Modify

Opened 9 years ago

Closed 8 years ago

Last modified 4 years ago

#5337 closed defect (fixed)

Kernel CRC error with a BCM96358

Reported by: anonymous Owned by: developers
Priority: normal Milestone: Barrier Breaker 14.07
Component: base system Version: Trunk
Keywords: CRC kernel error Cc:

Description

I recently bought a Pirelli A226G and tried to install openWrt using the flashimage command within CFE, but I'm always getting a Linux Kernel CRC error.
The only files I can install (due to the version tag) are openwrt-AGPF-S0-squashfs-bccfe-cfe.bin and openwrt-AGPF-S0-squashfs-agv2+w-cfe.bin.

Here's the log (revision 16436):

CFE version 1.0.38-8.7 for BCM96358 (32bit,SP,BE)
Build Date: mer dic 19 13:26:42 CET 2007 (dela@buildserver)
Copyright (C) 2000-2005 Broadcom Corporation.

Boot Address 0xbe000000

Initializing Arena.
Initializing Devices.
Parallel flash device: name AM29LV320MT, id 0x2201, size 8192KB
CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz
CPU running TP0
Total memory: 33554432 bytes (32MB)

Total memory used by CFE:  0x80401000 - 0x80528330 (1209136)
Initialized Data:          0x8041DD90 - 0x8041FB60 (7632)
BSS Area:                  0x8041FB60 - 0x80426330 (26576)
Local Heap:                0x80426330 - 0x80526330 (1048576)
Stack Area:                0x80526330 - 0x80528330 (8192)
Text (code) segment:       0x80401000 - 0x8041DD88 (118152)
Boot area (physical):      0x00529000 - 0x00569000
Relocation Factor:         I:00000000 - D:00000000

MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be010000
Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Board Id (0-6)                    : DWV-S0
Number of MAC Addresses (1-32)    : 10
Base MAC Address                  : 00:10:18:00:00:00
PSI Size (1-64) KBytes            : 24
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be010000
Trying to boot from previous MAIN image (0x262336cb) ...
Code Address: 0x262336CB, Entry Address: 0xbbba42d7
SGP - Flash Kernel Address: 0xBE020100
SGP - ulImgCrc : 0x2079A05F
SGP - Tag->kernelLen: 0x000DFF00
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0x2079A05F - calculated: 0xCA9E902E
SGP - Decompression Kernel length: 0x19807F4A pucSrc: 0xBE02010C
web info: Waiting for connection on socket 0.

Attachments (7)

pirelli-router.patch (3.8 KB) - added by Daniel Dickinson <crazycshore@…> 9 years ago.
patch that attempts to get pirelli router other than alice gate working
analyzetag.c (24.4 KB) - added by Daniel Dickinson <crazycshore@…> 9 years ago.
imagetag (from firmware image) analyzer
analyzetag.2.c (24.5 KB) - added by Daniel Dickinson <crazycshore@…> 9 years ago.
pirelli-router.2.patch (1.1 KB) - added by Daniel Dickinson <crazycshore@…> 9 years ago.
pirelli-226g-default.patch (634 bytes) - added by Daniel Dickinson <crazycshore@…> 9 years ago.
pirelli-226g-htonl.patch (1.3 KB) - added by Daniel Dickinson <crazycshore@…> 9 years ago.
pirelli-226g-board.patch (2.2 KB) - added by Daniel Dickinson <crazycshore@…> 9 years ago.
should get the Pirelli A226G to booting to at least starting init

Download all attachments as: .zip

Change History (38)

comment:1 follow-up: Changed 9 years ago by Daniel Dickinson <crazycshore@…>

Can you send me a copy of an original (pirelli) firmware image? Also a copy of the firmware image that doesn't work and an associated boot log would be helpful.

comment:2 Changed 9 years ago by anonymous

The Pirelli Firmware is an openRG firmware, I don't know if it is helpful; I can't flash it via CFE.

I uploaded them here:
http://www.sendspace.com/file/l7bbi8

The console log is from this file inside the zip archive: openwrt-AGPF-S0-squashfs-bccfe-cfe.bin

comment:3 Changed 9 years ago by Daniel Dickinson <crazycshore@…>

What message does the pirelli firmware give when you try to flash via CFE?

