Welcome! Log In Create A New Profile

Advanced

steam link hacks

Posted by feas 
Re: steam link hacks
February 16, 2018 06:47AM
alwex Wrote:
-------------------------------------------------------
> TP50 - RX
> TP51 - TX
> (look for these pins near edge of the board between two USB ports)
>
> GND pad are near any mounting hole. TP175 also should be ground but I wasn't able to solder to it
> :)
>
Totally a great news. Now, it is time for Bodhi to wave his magic wand and also hope will include a support for an FDT kernel on this uboot.
Re: steam link hacks
February 16, 2018 02:38PM
I don't think bodhi has a steam link, otherwise he wouldn't have asked me for the output of all those commands. Or did I miss something?
Re: steam link hacks
February 16, 2018 09:44PM
I do have a Steamlink. Just too busy to open it up! I'm afraid I'm going to spend all my weekend hacking if I did :) Besides, I'd like others to participate, I don't want to do it all myself.

I'm finishing up the Dreamplug instruction in the other thread and will get to see if I can connect serial console for the Steamlink.

-bodhi
===========================
Forum Wiki
bodhi's corner
Sonderling
Re: steam link hacks
February 18, 2018 11:13AM
bodhi Wrote:
-------------------------------------------------------
> I do have a Steamlink. Just too busy to open it
> up! I'm afraid I'm going to spend all my weekend
> hacking if I did :) Besides, I'd like others to
> participate, I don't want to do it all myself.
>

I would help, but I don't have the tools or the knowhow. Frankly, when comes to soldering I tend to fry either my fingers or the board.
Comes with the condition I guess.
Re: steam link hacks
February 18, 2018 03:02PM
I'm in the process of moving apartments and have my soldering stuff already packed up and sealed. I would rather not take them out again before moving. Otherwise I would be happy to solder some wires on and see if the console pins work. I could do it in... let's say, about 3 weeks, or a month :(
Re: steam link hacks
February 21, 2018 02:05PM
As soon as we know for sure, that we can have serial console access and use it to repurpose the steam link I will order a hand full of those cheap serial to USB converter with CP2102 chips from China. Those boards are small and about $1.20 each, so I don't have to think twice about fitting them permanently inside the case with the microUSB port waiting.

https://www.ebay.com/itm/Replace-FT232-MIKRO-USB-to-UART-TTL-Modul-6Pin-Seriell-Konverter-CP2102-STC/322684392631?hash=item4b217d14b7:g:QcgAAOSw689Zkskg
Re: steam link hacks
February 21, 2018 09:34PM
I used to use these things too. Since last year, I just use RPi Zero / minicom / kwboot . Just connect the box serial port to RPi zero's serial port directly, then run minicom or kwboot. RPi Zero was 99 cents 2 years ago for some time?
Re: steam link hacks
February 22, 2018 06:08AM
daviddyer Wrote:
-------------------------------------------------------
> I used to use these things too. Since last year, I
> just use RPi Zero / minicom / kwboot . Just
> connect the box serial port to RPi zero's serial
> port directly, then run minicom or kwboot. RPi
> Zero was 99 cents 2 years ago for some time?


RPi Zero for 99ct? Never heard of such an offer, even if, you couldn't buy more than 1 each order, even now.
Re: steam link hacks
February 22, 2018 06:59AM
AngryCoder Wrote:
-------------------------------------------------------
> Those boards are small and about $1.20 each, so I don't have to think twice about fitting them permanently inside the case with the microUSB port waiting.
>
If a standard USB plug doesn't bother you, perhaps a PL2303 USB/serial console dongle for as low as US 50¢ from AliExpress and/or US 70¢ e-Bay will save you $$$. I have been using this PL2303 USB/serial console dongle to connect all my Seagate Dockstar, GoFLEX NET/Home, Pogoplug Pro, etc., to my computer's USB port and use minicom sans any problems.
Re: steam link hacks
February 22, 2018 07:05AM
AngryCoder Wrote:
-------------------------------------------------------
> daviddyer Wrote:
> -------------------------------------------------------
> > I used to use these things too. Since last year, I
> > just use RPi Zero / minicom / kwboot . Just
> > connect the box serial port to RPi zero's serial
> > port directly, then run minicom or kwboot. RPi
> > Zero was 99 cents 2 years ago for some time?
>
>
> RPi Zero for 99ct? Never heard of such an offer, even if, you couldn't buy more than 1 each order, even now.
>
Perhaps, if you do a google search, you will find a lot of hits on this subject posted somewhere around 6/16 (almost two years ago). IIRC, I did not bother to buy it because it doesn't have an RJ-45 port nor a WiFi, but never thought of using it as a serial console until the offer was gone.
Re: steam link hacks
February 22, 2018 02:05PM
b4 using RPi as the serial console, I used a fake Nokia ca-42 cable from eBay. Cut the cable, connect usb port to computer, the other end to the boxes. PL2303 clone, no drivers needed under windows XP and 7 at least.
Re: steam link hacks
February 22, 2018 07:25PM
daviddyer Wrote:
-------------------------------------------------------
> b4 using RPi as the serial console, I used a fake
> Nokia ca-42 cable from eBay. Cut the cable,
> connect usb port to computer, the other end to the
> boxes. PL2303 clone, no drivers needed under
> windows XP and 7 at least.

Nokia-42 cable is the best! That’s my travel/mobile serial adapter. For normal use, I have the CP2xxx permanently plugged in to a Dockstar.

The Pi Zero W seems really good to use as a all-pupose tool.

-bodhi
===========================
Forum Wiki
bodhi's corner
Re: steam link hacks
February 23, 2018 06:54AM
daviddyer Wrote:
-------------------------------------------------------
> used a fake Nokia ca-42 cable from eBay.
>
Someone gave me such a Nokia ca-42 cable and it worked flawlessly until it ceased to decease after a few years of use. Now, my USB/serial console cables are all inexpensive PL2303. If I can find any inexpensive CP2xxx for 50¢ or less, I sure don't mind to invest on such a dongle.
Re: steam link hacks
February 23, 2018 10:32PM
Let me add some new stuff. I opened my steamlink tonight.

TP50-RX
TP51-TX
TP175-GND

Confirmed. At least I connect

TP50 to Rpi 0 GPIO14 (UART0 TXD)
TP51 to Rpi 0 GPIO15 (UART0 RXD)
TP175 to Rpi 0 Pin 6 (Ground)

Poweron the steamlink, I got something.

TP37 seems ground also. (Just tested voltage with DVM)

Now the hot cake.
root@raspberrypi:~# minicom

Welcome to minicom 2.7

OPTIONS: I18n
Compiled on May  7 2017, 05:18:49.
Port /dev/ttyAMA0, 05:20:11

Press CTRL-A Z for help on special keys

sys_init start. boot_strap=0x00001e81 (source=NAND), boot_state=0x0
PG868: leakage=180 vcore=18 sysctl=59
Enhanced SLC cannot be supported on this NAND flash.
Customer key found, loading customer key...
Loading Secure Customer Key Store is finished
Loading Secure Customer Key Store is finished
Finish loading Customer Key store
bootloader image verified, start...

DONGLE BG2CD [Jun 27 2017 07:00:43]
uiBoot = 0
Pinmux configuration:
GSOC 0xf7ea0000 0x1820024a;
GSOC1 0xf7ea0004 0x00c52204;

0xf7ea0014: 4e52a205 01cc0113 00080000 00843750
0xf7ea0028: 4a529c05 01c80802 001c0000 00a15b20
0xf7ea003c: 5652a805 0110312d 00100000 00000000
Clock configuration:
 VCO_B          frequency 1620
 AVPLLB[4]      frequency 648
 AVPLLB[5]      frequency 648
 AVPLLB[6]      frequency 648
 AVPLLB[7]      frequency 648
 cpuPll         frequency 1000
 memPll         frequency 1400
 sysPll         frequency 850
 dClk           frequency 350
 cpuClk         frequency 1000
 sysClk         frequency 425
 drmClk         frequency 425
 cfgClk         frequency 106
 gfxClk         frequency 425
 zspClk         frequency 425
 perifClk       frequency 212
 pCubeClk       frequency 850
 vScopeClk      frequency 850
 nfcEccClk      frequency 283
 vppSysClk      frequency 212
 appClk         frequency 425
 gfx3DCoreClk   frequency 425
 gfx3DSysClk    frequency 425
 arcRefClk      frequency 425
 vipClk         frequency 425
 sdioXinClk     frequency 141
 sdio1XinClk    frequency 141
 gfx3DExtraClk  frequency 425
 gc360Clk       frequency 425
NAND block size 1048576, page size 4096, ecc_strength 48
nand_randomizer_init_by_flash_type(chip_id = 0x2C68044AA900): !!! UNRANDOMIZED !
[FASTLOGO] init.0xf7fcc008 0x00000000;
0xf7fcc004 0x00000002;
0xf7fcc000 0x00000002;

[FASTLOGO] Set CPCB1 output reso 8.[SHOWLOGO] start
showlogo_init_irq, Enable IRQ_dHubIntrAvio0(0x20) for cpu 0

[FASTLOGO] done.
[00,d00] block0: part1(start=0, blks=1, version=201706270700), part2(start=0, b)
[01,d01] bootloader: part1(start=1, blks=8, version=201706270700), part2(start=)
[02,d02] env: part1(start=9, blks=11, version=201706270700), part2(start=9, blk)
[03,d03] sysconf: part1(start=20, blks=512, version=201706270700), part2(start=)
[04,d04] factory_setting: part1(start=532, blks=32, version=201706270700), part)
[05,d05] bootimgs: part1(start=564, blks=32, version=201706270700), part2(start)
[06,d06] recovery: part1(start=596, blks=128, version=201706270700), part2(star)
XXX Found recovery
[07,d07] fts: part1(start=724, blks=32, version=201706270700), part2(start=724,)
XXX Found fts
[08,d08] factory: part1(start=756, blks=384, version=201706270700), part2(start)
[09,d09] rootfs: part1(start=1140, blks=1024, version=201706270700), part2(star)
[10,d10] cache: part1(start=2164, blks=1924, version=201706270700), part2(start)
[11,d11] bbt: part1(start=4088, blks=8, version=201706270700), part2(start=4088)
flash_ts_init() start.
fts: v23 loaded from 0x0002c000
flash_ts_init() success.
Magic word is 0x000000a9
Magic word is 0x000000a8
figo magic = d2ada3f1, figo_off = 32, figo_len = 3504
Load No.1 AES Key into User Key DTCM Area
Loading Secure Customer Key Store is finished
Load No.1 RSA Public Key into User Key DTCM Area
Loading Secure Customer Key Store is finished
Finish to load Customer Key store
uErrorCode = 0xf
FIGO is running at FIGO ROM Code agian
Not warm up.
fts: steamlink.crashcounter: 0
fts: bootloader.command:
XXX bootmode 0
0xf7e80c08 0x00000000;
0xf7e80c08 0x00000000;
XXX count 3452
XXX board_id 1
Loading normal image image
[Flash Write]page=0x0002d42e, buf=0x006eb158, size=4096
[mv_nand_write_large_page,1048] addr=0x2d42e000, buf=0x006f33dc, oob=0
[Flash Write]page=0x0002d42f, buf=0x006ec158, size=4096
[mv_nand_write_large_page,1048] addr=0x2d42f000, buf=0x006f33dc, oob=0
fts: record v24 commited @ 0x0002e000
Image3 start:23400000, end: 25400000
Reading image3 attribute ...
sm_addr: 23500000, cpu0_addr: 23500000, cpu1_addr: 23900000, recou_addr: 2390000
Memory map: CPU0 1008M, CPU1 12M, ZSP: 4M, SHR 0M
Encryption image size= 512
encryption header copied
Loading CPU0 image... load address: 0x1007fe0, final size 3517632
Encryption key index: 0
verify passed.
kernel_size=3209315, ramdisk_size=308275, ramdisk_addr=1a00000
reloading ramdisk...DONE!
append initrd to linux bootargs
console=ttyS0,115200 root=/dev/mtdblock5 rootfstype=yaffs2 ro root_part_name=ro3
Done.
WOL MAC address: 00:11:22:33:44:55
Image_Load_And_Start,2026: reset_msg_extra_size=0
REal bootargs: console=ttyS0,115200 root=/dev/mtdblock5 rootfstype=yaffs2 ro ro5
linux parameter address 0x01000100
2050: Done!
0xf7fcc008 0x00000000;
0xf7fcc004 0x00000002;
0xf7fcc000 0x00000002;
[SHOWLOGO] stopped
JUMp to kernel entrance 0x01008000
[    0.000000] GIC CPU mask not found - kernel will fail to boot.
[    0.000000] GIC CPU mask not found - kernel will fail to boot.
[    0.066577] [Galois][shm_driver] memory size (bytes)                 = 0x0C00
[    0.066585] [Galois][shm_driver] memory threshold (bytes)            = 0x0000
[    0.066590] [Galois][shm_driver] memory base phys addr               = 0x1200
[    0.066593] [Galois][shm_driver] shm_device_create OK.
[    0.066599] [Galois][shm_driver] memory size (bytes)                 = 0x0200
[    0.066603] [Galois][shm_driver] memory threshold (bytes)            = 0x0000
[    0.066607] [Galois][shm_driver] memory base phys addr               = 0x1E00
[    0.066610] [Galois][shm_driver] shm_device_create OK.
