[RELEASE] TWRP Recovery for S905W

shujabutt · #31

Any way to screenshot twrp i dont have full display in twrp

Is any update for twrp? With resolution fix

shujabutt · #32

can i install twrp with stock rom? x96mini android 9

Abufadi · #33

I have X96 MINI ROOTED, with android TV 9 after updated, I need to unrooted to play some application, can you help us?

ph086 · #34

Hi i have a T95 S1 S905w that is bricked can i use this to recover? how do i use it thanks

#35

[mention]ph086[/mention]
You need an FW with MCL-Nand support. Try installing this, everything else will not work..
viewtopic.php?f=2&t=582&start=40

ph086 · #36

bumerc wrote: ↑Fri Jun 12, 2020 2:43 pm [mention]ph086[/mention]
You need an FW with MCL-Nand support. Try installing this, everything else will not work..
viewtopic.php?f=2&t=582&start=40

Hi bumerc
thanks for the reply is it the mega link atvXperience_tx3_mini_v1.3 .img
Posted by User: BaT420

#37

ph086 wrote: ↑Fri Jun 12, 2020 4:23 pm
bumerc wrote: ↑Fri Jun 12, 2020 2:43 pm [mention]ph086[/mention]
You need an FW with MCL-Nand support. Try installing this, everything else will not work..
viewtopic.php?f=2&t=582&start=40
Hi bumerc
thanks for the reply is it the mega link atvXperience_tx3_mini_v1.3 .img
Posted by User: BaT420

yes, that's right, but posted by [mention]davidlaz[/mention]

ph086 · #38

bumerc wrote: ↑Fri Jun 12, 2020 8:52 pm
ph086 wrote: ↑Fri Jun 12, 2020 4:23 pm
bumerc wrote: ↑Fri Jun 12, 2020 2:43 pm [mention]ph086[/mention]
You need an FW with MCL-Nand support. Try installing this, everything else will not work..
viewtopic.php?f=2&t=582&start=40
Hi bumerc
thanks for the reply is it the mega link atvXperience_tx3_mini_v1.3 .img
Posted by User: BaT420
yes, that's right, but posted by [mention]davidlaz[/mention]

Hi bumerc

Unfortunately i cannot run that image on my box.
i have tried with USB Burn but it dose not finish
and i have tried with Burn card maker and the android update pops up for a split second but the despairs.
I have 2 other images that do install but both get stuck at the Logo screen. But this is the same issue i started off with a few day ago when i did not power down correctly

ph086 · #39

bumerc wrote: ↑Fri Jun 12, 2020 2:43 pm [mention]ph086[/mention]
You need an FW with MCL-Nand support. Try installing this, everything else will not work..
viewtopic.php?f=2&t=582&start=40

Hi bumerc

So i used Burn Card maker with the img you suggested.
on boot it looks like its going to work as the upgrade bar starts to go green but it stops about 10 seconds into it and loads back to the logo it had before

Burn Card maker
options selected
format and partition --YES
erase flash -- erase in force YES
erase bootloader--NO
reboot--No

Here is a section from the Uart log the whole log in in Link

Code: Select all

GXL:BL1:9ac50e:bb16dc;FEAT:ADFC318C:0;POC:3;RCY:0;EMMC:800;NAND:0;READ:0;0.0;CHK                                                                          :0;
TE: 24512

BL2 Built : 11:04:41, Jan 26 2018.
gxl g034b32c - xingyu.chen@droid12-sz

set vcck to 1120 mv
set vddee to 1000 mv
Board ID = 1
CPU clk: 1200MHz
DQS-corr enabled
DDR scramble enabled
DDR3 chl: Rank0 16bit @ 720MHz

bist_test rank: 0 2c 01 57 35 0f 5c 2f 05 59 36 0e 5f 35 35 35 35 35 35 34 34 34                                                                           34 34 34 637
Rank0: 2048MB-2T-11
AddrBus test pass!
NAND init
Load fip header from NAND, src: 0x0000c000, des: 0x01400000, size: 0x00004000
New fip structure!
Load bl30 from NAND, src: 0x00010000, des: 0x01100000, size: 0x0000d600
Load bl31 from NAND, src: 0x00020000, des: 0x05100000, size: 0x0002c600
Load bl33 from NAND, src: 0x00050000, des: 0x01000000, size: 0x00067200
NOTICE:  BL3-1: v1.0(release):35dd647
NOTICE:  BL3-1: Built : 15:20:30, Feb  7 2018
[BL31]: GXL CPU setup!
NOTICE:  BL31: BL33 decompress pass
mpu_config_enable:ok
[Image: gxl_v1.1.3308-b30529c-dirty 2018-05-28 19:44:39]
OPS=0xc4
21 0d c4 00 b6 b1 a3 f8 49 9d f4 a8 7d 17 fc 3e
[0.352819 Inits done]
secure task start!
high task start!
low task start!
ERROR:   Error initializing runtime service opteed_fast


U-Boot 2015.01 (Sep 07 2018 - 16:46:33)

DRAM:  2 GiB
Relocation Offset is: 76eb0000
===============y20180907k=====================
register usb cfg[0][1] = 0000000077f59ae0
[CANVAS]canvas init
boot_device_flag : 1
Nand PHY Ver:1.01.001.0006 (c) 2013 Amlogic Inc.
init bus_cycle=6, bus_timing=7, system=5.0ns
NAND device id: 2c 84 64 54 a9 0 0 0
detect NAND device: B revision L95B NAND 16GiB MT29F128G08CBECB
param data[32~43]: 53, 50, 45, 43,54, 45
nand Manufacturer: specteck

bus_c=6,bus_t=7,sys=4.0ns,T_REA=16,T_RHOH=15
new oob mode
show_phydev_list
0: nfboot
detect new nand here and new_type:50
NAND CKECK:arg nbbt: valid=1, blk=9, page=0
NAND CKECK:arg fbbt: valid=1, blk=3, page=0
outside dtb: 0000000000000000
using dtb on nand
amlnf_dtb_init_partitions: probe.
NAND CKECK:arg ndtb: valid=1, blk=7, page=17
dtb magic 5f4c4d41
      Amlogic multi-dtb tool
      Multi dtb detected
      Multi dtb tool version: v2 .
      Support 2 dtbs.
        aml_dt soc: gxl platform: p212 variant: 2g
        dtb 0 soc: gxl   plat: p212   vari: 1g
        dtb 1 soc: gxl   plat: p212   vari: 2g
      Find match dtb: 1
start dts,buffer=0000000073ed6300,dt_addr=0000000073ee1300
      Amlogic multi-dtb tool
      Multi dtb detected
      Multi dtb tool version: v2 .
      Support 2 dtbs.
        aml_dt soc: gxl platform: p212 variant: 2g
        dtb 0 soc: gxl   plat: p212   vari: 1g
        dtb 1 soc: gxl   plat: p212   vari: 2g
      Find match dtb: 1
parts: 10
00:      logo   0000000002000000 1
01:  recovery   0000000002000000 1
02:       rsv   0000000000800000 1
03:       tee   0000000000800000 1
04:     crypt   0000000002000000 1
05:      misc   0000000002000000 1
06:      boot   0000000002000000 1
07:    system   0000000080000000 1
08:     cache   0000000020000000 2
09:      data   ffffffffffffffff 4
cache !!!
NAND CKECK:arg ncnf: valid=1, blk=2, page=0
aml_key_init probe.
NAND CKECK:arg nkey: valid=1, blk=4, page=17
boot_device_flag 1
NAND CKECK:arg nenv: valid=1, blk=6, page=15
NAND CKECK:arg phyp: valid=1, blk=5, page=1
amlnand_phydev_init,1429,phydev->offset=0,phydev->size=1000000
amlnand_phydev_init,1429,phydev->offset=19000000,phydev->size=2a000000
amlnand_phydev_init,1429,phydev->offset=43000000,phydev->size=9e000000
amlnand_phydev_init,1429,phydev->offset=e1000000,phydev->size=31f000000
nfboot    : 0x000000000000-0x000001000000 :partn=0:single_chip single_plane
nfcache   : 0x000019000000-0x00002a000000 :partn=1:single_chip multi_plane
nfcode    : 0x000043000000-0x00009e000000 :partn=8:single_chip multi_plane
nfdata    : 0x0000e1000000-0x00031f000000 :partn=1:single_chip multi_plane
amlnf_logic_init() start
(nfcache), size:2a000000
nftl version 1.01.002
Nov 18 2016, fix logic partition calculation
size_in_blk 42; total_block 41;
get the phy_dev_size=20000000H tmp_off_size=100000H phy_dev_block=21Hnftl start:                                                                          size_in_blk=41,free_block_num=8-blks(37), total_blocks(33)
this part not enough free block 37 , 33!!
 create_part_list fail!
aml_nftl_initialize: fail
(nfcode), size:9e000000
nftl version 1.01.002
Nov 18 2016, fix logic partition calculation
get the phy_dev_size=8b000000H tmp_off_size=458000H phy_dev_block=8cHnftl start:                                                                          size_in_blk=158,free_block_num=18-blks(153), total_blocks(140)
amlnf_logic_init() done
MMC:   aml_priv->desc_buf = 0x0000000073f05c10
aml_priv->desc_buf = 0x0000000073f07f30
SDIO Port B: 0, SDIO Port C: 1
uboot env amlnf_env_read : ####
In:    serial
Out:   serial
Err:   serial
reboot_mode=cold_boot
[store]To run cmd[amlnf dtb_read 0x1000000 0x40000]
cmd dtb_read:
amlnf_dtb_read: ####
262144 bytes dtd_read : OK
      Amlogic multi-dtb tool
      Multi dtb detected
      Multi dtb tool version: v2 .
      Support 2 dtbs.
        aml_dt soc: gxl platform: p212 variant: 2g
        dtb 0 soc: gxl   plat: p212   vari: 1g
        dtb 1 soc: gxl   plat: p212   vari: 2g
      Find match dtb: 1
vpu: clk_level in dts: 7
vpu: set clk: 666667000Hz, readback: 666660000Hz(0x300)
vpu: vpu_clk_gate_init_off
vpp: vpp_init
hpd_state=1
[1080p60hz] is invalid for cvbs.
set hdmitx VIC = 16
config HPLL = 2970000
HPLL: 0xc000027b
config HPLL done
j = 4  vid_clk_div = 1
hdmitx: set enc for VIC: 16
HDMITX-DWC addr=0x10004006 rd_data=0x40
Error: HDMITX-DWC exp_data=0xff mask=0x9f
rx version is 1.4 or below  div=10
hdmtix: set audio
hdmitx phy setting done
Net:   dwmac.c9410000amlkey_init() enter!
[EFUSE_MSG]keynum is 8
[BL31]: tee size: 0