What about the -ag306 firmware via web interface?

comment:4 Changed 9 years ago by anonymous

What do you mean by "web interface"? The original pirelli web interface or the CFE web interface? Unfortunately I can't try the pirelli one as I don't have an image I could flash from CFE. So I tried the "openwrt-AGPF-S0-squashfs-agv2+w-cfe.bin" with the CFE web interface on 192.168.1.1:

web info: Waiting for connection on socket 1.
web info: Waiting for connection on socket 0.
web info: Waiting for connection on socket 1.
web info: Waiting for connection on socket 0.
CFE> SGP  tagVersion : 8
web info: Upload 2490372 bytes, Broadcom image format.
CFE> SGP  tagVersion : 8
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be010000
getPartitionFromTag: pTag1 found
MDL - getTagFromPartition: tag found, at address be010000

remaining to flash .......  00065536 at 0xbe400000:


.
*** Image flash done *** !

Resetting board...


CFE version 1.0.38-8.7 for BCM96358 (32bit,SP,BE)
Build Date: mer dic 19 13:26:42 CET 2007 (dela@buildserver)
Copyright (C) 2000-2005 Broadcom Corporation.

Boot Address 0xbe000000

Initializing Arena.
Initializing Devices.
Parallel flash device: name AM29LV320MT, id 0x2201, size 8192KB
CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz
CPU running TP0
Total memory: 33554432 bytes (32MB)

Total memory used by CFE:  0x80401000 - 0x80528330 (1209136)
Initialized Data:          0x8041DD90 - 0x8041FB60 (7632)
BSS Area:                  0x8041FB60 - 0x80426330 (26576)
Local Heap:                0x80426330 - 0x80526330 (1048576)
Stack Area:                0x80526330 - 0x80528330 (8192)
Text (code) segment:       0x80401000 - 0x8041DD88 (118152)
Boot area (physical):      0x00529000 - 0x00569000
Relocation Factor:         I:00000000 - D:00000000

MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Board Id (0-6)                    : DWV-S0
Number of MAC Addresses (1-32)    : 10
Base MAC Address                  : 00:10:18:00:00:00
PSI Size (1-64) KBytes            : 24
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0x262336cb) ...
Code Address: 0x262336CB, Entry Address: 0xbbba42d7
SGP - Flash Kernel Address: 0xBE020100
SGP - ulImgCrc : 0x2079A05F
SGP - Tag->kernelLen: 0x000DFF00
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0x2079A05F - calculated: 0xCA9E902E
SGP - Decompression Kernel length: 0x19807F4A pucSrc: 0xBE02010C
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0xffffffff) ...
Code Address: 0xFFFFFFFF, Entry Address: 0xffffffff
SGP - Flash Kernel Address: 0xBE320200
SGP - ulImgCrc : 0x2079A05F
SGP - Tag->kernelLen: 0x000DFF00
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0x2079A05F - calculated: 0xCA9E902E
SGP - Decompression Kernel length: 0xFFFFFFFF pucSrc: 0xBE32020C
web info: Waiting for connection on socket 0.
CFE>

Here's the log when trying to flash the pirelli image via CFE:

CFE> flashimage 192.168.1.2:pirelli.rmt
Loading 192.168.1.2:pirelli.rmt ...
Finished loading 7373682 bytes
SGP  tagVersion : 0
Firmware tag version [0] is not compatible with the current Tag version [8].
image tag not valid 80800000
*** command status = -1

Changed 9 years ago by Daniel Dickinson <crazycshore@…>

patch that attempts to get pirelli router other than alice gate working

comment:5 Changed 9 years ago by Daniel Dickinson <crazycshore@…>

I actually meant the original pirelli one but since you can't use it, it's a moot point. Could you try with both of the two DWV-SO (a226g) images that get generated by this patch?

