yashsingh1/xdaforums huggingface dataset:
[Android Development on Bada] Rebellos:
Connected WHERE? Please :confused:

And what drivers are you using?

I've got RS232 in my PC, so, do I need to cut any cable and connect right lines to micro usb pinout with right resistor? Assuming that's correct thinking, what do I need to catch packets? Some serial port listener? Or additional drivers?

Guess it can be done by hours of experimenting but would be easier if you just give some additional schemas to us. ;d

//edit:

http://xdaforums.com/showthread.php?t=820275 explains, that we have to enable UART logging by right resistor.

Okay, this one I get, but whats next, after booting with 523Kohm resistor?
[Android Development on Bada] oleg_k:
run terminal program on PC and you can see debug message, like my log file.
[Android Development on Bada] Rebellos:
So we know already how to turn on uart logging and what soft use.

Still, how to connect it to pc? RS232 has got 9 or 25 pins while micro usb has got only 5. Or is it possible to connect by usb?
[Android Development on Bada] mijoma:
Any software able to display/save data received from COM oprt is OK.

As for connections, don't try directly. Take some TTL-RS232 converter first. The serial transmition over RS232 is just 3 lines (without hw flow control) corresponding to pins 2,3 and 5 in DB9.
[Android Development on Bada] oleg_k:
i used USB to RS232-TTL 2.8V converter for connect to PC USB port. My PC don't have legacy RS232 ports.
[Android Development on Bada] Rebellos:
Thanks both of you.

I think I found my fault in memory organisation analysing. Booting kernel must be done with MMU Disabled. While loading kernel from moviNAND isnt possible without MMUCacheEnabled, which automatically enables MMU. With MMU Disabled (in primary boot state) 0x32000000 memory location seems to be fully accessible and writable.

So, I'm sorry for giving you false information. Trying to rewrite loading function in FOTA file which will turn off MMU and load kernel into 0x32000000.
[Android Development on Bada] jake792:
HI Everyone, any news regarding wave schematics???:o

I tried my best searching on net, but could'nt get anything relavent other than service manuals........

:(
[Android Development on Bada] mijoma:
Good to hear that. You may also remember to switch off external interrupts, initialize display and modem before running zImage. The running itself would need to have the correct params set - please look at the boot command from SBL for comparison.
[Android Development on Bada] oleg_k:
Guys,good news!

Today I got a schematic of main cpu, but due to security, I can't publish it now.

later i will publish gpio translation file for kernel after research.
[Android Development on Bada] neophyte2008:
does that mean . . .you can now have the modem and gps working???? soo what would be left not working nw? :P
[Android Development on Bada] FRlTZ:
Modem, GSM, GPS/sensors, and fuelgage I think it was?
[Android Development on Bada] buggy11:
If my mind works correctly things aint working (e.g modem, fuel gauge and gps) But the risk of frying the cpu could now be removed :D

Correct me if I'm wrong, (and I kinda hope I missed something that will work now :D )
[Android Development on Bada] sabianadmin:
No no as far as i can tell its all contained on the one chipset, so now we have the GPIOs the driver can be written for the missing bits and bobs :)
[Android Development on Bada] Darkminus:
Hello!

I was following this project since last weeks.

What is missing now? Can it be installed by flashing instead of JTAG?

Thanks for your answers :)
[Android Development on Bada] sabianadmin:
If I'm right nothing is missing apart from maybe the hard key mapping and accelerometer.
[Android Development on Bada] oleg_k:
Yes,i got new GPIO for MSENSE!!!

GPS completely different than i9000.

GPS is similar to M110s
[Android Development on Bada] Rebellos:
I changed FOTA code, now it loads kernel under 0x32000000 and turns off all memory managament accordingly to Android documentation.

But to boot kernel properly I need to rebuild i9000 machine type and ATAG structure which are passed to kernel, does anyone knows how do they look in i9000? Trying to dig it out from Sbl.bin but with no results so far, maybe someone more skilled can find it?
[Android Development on Bada] sabianadmin:
Well once oleg gets the kernel working correctly and booting with all the various components operational then everybody's focus can be on helping with the bootloader, at this point i would be more than happy to just flash the custom i9000 bootloader and then write the rest of the stuff to NAND using JTAG!
[Android Development on Bada] skkar84:
sorry for the question ... but flashing with jtag will be the only way to see android on ours wave ... or exist a way to install android with the original cable?
[Android Development on Bada] sabianadmin:
No, please read back through the thread. Initially we will have to boot off of the SD card and eventually the aim is to make it multiloader flashable so it can run off of the internal storage of the device.
[Android Development on Bada] adfree:
Good Question.

