目次
- きっかけ
- 仕様
- 分解
- UART
- フラッシュのダンプ
- アップデート
- ADBを有効にしたかった
- 適当なapkをインストールしてみる
- DpfDiagアプリを起動してみる
- 他にできそうなこと
- おわりに
- ログとか
きっかけ
なんか手に入れたので、分解します。以前に、Sonyのデジタルフォトフレーム(DPF-HD800 DPF-D92)を分解してみたで同社製のデジタルフォトフレームを分解していました。そのため同じ感じでチープなSoCでRTOSが動いているんだろうと思っていました。が、意外なSoCに意外なOSが動いていました！
仕様
製品ページ
2010年11月発売
10インチ
2GB
動画再生可能
HDMIでの出力が可能
以前のDPF-D92ほどでは無いですが、かなりベゼルが太いです。当時の最上位機種だったようです。
分解
裏面の四方にあるネジを外して、隙間にドライバを入れてバキバキやったら分解できました。
基板全体
基板表です。SoC周辺がかなりモダンな雰囲気です。RTOSよりもLinuxとかが動いていそうな雰囲気な部品たちです。LCDのフレキシブルケーブルが細長いフェライトコアを通る様になっていてました。
基板裏です。RTC用のボタン電池とクリスタル、各種端子があります。左上にAsync-Etherと書かれたCN200、右上にJTAG/Serialと書かれたCN201、SPI-Etherと書かれたCN202、右下にSub-DBGと書かれたCN302があります。Etherと書かれてるのは何かしらでEtherモジュールが接続できるよにするための端子だと思われます。
各種部品
はじめにSoCです。これが驚いたことに、SONY BIONZでした。CXD9985GGという型番の物が載っていました。後で明らかになりましたが、ほぼEMMA Mobile EV1です。この機種よりも3年後の2013年に発売されたDPF-HD800を分解したときはAnlogicの前時代的なSoC？マイコン？だったのでモダンなSoCの見た目でびっくりしました。
EMMA Mobile EV2というコア数が2になったただけのSoCあり、それを搭載したKZM-A9-Dualというボードが存在する様です。ソースコードが手に入ればそのボードのカーネルを移植できたりする気がします。ただ、そちらのボードもカーネルバージョン3以上は出ていないようなので、最新のカーネルをビルドするのはそれなりにめんどくさそうです。
メモリはHynixのH5PS1G63EFRでDDR2な128MBが2枚の256MBのようです。
ROMはTOSHIBAのTHGBM1G4D1EBAI7で2GBのeMMCの様です。当時のニュースリリースが残っていました。
UART
裏面のCN201のところに、JTAG/Serialと書かれているので、ここをオシロスコープで探したら見つかりました。ボーレートは115200でした。
起動ログは下にまとめて記してあります。ブートローダがU-Bootで、OSがAndroid 1.6、Linuxカーネルは2.6.29でした。驚きました。以前に同社のデジタルフォトフレームを分解したときはRTOSだったので、RTOSだと思っていたらAndroidでした！パスワード無しで直接rootシェルに入れました。
ブートログを読むとSoCはCortex-A9 533MHzのシングルコアなEMMA Mobile EV1の様です。これに周辺チップの機能(Subcpuとか？)を盛り込んだものがBIONZ、CXD9985GGなのだと思います。
メモリは256MB搭載されていますが、Androidに割当されているのは133MBの様です。残りは映像用アクセラレータに割り当てられているのだと思います。
U-Bootには適当なキーを長押ししていたところ入れました。tftpbootがあったりして、有線LANが存在するボード向けのU-Bootが流用されている感じがします。試しにtftpbootを実行してみたところLAN9118が無いと言われます。ブートログ中にもsmsc911xとあり、ドライバが組み込まれていることがわかります。Async-Etherのところにモジュールを接続する感じなのかも知れません(開発ボードに搭載されていただけかもしれない)。
フラッシュのダンプ
あまり改造するつもりは無いですが、とりあえず行っておきます。Androidが認識できる様にext3でフォーマットしたUSBメモリを挿し、
mount -t ext3 /dev/block/sda1 /sdcard
で/sdcardにマウントします。
mkdir /sdcard/DPF-XR100
とかで適当にフォルダを作って
dd if=/dev/block/mmcblk0p1 of=/sdcard/DPF-XR100/mmcblk0p1.img bs=10M
dd if=/dev/block/mmcblk0p2 of=/sdcard/DPF-XR100/mmcblk0p2.img bs=10M
dd if=/dev/block/mmcblk0p3 of=/sdcard/DPF-XR100/mmcblk0p3.img bs=10M
dd if=/dev/block/mmcblk0p4 of=/sdcard/DPF-XR100/mmcblk0p4.img bs=10M
dd if=/dev/block/mmcblk0 of=/sdcard/DPF-XR100/mmcblk0.img bs=10M
でダンプを取得しました。
それぞれのパーティションは
mmcblk0p1がカーネル、mmcblk0p2がルート、mmcblk0p3がメンテナンスモードのルート、mmcblk0p4が写真保存用(USBでPCに挿したときに認識される)領域な感じです。mmcblk0p4は基本的に/albumにマウントされています。
アップデート
公式では既にサービス終了となっていてダウンロードできませんが、internet archiveを見たところアップデートページが見つかりました(自鯖ミラー)。ビューモードを長押しで起動することでブートモードが変わり、ルートがmmcblk0p3となり、メンテナンスモードとして起動するっぽいです。
もしかしたらAndroidのバージョンが上がったりするのかと思って試してみましたが、変わらずでした。ブートログもほとんど変化していないように見えるので、フォトフレームアプリ側のアップデートが主なのだと思います。
アップデート時のログは下にまとめて記してあります。
ADBを有効にしたかった
もともとのdefault.propを本体の写真用パーティションに待避させます。cpコマンドが無いので代わりにddを使いました。
dd if=/default.prop of=/album/DCIM/100ALBUM/default.prop
USBでPCにつなぎ、中身を書き換えて、
persist.service.adb.enable=1
persist.service.debuggable=1
ro.debuggable=1
に変更・追加しました。ルートをrwで再マウントし
mount -o remount,rw /dev/root /
変更したdefault.propをコピー
