小米盒子4S Pro TTL調(diào)試

wdmomoxx · 發(fā)表于 2020-11-18 13:48

小米盒子4S Pro網(wǎng)上資料比較少，只能自己拆機(jī)查看了
拆機(jī)發(fā)現(xiàn)板子非常簡(jiǎn)陋，板子連TF卡槽都取消了，主板上有一個(gè)未焊接的3腳焊盤(pán)位，應(yīng)該就是TTL，接上測(cè)試可以進(jìn)行調(diào)試，系統(tǒng)uboot可以進(jìn)入，系統(tǒng)命令行操作是關(guān)閉的，無(wú)法進(jìn)入，不過(guò)能進(jìn)入U(xiǎn)boot感覺(jué)還是可以玩玩的，說(shuō)不定可以USB啟動(dòng)外部系統(tǒng)

簡(jiǎn)陋的主板照：

小米盒子4S Pro TTL調(diào)試

TTL接口，如果沒(méi)有啟動(dòng)信息可能是TX，RX標(biāo)反了，反接一下即可

小米盒子4S Pro TTL調(diào)試

詳細(xì)的TTL信息：

SM1:BL:511f6b:81ca2f;FEAT:B0F971B0:20292020;POC:F;RCY:0;EMMC:0;READ:0;0.0;0.0;CHK:0;
bl2_stage_init 0x01
bl2_stage_init 0x81
hw id: 0x0000 - pwm id 0x01
bl2_stage_init 0xc1
bl2_stage_init 0x02
L0:0000000f
L1:00000700
L2:00008067
L3:15000020
S1:00000000
B2:20292020
B1:b0f971b0
TE: 514704
BL2 Built : 13:38:54, Oct 10 2020. g12a g92322cd - shuai.wu@xiaomi
Board ID = 0
Set cpu clk to 24M
Set clk81 to 24M
Use GP1_pll as DSU clk.
DSU clk: 1200 Mhz
CPU clk: 1800 MHz
Set clk81 to 166.6M
eMMC boot [url=home.php?mod=space&uid=103582]@[/url] 0
sw8 s
board id: 0
Load FIP HDR DDR from eMMC, src: 0x00010200, des: 0xfffd0000, size: 0x00004000, part: 0
fw parse done
PIEI prepare done
00000000
emmc switch 1 ok
00000000
emmc switch 2 ok
NO find ddr boot_info from eMMC
fastboot data verify
result: 255
Cfg max: 12, cur: 1. Board id: 255. Force loop cfg
DDR4 probe
LPDDR4_PHY_V_0_1_21-Built : 15:37:51, Mar 26 2020. g12a gf098346 - gongwei.chen@droid11-sz
ddr clk to 1320MHz
00000000
emmc switch 0 ok
dmc_version 0001
Check phy result
INFO : End of initialization
INFO : End of read enable training
INFO : End of fine write leveling
INFO : ERROR : Training has failed!
1D training failed
Cfg max: 12, cur: 2. Board id: 255. Force loop cfg
DDR4 probe
ddr clk to 1320MHz
dmc_version 0001
Check phy result
INFO : End of initialization
INFO : End of read enable training
INFO : End of fine write leveling
INFO : End of read dq deskew training
INFO : End of MPR read delay center optimization
INFO : End of Write leveling coarse delay
INFO : End of write delay center optimization
INFO : End of read delay center optimization
INFO : End of max read latency training
INFO : Training has run successfully!
1D training succeed
Check phy result
INFO : End of initialization
INFO : End of 2D read delay Voltage center optimization
INFO : End of 2D write delay Voltage center optimization
INFO : Training has run successfully!
soc_VRef_reg_value 0x 00000032 00000030 0000002b 0000002f 0000002d 0000002d 00000032 0000002f 0000002d 00000030 0000002e 00000030 0000002a 0000002f 00000031 0000002d 00000034 00000031 0000002f 0000002b 0000002e 0000002f 0000002e 00000030 0000002c 0000002c 00000032 00000031 0000002f 0000002a 00000032 0000002f dwc_ddrphy_apb_wr((0<<20)|(2<<16)|(0<<12)|(0xb0):0001
dram_vref_reg_value 0x 0000001a
2D training succeed
auto size-- 65535DDR cs0 size: 2048MB
DDR cs1 size: 0MB
DMC_DDR_CTRL: 0050002cDDR size: 2048MB
cs0 DataBus test pass
cs0 AddrBus test pass
non-sec scramble use zero key
ddr scramble enabled
100bdlr_step_size ps== 440
result report
boot times 0Enable ddr reg access
00000000
emmc switch 3 ok
BL2: rpmb counter: 0x0000001c
00000000
emmc switch 0 ok
Load FIP HDR from eMMC, src: 0x00010200, des: 0x01700000, size: 0x00004000, part: 0
Load BL3X from eMMC, src: 0x00078200, des: 0x01768000, size: 0x0013aa00, part: 0
0.0;0.0;M3 CHK:0;cm4_sp_mode 0
[Image: g12a_v1.1.3395-4f61cc3 2020-09-21 11:08:04 shuai.wu@xiaomi]
OPS=0x03
ring efuse init
2b 0b 03 00 01 11 2a 00 00 11 31 36 41 34 56 50
[0.050490 Inits done]
secure task start!