Please note that you need to

make target/linux/clean
make tools/firmware-utils/clean

first.

comment:6 Changed 9 years ago by Daniel Dickinson <crazycshore@…>

sorry that should be

make target/linux/clean
make tools/firmware-utils/clean

on two separate lines, and that's from the root of the openwrt trunk

comment:7 Changed 9 years ago by anonymous

Thanks a lot for your work! Unfortunately I'm still getting a CRC error with both of the images:

bccfe:

CFE> flashimage 192.168.1.34:bccfe.bin
Loading 192.168.1.34:bccfe.bin ...
Finished loading 2490372 bytes
SGP  tagVersion : 8
Flashing MAIN image at address: BE010000
signiture_2: IMAGE
remaining to flash .......  00000004



Resetting board...


CFE version 1.0.38-8.7 for BCM96358 (32bit,SP,BE)
Build Date: mer dic 19 13:26:42 CET 2007 (dela@buildserver)
Copyright (C) 2000-2005 Broadcom Corporation.

Boot Address 0xbe000000

Initializing Arena.
Initializing Devices.
Parallel flash device: name AM29LV320MT, id 0x2201, size 8192KB
CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz
CPU running TP0
Total memory: 33554432 bytes (32MB)

Total memory used by CFE:  0x80401000 - 0x80528330 (1209136)
Initialized Data:          0x8041DD90 - 0x8041FB60 (7632)
BSS Area:                  0x8041FB60 - 0x80426330 (26576)
Local Heap:                0x80426330 - 0x80526330 (1048576)
Stack Area:                0x80526330 - 0x80528330 (8192)
Text (code) segment:       0x80401000 - 0x8041DD88 (118152)
Boot area (physical):      0x00529000 - 0x00569000
Relocation Factor:         I:00000000 - D:00000000

MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Board Id (0-6)                    : DWV-S0
Number of MAC Addresses (1-32)    : 10
Base MAC Address                  : 00:10:18:00:00:00
PSI Size (1-64) KBytes            : 24
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0x41d9a2c1) ...
Code Address: 0x41D9A2C1, Entry Address: 0x4305ed1d
SGP - Flash Kernel Address: 0xBE020100
SGP - ulImgCrc : 0x7CFE9544
SGP - Tag->kernelLen: 0x000DFF00
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0x7CFE9544 - calculated: 0x46F7D1A4
SGP - Decompression Kernel length: 0x48C687F9 pucSrc: 0xBE02010C
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0xffffffff) ...
Code Address: 0xFFFFFFFF, Entry Address: 0xffffffff
SGP - Flash Kernel Address: 0xBE320200
SGP - ulImgCrc : 0x7CFE9544
SGP - Tag->kernelLen: 0x000DFF00
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0x7CFE9544 - calculated: 0x46F7D1A4
SGP - Decompression Kernel length: 0xFFFFFFFF pucSrc: 0xBE32020C
web info: Waiting for connection on socket 0.
CFE>

agv2+:

CFE> flashimage 192.168.1.34:agv2.bin
Loading 192.168.1.34:agv2.bin ...
Finished loading 2490372 bytes
SGP  tagVersion : 8
Flashing MAIN image at address: BE010000
signiture_2: IMAGE
remaining to flash .......  00000004



Resetting board...


CFE version 1.0.38-8.7 for BCM96358 (32bit,SP,BE)
Build Date: mer dic 19 13:26:42 CET 2007 (dela@buildserver)
Copyright (C) 2000-2005 Broadcom Corporation.

Boot Address 0xbe000000

Initializing Arena.
Initializing Devices.
Parallel flash device: name AM29LV320MT, id 0x2201, size 8192KB
CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz
CPU running TP0
Total memory: 33554432 bytes (32MB)

Total memory used by CFE:  0x80401000 - 0x80528330 (1209136)
Initialized Data:          0x8041DD90 - 0x8041FB60 (7632)
BSS Area:                  0x8041FB60 - 0x80426330 (26576)
Local Heap:                0x80426330 - 0x80526330 (1048576)
Stack Area:                0x80526330 - 0x80528330 (8192)
Text (code) segment:       0x80401000 - 0x8041DD88 (118152)
Boot area (physical):      0x00529000 - 0x00569000
Relocation Factor:         I:00000000 - D:00000000

MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Board Id (0-6)                    : DWV-S0
Number of MAC Addresses (1-32)    : 10
Base MAC Address                  : 00:10:18:00:00:00
PSI Size (1-64) KBytes            : 24
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0x41d9a2c1) ...
Code Address: 0x41D9A2C1, Entry Address: 0x4305ed1d
SGP - Flash Kernel Address: 0xBE020100
SGP - ulImgCrc : 0xE802F30A
SGP - Tag->kernelLen: 0x000D0B0D
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0xE802F30A - calculated: 0xE3B7D27B
SGP - Decompression Kernel length: 0x48C687F9 pucSrc: 0xBE02010C
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0xffffffff) ...
Code Address: 0xFFFFFFFF, Entry Address: 0xffffffff
SGP - Flash Kernel Address: 0xBE320200
SGP - ulImgCrc : 0xE802F30A
SGP - Tag->kernelLen: 0x000D0B0D
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0xE802F30A - calculated: 0xE3B7D27B
SGP - Decompression Kernel length: 0xFFFFFFFF pucSrc: 0xBE32020C
web info: Waiting for connection on socket 0.
CFE>

comment:8 Changed 9 years ago by Daniel Dickinson <crazycshore@…>

Hi,

There should be two new images with DWV-S0 in the name. Those are the images I'd like you to try. They're specifically for your board.

comment:9 Changed 9 years ago by anonymous

Hi Daniel,

sorry for that, here are the logs for the newly generated files:

openwrt-DWV-S0-squashfs-a226g-cfe.bin:

CFE> flashimage 192.168.1.34:a226g.bin
Loading 192.168.1.34:a226g.bin ...
Finished loading 2490372 bytes
SGP  tagVersion : 8
Flashing MAIN image at address: BE010000
signiture_2: IMAGE
remaining to flash .......  00000004



Resetting board...


CFE version 1.0.38-8.7 for BCM96358 (32bit,SP,BE)
Build Date: mer dic 19 13:26:42 CET 2007 (dela@buildserver)
Copyright (C) 2000-2005 Broadcom Corporation.

Boot Address 0xbe000000

Initializing Arena.
Initializing Devices.
Parallel flash device: name AM29LV320MT, id 0x2201, size 8192KB
CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz
CPU running TP0
Total memory: 33554432 bytes (32MB)

Total memory used by CFE:  0x80401000 - 0x80528330 (1209136)
Initialized Data:          0x8041DD90 - 0x8041FB60 (7632)
BSS Area:                  0x8041FB60 - 0x80426330 (26576)
Local Heap:                0x80426330 - 0x80526330 (1048576)
Stack Area:                0x80526330 - 0x80528330 (8192)
Text (code) segment:       0x80401000 - 0x8041DD88 (118152)
Boot area (physical):      0x00529000 - 0x00569000
Relocation Factor:         I:00000000 - D:00000000

MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Board Id (0-6)                    : DWV-S0
Number of MAC Addresses (1-32)    : 10
Base MAC Address                  : 00:10:18:00:00:00
PSI Size (1-64) KBytes            : 24
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0x41d9a2c1) ...
Code Address: 0x41D9A2C1, Entry Address: 0x4305ed1d
SGP - Flash Kernel Address: 0xBE020100
SGP - ulImgCrc : 0xE802F30A
SGP - Tag->kernelLen: 0x000D0B0D
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0xE802F30A - calculated: 0xE3B7D27B
SGP - Decompression Kernel length: 0x48C687F9 pucSrc: 0xBE02010C
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0xffffffff) ...
Code Address: 0xFFFFFFFF, Entry Address: 0xffffffff
SGP - Flash Kernel Address: 0xBE320200
SGP - ulImgCrc : 0xE802F30A
SGP - Tag->kernelLen: 0x000D0B0D
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0xE802F30A - calculated: 0xE3B7D27B
SGP - Decompression Kernel length: 0xFFFFFFFF pucSrc: 0xBE32020C
web info: Waiting for connection on socket 0.
CFE>

openwrt-DWV-S0-squashfs-bccfe-cfe.bin:

CFE>
CFE> flashimage 192.168.1.34:cfe.bin
Loading 192.168.1.34:cfe.bin ...
Finished loading 2490372 bytes
SGP  tagVersion : 8
Flashing MAIN image at address: BE010000
signiture_2: IMAGE
remaining to flash .......  00000004



Resetting board...


