找回密码
 注册

QQ登录

只需一步,快速开始

查看: 35447|回复: 30

高兴得要哭了!!!!研究了N天,终于把我的华为 光猫救回来了

[复制链接]
发表于 2017-1-21 18:58:50 | 显示全部楼层 |阅读模式
本帖最后由 qqppav520 于 2017-1-22 18:02 编辑

你妹的,救砖回来过后web设置页面空白,应该是以前改E8C界面造成的。无法用cd等一些重要命令。
又再经历两次刷砖以后这次是终于真正的救回来了!!!!!!!!!!下图




下贴是HG8240 改配置后 TTL线下 猫的情况!!  TTL线下任何按键 命令 均无法中断启动
telnet: can't connect to remote host (127.0.0.1): Connection refused
停在这里反复连接这个地址失败一直重复
https://www.chinadsl.net/forum.ph ... d&tid=128424&extra=


经过N天坚持不解的研究,终于救回来了。救砖过程如下
可能你们打死也猜不到我是怎么中断启动的


/*..............
System start ...
.............*/
[18:00:38.581]收←◆

U-Boot 1.1.4 (Jul 31 2013 - 16:25:21)

U-Boot code: 90500000 -> 9051FC94  BSS: -> 9054658C
RAM Configuration:
Bank #0: 90000000 64 MB
Flash: 16 MB
*** Warning - bad CRC, using default environment


[18:00:38.685]收←◆In:    serial
Out:   serial
Err:   serial

[18:00:38.887]收←◆
Extend LSW IS AR8316
Initialize broadcast table ... ok
CPURTx Driver For Pilot <Board-A>!

[18:00:39.110]收←◆### JFFS2 loading 'fsok' to 0x904bfe84
Scanning JFFS2 FS:   .  
[18:00:39.438]收←◆|
[18:00:39.654]收←◆/
[18:00:39.870]收←◆-
[18:00:40.176]收←◆\
[18:00:40.451]收←◆|
[18:00:40.579]收←◆Unknown node type: e002 len 149 offset 0x163f38

[18:00:40.650]收←◆Unknown node type: e001 len 44 offset 0x171048

[18:00:40.733]收←◆ done.
find_inode failed for name=fsok
load: Failed to find inode
### JFFS2 LOAD ERROR<0> for fsok!
No fsok file!
Scanning JFFS2 FS:   Unknown node type: e001 len 55 offset 0x2aa8
Unknown node type: e002 len 89 offset 0x4b58
Unknown node type: e002 len 566 offset 0x6de8
Unknown node type: e002 len 645 offset 0x7020

[18:00:40.864]收←◆.  
[18:00:41.001]收←◆Unknown node type: e002 len 923 offset 0x2f128

[18:00:41.088]收←◆|
[18:00:41.304]收←◆/
[18:00:41.519]收←◆-
[18:00:41.663]收←◆Unknown node type: e002 len 69 offset 0xe0168
Unknown node type: e002 len 87 offset 0xe01f8
Unknown node type: e001 len 45 offset 0xe0298
Unknown node type: e002 len 70 offset 0xe02c8

[18:00:41.844]收←◆\
[18:00:42.146]收←◆|
[18:00:42.420]收←◆ done.
No board type file!
ui_board_id = 2
[main.c__3719]::Magic1:0x5a5a5a5a, magic2 0xa5a5a5a5, count 2, flag 0, MainAreaOK 0, slaveAreaOK 0
[main.c_3784]Start from normal system!
Magic1:0x5a5a5a5a, magic2 0xa5a5a5a5, count 3, flag 0
Kernel VER:VhwhwhwhC00SPC12PC12PC12 do not match FS VER:whwhwhwhC00SPC12PC12PC12, start from minisystem!Addr[0]:0x0,Addr[1]:0x40000,Addr[2]:0x41000,Addr[3]:0x60000,Addr[4]:0x1e0000,Addr[5]:0xae0000,Addr[6]:0xe60000
BootArgs:noalign mem=50M console=ttyAMA0,115200 root=/dev/mtdblock6 rootfstype=squashfs mtdparts=hisilicon:0x40000(boot)ro,0x1000(flashcfg)ro,0x1f000(syspara)ro,0x180000(krnl)ro,0x8fffac@0x1e0054(rootfs)ro,0x248fe0@0xc17020(minisystem)ro,0x180000(jffs2cfg),-(reserved) user_debug=0x1f panic=1

[18:00:42.581]收←◆Bootcmd:bootm 0x20ae0054

U-boot Start from NORMAL Mode !
## Booting image at 20ae0054 ...
Bad Magic Number
hisilicon #
hisilicon #
[18:01:02.802]收←◆h
[18:01:02.932]收←◆e
[18:01:03.061]收←◆l
[18:01:03.305]收←◆p
[18:01:04.585]收←◆
?       - alias for 'help'
base    - print or set address offset
bdinfo  - print Board Info structure
bootm   - boot application image from memory
crc32   - checksum calculation
echo    - echo args to console
erase   - erase FLASH memory
flinfo  - print FLASH memory information
fsinfo    - print information about filesystems
fsload    - load binary file from a filesystem image
help    - print online help
lastword- print last word
loadboardinfo- download file from tftp server
loadflashcfg- download file from tftp server
loadfs  - download file system from tftp server
loadjffs2- download file from tftp server
loadkernel- download file from tftp server
loadminisystem- download file from tftp server
loadsystem- download file from tftp server
loaduboot- download file from tftp server
loop    - infinite loop on address range
ls    - list files in a directory (default /)
md      - memory display
mtest   - simple RAM test
mw      - memory write (fill)
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
protect - enable or disable FLASH write protection
reset   - Perform RESET of the CPU
saveenv - save environment variables to persistent storage
setenv  - set environment variables
tftp    - download or upload image via network using TFTP protocol
vdecrest- vdecrest
vencrest- vencrest
version - print monitor version
hisilicon #
[18:06:02.293]收←◆v
[18:06:02.845]收←◆e
[18:06:03.072]收←◆r
[18:06:03.397]收←◆s
[18:06:03.769]收←◆i
[18:06:04.012]收←◆o
[18:06:04.320]收←◆n
[18:06:05.747]收←◆

U-Boot 1.1.4 (Jul 31 2013 - 16:25:21)
hisilicon #
[18:06:47.760]收←◆p
[18:06:48.133]收←◆r
[18:06:49.901]收←◆i
[18:06:50.193]收←◆n
[18:06:50.501]收←◆t
[18:06:50.760]收←◆e
[18:06:51.067]收←◆n
[18:06:51.393]收←◆v
[18:06:52.576]收←◆
bootdelay=1
baudrate=115200
ethaddr=00:00:00:00:00:02
ipaddr=192.168.0.10
serverip=192.168.0.1
netmask=255.255.255.0
bootfile="Image"
stdin=serial
stdout=serial
stderr=serial
verify=n
bootargs=noalign mem=50M console=ttyAMA0,115200 root=/dev/mtdblock6 rootfstype=squashfs mtdparts=hisilicon:0x40000(boot)ro,0x1000(flashcfg)ro,0x1f000(syspara)ro,0x180000(krnl)ro,0x8fffac@0x1e0054(rootfs)ro,0x248fe0@0xc17020(minisystem)ro,0x180000(jffs2cfg),-(reserved) user_debug=0x1f panic=1
bootcmd=bootm 0x20ae0054

Environment size: 502/131068 bytes
hisilicon #
[18:12:14.947]收←◆s
[18:12:15.384]收←◆e
[18:12:15.806]收←◆t
[18:12:27.756]收←◆e
[18:12:28.761]收←◆n
[18:12:29.151]收←◆v
[18:12:30.351]收←◆
[18:12:30.659]收←◆s
[18:12:31.128]收←◆e
[18:12:31.437]收←◆r
[18:12:31.875]收←◆v
[18:12:32.199]收←◆e
[18:12:32.426]收←◆r
[18:12:32.767]收←◆i
[18:12:33.026]收←◆p
[18:12:36.594]收←◆
[18:12:36.999]收←◆1
[18:12:37.469]收←◆9
[18:12:38.085]收←◆2
[18:12:38.377]收←◆.
[18:12:38.733]收←◆1
[18:12:39.674]收←◆6
[18:12:41.100]收←◆8
[18:12:41.653]收←◆.
[18:12:44.133]收←◆1
[18:12:44.862]收←◆.
[18:12:45.268]收←◆9
[18:12:45.689]收←◆9
[18:12:49.550]收←◆

[18:12:49.597]收←◆hisilicon #
[18:13:04.872]收←◆s
[18:13:05.180]收←◆e
[18:13:05.424]收←◆r
[18:13:08.682]收←◆ 
[18:13:10.012]收←◆
Usage:
setenv  - set environment variables

hisilicon #
[18:13:12.428]收←◆s
[18:13:12.947]收←◆e
[18:13:13.433]收←◆t
[18:13:13.791]收←◆e
[18:13:14.099]收←◆n
[18:13:14.326]收←◆v
[18:13:16.903]收←◆
[18:13:17.211]收←◆i
[18:13:17.602]收←◆p
[18:13:17.975]收←◆a
[18:13:18.250]收←◆d
[18:13:18.477]收←◆d
[18:13:18.996]收←◆r
[18:13:20.130]收←◆
[18:13:20.520]收←◆1
[18:13:20.893]收←◆9
[18:13:21.184]收←◆2
[18:13:24.460]收←◆.
[18:13:24.946]收←◆1
[18:13:25.255]收←◆6
[18:13:25.530]收←◆8
[18:13:27.477]收←◆.
[18:13:27.947]收←◆1
[18:13:28.335]收←◆.
[18:13:28.887]收←◆1
[18:13:31.529]收←◆

hisilicon #
[18:13:55.236]收←◆s
[18:13:55.576]收←◆a
[18:13:55.965]收←◆v
[18:13:56.322]收←◆e
[18:13:56.615]收←◆e
[18:13:57.263]收←◆n
[18:13:57.588]收←◆v
[18:14:00.960]收←◆
Saving Environment to Flash...
Un-Protected 1 sectors
Erasing Flash... <Erase 00%>
[18:14:01.521]收←◆%100            Erased 1 sectors
Writing to Flash... start_sect:1, end_sect:1, addr:0x20020000, cnt:131072, src:0x904c0008
start addr:0x20020000, end addr:0x20040000

[18:14:01.639]收←◆ <Erase 00%>
[18:14:02.219]收←◆%100             <Write 00%>010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899 100%>            done
Protected 1 sectors
hisilicon #
[18:16:19.258]收←◆p
[18:16:20.360]收←◆r
[18:16:22.046]收←◆i
[18:16:22.550]收←◆n
[18:16:23.490]收←◆t
[18:16:23.943]收←◆e
[18:16:24.398]收←◆n
[18:16:24.739]收←◆v
[18:16:28.532]收←◆
bootdelay=1
baudrate=115200
ethaddr=00:00:00:00:00:02
netmask=255.255.255.0
bootfile="Image"
stdin=serial
stdout=serial
stderr=serial
verify=n
bootargs=noalign mem=50M console=ttyAMA0,115200 root=/dev/mtdblock6 rootfstype=squashfs mtdparts=hisilicon:0x40000(boot)ro,0x1000(flashcfg)ro,0x1f000(syspara)ro,0x180000(krnl)ro,0x8fffac@0x1e0054(rootfs)ro,0x248fe0@0xc17020(minisystem)ro,0x180000(jffs2cfg),-(reserved) user_debug=0x1f panic=1
bootcmd=bootm 0x20ae0054
serverip=192.168.1.99
ipaddr=192.168.1.1

Environment size: 502/131068 bytes
hisilicon #
[18:16:33.576]收←◆p
[18:16:33.868]收←◆i
[18:16:34.143]收←◆n
[18:16:34.371]收←◆g
[18:16:35.278]收←◆
[18:16:35.667]收←◆1
[18:16:36.025]收←◆9
[18:16:36.299]收←◆2
[18:16:36.851]收←◆.
[18:16:37.191]收←◆1
[18:16:37.452]收←◆6
[18:16:37.710]收←◆8
[18:16:38.115]收←◆.
[18:16:39.331]收←◆1
[18:16:39.819]收←◆.
[18:16:40.159]收←◆9
[18:16:40.434]收←◆9
[18:16:45.331]收←◆
host 192.168.1.12 is alive
hisilicon #
[18:17:07.059]收←◆l
[18:17:07.594]收←◆o
[18:17:07.919]收←◆a
[18:17:08.211]收←◆d
[18:17:09.524]收←◆j
[18:17:09.897]收←◆f
[18:17:10.173]收←◆f
[18:17:10.578]收←◆s
[18:17:11.340]收←◆2
[18:17:12.637]收←◆
Please input the file name(rootfs.1.jffs2):
[18:17:21.166]收←◆h
[18:17:21.669]收←◆w
[18:17:24.393]收←◆_
[18:17:28.723]收←◆b
[18:17:29.128]收←◆o
[18:17:29.517]收←◆a
[18:17:30.003]收←◆r
[18:17:30.635]收←◆d
[18:17:30.993]收←◆i
[18:17:31.317]收←◆n
[18:17:31.674]收←◆f
[18:17:31.917]收←◆o
[18:17:32.549]收←◆.
[18:17:32.971]收←◆x
[18:17:33.360]收←◆m
[18:17:33.976]收←◆l
[18:17:38.225]收←◆Start to load file [hw_boardinfo.xml] to [0x90a00000] by [tftp]
TFTP from server 192.168.1.12; our IP address is 192.168.1.1
Download Filename 'hw_boardinfo.xml'.
Download to address: 0x90a00000
Downloading: *%
[18:17:38.302]收←◆
     0.000 MB download ok.
Bytes transferred = 790 (316 hex)

[18:17:38.546]收←◆Download file [hw_boardinfo.xml] with [0x316] byte(s) succeed.
Start to erase jffs FS from 0x20e60000, len +0x180000
<Erase 00%>
[18:17:38.981]收←◆%08
[18:17:39.445]收←◆%16
[18:17:39.932]收←◆%25
[18:17:40.436]收←◆%33
[18:17:40.941]收←◆%41
[18:17:41.442]收←◆%50
[18:17:41.904]收←◆%58
[18:17:42.388]收←◆%66
[18:17:42.858]收←◆%75
[18:17:43.323]收←◆%83
[18:17:43.862]收←◆%91
[18:17:44.317]收←◆%100            Erased 12 sectors
Start to write data from [0x90a00000] to [0x20e60000] with [0x316] byte(s)
Copy to Flash... start_sect:115, end_sect:115, addr:0x20e60000, cnt:790, src:0x90a00000
start addr:0x20e60000, end addr:0x20e80000

[18:17:44.400]收←◆ <Erase 00%>
[18:17:44.908]收←◆%100             <Write 00%>010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899 100%>            done
hisilicon #

上传未修改备份的hw_boardinfo.xml 文件后
命令用完,重启  那熟的红灯又开始闪烁了~!  救砖成功

我就是死马当成活马医,用镊子把内存芯片弄短路(按住其中两只脚就行了,可以从TLL信息看出来短路对了没)。让系统认为芯片坏了,强制自己中断而启动华为的 U-boot  也就是hisilicon # 命令
就这么简单! TTL不能中断的可以用我的方法,当然芯片烧坏不负责哈





本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有账号?注册

×
 楼主| 发表于 2017-1-22 16:53:11 | 显示全部楼层
linuxoa 发表于 2017-1-22 11:39
这个很好! 关心是将内存闪存芯片哪两只脚短路掉才能起作用。

这个我真忘了,反正各种尝试,好像是芯片左边,有蓝点那一面有两只脚行
 楼主| 发表于 2017-1-22 16:52:15 | 显示全部楼层
lq2001 发表于 2017-1-22 09:22
8240,8245两版的固件都有全的shell哇,
重刷个固件试试

没找着,昨晚刷了个低版本的,又刷死了,费了好大劲才又救回来了

不敢乱刷包了,再刷死不知道救不救得回来了
发表于 2017-1-22 00:06:41 | 显示全部楼层
FLASH短接这个好像是万能法,短接数据脚来的;
发表于 2017-1-22 00:09:44 | 显示全部楼层
短接FLASH数据脚是万能大法,不过得是数据脚来的;
 楼主| 发表于 2017-1-22 00:37:33 | 显示全部楼层
lq2001 发表于 2017-1-22 00:09
短接FLASH数据脚是万能大法,不过得是数据脚来的;

关键是救回来了,web页登陆后无显示  又得再继续研究了
发表于 2017-1-22 00:47:41 | 显示全部楼层
qqppav520 发表于 2017-1-22 00:37
关键是救回来了,web页登陆后无显示  又得再继续研究了

telnet 192.168.1.1

root

admin

shell

cd mnt/jffs2

boardtype.sh -c

reboot
 楼主| 发表于 2017-1-22 01:41:00 | 显示全部楼层
mayi5147 发表于 2017-1-22 00:47
telnet 192.168.1.1

root

无法用CD等一系列命令
发表于 2017-1-22 09:22:21 | 显示全部楼层
qqppav520 发表于 2017-1-22 01:41
无法用CD等一系列命令

8240,8245两版的固件都有全的shell哇,
重刷个固件试试
发表于 2017-1-22 11:39:02 | 显示全部楼层
这个很好! 关心是将内存闪存芯片哪两只脚短路掉才能起作用。
*滑块验证:
您需要登录后才可以回帖 登录 | 注册

本版积分规则

Archiver|小黑屋|宽带技术网 |网站地图 粤公网安备44152102000001号

GMT+8, 2025-7-1 08:34 , Processed in 0.039973 second(s), 5 queries , Redis On.

Powered by Discuz! X3.5 Licensed

Copyright © 2001-2020, Tencent Cloud.

快速回复 返回顶部 返回列表