Start read misc partition datas!
info->attemp_times = 0
info->active_slot = 0
info->slot_info[0].bootable = 1
info->slot_info[0].online = 1
info->slot_info[1].bootable = 0
info->slot_info[1].online = 0
info->attemp_times = 0
attemp_times = 0
active slot = 0
wipe_data=successful
wipe_cache=successful
upgrade_step=2
[OSD]load fb addr from dts
[OSD]fb_addr for logo: 0x7f851000
[OSD]load fb addr from dts
[OSD]fb_addr for logo: 0x7f851000
[CANVAS]addr=0x7f851000 width=3840, height=2160
amlkey_init() enter!
amlkey_init() 71: already init!
[EFUSE_MSG]keynum is 8
[BL31]: tee size: 0
[KM]Error:f[key_manage_query_size]L507:key[usid] not programed yet
[KM]Error:f[key_manage_query_size]L507:key[mac] not programed yet
[KM]Error:f[key_manage_query_size]L507:key[deviceid] not programed yet
detect sadckey ....
update by key...
InUsbBurn
noSof
card in
init_part() 278: PART_TYPE_DOS
[mmc_init] mmc init success
Device: SDIO Port B
Manufacturer ID: 3
OEM: 5344
Name: SL16G
Tran Speed: 50000000
Rd Block Len: 512
SD version 3.0
High Capacity: Yes
Capacity: 14.8 GiB
mmc clock: 40000000
Bus Width: 4-bit
[MSG]Reload bmps env.
Err imgread(L587):Logo header err.
[MSG]ini sz 0x25dB
[fat]Filesize is 0x25dB[0M]
[fat]0x:leftSz 25d < BPS 2000, gotSz 25d

=========sdc_burn_paras=====>>>
[common]
erase_bootloader = 0
erase_flash      = 2
reboot           = 0x0
key_overwrite    = 0x0

[burn_ex]
package          = atvXperience_tx3_mini_v1.3.img
media            =

[burn_parts]
burn_num         = 0

<<<<=====sdc_burn_paras======

[fat]Filesize is 0x3d3b1dd4B[979M]
[fat]0x:leftSz c40 < BPS 2000, gotSz 6c40
[MSG]image version [0x00000002]
[MSG]cfg10=0xADFC318C
[fat]Seek 0xbab00 from 0x6c40
[MSG]itemSizeNotAligned 0x1500
[MSG]align 4 mmc read...        [fat]0x:leftSz 300 < BPS 2000, gotSz 15800
[MSG]Down(mem) part(dtb) sz(0x15800) fmt(normal)
[MSG]Burn Start...
[MSG]load dt.img to 0x0000000001000000, sz=0x15800
[MSG]Burn complete
[MSG]echo video prepare for upgrade
hpd_state=1
[OSD]check dts: FDT_ERR_BADMAGIC, load default fb_addr parameters
[OSD]fb_addr for logo: 0x3d800000
[OSD]check dts: FDT_ERR_BADMAGIC, load default fb_addr parameters
[OSD]fb_addr for logo: 0x3d800000
[CANVAS]addr=0x3d800000 width=3840, height=2160
[1080p60hz] is invalid for cvbs.
set hdmitx VIC = 16
config HPLL = 2970000
HPLL: 0xc000027b
config HPLL done
j = 4  vid_clk_div = 1
hdmitx: set enc for VIC: 16
rx version is 1.4 or below  div=10
hdmtix: set audio
hdmitx phy setting done
[MSG]dw,dh[1920, 1080]
[MSG]w,h[4,14]
[MSG]Exit before re-init
command:        store  exit
amlnf_exit : ok
dtb magic 5f4c4d41
      Amlogic multi-dtb tool
      Multi dtb detected
      Multi dtb tool version: v2 .
      Support 2 dtbs.
        aml_dt soc: gxl platform: p212 variant: 2g
        dtb 0 soc: gxl   plat: p281   vari: 1g
        dtb 1 soc: gxl   plat: p281   vari: 2g
      Not match any dtb.
start dts,buffer=0000000001000000,dt_addr=0000000001000000
check_valid_dts: FDT_ERR_BADMAGIC
get_partition_from_dts: -9
ERR(../drivers/usb/gadget/v2_burning/v2_common/optimus_download.c)L761:Failed at                                                                           get_partition_from_dts
ERR(../drivers/usb/gadget/v2_burning/v2_sdc_burn/optimus_sdc_burn.c)L663:Fail to                                                                           init stoarge for sdc burn
Device: SDIO Port B
Manufacturer ID: 3
OEM: 5344
Name: SL16G
Tran Speed: 50000000
Rd Block Len: 512
SD version 3.0
High Capacity: Yes
Capacity: 14.8 GiB
mmc clock: 40000000
Bus Width: 4-bit
reading aml_autoscript
** Unable to read file aml_autoscript **
reading recovery.img
** Unable to read file recovery.img **
(Re)start USB...
USB0:   USB3.0 XHCI init start
Register 2000140 NbrPorts 2
Starting the controller
USB XHCI 1.00
scanning bus 0 for devices... 1 USB Device(s) found
       scanning usb for storage devices... 0 Storage Device(s) found
** Bad device usb 0 **
** Bad device usb 0 **
"Synchronous Abort" handler, esr 0x96000004
ELR:     77f00bd4
LR:      77f02f48
x0 : 73666d61723d6570 x1 : 0000000073efae80
x2 : 0000000000010000 x3 : 0000000000000800
x4 : 0000000001080000 x5 : 0000000000000000
x6 : 0000000077f35678 x7 : 0000000000000044
x8 : 0000000000000001 x9 : 0000000000000000
x10: 000000000000000f x11: 0000000077f379b0
x12: 0000000000000000 x13: 0000000000000000
x14: 0000000000000000 x15: 0000000000000000
x16: 0000000000000000 x17: 0000000000000000
x18: 0000000073e9fe28 x19: 0000000073efae00
x20: 0000000000000000 x21: 0000000073efae80
x22: 0000000001080000 x23: 0000000000000000
x24: 0000000000000800 x25: 0000000077f0073c
x26: 0000000077f50000 x27: 0000000073efb970
x28: 0000000000000000 x29: 0000000073e9e6c0

Resetting CPU ...

Here is the full Log https://pastebin.com/zpE8UgHn

#40

[mention]ph086[/mention]

Code: Select all

 Not match any dtb.
start dts,buffer=0000000001000000,dt_addr=0000000001000000
check_valid_dts: FDT_ERR_BADMAGIC
get_partition_from_dts: -9
ERR(../drivers/usb/gadget/v2_burning/v2_common/optimus_download.c)L761:Failed at                                                                           get_partition_from_dts
ERR(../drivers/usb/gadget/v2_burning/v2_sdc_burn/optimus_sdc_burn.c)L663:Fail to

during flashing, dtb is loaded into the RAM memory at 0x1000000 (dtb_mem_addr), nand memory is initialized and then partitioned, only then are all other partitions written to the already partitioned memory area of u-boot. In your case, dtb is not found because it appears to have not been configured or configured incorrectly in image.cfg, and optimus_download.c driver returns the error.

1. Copy _aml_dtb.PARTITION to the same SD card by hand (unpack the IMG beforehand)
2 DO NOT connect your box to HDMI cables and only leave uart connected
3. Cancel the autoboot, press ENTER or spacebar as soon as you have connected the box to the mains.
4. Now execute the following commands in the uboot terminal

Code: Select all

mmcinfo
fatload mmc 0 ${loadaddr} _aml_dtb.PARTITION
store dtb write ${loadaddr}
store erase boot
reset

After the reset command the flash process (sdc_burn) starts automatically, wait until it is completely finished

erase flash -- erase in force YES

With this option you delete the MAC address of your box, use option "1", normal „flash erase“

atvXperience : The Forum

[RELEASE] TWRP Recovery for S905W

Login • Register