Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ak2i HW81 - random corruption writing to flash (every 2 megabytes) #126

Open
Rifu86 opened this issue Jan 17, 2018 · 0 comments
Open

Ak2i HW81 - random corruption writing to flash (every 2 megabytes) #126

Rifu86 opened this issue Jan 17, 2018 · 0 comments

Comments

@Rifu86
Copy link

Rifu86 commented Jan 17, 2018

Not really sure how to title this issue...

I flashed my AK2i HW81 with NTRBOOT, but noticed when restoring flash that it restored
a number of sectors that and the addresses followed a pattern every '0x0020 0000'

I reflashed NTRBOOT and took a flash dump to compare with the original dump
and for some reason every 0x0020 0000 bytes (2097152 bytes / 2 MiB) has changed.

maybe my AK2i is faulty? or could it be that my HW81 AK2i has 2mib flash like the HW44 ones?

Can someone please do this to see if its just my flashcard or if it happens to you as well...

  1. Make a flash dump of the original Ak2i firmware and copy it to another location.
  2. Flash NTRBOOT to your AK2i.
  3. Make a flash dump after NTRBOOT has been flashed.
  4. Compare the original and NTRBOOT dumps.
  5. check if every 0x0020 0000 bytes has changed.
    e.g 0x00280000 and 0x00480000 etc

Comparing files ak2i-backup.bin and ak2i-backup_NTRBOOT.bin

00080000: FE 4E <- blowfish key start
~
00081047: BE B9 <- blowfish key end

00081FC4: 80 00 <- chipid and length {0x00, 0x00, 0x0F, 0xC2, 0x00, 0xB4, 0x17, 0x00}
00081FC5: 00 B4
00081FC6: 18 17

00089E00: 04 46 < Firmware Start
~
000915FF: 85 9F < Firmware End

There are modifications every 0x0020 0000 bytes...

00280000: DE 6E
~
00281047: FE F9

00281FC4: 00 80
00281FC5: 40 F4
00281FC6: 4C 43

00289E00: 24 66
~
002915FF: A5 BF

it Happens at 0x0048 0000,

00480000: E2 23
~
00481047: BA BD

00481FC4: 84 04
00481FC5: 98 51
00481FC6: 98 97

00489E00: 28 0A
~
004915FF: 7E D6

and at 0x0068 0000.. etc.. up to the end of the flash image at 00E80000
The data appears different in every section though...
I can attach the two dumps if they are needed, its about 13 megabytes zipped.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant