I have progress!
It appears that the mx50_yoshime3 configuration will not start at all unless I prevent it from calling arch_cpu_init. Otherwise, it runs a handful of instructions after returning and then hangs. My suspicion is that this is conflicting with the ROM's uboot somehow.
Once that's disabled, and with the board init hacked to always initialise as a gen 1.5 PW with ID 00002, it runs enough to get to a uboot prompt. From here I have discovered two things:
- after a random amount of time the Kindle disconnects from USB and hangs. This may be a hardware fault, or it may be an uninitialised watchdog timer of some description? The amount of time appears to be variable.
- trying to access the eMMC card, including trying to read the startup variables, always fails. The eMMC card response is that the card is locked (password protected but no password has been provided).
I'm guessing that this is spurious. If there's a hardware fault causing random resets (which I suspect) then maybe the card got powered down and corrupted its internal state? There is a way to reset the card's password by wiping it, but this seems... irreversable, so I thought I'd check in first. Any of this sound familiar to anyone?
|