Skip to content

Instantly share code, notes, and snippets.

@manorit2001
Created May 26, 2023 04:55
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save manorit2001/80c9242641141ac5bce0e335ea8a9f1a to your computer and use it in GitHub Desktop.
Save manorit2001/80c9242641141ac5bce0e335ea8a9f1a to your computer and use it in GitHub Desktop.
unsigned fitimage booting poc without uboot key
U-Boot SPL 2023.07-rc2-00146-g8276643a4964 (May 26 2023 - 10:22:07 +0530)
SYSFW ABI: 3.1 (firmware rev 0x0008 '8.6.5-22-g46459 (Chill Capybara')
ESM init failed: -19
Trying to boot from MMC2
Authentication passed
Authentication passed
Authentication passed
Loading Environment from nowhere... OK
Authentication passed
Authentication passed
Starting ATF on ARM64 core...
NOTICE: BL31: v2.8(release):v2.8-226-g2fcd408bb3-dirty
NOTICE: BL31: Built : 15:49:10, Jan 24 2023
I/TC:
I/TC: OP-TEE version: 3.20.0 (gcc version 9.2.1 20191025 (GNU Toolchain for the A-profile Architecture 9.2-2019.12 (arm-9.10))) #1 Tue Feb 21 18:20:19 UTC 2023 aarch64
I/TC: WARNING: This OP-TEE configuration might be insecure!
I/TC: WARNING: Please check https://optee.readthedocs.io/en/latest/architecture/porting_guidelines.html
I/TC: Primary CPU initializing
I/TC: SYSFW ABI: 3.1 (firmware rev 0x0008 '8.6.5-22-g46459 (Chill Capybara')
I/TC: HUK Initialized
I/TC: Activated SA2UL device
I/TC: Enabled firewalls for SA2UL TRNG device
I/TC: SA2UL TRNG initialized
I/TC: SA2UL Drivers initialized
I/TC: Primary CPU switching to normal world boot
U-Boot SPL 2023.07-rc2-00146-g8276643a4964 (May 26 2023 - 10:22:18 +0530)
SYSFW ABI: 3.1 (firmware rev 0x0008 '8.6.5-22-g46459 (Chill Capybara')
Detected: J7X-BASE-CPB rev A
Detected: J7X-VSC8514-ETH rev E2
Trying to boot from MMC2
Authentication passed
Authentication passed
U-Boot 2023.07-rc2-00146-g8276643a4964 (May 26 2023 - 10:22:18 +0530)
SoC: J721E SRUnknown Revision EMU
Model: Texas Instruments K3 J721E SoC
Board: J721EX-PM2-SOM rev A
DRAM: 4 GiB
Core: 123 devices, 34 uclasses, devicetree: separate
Flash: 0 Bytes
MMC: mmc@4f80000: 0, mmc@4fb0000: 1
Loading Environment from nowhere... OK
In: serial@2800000
Out: serial@2800000
Err: serial@2800000
am65_cpsw_nuss ethernet@46000000: K3 CPSW: nuss_ver: 0x6BA00101 cpsw_ver: 0x6BA80100 ale_ver: 0x00293904 Ports:1 mdio_freq:1000000
Detected: J7X-BASE-CPB rev A
Detected: J7X-VSC8514-ETH rev E2
cdns,sierra serdes@5000000: sierra probed
Net: eth0: ethernet@46000000port@1
Hit any key to stop autoboot: 0
=>
=>
=> printenv bootcmd_ti_mmc
bootcmd_ti_mmc=run findfdt; run envboot; run init_${boot}; run main_cpsw0_qsgmii_phyinit; run boot_rprocs; if test ${boot_fit} -eq 1; then run get_fit_${boot}; run get_overlaystring; run r
un_fit; else; run get_kern_${boot}; run get_fdt_${boot}; run get_overlay_${boot}; run run_kern; fi;
=> run findfdt; run envboot; run init_${boot}; run main_cpsw0_qsgmii_phyinit; run boot_rprocs;
switch to partitions #0, OK
mmc1 is current device
SD/MMC found on device 1
Failed to load 'boot.scr'
574 bytes read in 21 ms (26.4 KiB/s)
Loaded env from uEnv.txt
Importing environment from mmc1 ...
=> run get_fit_${boot}; run get_overlaystring;
8467832 bytes read in 197 ms (41 MiB/s)
=> iminfo 0x90000000
## Checking Image at 90000000 ...
FIT image found
FIT description: Kernel fitImage for Arago/6.1.26+gitAUTOINC+30bcc25e7c/j721e-hs-evm
Image 0 (kernel-1)
Description: Linux kernel
Type: Kernel Image
Compression: gzip compressed
Data Start: 0x900000f4
Data Size: 8245334 Bytes = 7.9 MiB
Architecture: AArch64
OS: Linux
Load Address: 0x80008000
Entry Point: 0x80008000
Hash algo: sha256
Hash value: fe65ee4737d9718359e5f87d051e038661aaf86decbfd7f332803208293432a5
Image 1 (fdt-ti_k3-j721e-sk.dtb)
Description: Flattened Device Tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x907dd260
Data Size: 97420 Bytes = 95.1 KiB
Architecture: AArch64
Load Address: 0x83000000
Hash algo: sha256
Hash value: 80a66413a0bcbf358f765593aeb304bd607402dd628178677cbfa9dd2cd711e2
Image 2 (fdt-ti_k3-j721e-common-proc-board.dtb)
Description: Flattened Device Tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x907f4fec
Data Size: 101644 Bytes = 99.3 KiB
Architecture: AArch64
Load Address: 0x83000000
Hash algo: sha256
Hash value: 5f211fe13a8828ef5ed77ba5ad3418da2a3ddf513341c621ad0c6829661914a7
Image 3 (fdt-ti_k3-j721e-evm-virt-mac-client.dtbo)
Description: Flattened Device Tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x9080ddfc
Data Size: 3410 Bytes = 3.3 KiB
Architecture: AArch64
Load Address: 0x83080000
Hash algo: sha256
Hash value: e3aaa1131998fc2cd41313fd062a81f9f4f143b3adfb816932941100ddc131b0
Image 4 (fdt-ti_k3-j721e-evm-csi2-ov5640.dtbo)
Description: Flattened Device Tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x9080ec50
Data Size: 1626 Bytes = 1.6 KiB
Architecture: AArch64
Load Address: 0x83080000
Hash algo: sha256
Hash value: 1a5530509ca7bbee8e8e054a0c5442bdcff25300926f75adabbe40a6a4417e97
Image 5 (fdt-ti_k3-j721e-evm-quad-port-eth-exp.dtbo)
Description: Flattened Device Tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x9080f3b0
Data Size: 4285 Bytes = 4.2 KiB
Architecture: AArch64
Load Address: 0x83080000
Hash algo: sha256
Hash value: fba3e8dcd4c67768344991e338b08156817c50fb6f2c93f30eff66a501fc470e
Image 6 (fdt-ti_k3-j721e-sk-csi2-rpi-imx219.dtbo)
Description: Flattened Device Tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x90810570
Data Size: 4216 Bytes = 4.1 KiB
Architecture: AArch64
Load Address: 0x83080000
Hash algo: sha256
Hash value: 2a9e19b208001b7007e2958645d46250d6c0fb8b5ad50c044209d01360b92559
Image 7 (fdt-ti_k3-j721e-evm-fusion.dtbo)
Description: Flattened Device Tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x908116e0
Data Size: 2988 Bytes = 2.9 KiB
Architecture: AArch64
Load Address: 0x83080000
Hash algo: sha256
Hash value: 18ae48ad6c04709e52f046df2bbfa64aae300a96667d39e043edd2c0032f4cc8
Image 8 (fdt-ti_k3-j721e-sk-csi2-ov5640.dtbo)
Description: Flattened Device Tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x90812388
Data Size: 2324 Bytes = 2.3 KiB
Architecture: AArch64
Load Address: 0x83080000
Hash algo: sha256
Hash value: bbbefbb3d8920b6b9baf924bb4e6472da2f23a3dac882049e42330a5bee33002
Default Configuration: 'conf-ti_k3-j721e-sk.dtb'
Configuration 0 (conf-ti_k3-j721e-sk.dtb)
Description: 1 Linux kernel, FDT blob
Kernel: kernel-1
FDT: fdt-ti_k3-j721e-sk.dtb
Hash algo: sha256
Hash value: unavailable
Configuration 1 (conf-ti_k3-j721e-common-proc-board.dtb)
Description: 0 Linux kernel, FDT blob
Kernel: kernel-1
FDT: fdt-ti_k3-j721e-common-proc-board.dtb
Hash algo: sha256
Hash value: unavailable
Configuration 2 (conf-ti_k3-j721e-evm-virt-mac-client.dtbo)
Description: 0 FDT blob
Kernel: unavailable
FDT: fdt-ti_k3-j721e-evm-virt-mac-client.dtbo
Hash algo: sha256
Hash value: unavailable
Configuration 3 (conf-ti_k3-j721e-evm-csi2-ov5640.dtbo)
Description: 0 FDT blob
Kernel: unavailable
FDT: fdt-ti_k3-j721e-evm-csi2-ov5640.dtbo
Hash algo: sha256
Hash value: unavailable
Configuration 4 (conf-ti_k3-j721e-evm-quad-port-eth-exp.dtbo)
Description: 0 FDT blob
Kernel: unavailable
FDT: fdt-ti_k3-j721e-evm-quad-port-eth-exp.dtbo
Hash algo: sha256
Hash value: unavailable
Configuration 5 (conf-ti_k3-j721e-sk-csi2-rpi-imx219.dtbo)
Description: 0 FDT blob
Kernel: unavailable
FDT: fdt-ti_k3-j721e-sk-csi2-rpi-imx219.dtbo
Hash algo: sha256
Hash value: unavailable
Configuration 6 (conf-ti_k3-j721e-evm-fusion.dtbo)
Description: 0 FDT blob
Kernel: unavailable
FDT: fdt-ti_k3-j721e-evm-fusion.dtbo
Hash algo: sha256
Hash value: unavailable
Configuration 7 (conf-ti_k3-j721e-sk-csi2-ov5640.dtbo)
Description: 0 FDT blob
Kernel: unavailable
FDT: fdt-ti_k3-j721e-sk-csi2-ov5640.dtbo
Hash algo: sha256
Hash value: unavailable
## Checking hash(es) for FIT Image at 90000000 ...
Hash(es) for Image 0 (kernel-1): sha256+
Hash(es) for Image 1 (fdt-ti_k3-j721e-sk.dtb): sha256+
Hash(es) for Image 2 (fdt-ti_k3-j721e-common-proc-board.dtb): sha256+
Hash(es) for Image 3 (fdt-ti_k3-j721e-evm-virt-mac-client.dtbo): sha256+
Hash(es) for Image 4 (fdt-ti_k3-j721e-evm-csi2-ov5640.dtbo): sha256+
Hash(es) for Image 5 (fdt-ti_k3-j721e-evm-quad-port-eth-exp.dtbo): sha256+
Hash(es) for Image 6 (fdt-ti_k3-j721e-sk-csi2-rpi-imx219.dtbo): sha256+
Hash(es) for Image 7 (fdt-ti_k3-j721e-evm-fusion.dtbo): sha256+
Hash(es) for Image 8 (fdt-ti_k3-j721e-sk-csi2-ov5640.dtbo): sha256+
=> run run_fit
name_fit_config=conf-ti_k3-j721e-common-proc-board.dtb
## Loading kernel from FIT Image at 90000000 ...
Using 'conf-ti_k3-j721e-common-proc-board.dtb' configuration
Verifying Hash Integrity ... OK
Trying 'kernel-1' kernel subimage
Description: Linux kernel
Type: Kernel Image
Compression: gzip compressed
Data Start: 0x900000f4
Data Size: 8245334 Bytes = 7.9 MiB
Architecture: AArch64
OS: Linux
Load Address: 0x80008000
Entry Point: 0x80008000
Hash algo: sha256
Hash value: fe65ee4737d9718359e5f87d051e038661aaf86decbfd7f332803208293432a5
Verifying Hash Integrity ... sha256+ OK
## Loading fdt from FIT Image at 90000000 ...
Using 'conf-ti_k3-j721e-common-proc-board.dtb' configuration
Verifying Hash Integrity ... OK
Trying 'fdt-ti_k3-j721e-common-proc-board.dtb' fdt subimage
Description: Flattened Device Tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x907f4fec
Data Size: 101644 Bytes = 99.3 KiB
Architecture: AArch64
Load Address: 0x83000000
Hash algo: sha256
Hash value: 5f211fe13a8828ef5ed77ba5ad3418da2a3ddf513341c621ad0c6829661914a7
Verifying Hash Integrity ... sha256+ OK
Loading fdt from 0x907f4fec to 0x83000000
Booting using the fdt blob at 0x83000000
Working FDT set to 83000000
Uncompressing Kernel Image
Loading Device Tree to 000000008ffe4000, end 000000008ffffd0b ... OK
Working FDT set to 8ffe4000
Starting kernel ...
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x411fd080]
[ 0.000000] Linux version 6.1.26-g30bcc25e7c (oe-user@oe-host) (aarch64-oe-linux-gcc (GCC) 11.3.0, GNU ld (GNU Binutils) 2.38.20220708) #1 SMP PREEMPT Mon May 22 14:16:59 UTC 2023
[ 0.000000] Machine model: Texas Instruments J721e EVM
[ 0.000000] earlycon: ns16550a0 at MMIO32 0x0000000002800000 (options '')
[ 0.000000] printk: bootconsole [ns16550a0] enabled
[ 0.000000] efi: UEFI not found.
[ 0.000000] [Firmware Bug]: Kernel image misaligned at boot, please fix your bootloader!
[ 0.000000] Reserved memory: created DMA memory pool at 0x00000000a0000000, size 1 MiB
[ 0.000000] OF: reserved mem: initialized node r5f-dma-memory@a0000000, compatible id shared-dma-pool
[ 0.000000] Reserved memory: created DMA memory pool at 0x00000000a0100000, size 15 MiB
[ 0.000000] OF: reserved mem: initialized node r5f-memory@a0100000, compatible id shared-dma-pool
[ 0.000000] Reserved memory: created DMA memory pool at 0x00000000a1000000, size 1 MiB
[ 0.000000] OF: reserved mem: initialized node r5f-dma-memory@a1000000, compatible id shared-dma-pool
[ 0.000000] Reserved memory: created DMA memory pool at 0x00000000a1100000, size 15 MiB
[ 0.000000] OF: reserved mem: initialized node r5f-memory@a1100000, compatible id shared-dma-pool
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment