TVT tftp update

Manciu

n3wb
Joined
Oct 29, 2021
Messages
1
Reaction score
0
Location
Romania
Hello! I have a TVT device that I bricked with an update. I'm trying to reflash it via TFTP, but the firmware I have is .tar, and the request to the TFTP server asks for a .bin file. Is there any way to do this? I attached a picture with the request.
Reading through the log I saw that it looks for a file on the sd-card slot. Could I possibly put the file I have on an sd-card and try to flash it like that? Thank you!

NPIp>Tdma1 ini_ver 0x30210906
ETH trim = 000012FC
speed 000003A4
Non S3
WT
dma ok

UNZOK!
Loader Start ...
LD_VER 03.00.03

566_DRAM1_933_1024Mb 12/01/2021 17:21:07

No card inserted
Pad driving increased
SPI NOR MID=000000C2,TYPE=00000020,SIZE=00000019=>02000000
SPI NOR
Q_read 4X
tmp_addr 0x02000000
LdCtrl2 0x00000000
Q_read 4X
uboot_addr 0x06000000
uboot_size 0x01FC0000
Q_read 4X
nodep 0x00103944
NVT_LINUX_SMP_OFFfdt 0x00100000
shm 0x00200000
jump 0x06000000


U-Boot 2019.04 (Jun 16 2022 - 18:07:19 +0800)

CPU: Novatek NT @ 960 MHz
DRAM: 128 MiB
Relocation to 0x07f47000, Offset is 0x01f47000 sp at 07c3fdc0
nvt_shminfo_init: The fdt buffer addr: 0x07c45450
ARM CA9 global timer had already been initiated
otp_init!
120MHz
otp_timing_reg= 0xff6050
CONFIG_MEM_SIZE = 0x08000000
CONFIG_NVT_UIMAGE_SIZE = 0x00800000
CONFIG_NVT_ALL_IN_ONE_IMG_SIZE = 0x02000000
CONFIG_UBOOT_SDRAM_BASE = 0x06000000
CONFIG_UBOOT_SDRAM_SIZE = 0x01fc0000
CONFIG_LINUX_SDRAM_BASE = 0x01100000
CONFIG_LINUX_SDRAM_SIZE = 0x04f00000
CONFIG_LINUX_SDRAM_START = 0x05800000
MMC: NVT_MMC0: 0
misc_init_r: Firmware name: FW98566A.bin FW98566T.bin FW98566A.fdt.bin
misc_init_r: boot time: 225039(us)
id = 0xc2 0x20 0x19 0xc2 0x00
STDR256FW with page size 256 Bytes, erase size 4 KiB, total 32 MiB
nvt spinor 1-bit mode @ 48000000 Hz
nvt_detect_fw_tbin: Boot from flash or emmc
Card did not respond to voltage select!
Card did not respond to voltage select!
MMC interface configure failed
Open SD fail: No SD device?
device 0 offset 0x10000, size 0x10000
SF: 65536 bytes @ 0x10000 Read: OK
nvt_getfdt_emb_part_info: Skip this partition node: partition_fdt.restore
mtdparts=mtdparts=spi_nor.0:0x20000@0x10000(fdt),0x60000@0x50000(uboot),0x20000@ 0xb0000(uenv),0x260000@0xd0000(linux),0x160000@0x330000(rootfs0),0x1a00000@0x490 000(app)
misc_init_r: boot time: 313346(us)
DTS find cpu freq clock 960MHz
Set CPU clk 960MHz
misc_init_r: boot time: 397084(us)
Net: na51089_eth_initialize 1.0.0.1
eth_na51089
Hit any key to stop autoboot: 0
do_nvt_boot_cmd: boot time: 481093(us)
NVT firmware boot.....
nvt_detect_fw_tbin: Boot from flash or emmc
device 0 offset 0xd0000, size 0x40
SF: 64 bytes @ 0xd0000 Read: OK
device 0 offset 0xd0000, size 0x1ecec0
SF: 2019008 bytes @ 0xd0000 Read: OK
nvt_ker_img_ungzip_linux: not gzip linux
nvt_boot_linux_bin_auto: linux_addr:0x05800000
nvt_boot_linux_bin_auto: linux_size:0x001ecea0
do_nvt_boot_cmd: boot time: 698916(us)
do_nvt_boot_cmd: bootargs:earlyprintk console=ttyS0,115200 rootwait nprofile_irq _duration=on rootfstype=squashfs ro mtdparts=spi_nor.0 root=/dev/mtdblock6 bo otts=150651,703249 resume_addr=0x00200088 user_debug=0xff
Image Name: Linux-4.19.91
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 2018912 Bytes = 1.9 MiB
Load Address: 00008000
Entry Point: 00008000
Linux Image is at 5800000, uboot fdt image is at 7c45450, loader tmp fdt addres s is at 100000
bootm 5800000 - 7c45450
do_nvt_boot_cmd: boot time: 749721(us)
do_nvt_boot_cmd: Uboot boot time:
start: 150651 us
ending: 703249 us
## Booting kernel from Legacy Image at 05800000 ...
Image Name: Linux-4.19.91
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 2018912 Bytes = 1.9 MiB
Load Address: 00008000
Entry Point: 00008000
Verifying Checksum ... OK
## Flattened Device Tree blob at 07c45450
Booting using the fdt blob at 0x7c45450
Loading Kernel Image
Loading Device Tree to 03cf8000, end 03cff0e5 ... OK

Starting kernel ...

ACTLR: 0x00000004
ACTLR: 0x00000044
Disable MMU
Clear MMU
Uboot L2 cache aux val: 0x72420000
Uboot L2 cache prefetch ctrl val: 0x70800000
Uboot L2 cache ctrl val: 0x00000000
Done
Uncompressing Linux... done, booting the kernel.
Booting Linux on physical CPU 0x0
Linux version 4.19.91 (huangyp@frontendserver) (gcc version 8.4.0 (Buildroot 202 0.02.9-10-g744f210)) #1 PREEMPT Wed Dec 22 19:35:24 CST 2021
CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7), cr=10c5387d
CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
OF: fdt: Machine model: Novatek NA51089
Memory policy: Data cache writeback
OF: fdt: Reserved memory: failed to reserve memory for node 'cma0@0x01A00000': b ase 0x01a00000, size 0 MiB
CPU: All CPU(s) started in SVC mode.
random: get_random_bytes called from 0x8053c934 with crng_init=0
Built 1 zonelists, mobility grouping on. Total pages: 18288
Kernel command line: earlyprintk console=ttyS0,115200 rootwait nprofile_irq_dura tion=on rootfstype=squashfs ro mtdparts=spi_nor.0 root=/dev/mtdblock6 bootts= 150651,703249 resume_addr=0x00200088 user_debug=0xff
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 66940K/73728K available (4622K kernel code, 254K rwdata, 700K rodata, 19 2K init, 164K bss, 6788K reserved, 0K cma-reserved)
Virtual kernel memory layout:
vector : 0xffff0000 - 0xffff1000 ( 4 kB)
fixmap : 0xffc00000 - 0xfff00000 (3072 kB)
vmalloc : 0x85000000 - 0xff800000 (1960 MB)
lowmem : 0x80000000 - 0x84800000 ( 72 MB)
modules : 0x7f000000 - 0x80000000 ( 16 MB)
.text : 0x80008000 - 0x8048ba98 (4623 kB)
.init : 0x8053c000 - 0x8056c000 ( 192 kB)
.data : 0x8056c000 - 0x805ab954 ( 255 kB)
.bss : 0x805ab954 - 0x805d4b24 ( 165 kB)
SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
rcu: Preemptible hierarchical RCU implementation.
Tasks RCU enabled.
NR_IRQS: 384
L2C-310 enabling early BRESP for Cortex-A9
L2C-310 full line of zeros enabled for Cortex-A9
L2C-310 ID prefetch enabled, offset 1 lines
L2C-310 dynamic clock gating enabled, standby mode enabled
L2C-310 cache controller enabled, 8 ways, 128 kB
L2C-310: CACHE_ID 0x410000c9, AUX_CTRL 0x76420001
novatek_clock_init
sched_clock: 64 bits at 120MHz, resolution 8ns, wraps every 4398046511102ns
clocksource: arm_global_timer: mask: 0xffffffffffffffff max_cycles: 0x3759f22983 , max_idle_ns: 881590413697 ns
Switching to timer-based delay loop, resolution 8ns
Calibrating delay loop (skipped), value calculated using timer frequency.. 240.0 0 BogoMIPS (lpj=1200000)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
CPU: Testing write buffer coherency: ok
Setting up static identity map for 0x81c0 - 0x81fc
rcu: Hierarchical SRCU implementation.
devtmpfs: initialized
VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 4
NVTBOOTTS: nvt_bootts_proc_init initial success
clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911 2604462750000 ns
futex hash table entries: 256 (order: 0, 7168 bytes)
pinctrl core: initialized pinctrl subsystem
NET: Registered protocol family 16
DMA: preallocated 256 KiB pool for atomic coherent allocations
*** nvt_poweroff_setup
nvt_otp_module_init
nvt_vos: 1.00.003 (Dec 22 2021 19:39:24)
*** disable_cnn Get CNN2 Clock error
nvt_gpio f0070000.gpio: Register nvt_gpio_probe successfully
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
nvt_i2c f0220000.i2c: Register nvtim_i2c_probe successfully ver:1.00.013
nvt_i2c f0350000.i2c2: Register nvtim_i2c_probe successfully ver:1.00.013
nvt_i2c f03a0000.i2c3: Register nvtim_i2c_probe successfully ver:1.00.013
clocksource: Switched to clocksource arm_global_timer
kdrv_builtin_init init module ==========
nvt_jpg version: 1.00.007
kdrv_builtin_init init module ==========
NET: Registered protocol family 2
tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 6144 bytes)
TCP established hash table entries: 1024 (order: 0, 4096 bytes)
TCP bind hash table entries: 1024 (order: 2, 20480 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
UDP hash table entries: 256 (order: 1, 12288 bytes)
UDP-Lite hash table entries: 256 (order: 1, 12288 bytes)
NET: Registered protocol family 1
RPC: Registered named UNIX socket transport module.
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
Initialise system trusted keyrings
workingset: timestamp_bits=30 max_order=15 bucket_order=0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
jffs2: version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
Key type asymmetric registered
Asymmetric key parser 'x509' registered
io scheduler noop registered (default)
f0290000.uart: ttyS0 at MMIO 0xf0290000 (irq = 5, base_baud = 1500000) is a NVT
nvt_serial: console setup on port #0
console [ttyS0] enabled
f0300000.uart: ttyS1 at MMIO 0xf0300000 (irq = 6, base_baud = 3000000) is a NVT
f0310000.uart: ttyS2 at MMIO 0xf0310000 (irq = 7, base_baud = 3000000) is a NVT
nvt_serial: driver initialized
id = 0xc2 0x20 0x19 0xc2
spi_nor f0400000.nor: mtd .name=spi_nor.0 .size=2000000(32M) .erasesize = 0x1000 0(64K)
spi_nor f0400000.nor: 1-bit mode @ 48000000 Hz
10 fixed-partitions partitions found on MTD device spi_nor.0
Creating 10 MTD partitions on "spi_nor.0":
0x000000000000-0x000000010000 : "loader"
0x000000010000-0x000000030000 : "fdt"
0x000000030000-0x000000050000 : "fdt.restore"
0x000000050000-0x0000000b0000 : "uboot"
0x0000000b0000-0x0000000d0000 : "uenv"
0x0000000d0000-0x000000330000 : "kernel"
0x000000330000-0x000000490000 : "rootfs"
0x000000490000-0x000001e90000 : "app"
0x000001e90000-0x000002000000 : "rootfsl1"
0x000000000000-0x000002000000 : "all"
libphy: Fixed MDIO Bus: probed
nvt_eth_env_probe: get IO MEM 0xfd2b0000
nvt_eth_env_probe: pinmux detect emb phy 0x0
DWC_ETH_QOS: Phy detected at ID/ADDR 0
libphy: dwc_phy: probed
Supports TSO, SG and TX COE
Supports RX COE and GRO
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
nvtim_init_usbhc
nvtim_init_usbhc assert reset
R0x40=0x30230001
ehci-nvtivot f0600000.nvt_usb2host: usbhc-nvtivot
ehci-nvtivot f0600000.nvt_usb2host: new USB bus registered, assigned bus number 1
ehci-nvtivot f0600000.nvt_usb2host: irq 51, io mem 0xff600000
ehci-nvtivot f0600000.nvt_usb2host: USB 2.0 started, EHCI 1.00, overcurrent igno red
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
usbcore: registered new interface driver cdc_wdm
nvt_rtc f0060000.rtc: rtc core: registered nvt_rtc as rtc0
i2c /dev entries driver
nvt_mmc f0420000.mmc: Using DMA, 4-bit mode sampling Positive edge, mmc0
NET: Registered protocol family 10
Segment Routing with IPv6
sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
NET: Registered protocol family 17
NET: Registered protocol family 15
lib80211: common routines for IEEE802.11 drivers
Key type dns_resolver registered
Registering SWP/SWPB emulation handler
Loading compiled-in X.509 certificates
nvt_rtc f0060000.rtc: setting system clock to 1970-01-01 02:30:19 UTC (9019)
cfg80211: Loading compiled-in X.509 certificates for regulatory database
nvtim_patch_usbhc channel
cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
cfg80211: failed to load regulatory.db
VFS: Mounted root (squashfs filesystem) readonly on device 31:6.
devtmpfs: mounted
Freeing unused kernel memory: 192K
This architecture does not have kernel memory protection.
Run /sbin/init as init process
random: fast init done
mount: mounting tmpfs on /tmp failed: Invalid argument
mount: mounting tmpfs on /var/run failed: Invalid argument
mount: mounting /dev/mtdblock7 on /mnt/mtd/bin failed: Invalid argument
current times 1
mount: mounting /dev/mtdblock7 on /mnt/mtd/bin failed: Invalid argument
current times 2
current /dev/mtdblock7 xtimes 2
chown: unknown user/group root:root

total 1157
-rwxr-xr-x 1 1003 1004 29536 Apr 12 2021 ld-uClibc-1.0.32.so
lrwxrwxrwx 1 1003 1004 14 Mar 29 2021 ld-uClibc.so.0 -> ld-uC libc.so.1
lrwxrwxrwx 1 1003 1004 19 Mar 29 2021 ld-uClibc.so.1 -> ld-uC libc-1.0.32.so
lrwxrwxrwx 1 1003 1004 19 Mar 29 2021 libc.so.0 -> libuClibc- 1.0.32.so
-rwxr-xr-x 1 1003 1004 124492 Apr 12 2021 libgcc_s.so.1
lrwxrwxrwx 1 1003 1004 17 Apr 12 2021 libiperf.so -> libiperf .so.0.0.0
lrwxrwxrwx 1 1003 1004 17 Apr 12 2021 libiperf.so.0 -> hydev exist: resume phy
[1;32mlibiperf.so.0.0.0
-rwxr-xr-x 1 1003 1004 DWC_ETH_QOS_yinit: apb_clk 120000000 Hz
101208 Apr 12 2021 libiperf.so.0.0.0
-rwxr-xr-x Queue0 Tx fifo size 2048, Rx fifo size 2048
1 1003 1004 927788 Apr 12 2021 libuClibc-1.0.Disabled JUMBO pkt
32.so
drwxr-xr-x 2 1003 1004 30 Aug 4 20Enabled Rx watchdog timer
21 modules
current no ipcamera exe
start update ....Enabled TSO
........
install sdcard driver .............
mount: mounting /Disabled Rx Split header mode
dev/mmcblk0p1 on /tmp_run/99 failed: No such file or directory
phydev exist: start phy
mount sdcard fail .........
start update from ftp : 192.168.0.200 .......

 

Attachments

Last edited:
Top