May 2005 - e3-hacking

Shell
by Jonathan McDowell 16 Aug '05

16 Aug '05

Turns out the E3 does obey the same sort of PBL format as the E2, but there's some sort of timing issue with pblq I think. I've hacked up something that does the job and rewritten my boot parameters to drop to /bin/sh and I'm in! Some files from /proc can be seen at: http://www.earth.li/~noodles/files/delta-proc.txt J. -- /------------------------------------\ | Make friends. | \------------------------------------/

3 6

pblq 'n' stuff
by David Given 04 Jun '05

04 Jun '05

My E2 is still in a box. Somewhere. I currently have other things on my mind, such as getting my hot water working... Do we have a CVS (or other) repository anywhere that I can upload pblq to, in the meantime? There's stuff that needs doing to it, like support for the execute-code command that Otaku found, and the E3 support that... uh... someone hacked in (sorry, I can't find the message), and I don't think I'm going to be doing anything with it any time soon. Plus, at some stage I presume people are going to want to start hacking ucLinux or big Linux... -- +- David Given --McQ-+ "Under communism, man exploits man. Under | dg(a)cowlark.com | capitalism, it's just the opposite." --- John | (dg(a)tao-group.com) | Kenneth Galbrith +- www.cowlark.com --+

3 5

[E2 hacking] E2 monitor v0.22
by Matt Evans 27 May '05

27 May '05

Hello, I've uploaded the state-so-far of my monitor to: http://www.axio.ms/projects/e2/e2-monitor-0.22.tgz (the README from the tar is also at http://www.axio.ms/projects/e2/e2-monitor-0.22-README ) What it can do: o Provides basic monitor with commands such as peek/poke/go o XMODEM upload/download RAM over serial (though this is currently v.picky about terminal s/w used) o Read NAND flash to RAM o Write/erase NAND flash from RAM data o CRC32 chunks of memory o Initialise LCD a bit/provide simple string/hex printing to it o Boot from PBL What it can't yet do: o Search the rest of NAND for executable client programs, and boot them o Access SMC cards (I have been unable to coax PBL into accessing them, but it looks like much of the support is there in PBL. (Not necessarily complete/functional of course)) It's pretty fast at downloading data and writing it to flash, or just executing code, so I find it's a better development environment than EXP'ing stuff down with pblq-alikes. I've usually started up the E2, interrupted the splash screen over JTAG and downloaded the ELF (over jtag); now that it boots from flash, it'll accept a new version of itself via XMODEM and run that happily. (Whew, my Windows box is now unnecessary!) I don't know if anyone's interested in trying it out or using it; I'd be grateful for any comments, suggestions or code contributions! It's not really there yet - well, XMODEM works for me but probably won't for anyone else =] That's next on my list. -Matt ps: Here are the supported commands, from its help text: Help (commands are case-sensitive): h/? - This help dump <m|fd> <addr> <len> - Hexdump RAM or flash crc <addr> <len> - CRC32 memory get <addr> <len> - XMODEM download from RAM put <addr> - XMODEM upload to RAM flashwr <flash offset> <len> <ram address> - Write RAM data into flash device flashrd <flash offset> <len> <ram address> - Copy flash data into RAM listdevs - List flash devices go <addr> - Jump to address r{b|w} <addr> - Read byte/word w{b|w} <addr> <data> - Write byte/word fill <addr> <len> <byte> - Fill memory lcd <string> - Write string to LCD console [ fd above is a flash device ID, 0 = internal, 1 = external etc., as listed in listdevs ] [ All numbers/addresses/offsets are hexadecimal - zero padding is unnecessary ] pps: Any better names..?

2 4

Gouranga
by Neateye 17 May '05

17 May '05

Call out Gouranga be happy!!! Gouranga Gouranga Gouranga .... That which brings the highest happiness!!

1 0

Re: E3 status
by Jonathan McDowell 17 May '05

17 May '05

[This probably makes sense on the mailing list instead] On Tue, May 17, 2005 at 03:34:05PM +0100, Rahim Nathwani wrote: > It's a shame I can't find a UK supplier of IAX2 handsets. How's your > E3 hacking going? :) I haven't really done anything recently, at least since getting shell access without having to take it apart. I compiled up a 2.6 kernel that I'd hoped might half work but flashing is a real pain. At some point I plan to add kernel boot support to pbltool using the store/jump codes Jake was talking about, but I've had plenty of other things on. Ideally I'd like 2.6 support, but 2.4 would be a good start if it had jffs2 enabled - the device at present just has a read only cramfs partition. Something writable would be much nicer and would make running OpenEmbedded quite easy. J. -- Eat a prune. Start a movement. | .''`. Debian GNU/Linux Developer | : :' : Happy to accept PGP signed | `. `' or encrypted mail - RSA + | `- DSA keys on the keyservers.

1 0

PBL & running arbitrary code (revisited)
by Otaku 07 May '05

07 May '05

I don't know if this is common knowledge, and I've just missed the thread or whatever, but : Command 4 seems to be the "jump to this address" directive.. I've been playing with executing tiny bits of code with it - it seems to work ok with 05.. Apologies if this isn't shiny news .. :) Jake

1 0

Polyphonic file format
by Matt Holmes 04 May '05

04 May '05

Hi, Does anyone know how to download polyphonic files to the e3? Obviously I don't want to pay the £1.50 charge. Can you send them as an attachment via email. What format does the e3 require for polyphonic ring tones? regards, Matt Holmes United Kingdom _____

3 2

[E2 hacking] Accessed flash through PBL
by Matt Evans 04 May '05

04 May '05

Yey, Just got my bootmonitor reading/erasing/writing flash reliably with images I'm downloading to it, by calling PBL's flash accessing routines. It's suddenly becoming useful - it's not quite there yet, I hope to give y'all an update/tarball tomorrow. Cheers, Matt

1 0

Partial disassebly ..
by Otaku 01 May '05

01 May '05

I've shoved the disassembly I've been working on up on my box, just fyi.. its available @ http://purple.earth.li/~tta/e3_disasm.zip or http://purple.earth.li/~tta/e3_disasm.lst it is _very_ raw, and some of the function names are "best guess before I work out what they do" iykwim.. Any corrections, suggestions would be useful.. Oh, and Matt, is your email dodgy atm ? Cheers Jake

2 1