[    0.066615] [Galois][shm_driver] memory ioremap_noncache, base:0x1E000000, s0
[    0.066794] [Galois][shm_driver] memory ioremap, base:0x12000000, size:0x0C00
[    0.072081] [Galois][shm_driver] memory base virt addr (cache)       = 0xD500
[    0.072090] [Galois][shm_driver] memory base virt addr (non-cache)   = 0xD200
[    0.072094] [Galois][shm_driver] MV_SHM_Init OK
[    0.072123] [Galois][shm_driver] shm_driver_init OK
[    0.072503] [Galois][cc_driver] cc_driver_init OK
kinit: NAND mode, check online upgrade flag
kinit: creating /dev/mtd1
ret=0
kinit: get_version_table, TableSize 4096
read version table, offset=53248.
vt.magic=d2ada3f1, vt.num_entries 12.
kinit: creating /dev/girl
open /dev/girl: No such device
rootfs status is OK!
IP-Config: no devices to configure
kinit: name_to_dev_t(/dev/mtdblock0) = dev(31,0)
kinit: name_to_dev_t(/dev/mtdblock1) = dev(31,1)
kinit: name_to_dev_t(/dev/mtdblock2) = dev(31,2)
kinit: name_to_dev_t(/dev/mtdblock3) = dev(31,3)
kinit: name_to_dev_t(/dev/mtdblock4) = dev(31,4)
kinit: name_to_dev_t(/dev/mtdblock5) = dev(31,5)
kinit: name_to_dev_t(/dev/mtdblock6) = dev(31,6)
kinit: name_to_dev_t(/dev/mtdblock7) = dev(31,7)
kinit: name_to_dev_t(/dev/mtdblock8) = dev(31,8)
kinit: name_to_dev_t(/dev/mtdblock9) = dev(31,9)
kinit: name_to_dev_t(/dev/mtdblock10) = dev(31,10)
kinit: name_to_dev_t(/dev/mtdblock11) = dev(31,11)
kinit: name_to_dev_t(/dev/mtdblock12) = dev(31,12)
argc = 3
mount_part rootfs /root
partition_name: rootfs, mount_point: /root
Found mtd1 at /dev/mtd1
MEMGETINFO = 0x80204d01
found block0
found 1
found bootloader
found 2
found env
found 3
found sysconf
found 4
found factory_setting
found 5
found bootimgs
found 6
found recovery
found 7
found fts
found 8
found factory
found 9
found rootfs
mount_part: part1 20170627:700, part2 0:0
mount_part: mounting /dev/mtdblock9 to /root, option is empty
Generating Check Point data for mtd9
1done.
2done.
INIT: version 2.88 booting
argc = 3
/bin/mount_part factory_setting /mnt/factory_setting
partition_name: factory_setting, mount_point: /mnt/factory_setting
Found mtd1 at /dev/mtd/mtd1
MEMGETINFO = 0x80204d01
found block0
found 1
found bootloader
found 2
found env
found 3
found sysconf
found 4
found factory_setting
mount_part: part1 20170627:700, part2 0:0
mount_part: mounting /dev/block/mtdblock4 to /mnt/factory_setting, option is emy
Generating Check Point data for mtd4
1done.
2done.
argc = 3
/bin/mount_part cache /mnt/scratch
partition_name: cache, mount_point: /mnt/scratch
Found mtd1 at /dev/mtd/mtd1
MEMGETINFO = 0x80204d01
found block0
found 1
found bootloader
found 2
found env
found 3
found sysconf
found 4
found factory_setting
found 5
found bootimgs
found 6
found recovery
found 7
found fts
found 8
found factory
found 9
found rootfs
found 10
found cache
mount_part: part1 20170627:700, part2 0:0
mount_part: mounting /dev/block/mtdblock10 to /mnt/scratch, option is empty
Generating Check Point data for mtd10
1done.
2done.
argc = 3
/bin/mount_part sysconf /mnt/config
partition_name: sysconf, mount_point: /mnt/config
Found mtd1 at /dev/mtd/mtd1
MEMGETINFO = 0x80204d01
found block0
found 1
found bootloader
found 2
found env
found 3
found sysconf
mount_part: part1 20170627:700, part2 0:0
mount_part: mounting /dev/block/mtdblock3 to /mnt/config, option is empty
Generating Check Point data for mtd3
1done.
2done.
INIT: Entering runlevel: 5
Run Script: S01config[    3.530253] EXT4-fs (loop0): couldn't mount as ext3 dues
[    3.538411] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatis
                [ OK ]
Run Script: S02hostname         [ OK ]
Run Script: S09crda             [ OK ]
Run Script: S10wifi[    6.499551] wlan: Loading MWLAN driver
[    6.507178] vendor=0x02DF device=0x912D class=0 function=1
[    6.512954] SDIO: max_segs=128 max_seg_size=65536
[    6.517838] rx_work=0 cpu_num=1
[    8.389324] WLAN FW is active
[    8.563639] wlan: version = SD8897-15.68.7.p206-C3X15C125.p1-GPL-(FP68)
[    8.575367] wlan: Driver loaded successfully
[    8.615846] drvdbg = 0x00080007
[    8.619137] MMPA_D (00008000)
[    8.622310] MIF_D  (00100000)
[    8.625469] MFW_D  (00080000) X
[    8.628718] MEVT_D (00040000)
[    8.631875] MCMD_D (00020000)
[    8.635032] MDAT_D (00010000)
[    8.638193] MIOCTL (00000080)
[    8.641350] MINTR  (00000040)
[    8.644507] MEVENT (00000020)
[    8.647674] MCMND  (00000010)
[    8.650832] MDATA  (00000008)
[    8.653994] MERROR (00000004) X
[    8.657241] MFATAL (00000002) X
[    8.660487] MMSG   (00000001) X
                [ OK ]
Run Script: S11dbus             [ OK ]
Run Script: S12wpa_supplicant.sh                [ OK ]
Run Script: S13bluetooth.sh[    9.115530] BT: Loading driver
[    9.132269] BT FW is active(0)
[    9.135790] BT: FW already downloaded!
[    9.313871] BT: Create /dev/mnfcchar0
[    9.458712] BT: Driver loaded successfully
                [ OK ]
Run Script: S15audio.sh         [ OK ]
Run Script: S18pacrunner.sh             [ OK ]
Run Script: S20connmand.sh              [ OK ]
Run Script: S30sshd             [ OK ]
Run Script: S80watchdog         [ OK ]
Run Script: S81dmesg            [ OK ]
Run Script: S99steam            [ OK ]

