find serial port to router-ONT huawei EG8145V5?
https://mega.nz/file/YgkUUCxC#5NbzFXNf2P3l84nsBVvYkfjpJDuahGs01bnXfQfYSA4
You need to bridge these two points to enable UART.
I believe the order (starting from the left) is RX, NC, VCC, GND, TX.
1 Like
You were right it connects like this, but I can't get into the shell, it only shows boot information
Welcome to minicom 2.7.1
OPCIONES: I18n
Compilado en May 6 2018, 08:02:47.
Port /dev/ttyUSB0, 15:58:06
Presione CTRL-A Z para obtener ayuda sobre teclas especiales
Chip Type is SD5117P
safetycode boot type: spi nand flash
chip type is 0x1, sub chip type is 0x4
Safetycode build: (V500R019C10 Mar 21 2020 - 10:43:31)
Select startcodeA
startcode start at 0x1c020088
Startcode 2017.07 (V500R019C10 V5 - V001)
Chip Type is SD5117P
NAND: SPI_NAND_FLASH_TYPE
flash_type = [0x6]
Nand ID: 0xE5 0x71 0xE5 0x71 0xE5 0x00 0x00 0x00
ECC Match pagesize:2K, oobzie:64, ecctype:8bit
Nand(Hardware): startcode select the uboot to load
the high RAM is :8080103c
startcode uboot boot count:-1
use the main slave_param area from flash, the RAM data is not OK!!!
Use the AllsytemA to load first
Start in Normal Mode
Use the AllsytemA to load success
U-Boot 2017.07 (V500R019C10 V5 - V001)
DRAM: 256 MiB
Boot From NAND flash
Chip Type is SD5117P
NAND: SPI_NAND_FLASH_TYPE
flash_type = [0x6]
Special Nand id table Version 1.23
Nand ID: 0xE5 0x71 0xE5 0x71 0xE5 0x00 0x00 0x00
ECC Match pagesize:2K, oobzie:64, ecctype:8bit
Nand(Hardware): Block:128KB Page:2KB Chip:134217728B OOB:64B ECC:8bit
128 MiB
128 MiB
Using default environment
[UBI-DEBUG]: all in ubi mode
In: serial
Out: serial
Err: serial
Net: phy init failure0
PHY power down !!!
Mbist flag = 0x0, ddr totoal size = 0x10000000
[common/pon_chip_v5/main.c__2089]::CRC:0x3d80a8b4, Magic1:0x5a5a5a5a, Magic2:0xa5a5a5a5, count:0, CommitedArea:0x0, Active:0x0, RunFlag:0x0
UBI: attaching mtd1
ubi0: scanning is finished
ubi0: attached mtd1 (name "mtd=1", size 127 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 1016, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 10, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 5/1, WL threshold: 4096, image sequence number: 1805343795
ubi0: available PEBs: 5, total reserved PEBs: 1011, PEBs reserved for bad PEB handling: 20
Start from main system(0x0)!
CRC:0x3d80a8b4, Magic1:0x5a5a5a5a, Magic2:0xa5a5a5a5, count:1, CommitedArea:0x0, Active:0x0, RunFlag:0x0
Main area: Cert partition Found
Slave area: Cert partition Found
Main area (A) is OK!
CRC:0x93e83925, Magic1:0x5a5a5a5a, Magic2:0xa5a5a5a5, count:1, CommitedArea:0x0, Active:0x0, RunFlag:0x0
Bootcmd:ubi read 0x80907f6c allsystemA 0x1ca000 0x67000; bootm 0x80907fc0
BootArgs:noalign mem=247M flashsize=0x8000000 console=ttyAMA1,115200 root=/dev/mtdblock6 rootflags=image_off=0x231094 rootfstype=squashfs mtdparts=hinand:0x100000(bootcode)raw,0x7f00000(ubilayer_v5) ubi.mtd=1 maxcpus=2 l2_cache=l2x0 con
U-boot Start from NORMAL Mode!
## Booting kernel from Legacy Image at 80907fc0 ...
Image Name: Linux-3.10.53-HULK2
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 1873064 Bytes = 1.8 MiB
Load Address: 80e08000
Entry Point: 80e08000
Match the dtb file index : 7!
Memory Start: 80900000
XIP Kernel Image ... OK
kernel loaded at 0x80908000, end = 0x80aca8a6
Starting kernel ...
Uart base = 0x1010F000
dtb addr = 0x80F89338
Uncompressing Linux... done, booting the kernel.
Booting Linux on physical CPU 0x0
Initializing cgroup subsys cpuset
Initializing cgroup subsys cpu
Initializing cgroup subsys cpuacct
Linux version 3.10.53-HULK2 (ci@SZXRTOSCI10000) (gcc version 4.7.1 (SDK V100R005C00SPC030B050) ) #1 SMP Tue Sep 24 01:18:46 CST 2019
CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7), cr=18c53c7d
CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
Machine: Hisilicon A9, model: HISI-CA9
skbuff priv len is 192.
Memory policy: ECC disabled, Data cache writealloc
On node 0 totalpages: 63232
free_area_init_node: node 0, pgdat c04c2d80, node_mem_map c068d800
Normal zone: 618 pages used for memmap
Normal zone: 0 pages reserved
Normal zone: 63232 pages, LIFO batch:15
[dts]:cpu type is 5115
PERCPU: Embedded 7 pages/cpu @c08fc000 s8064 r8192 d12416 u32768
pcpu-alloc: s8064 r8192 d12416 u32768 alloc=8*4096
pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 62614
Kernel command line: noalign mem=247M flashsize=0x8000000 console=ttyAMA1,115200 root=/dev/mtdblock6 rootflags=image_off=0x231094 rootfstype=squashfs mtdparts=hinand:0x100000(bootcode)raw,0x7f00000(ubilayer_v5) ubi.mtd=1 maxcpus=2 l2_cn
PID hash table entries: 1024 (order: 0, 4096 bytes)
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
allocated 505856 bytes of page_cgroup
please try 'cgroup_disable=memory' option if you don't want memory cgroups
Memory: 247MB = 247MB total
Memory: 244520k/244520k available, 8408k reserved, 0K highmem
Virtual kernel memory layout:
vector : 0xffff0000 - 0xffff1000 ( 4 kB)
fixmap : 0xffe00000 - 0xfffe0000 (1920 kB)
vmalloc : 0xcf800000 - 0xff000000 ( 760 MB)
lowmem : 0xc0000000 - 0xcf700000 ( 247 MB)
modules : 0xbf000000 - 0xc0000000 ( 16 MB)
.text : 0xc0008000 - 0xc044fd70 (4384 kB)
.init : 0xc0450000 - 0xc047cf80 ( 180 kB)
.data : 0xc047e000 - 0xc04c6e80 ( 292 kB)
.bss : 0xc04c6e80 - 0xc04efdc8 ( 164 kB)
SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
Hierarchical RCU implementation.
NR_IRQS:512
smp_twd: clock not found -2
sched_clock: 32 bits at 100MHz, resolution 10ns, wraps every 42949ms
[DTS][LED]-->WARN:Cannot find led info in dtb,make sure there is no led on board
Calibrating delay loop... 1594.16 BogoMIPS (lpj=7970816)
pid_max: default: 32768 minimum: 301
Security Framework initialized
Mount-cache hash table entries: 512
Initializing cgroup subsys memory
Initializing cgroup subsys devices
Initializing cgroup subsys freezer
Initializing cgroup subsys net_cls
Initializing cgroup subsys blkio
Initializing cgroup subsys net_prio
CPU: Testing write buffer coherency: ok
Calibrating local timer... 199.91MHz.
Setting up static identity map for 0xc032da30 - 0xc032da64
CPU1: Booted secondary processor
Brought up 2 CPUs
SMP: Total of 2 processors activated (3188.32 BogoMIPS).
CPU: All CPU(s) started in SVC mode.
NET: Registered protocol family 16
DMA: preallocated 4096 KiB pool for atomic coherent allocations
hw-breakpoint: found 5 (+1 reserved) breakpoint and 1 watchpoint registers.
hw-breakpoint: maximum watchpoint size is 4 bytes.
