|
后来小黄鱼买了个H3C 的BA3000L面板,拆开连接了TTL,发现其是普通uboot,而不是H3C常用的bootware,并且可以直接进中断,查看了以下基本参数:
<H3C> smeminfo
flash_type: 0x6
flash_index: 0x0
flash_chip_select: 0x0
flash_block_size: 0x10000
flash_density: 0x1000000
partition table offset 0x0
No.: Name Attributes Start Size
0: 0:SBL1 0x0000ffff 0x0 0x30000
1: 0:MIBIB 0x001040ff 0x30000 0x10000
2: 0SEE 0x0000ffff 0x40000 0xa0000
3: 0EVCFG 0x0000ffff 0xe0000 0x10000
4: 0:CDT 0x0000ffff 0xf0000 0x10000
5: 0:APPSBLENV 0x0000ffff 0x100000 0x10000
6: 0:APPSBL 0x0000ffff 0x110000 0xa0000
7: 0:ART 0x0000ffff 0x1b0000 0x70000
8: pdt_data 0x0000ffff 0x220000 0x300000
9: exp 0x0000ffff 0x520000 0x80000
10: 0:HLOS 0x0000ffff 0x5a0000 0x500000
11: rootfs 0x0000ffff 0xaa0000 0x1080000
12: 0:WIFIFW 0x0000ffff 0x1b20000 0x400000
13: 0:BTFW 0x0000ffff 0x1f20000 0x40000
============================
<H3C> printenv
appname=SWBA1B0V100R003.bin
baudrate=115200
bootargs=console=ttyMSM0,115200n8 cnss2.bdf_integrated=0x10 cnss2.bdf_pci0=0x50 cnss2.bdf_pci1=0x50 cnss2.skip_radio_bmap=4
bootcmd=bootipq
bootdelay=3
bootversion=100
burn_app=burn app ${serverip} ${appname}
burn_img=tftpboot 0x44000000 ${imgname} && imgaddr=0x44000000 && source $imgaddr:script && reset
burn_uboot=tftpboot 0x44000000 ${ubootname} && flash 0:APPSBL && reset
checkmode=0
dload_dis=1
eth1addr=10:xxxxxxx
ethact=eth0
ethaddr=10:xxxxxxx
ethaddr1=08:xxxxxxx
fctlockflag=0
fdt_high=0x4A400000
fdtcontroladdr=4a9xxxxxxx
flash_type=6
hardversion=VER.A
imgname=nor-ipq5018-single.img
ipaddr=192.168.1.1
machid=80xxxxxxx
manucode=219801A2Yxxxxxxx
netmask=255.255.255.0
productconfig=/etc/config/BA3000L/pdtcfg.ini
productmode=2
productname=BA3000L
restore_default=0
serverip=192.168.1.251
soc_hw_version=20180101
soc_version_major=1
soc_version_minor=1
stderr=serial@xxxxxxx
stdin=serial@xxxxxxx
stdout=serial@xxxxxxx
ubootname=openwrt-ipq5018-u-boot.mbn
Environment size: 1104/65532 bytes
由于之前刷CR8808是用集客的ubi固件,但目前集客最接近BA3000L硬件配置的只有B3000,且无ubi,不知道能不能从bin格式提取ubi |
|