Berlin Linux System (steamlink-0AB9//dev/console)

steamlink-0AB9 login:

Re: steam link hacks
February 23, 2018 10:39PM
Login at console with root / steamlink, run dmesg.


steamlink-0AB9 login: root
Password:
login[1316]: root login on 'console'
/home/steam
# dmesg
[    3.060115] yaffs: checking block 346 bad
[    3.060487] yaffs: checking block 347 bad
[    3.060859] yaffs: checking block 348 bad
[    3.061229] yaffs: checking block 349 bad
[    3.061601] yaffs: checking block 350 bad
[    3.061973] yaffs: checking block 351 bad
[    3.062345] yaffs: checking block 352 bad
[    3.062718] yaffs: checking block 353 bad
[    3.063090] yaffs: checking block 354 bad
[    3.063462] yaffs: checking block 355 bad
[    3.063833] yaffs: checking block 356 bad
[    3.064207] yaffs: checking block 357 bad
[    3.064578] yaffs: checking block 358 bad
[    3.064950] yaffs: checking block 359 bad
[    3.065323] yaffs: checking block 360 bad
[    3.065694] yaffs: checking block 361 bad
[    3.066068] yaffs: checking block 362 bad
[    3.066440] yaffs: checking block 363 bad
[    3.066812] yaffs: checking block 364 bad
[    3.067184] yaffs: checking block 365 bad
[    3.067555] yaffs: checking block 366 bad
[    3.067926] yaffs: checking block 367 bad
[    3.068297] yaffs: checking block 368 bad
[    3.068670] yaffs: checking block 369 bad
[    3.069040] yaffs: checking block 370 bad
[    3.069412] yaffs: checking block 371 bad
[    3.069784] yaffs: checking block 372 bad
[    3.070156] yaffs: checking block 373 bad
[    3.070528] yaffs: checking block 374 bad
[    3.070900] yaffs: checking block 375 bad
[    3.071273] yaffs: checking block 376 bad
[    3.071644] yaffs: checking block 377 bad
[    3.072024] yaffs: checking block 378 bad
[    3.072397] yaffs: checking block 379 bad
[    3.072769] yaffs: checking block 380 bad
[    3.073141] yaffs: checking block 381 bad
[    3.073513] yaffs: checking block 382 bad
[    3.073885] yaffs: checking block 383 bad
[    3.074257] yaffs: checking block 384 bad
[    3.074629] yaffs: checking block 385 bad
[    3.075002] yaffs: checking block 386 bad
[    3.075374] yaffs: checking block 387 bad
[    3.075746] yaffs: checking block 388 bad
[    3.076118] yaffs: checking block 389 bad
[    3.076489] yaffs: checking block 390 bad
[    3.076861] yaffs: checking block 391 bad
[    3.077234] yaffs: checking block 392 bad
[    3.077606] yaffs: checking block 393 bad
[    3.077978] yaffs: checking block 394 bad
[    3.078350] yaffs: checking block 395 bad
[    3.078723] yaffs: checking block 396 bad
[    3.079096] yaffs: checking block 397 bad
[    3.079467] yaffs: checking block 398 bad
[    3.079839] yaffs: checking block 399 bad
[    3.080211] yaffs: checking block 400 bad
[    3.080582] yaffs: checking block 401 bad
[    3.080954] yaffs: checking block 402 bad
[    3.081326] yaffs: checking block 403 bad
[    3.081697] yaffs: checking block 404 bad
[    3.082069] yaffs: checking block 405 bad
[    3.082442] yaffs: checking block 406 bad
[    3.082815] yaffs: checking block 407 bad
[    3.083186] yaffs: checking block 408 bad
[    3.083557] yaffs: checking block 409 bad
[    3.083928] yaffs: checking block 410 bad
[    3.084299] yaffs: checking block 411 bad
[    3.084672] yaffs: checking block 412 bad
[    3.085046] yaffs: checking block 413 bad
[    3.085417] yaffs: checking block 414 bad
[    3.085789] yaffs: checking block 415 bad
[    3.086160] yaffs: checking block 416 bad
[    3.086534] yaffs: checking block 417 bad
[    3.086906] yaffs: checking block 418 bad
[    3.087278] yaffs: checking block 419 bad
[    3.087650] yaffs: checking block 420 bad
[    3.088030] yaffs: checking block 421 bad
[    3.088403] yaffs: checking block 422 bad
[    3.088774] yaffs: checking block 423 bad
[    3.089146] yaffs: checking block 424 bad
[    3.089516] yaffs: checking block 425 bad
[    3.089888] yaffs: checking block 426 bad
[    3.090260] yaffs: checking block 427 bad
[    3.090633] yaffs: checking block 428 bad
[    3.091005] yaffs: checking block 429 bad
[    3.091376] yaffs: checking block 430 bad
[    3.091748] yaffs: checking block 431 bad
[    3.092119] yaffs: checking block 432 bad
[    3.092492] yaffs: checking block 433 bad
[    3.092864] yaffs: checking block 434 bad
[    3.093236] yaffs: checking block 435 bad
[    3.093607] yaffs: checking block 436 bad
[    3.093979] yaffs: checking block 437 bad
[    3.094359] yaffs: checking block 438 bad
[    3.094732] yaffs: checking block 439 bad
[    3.095103] yaffs: checking block 440 bad
[    3.095476] yaffs: checking block 441 bad
[    3.095847] yaffs: checking block 442 bad
[    3.096219] yaffs: checking block 443 bad
[    3.096592] yaffs: checking block 444 bad
[    3.096969] yaffs: checking block 445 bad
[    3.097341] yaffs: checking block 446 bad
[    3.097713] yaffs: checking block 447 bad
[    3.098086] yaffs: checking block 448 bad
[    3.098458] yaffs: checking block 449 bad
[    3.098831] yaffs: checking block 450 bad
[    3.099203] yaffs: checking block 451 bad
[    3.099574] yaffs: checking block 452 bad
[    3.099946] yaffs: checking block 453 bad
[    3.100318] yaffs: checking block 454 bad
[    3.100691] yaffs: checking block 455 bad
[    3.101063] yaffs: checking block 456 bad
[    3.101435] yaffs: checking block 457 bad
[    3.101806] yaffs: checking block 458 bad
[    3.102179] yaffs: checking block 459 bad
[    3.102550] yaffs: checking block 460 bad
[    3.102922] yaffs: checking block 461 bad
[    3.103293] yaffs: checking block 462 bad
[    3.103664] yaffs: checking block 463 bad
[    3.104044] yaffs: checking block 464 bad
[    3.104416] yaffs: checking block 465 bad
[    3.104790] yaffs: checking block 466 bad
[    3.105163] yaffs: checking block 467 bad
[    3.105532] yaffs: checking block 468 bad
[    3.105904] yaffs: checking block 469 bad
[    3.106276] yaffs: checking block 470 bad
[    3.106649] yaffs: checking block 471 bad
[    3.107021] yaffs: checking block 472 bad
[    3.107393] yaffs: checking block 473 bad
[    3.107763] yaffs: checking block 474 bad
[    3.108134] yaffs: checking block 475 bad
[    3.108507] yaffs: checking block 476 bad
[    3.108877] yaffs: checking block 477 bad
[    3.109249] yaffs: checking block 478 bad
[    3.109621] yaffs: checking block 479 bad
[    3.109992] yaffs: checking block 480 bad
[    3.110373] yaffs: checking block 481 bad
[    3.110745] yaffs: checking block 482 bad
[    3.111116] yaffs: checking block 483 bad
[    3.111488] yaffs: checking block 484 bad
[    3.111860] yaffs: checking block 485 bad
[    3.112232] yaffs: checking block 486 bad
[    3.112605] yaffs: checking block 487 bad
[    3.112976] yaffs: checking block 488 bad
[    3.113348] yaffs: checking block 489 bad
[    3.113720] yaffs: checking block 490 bad
[    3.114093] yaffs: checking block 491 bad
[    3.114465] yaffs: checking block 492 bad
[    3.114838] yaffs: checking block 493 bad
[    3.115209] yaffs: checking block 494 bad
[    3.115581] yaffs: checking block 495 bad
[    3.115952] yaffs: checking block 496 bad
[    3.116324] yaffs: checking block 497 bad
[    3.116697] yaffs: checking block 498 bad
[    3.117069] yaffs: checking block 499 bad
[    3.117440] yaffs: checking block 500 bad
[    3.117809] yaffs: checking block 501 bad
[    3.118181] yaffs: checking block 502 bad
[    3.118553] yaffs: checking block 503 bad
[    3.118925] yaffs: checking block 504 bad
[    3.119297] yaffs: checking block 505 bad
[    3.119669] yaffs: checking block 506 bad
[    3.120048] yaffs: checking block 507 bad
[    3.120421] yaffs: checking block 508 bad
[    3.120793] yaffs: checking block 509 bad
[    3.121165] yaffs: checking block 510 bad
[    3.121537] yaffs: checking block 511 bad
[    3.217208] yaffs: yaffs_read_super: is_checkpointed 0
[    3.340787] net eth0: reprogrammed MAC e0:31:9e:33:d0:74
[    3.530253] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatis
[    3.538411] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatis
[    3.582148] EXT4-fs (loop0): recovery complete
[    3.582165] EXT4-fs (loop0): mounted filesystem with ordered data mode. Opts)
[    5.160288] eth0: link up, 10 Mb/s, half duplex, flow control enabled
[    5.160323] eth0: link up, 100 Mb/s, full duplex, flow control enabled
[    6.221002] cfg80211: World regulatory domain updated:
[    6.221012] cfg80211:  DFS Master region FCC
[    6.221017] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_ga)
[    6.221024] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2700 )
[    6.221029] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 1700 )
[    6.221035] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2400 )
[    6.221040] cfg80211:   (5490000 KHz - 5590000 KHz @ 80000 KHz), (N/A, 2400 )
[    6.221045] cfg80211:   (5650000 KHz - 5710000 KHz @ 40000 KHz), (N/A, 2400 )
[    6.221050] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 3000 )
[    6.413396] 8897mlan: module license 'Marvell Proprietary' taints kernel.
[    6.413407] Disabling lock debugging due to kernel taint
[    6.499551] wlan: Loading MWLAN driver
[    6.507178] vendor=0x02DF device=0x912D class=0 function=1
[    6.512954] SDIO: max_segs=128 max_seg_size=65536
[    6.517838] rx_work=0 cpu_num=1
[    6.521348] wlan: Enable TX SG mode
[    6.521356] wlan: Enable RX SG mode
[    7.688727] Wlan: FW download over, firmwarelen=792072 downloaded 792072
[    8.389324] WLAN FW is active
[    8.446932] fw_cap_info=0x1ffab, dev_cap_mask=0xffffffff
[    8.454150] SDIO rx aggr: 1 block_size=412
[    8.454156] wlan: Enable RX SG mode
[    8.454160] mpa_rx_buf_size=65280
[    8.464640] CMD_RESP: cmd 0x23a error, result=0x2
[    8.473925] cfg80211: Calling CRDA for country: US
[    8.550776] cfg80211: Regulatory domain changed to country: US
[    8.550785] cfg80211:  DFS Master region FCC
[    8.550790] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_ga)
[    8.550797] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2700 )
[    8.550803] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 1700 )
[    8.550809] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2400 )
[    8.550814] cfg80211:   (5490000 KHz - 5590000 KHz @ 80000 KHz), (N/A, 2400 )
[    8.550819] cfg80211:   (5650000 KHz - 5710000 KHz @ 40000 KHz), (N/A, 2400 )
[    8.550824] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 3000 )
[    8.563639] wlan: version = SD8897-15.68.7.p206-C3X15C125.p1-GPL-(FP68)
[    8.575367] wlan: Driver loaded successfully
[    8.615846] drvdbg = 0x00080007
[    8.619137] MMPA_D (00008000)
[    8.622310] MIF_D  (00100000)
[    8.625469] MFW_D  (00080000) X
[    8.628718] MEVT_D (00040000)
[    8.631875] MCMD_D (00020000)
[    8.635032] MDAT_D (00010000)
[    8.638193] MIOCTL (00000080)
[    8.641350] MINTR  (00000040)
[    8.644507] MEVENT (00000020)
[    8.647674] MCMND  (00000010)
[    8.650832] MDATA  (00000008)
[    8.653994] MERROR (00000004) X
[    8.657241] MFATAL (00000002) X
[    8.660487] MMSG   (00000001) X
[    9.115530] BT: Loading driver
[    9.132269] BT FW is active(0)
[    9.135790] BT: FW already downloaded!
[    9.313871] BT: Create /dev/mnfcchar0
[    9.458712] BT: Driver loaded successfully
[   10.711432] mv88de3100_wdt f7e82000.wdt: new timeout (4, approximant)
[   10.711446] cfg: 106250000
[   10.742503] unionfs: new lower inode mtime (bindex=1, name=connman)
[   10.993952] wlan: mlan0 START SCAN
[   11.025973] [Galois][pe_agent_driver] setup cdevs device minor [1]
[   11.036237] [Galois][pe_agent_driver] create device sysfs [galois_pe_agent]
[   11.036274] [Galois][pe_agent_driver] pe_agent_driver_init OK
[   11.036279] [Galois][pe_driver] pe_driver_init OK
[   11.052409] Clear GiQuila INTR = 00000000
[   11.103074] gpu warning: of_property_read_u32 for 3D core-clock-register fai!
[   11.103084] gpu warning: of_property_read_u32 for 3D sys-clock-register fail!
[   11.103089] gpu warning: of_property_read_u32 for 3D core-clock-bitfield fai!
[   11.103094] gpu warning: of_property_read_u32 for 3D sys-clock-bitfield fail!
[   11.103117] Galcore version 5.0.11.17486
[   11.103121] gal3d options:
[   11.103125]   irqLine           = 37
[   11.103129]   registerMemBase   = 0xF7BC0000
[   11.103132]   registerMemSize   = 0x00000800
[   11.103136]   contiguousSize    = 512
[   11.103139]   contiguousBase    = 0x00000000
[   11.103143]   bankSize          = 0x00000000
[   11.103146]   fastClear         = -1
[   11.103149]   compression       = -1
[   11.103153]   signal            = 48
[   11.103156]   powerManagement   = 1
[   11.103159]   baseAddress       = 0x00000000
[   11.103163]   physSize          = 0x80000000
[   11.103166]   logFileSize       = 0 KB
[   11.103169]   recovery          = 1
[   11.103173]   stuckDump         = 1
[   11.103176]   gpuProfiler       = 0
[   13.309603] [Galois][pe_driver] drv stop fastlogo
[   13.309617] set stop_flag to 1
[   13.330054] VPP_dhub_sem_clear stop_flag=2
[   13.534062] [Galois][fastlogo_driver] dev exit done
[   13.534071] [Galois][fastlogo_driver] profile 384:
[   13.534077]    0: 02595925:00005891
[   13.534082]    1: 19635529:00005845
[   13.534086]    2: 13926551:00003755
[   13.534090]    3: 20766202:00001986
[   13.534094]    4: 15454296:00001685
[   13.534097]    5: 21563389:00001581
[   13.534101]    6: 15452423:00001638
[   13.534105]    7: 12405553:00001534
[   13.534109]    8: 14267464:00007840
[   13.534117]  207: 24207727:00006165
[   13.534121]  208: 09157553:00004791
[   13.767853] wlan: SCAN COMPLETED: scanned AP count=4
[   14.005540] wlan: mlan0 START SCAN
[   15.102519] [Galois][pe_agent_driver] open filp:ceda9380 tgid:1312
[   15.102686] [Galois][pe_agent_driver] filp:ceda9380 ioctl:set pe inst:88de310
[   15.211589] [Galois][pe_agent_driver] open filp:ceda9600 tgid:1317
[   15.211607] [Galois][pe_agent_driver] filp:ceda9600 ioctl:set token:800000027
[   15.222531] [Galois][pe_agent_driver] filp:ceda9380 ioctl:set pe inst:88de312
[   15.356253] [Galois][pe_agent_driver] open filp:cede6080 tgid:1357
[   15.356273] [Galois][pe_agent_driver] filp:cede6080 ioctl:set token:800000077
[   15.356464] [Galois][pe_agent_driver] filp:ceda9380 ioctl:set pe inst:88de317
[   15.466121] [Galois][pe_agent_driver] close file:cede6080 pid:1357 handle:882
[   16.902198] [Galois][pe_agent_driver] open filp:cee60080 tgid:1370
[   16.902217] [Galois][pe_agent_driver] filp:cee60080 ioctl:set token:8000000c0
[   16.902405] [Galois][pe_agent_driver] filp:ceda9380 ioctl:set pe inst:88de31c
[   17.737501] wlan: SCAN COMPLETED: scanned AP count=5
[   23.006367] wlan: mlan0 START SCAN
[   26.737583] wlan: SCAN COMPLETED: scanned AP count=4
[   60.510538] Over flow: idx_chan_stats=45, num_in_chan_stats=45
[  131.078196] wlan: mlan0 START SCAN
[  134.809287] wlan: SCAN COMPLETED: scanned AP count=3
[  168.582235] Over flow: idx_chan_stats=45, num_in_chan_stats=45
[  374.030608] wlan: mlan0 START SCAN
[  377.760865] wlan: SCAN COMPLETED: scanned AP count=4
[  411.537916] Over flow: idx_chan_stats=45, num_in_chan_stats=45
[  674.057659] wlan: mlan0 START SCAN
[  677.789772] wlan: SCAN COMPLETED: scanned AP count=4
[  711.566872] Over flow: idx_chan_stats=45, num_in_chan_stats=45
#