SD511x chip id:0x51176100
L310 cache controller enabled
l2x0: 16 ways, CACHE_ID 0x410000c9, AUX_CTRL 0x02430001, Cache size: 262144 B
bio: create slab <bio-0> at 0
Switching to clocksource arm,sp804
cfg80211: Calling CRDA to update world regulatory domain
NET: Registered protocol family 2
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 3, 32768 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP: reno registered
UDP hash table entries: 256 (order: 1, 12288 bytes)
UDP-Lite hash table entries: 256 (order: 1, 12288 bytes)
NET: Registered protocol family 1
PCI: CLS 0 bytes, default 64
squashfs: version 4.0 (2009/01/31) Phillip Lougher
jffs2: version 2.2. �© 2001-2006 Red Hat, Inc.
fuse init (API version 7.22)
msgmni has been set to 477
io scheduler noop registered
io scheduler deadline registered
io scheduler cfq registered (default)
brd: module loaded
mtdoops: mtd device (mtddev=name/number) must be supplied
Spi id table Version 1.22
Special nand id table Version 1.33
Hisilicon Flash Memory Controller V100 Device Driver, Version 1.0
flash_type = 0x6
SPI_NAND_FLASH_TYPE
Nand ID: 0xE5 0x71 0xE5 0x71 0xE5 0x00 0x00 0x00
rd_code.opcode 107, if_type = 3, wr_code.opcode 50, if_type = 3
ECC Match pagesize:2K, oobzie:64, ecctype:8bit
Nand(Hardware): Block:128KB Page:2KB Chip:128MB OOB:64B ECC:8bit
NAND device: Manufacturer ID: 0xe5, Chip ID: 0x71 (Unknown DS35Q1GA-IB), 128MiB, page size: 2048, OOB size: 64
NAND_ECC_NONE selected by board driver. This is not recommended!
raw_mtd: treat mtd0 as raw mtd.
2 cmdlinepart partitions found on MTD device hinand
Creating 2 MTD partitions on "hinand":
0x000000000000-0x000000100000 : "bootcode"
0x000000100000-0x000008000000 : "ubilayer_v5"
softdog: Software Watchdog Timer: 0.08 initialized. soft_noboot=0 soft_margin=60 sec soft_panic=0 (nowayout=0)
oprofile: no performance counters
oprofile: using timer interrupt.
TCP: cubic registered
NET: Registered protocol family 17
ThumbEE CPU extension supported.
mapp kbox ddrram_address=0, ddrram_size=0 fail[WARNNING]:Kbox device descriptor struct kbox_dev_des Intialization Failed
kbox: init ddrram fail ret=-99
kbox: load OK
UBI: attaching mtd1 to ubi0
UBI: scanning is finished
UBI: attached mtd1 (name "ubilayer_v5", size 127 MiB) to ubi0
UBI: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
UBI: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
UBI: VID header offset: 2048 (aligned 2048), data offset: 4096
UBI: good PEBs: 1016, bad PEBs: 0, corrupted PEBs: 0
UBI: user volume: 10, internal volumes: 1, max. volumes count: 128
UBI: max/mean erase counter: 5/1, WL threshold: 512, image sequence number: 1805343795
UBI: available PEBs: 5, total reserved PEBs: 1011, PEBs reserved for bad PEB handling: 20
UBI: background thread "ubi_bgt0d" started, PID 317
Warning: unable to open an initial console.
squashfs_cache_init: sqcachesize=8.
VFS: Mounted root (squashfs filesystem) readonly on device 31:6.
Freeing unused kernel memory: 176K (c0450000 - c047c000)
******** Total Boot time: 1080 ms, uncompress initrd cost 0 ms ********
Serial: 8250/16550 driver, 4 ports, IRQ sharing disabled
1010e000.uart: ttyAMA0 at MMIO 0x1010e000 (irq = 77) is a 16550A
Yes, serial input is not accepted at all.
You can try shorting the NAND chip to halt uboot, but I never got that to work.
Be aware it can damage hardware and it is not easy to rewrite the memory. It's 35-series serial NAND, versus the usual 25-series serial NOR.
1 Like
how is that chip technique to enter u-boot?
putting vcc or ground on any pin of the cpu?
for the boot to fail
Short pins of the flash module to ground. Might take a few tries and I never got this to work reliably btw.
Pin shorting
In the past we used to suggest that people shorted a few pins of the flash; when CFE booted and attempted to perform the CRC32 there would be a flash read error which would change the outcome of the CRC and the resulting failure would force CFE into recovery mode. It's a great trick, but over the years we've learned that people are idiots and will take that as an invitation to poke mangle and short just about every pin on the device based on some irrational belief that if they find the right pin everything will magically work again. You do not want someone paranoid at the thought of breaking the device scraping up every single electrical connection on the device – it never ends well, and generally results in the flash chip or the router being damaged in the process.