求助?。?！S905L-B機頂盒升級EMMC后，可以線刷，不能啟動。

fancyzj · 發(fā)表于 2021-4-18 14:22

本帖最后由 fancyzj 于 2021-4-19 17:41 編輯

如題，前兩天沒事，看著手里閑著的64GEMMC，想著給盒子換上加點空間。換上后線刷正常，但是TTL跑碼如下現(xiàn)在不知道咋救活了。原機4G的片子換回去一個鳥樣。大神給指導下唄，不勝感謝！??！
原機圖片：求助！??！S905L-B機頂盒升級EMMC后，可以線刷，不能啟動。

換好EMMC：

線刷TTL：正常

TE: 1920429
BL2 Built : 17:04:12, Jun 21 2016.
gxl g21e86b3 - yao.zhang@droid07
set vcck to 1080 mv
set vddee to 1050 mv
Board ID = 11
CPU clk: 1200MHz
BL2 USB
DDR chl: Rank0+1 @ 792MHz - FAIL
DDR chl: Rank0 @ 792MHz - PASS
DQS-corr enabled
DDR scramble enabled
Rank0: 1024MB(auto)-2T-11
0.0;CHK:0;
TE: 2142018
BL2 Built : 17:04:12, Jun 21 2016.
gxl g21e86b3 - yao.zhang@droid07
set vcck to 1080 mv
set vddee to 1050 mv
Board ID = 11
CPU clk: 1200MHz
BL2 USB
0.0;CHK:0;
TE: 2195731
BL2 Built : 17:04:12, Jun 21 2016.
gxl g21e86b3 - yao.zhang@droid07
set vcck to 1080 mv
set vddee to 1050 mv
Board ID = 12
CPU clk: 1200MHz
BL2 USB
Load fip header from USB, src: 0x0000c000, des: 0x01400000, size: 0x00004000
New fip structure!
Load bl30 from USB, src: 0x00010000, des: 0x01100000, size: 0x00007200
Load bl301 from USB, src: 0x00018000, des: 0x01200000, size: 0x00002000
Load bl31 from USB, src: 0x0001c000, des: 0x10100000, size: 0x00017400
Load bl33 from USB, src: 0x00034000, des: 0x01000000, size: 0x000a1200
NOTICE: BL3-1: v1.0(debug):8954d8d
NOTICE: BL3-1: Built : 10:21:48, Jun 25 2016
aml log : bl31 normal boot !
[Image: gxl_v1.1.3082-cd97abf 2016-06-23 18:12:10 yun.cai@droid06]
bl30: check_permit, count is 1
bl30: check_permit: ok!
chipid: 0 0 3 c c 0 4e b4 48 a0 0 c4 not ES chip
efuse init ops = c4
efuse init hdcp = c, cf9=7
[2.454015 Inits done]
secINFOu:r e t aBsLk3 -s1t:a rItn!it
ializing runthiimgeh stearvices
WARNING: No OPTEE provided by BL2 boot loader
ERROR: Error initializing runtime service opteed_fast
INFO: BL3-1: Preparing for EL3 exit to normal world
INFO: BL3-1: Next image address = 0x1000000
INFO: BL3-1: Next image spsr = 0x3c9
U-Boot 2015.01-gd893f87 (Jul 13 2016 - 19:10:21)
DRAM: 1 GiB
Relocation Offset is: 36ed2000
[MSG]MMC init in usb
aml_priv->desc_buf = 0x0000000033ec2630
aml_priv->desc_buf = 0x0000000033ec47c0
SDIO Port B: 0, SDIO Port C: 1
Enter USB burn
Set Addr 41
Get DT cfg
Get DT cfg
Get DT cfg
set CFG
Get DT cfg
Get DT cfg
ID[16]
tplcmd[ echo 12345]
12345
[MSG]ret = 0
[info]success
BULKcmd[ low_power]
[info]success
ID[16]
tplcmd[ download mem dtb normal 149504]
[MSG]Down(mem) part(dtb) sz(0x24800) fmt(normal)
[MSG]totalSlotNum = 0, nextWriteBackSlot 3
[info]success
[MSG]Burn Start...
[MSG]load dt.img to 0x0000000001000000, sz=0x24800
[MSG]Burn complete
BULKcmd[download get_status]
[info]success
BULKcmd[disk_initial 3]
Amlogic multi-dtb tool
Multi dtb detected
Multi dtb tool version: v2 .
Support 4 dtbs.
aml_dt soc: gxl platform: p211 variant: 1g
dtb 0 soc: gxbb plat: p201 vari: 1g
dtb 1 soc: gxbb plat: p201 vari: 2g
dtb 2 soc: gxl plat: p211 vari: 1g
dtb 3 soc: gxl plat: p211 vari: 2g
Find match dtb: 2
start dts,buffer=0000000001000000,dt_addr=0000000001011800
parts: 14
00: logo 0000000002000000 1
01: recovery 0000000002000000 1
02: rsv 0000000000800000 1
03: tee 0000000000800000 1
04: crypt 0000000002000000 1
05: misc 0000000002000000 1
06: instaboot 0000000020000000 1
07: boot 0000000002000000 1
08: system 0000000028000000 1
09: cache 0000000020000000 2
10: ghost 0000000020000000 4
11: info 0000000004000000 4
12: params 0000000004000000 2
13: data ffffffffffffffff 4
[MSG]run cmd [store disprotect key]
[store]disprotect key
emmc/sd response timeout, cmd = 8
emmc/sd response timeout, cmd = 55
[mmc_init] mmc init success
[mmc_get_partition_table] skip cache partition.
Partition table get from SPL is :
name offset size flag
===================================================================================
0: bootloader 0 400000 0
1: reserved 2400000 4000000 0
2: cache 6c00000 20000000 2
3: env 27400000 800000 0
4: logo 28400000 2000000 1
5: recovery 2ac00000 2000000 1
6: rsv 2d400000 800000 1
7: tee 2e400000 800000 1
8: crypt 2f400000 2000000 1
9: misc 31c00000 2000000 1
10: instaboot 34400000 20000000 1
11: boot 54c00000 2000000 1
12: system 57400000 28000000 1
13: ghost 7fc00000 20000000 4
14: info a0400000 4000000 4
15: 0 0 0
mmc read lba=0x12000, blocks=0x1
mmc read lba=0x12001, blocks=0x1
mmc_read_partition_tbl: mmc read partition OK!
eMMC/TSD partition table have been checked OK!
XXXXXXX======enter EMMC boot======XXXXXX
emmc/sd response timeout, cmd = 8
emmc/sd response timeout, cmd = 55
[mmc_init] mmc init success
switch to partitions #0, OK
mmc1(part 0) is current device
Device: SDIO Port C
Manufacturer ID: 15
OEM: 100
Name: CJNB4
Tran Speed: 52000000
Rd Block Len: 512
MMC version 4.0
High Capacity: Yes
Capacity: 58.2 GiB
Bus Width: 1-bit
[store]amlmmc key
emmc disprotect key
[store]amlmmc erase 1emmckey_is_protected : disprotect
blkcnt = 122142720
start = 0,end = 122142719
start erase dtb......
start = 81920,end = 82943
dev # 1, , several blocks erased OK
[store]To run cmd[emmc dtb_write 0x0000000001000000 0x40000]
write emmc dtb
[mmc_get_partition_table] skip cache partition.
Partition table get from SPL is :
name offset size flag
===================================================================================
0: bootloader 0 400000 0
1: reserved 2400000 4000000 0
2: cache 6c00000 20000000 2
3: env 27400000 800000 0
4: logo 28400000 2000000 1
5: recovery 2ac00000 2000000 1
6: rsv 2d400000 800000 1
7: tee 2e400000 800000 1
8: crypt 2f400000 2000000 1
9: misc 31c00000 2000000 1
10: instaboot 34400000 20000000 1
11: boot 54c00000 2000000 1
12: system 57400000 28000000 1
13: ghost 7fc00000 20000000 4
14: info a0400000 4000000 4
15: 0 0 0
mmc read lba=0x12000, blocks=0x1
mmc read lba=0x12001, blocks=0x1
mmc_read_partition_tbl: mmc read partition ERROR!
mmc write lba=0x12000, blocks=0x1
mmc write lba=0x12001, blocks=0x1
mmc_write_partition_tbl: mmc write partition OK!
partition table success
[MSG]usb producing env_relocate
mmc env offset: 0x27400000
*** Warning - bad CRC, using default environment
Saving Environment to aml-storage...
mmc env offset: 0x27400000
Writing to MMC(1)... done
Amlogic multi-dtb tool
Multi dtb detected
Multi dtb tool version: v2 .
Support 4 dtbs.
aml_dt soc: gxl platform: p211 variant: 1g
dtb 0 soc: gxbb plat: p201 vari: 1g
dtb 1 soc: gxbb plat: p201 vari: 2g
dtb 2 soc: gxl plat: p211 vari: 1g
dtb 3 soc: gxl plat: p211 vari: 2g
Find match dtb: 2
[info]success
ID[16]
tplcmd[download store boot normal 9872375]
[MSG]flash LOGIC partCap 0x2000000B
[MSG]Down(store) part(boot) sz(0x96a3f7) fmt(normal)
[MSG]totalSlotNum = 0, nextWriteBackSlot 1
[info]success
[MSG]Burn Start...
[MSG]Burn complete
BULKcmd[download get_status]
[info]success
BULKcmd[verify sha1sum 5e417601954a4986c516547f098a8a569acecb5b]
[MSG]Verify Start...
[MSG]To verify part boot in fmt normal
[MSG]Verify End
[MSG]VERIFY OK
[info]success
ID[16]
tplcmd[download store logo normal 5048640]
[MSG]flash LOGIC partCap 0x2000000B
[MSG]Down(store) part(logo) sz(0x4d0940) fmt(normal)
[MSG]totalSlotNum = 0, nextWriteBackSlot 1
[info]success
[MSG]Burn Start...
[MSG]Burn complete
BULKcmd[download get_status]
[info]success
BULKcmd[verify sha1sum 5849c93c5050d51ad0aaf03b57270e1a82803cab]
[MSG]Verify Start...
[MSG]To verify part logo in fmt normal
[MSG]Verify End
[MSG]VERIFY OK
[info]success
ID[16]
tplcmd[download store recovery normal 10668290]
[MSG]flash LOGIC partCap 0x2000000B
[MSG]Down(store) part(recovery) sz(0xa2c902) fmt(normal)
[MSG]totalSlotNum = 0, nextWriteBackSlot 1
[info]success
[MSG]Burn Start...
[MSG]Burn complete
BULKcmd[download get_status]
[info]success
BULKcmd[verify sha1sum 59a838aeaef450796971276a70f16072c03dfdad]
[MSG]Verify Start...
[MSG]To verify part recovery in fmt normal
[MSG]Verify End
[MSG]VERIFY OK
[info]success
ID[16]
tplcmd[download store system normal 671088640]
[MSG]flash LOGIC partCap 0x28000000B
[MSG]Down(store) part(system) sz(0x28000000) fmt(normal)
[MSG]totalSlotNum = 0, nextWriteBackSlot 1
[info]success
[MSG]Burn Start...
[MSG]Burn complete
Downloading %100
BULKcmd[download get_status]
[info]success
BULKcmd[verify sha1sum 763054250d4b6dfd6011c6e9efbff1d870c9c03a]
[MSG]Verify Start...
[MSG]To verify part system in fmt normal
[MSG]Verify End
[MSG]VERIFY OK
[info]success
ID[16]
tplcmd[download store bootloader normal 917504]
[MSG]Down(store) part(bootloader) sz(0xe0000) fmt(normal)
[MSG]totalSlotNum = 0, nextWriteBackSlot 14
[info]success
[MSG]Burn Start...
mmc switch to boot0 success
mmc switch to boot1 success
mmc switch to user success
[MSG]Burn complete
BULKcmd[download get_status]
[info]success
BULKcmd[verify sha1sum fc01a17afabfedbd10f4767f781be9c354d31224]
mmc switch to boot0 success
mmc switch to boot1 success
mmc switch to user success
[MSG]VERIFY OK
[info]success
BULKcmd[save_setting]
## save_setting ##
[MSG]Set upgrade_step to 2
Saving Environment to aml-storage...
mmc env offset: 0x27400000
Writing to MMC(1)... done
[info]success
BULKcmd[burn_complete 3]
[MSG]Pls un-plug USB line to poweroff
[info]success

復制代碼

線刷成功

重啟TTL信息

重啟后TTL無限循環(huán)如下：
GXL:BL1:9ac50e:bb16dc;FEAT:ADFD318C:0;POC:3;RCY:0;EMMC:0;READ:0;CHK:A7;READ:0;CHK:A7;READ:0;CHK:A7;SD:800;USB:8;LOOP:1;EMMC:0;READ:0;CHK:A7;READ:0;CHK:A7;READ:0;CHK:A7;SD:800;USB:8;LOOP:2;EMMC:0;READ:0;CHK:A7;READ:0;CHK:A7;READ:0;CHK:A7;SD:800;USB:8;

那秋、那么涼 · 發(fā)表于 2021-4-18 16:25

幫忙頂頂

fancyzj · 發(fā)表于 2021-4-18 17:24

那秋、那么涼發(fā)表于 2021-4-18 16:25
幫忙頂頂

謝謝！

fancyzj · 發(fā)表于 2021-4-19 17:38

看來大神們已經(jīng)不再關注這類低端機型了。

229000721 · 發(fā)表于 2021-4-21 00:18

幫你頂頂

euzenlee · 發(fā)表于 2022-4-11 07:58

bootloader損壞了。

lhx19591216 · 發(fā)表于 2022-4-12 18:58

這是一個很好的學習平臺，學習學習。

ajiwei · 發(fā)表于 2022-11-21 23:24

我也碰到了,天邑TY1208晶晨S905M-B,線刷不了啊總出錯在1%什么讀取鏡像失敗的。。、、連TTL就無限那些EMMC:0;READ:0;CHK:AA;SD:800;USB:8;LOOP:2，網(wǎng)上說UBOOT掛掉了，具體不知道怎么弄，制做什么啟動卡，但BIN文件去哪找，有大神在嗎？謝謝

cxvazxp · 發(fā)表于 2022-12-8 01:51

我也碰到了,天邑TY1208晶晨S905M-B,線刷不了啊總出錯在1%什么讀取鏡像失敗的。。、、連TTL就無限那些EMMC:0;READ:0;CHK:AA;SD:800;USB:8;LOOP:2，網(wǎng)上說UBOOT掛掉了，具體不知道怎么弄，制做什么啟動卡，但BIN文件去哪找，有大神在嗎？謝謝

我也和你一樣 T1換了EMMC 拆下的EMMC 不見了直接吹上去的也是刷機百分之2出錯“加載DDR/命令返回出錯”TTL跑碼一直重復LOOP:1C8;EMMC:0;READ:0;CHK:AA;SD:800;USB:8; 求大神指點
同時刷機同時跑碼
代碼如下：

BL2 Built : 11:58:42, May 27 2017.
gxl gc3c9a84 - xiaobo.gu@droid05

set vdd cpu_a to 1120 mv
set vdd cpu_b to 1050 mv
set vddee to 1000 mv
Board ID = 4
GXM:BL1:dc8b51:76f1a5;FEAT:BDFD31BC:80;POC:3;RCY:0;EMMC:0;READ:0;CHK:AA;SD:800;USB:8;0.0;
TE: 3956572
然后停止不動........................

809796028 · 發(fā)表于 2023-1-8 19:43

我的情況和你的情況差不多，可以刷機完成就是啟動不了開機定屏。在另外一個盒子上面用編程器讀取的EMC寫的這個刷壞的盒子里面也是一樣的情況。實在是搞不懂哪里不對了

› 你問我答 / 玩機教程 / 固件 › ZNDS刷機/救磚