Re: steam link hacks
February 23, 2018 10:52PM
Looks like we can not stop the boot process.

Press enter in console while boot... nothing , except more blank lines

If sent a lot ctrl-c to the console, it will stop some scripts and get a failed boot.

sys_init start. boot_strap=0x00001e8                                         0
PG868: leakage=180 vcore=18 sysctl=59
Enhanced SLC cannot be supported on this NAND flash.
Customer key found, loading customer key...
Loading Secure Customer Key Store is finished
Loading Secure Customer Key Store is finished
Finish loading Customer Key store
bootloader image verified, start...

DONGLE BG2CD [Jun 27 2017 07:00:43]
uiBoot = 0
Pinmux configuration:
GSOC 0xf7ea0000 0x1820024a;
GSOC1 0xf7ea0004 0x00c52204;

0xf7ea0014: 4e52a205 01cc0113 00080000 00843750
0xf7ea0028: 4a529c05 01c80802 001c0000 00a15b20
0xf7ea003c: 5652a805 0110312d 00100000 00000000
Clock configuration:
 VCO_B          frequency 1620
 AVPLLB[4]      frequency 648
 AVPLLB[5]      frequency 648
 AVPLLB[6]      frequency 648
 AVPLLB[7]      frequency 648
 cpuPll         frequency 1000
 memPll         frequency 1400
 sysPll         frequency 850
 dClk           frequency 350
 cpuClk         frequency 1000
 sysClk         frequency 425
 drmClk         frequency 425
 cfgClk         frequency 106
 gfxClk         frequency 425
 zspClk         frequency 425
 perifClk       frequency 212
 pCubeClk       frequency 850
 vScopeClk      frequency 850
 nfcEccClk      frequency 283
 vppSysClk      frequency 212
 appClk         frequency 425
 gfx3DCoreClk   frequency 425
 gfx3DSysClk    frequency 425
 arcRefClk      frequency 425
 vipClk         frequency 425
 sdioXinClk     frequency 141
 sdio1XinClk    frequency 141
 gfx3DExtraClk  frequency 425
 gc360Clk       frequency 425
NAND block size 1048576, page size 4096, ecc_strength 48
nand_randomizer_init_by_flash_type(chip_id = 0x2C68044AA900): !!! UNRANDOMIZED !
[FASTLOGO] init.0xf7fcc008 0x00000000;
0xf7fcc004 0x00000002;
0xf7fcc000 0x00000002;

[FASTLOGO] Set CPCB1 output reso 8.[SHOWLOGO] start
showlogo_init_irq, Enable IRQ_dHubIntrAvio0(0x20) for cpu 0

