[Android Q&A, Help & Troubleshooting] brendan_orr:
Hello all! First of all appologies for the crappy title. I just re-read it after hitting the submit post button :\

I'm trying to fix my fiance's father's tablet. It is a cheapie 7in whose company website doesn't help at all (and support portion helps even less). At the moment I'm at a deadlock and I can't quite figure out how to proceed next. Here's what I got:

The tablet is stuck in a loop at boot (it's detailed after this list in the code section)

There is no recovery that I can find. 'adb reboot recovery' acts just like 'adb reboot bootloader')

No combination of button presses at boot would change the behavior of the boot process

I can shell in via adb

I cannot find the stock ROM for this little guy

logcat:

/AndroidRuntime(10945):
D/AndroidRuntime(10945): >>>>>> AndroidRuntime START com.android.internal.os.ZygoteInit <<<<<<
D/AndroidRuntime(10945): CheckJNI is OFF
D/dalvikvm(10945): Trying to load lib libjavacore.so 0x0
D/dalvikvm(10945): Added shared lib libjavacore.so 0x0
D/dalvikvm(10945): Trying to load lib libnativehelper.so 0x0
D/dalvikvm(10945): Added shared lib libnativehelper.so 0x0
F/libc (10945): Fatal signal 11 (SIGSEGV) at 0x5a4e91b4 (code=1), thread 10945 (zygote)
I/DEBUG ( 83): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
I/DEBUG ( 83): Build fingerprint: 'SoftWinnner/crane_a702jhorange/crane-a702jhorange:4.1.1/JRO03C/20121213:eng/test-keys'
I/DEBUG ( 83): pid: 10945, tid: 10945, name: zygote >>> zygote <<<
I/DEBUG ( 83): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 5a4e91b4
I/DEBUG ( 83): r0 40ee7bd8 r1 007f1047 r2 58525028 r3 58525098
I/DEBUG ( 83): r4 fffc89ee r5 407e31a8 r6 41fcea50 r7 5868fd3c
I/DEBUG ( 83): r8 41c3a000 r9 40087f88 sl 00000000 fp 407c3a9e
I/DEBUG ( 83): ip 00002400 sp be9258a0 lr 407a2653 pc 4078f338 cpsr 80000030
I/DEBUG ( 83): d0 380000003b800000 d1 3000000034000000
I/DEBUG ( 83): d2 5752620857526152 d3 5752627857526257
I/DEBUG ( 83): d4 5752627857526240 d5 575659d8575262b0
I/DEBUG ( 83): d6 57565a4857565a10 d7 57565ab857565a80
I/DEBUG ( 83): d8 0000000000000000 d9 0000000000000000
I/DEBUG ( 83): d10 0000000000000000 d11 0000000000000000
I/DEBUG ( 83): d12 0000000000000000 d13 0000000000000000
I/DEBUG ( 83): d14 0000000000000000 d15 0000000000000000
I/DEBUG ( 83): d16 0000000000000017 d17 0000000000000000
I/DEBUG ( 83): d18 0000000000000000 d19 0000000000000000
I/DEBUG ( 83): d20 0000000000000000 d21 0000000000000000
I/DEBUG ( 83): d22 0000000000000000 d23 0000000000000000
I/DEBUG ( 83): d24 0000000000000000 d25 0000000000000000
I/DEBUG ( 83): d26 0000000000000000 d27 0000000000000000
I/DEBUG ( 83): d28 0000000000000000 d29 0000000000000000
I/DEBUG ( 83): d30 0000000000000000 d31 0000000000000000
I/DEBUG ( 83): scr 60000010
I/DEBUG ( 83):
I/DEBUG ( 83): backtrace:
I/DEBUG ( 83): #00 pc 00056338 /system/lib/libdvm.so (dexStringById(DexFile const*, unsigned int)+3)
I/DEBUG ( 83): #01 pc 0006964f /system/lib/libdvm.so
I/DEBUG ( 83): #02 pc 00069ca7 /system/lib/libdvm.so (dvmFindClassNoInit(char const*, Object*)+214)
I/DEBUG ( 83): #03 pc 00063f21 /system/lib/libdvm.so (dvmFindClassByName(StringObject*, Object*, bool)+84)
I/DEBUG ( 83): #04 pc 00066195 /system/lib/libdvm.so
I/DEBUG ( 83): #05 pc 00027260 /system/lib/libdvm.so
I/DEBUG ( 83): #06 pc 0002bb38 /system/lib/libdvm.so (dvmInterpret(Thread*, Method const*, JValue*)+180)
I/DEBUG ( 83): #07 pc 0005f5b1 /system/lib/libdvm.so (dvmCallMethodV(Thread*, Method const*, Object*, bool, JValue*, std::__va_list)+272)
I/DEBUG ( 83): #08 pc 0005f5db /system/lib/libdvm.so (dvmCallMethod(Thread*, Method const*, Object*, JValue*, ...)+20)
I/DEBUG ( 83): #09 pc 00069c3d /system/lib/libdvm.so (dvmFindClassNoInit(char const*, Object*)+108)
I/DEBUG ( 83): #10 pc 0004d227 /system/lib/libdvm.so
I/DEBUG ( 83): #11 pc 00061051 /system/lib/libandroid_runtime.so (android::register_android_content_AssetManager(_JNIEnv*)+200)
I/DEBUG ( 83): #12 pc 00045123 /system/lib/libandroid_runtime.so (android::AndroidRuntime::startReg(_JNIEnv*)+34)
I/DEBUG ( 83): #13 pc 00045221 /system/lib/libandroid_runtime.so (android::AndroidRuntime::start(char const*, char const*)+200)
I/DEBUG ( 83): #14 pc 00000dcf /system/bin/app_process
I/DEBUG ( 83):
I/DEBUG ( 83): stack:
I/DEBUG ( 83): be925860 407e31a8 /system/lib/libdvm.so
I/DEBUG ( 83): be925864 00000001
I/DEBUG ( 83): be925868 9c50d290
I/DEBUG ( 83): be92586c 58eea730 /data/dalvik-cache/system@framework@framework.jar@classes.dex
I/DEBUG ( 83): be925870 40ee7bd8
I/DEBUG ( 83): be925874 0000000c
I/DEBUG ( 83): be925878 40087f88
I/DEBUG ( 83): be92587c 40e52ba4
I/DEBUG ( 83): be925880 407e31a8 /system/lib/libdvm.so
I/DEBUG ( 83): be925884 41fcea50 [heap]
I/DEBUG ( 83): be925888 0003001e
I/DEBUG ( 83): be92588c 41c3a000 /dev/ashmem/dalvik-aux-structure (deleted)
I/DEBUG ( 83): be925890 40087f88
I/DEBUG ( 83): be925894 00000000
I/DEBUG ( 83): be925898 df0027ad
I/DEBUG ( 83): be92589c 00000000
I/DEBUG ( 83): #00 be9258a0 41fe9770 /dev/ashmem/dalvik-heap (deleted)
I/DEBUG ( 83): ........ ........
I/DEBUG ( 83): #01 be9258a0 41fe9770 /dev/ashmem/dalvik-heap (deleted)
I/DEBUG ( 83): be9258a4 407a78e5 /system/lib/libdvm.so (dvmHeapSourceAlloc(unsigned int)+76)
I/DEBUG ( 83): be9258a8 000004eb
I/DEBUG ( 83): be9258ac 41874a38
I/DEBUG ( 83): be9258b0 41fe97c8 /dev/ashmem/dalvik-heap (deleted)
I/DEBUG ( 83): be9258b4 00000000
I/DEBUG ( 83): be9258b8 00000001
I/DEBUG ( 83): be9258bc 00000001
I/DEBUG ( 83): be9258c0 41fe9780 /dev/ashmem/dalvik-heap (deleted)
I/DEBUG ( 83): be9258c4 41fe9128 /dev/ashmem/dalvik-heap (deleted)
I/DEBUG ( 83): be9258c8 40ee7bd8
I/DEBUG ( 83): be9258cc 0000652b
I/DEBUG ( 83): be9258d0 585de0a4 /data/dalvik-cache/system@framework@framework.jar@classes.dex
I/DEBUG ( 83): be9258d4 5852502c /data/dalvik-cache/system@framework@framework.jar@classes.dex
I/DEBUG ( 83): be9258d8 5852502c /data/dalvik-cache/system@framework@framework.jar@classes.dex
I/DEBUG ( 83): be9258dc 41c3a000 /dev/ashmem/dalvik-aux-structure (deleted)
I/DEBUG ( 83): ........ ........
I/DEBUG ( 83): #02 be925928 40023c50
I/DEBUG ( 83): be92592c 00000000
I/DEBUG ( 83): be925930 00000000
I/DEBUG ( 83): be925934 40756fc0 /system/lib/libdvm.so
I/DEBUG ( 83): be925938 00000009
I/DEBUG ( 83): be92593c 40023c50
I/DEBUG ( 83): be925940 40087f88
I/DEBUG ( 83): be925944 00000000
I/DEBUG ( 83): be925948 00000000
I/DEBUG ( 83): be92594c 40756fc0 /system/lib/libdvm.so
I/DEBUG ( 83): be925950 00000009
I/DEBUG ( 83): be925954 40ecff00
I/DEBUG ( 83): be925958 00000000
I/DEBUG ( 83): be92595c 4079cf25 /system/lib/libdvm.so (dvmFindClassByName(StringObject*, Object*, bool)+88)
I/DEBUG ( 83):
I/DEBUG ( 83): memory near r0:
I/DEBUG ( 83): 40ee7bb8 726f7765 616a2e6b 6c634072 65737361 ework.jar@classe
I/DEBUG ( 83): 40ee7bc8 65642e73 72610078 616c6340 0000003b s.dex.ar@cla;...
I/DEBUG ( 83): 40ee7bd8 58525000 58525028 58525098 58580258 .PRX(PRX.PRXX.XX
I/DEBUG ( 83): 40ee7be8 585ab74c 58607ff4 58586dc8 58687fdc L.ZX..`X.mXX..hX
I/DEBUG ( 83): 40ee7bf8 58525028 58edc870 58f0c880 58525028 (PRXp..X...X(PRX
I/DEBUG ( 83):
I/DEBUG ( 83): memory near r1:
I/DEBUG ( 83): 007f1024 ffffffff ffffffff ffffffff ffffffff ................
I/DEBUG ( 83): 007f1034 ffffffff ffffffff ffffffff ffffffff ................
I/DEBUG ( 83): 007f1044 ffffffff ffffffff ffffffff ffffffff ................
I/DEBUG ( 83): 007f1054 ffffffff ffffffff ffffffff ffffffff ................
I/DEBUG ( 83): 007f1064 ffffffff ffffffff ffffffff ffffffff ................
I/DEBUG ( 83):
I/DEBUG ( 83): memory near r2:
I/DEBUG ( 83): 58525008 00000028 009b7684 009b76b0 000001b8 (....v...v......
I/DEBUG ( 83): 58525018 009b7868 00126310 00000000 8e954ce5 hx...c.......L..
I/DEBUG ( 83): 58525028 0a786564 00353330 d20546db 64f4f890 dex.035..F.....d
I/DEBUG ( 83): 58525038 3b542ffe 2d65832c fd4944b1 5b0c331b ./T;,.e-.DI..3.[
I/DEBUG ( 83): 58525048 009b7684 00000070 12345678 00000000 .v..p...xV4.....
I/DEBUG ( 83):
I/DEBUG ( 83): memory near r3:
I/DEBUG ( 83): 58525078 0000b915 00086724 0000fffd 000e2fcc ....$g......./..
I/DEBUG ( 83): 58525088 00001682 00162fb4 00827690 0018fff4 ...../...v......
I/DEBUG ( 83): 58525098 005fe1ae 005fe1b0 005fe1b3 005fe1b6 .._..._..._..._.
I/DEBUG ( 83): 585250a8 005fe1cb 005fe1cf 005fe1d7 005fe1e6 .._..._..._..._.
I/DEBUG ( 83): 585250b8 005fe1fb 005fe202 005fe218 005fe229 .._..._..._.)._.
I/DEBUG ( 83):
I/DEBUG ( 83): memory near r5:
I/DEBUG ( 83): 407e3188 00000000 00000000 00000000 00000000 ................
I/DEBUG ( 83): 407e3198 00000000 00000000 00000000 00000000 ................
I/DEBUG ( 83): 407e31a8 41fce730 41fce720 00500000 10000000 0..A ..A..P.....
I/DEBUG ( 83): 407e31b8 03000000 00004000 00006000 00000001 .....@...`......
I/DEBUG ( 83): 407e31c8 00000101 00000002 00000001 00000000 ................
I/DEBUG ( 83):
I/DEBUG ( 83): memory near r6:
I/DEBUG ( 83): 41fcea30 00000000 00000000 00000000 00000013 ................
I/DEBUG ( 83): 41fcea40 00000000 00000800 40e50008 00000453 ...........@S...
I/DEBUG ( 83): 41fcea50 415af230 40ecff14 57563238 40e53000 0.ZA...@82VW.0.@
I/DEBUG ( 83): 41fcea60 00000000 00000000 be925980 00000000 .........Y......
I/DEBUG ( 83): 41fcea70 be9259b4 00000001 00000000 40756fc0 .Y...........ou@
I/DEBUG ( 83):
I/DEBUG ( 83): memory near r7:
I/DEBUG ( 83): 5868fd1c ffffffff ffffffff ffffffff ffffffff ................
I/DEBUG ( 83): 5868fd2c ffffffff ffffffff ffffffff ffffffff ................
I/DEBUG ( 83): 5868fd3c ffffffff ffffffff ffffffff ffffffff ................
I/DEBUG ( 83): 5868fd4c ffffffff ffffffff ffffffff ffffffff ................
I/DEBUG ( 83): 5868fd5c ffffffff ffffffff ffffffff ffffffff ................
I/DEBUG ( 83):
I/DEBUG ( 83): memory near r8:
I/DEBUG ( 83): 41c39fe0 00000000 00000000 00000000 00000000 ................
I/DEBUG ( 83): 41c39ff0 00000000 00000000 00000000 00000000 ................
I/DEBUG ( 83): 41c3a000 40ee7bd8 58525028 41c3a034 41c951f4 .{.@(PRX4..A.Q.A
I/DEBUG ( 83): 41c3a010 41c9bd64 41cdbd58 40ee7c10 00000001 d..AX..A.|.@....
I/DEBUG ( 83): 41c3a020 58525000 00addb78 58525000 00addb78 .PRXx....PRXx...
I/DEBUG ( 83):
I/DEBUG ( 83): memory near r9:
I/DEBUG ( 83): 40087f68 00000000 00000000 00000000 00000013 ................
I/DEBUG ( 83): 40087f78 00110000 00000000 00000000 0000003b ............;...
I/DEBUG ( 83): 40087f88 646e614c 64696f72 6e6f632f 746e6574 Landroid/content
I/DEBUG ( 83): 40087f98 7365722f 7373412f 69467465 6544656c /res/AssetFileDe
I/DEBUG ( 83): 40087fa8 69726373 726f7470 0000003b 00000000 scriptor;.......
I/DEBUG ( 83):
I/DEBUG ( 83): memory near fp:
I/DEBUG ( 83): 407c3a7c 20746867 61636f6c 0a796c6c 3c000a00 ght locally....<
I/DEBUG ( 83): 407c3a8c 003e6425 7823253c 253c003e 3e646c6c %d>.<%#x>.<%lld>
I/DEBUG ( 83): 407c3a9c 61640000 6b69766c 45006d76 6c62616e ..dalvikvm.Enabl
I/DEBUG ( 83): 407c3aac 20676e69 6f6c6c61 72742063 656b6361 ing alloc tracke
I/DEBUG ( 83): 407c3abc 25282072 6e652064 65697274 25202c73 r (%d entries, %
I/DEBUG ( 83):
I/DEBUG ( 83): memory near ip:
I/DEBUG ( 83): 000023e0 ffffffff ffffffff ffffffff ffffffff ................
I/DEBUG ( 83): 000023f0 ffffffff ffffffff ffffffff ffffffff ................
I/DEBUG ( 83): 00002400 ffffffff ffffffff ffffffff ffffffff ................
I/DEBUG ( 83): 00002410 ffffffff ffffffff ffffffff ffffffff ................
I/DEBUG ( 83): 00002420 ffffffff ffffffff ffffffff ffffffff ................
I/DEBUG ( 83):
I/DEBUG ( 83): memory near sp:
I/DEBUG ( 83): be925880 407e31a8 41fcea50 0003001e 41c3a000 .1~@P..A.......A
I/DEBUG ( 83): be925890 40087f88 00000000 df0027ad 00000000 ...@.....'......
I/DEBUG ( 83): be9258a0 41fe9770 407a78e5 000004eb 41874a38 p..A.xz@....8J.A
I/DEBUG ( 83): be9258b0 41fe97c8 00000000 00000001 00000001 ...A............
I/DEBUG ( 83): be9258c0 41fe9780 41fe9128 40ee7bd8 0000652b ...A(..A.{.@+e..
I/DEBUG ( 83):
I/DEBUG ( 83): code around pc:
I/DEBUG ( 83): 4078f318 bf008ff0 0004fa10 00034834 0003bcb2 ........4H......
I/DEBUG ( 83): 4078f328 000347b2 0003bc53 0003bc4c 6ac26883 .G..S...L....h.j
I/DEBUG ( 83): 4078f338 3021f853 e00018d3 f9934603 1c581000 S.!0.....F....X.
I/DEBUG ( 83): 4078f348 dbf92900 68c34770 1021f853 bfeef7ff .)..pG.hS.!.....
I/DEBUG ( 83): 4078f358 41f3e92d 68004606 f006460d 4604fa0d -..A.F.h.F.....F
I/DEBUG ( 83):
I/DEBUG ( 83): code around lr:
I/DEBUG ( 83): 407a2630 a814e003 f7b32210 980def3e 4c9a6839 ....."..>...9h.L
I/DEBUG ( 83): 407a2640 f8d8900e 68c20000 f852900a f7ec1021 .......h..R.!...
I/DEBUG ( 83): 407a2650 4683fe71 ea006878 b1530304 465b4999 q..Fxh....S..I[F
I/DEBUG ( 83): 407a2660 24004a99 44799000 2005447a ef28f7b3 .J.$..yDzD. ..(.
I/DEBUG ( 83): 407a2670 f1bae1a3 d1080f00 46584994 f7b34479 .........IXFyD..
I/DEBUG ( 83):
I/DEBUG ( 83): memory map around fault addr 5a4e91b4:
I/DEBUG ( 83): 59e50000-59f4f000
I/DEBUG ( 83): (no map for address)
I/DEBUG ( 83): be905000-be926000 [stack]
I/ServiceManager( 80): service 'media.audio_policy' died
I/ServiceManager( 80): service 'media.audio_flinger' died
I/ServiceManager( 80): service 'media.player' died
I/ServiceManager( 80): service 'media.camera' died
I/Netd (10950): Netd 1.0 starting
I/mediaserver(10949): ServiceManager: 0x41abcd38
I/AudioFlinger(10949): Using default 3000 mSec as standby time.
I/CameraService(10949): CameraService started (pid=10949)
I/AudioPolicyManagerBase(10949): loadAudioPolicyConfig() loaded /system/etc/audio_policy.conf
I/AudioFlinger(10949): loadHwModule() Loaded primary audio interface from sunxi audio HW HAL (audio) handle 1
I/AudioFlinger(10949): HAL output buffer size 1056 frames, normal mix buffer size 1056 frames
I/AudioMixer(10949): found effect "Multichannel Downmix To Stereo" from The Android Open Source Project
I/AudioFlinger(10949): Using module 1 has the primary audio interface
I/AudioFlinger(10949): AudioFlinger's thread 0x41ac87a0 ready to run
W/AudioFlinger(10949): Thread AudioOut_2 cannot connect to the power manager service
I/AudioPolicyService(10949): Loaded audio policy from LEGACY Audio Policy HAL (audio_policy)
E/BandwidthController(10950): runIptablesCmd(): failed /system/bin/iptables -t raw -N bw_raw_PREROUTING res=256
E/BandwidthController(10950): runIptablesCmd(): failed /system/bin/ip6tables -t raw -N bw_raw_PREROUTING res=256
D/MDnsDS (10950): MDnsSdListener::Hander starting up
D/MDnsDS (10950): MDnsSdListener starting to monitor
D/MDnsDS (10950): Going to poll with pollCount 1

So, my question is this. How easy (or hard) would it be to install/build AOSP for this? There doesn't appear to be anything special with it. Opened it up and saw that the processor is a "Allwinner A10".

Or is there some way I can force it into dfu mode to pull the contents of the NAND?

Or easier yet, can I grab any 4.1.0 library compiled for armv7 (libdvm.so?)

Thank you in advance

--Brendan