Originally Posted by stephtech
Really good NEWS, now have **** access to BUILTIN SERIAL PORT ****
I got my hands on a TX52F480S semi-bricked (amber led).
No matter what I was trying (different FW, editing scripts..), nothing was working. TV was accessing the USB key for a little while but no led blinks and never got the blue led.
While reading on all the posts, I came across someone that was mentioning the existence of a serial port on the board. So I digged around and found the way to connect.
Details are as follow:
you need to use a TTL level converter to convert for 5 volts signal to RS232 signal (like IC MAX232). You connect the converter (RX, TX and GND) via the 5 pins connector CN3. Pinout is:
2- GND (to converter GND)
3- TX (from converter to TV)
4- RX (from TV to converter)
5- +5 Volt (can be used to power the converter)
Please check with a multimeter to make sure you have the correct pin 1 (not written on the board, but looking at the back of the tv, it will be on the left side).
I used a terminal emulator (an old Telix) to connect, I've set the port at 115200,N,8,1
I am really not a Linux guru, but I did found that 4 blocks out of 5 are corrupted on the flash chip. MTD0 is ok. The flash is using JJFS2 file system. There is way to recreate these blocks from another good TV. So once a couple of you guys are connected to your TV, I'll ask for these blocks!
So now it is time to really get in control of your TV!
I am 90% sure that all those bricked TV will come back alive.
Pictures and schematic to follow!
I consoled to my TX47 some time ago to mess around with the mpeg libs and cross compiled several test kernels because the source is availble everywhere (MontaVista Linux) because its the same kernal used in many routers, voip devices and even the PS2 I think.
mtd0 is the same as the /images/mtd0 floating around in the firmware updates so just grab it and dd if=/images/mtd0 of=/dev/mtd0 (or use flash_burn thats included. Also the only block that uses JJFS2 is mtd3 witch is mounted to /etc. I'm guessing they used that fs because its r/w. mtd4 is mount to /mnt and is cramfs alone with the rootfs.
Detected LX5180 (PRID: c501),
Revision: 5a4c0161, Default 64 MB SDRAM,parse mem=xxx[MmKkGg] later...
CPU revision is: 0000c501
64 entry TLB.
Linux version 2.4.17_mvl21-4189ref (root@AlanLinux) (gcc version 2.95.3 20010316
Determined physical RAM map:
memory: 04000000 @ 00000000 (usable)
User-defined physical RAM map:
memory: 01a00000 @ 00000000 (usable)
reserve_bootmem: entering reserve_bootmem_core.
bootmem reserved from:8a000000 size:340
reserve_bootmem: leaving reserve_bootmem_core
Initial ramdisk at: 0x80348000 (0 bytes)
On node 0 totalpages: 6656
zone(0): 4096 pages.
zone(1): 2560 pages.
zone(2): 0 pages.
Kernel command line: mem=26m console=ttyS0,115200n8 root=/dev/mtdblock2 rootfst0
Real Time Scheduler Is Disabled
PREEMPT Is Disabled
calculating Memory Clock frequency(250MHZ ??)... memory clock frequency is set g
Calibrating delay loop (skipped)... 249.03 BogoMIPS
MIPS CPU counter frequency is fixed at 250000000 Hz
Memory: 22576k/26624k available (2155k kernel code, 4048k reserved, 94k data, 7)
Dentry-cache hash table entries: 4096 (order: 3, 32768 bytes)
Inode-cache hash table entries: 2048 (order: 2, 16384 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
Checking for 'wait' instruction... unavailable.
POSIX conformance testing by UNIFIX
Autoconfig PCI channel 0x8033e868
Scanning bus 00, I/O 0x14001000:0x14fff000, Mem 0x10000000:0x14000000
00:01.4 Class 0680: 1283:8172 (rev 11)
00:01.5 Class 0101: 1283:8172 (rev 01)
Alan Liu:Found HiDTV PCI-IDE controller
I/O at 0x140001f1 [size=0x8]
I/O at 0x140003f5 [size=0x4]
I/O at 0x14000171 [size=0x8]
I/O at 0x14000375 [size=0x4]
I/O at 0x14000001 [size=0x10]
00:01.6 Class 0680: 1283:8172 (rev 10)
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Disabling the Out Of Memory Killer
JFFS2 version 2.2. (C) 2001-2003 Red Hat, Inc.
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI ed
ttyS00 at 0x14011800 (irq = 39) is a 16550A
ttyS01 at 0x14014000 (irq = 35) is a 16550A
block: 64 slots per queue, batch=16
RAMDISK driver initialized: 16 RAM disks of 8192K size 1024 blocksize
loop: loaded (max 8 devices)
PPP generic driver version 2.4.1
PPP Deflate Compression module registered
PPP BSD Compression module registered
fether: total 682 pieces
SCSI subsystem driver Revision: 1.00
request_module[scsi_hostadapter]: Root fs not mounted
physmap flash device: 1000000 at 1c000000
phys_mapped_flash: Found 1 x16 devices at 0x0 in 16-bit bank
Amd/Fujitsu Extended Query Table at 0x0040
phys_mapped_flash: CFI does not contain boot bank location. Assuming top.
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Using physmap partition definition
Creating 1 MTD partitions on "phys_mapped_flash":
0x00000000-0x01000000 : "mtd0"
Using partition definition from KERNEL command line parameters
Creating 4 MTD partitions on "phys_mapped_flash":
0x00000000-0x00300000 : "mtd1"
0x00300000-0x00600000 : "mtd2"
0x00600000-0x00800000 : "mtd3"
0x00800000-0x01000000 : "mtd4"
usb.c: registered new driver usbdevfs
usb.c: registered new driver hub
Probe HiDTV PRO EHCI HC now...
ehci_hcd : irq 34, NON PCI IO/MEM SPACE(0x1b003100~0x1b003fff) bb003100
usb.c: new USB bus registered, assigned bus number 1
Alan: USB HC 64bit addressing is not supported
hub.c: USB hub found
hub.c: 1 port detected
usb.c: registered new driver usbnet
Initializing USB Mass Storage driver...
usb.c: registered new driver usb-storage
USB Mass Storage support registered.
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 2048)
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
RAMDISK: Couldn't find valid RAM disk image starting at 0.
VFS: Mounted root (cramfs filesystem).
Freeing unused kernel memory: 76k freed
Algorithmics/MIPS FPU Emulator v1.5
There are 1 ports in this hub
kmod: failed to exec /sbin/modprobe -s -k char-major-4, errno = 2
hub.c: new USB device HiDTV PRO EHCI HC-1, assigned address 2
scsi0 : SCSI emulation for USB Mass Storage devices
Vendor: FLASH Model: Drive AU_USB20 Rev: 8.07
Type: Direct-Access ANSI SCSI revision: 02
Attached scsi removable disk sda at scsi0, channel 0, id 0, lun 0
SCSI device sda: 2052096 512-byte hdwr sectors (1051 MB)
sda: Write Protect is off
sda:<3>kmod: failed to exec /sbin/modprobe -s -k eth1, errno = 2
kmod: failed to exec /sbin/modprobe -s -k eth1, errno = 2
kmod: failed to exec /sbin/modprobe -s -k eth1, errno = 2
sda1 sda2 sda3 sda4
WARNING: USB Mass Storage data integrity not assured
USB Mass Storage device found at 2
hidtvreg: setup done
Hidtv master i2c driver enter
Hidtv master i2c 2 driver enter
enable_irq(41) unbalanced from c00f79a8
kmod: failed to exec /sbin/modprobe -s -k char-major-251, errno = 2
Timer test: <6>init_module:done
Install RMCTL Driver For Sony Remote Controller!
Install ADC_RM Module Begin ...
Set ADC repeat rate:25
Install ADC_RM Module Done!
enable_irq(7) unbalanced from c010ab18
enable_irq(11) unbalanced from c010d708
enable_irq(12) unbalanced from c010d708
enable_irq(14) unbalanced from c010a7bc
hidtv_audio: audio ISR installed success
hidtv_audio: hidtv_audio_mmap done
Set Remote repeat rate:25