[FASTLOGO] done.
[00,d00] block0: part1(start=0, blks=1, version=201706270700), part2(start=0, b)
[01,d01] bootloader: part1(start=1, blks=8, version=201706270700), part2(start=)
[02,d02] env: part1(start=9, blks=11, version=201706270700), part2(start=9, blk)
[03,d03] sysconf: part1(start=20, blks=512, version=201706270700), part2(start=)
[04,d04] factory_setting: part1(start=532, blks=32, version=201706270700), part)
[05,d05] bootimgs: part1(start=564, blks=32, version=201706270700), part2(start)
[06,d06] recovery: part1(start=596, blks=128, version=201706270700), part2(star)
XXX Found recovery
[07,d07] fts: part1(start=724, blks=32, version=201706270700), part2(start=724,)
XXX Found fts
[08,d08] factory: part1(start=756, blks=384, version=201706270700), part2(start)
[09,d09] rootfs: part1(start=1140, blks=1024, version=201706270700), part2(star)
[10,d10] cache: part1(start=2164, blks=1924, version=201706270700), part2(start)
[11,d11] bbt: part1(start=4088, blks=8, version=201706270700), part2(start=4088)
flash_ts_init() start.
fts: v34 loaded from 0x00042000
flash_ts_init() success.
Magic word is 0x000000a9
Magic word is 0x000000a8
figo magic = d2ada3f1, figo_off = 32, figo_len = 3504
Load No.1 AES Key into User Key DTCM Area
Loading Secure Customer Key Store is finished
Load No.1 RSA Public Key into User Key DTCM Area
Loading Secure Customer Key Store is finished
Finish to load Customer Key store
uErrorCode = 0xf
FIGO is running at FIGO ROM Code agian
Not warm up.
fts: steamlink.crashcounter: 0
fts: bootloader.command:
XXX bootmode 0
0xf7e80c08 0x00000000;
0xf7e80c08 0x00000000;
XXX count 3577
XXX board_id 1
Loading normal image image
[Flash Write]page=0x0002d444, buf=0x006eb158, size=4096
[mv_nand_write_large_page,1048] addr=0x2d444000, buf=0x006f33dc, oob=0
[Flash Write]page=0x0002d445, buf=0x006ec158, size=4096
[mv_nand_write_large_page,1048] addr=0x2d445000, buf=0x006f33dc, oob=0
fts: record v35 commited @ 0x00044000
Image3 start:23400000, end: 25400000
Reading image3 attribute ...
sm_addr: 23500000, cpu0_addr: 23500000, cpu1_addr: 23900000, recou_addr: 2390000
Memory map: CPU0 1008M, CPU1 12M, ZSP: 4M, SHR 0M
Encryption image size= 512
encryption header copied
Loading CPU0 image... load address: 0x1007fe0, final size 3517632
Encryption key index: 0
verify passed.
kernel_size=3209315, ramdisk_size=308275, ramdisk_addr=1a00000
reloading ramdisk...DONE!
append initrd to linux bootargs
console=ttyS0,115200 root=/dev/mtdblock5 rootfstype=yaffs2 ro root_part_name=ro3
Done.
WOL MAC address: 00:11:22:33:44:55
Image_Load_And_Start,2026: reset_msg_extra_size=0
REal bootargs: console=ttyS0,115200 root=/dev/mtdblock5 rootfstype=yaffs2 ro ro5
linux parameter address 0x01000100
2050: Done!
0xf7fcc008 0x00000000;
0xf7fcc004 0x00000002;
0xf7fcc000 0x00000002;
[SHOWLOGO] stopped
JUMp to kernel entrance 0x01008000
[    0.000000] GIC CPU mask not found - kernel will fail to boot.
[    0.000000] GIC CPU mask not found - kernel will fail to boot.
[    0.066625] [Galois][shm_driver] memory size (bytes)                 = 0x0C00
[    0.066634] [Galois][shm_driver] memory threshold (bytes)            = 0x0000
[    0.066638] [Galois][shm_driver] memory base phys addr               = 0x1200
[    0.066642] [Galois][shm_driver] shm_device_create OK.
[    0.066647] [Galois][shm_driver] memory size (bytes)                 = 0x0200
[    0.066651] [Galois][shm_driver] memory threshold (bytes)            = 0x0000
[    0.066655] [Galois][shm_driver] memory base phys addr               = 0x1E00
[    0.066658] [Galois][shm_driver] shm_device_create OK.
[    0.066663] [Galois][shm_driver] memory ioremap_noncache, base:0x1E000000, s0
[    0.066843] [Galois][shm_driver] memory ioremap, base:0x12000000, size:0x0C00
[    0.072138] [Galois][shm_driver] memory base virt addr (cache)       = 0xD500
[    0.072149] [Galois][shm_driver] memory base virt addr (non-cache)   = 0xD200
[    0.072153] [Galois][shm_driver] MV_SHM_Init OK
[    0.072183] [Galois][shm_driver] shm_driver_init OK
[    0.072568] [Galois][cc_driver] cc_driver_init OK
kinit: NAND mode, check online upgrade flag
kinit: creating /dev/mtd1
ret=0
kinit: get_version_table, TableSize 4096
read version table, offset=53248.
vt.magic=d2ada3f1, vt.num_entries 12.
kinit: creating /dev/girl
open /dev/girl: No such device
rootfs status is OK!
IP-Config: no devices to configure
kinit: name_to_dev_t(/dev/mtdblock0) = dev(31,0)
kinit: name_to_dev_t(/dev/mtdblock1) = dev(31,1)
kinit: name_to_dev_t(/dev/mtdblock2) = dev(31,2)
kinit: name_to_dev_t(/dev/mtdblock3) = dev(31,3)
kinit: name_to_dev_t(/dev/mtdblock4) = dev(31,4)
kinit: name_to_dev_t(/dev/mtdblock5) = dev(31,5)
kinit: name_to_dev_t(/dev/mtdblock6) = dev(31,6)
kinit: name_to_dev_t(/dev/mtdblock7) = dev(31,7)
kinit: name_to_dev_t(/dev/mtdblock8) = dev(31,8)
kinit: name_to_dev_t(/dev/mtdblock9) = dev(31,9)
kinit: name_to_dev_t(/dev/mtdblock10) = dev(31,10)
kinit: name_to_dev_t(/dev/mtdblock11) = dev(31,11)
kinit: name_to_dev_t(/dev/mtdblock12) = dev(31,12)
argc = 3
mount_part rootfs /root
partition_name: rootfs, mount_point: /root
Found mtd1 at /dev/mtd1
MEMGETINFO = 0x80204d01
found block0
found 1
found bootloader
found 2
found env
found 3
found sysconf
found 4
found factory_setting
found 5
found bootimgs
found 6
found recovery
found 7
found fts
found 8
found factory
found 9
found rootfs
mount_part: part1 20170627:700, part2 0:0
mount_part: mounting /dev/mtdblock9 to /root, option is empty
Generating Check Point data for mtd9
1done.
2done.
INIT: version 2.88 booting
INIT: Entering runlevel: 5
mkdir: can't create directory '/mnt/scratch/': Read-only file system
Run Script: S01config/etc/init.d/startup.sh: cannot create /mnt/scratch/log/S01t
                [ FAILED ]
Run Script: S02hostname/etc/init.d/startup.sh: cannot create /mnt/scratch/log/St
                [ FAILED ]
Run Script: S09crda/etc/init.d/startup.sh: cannot c^C           [ FAILED ]
Run Script: S10wifi/etc/init.d/startup.sh: cannot create /mnt/scratch/log/S10wit
                [ FAILED ]
Run Script: S11dbus/etc/init.d/startup.sh: cannot create /mnt/scratch/log/S11dbt
                [ FAILED ]
Run Script: S12wpa_supplicant.sh/etc/init.d/startup.sh: cannot create /mnt/scrat
                [ FAILED ]
Run Script: S13bluetooth.sh^C/etc/init.d/startup.sh: cannot create /mnt/scratcht
                [ FAILED ]
Run Script: S15audio.sh/etc/init.d/startup.sh: cannot create /mnt/scratch/log/St
                [ FAILED ]
Run Script: S18pacrunner.sh/etc/init.d/startup.sh: cannot create /mnt/scratch/lt
                [ FAILED ]
Run Script: S20connmand.sh/etc/init.d/startup.sh: cannot create /mnt/scratch/lot
                [ FAILED ]
Run Script: S30sshd/etc/init.d/startup.sh: cannot create /mnt/scratch/log/S30sst
                [ FAILED ]
Run Script: S80watchdog/etc/init.d/startup.sh: cannot create /mnt/scratch/log/St
                [ FAILED ]
Run Script: S81dmesg^C/etc/init.d/startup.sh: cannot create /mnt/scratch/log/S8t
                [ FAILED ]
Run Script: S99steam/etc/init.d/startup.sh: cannot create /mnt/scratch/log/S99st
                [ FAILED ]

Berlin Linux System ((none)//dev/console)

(none) login:

Berlin Linux System ((none)//dev/console)

(none) login: root
login[859]: root login on 'console'
/home/steam
# df
Filesystem           1K-blocks      Used Available Use% Mounted on
df: /proc/mounts: No such file or directory
# free
             total       used       free     shared    buffers     cached
Mem:   free: can't open '/proc/meminfo': No such file or directory
#
Berlin Linux System ((none)//dev/console)

(none) login:

Re: steam link hacks
February 23, 2018 11:04PM
Cut a CDROM audio cable and re-arrange the cables.

The small end was used for dockstar / pogopro serial port, now the big end can be used here. :P

OK. My serial console is on.

Any more commands you need me to run? Post here. I will do it when I have time.

Have a nice weekend!
Attachments:
open | download - steamlink_serial.jpg (582.5 KB)
Re: steam link hacks
February 23, 2018 11:10PM
Send a girl there, it might work...

from the boot console message

kinit: creating /dev/girl
open /dev/girl: No such device



Edited 1 time(s). Last edit at 02/23/2018 11:16PM by daviddyer.
Re: steam link hacks
February 24, 2018 03:03AM
> TP50-RX
> TP51-TX
> TP175-GND
>
> Confirmed. At least I connect
>
> TP50 to Rpi 0 GPIO14 (UART0 TXD)
> TP51 to Rpi 0 GPIO15 (UART0 RXD)
> TP175 to Rpi 0 Pin 6 (Ground)
>

Cool!