high task start!
low task start!
boot bl31
NOTICE: BL31: v1.3(release):61f890e5e
NOTICE: BL31: Built : 15:09:20, Sep 16 2020
NOTICE: BL31: G12A secure boot!
NOTICE: BL31: BL33 decompress pass
INFO: BL3-2: ATOS-V2.4.4-30-g921539e #1 Fri Dec 6 01:21:23 2019 -0700 arm
INFO: BL3-2: Chip: SM1 Rev: B (2B:B - 0:2)
INFO: BL3-2: crypto engine DMA
INFO: BL3-2: secure time TEE
INFO: BL3-2: CONFIG_DEVICE_SECURE 0xb200000e
U-Boot 2015.01-g6223619 (Oct 19 2020 - 14:52:47), Build: jenkins-uboot_frozen_release-2
DRAM: 1 GiB
Relocation Offset is: 36d89000
mmu cfg end: 0x40000000
mmu cfg end: 0x40000000
register usb cfg[0][1] = 0000000037ea4890
gpio: pin GPIOAO_11 (gpio 11) value is 1
InUsbBurn
wait for phy ready count is 0
noSof
sof timeout, reset usb phy tuning
gpio: pin GPIOX_6 (gpio 86) value is 1
MMC: aml_priv->desc_buf = 0x0000000033d7a0c0
aml_priv->desc_buf = 0x0000000033d7c400
SDIO Port B: 0, SDIO Port C: 1
co-phase 0x3, tx-dly 0, clock 400000
co-phase 0x3, tx-dly 0, clock 400000
co-phase 0x3, tx-dly 0, clock 400000
emmc/sd response timeout, cmd8, cmd->cmdarg=0x1aa, status=0x1ff2800
emmc/sd response timeout, cmd55, cmd->cmdarg=0x0, status=0x1ff2800
co-phase 0x3, tx-dly 0, clock 400000
co-phase 0x3, tx-dly 0, clock 40000000
[set_emmc_calc_fixed_adj][875]find fixed adj_delay=20
init_part() 297: PART_TYPE_AML
[mmc_init] mmc init success
aml log : R2048 check pass!
Amlogic multi-dtb tool
Single dtb detected
start dts,buffer=0000000001000000,dt_addr=0000000001000000
get_partition_from_dts() 92: ret 0
Amlogic multi-dtb tool
Single dtb detected
parts: 17
00: logo 0000000000800000 1
01: recovery 0000000001800000 1
02: misc 0000000000800000 1
03: dtbo 0000000000800000 1
04: cri_data 0000000000800000 2
05: param 0000000001000000 2
06: boot 0000000001000000 1
set has_boot_slot = 0
07: rsv 0000000001000000 1
08: metadata 0000000001000000 1
09: vbmeta 0000000000200000 1
10: tee 0000000002000000 1
11:factorydata 0000000000a00000 2
12: vendor 0000000020000000 1
13: system 0000000040000000 1
14: product 0000000002000000 1
15: cache 0000000020000000 2
16: data ffffffffffffffff 4
init_part() 297: PART_TYPE_AML
eMMC/TSD partition table have been checked OK!
crc32_s:0x1577dad == storage crc_pattern:0x1577dad!!!
crc32_s:0xee152b83 == storage crc_pattern:0xee152b83!!!
crc32_s:0x79f50f07 == storage crc_pattern:0x79f50f07!!!
mmc env offset: 0x27400000
aml log : internal sys error!
reboot_mode=cold_boot
amlkey_init() enter!
[EFUSE_MSG]keynum is 4
vpu: driver version: v20190313
vpu: detect chip type: 11
vpu: clk_level default: 7(666667000Hz), max: 7(666667000Hz)
vpu: clk_level in dts: 7
vpu: vpu_power_on
vpu: set_vpu_clk
vpu: set clk: 666667000Hz, readback: 666666667Hz(0x100)
vpu: set_vpu_clk finish
vpu: vpu_module_init_config
vpp: vpp_init
vpp: vpp osd2 matrix rgb2yuv..............
hdr_func 4, hdr_process_select 0x1
gpio: pin GPIOH_7 (gpio 38) value is 1
cvbs: cpuid:0x2b
cvbs: find performance_pal config
aml log : internal sys error!
pll tsensor avg: 0x1f9b, u_efuse: 0x2b
temp1: 36
ddr tsensor avg: 0x1f9c, u_efuse: 0x53
temp2: 37
device cool done
hpd_state=0
do_hpd_detect: hdmimode=2160p60hz
do_hpd_detect: colorattribute=420,8bit
Saving Environment to aml-storage...
mmc env offset: 0x27400000
Writing to MMC(1)... done
no sink, fallback to 720p60hz[4]
hdr mode is 0
dv mode is ver:0 len: 0
hdr10+ mode is 0
read hdmichecksum 0x00000000, colorattribute 420,8bit
read hdmimode 2160p60hz, colorspace <NULL>, colordepth <NULL>
do_get_parse_edid: autoMode = false, manualMode=97
isYuv4KSink: false, maxTMDSRate=150
do_get_parse_edid: non-yuv4k sink: inColorSpace: HDMI_COLOR_FORMAT_RGB
do_get_parse_edid: default inColorDepth: HDMI_COLOR_DEPTH_24B
TV is same, initial mode is: 576cvbs attr: 420,8bit
dolby_status 0
dolby_status 0
dolby_vision_process: no tv and dv disabled
Saving Environment to aml-storage...
mmc env offset: 0x27400000
Writing to MMC(1)... done
[OSD]load fb addr from dts:/meson-fb
[OSD]load fb addr from dts:/fb
[OSD]set initrd_high: 0x7f800000
[OSD]fb_addr for logo: 0x7f800000
[OSD]load fb addr from dts:/meson-fb
[OSD]load fb addr from dts:/fb
[OSD]fb_addr for logo: 0x7f800000
[OSD]VPP_OFIFO_SIZE:0xfff01fff
[CANVAS]canvas init
[CANVAS]addr=0x7f800000 width=3840, height=2160
[OSD]osd_hw.free_dst_data: 0,719,0,575
[OSD]osd1_update_disp_freescale_enable
vpp: vpp_matrix_update: 2
cvbs_performance_enhancement
cvbs_config_hdmipll_g12a
cvbs_set_vid2_clk
dolby_status 0
dolby_status 0
hdr_packet
vpp: hdr_policy = 0
vpp: Rx hdr_info.hdr_sup_eotf_smpte_st_2084 = 0
s_version: U-Boot 2015.01-g6223619
Hit Enter or space or Ctrl+C key to stop autoboot -- : 0
co-phase 0x3, tx-dly 0, clock 40000000
co-phase 0x3, tx-dly 0, clock 40000000
co-phase 0x3, tx-dly 0, clock 400000
emmc/sd response timeout, cmd8, cmd->cmdarg=0x1aa, status=0x1ff2800
emmc/sd response timeout, cmd55, cmd->cmdarg=0x0, status=0x1ff2800
co-phase 0x3, tx-dly 0, clock 400000
co-phase 0x3, tx-dly 0, clock 40000000
[set_emmc_calc_fixed_adj][875]find fixed adj_delay=20
init_part() 297: PART_TYPE_AML
[mmc_init] mmc init success
switch to partitions #0, OK
mmc1(part 0) is current device
do_factorydata_read:204 Can't find out assm_mn from factorydata.
factorydata - Access the factorydata from Xiaomi Partition
Usage:
factorydata argv:
dump
read keyname
write keyname value
erase keyname
do_factorydata_read:204 Can't find out loglevel from factorydata.
factorydata - Access the factorydata from Xiaomi Partition
Usage:
factorydata argv:
dump
read keyname
write keyname value
erase keyname
do_factorydata_read:204 Can't find out console_enable from factorydata.
factorydata - Access the factorydata from Xiaomi Partition
Usage:
factorydata argv:
dump
read keyname
write keyname value
erase keyname
Command: bcb uboot-command
Start read misc partition datas!
BCB hasn't any datas,exit!
do_monitor_bt_cmdline
USB0: USB3.0 XHCI init start
Register 3000140 NbrPorts 2
Starting the controller
USB XHCI 1.10
scanning bus 0 for devices... 3 USB Device(s) found
udev->descriptor.idVendor:0xbda udev->descriptor.idProduct:0xc820
enumerate rtk usb dev OK usb_port:1
bt_cmdline: start to download fw
bt_cmdline: fw downloaded
rtk_set_wake_polarity, polarity=0
hci_set_scan_enable
no recovery mod!
rc scan end
[imgread]szTimeStamp[2020102104463406]
[imgread]secureKernelImgSz=0x91d800
aml log : R~2048 check pass!
aml log : R2048 check pass!
aml log : R2048 check pass!
avb2: 0
ee_gate_off ...
avb2: 0
## Booting Android Image at 0x01080000 ...
Kernel command line: androidboot.dtbo_idx=0 buildvariant=user
[store]Is good fdt check header, no need decrypt!
load dtb from 0x1000000 ......
Amlogic multi-dtb tool
Single dtb detected
Loading Kernel Image(COMP_NONE) ... OK
kernel loaded at 0x01080000, end = 0x01989000
libfdt fdt_getprop(): FDT_ERR_NOTFOUND
Loading Device Tree to 0000000009fea000, end 0000000009fffbbc ... OK
fdt_fixup_memory_banks, reg:0000000000000000
Starting kernel ...
uboot time: 10220517 us
[ 0.000000@0] Linux version 4.9.113-g0ba0888-dirty (jenkins@c5-mitv-bsp-build07.bj) (gcc version 6.3.1 20170109 (Linaro GCC 6.3-2017.02) ) #1 SMP PREEMPT Wed Oct 21 04:30:00 CST 2020
[ 0.000000@0] Reserved memory: regions without no-map are not yet supported
[ 0.000000@0] Kernel command line: init=/init console=ttyS0,115200 no_console_suspend earlyprintk=aml-uart,0xff803000 ramoops.pstore_en=1 ramoops.record_size=0x8000 ramoops.console_size=0x4000 hdr_policy=0 hdr_priority= reboot_mode_android=normal logo=osd0,loaded,0x3d800000 vout=576cvbs,enable hdmitx=,420,8bit hdmimode=2160p60hz hdmichecksum=0x00000000 dolby_vision_on=0 frac_rate_policy=1 hdmi_read_edid=1 cvbsmode=576cvbs osd_reverse=0 video_reverse=0 irq_check_en=0 androidboot.firstboot=0 jtag=disable androidboot.hardware=amlogic androidboot.bootloader=U-Boot 2015.01-g6223619 androidboot.build.expect.baseband=N/A androidboot.reboot_mode=cold_boot androidboot.platform_id=216 androidboot.mi.cpu=Cortex-A55 androidboot.mi.gpu=Mali-G31 androidboot.model_name=m23m_00_3f androidboot.provider=amlogic androidboot.serialno=30699800000001836 androidboot.mac=6c:0d:c4:0f:6e:0a quiet root=/dev/mmcblk0p18 ro rootwait skip_initramfs androidboot.selinux=enforcing otg_device=0 androidboot.dtbo_idx=0 build
[ 0.455892@0] vout: error: invalid vinfo1. current vmode is not supported
[ 0.457064@0] vout: error: invalid vinfo1. current vmode is not supported
[ 0.602556@1] meson_cpufreq_init:don't find the node <dynamic_gp1_clk>
[ 0.606573@1] ff803000.serial: clock gate not found
[ 0.747851@1] di_get_vpu_clkb: get clk vpu error.
[ 0.749132@1] get fclk_div5 err
[ 0.750031@1] vdin_drv_probe: vdin cannot get msr clk !!!
[ 0.755758@1] get fclk_div5 err
[ 0.758555@1] vdin_drv_probe: vdin cannot get msr clk !!!
[ 0.768861@1] pixel_probe: vpp probe func error!
[ 0.810889@0] cectx ff80023c.aocec: not find 'port_num'
[ 0.810936@0] cectx ff80023c.aocec: no hdmirx regs
[ 0.815271@0] cectx ff80023c.aocec: no hhi regs
[ 0.821827@0] cectx ff80023c.aocec: wakeup_reason:0x0
[ 0.857197@0] request_irq error ret=-22
[ 0.857258@0] dev_pm_set_wake_irq failed: -22
[ 0.861218@0] page_trace_module_init, create sysfs failed
[ 0.866034@0] defendkey ff630218.defendkey: Reserved memory is not enough!
[ 1.089421@0] asoc-aml-card auge_sound: control 2:0:0:I2SIn CLK:0 is already present
[ 1.091526@0] snd_tdm ff660000.audiobus:tdm@1: ASoC: Failed to add I2SIn CLK: -16
[ 1.098990@0] aml_dai_tdm_probe, failed add snd tdm controls
[ 1.104626@0] asoc-aml-card auge_sound: control 2:0:0:I2SIn CLK:0 is already present
[ 1.112379@0] snd_tdm ff660000.audiobus:tdm@2: ASoC: Failed to add I2SIn CLK: -16
[ 1.119799@0] aml_dai_tdm_probe, failed add snd tdm controls
[ 1.[ 1.590270@3] EXT4-fs (mmcblk0p18): couldn't mount as ext3 due to feature incompatibilities
[ 1.623333@3] usb 1-1: Unsupported device
[ 1.623707@3] usb 1-1: Unsupported device
[ 1.626047@3] usb 1-1: Unsupported device
[ 1.878156@2] init: waitid failed: No child processes
[ 1.878230@2] init: get_model_name: Model Name -> m23m_00_3f
[ 1.883446@2] init: get_model_property_ini : INI load file error, use default file
[ 2.055145@3] ueventd: /vendor/ueventd.rc: 110: /sys/ lines must have 5 entries
[ 3.626765@3] Amlogic A/V streaming port init
[ 4.418508@3] android.hardware.health@2.0-impl: wakealarm_init: timerfd_create failed
[ 12.760974@2] init: Boot Completed !!!
[ 12.761842@2] inyt: Can't create : File exists
[ 13.976602@2] rtk_btusb: reset_controller
[ 15.619288@0] rtk_btusb: btchr_ioctl:Failed with wrong Cmd:1074021809
[ 21.074753@2] init: No such service 'bdupdate' for ctl.stop
[ 21.078214@3] init: No such service 'sensord' for ctl.stop