CFE version 1.0.38-8.7 for BCM96358 (32bit,SP,BE)
Build Date: mer dic 19 13:26:42 CET 2007 (dela@buildserver)
Copyright (C) 2000-2005 Broadcom Corporation.

Boot Address 0xbe000000

Initializing Arena.
Initializing Devices.
Parallel flash device: name AM29LV320MT, id 0x2201, size 8192KB
CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz
CPU running TP0
Total memory: 33554432 bytes (32MB)

Total memory used by CFE:  0x80401000 - 0x80528330 (1209136)
Initialized Data:          0x8041DD90 - 0x8041FB60 (7632)
BSS Area:                  0x8041FB60 - 0x80426330 (26576)
Local Heap:                0x80426330 - 0x80526330 (1048576)
Stack Area:                0x80526330 - 0x80528330 (8192)
Text (code) segment:       0x80401000 - 0x8041DD88 (118152)
Boot area (physical):      0x00529000 - 0x00569000
Relocation Factor:         I:00000000 - D:00000000

MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Board Id (0-6)                    : DWV-S0
Number of MAC Addresses (1-32)    : 10
Base MAC Address                  : 00:10:18:00:00:00
PSI Size (1-64) KBytes            : 24
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0x41d9a2c1) ...
Code Address: 0x41D9A2C1, Entry Address: 0x4305ed1d
SGP - Flash Kernel Address: 0xBE020100
SGP - ulImgCrc : 0x7CFE9544
SGP - Tag->kernelLen: 0x000DFF00
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0x7CFE9544 - calculated: 0x46F7D1A4
SGP - Decompression Kernel length: 0x48C687F9 pucSrc: 0xBE02010C
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0xffffffff) ...
Code Address: 0xFFFFFFFF, Entry Address: 0xffffffff
SGP - Flash Kernel Address: 0xBE320200
SGP - ulImgCrc : 0x7CFE9544
SGP - Tag->kernelLen: 0x000DFF00
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0x7CFE9544 - calculated: 0x46F7D1A4
SGP - Decompression Kernel length: 0xFFFFFFFF pucSrc: 0xBE32020C
web info: Waiting for connection on socket 0.
CFE>

Changed 9 years ago by Daniel Dickinson <crazycshore@…>

imagetag (from firmware image) analyzer

comment:10 follow-up: Changed 9 years ago by Daniel Dickinson <crazycshore@…>

Using the analyzetag program I attached above I have determined that I have no clue what the kernelCRC is being calculated on. It's not the kernel in the image because I've tried that. Without more information (source code or some kind of details on where the CRC is coming from) I can't do anything more.

If you can get me the source code that would be ideal.

comment:11 in reply to: ↑ 10 Changed 9 years ago by Daniel Dickinson <crazycshore@…>

I've determined that there was a bug in my analyzetag program. now I'm getting the results I expect, so I can continue to work on this. The revised analyzetag.c is attached.

Changed 9 years ago by Daniel Dickinson <crazycshore@…>

comment:12 Changed 9 years ago by Daniel Dickinson <crazycshore@…>

Could you please try this again and post the OpenWRT firmware image you try with. I have an idea, but I need an image and bootlog to test with (so I can check the CRC against the one the bootlog shows in the error output).

comment:13 Changed 9 years ago by Daniel Dickinson <crazycshore@…>

Also, could you try with the (next) attached patch, and also post the bootlog and an image created with it?

Changed 9 years ago by Daniel Dickinson <crazycshore@…>

comment:14 Changed 9 years ago by anonymous

Thanks for the updates! :)
I compiled revision 16485 with pirelli-router.patch (the old one) -> openwrt-DWV-S0-squashfs-a226g-cfe.bin -> http://www.sendspace.com/file/5sm79q

CFE> flashimage 192.168.1.2:openwrt-DWV-S0-squashfs-a226g-cfe.bin
Loading 192.168.1.2:openwrt-DWV-S0-squashfs-a226g-cfe.bin ...
Finished loading 2490372 bytes
SGP  tagVersion : 8
Flashing MAIN image at address: BE010000
signiture_2: IMAGE
remaining to flash .......  00000004



Resetting board...


