Modify

Opened 2 years ago

Closed 2 years ago

#21449 closed defect (invalid)

CRITICAL: OpenWrt is killig Netgear R6300v2 devices

Reported by: anonymous Owned by: developers
Priority: highest Milestone:
Component: base system Version:
Keywords: Cc:

Description

This is something that have to be fixed as fast as possible before more devices are killed.

stock layout:

0x000000000000-0x000000080000 : "boot"
0x000000080000-0x000000200000 : "nvram"
0x000000200000-0x000000220000 : "board_data"
0x000000220000-0x000000240000 : "POT1"
0x000000240000-0x000000260000 : "POT2"
0x000000260000-0x000000280000 : "T_Meter1"
0x000000280000-0x0000002a0000 : "T_Meter2"
0x0000002a0000-0x0000002c0000 : "ML1"
0x0000002c0000-0x0000002e0000 : "ML2"
0x0000002e0000-0x000000300000 : "ML3"
0x000000300000-0x000000320000 : "ML4"
0x000000320000-0x000000340000 : "ML5"
0x000000340000-0x000000360000 : "ML6"
0x000000360000-0x000000380000 : "ML7"
0x000000380000-0x000002180000 : "linux"
0x00000058e8dc-0x000002180000 : "rootfs"

openwrt layout

[ 2.382324] 0x000000000000-0x000000080000 : "boot"
[ 2.389292] 0x000000080000-0x000000200000 : "nvram"
[ 2.398934] 0x000000200000-0x000000220000 : "board_data"
[ 2.405319] 0x000000220000-0x000000240000 : "POT"
[ 2.411066] 0x000000240000-0x0000002a0000 : "POT"
[ 2.417527] 0x0000002a0000-0x0000002c0000 : "ML"
[ 2.423272] 0x0000002c0000-0x0000002e0000 : "ML"
[ 2.428968] 0x0000002e0000-0x000000300000 : "ML"
[ 2.434705] 0x000000300000-0x000000320000 : "ML"
[ 2.440487] 0x000000320000-0x000000340000 : "ML"
[ 2.446174] 0x000000340000-0x000000360000 : "ML"
[ 2.451871] 0x000000360000-0x000000380000 : "ML"
[ 2.457566] 0x000000380000-0x000008000000 : "firmware"
[ 2.796080] 0x00000038001c-0x000000780000 : "linux"
[ 2.812435] 0x000000780000-0x000008000000 : "ubi"

0x000008000000 is 128MB. But the default partition table does not use 128MB of flash memory. OpenWrt tries to use that and write values inside of not existing memory and then it write to random place on the flash chip:

https://forum.openwrt.org/viewtopic.php?id=61755

Attachments (0)

Change History (1)

comment:1 Changed 2 years ago by rmilecki

  • Resolution set to invalid
  • Status changed from new to closed

Stop this idiotic FUD. I assume it was you doing the same on IRC yesterday.

Original firmware *does* use 128 MiB of flash memory:

0x000000380000-0x000002180000 : "linux"
0x00000058e8dc-0x000002180000 : "rootfs"
0x000002180000-0x000007b00000 : "brcmnand"
0x000007b00000-0x000008000000 : "OpenVPN"

This devices contains 128 MiB flash, so there isn't anything like writing to random places. If anything is overwritten by OpenWrt at all, it's OpenVPN partition, which should be harmless. I'm not even use if original firmware uses it at all.

Add Comment

Modify Ticket

Action
as closed .
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.