![]() |
#1 |
Enthusiast
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 35
Karma: 39448
Join Date: Jul 2007
Device: Sony PRS-500
|
![]()
Hello all,
i have bricked Kindle 4. It can't boot self, stuck on tree picture (without progress bar). Only way to start normal to working state is through mfgtool (main) other modes working too (diags/fastboot). I tried following but without success. - flashed main kernel, diags kernel, diags via fastboot - flashed mmcblk0p2 via ssh from diags. - erased /var/local Anybody can help ? It looks like there is something wrong with booting bootloader or something. Thanks. |
![]() |
![]() |
![]() |
#2 | |
Going Viral
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
|
Quote:
|
|
![]() |
![]() |
Advert | |
|
![]() |
#3 |
Carpe diem, c'est la vie.
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 6,433
Karma: 10773668
Join Date: Nov 2011
Location: Multiverse 6627A
Device: K1 to PW3
|
MfgTool boots using a custom u-boot bootloader, so it is possible that your u-boot image on the mmc is damaged. You may need to reflash it with fastboot. A good uboot image can probably be extracted similarly to how kernels get extracted (a new variation of the getkernels.sh script). There are currently no u-boot forensic images online that I am aware of.
Until you can reflash u-boot, you are stuck with an MfgTool "tethered boot". BTW, did you try setting the bootmode var to main with fastboot? Does anybody here have time to extract a K4 u-boot and provide a link? |
![]() |
![]() |
![]() |
#4 | |
Enthusiast
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 35
Karma: 39448
Join Date: Jul 2007
Device: Sony PRS-500
|
Battery is on 75 (diags info).
Quote:
I extracted kernels images with getkernels.sh script from working k4 (my wife). Also i extracted whole mmcblk0 (about 1,5GB). Is it safe to flash whole mmcblk0 to different kindle via SSH ? Anyone can extract u-boot image or how to do that ? Thanks |
|
![]() |
![]() |
![]() |
#5 | |
Carpe diem, c'est la vie.
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 6,433
Karma: 10773668
Join Date: Nov 2011
Location: Multiverse 6627A
Device: K1 to PW3
|
Quote:
On a K4, a damaged PCBSN can prevent uboot from initializing the RAM, bricking it. Apparently different revisions of the K4 use different (incompatible) RAM. There is (usually) no need to backup more than the first 32MB of mmcblk0, because it is partitioned and contains stuff that you can image separately. You should be able to extract u-boot from that image though, with a modified version of getkernels.sh. You would have to put the u-boot start and length into that script (or just use the dd command from it) to extract u-boot. |
|
![]() |
![]() |
Advert | |
|
![]() |
#6 |
Enthusiast
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 35
Karma: 39448
Join Date: Jul 2007
Device: Sony PRS-500
|
Do you know start address and count in mmcblk0 of u-boot area ?
|
![]() |
![]() |
![]() |
#7 |
Carpe diem, c'est la vie.
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 6,433
Karma: 10773668
Join Date: Nov 2011
Location: Multiverse 6627A
Device: K1 to PW3
|
I would have posted it above if I did. I do not have time to search for it at the moment. Have patience, or do some of your own investigation (a recommended learning experience). If you find it, please post it here. You can examine the custom u-boot images in the MfgTool profiles for some strings that you can search for in your mmcblk0 image. There "might" be some info buried in this forum (somewhere) too. The bootloader probably starts with a flash header that would contain its length.
|
![]() |
![]() |
![]() |
#8 |
Enthusiast
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 35
Karma: 39448
Join Date: Jul 2007
Device: Sony PRS-500
|
ok. searching...
![]() |
![]() |
![]() |
![]() |
#9 |
Carpe diem, c'est la vie.
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 6,433
Karma: 10773668
Join Date: Nov 2011
Location: Multiverse 6627A
Device: K1 to PW3
|
Be aware that there are two bootloaders (u-boot, and u-boot bist). The smaller u-boot is designed to load and run completely inside the SoC (RAM in the same chip as the CPU). After the small u-boot initializes SDRAM, it loads into SDRAM the bigger u-boot bist (built-in-self test), which contains fastboot protocol and other goodies.
Things are not always as simple as you might expect. ![]() |
![]() |
![]() |
![]() |
#10 |
Enthusiast
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 35
Karma: 39448
Join Date: Jul 2007
Device: Sony PRS-500
|
I have bricked more. Only uboot working through serial console. BIST not working and kernels damaged. Is there way to recover kernel only through uboot or any way ? Uff thx
Code:
version - print monitor version uboot > boot ## Booting kernel from Legacy Image at 70800000 ... Bad Header Checksum ERROR: can't get kernel image! |
![]() |
![]() |
![]() |
#11 | |
Carpe diem, c'est la vie.
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 6,433
Karma: 10773668
Join Date: Nov 2011
Location: Multiverse 6627A
Device: K1 to PW3
|
Quote:
The "can't get kernel" may be because you did not load the kernel into RAM before running it with "boot". I am not sure though. Does somebody else know what is going on here? You can study the u-boot source code from the amazon GPL download, to see what is going on. You can also study the u-boot main site for general u-boot documentation. And of course, an MfgTool profile can be crafted that loads a kernel over USB and runs it in RAM (or a new program can be written to use USB Downloader protocol directly, which is a project that yifanlu is working on). But first, can you get to fastboot mode with MfgTool? If so, you can reflash the kernel from there if you need to. |
|
![]() |
![]() |
![]() |
#12 |
Enthusiast
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 35
Karma: 39448
Join Date: Jul 2007
Device: Sony PRS-500
|
Fastboot and diags mode did not work, only uboot. if i tried bist command in uboot, kindle stuck. So bist mode also did not work ;(
|
![]() |
![]() |
![]() |
#13 |
Carpe diem, c'est la vie.
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 6,433
Karma: 10773668
Join Date: Nov 2011
Location: Multiverse 6627A
Device: K1 to PW3
|
The you need to use a custom MfgTool profile that can flash a u-boot bist to your mmc, or you need to use the serial port to debrick it. Or you can wait until yifanlu gets his project ready enough to debrick it using USB Downloader mode with his software.
|
![]() |
![]() |
![]() |
Thread Tools | Search this Thread |
|
![]() |
||||
Thread | Thread Starter | Forum | Replies | Last Post |
How to unbrick (reflash, restore, etc) your iLiad | Adam B. | iRex | 53 | 09-07-2014 12:18 AM |
Unbrick your Kindle 3 - Video | seaniko7 | Kindle Developer's Corner | 22 | 09-07-2012 05:46 PM |
Help to Unbrick KT with simple debrick Method. | Loko_bielsa | Kindle Developer's Corner | 2 | 07-16-2012 08:26 AM |
Kindle 2i - Demo Version Unbrick | jdconnel | Amazon Kindle | 3 | 03-13-2012 05:04 PM |
PRS-505 Finally unbrick my prs505! - a new method | hamimelon | Sony Reader | 12 | 07-28-2011 04:11 PM |