At this time I know only this:

1.

Actual you have to choose between bada OR Android.

BOTH bada AND Android at this time NOT possible.

2.

Nobody else tried or confirmed alternate way for jump to Android.

3.

To try other methods is high risk. As you can brick your S8500/S8530.

So without JTAG you have NO chance to reanimate if you destroy Bootloader...

4.

My simple tests to flash old NOT encrypted boot_loader.mbn failed:

http://xdaforums.com/showpost.php?p=12619020&postcount=36

:o :confused:

Question left. Why failed?

A - because Security in handset?

B - because Security in Multiloader?

C - because I'm an idiot and made stupid mistake. :D

So same Questions for Android. As JTAG erase Boot and you write on this position your modified Boot...

Maybe any Tool is stupid enough to bypass and write correct instead JTAG...

Who knows. :p

5.

Android port nor FOTA hack is finished.

So "normal" users like me have to wait.

Best Regards
[Android Development on Bada] charsi:
Leaving here an extract from the chatlog to answer all the "what is the statusof the project?" questions --
[Android Development on Bada] Rebellos:
I think I just made rl life suicide, with no chance for going out home in next months. Ordered JTAG. It will arrive in next week, but then my exams starts, also got totally no idea how to use it. :D I only hope it is compatibile with our s5pc110

So dont count for any uber enlightment from my side too fast anyway.

Oleg, when you get some time please upload the files you're using with JTAG. And how do you connect your Wave to that? Soldered the pins or something?

@adfree:

Bootloader does validation of all data he receives by download mode by checksums and/or rsa and only if everything is ok it is written to oneNAND. I wasnt digging too deep.
[Android Development on Bada] adfree:
Yep. But I've failed also to write NOT modified XXJL2 Boot.

Only decrypted... :confused:

Why? :o

Only encrypted Boot accepted?

About JTAG... no panic. Testpoints are big enough and in 2 rows. :D

If you really solder wires. Good chance to hit correct.

But also solder less connection possible...

If you solder wires you should train before... on old PCBs... to prevent damage TPs with too HOT...

We can make then Workshop for JTAG. :cool:

Best Regards
[Android Development on Bada] Rebellos:
Yes, bootloader in download mode accepts only encrypted data. Cuz everything is decrypted during runtime. That would be big mess if apply decryption procedure on already decrypted data - total disaster. Well, it is possible to crack download procedure through FOTA, so BL accept everything he gets, but there is very big possibility of killing Wave, cuz you have to modify bootloader, bypass decrypting procedure and checksum checking, I can work on it when I get knowledge required to recovery bootloader, what won't happen fast. ;d
[Android Development on Bada] oleg_k:
Rebellos, i help you)

this is JTAG pinout and later i post full jtag image,

for you start.
[Android Development on Bada] adfree:
Hmmm. Interesting theory... :)

I've ever thought Multiloader decrypt Boot and then write into 512 MB oneNAND.

"Evidence" are JTAG dump from S8500 and S8530... Boot is decrypted...

apps_compressed.bin still "untouched" (still encrypted in oneNAND)

Hmmm. So other way to change Boot is encrypt first... in theory, if not more Security checks...

If this work for XXJB6 Boot, then maybe also for "other Code"...

Best Regards

Edit 1.

I could monitoring Bootflash with Multiloader to check if encrypted or decrypted Boot is send to handset... with portmon.exe.

It could be risky...

Edit 2.

Tested and YES. Multiloader NOT decrypt Boot. So this is really handset/Bootloader job.

Thanx Rebellos for nice hint.

Funny to see what all is written/read... This phone answering if I've pressed Port Search in Multiloader. :D

I'm in Download Mode via Key combo before...

NOHPdLISMORE
address
Number
IMEINUM
OOHPDownloader
ZOHP
[Android Development on Bada] nbates66:
not sure if this will accomplish much, but does anybody know which machine type number the sbl uses to boot the linux kernel? it's a value loaded into R1 just before executing kernel, and the kernel checks it to ensure it's running on the correct system type, if it isn't correct then the kernel literally does nothing(other than try to send "error p" to a console/display).

we haven't been able to find said value digging through the sbl file, it's probably an easy matter to find it in the kernel source but i've no idea where to look.
[Android Development on Bada] mijoma:
The number you are looking for is 0x891,

ATAG params (R2) pointer in SBL is 0x30000100
[Android Development on Bada] oleg_k:
This value can be found in the source code of u-boot.

later I'll try to search in kernel source.
[Android Development on Bada] nbates66:
mijoma got what we needed so probably unnecessary, thanks :)

EDIT: as for the Atag parameters we might need to build an atag list ourselves (probably need different values, mainly since we aren't booting from NAND)

http://www.simtec.co.uk/products/SWLINUX/files/booting_article.html#d0e428
[Android Development on Bada] mijoma:
The original SBL is using only ATAG_CORE, ATAG_SERIAL, ATAG_REVISION and ATAG_CMDLINE. Not much work to do.
[Android Development on Bada] lordfarhan40:
in proper english

i dont get the any thing you all talk about. you all are great. hey can any one please help me to start of with the stuff you all do???. i dont have any knowledge about any programming language. please help me.
[Android Development on Bada] aLexzkter:
Sure, it's called "grammar School".

Please, don't type like that, people can't even understand you.
[Android Development on Bada] charsi:
dont feed them
[Android Development on Bada] mylove90:
they are afraid that XDA developers succeed to port a fully working android before them

anyway who is the developer????

i hope that will be adfree as he can keep their secret even if it is not worthy

anyway oleg_k keep the good work and never look to them as their way is so bad and kills the Wave after a reboot
[Android Development on Bada] sabianadmin:
Yeah oleg_k you have a method that seems to work (to some degree) and once you can the different bits working its a simple method of navigating the boot loader to your new kernel :)
[Android Development on Bada] mkz14:
Assuming AndroBada wasn't a fake (which is too much assuming) jioma's way would be a TRULY GOOD one, remember AndroBada's was "burning" phones, which I really doubt, but that's assuming it isn't fake x)
[Android Development on Bada] sabianadmin:
Is jioma the member who got control of the Androbada port?
[Android Development on Bada] mijoma:
Nope. I'd care to look, though.
[Android Development on Bada] sabianadmin:
I think we all would, i wish they would just release the file publicly I'm sure there would be a working port in under 2 weeks :/
[Android Development on Bada] mkz14:
Assuming that androbada wasn't a fake, which is probably what it is.
[Android Development on Bada] sabianadmin:
Well they have the power to prove its not by simply releasing there stuff.. not that hard.
[Android Development on Bada] Gerino:
http://xdaforums.com/showthread.php?t=996552&page=8

Reply of "volv"

A kind of good news?
[Android Development on Bada] mkz14:
It becomes like 'impossible' when you got nothing to release xD
[Android Development on Bada] stephenlb4u:
who is the person feom xda got the control??? are they creating a mess??? any how thanks for the people who already working on this...
[Android Development on Bada] sabianadmin:
i think until we figure out who (if anyone) got the port we just forget about them and focus on helping oleg :)
[Android Development on Bada] guari:
Focus on oleg_k project using the fota bug discovered by mijoma, that seems to be the best way to have a good full working solution.;)

(also if androbada isn't a fake this doesn't means it's better than this...)
[Android Development on Bada] Infomatrix:
I think it is just a silly tactic from the AndroBada guys. Why should they give all their information to someone from XDA, if they were scared that xda could get all the attention and credits for that project. That makes no sense. Just another way to bring themselves up for discussion after it gets quit silent around AndroBada. They just need new news to ask for new donations and money.
[Android Development on Bada] adfree:
I have nothing to do with AndroBada guys.

We have to start from scratch.

But this time mijoma introduced proofed/confirmed concept to bypass Bootloader Security through FOTA.

oleg_k seems hard working on the Android part.

He upload many files, infos.

AndroBada is Running Gag... but I can not smile.

Best Regards
[Android Development on Bada] sabianadmin:
What they need is to create a thread and just attach their work so far to the first post. That way we have the ability to actually make progress, they have one set of problems apparently where as oleg has a different set of problems. Solutions can be found for all of those problems in both projects id imagine!
[Android Development on Bada] Otacon_ahs:
Forget AndroBada sabianadmin.

Think in this:

- They give their work to an user from here. Free. No names (???)

- They say files would be online if this user would like to share... For free...

Why not negotiate again with Samfirmware before this?

They offered 100€...

I think because they have nothing
[Android Development on Bada] v_2rishi:
God bless you.. you are a True Hero.. We are waiting & praying for your project to be successful
[Android Development on Bada] sabianadmin:
*forgotten*
[Android Development on Bada] oleg_k:
I found some interesting information about MAX8996/8997.

this is multifunction chip and it has

- PMIC

- RTC

- MUIC (usb switch)

- Flash control

- Haptic control

- Fuel Gauge (MAX17042 compatible)

- Battery charger control

If we find datasheet for this chip, we can use build-in fuel gauge function.

This is important, without it being restarted Kernel
[Android Development on Bada] ~MaX~:
this post made my day ^^ :D
[Android Development on Bada] t0mm13b:
This needs to be said!

Refrain from using text-speak as the XDA community is international, and throwing in text speak is bound to confuse those whose tongue is not native English.

This is frowned upon.

Go and learn how to speak proper English - if you disagree and claim your native tongue is English, then you are one lazy-ass of a person who cannot be bothered to write using full and proper English.

It is extremely ignorant to post in text-speak, and will 100% guarantee that your posting will be completely and ignored, or deleted!

Now, off you go, and work on your communication skills first before posting in here again!
[Android Development on Bada] lordfarhan40:
ok sorry people i was just over over enthusiastic. please forgive me.
[Android Development on Bada] sabianadmin:
On the web murder is sooner forgiven than text speak.
[Android Development on Bada] lordfarhan40:
well i said i am sorry. i just wanted to help you guys in future projects.
[Android Development on Bada] aLexzkter:
Sad to say, but the best you and I can do at the moment is to be quiet and let the masters do their job.
[Android Development on Bada] alipooya1989:
new NEWS Guys??
[Android Development on Bada] sabianadmin:
Thats a question for #androidonwave on Freenode IRC. go ask there.
[Android Development on Bada] Rebellos:
Oleg, what your kernel should produce onto LCD screen on S8500? Just init it and erase everything or print some texts?

Should anything happen on the screen after that log is printed out? (Took it from your logs, havent got the UART debug cable yet)

I mean, will it blink or do some "clear screen"?

And when can I count on S8530 LCD? :rolleyes: <begging>
[Android Development on Bada] adoee:
oleg_k can you add video with android on wave, how it's work?
[Android Development on Bada] Rebellos:
And one more question to oleg:

After you reflash oneNAND by JTAG, is it runnable without JTAG attached? S5PC110 has got iROM with possible bootloader integrity checking codes, so do you have to jump over it through JTAG or Samsung resigned from using iROM secure booting in Wave?

From S5PC110 manual:

I'm curious if bootloader is fully secured from modification or is it possible to flash it. It isn't necessary anyway because we've got FOTA code, but still...
[Android Development on Bada] sabianadmin:
Oh an while your at it, could you give us you're liver and maybe a couple of kidneys too?? :rolleyes:
[Android Development on Bada] carbonbadu:
@sabianadmin why are you acting so much rude mate.

Be Cool bro... peace..

thanking you ..
[Android Development on Bada] adoee:
I asked oleg_k, not you....

and at ease..
[Android Development on Bada] sabianadmin:
If english isn't your first language then you can't dictate whats rude and whats not. I was not being malicious, just pointing out that oleg needs to be left alone until he has it working. he does enough for us already, all your doing is encouraging adoee (like adfree except without being useful) to ask for silly stuff like videos which we have established is a no-no for now.

(this is the point where you shuffle away, tail between your legs, looking silly)
[Android Development on Bada] sabianadmin:
I wasn't replying to your question was i? i was simply augmenting it with a question of similar caliber.
[Android Development on Bada] lowgitek:
Oh well with all those security checks, I can just think if it will be possible in future boot with it :S If everything has to pass the RSA signing how could it be fixed :S sniff sniff :(:confused:
[Android Development on Bada] carbonbadu:
@sabianadmin aggreed wid u totally... sorry :(
[Android Development on Bada] unrealtb:
God Damn

Since when did this become a debate about the English Language.... Get on with friggin putting android on the wave...:eek:
[Android Development on Bada] Rebellos:
FOTA code is not secured in any way. But adfree has infected me with dreams of flashing original BL, which is of course unnecessary and dangerous. But still, would be good to know if its hardware secured.

