "and then push to the device, the device stucks at bootloader console " gxl_p241_v1# ".
    here at bootloader console "gxl_p241_v1#" i use commands like "normal" or "run system" or " bootsys" to boot the rooted/modified firmware successfully.
    by doing this i can use rooted firmware without any issue, but when i reboot or turn off and on the device it again stucks at bootloader console as mentioned above, so to use the box i have to enter above commands everytime.
    and to overcome the situation i go to bootloader console, use update command to detect the box, i use update tool, and use " update bulkcmd "env default -a; save; reset" " command which does
    -> BULKcmd[env default -a; save; reset]
    ## Resetting to default environment
    Saving Environment to aml-storage...
    mmc env offset: 0x6500000
    Writing to MMC(1)... done
    resetting ...
    -< this and device boot successfully without going to bootloader or anything. but using above command firmware losses the root access and become unrooted,
    what i see is that the box doesnt work with enabling the selinux.
    its been three weeks i have been searching everywhere and getting nothing to be working
    (or maybe im newbie lol)
    finally i have found this forum, im sure i will get helo from you guys.

    i dont know how to upload images lol

    here is the putty log of succuessfull boot without root

    ........................set vddee to 1000 mv
    mpu_config_enablek


    U-Boot 2015.01-g90009a7-dirty (Feb 28 2019 - 18:59:28), Build: jenkins-ZXV10_B760HS3_V4401.0.0.06_V749113B2-1

    DRAM: 1 GiB
    Relocation Offset is: 3eeba000
    gpio: pin GPIOAO_9 (gpio 109) value is 1
    register usb cfg[0][1] = 000000003ff57fd0
    [CANVAS]canvas init
    MMC: aml_priv->desc_buf = 0x000000003bebadb0
    aml_priv->desc_buf = 0x000000003bebd0d0
    SDIO Port B: 0, SDIO Port C: 1
    emmc/sd response timeout, cmd8, status=0x1ff2800
    emmc/sd response timeout, cmd55, status=0x1ff2800
    init_part() 293: PART_TYPE_AML
    [mmc_init] mmc init success
    _calculate_offset()-362: ================================================== ===========
    _calculate_offset()-363: name: bootloader,offset: 0,size: 400000.
    _calculate_offset()-367: name: reserved,offset: 2400000,size: 4000000.
    _calculate_offset()-367: name: env,offset: 6500000,size: 800000.
    dtb magic 5f4c4d41
    Amlogic multi-dtb tool
    Multi dtb detected
    saradc: check dts: FDT_ERR_BADMAGIC, load default parameters
    -----board_version[1]
    checkhw - board_id:0x1
    Multi dtb tool version: v2 .
    Support 2 dtbs.
    aml_dt soc: gxl platform: p241 variant: 1g
    dtb 0 soc: gxl plat: p241 vari: 1g
    dtb 1 soc: gxl plat: p241 vari: v2-1g
    Find match dtb: 0
    start dts,buffer=000000003bebf900,dt_addr=000000003bec01 00
    Amlogic multi-dtb tool
    Multi dtb detected
    saradc: check dts: FDT_ERR_BADMAGIC, load default parameters
    -----board_version[1]
    checkhw - board_id:0x1
    Multi dtb tool version: v2 .
    Support 2 dtbs.
    aml_dt soc: gxl platform: p241 variant: 1g
    dtb 0 soc: gxl plat: p241 vari: 1g
    dtb 1 soc: gxl plat: p241 vari: v2-1g
    Find match dtb: 0
    parts: 11
    00: logo 0000000001000000 1
    01: recovery 0000000001800000 1
    02: rsv 0000000000800000 1
    03: tee 0000000000800000 1
    04: crypt 0000000002000000 1
    05: misc 0000000000400000 1
    06: conf 0000000000400000 1
    07: boot 0000000001000000 1
    08: cache 0000000037a00000 2
    09: system 000000006cc00000 1
    10: data ffffffffffffffff 4
    _calculate_offset()-362: ================================================== ===========
    _calculate_offset()-363: name: bootloader,offset: 0,size: 400000.
    _calculate_offset()-367: name: reserved,offset: 2400000,size: 4000000.
    _calculate_offset()-367: name: env,offset: 6500000,size: 800000.
    _calculate_offset()-367: name: logo,offset: 6e00000,size: 1000000.
    _calculate_offset()-367: name: recovery,offset: 7f00000,size: 1800000.
    _calculate_offset()-367: name: rsv,offset: 9800000,size: 800000.
    _calculate_offset()-367: name: tee,offset: a100000,size: 800000.
    _calculate_offset()-367: name: crypt,offset: aa00000,size: 2000000.
    _calculate_offset()-367: name: misc,offset: cb00000,size: 400000.
    _calculate_offset()-367: name: conf,offset: d000000,size: 400000.
    _calculate_offset()-367: name: boot,offset: d500000,size: 1000000.
    _calculate_offset()-367: name: cache,offset: e600000,size: 37a00000.
    _calculate_offset()-367: name: system,offset: 46100000,size: 6cc00000.
    _calculate_offset()-367: name: data,offset: b2e00000,size: ffffffff.
    init_part() 293: PART_TYPE_AML
    eMMC/TSD partition table have been checked OK!
    check pattern success
    mmc env offset: 0x6500000
    In: serial
    Out: serial
    Err: serial
    reboot_mode=normal
    [store]To run cmd[emmc dtb_read 0x1000000 0x40000]
    _verify_dtb_checksum()-917: calc 729116f8, store 729116f8
    _verify_dtb_checksum()-917: calc 729116f8, store 729116f8
    dtb_read()-1039: total valid 2
    dtb_read()-1106: do nothing
    Amlogic multi-dtb tool
    Multi dtb detected
    saradc: check dts: FDT_ERR_BADMAGIC, load default parameters
    -----board_version[1]
    checkhw - board_id:0x1
    Multi dtb tool version: v2 .
    Support 2 dtbs.
    aml_dt soc: gxl platform: p241 variant: 1g
    dtb 0 soc: gxl plat: p241 vari: 1g
    dtb 1 soc: gxl plat: p241 vari: v2-1g
    Find match dtb: 0
    vpu: clk_level in dts: 7
    vpu: set clk: 666667000Hz, readback: 666660000Hz(0x300)
    vpu: vpu_clk_gate_init_off
    vpp: vpp_init
    hpd_state=1
    [1080p60hz] is invalid for cvbs.
    set hdmitx VIC = 16
    config HPLL = 2970000
    HPLL: 0xc000027b
    config HPLL done
    j = 4 vid_clk_div = 1
    hdmitx: set enc for VIC: 16
    HDMITX-DWC addr=0x10004006 rd_data=0x40
    Error: HDMITX-DWC exp_data=0xff mask=0x9f
    rx version is 1.4 or below div=10
    hdmtix: set audio
    hdmitx phy setting done
    Net: dwmac.c9410000amlkey_init() enter!
    [EFUSE_MSG]keynum is 4

    Error: dwmac.c9410000 address not set.

    Start read misc partition datas!
    info->attemp_times = 0
    info->active_slot = 0
    info->slot_info[0].bootable = 1
    info->slot_info[0].online = 1
    info->slot_info[1].bootable = 0
    info->slot_info[1].online = 0
    info->attemp_times = 0
    attemp_times = 0
    active slot = 0
    wipe_data=successful
    wipe_cache=successful
    upgrade_step=0
    [OSD]load fb addr from dts
    [OSD]fb_addr for logo: 0x3d800000
    [OSD]load fb addr from dts
    [OSD]fb_addr for logo: 0x3d800000
    [CANVAS]addr=0x3d800000 width=5760, height=2160

    Starting logo
    [Logo_disp]: ====== Logo_disp ======
    [draw_logo] size=0x10446c, ntohl(imgheader.len)=0x10440c, ntohs(imgheader.offset)=0x60
    [draw_logo] after ALIGN, size=0x104600
    [draw_logo]: before read_logo_data
    [draw_logo]: draw_logo 1481
    [draw_logo]: draw_logo 1483
    [set_logoParam]: enter the set_logoParam
    [set_logoParam]: Id FileName Type No Addr Size
    [set_logoParam]: before the get_logo_source PAL_LOGO_PICTURE
    ### get_logo_source: material.type=0, material.No=1
    [set_logoParam]: <0> LogoPic(480i) 0 1 0x11000288 541225
    ### get_logo_source: material.type=0, material.No=1
    ### get_logo_source: material.type=0, material.No=2
    [set_logoParam]: <1> LogoPic(576i) 0 2 0x110844b4 114717
    ### get_logo_source: material.type=0, material.No=1
    ### get_logo_source: material.type=0, material.No=2
    ### get_logo_source: material.type=0, material.No=3
    [set_logoParam]: <2> LogoPic(720p) 0 3 0x110a04d4 66136
    ### get_logo_source: material.type=0, material.No=1
    ### get_logo_source: material.type=0, material.No=2
    ### get_logo_source: material.type=0, material.No=3
    ### get_logo_source: material.type=0, material.No=4
    [set_logoParam]: <3> LogoPic(1080i_p) 0 2 0x110b072c 266302
    [draw_logo]: draw_logo 1526
    before the decompressToRGB
    Start to decode the LOGO jpeg ...
    [decompressToRGB]: before the decompress_jpeg_rgb
    [decompressToRGB]: Call decompress_pic_rgb565(id=3,addr=110b072c,size=2663 02,maxw=1920,maxh=1080,Bpp=3) ...
    [decompressToRGB]: after the decompress_jpeg_rgb
    [draw_logo]: Success in decoding LOGO src file: (w=1920,h=1080,Bpp=3,data=0x3bf3fad0)
    [deinit_Logo]: all LOGO's resource (Exc. logoThread) are released
    Logo_disp ret: 0
    amlkey_init() enter!
    amlkey_init() 71: already init!
    [EFUSE_MSG]keynum is 4
    [KM]Error:f[key_manage_query_size]L507:key[usid] not programed yet
    [KM]Error:f[key_manage_query_size]L507:key[mac] not programed yet
    [KM]Error:f[key_manage_query_size]L507:key[deviceid] not programed yet
    gpio: pin GPIOAO_2 (gpio 102) value is 1
    syntax error
    ztebsp: bootcmd=bootsys
    Hit any key to stop autoboot: 0
    ztebsp:boot_revision = V811021,18:59:31
    [FfsDecryption][520]:FfsDecryption success
    read boot-recovery from misc failed.
    ztebsp: ethaddr=E8:AC:AD:83:92:50
    [setup_bootenv] ScreenMode=> value[7]=, val=0
    Saving Environment to aml-storage...
    mmc env offset: 0x6500000
    Writing to MMC(1)... done
    not found mac in efuse
    bootmode:NORM
    ztebsp: head magic=55667788
    ztebsp: cmdT = imgread kernel boot ${loadaddr} 2048; store dtb read ${dtb_mem_addr}; bootm ${loadaddr}
    bootargs=rootfstype=ramfs init=/init console=ttyS0,115200 no_console_suspend earlyprintk=aml-uart,0xc81004c0 ramoops.pstore_en=1 ramoops.record_size=0x8000 ramoops.console_size=0x4000 androidboot.selinux=enforcing logo=osd1,loaded,0x3d800000,1080p60hz maxcpus=4 vout=1080p60hz,enable hdmimode=1080p60hz cvbsmode=576cvbs hdmitx= cvbsdrv=0 androidboot.firstboot=0 jtag=apao androidboot.hardware=amlogic androidboot.slot_suffix=_a hdcp_process=2 uimode=1080p CTSEnable=0 market=4401,1 ProductID=39100499007038600000E8ACAD839250 DebugFlag=0 runlevel=0 mac=E8:AC:AD:83:92:50 mem=0M dbglevel loglevel=1 boardtype=1 boot_revision=V811021 system=norm
    [imgread]secureKernelImgSz=0x915a00
    [store]To run cmd[emmc dtb_read 0x1000000 0x40000]
    dtb_read_shortcut()-975: short cut in...
    Amlogic multi-dtb tool
    Multi dtb detected
    saradc: check dts: FDT_ERR_BADMAGIC, load default parameters
    -----board_version[1]
    checkhw - board_id:0x1
    Multi dtb tool version: v2 .
    Support 2 dtbs.
    aml_dt soc: gxl platform: p241 variant: 1g
    dtb 0 soc: gxl plat: p241 vari: 1g
    dtb 1 soc: gxl plat: p241 vari: v2-1g
    Find match dtb: 0
    ee_gate_off ...
    ## Booting Android Image at 0x01080200 ...
    reloc_addr =3bf3fad0
    copy done
    Kernel command line: buildvariant=user
    load dtb from 0x1000000 ......
    Amlogic multi-dtb tool
    Single dtb detected
    -----board_version[1]
    checkhw - board_id:0x1
    Uncompressing Kernel Image ... OK
    kernel loaded at 0x01080000, end = 0x021f51b0
    libfdt fdt_setprop(): FDT_ERR_NOSPACE
    [rsvmem] bl32 reserved memory set status error.
    Loading Ramdisk to 3bd20000, end 3bea7390 ... OK
    Loading Device Tree to 000000001fff2000, end 000000001ffff9d5 ... OK
    fdt_instaboot: no instaboot image

    Starting kernel ...

    uboot time: 4163283 us
    [ [email protected]] Initializing cgroup subsys cpu
    [ [email protected]] Initializing cgroup subsys cpuacct
    [ [email protected]] Linux version 3.14.29-gfc15513-dirty ([email protected]) (gcc version 4.9.2 20140904 (prerelease) (crosstool-NG linaro-1.13.1-4.9-2014.09 - Linaro GCC 4.9-2014.09) ) #1 SMP PREEMPT Tue Mar 3 10:09:30 CST 2020
    [ [email protected]] CPU: AArch64 Processor [410fd034] revision 4
    [ [email protected]] no prop version_code
    [ [email protected]] bootconsole [earlycon0] enabled
    [ [email protected]] Memory limited to 0MB
    B760HS3_PTCL:/ #

    Log of putty with rooted firmware and selinux enable
    BULKcmd[setenv -f EnableSelinux permissive]
    [MSG]ret = 0
    [info]success
    BULKcmd[saveenv]
    Saving Environment to aml-storage...
    mmc env offset: 0x6500000
    Writing to MMC(1)... done
    [MSG]ret = 0
    [info]success
    ~~~~.............................................. ............................set vddee to 1000 mv
    mpu_config_enablek


    U-Boot 2015.01-g90009a7-dirty (Feb 28 2019 - 18:59:28), Build: jenkins-ZXV10_B760HS3_V4401.0.0.06_V749113B2-1

    DRAM: 1 GiB
    Relocation Offset is: 3eeba000
    gpio: pin GPIOAO_9 (gpio 109) value is 1
    register usb cfg[0][1] = 000000003ff57fd0
    [CANVAS]canvas init
    MMC: aml_priv->desc_buf = 0x000000003bebadb0
    aml_priv->desc_buf = 0x000000003bebd0d0
    SDIO Port B: 0, SDIO Port C: 1
    emmc/sd response timeout, cmd8, status=0x1ff2800
    emmc/sd response timeout, cmd55, status=0x1ff2800
    init_part() 293: PART_TYPE_AML
    [mmc_init] mmc init success
    _calculate_offset()-362: ================================================== ===========
    _calculate_offset()-363: name: bootloader,offset: 0,size: 400000.
    _calculate_offset()-367: name: reserved,offset: 2400000,size: 4000000.
    _calculate_offset()-367: name: env,offset: 6500000,size: 800000.
    dtb magic 5f4c4d41
    Amlogic multi-dtb tool
    Multi dtb detected
    saradc: check dts: FDT_ERR_BADMAGIC, load default parameters
    -----board_version[1]
    checkhw - board_id:0x1
    Multi dtb tool version: v2 .
    Support 2 dtbs.
    aml_dt soc: gxl platform: p241 variant: 1g
    dtb 0 soc: gxl plat: p241 vari: 1g
    dtb 1 soc: gxl plat: p241 vari: v2-1g
    Find match dtb: 0
    start dts,buffer=000000003bebf900,dt_addr=000000003bec01 00
    Amlogic multi-dtb tool
    Multi dtb detected
    saradc: check dts: FDT_ERR_BADMAGIC, load default parameters
    -----board_version[1]
    checkhw - board_id:0x1
    Multi dtb tool version: v2 .
    Support 2 dtbs.
    aml_dt soc: gxl platform: p241 variant: 1g
    dtb 0 soc: gxl plat: p241 vari: 1g
    dtb 1 soc: gxl plat: p241 vari: v2-1g
    Find match dtb: 0
    parts: 11
    00: logo 0000000001000000 1
    01: recovery 0000000001800000 1
    02: rsv 0000000000800000 1
    03: tee 0000000000800000 1
    04: crypt 0000000002000000 1
    05: misc 0000000000400000 1
    06: conf 0000000000400000 1
    07: boot 0000000001000000 1
    08: cache 0000000037a00000 2
    09: system 000000006cc00000 1
    10: data ffffffffffffffff 4
    _calculate_offset()-362: ================================================== ===========
    _calculate_offset()-363: name: bootloader,offset: 0,size: 400000.
    _calculate_offset()-367: name: reserved,offset: 2400000,size: 4000000.
    _calculate_offset()-367: name: env,offset: 6500000,size: 800000.
    _calculate_offset()-367: name: logo,offset: 6e00000,size: 1000000.
    _calculate_offset()-367: name: recovery,offset: 7f00000,size: 1800000.
    _calculate_offset()-367: name: rsv,offset: 9800000,size: 800000.
    _calculate_offset()-367: name: tee,offset: a100000,size: 800000.
    _calculate_offset()-367: name: crypt,offset: aa00000,size: 2000000.
    _calculate_offset()-367: name: misc,offset: cb00000,size: 400000.
    _calculate_offset()-367: name: conf,offset: d000000,size: 400000.
    _calculate_offset()-367: name: boot,offset: d500000,size: 1000000.
    _calculate_offset()-367: name: cache,offset: e600000,size: 37a00000.
    _calculate_offset()-367: name: system,offset: 46100000,size: 6cc00000.
    _calculate_offset()-367: name: data,offset: b2e00000,size: ffffffff.
    init_part() 293: PART_TYPE_AML
    eMMC/TSD partition table have been checked OK!
    check pattern success
    mmc env offset: 0x6500000
    In: serial
    Out: serial
    Err: serial
    reboot_mode=cold_boot
    [store]To run cmd[emmc dtb_read 0x1000000 0x40000]
    _verify_dtb_checksum()-917: calc 729116f8, store 729116f8
    _verify_dtb_checksum()-917: calc 729116f8, store 729116f8
    dtb_read()-1039: total valid 2
    dtb_read()-1106: do nothing
    Amlogic multi-dtb tool
    Multi dtb detected
    saradc: check dts: FDT_ERR_BADMAGIC, load default parameters
    chanel error
    -----board_version[1]
    checkhw - board_id:0x1
    Multi dtb tool version: v2 .
    Support 2 dtbs.
    aml_dt soc: gxl platform: p241 variant: 1g
    dtb 0 soc: gxl plat: p241 vari: 1g
    dtb 1 soc: gxl plat: p241 vari: v2-1g
    Find match dtb: 0
    vpu: clk_level in dts: 7
    vpu: set clk: 666667000Hz, readback: 666660000Hz(0x300)
    vpu: vpu_clk_gate_init_off
    vpp: vpp_init
    hpd_state=1
    [1080p60hz] is invalid for cvbs.
    set hdmitx VIC = 16
    config HPLL = 2970000
    HPLL: 0xc000027b
    config HPLL done
    j = 4 vid_clk_div = 1
    hdmitx: set enc for VIC: 16
    HDMITX-DWC addr=0x10004006 rd_data=0x40
    Error: HDMITX-DWC exp_data=0xff mask=0x9f
    rx version is 1.4 or below div=10
    hdmtix: set audio
    hdmitx phy setting done
    Net: dwmac.c9410000amlkey_init() enter!
    [EFUSE_MSG]keynum is 4

    Error: dwmac.c9410000 address not set.

    Start read misc partition datas!
    info->attemp_times = 0
    info->active_slot = 0
    info->slot_info[0].bootable = 1
    info->slot_info[0].online = 1
    info->slot_info[1].bootable = 0
    info->slot_info[1].online = 0
    info->attemp_times = 0
    attemp_times = 0
    active slot = 0
    wipe_data=successful
    wipe_cache=successful
    upgrade_step=0
    [OSD]load fb addr from dts
    [OSD]fb_addr for logo: 0x3d800000
    [OSD]load fb addr from dts
    [OSD]fb_addr for logo: 0x3d800000
    [CANVAS]addr=0x3d800000 width=5760, height=2160

    Starting logo
    [Logo_disp]: ====== Logo_disp ======
    [draw_logo] size=0x10446c, ntohl(imgheader.len)=0x10440c, ntohs(imgheader.offset)=0x60
    [draw_logo] after ALIGN, size=0x104600
    [draw_logo]: before read_logo_data
    [draw_logo]: draw_logo 1481
    [draw_logo]: draw_logo 1483
    [set_logoParam]: enter the set_logoParam
    [set_logoParam]: Id FileName Type No Addr Size
    [set_logoParam]: before the get_logo_source PAL_LOGO_PICTURE
    ### get_logo_source: material.type=0, material.No=1
    [set_logoParam]: <0> LogoPic(480i) 0 1 0x11000288 541225
    ### get_logo_source: material.type=0, material.No=1
    ### get_logo_source: material.type=0, material.No=2
    [set_logoParam]: <1> LogoPic(576i) 0 2 0x110844b4 114717
    ### get_logo_source: material.type=0, material.No=1
    ### get_logo_source: material.type=0, material.No=2
    ### get_logo_source: material.type=0, material.No=3
    [set_logoParam]: <2> LogoPic(720p) 0 3 0x110a04d4 66136
    ### get_logo_source: material.type=0, material.No=1
    ### get_logo_source: material.type=0, material.No=2
    ### get_logo_source: material.type=0, material.No=3
    ### get_logo_source: material.type=0, material.No=4
    [set_logoParam]: <3> LogoPic(1080i_p) 0 2 0x110b072c 266302
    [draw_logo]: draw_logo 1526
    before the decompressToRGB
    Start to decode the LOGO jpeg ...
    [decompressToRGB]: before the decompress_jpeg_rgb
    [decompressToRGB]: Call decompress_pic_rgb565(id=3,addr=110b072c,size=2663 02,maxw=1920,maxh=1080,Bpp=3) ...
    [decompressToRGB]: after the decompress_jpeg_rgb
    [draw_logo]: Success in decoding LOGO src file: (w=1920,h=1080,Bpp=3,data=0x3bf3fad0)
    [deinit_Logo]: all LOGO's resource (Exc. logoThread) are released
    Logo_disp ret: 0
    amlkey_init() enter!
    amlkey_init() 71: already init!
    [EFUSE_MSG]keynum is 4
    [KM]Error:f[key_manage_query_size]L507:key[usid] not programed yet
    [KM]Error:f[key_manage_query_size]L507:key[mac] not programed yet
    [KM]Error:f[key_manage_query_size]L507:key[deviceid] not programed yet
    gpio: pin GPIOAO_2 (gpio 102) value is 1
    syntax error
    ztebsp: bootcmd=bootsys
    gxl_p241_v1#

    #2
    reserved for photo.


    please tell me how to attach photos here

    Comment

    Working...
    X