CFE version 1.0.38-8.7 for BCM96358 (32bit,SP,BE)
Build Date: mer dic 19 13:26:42 CET 2007 (dela@buildserver)
Copyright (C) 2000-2005 Broadcom Corporation.

Boot Address 0xbe000000

Initializing Arena.
Initializing Devices.
Parallel flash device: name AM29LV320MT, id 0x2201, size 8192KB
CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz
CPU running TP0
Total memory: 33554432 bytes (32MB)

Total memory used by CFE:  0x80401000 - 0x80528330 (1209136)
Initialized Data:          0x8041DD90 - 0x8041FB60 (7632)
BSS Area:                  0x8041FB60 - 0x80426330 (26576)
Local Heap:                0x80426330 - 0x80526330 (1048576)
Stack Area:                0x80526330 - 0x80528330 (8192)
Text (code) segment:       0x80401000 - 0x8041DD88 (118152)
Boot area (physical):      0x00529000 - 0x00569000
Relocation Factor:         I:00000000 - D:00000000

MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Board Id (0-6)                    : DWV-S0
Number of MAC Addresses (1-32)    : 10
Base MAC Address                  : 00:10:18:00:00:00
PSI Size (1-64) KBytes            : 24
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0x41d9a2c1) ...
Code Address: 0x41D9A2C1, Entry Address: 0x4305ed1d
SGP - Flash Kernel Address: 0xBE020100
SGP - ulImgCrc : 0x5BE545E5
SGP - Tag->kernelLen: 0x000D0AF4
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0x5BE545E5 - calculated: 0x155CD1C4
SGP - Decompression Kernel length: 0x48C687F9 pucSrc: 0xBE02010C
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0xffffffff) ...
Code Address: 0xFFFFFFFF, Entry Address: 0xffffffff
SGP - Flash Kernel Address: 0xBE320200
SGP - ulImgCrc : 0x5BE545E5
SGP - Tag->kernelLen: 0x000D0AF4
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0x5BE545E5 - calculated: 0x155CD1C4
SGP - Decompression Kernel length: 0xFFFFFFFF pucSrc: 0xBE32020C
web info: Waiting for connection on socket 0.
CFE>

comment:15 Changed 9 years ago by anonymous

As for the pirelli-router.2.patch: I'm downloading revision 16935 now and I'll apply only the 2nd patch - I hope that's okay, if not please correct me.

comment:16 Changed 9 years ago by anonymous

Revision 16935 with pirelli-router.2.patch:
openwrt-AGPF-S0-squashfs-agv2+w-cfe.bin
http://www.sendspace.com/file/rd79y5

Finished loading 2359300 bytes
SGP  tagVersion : 8
Flashing MAIN image at address: BE010000
signiture_2: IMAGE
remaining to flash .......  00000004



Resetting board...


CFE version 1.0.38-8.7 for BCM96358 (32bit,SP,BE)
Build Date: mer dic 19 13:26:42 CET 2007 (dela@buildserver)
Copyright (C) 2000-2005 Broadcom Corporation.

Boot Address 0xbe000000

Initializing Arena.
Initializing Devices.
Parallel flash device: name AM29LV320MT, id 0x2201, size 8192KB
CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz
CPU running TP0
Total memory: 33554432 bytes (32MB)

Total memory used by CFE:  0x80401000 - 0x80528330 (1209136)
Initialized Data:          0x8041DD90 - 0x8041FB60 (7632)
BSS Area:                  0x8041FB60 - 0x80426330 (26576)
Local Heap:                0x80426330 - 0x80526330 (1048576)
Stack Area:                0x80526330 - 0x80528330 (8192)
Text (code) segment:       0x80401000 - 0x8041DD88 (118152)
Boot area (physical):      0x00529000 - 0x00569000
Relocation Factor:         I:00000000 - D:00000000

MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Board Id (0-6)                    : DWV-S0
Number of MAC Addresses (1-32)    : 10
Base MAC Address                  : 00:10:18:00:00:00
PSI Size (1-64) KBytes            : 24
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0xb46a0452) ...
Code Address: 0xB46A0452, Entry Address: 0x7ebebebb
SGP - Flash Kernel Address: 0xBE020100
SGP - ulImgCrc : 0xAE75C84A
SGP - Tag->kernelLen: 0x000BBC71
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0xAE75C84A - calculated: 0x43AD75F3
SGP - Decompression Kernel length: 0x558AB7E6 pucSrc: 0xBE02010C
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0xffffffff) ...
Code Address: 0xFFFFFFFF, Entry Address: 0xffffffff
SGP - Flash Kernel Address: 0xBE320200
SGP - ulImgCrc : 0xAE75C84A
SGP - Tag->kernelLen: 0x000BBC71
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0xAE75C84A - calculated: 0x43AD75F3
SGP - Decompression Kernel length: 0xFFFFFFFF pucSrc: 0xBE32020C
web info: Waiting for connection on socket 0.
CFE>

comment:17 Changed 9 years ago by anonymous

Revision 16935 with pirelli-router.2.patch:
openwrt-AGPF-S0-squashfs-bccfe-cfe.bin
http://www.sendspace.com/file/fhrnxx

Finished loading 2359300 bytes
SGP  tagVersion : 8
Flashing MAIN image at address: BE010000
signiture_2: IMAGE
remaining to flash .......  00000004



Resetting board...


CFE version 1.0.38-8.7 for BCM96358 (32bit,SP,BE)
Build Date: mer dic 19 13:26:42 CET 2007 (dela@buildserver)
Copyright (C) 2000-2005 Broadcom Corporation.

Boot Address 0xbe000000

Initializing Arena.
Initializing Devices.
Parallel flash device: name AM29LV320MT, id 0x2201, size 8192KB
CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz
CPU running TP0
Total memory: 33554432 bytes (32MB)

Total memory used by CFE:  0x80401000 - 0x80528330 (1209136)
Initialized Data:          0x8041DD90 - 0x8041FB60 (7632)
BSS Area:                  0x8041FB60 - 0x80426330 (26576)
Local Heap:                0x80426330 - 0x80526330 (1048576)
Stack Area:                0x80526330 - 0x80528330 (8192)
Text (code) segment:       0x80401000 - 0x8041DD88 (118152)
Boot area (physical):      0x00529000 - 0x00569000
Relocation Factor:         I:00000000 - D:00000000

MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Board Id (0-6)                    : DWV-S0
Number of MAC Addresses (1-32)    : 10
Base MAC Address                  : 00:10:18:00:00:00
PSI Size (1-64) KBytes            : 24
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0xb46a0452) ...
Code Address: 0xB46A0452, Entry Address: 0x7ebebebb
SGP - Flash Kernel Address: 0xBE020100
SGP - ulImgCrc : 0x8E29E5E6
SGP - Tag->kernelLen: 0x000BFF00
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0x8E29E5E6 - calculated: 0x15109F59
SGP - Decompression Kernel length: 0x558AB7E6 pucSrc: 0xBE02010C
MDL - getTagFromPartition: tag found, at address be010000
MDL - getTagFromPartition: tag found, at address be400000
Trying to boot from previous MAIN image (0xffffffff) ...
Code Address: 0xFFFFFFFF, Entry Address: 0xffffffff
SGP - Flash Kernel Address: 0xBE320200
SGP - ulImgCrc : 0x8E29E5E6
SGP - Tag->kernelLen: 0x000BFF00
SGP - Flash Kernel Address: 0xBE020100
Linux kernel CRC error.  Corrupted image?
SGP - Tag Kernel crc : 0x8E29E5E6 - calculated: 0x15109F59
SGP - Decompression Kernel length: 0xFFFFFFFF pucSrc: 0xBE32020C
web info: Waiting for connection on socket 0.
CFE>

Changed 9 years ago by Daniel Dickinson <crazycshore@…>

Changed 9 years ago by Daniel Dickinson <crazycshore@…>

comment:18 Changed 9 years ago by Daniel Dickinson <crazycshore@…>

Ok, I've got another couple of possibilities. Can you try with the each of the two new patches? Each should be on a fresh tree (i.e. when doing the second patch, don't do it on top of the other one). If one works please let me know that, otherwise, please post a boot log and firmware as you did here. It's been helpful, and I think I've got it now. -default is probably the one you want, but I could be wrong on that point.

comment:19 Changed 9 years ago by anonymous

Thanks Daniel,

unfortunately none of the firmwares generated work; I uploaded all the files and logs here:
http://www.sendspace.com/file/t8epob

Maybe my board is broken?

comment:20 Changed 9 years ago by Daniel Dickinson <crazycshore@…>

Ok, I can definitively say that the calculated size of the kernel in the images matches my analyzetag calculation. That means there's something fishy with the CRC in the image.

