DevHeads IoT Integration Server•13mo ago

I have a tricky one here. Got Firebox M590 that I want to re propose with linux. Sadly WG being WG..

I have a tricky one here.
Got Firebox M590 that I want to re propose with linux.
Sadly WG being WG..., it's super locked.
I removed only bootable drive (m2) and noticed that it's still getting grub...

Found, unsoldered and extracted firmware from only flash chip on board, it contains U-boot bootloader.
And that's where Im stuck, I need to modify it to boot from m2...

If there is any magician who knows how to do it, highly appreciated
Can create a thread if needed.

AAlexTryHarder I have a tricky one here. Got Firebox M590 that I want to re propose with linux....

melta101•12/3/24, 6:49 PM

sounds Nice
Is there a uEnv.txt present in uboot

melta101•12/3/24, 6:49 PM

and do you access to the uboot shell?

Mmelta101 sounds Nice Is there a uEnv.txt present in uboot

AlexTryHarderOP•12/3/24, 6:50 PM

I will be honest, I completely do not know anything about firmware itself.
Tried to do binwalk and dd to extract some of them, but I think offset was incorrect and I got a lot of garbage.
Im more than happy to share .bin

AAlexTryHarder I will be honest, I completely do not know anything about firmware itself. Tried...

melta101•12/3/24, 6:52 PM

Havnt done any reverse engg
So i dont know how to tackle this lol
If atleast the shell was accessible, there was a chance to change the boot at runtime.

Sounds like a fun project
Cheer!

Hope someone can help you

AlexTryHarderOP•12/3/24, 6:52 PM

Any tips how to attached myself to shell?

AAlexTryHarder Any tips how to attached myself to shell?

melta101•12/3/24, 6:53 PM

Are there any UART pins

Mmelta101 Are there any UART pins

melta101•12/3/24, 6:54 PM

You could connect it to a ftdi access serial port from there

AlexTryHarderOP•12/3/24, 6:54 PM

There is a serial, but it's goes straight to grub, with no edit option, that's why I did extraction

AlexTryHarderOP•12/3/24, 6:55 PM

binwalk shows that:

Offset    Size    Description
1096073    -    CRC32 polynomial table, little endian
1630121    -    U-Boot version string, "U-Boot 1.3.01.05 (Mar 31 2021 - 16:09:11 -0700)"
1670895    -    U-Boot version string, "U-Boot 1.3.01.05 (Mar 31 2021 - 16:09:11 -0700)"
1722958    -    U-Boot version string, "U-Boot 1.3.01.05 - Mar 31 2021 16:09:11"
1823681    -    Flattened device tree, size: 7138 bytes, version: 17
2100972    -    U-Boot version string, "U-Boot 1.3.01.05 (Mar 31 2021 - 16:09:11 -0700)' iommu.passthrough=1"
4194304    -    Flattened device tree, size: 1092272 bytes, version: 17
6291456    -    Flattened device tree, size: 9936 bytes, version: 17
6422528    -    Flattened device tree, size: 680 bytes, version: 17

Offset    Size    Description
1096073    -    CRC32 polynomial table, little endian
1630121    -    U-Boot version string, "U-Boot 1.3.01.05 (Mar 31 2021 - 16:09:11 -0700)"
1670895    -    U-Boot version string, "U-Boot 1.3.01.05 (Mar 31 2021 - 16:09:11 -0700)"
1722958    -    U-Boot version string, "U-Boot 1.3.01.05 - Mar 31 2021 16:09:11"
1823681    -    Flattened device tree, size: 7138 bytes, version: 17
2100972    -    U-Boot version string, "U-Boot 1.3.01.05 (Mar 31 2021 - 16:09:11 -0700)' iommu.passthrough=1"
4194304    -    Flattened device tree, size: 1092272 bytes, version: 17
6291456    -    Flattened device tree, size: 9936 bytes, version: 17
6422528    -    Flattened device tree, size: 680 bytes, version: 17

AlexTryHarderOP•12/3/24, 6:56 PM

In my noob firmware mind, I was hoping to just edit it and flash it back to chip

AAlexTryHarder In my noob firmware mind, I was hoping to just edit it and flash it back to chip...

melta101•12/3/24, 6:58 PM

It would've been that way if the HW was open source

AlexTryHarderOP•12/3/24, 6:59 PM

Damn watchguard

6k for hardware and still locked af

melta101•12/3/24, 6:59 PM

Have you tried typing boot to grub

Mmelta101 Have you tried typing boot to grub

AlexTryHarderOP•12/3/24, 7:01 PM

what you mean? On serial there is no edit option on grub entries. Either boot or boot to recovery
Both failing if hash of M2 is diffrent than original

AAlexTryHarder what you mean? On serial there is no edit option on grub entries. Either boot or...

melta101•12/3/24, 7:01 PM

I mean grub shell

AlexTryHarderOP•12/3/24, 7:01 PM

Oh, there is no grub shell, just predefined boot options

AlexTryHarderOP•12/3/24, 7:02 PM

something like that, without last option tho

AAlexTryHarder something like that, without last option tho

melta101•12/3/24, 7:02 PM

Press C

Mmelta101 Press C

AlexTryHarderOP•12/3/24, 7:03 PM

Box is at work, will try tomorrow and report back.
If that will work I will be suprised

melta101•12/3/24, 7:04 PM

Welp
All the best!

AlexTryHarderOP•12/3/24, 7:04 PM

Thanks, will let you know, could waste whole day on it!

melta101•12/3/24, 7:04 PM

May you resolder it back in 1 piece

Wwafa_ath Hi @Techist

Techist•12/4/24, 12:25 AM

Abstract? I'm a bit lost.
Please what's required of me in regards of my project presentation next week Wednesday?

Wwafa_ath That called tag collision in RFID, it's hardware limitation

fei•12/4/24, 3:44 AM

I see, if thats teh case im talking to the manufacturer agn

fei•12/4/24, 3:44 AM

it seems they do offer other alternatives with anti collision. I guess ill try that

TTechist Abstract? I'm a bit lost. Please what's required of me in regards of my project ...

wafa_ath•12/4/24, 7:11 AM

Just a small abstract so i can make you a link.
Also @Afuevu is going to present today you can join to see how it goes

TTechist Abstract? I'm a bit lost. Please what's required of me in regards of my project ...

melta101•12/4/24, 7:13 AM

presenting something?

TTechist Abstract? I'm a bit lost. Please what's required of me in regards of my project ...

ZacckOsiemo•12/4/24, 7:14 AM

An abstract is a small paragraph explaining what you will present.

Ffei it seems they do offer other alternatives with anti collision. I guess ill try t...

wafa_ath•12/4/24, 7:18 AM

Let us know how it goes. Also have you tried adjusting the reader settings as well?

Wwafa_ath Let us know how it goes. Also have you tried adjusting the reader settings as we...

fei•12/4/24, 7:18 AM

Yea, have been just playing with the reader settings for both EPC, TID and User data

fei•12/4/24, 7:18 AM

EPC just have better read ability compared to TID and User data, it seems or im just doing it wrong

fei•12/4/24, 7:19 AM

at 30dbm with some delay and filters when inventoring

Ffei Yea, have been just playing with the reader settings for both EPC, TID and User ...

wafa_ath•12/4/24, 7:24 AM

Have you tried lowering the power slightly or tweaking the inventory delay to see if it helps with TID and User data? , (my brother used to work with it and install them ,i am taking advices from him )

Wwafa_ath Have you tried lowering the power slightly or tweaking the inventory delay to se...

fei•12/4/24, 7:26 AM

I have but I can definitely check again, also does the rfid tag matter as much or is it just the reader?

Ffei I have but I can definitely check again, also does the rfid tag matter as much o...

wafa_ath•12/4/24, 7:28 AM

The reader’s capabilities are key

fei•12/4/24, 7:32 AM

If thats the case hopefully the new reader im ordering works well enough for my use case, but ill definitely check with the power and inventory delay settings again to make sure if its any better for TID, as i needed a constant ID and all the logic works in software instead of inside EPC or User data

fei•12/4/24, 7:32 AM

If not, ill have to fly to China to get the required equipments

techielew•12/4/24, 7:41 AM

Hey @Event Pings,
We've got a pretty busy next couple weeks on the event front:
* Thursday, December 5th at 15:00 UTC: @Ming will be sharing his wealth of Linux knowledge at the 2024 Yocto Project Summit—https://discord.com/events/1130679493799977062/1309899949382832158
* Sunday, December 8th at 15:00 UTC: @ZacckOsiemo continues his series on AI and FreeRTOS with a demo of gesture control using TensorFlow Lite (Lite RT)—https://discord.com/events/1130679493799977062/1312806706807443496
* Thursday, December 12th at 18:00 UTC: @JoeSchneider and @DJ Presto will be explaining how agile development methodologies and automation frameworks can accelerate safety-critical development of systems based on standards like IEC 62304
* Friday, December 13th at 15:00 UTC: Chris Melville, principal security engineer for His Magesty's Government will explain how IoT and connected devices can be secured in the context of new contintental security regulations—https://discord.com/events/1130679493799977062/1313749764210163763
* Sunday, December 15th at 15:00 UTC: @ZacckOsiemo will wrap up his series on AI with FreeRTOS -- https://discord.gg/devheads?event=1313771324434288651
* Friday, December 20th at 15:00 UTC: Join hardware, RTOS, middleware, tools, and other experts as they participate in a brief overview followed by in-depth discussion of what increased cybersecurity regulation means for SME technology firms operating in the EU, NA, UK, and other regions: https://discord.gg/7XwV3r5Y?event=1313754612985237566