:p
[Android Development on Bada] nbates66:
well, if we did flash the onboard NAND, we'd have to makesure we leave the current bootloader files wouldn't we? the iROM(first unwritable area) bootcode does a check on the first bootloader ran, before it executes it.
[Android Development on Bada] Rebellos:
Yes, assuming that there is such safe booting procedure on Wave.
[Android Development on Bada] ZKJohan:
I'm sorry if I didn't understand it all correctly, but is it all fully operational? The last thing I understood from this topic is that the modem is not fully operational because of the missing schematics.. What is the status of the release right now?

Thank you.
[Android Development on Bada] DarkRidder:
Oleg already found schematics. Now they are focusing in making it bootable without JTAG
[Android Development on Bada] hisee:
when this project going to be completed?
[Android Development on Bada] aLexzkter:
Oleg is still working on the modem, isn't he?

So, there is stuff to be made yet, hence not all of them are focusing in making it bootable without JTAG :/
[Android Development on Bada] Infomatrix:
Look at other Android port projects for other phones. They needed over a year or longer to have an fully ported Android for their devices. Most of them aren't finished yet anyway. The only phone i know that has a fully ported Android is the HTC HD2 and it has still small bugs. So don't expect an full Android port for the Wave in the next weeks/months. Different groups tried over a year to boot Android on the Wave. But now after a year it is accomplished with JTAG. So there is still a lot work to do to boot Android on the Wave without JTAG und to get all the fuctions like phone, 3G, GPS, BME and others working. So you should have a lot of patience.
[Android Development on Bada] DarkRidder:
Exactly, people here are working 200% to see this fully working. We have schematics for modem so probably it will work fine, but it now can only be bootable with all functions through JTAG. To boot it without this tool is still a long way. We are close, but yet not there! Let Pro's take care of this and help them in the way you can... If we contribute with knowledge this will be easier ;)
[Android Development on Bada] oSandmaNo:
will camera flash and camera button work?
[Android Development on Bada] oleg_k:
Rebellos,

you need determinate GPIO_LVDS_RST pin in bada bootloader for you S8530.

Ask Mijoma about this.

Guys,i'm not home.I will return to home on May 9.
[Android Development on Bada] lordfarhan40:
I dont think so, they are now trying to make android boot through sd card and then they will work on basic functions like camera, keys and various sensors. maybe later they will work on the function in wave missing in galaxy i.e. the camera key and the flash.
[Android Development on Bada] oleg_k:
Jtag flasher needed once,for flash boot,sbl and param.lfs.

after i used only samsung ODIN util for flashing.
[Android Development on Bada] sabianadmin:
So basically we really only need a way to flash the boot loader portion of things and the rest can be done via ODIN?
[Android Development on Bada] oleg_k:
yes,it is)
[Android Development on Bada] sabianadmin:
Thats great news, and thanks to this FOTA hack we will soon have a working boot loader which is flash able!
[Android Development on Bada] DarkRidder:
Sounds promising! :D

Just one question, to the normal user, which dont have a lot of knowledge (or even none) in JTAG or flashing, making this alteration in FOTA to use Android can't be dangerous for bricking?
[Android Development on Bada] sabianadmin:
Re-read my previous comment. There shouldn't be any risk, it should be just a case of flashing the modified FOTA file.
[Android Development on Bada] aLexzkter:
Let's see if I got it right...

Is the modem working now thanks to the schematics found recently?
[Android Development on Bada] DarkRidder:
Thank you sabiana!

I love developers :D Thank you for your amazing job. This is going so fast... about a month or two ago i was stuck at androidport, and now we have a good version of android running in our waves... Awsome work.

At this speed, it is expectable to have Android dual booted by summer...? I dont want to speed you up guys, just to have an idea of the time.

Anyway, if I am of anyhelp, although i dont understand programming, tell me.

Best regards,
[Android Development on Bada] adfree:
If you need Android, then best idea to buy Android handset. :)

Please understand... success means 100 %

Now port is NOT finished. MANY unsolved problems, ehm many Questions left... :D

Android port to S8500 is by 30 % from 100 %. Because only oleg_k can see Android on Wave...

Maybe if our FOTA group will successfully bypass to load without JTAG, then we reach maybe 50 %...

Much heavy work is to do. :o

If second person can see Android on Wave with JTAG, then we reach 31 %. ;)

Before 10 or more people can see Android on Wave it could take weeks, months...

Best Regards