There a problem with the build process. The CRC that is being put in the header doesn't match the CRC of the kernel that ends up in the image.

1) Could be needing to do a fresh svn checkout and build.
2) Maybe problems with building OpenWRT on your OS?
3) it's not the imagetag code because it works correctly for other people

What OS are you building on?
What compiler?
Have you done a fresh checkout for these builds?
What CPU?
What kind of computer?

comment:21 Changed 9 years ago by anonymous

I did a fresh checkout for all of your patches (always the revision you made the patch for); I'm on debian linux 2.6.18-6-686, gcc version 4.1.2 20061115, and my CPU is an Intel Pentium 4.

Could we try the binaries generated on your machine?

comment:22 Changed 9 years ago by Daniel Dickinson <crazycshore@…>

comment:23 Changed 9 years ago by Daniel Dickinson <crazycshore@…>

nevermind. I know that won't work (I just analyzetag'ed it). Hmmm....I'll get back to you

comment:24 Changed 9 years ago by Daniel Dickinson <crazycshore@…>

Can you try the link mentioned above? I've updated it with an image that should work. If it doesn't please show the bootlog (it may get further but stop because of an unknown board_id).

comment:25 Changed 9 years ago by anonymous

Thanks a lot! You're right, now I'm getting this:

Closing network.
Starting program at 0x80010000
Linux version 2.6.27.28 (daniel@daniloth) (gcc version 4.1.2) #7 Thu Jul 30 11:24:45 EDT 2009
Detected Broadcom 0x6358 CPU revision a1
CPU frequency is 300000000 Hz
32MB of RAM installed
registering 40 GPIOs
board_bcm963xx: CFE version: 1.0.38-8.7
board_bcm963xx: unknown bcm963xx board: DWV-S0
console [early0] enabled
CPU revision is: 0002a010 (Broadcom BCM6358)
Kernel panic - not syncing: unable to detect bcm963xx board

Changed 9 years ago by Daniel Dickinson <crazycshore@…>

should get the Pirelli A226G to booting to at least starting init

comment:26 Changed 9 years ago by anonymous

Thanks a lot Daniel, I now get to the BusyBox-shell! Can you please add the patch to the trunk?

comment:27 in reply to: ↑ 1 Changed 9 years ago by anonymous

Replying to Daniel Dickinson <crazycshore@…>:

Can you send me a copy of an original (pirelli) firmware image? Also a copy of the firmware image that doesn't work and an associated boot log would be helpful.

Dear Daniel .
Can I ask the Lord of the firmware image to the router Pirelli DRG 226g so that you can upload to the router without problem. Also, there is a problem with the registration due to sip.freeconet.pl freeconet using 2 IP addresses under one domain. Router shows unrechable proxy. The logs have a DNS error .
Pozdrawiam Artur

comment:28 Changed 8 years ago by florian

  • Resolution set to fixed
  • Status changed from new to closed

Applied in [17190], thanks guys !

comment:29 Changed 8 years ago by Jacobobo

Hello. So who knows how to modify the firmware / software so that the gate sent a reply, not only with negotiated codec, but also the characteristics of time-frame codec? Currently, the field goal that left blank. And I would like to send information from what time frame should come codec.

comment:30 Changed 7 years ago by anonymous

Ale dupa nikt tu nie pomaga :(

comment:31 Changed 4 years ago by jow

  • Milestone changed from Attitude Adjustment 12.09 to Barrier Breaker 14.07

Milestone Attitude Adjustment 12.09 deleted

Add Comment

Modify Ticket

Action
as closed .
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.