Afuevu•12/4/24, 8:36 AM

Hello @here I will be having a session today by 5 pm WAT to talk about the energy meter project I have been working on. Attached is an image of the PCB we will use for the test. I would appreciate it if you were present, here is the link: https://app.livestorm.co/p/5507168f-31d9-45b5-9cf8-242db90bc4d8/live?s=79b27e95-039c-4ba8-8d9e-6be2a64e75c7

Design and Implementation of energy meter | DevHeads IoT Integratio...

AAfuevu Hello @here I will be having a session today by 5 pm WAT to talk about the energ...

melta101•12/4/24, 8:48 AM

That's a beautiful PCB,
Did you create those 3D Packages?

Mmelta101 That's a beautiful PCB, Did you create those 3D Packages?

Afuevu•12/4/24, 8:54 AM

Thank you, I usually check grabcad.com for 3d packages if it's not available on Kicad

AAfuevu Thank you, I usually check grabcad.com for 3d packages if it's not available on ...

melta101•12/4/24, 8:54 AM

nicee
it's quite rare to get such detailed 3d files

Afuevu•12/4/24, 8:56 AM

Yeah, I was amazed when i checked grabcad

Mmelta101 Press C

AlexTryHarderOP•12/4/24, 9:18 AM

Sadly pressing "c" wasn't a case

melta101•12/4/24, 9:18 AM

what does it boot in when click on those volumes?

AlexTryHarderOP•12/4/24, 9:19 AM

As M2 board was overwriten with linux image, in first attempt to boot from it,

Booting SYSA
unrecognized JEDEC id bytes: ff, ff, ff
Failed to initialize SPI flash at 0:0 (error -2)
No SPI flash selected. Please run `sf probe'
** Invalid partition 3 **
fsl-mc: Applying soft parser blob... FAILED with error code = 5:
BLOB : Invalid length detected
** Invalid partition 3 **
Wrong Image Format for bootm command
ERROR: can't get kernel image!
Switch 88E6191X all ports enable.

Booting SYSA
unrecognized JEDEC id bytes: ff, ff, ff
Failed to initialize SPI flash at 0:0 (error -2)
No SPI flash selected. Please run `sf probe'
** Invalid partition 3 **
fsl-mc: Applying soft parser blob... FAILED with error code = 5:
BLOB : Invalid length detected
** Invalid partition 3 **
Wrong Image Format for bootm command
ERROR: can't get kernel image!
Switch 88E6191X all ports enable.

AAlexTryHarder Sadly pressing "c" wasn't a case 😫

melta101•12/4/24, 9:19 AM

oh wait this is uboot menu

AlexTryHarderOP•12/4/24, 9:21 AM

Indeed says on top lol, tought it's a grub

melta101•12/4/24, 9:21 AM

there should be some key binding to it

melta101•12/4/24, 9:21 AM

to access shell

Offset Size Description 1096073 - CRC32 polynomial table, little endian 1630121 - U-Boot version string, "U-Boot 1.3.01.05 (Mar 31 2021 - 16:09:11 -0700)" 1670895 - U-Boot version string, "U-Boot 1.3.01.05 (Mar 31 2021 - 16:09:11 -0700)" 1722958 - U-Boot version string, "U-Boot 1.3.01.05 - Mar 31 2021 16:09:11" 1823681 - Flattened device tree, size: 7138 bytes, version: 17 2100972 - U-Boot version string, "U-Boot 1.3.01.05 (Mar 31 2021 - 16:09:11 -0700)' iommu.passthrough=1" 4194304 - Flattened device tree, size: 1092272 bytes, version: 17 6291456 - Flattened device tree, size: 9936 bytes, version: 17 6422528 - Flattened device tree, size: 680 bytes, version: 17

Booting SYSA unrecognized JEDEC id bytes: ff, ff, ff Failed to initialize SPI flash at 0:0 (error -2) No SPI flash selected. Please run `sf probe' ** Invalid partition 3 ** fsl-mc: Applying soft parser blob... FAILED with error code = 5: BLOB : Invalid length detected ** Invalid partition 3 ** Wrong Image Format for bootm command ERROR: can't get kernel image! Switch 88E6191X all ports enable.

I have a tricky one here. Got Firebox M590 that I want to re propose with linux. Sadly WG being WG..

Similar Threads

Similar Threads

Similar Threads