dd if=/album/DCIM/100ALBUM/default_adb.prop of=/default.prop
後は再起動するだけですが、そもそもUSBドライバにadbが含まれておらず、mass storageしか無いようなので、adbは認識されませんでした。
適当なapkをインストールしてみる
ディフォルトでインストール済みのアプリは
# pm list packages
package:com.android.providers.telephony
package:com.sony.jp.dpf.crash_log
package:com.android.providers.contacts
package:com.sony.jp.dpf.diag
package:com.android.packageinstaller
package:android
package:com.sony.jp.dpf.system
package:com.sony.jp.dpf.provider
package:com.android.providers.downloads
package:android.tts
package:com.android.server.vpn
package:com.android.providers.userdictionary
package:com.android.providers.applications
package:com.android.providers.settings
package:com.sony.jp.dpf.appこんな感じで、ほとんど何も入っていません。せっかくなのでランチャーをインストールしてみます。
apkmirrorにAndroid 1.6の純正Lancherがあったので、ダウンロードし、USBで転送します。
これを/data/app下にコピーして再起動するとインストールできます。cpコマンドが無いのでddを使ってコピーしました。
DpfDiagアプリを起動してみる
ランチャーアプリからdiagアプリを起動できました。この状態でUSBをPCに挿すと、何故かDPP-97(プリンタ)として認識されました。各種テストや設定、情報を見たりできるようです。
他にできそうなこと
カーネルのバージョンがかなり低いですが、適当なinitrd.imgをsdカードにおいて、U-Bootでカーネルに渡す引数を変更すれば古いバージョンのDebianとかは簡単に起動すると思います。
カーネルのソースコードがSonyの方から昔は公開されていたようですが、肝心のソースコードは保存されていません。頑張って探せば、EMMA Mobile EV1のkernelのソースコードは入手できそうですが、画面を出すところまでできるのかわからないです。まあ、そこまでする価値があるとも思えないので、行うつもりはありません。
おわりに
Androidが入っていてびっくりしました。しかも、これまでに触ったことのない古さのAndroidでした。まだまだ遊べそうな感じはしますが、これ1台しか持ってない上に使い道も思いつかないのでこれ以上はやりません。
ログとか
更新前(1.13)のブートログ
U-Boot 2009.03-rc1 (2010/09/21 - 10:19:53)
Booted Device: eMMC
Board: EM/EV ES2 (Rev.00000420)
DRAM: 256 MB
## Unknown FLASH on Bank 1 - Size = 0x00000000 = 0 MB
Flash: 0 kB
*** Warning - bad CRC, using default environment
In: serial
Out: serial
Err: serial
CPU: 533MHz
DDR: 266MHz(CPU/2)
DQS output delay: 0x0F
#### Normal boot ####
Hit any key to stop autoboot: 0
## Booting kernel from Legacy Image at 40007fc0 ...
Image Name: Linux-2.6.29
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 4422592 Bytes = 4.2 MB
Load Address: 40008000
Entry Point: 40008000
Verifying Checksum ... OK
Loading Kernel Image ... OK
OK
Starting kernel ...
Linux version 2.6.29 (s-frame@jpc00115764) (gcc version 4.4.1 (Sourcery G++ Lite 2009q3-67) ) #2 PREEMPT Tue Dec 28 12:25:31 JST 2010
CPU: ARMv7 Processor [411fc092] revision 2 (ARMv7), cr=10c53c7f
CPU: VIPT nonaliasing data cache, VIPT nonaliasing instruction cache
Machine: EMXX
Memory policy: ECC disabled, Data cache writeback
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 33782
Kernel command line: root=/dev/mmcblk0p2 noinitrd init=/init console=ttyS0,115200n8n SELINUX_INIT=no mem=133M rw video=qfb: ip=none rootfstype=ext3 ro otwait
PID hash table entries: 1024 (order: 10, 4096 bytes)
Console: colour dummy device 80x30
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
Memory: 133MB = 133MB total
Memory: 129792KB available (4008K code, 786K data, 116K init)
Calibrating delay loop... 1064.96 BogoMIPS (lpj=5324800)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
net_namespace: 296 bytes
NET: Registered protocol family 16
PL310/L2C-310 cache controller enabled
chip revision 420
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
subcpu_init start.
subcpu_probe.