復(fù)制代碼

turkeycq · 發(fā)表于 2023-10-23 12:44

turkeycq 發(fā)表于 2023-6-19 14:56
我這個(gè)也是一樣。

ctrl+z

ggfddjkl · 發(fā)表于 2022-7-9 18:18

請(qǐng)問(wèn)怎么用這個(gè)備份文件修磚已經(jīng)變磚了獅子沒(méi)錢(qián)再買(mǎi)新的了求求你們誰(shuí)知道的可以指點(diǎn)下嗎唉

自在的小白兔 · 發(fā)表于 2020-12-2 23:17

aghfsj135 發(fā)表于 2020-11-18 14:23
最近準(zhǔn)備買(mǎi)一個(gè)盒子，請(qǐng)問(wèn)有哪些好的推薦

3增強(qiáng)版

路人甲是野百合 · 發(fā)表于 2020-11-18 14:04

默默大神的新玩具

已經(jīng)變成零件了

solitary. · 發(fā)表于 2020-11-18 14:09

這個(gè)配置399，降價(jià)100快性?xún)r(jià)比都不算高

Aitd001 · 發(fā)表于 2020-11-18 14:09

還在用3呢

小魚(yú)干. · 發(fā)表于 2020-11-18 14:10

牛皮啊這么快到手開(kāi)始拆了

44044zryja · 發(fā)表于 2020-11-18 14:11

玩機(jī)大神的樂(lè)趣跟我們小白就是不一樣，直接拆機(jī)開(kāi)干

fafdd · 發(fā)表于 2020-11-18 14:20

4k都放不了，不如它爺爺

aghfsj135 · 發(fā)表于 2020-11-18 14:23

最近準(zhǔn)備買(mǎi)一個(gè)盒子，請(qǐng)問(wèn)有哪些好的推薦

采蘑菇的小伙 · 發(fā)表于 2020-11-18 14:27

要這么多代碼啊

› 智能電視盒 / 安卓TV機(jī)頂盒區(qū) › 小米盒子論壇

小米盒子4S Pro TTL調(diào)試

小米盒子4S Pro TTL調(diào)試

相關(guān)帖子