-bodhi
===========================
Forum Wiki
bodhi's corner
Re: steam link hacks
February 24, 2018 05:39AM
Your confirmation is certainly another step closer to unlocking this beast. Excellent!
Re: steam link hacks
February 24, 2018 03:14PM
daviddyer,

uname -a
cat /proc/cpuinfo
cat /proc/device-tree/model
mount
cat /proc/mtd
dpkg -l | grep mtd

-bodhi
===========================
Forum Wiki
bodhi's corner
Re: steam link hacks
February 24, 2018 05:06PM
uname -a
# uname -a
Linux steamlink-0AB9 3.8.13-mrvl #88 PREEMPT Mon Jan 29 12:13:33 PST 2018 armv7l GNU/Linux


cat /proc/cpuinfo

processor       : 0
model name      : ARMv7 Processor rev 0 (v7l)
BogoMIPS        : 995.32
Features        : swp half thumb fastmult vfp edsp thumbee neon vfpv3 tls
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x3
CPU part        : 0xc09
CPU revision    : 0

Hardware        : MV88DE3108
Revision        : 0000
Serial          : 0000000000000000
Re: steam link hacks
February 24, 2018 05:07PM
cat /proc/device-tree/model
mount


# cat /proc/device-tree/model
cat: can't open '/proc/device-tree/model': No such file or directory
# mount
rootfs on / type rootfs (rw)
/dev/mtdblock9 on / type yaffs2 (ro,relatime)
none on /dev type tmpfs (rw,relatime)
sys on /sys type sysfs (rw,relatime)
proc on /proc type proc (rw,relatime)
devtmpfs on /dev type tmpfs (rw,relatime)
devpts on /dev/pts type devpts (rw,relatime,mode=600)
tmpfs on /tmp type tmpfs (rw,relatime)
tmpfs on /mnt type tmpfs (rw,relatime)
/dev/block/mtdblock4 on /mnt/factory_setting type yaffs2 (ro,relatime)
/dev/block/mtdblock10 on /mnt/scratch type yaffs2 (rw,relatime)
/dev/block/mtdblock3 on /mnt/config type yaffs2 (rw,relatime)
unionfs on /etc type unionfs (rw,relatime,dirs=/mnt/config/overlay/etc=rw:/etc=ro)
unionfs on /var type unionfs (rw,relatime,dirs=/mnt/config/overlay/var=rw:/var=ro)
unionfs on /home/steam type unionfs (rw,relatime,dirs=/mnt/config/overlay/home/steam=rw:/home/steam=ro)
unionfs on /usr/local type unionfs (rw,relatime,dirs=/mnt/config/overlay/usr/local=rw:/usr/local=ro)
tmpfs on /var/run type tmpfs (rw,relatime)
/dev/loop0 on /home/apps type ext4 (rw,relatime,data=ordered)

Re: steam link hacks
February 24, 2018 05:12PM
cat /proc/mtd
# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00100000 00100000 "block0"
mtd1: 00800000 00100000 "bootloader"
mtd2: 00b00000 00100000 "env"
mtd3: 20000000 00100000 "sysconf"
mtd4: 02000000 00100000 "factory_setting"
mtd5: 02000000 00100000 "bootimgs"
mtd6: 08000000 00100000 "recovery"
mtd7: 02000000 00100000 "fts"
mtd8: 18000000 00100000 "factory"
mtd9: 40000000 00100000 "rootfs"
mtd10: 78400000 00100000 "cache"
mtd11: 00800000 00100000 "bbt"
mtd12: 100000000 00100000 "mv_nand"

dpkg -l | grep mtd
# dpkg -l | grep mtd
dpkg: not found
#
Re: steam link hacks
February 24, 2018 05:14PM
# ls /proc

1                1426             9                kmsg
1025             1487             902              loadavg
1026             1569             903              locks
1027             2                asound           mbt
1028             224              buddyinfo        meminfo
1029             226              bus              misc
1030             237              cgroups          modules
1034             254              cmdline          mounts
1087             255              config.gz        mtd
1089             270              consoles         mwlan
1110             289              cpu              net
1146             294              cpuinfo          pagetypeinfo
1158             3                crypto           partitions
1159             340              devices          self
1164             356              diskstats        softirqs
1181             357              driver           stat
1187             360              execdomains      sys
1209             371              filesystems      sysrq-trigger
1232             5                fs               sysvipc
1240             537              galois_cc        timer_list
1262             595              galois_fastlogo  timer_stats
1286             6                galois_pe        tty
1356             605              galois_pe_agent  uptime
1357             609              galois_shm       version
1368             7                interrupts       vmallocinfo
1370             8                iomem            vmstat
1372             814              ioports          yaffs
1373             827              irq              zoneinfo
1413             832              kallsyms
1421             898              key-users
#

Any interesting things in this folder?
Re: steam link hacks
February 24, 2018 05:15PM
No /boot directory

# ls -l /
total 42
drwxr-xr-x    1 root     2000          4096 Dec 31  1969 bin
-rw-r--r--    1 root     root           148 Aug  1  2008 build.prop
drwx------    1 root     root          4096 Feb 12  2016 data
drwxrwxrwt   10 root     root          1180 Dec 31  1969 dev
drwxr-xr-x    1 root     root          4096 Nov 23 19:08 etc
drwx------    1 root     root          4096 Dec 31  1969 home
drwx------    1 root     root          4096 Dec 31  1969 lib
drwx------    1 root     root          4096 Dec 31  1969 lost+found
drwxrwxrwt    5 root     root           100 Dec 31  1969 mnt
dr-xr-xr-x   76 root     root             0 Dec 31  1969 proc
drwx------    1 root     root          4096 Feb 12  2016 root
drwxr-xr-x    1 root     root          4096 Feb 12  2016 sbin
dr-xr-xr-x   12 root     root             0 Dec 31  1969 sys
drwxrwxrwt    4 root     root           160 Dec 31  1969 tmp
-rw-------    1 root     root          1342 Feb 12  2016 ueventd.rc
drwx------    1 root     root          4096 Feb 12  2016 usr
drwxr-xr-x    1 root     root          4096 Feb 12  2016 var
#
Re: steam link hacks
February 24, 2018 05:16PM
Note: I opened it last night, I can see it did an automatic update.
# cat build.prop
ro.build.fingerprint=646
ro.build.githash=4337236
ro.product.device=06_2015
ro.build.date.utc=1517256803
ro.build.date=Mon Jan 29 12:13:23 PST 2018



Edited 1 time(s). Last edit at 02/24/2018 05:30PM by daviddyer.
Re: steam link hacks
February 24, 2018 05:37PM
1. System and cpuinfo looks OK.

2. MTD are defined. But no mtd-utils installed. I wonder does this box has NAND only, or there is SPI flash? this should be somewhere in the various sites we've known.

3. The dmesg has too many errors so it cut off the useful part at the beginning!

4. /proc is interesting that it showed no /proc/device-tree. Which is bad, make the dmesg head even more important to see.

5. No /boot is unfortunate, because we would see more how it was built. But kernel source will once I can build it as they did.

--------

Regarding number 2. Please run

mtdinfo -a

-bodhi
===========================
Forum Wiki
bodhi's corner
Re: steam link hacks
February 24, 2018 05:50PM
Sad...

# mtdinfo -a
mtdinfo: not found
Re: steam link hacks
February 24, 2018 06:03PM
> # mtdinfo -a
> mtdinfo: not found

OK, I recall it is NAND flash. Just want to be sure.

-bodhi
===========================
Forum Wiki
bodhi's corner
Author:

Your Email:


Subject:


Spam prevention:
Please, enter the code that you see below in the input field. This is for blocking bots that try to post this form automatically. If the code is hard to read, then just try to guess it right. If you enter the wrong code, a new image is created and you get another chance to enter it right.
Message: