|
小米路由器3 官方闪存分区
- 0x000000000000-0x000008000000 : "ALL"
- 0x000000000000-0x000000040000 : "Bootloader"
- 0x000000040000-0x000000080000 : "Config"
- 0x000000080000-0x0000000c0000 : "Bdata"
- 0x0000000c0000-0x000000100000 : "Factory"
- 0x000000100000-0x000000140000 : "crash"
- 0x000000140000-0x000000180000 : "crash_syslog"
- 0x000000180000-0x000000200000 : "reserved0"
- 0x000000200000-0x000000600000 : "kernel0"
- 0x000000600000-0x000000a00000 : "kernel1"
- 0x000000a00000-0x000002a00000 : "rootfs0"
- 0x000002a00000-0x000004a00000 : "rootfs1"
- 0x000004a00000-0x000008000000 : "overlay"
- dev: size erasesize name
- mtd0: 08000000 00020000 "ALL"
- mtd1: 00040000 00020000 "Bootloader"
- mtd2: 00040000 00020000 "Config"
- mtd3: 00040000 00020000 "Bdata"
- mtd4: 00040000 00020000 "Factory"
- mtd5: 00040000 00020000 "crash"
- mtd6: 00040000 00020000 "crash_syslog"
- mtd7: 00080000 00020000 "reserved0"
- mtd8: 00400000 00020000 "kernel0"
- mtd9: 00400000 00020000 "kernel1"
- mtd10: 02000000 00020000 "rootfs0"
- mtd11: 02000000 00020000 "rootfs1"
- mtd12: 03600000 00020000 "overlay"
复制代码 小米路由器3 hiboy闪存分区- 0x000000000000-0x000000040000 : "Bootloader"
- 0x000000040000-0x0000000c0000 : "BootEnv"
- 0x0000000c0000-0x000000600000 : "Factory"
- 0x000000600000-0x000000760000 : "Kernel"
- 0x000000760000-0x000001600000 : "RootFS"
- 0x000001600000-0x000001680000 : "Config"
- 0x000001680000-0x000006680000 : "Storage"
- 0x000006680000-0x000008000000 : "RWFS"
- 0x000000600000-0x000001600000 : "Firmware_Stub"
- dev: size erasesize name
- mtd0: 00040000 00020000 "Bootloader"
- mtd1: 00080000 00020000 "BootEnv"
- mtd2: 00540000 00020000 "Factory"
- mtd3: 00160000 00020000 "Kernel"
- mtd4: 00ea0000 00020000 "RootFS"
- mtd5: 00080000 00020000 "Config"
- mtd6: 05000000 00020000 "Storage"
- mtd7: 01980000 00020000 "RWFS"
- mtd8: 01000000 00020000 "Firmware_Stub"
复制代码 以上比对可知,必须保留hiboy Factory分区c0000-200000,然后把200000-600000和600000-a00000都置换成官方kernel,而官方kernel可以从官方固件中提取出来
- / # cd /tmp
- /tmp # wget -O - http://bigota.miwifi.com/xiaoqiang/rom/r3/miwifi_r3_all_55ac7_2.11.20.bin | dd of=kernel.bin bs=1 skip=94108 count=2284584
- Connecting to bigota.miwifi.com (182.118.11.220:80)
- - 6% |** | 2242k 0:02:55 ETA2
- 284584+0 records in
- 2284584+0 records out
- 2284584 bytes (2.2MB) copied, 13.425040 seconds, 166.2KB/s
- /tmp # cat << EOF > kernel.md5
- > 62e96a64e21de9b176fd51336b963e2c kernel.bin
- > EOF
- /tmp # md5sum -cw kernel.md5
- kernel.bin: OK
复制代码 只要kernel.bin的md5sum验证无误,那就没问题,闪存有坏块则另当别论,所以write之后还要verify,一旦执行mtd_write,那就无法回头,更安全的作法则是先把Firmware_Stub和Factory分区复制到U盘,再执行mtd_write
reboot之后则继续按照官方教程的U盘刷机,便可以刷回官方固件
http://www.mi.com/service/miwifi/miwifi3/update/
|
|