NET: Registered protocol family 2
IP route cache hash table entries: 2048 (order: 1, 8192 bytes)
TCP established hash table entries: 8192 (order: 4, 65536 bytes)
TCP bind hash table entries: 8192 (order: 3, 32768 bytes)
TCP: Hash tables configured (established 8192 bind 8192)
TCP reno registered
NET: Registered protocol family 1
Power Management for EMXX.
spi: registered device spi [spi]
Starting pmu...
ashmem: initialized
fuse init (API version 7.11)
msgmni has been set to 253
io scheduler noop registered
io scheduler anticipatory registered (default)
LCD MODEL:ALEX10A
emxx_fb: registered device fb
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0xe1020000 (irq = 40) is a TI16750
console [ttyS0] enabled
serial8250.0: ttyS1 at MMIO 0xe1030000 (irq = 41) is a TI16750
loop: module loaded
pmem: 1 init
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
smsc911x: Driver version 2008-10-21.
Linux video capture interface: v2.00
emxx_v4l2: registered device video0 [v4l2]
i2c /dev entries driver
Uniform Multi-Platform E-IDE driver
ide-gd driver 1.18
Driver 'sd' needs updating - please use bus_type methods
Driver 'sr' needs updating - please use bus_type methods
emxx_ide: plug-OUT CFCARD
detect xD removing
emxx_xd: driver loaded succesfully
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
emxx-ehci-driver emxx-ehci-driver: EMXX EHCI
emxx-ehci-driver emxx-ehci-driver: new USB bus registered, assigned bus number 1
emxx-ehci-driver emxx-ehci-driver: irq 115, io mem 0xe2701000
emxx-ehci-driver emxx-ehci-driver: USB 2.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
emxx-ohci-driver emxx-ohci-driver: EMXX OHCI
emxx-ohci-driver emxx-ohci-driver: new USB bus registered, assigned bus number 2
emxx-ohci-driver emxx-ohci-driver: irq 115, io mem 0xe2700000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
usbcore: registered new interface driver usblp
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usb-vbuschk: Init USB vBus check
udc: version Dec 28 2010
Starting button(key).
input: dpf_button as /devices/virtual/input/input0
Starting button(remocon).
input: dpf_remocon as /devices/virtual/input/input1
rtc-dpf module_init! RTC
Starting rtc.dpf_rtc_probe.
rtc-dpf rtc-dpf: rtc core: registered rtc-dpf as rtc0
Starting wdt.
dpf_access: loaded
logger: created 64K log 'log_main'
logger: created 256K log 'log_events'
logger: created 64K log 'log_radio'
Advanced Linux Sound Architecture Driver Version 1.0.18a.
Starting sound codec.
Starting sound codec.
ALSA device list:
#0: sound codec (emxx mixer)
#1: sound codec pm1 (no mixer)
TCP cubic registered
NET: Registered protocol family 17
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
Registered led device: lcd-backlight
VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 1
rtc-dpf rtc-dpf: hctosys: unable to read the hardware clock
Waiting for root device /dev/mmcblk0p2...
mmc0: new high speed MMC card at address 0001
mmcblk0: mmc0:0001 MMC02G 1.86 GiB
p1 p2 p3 p4
EXT3-fs warning: maximal mount count reached, running e2fsck is recommended
kjournald starting. Commit interval 5 seconds
EXT3 FS on mmcblk0p2, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
VFS: Mounted root (ext3 filesystem).
Freeing init memory: 116K
Warning: unable to open an initial console.
emxx_brightness_set:duty=20
emxx_brightness_set:duty=40
emxx_brightness_set:duty=60
emxx_brightness_set:duty=80
emxx_brightness_set:duty=100
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop9, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
EXT3-fs: mounted filesystem with ordered data mode.
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
kjournald starting. Commit interval 5 seconds
EXT3-fs: mounted filesystem with ordered data mode.
POWER_OFF_CHECK:check flag file.
POWER_OFF_CHECK:rm /data/dalvik-cache/*.
POWER_OFF_CHECK:rm /data/data/com.android.providers.settings/databases/settings.db.
mshc: module license 'Proprietary' taints kernel.
* RTC_RD_TIME: 2010/1/1, 00:00:11
sh: can't access tty; job control turned off
# Subcpu version 01.05(2010/1/1, 0:0:11)
Subcpu checksum 78a7
usb_mass_storage gadget: File-backed Storage Gadget, version: 20 November 2008
usb_mass_storage gadget: Number of LUNs=1
udc: ----- VBUS OFF
HDMI Driver works normally.
warning: `app_process' uses 32-bit capabilities (legacy support in use)
init: no such service 'bootanim'
request_suspend_state: wakeup (3->0) at 33840302757 (2010-01-01 00:00:35.662170397 UTC)
emxx_brightness_set:duty=40
input: dpf_cec as /devices/virtual/input/input2
Subcpu version 01.05(2010/1/1, 0:0:37)
emxx_brightness_set:duty=100
Subcpu version 01.05(2010/1/1, 0:0:42)
Subcpu version 01.05(2010/1/1, 0:0:42)
Subcpu version 01.05(2010/1/1, 0:0:42)
init: no such service 'bootanim'
Subcpu version 01.05(2010/1/1, 0:0:43)U-Boot
U-Boot 2009.03-rc1 (2010/09/21 - 10:19:53)
Booted Device: eMMC
Board: EM/EV ES2 (Rev.00000420)
DRAM: 256 MB
## Unknown FLASH on Bank 1 - Size = 0x00000000 = 0 MB
Flash: 0 kB
*** Warning - bad CRC, using default environment
In: serial
Out: serial
Err: serial
CPU: 533MHz
DDR: 266MHz(CPU/2)
DQS output delay: 0x0F
#### Normal boot ####
Hit any key to stop autoboot: 0
DPF/EV # help
? - alias for 'help'
autoscr - run script from memory
base - print or set address offset
bdinfo - print Board Info structure
boot - boot default, i.e., run 'bootcmd'
bootd - boot default, i.e., run 'bootcmd'
bootm - boot application image from memory
bootp - boot image via network using BOOTP/TFTP protocol
cmp - memory compare
coninfo - print console devices and information
cp - memory copy
crc32 - checksum calculation
dhcp - boot image via network using DHCP/TFTP protocol
echo - echo args to console
emmc_erase- erase of eMMC NAND
emmc_flinfo- print eMMC NAND information
emmc_protect- enable or disable eMMC NAND write protection
emmc_write- write to eMMC NAND
erase - erase FLASH memory
flinfo - print FLASH memory information
go - start application at address 'addr'
help - print online help
iminfo - print header information for application image
imls - list all images found in flash
imxtract- extract a part of a multi-image
initenv - clear environment variables in persistent storage
itest - return true/false on integer compare
loadb - load binary file over serial line (kermit mode)
loads - load S-Record file over serial line
loady - load binary file over serial line (ymodem mode)
loop - infinite loop on address range
md - memory display
mm - memory modify (auto-incrementing)
mtest - simple RAM test
mw - memory write (fill)
nfs - boot image via network using NFS protocol
nm - memory modify (constant address)
ping - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
protect - enable or disable FLASH write protection
rarpboot- boot image via network using RARP/TFTP protocol
reset - Perform RESET of the CPU
run - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv - set environment variables
sleep - delay execution for some time
tftpboot- boot image via network using TFTP protocol
version - print monitor version
DPF/EV # version
U-Boot 2009.03-rc1 (2010/09/21 - 10:19:53)
DPF/EV # bdinfo
arch_number = 0x00000A0E
env_t = 0x00000000
boot_params = 0x40000100
DRAM bank = 0x00000000
-> start = 0x40000000
-> size = 0x08000000
DRAM bank = 0x00000001
-> start = 0x48000000
-> size = 0x08000000
ethaddr = 00:00:00:00:00:00
ip_addr = 192.168.149.0
baudrate = 115200 bps
DPF/EV # printenv
bootargs=root=/dev/null noinitrd init=/linuxrc console=ttyS0,115200n8n SELINUX_INIT=no $(cfg_ddr) $(read_write) video=qfb: ip=none rootflags=physaddr=0x00500000
bootcmd=run ext3cmd
bootdelay=1
baudrate=115200
ipaddr=192.168.149.XXX
serverip=192.168.149.X
rootpath="setenv rootpath /home/$(nfs_user)/$(nfs_root)/android-fs; run nfscmd"
bootfile="setenv bootfile /home/$(nfs_user)/$(nfs_root)/android/kernel/arch/arm/boot/uImage; run setroot"
nfs_user=username
nfs_root=alex
setboot=setenv bootfile /home/$(nfs_user)/$(nfs_root)/android/kernel/arch/arm/boot/uImage; run setroot
setroot=setenv rootpath /home/$(nfs_user)/$(nfs_root)/android-fs; run nfscmd
initfile=/init
cfg_ddr=mem=133M
root_fs=ext3
ext3_root=/dev/mmcblk0p2
ext3cmd=setenv bootargs root=$(ext3_root) noinitrd init=$(initfile) console=ttyS0,115200n8n SELINUX_INIT=no $(cfg_ddr) $(read_write) video=qfb: ip=none rootfstype=$(root_fs) rootwait;bootm 40007fc0
nfscmd=nfs;setenv bootargs root=/dev/nfs noinitrd init=$(initfile) console=ttyS0,115200n8n SELINUX_INIT=no $(cfg_ddr) $(read_write) video=qfb: nfsroot=$(serverip):$(rootpath),timeo=30 ip=$(ipaddr):$(serverip):$(gatewayip):$(netmask):$(hostname):eth0:off;bootm 40007fc0
read_write=rw
dqs_delay=0x0F
sdboot=setenv root_fs vfat; setenv initfile /linuxrc; setenv ext3_root /dev/mmcblk1p1; setenv read_write rw; run ext3cmd
stdin=serial
stdout=serial
stderr=serial
Environment size: 1381/131068 bytes
DPF/EV # tftpboot
DRIVER_VERSION : 110, DATECODE : 080408
Failed to detect LAN9118. ID_REV = 0x00290028
*** ERROR: `ethaddr' not setLinux上での各種情報
# cat /proc/version
Linux version 2.6.29 (s-frame@jpc00115764) (gcc version 4.4.1 (Sourcery G++ Lite 2009q3-67) ) #2 PREEMPT Tue Dec 28 12:25:31 JST 2010
# cat /proc/cpuinfo
Processor : ARMv7 Processor rev 2 (v7l)
BogoMIPS : 1064.96
Features : swp half thumb fastmult vfp edsp neon vfpv3
CPU implementer : 0x41
CPU architecture: 7
CPU variant : 0x1
CPU part : 0xc09
CPU revision : 2
Hardware : EMXX
Revision : 0420
Serial : 0000000000000000
# cat /proc/meminfo
MemTotal: 130060 kB
MemFree: 13316 kB
Buffers: 19428 kB
Cached: 55572 kB
SwapCached: 0 kB
Active: 50284 kB
Inactive: 57760 kB
Active(anon): 8992 kB
Inactive(anon): 25432 kB
Active(file): 41292 kB
Inactive(file): 32328 kB
Unevictable: 0 kB
Mlocked: 0 kB
SwapTotal: 0 kB
SwapFree: 0 kB
Dirty: 0 kB
Writeback: 0 kB
AnonPages: 33056 kB
Mapped: 16044 kB
Slab: 3464 kB
SReclaimable: 1736 kB
SUnreclaim: 1728 kB
PageTables: 2408 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 65028 kB
Committed_AS: 1756620 kB
VmallocTotal: 385024 kB
VmallocUsed: 80264 kB
VmallocChunk: 292860 kB
# cat /proc/fb
0 EMXX FB
# lsmod
unified_hdmi 161332 10 - Live 0xbf059000 (P)
em_ave 137528 0 - Live 0xbf032000
inter_dsp 33116 0 - Live 0xbf024000
g_file_storage 37460 0 - Live 0xbf015000
mshc 63224 0 - Live 0xbf000000 (P)# df
/: 123955K total, 93086K used, 30869K available (block size 1024)
/: 123955K total, 93086K used, 30869K available (block size 1024)
/dev: 65028K total, 12K used, 65016K available (block size 4096)
/data: 59493K total, 19325K used, 40168K available (block size 1024)
/dpf/demo: 29745K total, 27053K used, 2692K available (block size 1024)
/dpf/sound: 24785K total, 22304K used, 2481K available (block size 1024)
/dpf/other: 29745K total, 22771K used, 6974K available (block size 1024)
/tmp: 32768K total, 64K used, 32704K available (block size 4096)
/sqlite_stmt_journals: 4096K total, 24K used, 4072K available (block size 4096)
/cache: 4096K total, 0K used, 4096K available (block size 4096)
/album: 1633024K total, 96K used, 1632928K available (block size 32768)
# mount
rootfs / rootfs rw 0 0
/dev/root / ext3 ro,errors=continue,data=ordered 0 0
tmpfs /dev tmpfs rw,mode=755 0 0
devpts /dev/pts devpts rw,mode=600 0 0
proc /proc proc rw 0 0
sysfs /sys sysfs rw 0 0
/dev/block/loop_data /data ext3 rw,noatime,nodiratime,errors=continue,data=ordered 0 0
/dev/block/loop_demo /dpf/demo ext3 ro,errors=continue,data=ordered 0 0
/dev/block/loop_sound /dpf/sound ext3 ro,errors=continue,data=ordered 0 0
/dev/block/loop_other /dpf/other ext3 ro,errors=continue,data=ordered 0 0
tmpfs /tmp tmpfs rw,size=32768k 0 0
tmpfs /sqlite_stmt_journals tmpfs rw,size=4096k 0 0
tmpfs /cache tmpfs rw,size=4096k 0 0
/dev/block/vold/7:17 /album vfat rw,nosuid,nodev,noexec,noatime,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp932,iocharset=iso8859-1,shortname=mixed,batch_sync,utf8,avoid_dlink,errors=remount-ro 0 0build.prop
# begin build properties
# autogenerated by buildinfo.sh
ro.build.id=DRD35
ro.build.display.id=DRD35
ro.build.version.incremental=eng.kanda.20110910.201837
ro.build.version.sdk=4
ro.build.version.codename=REL
ro.build.version.release=1.6
ro.build.date=2011年 9月 10日 土曜日 20:20:00 JST
ro.build.date.utc=1315653600
ro.build.type=user
ro.build.user=kanda
ro.build.host=jpc00115764
ro.build.tags=test-keys
ro.product.model=alex
ro.product.brand=SFrame
ro.product.name=alex
ro.product.device=dpf_emxx
ro.product.board=
ro.product.cpu.abi=armeabi
ro.product.manufacturer=sony
ro.product.locale.language=
ro.product.locale.region=
ro.board.platform=emxx
# ro.build.product is obsolete; use ro.product.device
ro.build.product=dpf_emxx
# Do not try to parse ro.build.description or .fingerprint
ro.build.description=alex-user 1.6 DRD35 eng.kanda.20110910.201837 test-keys
ro.build.fingerprint=SFrame/alex/dpf_emxx/:1.6/DRD35/eng.kanda.20110910.201837:user/test-keys
# end build properties
ro.config.sync = yes
ro.product.board = emxx
#ro.sf.lcd_density = 238
app.setupwizard.disable=1
keyguard.no_require_sim=1
#
# ADDITIONAL_BUILD_PROPERTIES
#
ro.config.notification_sound=F1_New_SMS.ogg
ro.com.android.dataroaming=true
ro.config.sync=yes
net.bt.name=Android
dalvik.vm.stack-trace-file=/data/anr/traces.txtアップデート時のログ
U-Boot 2009.03-rc1 (2010/09/21 - 10:19:53)
Booted Device: eMMC
Board: EM/EV ES2 (Rev.00000420)
DRAM: 256 MB
## Unknown FLASH on Bank 1 - Size = 0x00000000 = 0 MB
Flash: 0 kB
*** Warning - bad CRC, using default environment
In: serial
Out: serial
Err: serial
CPU: 533MHz
DDR: 266MHz(CPU/2)
DQS output delay: 0x0F
check test mode ..............................
#### Test Mode ####
Hit any key to stop autoboot: 0
## Booting kernel from Legacy Image at 40007fc0 ...
Image Name: Linux-2.6.29
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 4422592 Bytes = 4.2 MB
Load Address: 40008000
Entry Point: 40008000
Verifying Checksum ... OK
Loading Kernel Image ... OK
OK
Starting kernel ...
Linux version 2.6.29 (s-frame@jpc00115761) (gcc version 4.4.1 (Sourcery G++ Lite 2009q3-67) ) #1 PREEMPT Tue Sep 21 09:47:53 JST 2010
CPU: ARMv7 Processor [411fc092] revision 2 (ARMv7), cr=10c53c7f
CPU: VIPT nonaliasing data cache, VIPT nonaliasing instruction cache
Machine: EMXX
Memory policy: ECC disabled, Data cache writeback
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 33782
Kernel command line: root=/dev/mmcblk0p3 noinitrd init=/init console=ttyS0,115200n8n SELINUX_INIT=no mem=133M rw video=qfb: ip=none rootfstype=ext3 rootwait
PID hash table entries: 1024 (order: 10, 4096 bytes)
Console: colour dummy device 80x30
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
Memory: 133MB = 133MB total
Memory: 129792KB available (4008K code, 786K data, 116K init)
Calibrating delay loop... 1064.96 BogoMIPS (lpj=5324800)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
net_namespace: 296 bytes
NET: Registered protocol family 16
PL310/L2C-310 cache controller enabled
chip revision 420
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
subcpu_init start.
subcpu_probe.
NET: Registered protocol family 2
IP route cache hash table entries: 2048 (order: 1, 8192 bytes)
TCP established hash table entries: 8192 (order: 4, 65536 bytes)
TCP bind hash table entries: 8192 (order: 3, 32768 bytes)
TCP: Hash tables configured (established 8192 bind 8192)
TCP reno registered
NET: Registered protocol family 1
Power Management for EMXX.
spi: registered device spi [spi]
Starting pmu...
ashmem: initialized
fuse init (API version 7.11)
msgmni has been set to 253
io scheduler noop registered
io scheduler anticipatory registered (default)
LCD MODEL:ALEX10A
emxx_fb: registered device fb
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0xe1020000 (irq = 40) is a TI16750
console [ttyS0] enabled
serial8250.0: ttyS1 at MMIO 0xe1030000 (irq = 41) is a TI16750
loop: module loaded
pmem: 1 init
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
smsc911x: Driver version 2008-10-21.
Linux video capture interface: v2.00
emxx_v4l2: registered device video0 [v4l2]
i2c /dev entries driver
Uniform Multi-Platform E-IDE driver
ide-gd driver 1.18
emxx_ide: plug-OUT CFCARD
Driver 'sd' needs updating - please use bus_type methods
Driver 'sr' needs updating - please use bus_type methods
detect xD removing
emxx_xd: driver loaded succesfully
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
emxx-ehci-driver emxx-ehci-driver: EMXX EHCI
emxx-ehci-driver emxx-ehci-driver: new USB bus registered, assigned bus number 1
emxx-ehci-driver emxx-ehci-driver: irq 115, io mem 0xe2701000
emxx-ehci-driver emxx-ehci-driver: USB 2.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
emxx-ohci-driver emxx-ohci-driver: EMXX OHCI
emxx-ohci-driver emxx-ohci-driver: new USB bus registered, assigned bus number 2
emxx-ohci-driver emxx-ohci-driver: irq 115, io mem 0xe2700000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
usbcore: registered new interface driver usblp
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usb-vbuschk: Init USB vBus check
udc: version Sep 21 2010
Starting button(key).
input: dpf_button as /devices/virtual/input/input0
Starting button(remocon).
input: dpf_remocon as /devices/virtual/input/input1
rtc-dpf module_init! RTC
Starting rtc.dpf_rtc_probe.
rtc-dpf rtc-dpf: rtc core: registered rtc-dpf as rtc0
Starting wdt.
dpf_access: loaded
logger: created 64K log 'log_main'
logger: created 256K log 'log_events'
logger: created 64K log 'log_radio'
Advanced Linux Sound Architecture Driver Version 1.0.18a.
Starting sound codec.
Starting sound codec.
ALSA device list:
#0: sound codec (emxx mixer)
#1: sound codec pm1 (no mixer)
TCP cubic registered
NET: Registered protocol family 17
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
Registered led device: lcd-backlight
VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 1
rtc-dpf rtc-dpf: hctosys: unable to read the hardware clock
Waiting for root device /dev/mmcblk0p3...
mmc0: new high speed MMC card at address 0001
mmcblk0: mmc0:0001 MMC02G 1.86 GiB
p1 p2 p3 p4
kjournald starting. Commit interval 5 seconds
EXT3 FS on mmcblk0p3, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
VFS: Mounted root (ext3 filesystem).
Freeing init memory: 116K
Warning: unable to open an initial console.
usb 1-1: new high speed USB device using emxx-ehci-driver and address 2
emxx_brightness_set:duty=20
scsi0 : SCSI emulation for USB Mass Storage devices
emxx_brightness_set:duty=40
emxx_brightness_set:duty=60
emxx_brightness_set:duty=80
sda1
sd 0:0:0:0: [sda] Attached SCSI removable disk
emxx_brightness_set:duty=100
mshc: module license 'Proprietary' taints kernel.
init: Unable to open persistent property directory /data/property errno: 2
sh: can't access tty; job control turned off
# * RTC_RD_TIME: 2010/1/2, 13:58:11
init: Unable to write persistent property to temp file /data/property/.temp errno: 2
Subcpu version 01.05(2010/1/2, 13:58:11)
Subcpu checksum 78a7
HDMI Driver works normally.
EXT3-fs warning: checktime reached, running e2fsck is recommended
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop9, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
EXT3-fs warning: checktime reached, running e2fsck is recommended
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop9, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
// メンテナンスモード起動完了
// アップデートを実行
kjournald starting. Commit interval 5 seconds
EXT3-fs warning: checktime reached, running e2fsck is recommended
EXT3 FS on loop9, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
EXT3-fs warning: checktime reached, running e2fsck is recommended
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop9, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
EXT3-fs warning: checktime reached, running e2fsck is recommended
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop9, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop8, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
895+0 records in
895+0 records out
7331840 bytes transferred in 0.941 secs (7791540 bytes/sec)
kjournald starting. Commit interval 5 seconds
EXT3 FS on mmcblk0p2, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop10, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop11, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop12, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
EXT3-fs warning: checktime reached, running e2fsck is recommended
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop9, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
EXT3-fs warning: checktime reached, running e2fsck is recommended
EXT3 FS on loop9, internal journal
kjournald starting. Commit interval 5 seconds
EXT3-fs: mounted filesystem with ordered data mode.
1920+0 records in
1920+0 records out
62914560 bytes transferred in 5.156 secs (12202203 bytes/sec)
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop9, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop8, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop9, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
EXT3 FS on loop9, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop9, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop9, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
EXT3 FS on loop9, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop9, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
// アップデート完了
// 電源を切る
subcpu_shutdown.
Power down.
---<< emxx_pm_do_poweroff >>---更新後(1.22)の起動ログ
U-Boot 2009.03-rc1 (2010/09/21 - 10:19:53)
Booted Device: eMMC
Board: EM/EV ES2 (Rev.00000420)
DRAM: 256 MB
## Unknown FLASH on Bank 1 - Size = 0x00000000 = 0 MB
Flash: 0 kB
*** Warning - bad CRC, using default environment
In: serial
Out: serial
Err: serial
CPU: 533MHz
DDR: 266MHz(CPU/2)
DQS output delay: 0x0F
#### Normal boot ####
Hit any key to stop autoboot: 0
## Booting kernel from Legacy Image at 40007fc0 ...
Image Name: Linux-2.6.29
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 4422592 Bytes = 4.2 MB
Load Address: 40008000
Entry Point: 40008000
Verifying Checksum ... OK
Loading Kernel Image ... OK
OK
Starting kernel ...
Linux version 2.6.29 (kanda@jpc00115764) (gcc version 4.4.1 (Sourcery G++ Lite 2009q3-67) ) #2 PREEMPT Sat Sep 10 20:20:01 JST 2011
CPU: ARMv7 Processor [411fc092] revision 2 (ARMv7), cr=10c53c7f
CPU: VIPT nonaliasing data cache, VIPT nonaliasing instruction cache
Machine: EMXX
Memory policy: ECC disabled, Data cache writeback
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 33782
Kernel command line: root=/dev/mmcblk0p2 noinitrd init=/init console=ttyS0,115200n8n SELINUX_INIT=no mem=133M rw video=qfb: ip=none rootfstype=ext3 rootwait
PID hash table entries: 1024 (order: 10, 4096 bytes)
Console: colour dummy device 80x30
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
Memory: 133MB = 133MB total
Memory: 129792KB available (4008K code, 786K data, 116K init)
Calibrating delay loop... 1064.96 BogoMIPS (lpj=5324800)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
net_namespace: 296 bytes
NET: Registered protocol family 16
PL310/L2C-310 cache controller enabled
chip revision 420
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
subcpu_init start.
subcpu_probe.
NET: Registered protocol family 2
IP route cache hash table entries: 2048 (order: 1, 8192 bytes)
TCP established hash table entries: 8192 (order: 4, 65536 bytes)
TCP bind hash table entries: 8192 (order: 3, 32768 bytes)
TCP: Hash tables configured (established 8192 bind 8192)
TCP reno registered
NET: Registered protocol family 1
Power Management for EMXX.
spi: registered device spi [spi]
Starting pmu...
ashmem: initialized
fuse init (API version 7.11)
msgmni has been set to 253
io scheduler noop registered
io scheduler anticipatory registered (default)
LCD MODEL:ALEX10A
emxx_fb: registered device fb
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0xe1020000 (irq = 40) is a TI16750
console [ttyS0] enabled
serial8250.0: ttyS1 at MMIO 0xe1030000 (irq = 41) is a TI16750
loop: module loaded
pmem: 1 init
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
smsc911x: Driver version 2008-10-21.
Linux video capture interface: v2.00
emxx_v4l2: registered device video0 [v4l2]
i2c /dev entries driver
Uniform Multi-Platform E-IDE driver
ide-gd driver 1.18
Driver 'sd' needs updating - please use bus_type methods
Driver 'sr' needs updating - please use bus_type methods
emxx_ide: plug-OUT CFCARD
detect xD removing
emxx_xd: driver loaded succesfully
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
emxx-ehci-driver emxx-ehci-driver: EMXX EHCI
emxx-ehci-driver emxx-ehci-driver: new USB bus registered, assigned bus number 1
emxx-ehci-driver emxx-ehci-driver: irq 115, io mem 0xe2701000
emxx-ehci-driver emxx-ehci-driver: USB 2.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
emxx-ohci-driver emxx-ohci-driver: EMXX OHCI
emxx-ohci-driver emxx-ohci-driver: new USB bus registered, assigned bus number 2
emxx-ohci-driver emxx-ohci-driver: irq 115, io mem 0xe2700000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
usbcore: registered new interface driver usblp
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usb-vbuschk: Init USB vBus check
udc: version Sep 10 2011
Starting button(key).
input: dpf_button as /devices/virtual/input/input0
Starting button(remocon).
input: dpf_remocon as /devices/virtual/input/input1
rtc-dpf module_init! RTC
Starting rtc.dpf_rtc_probe.
rtc-dpf rtc-dpf: rtc core: registered rtc-dpf as rtc0
Starting wdt.
dpf_access: loaded
logger: created 64K log 'log_main'
logger: created 256K log 'log_events'
logger: created 64K log 'log_radio'
Advanced Linux Sound Architecture Driver Version 1.0.18a.
Starting sound codec.
Starting sound codec.
ALSA device list:
#0: sound codec (emxx mixer)
#1: sound codec pm1 (no mixer)
TCP cubic registered
NET: Registered protocol family 17
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
Registered led device: lcd-backlight
VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 1
rtc-dpf rtc-dpf: hctosys: unable to read the hardware clock
Waiting for root device /dev/mmcblk0p2...
mmc0: new high speed MMC card at address 0001
mmcblk0: mmc0:0001 MMC02G 1.86 GiB
p1 p2 p3 p4
kjournald starting. Commit interval 5 seconds
EXT3 FS on mmcblk0p2, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
VFS: Mounted root (ext3 filesystem).
Freeing init memory: 116K
Warning: unable to open an initial console.
usb 1-1: new high speed USB device using emxx-ehci-driver and address 2
emxx_brightness_set:duty=20
scsi0 : SCSI emulation for USB Mass Storage devices
emxx_brightness_set:duty=40
emxx_brightness_set:duty=60
emxx_brightness_set:duty=80
sda1
sd 0:0:0:0: [sda] Attached SCSI removable disk
emxx_brightness_set:duty=100
kjournald starting. Commit interval 5 seconds
EXT3 FS on loop9, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting. Commit interval 5 seconds
kjournald starting. Commit interval 5 seconds
EXT3-fs: mounted filesystem with ordered data mode.
POWER_OFF_CHECK:check flag file.
POWER_OFF_CHECK:rm /data/dalvik-cache/*.
rm failed for /data/dalvik-cache/*, No such file or directory
POWER_OFF_CHECK:ERROR:rm /data/dalvik-cache/*.
POWER_OFF_CHECK:rm /data/data/com.android.providers.settings/databases/settings.db.
POWER_OFF_CHECK:ERROR:rm /data/data/com.android.providers.settings/databases/settings.db.
mshc: module license 'Proprietary' taints kernel.
* RTC_RD_TIME: 2010/1/2, 14:06:19
sh: can't access tty; job control turned off
# Subcpu version 01.05(2010/1/2, 14:6:19)
Subcpu checksum 78a7
usb_mass_storage gadget: File-backed Storage Gadget, version: 20 November 2008
usb_mass_storage gadget: Number of LUNs=1
udc: ----- VBUS OFF
HDMI Driver works normally.
warning: `app_process' uses 32-bit capabilities (legacy support in use)
init: no such service 'bootanim'
request_suspend_state: wakeup (3->0) at 36860322308 (2010-01-02 14:06:49.361541754 UTC)
emxx_brightness_set:duty=40
input: dpf_cec as /devices/virtual/input/input2
emxx_brightness_set:duty=100
init: sys_prop: permission denied uid:1000 name:user.language
init: sys_prop: permission denied uid:1000 name:user.region
Subcpu version 01.05(2010/1/2, 14:7:2)
Subcpu version 01.05(2010/1/2, 14:7:2)
Subcpu version 01.05(2010/1/2, 14:7:2)
Subcpu version 01.05(2010/1/2, 14:7:2)
init: no such service 'bootanim'