求助UBOOT无法手动启动，但是自动启动没问题

seam***

各路大神，最近研究创维DT741设备，CPU型号是ZX279127。我想登录到root下，但是不知道密码。我尝试了ttl进去修改单用户，但是ttl执行boot无法启动，提示 => boot Wrong Image Format for bootm command ERROR: can't get kernel image! printenv查看到的信息也就是 bootcmd=setenv bootargs console=$(console) rdinit=/sbin/init mem=$(memsize);bootm 0x440001e0; 这么一条 我run bootcmd也不行 bootm 0x440001e0也不行，都无法手动启动镜像，但是自动能启动。研究了几天也没搞定。想请求帮助 网上找了好多资料也没搞定，哪位大神能够帮忙解惑下，万分感激

right***

1. nand read 0x44000000 0x200000 0x1769a80
   
2. <div>bootm 0x440001e0</div>

复制代码

right***

发下完整的uboot启动日志

seam***

rightuser2 发表于 2022-10-12 19:47
发下完整的uboot启动日志

=> reset
resetting ...

Boot NAND


U-Boot 2013.04-svn170300 (Jul 30 2021 - 17:28:08)

CPU  : ZX279127@A9,800MHZ
Board: zxic zx279127evb
CONFIG_SYS_SDRAM_SIZE:=0x10000000
DRAM:  256 MiB
com1
usb rst release for 127 128
CONFIG_SYS_SDRAM_Sid for ZX279127
Flash: NAND
product_vid = 134
vid=134-WEY16G
NAND:  NAND_special nand special:0

Manu ID: 0xef, Chip ID: 0xda (Winbond NAND 256MiB 3,3V 8-bit)
256 MiB
<nand_read_skip_bad_,1311>!mtdpart=0x1,offset=0x0,mtdpartoffset=0x180000,mtdPartsize=0x80000,length=0x20000
In:    serial
Out:   serial
Err:   serial
clk_pll env is not setted, core clk won't change
Net:   addr 0x94000008 before value is f9ff1fcf
addr 0x94000008 after value is ffff1fcf
serdes init done
init fe_phy first!
innerGeLedPolarSet 1
eth0

Hit 1 to upgrade software version
Hit ENTER key to stop autoboot:  0
do_mcupg function enter..
mac 4 phy status changed: 10M half-duplex
-----smac_init
Using eth0 device
mac 0 phy status changed: 1000M full-duplex
-----smac_init
multi upgrade check timeout.
Receive multicast packet failed (>.<)
disable phy
addr=200000
addr=2200000
select=0x0
search=0x2
<nand_read_skip_bad_,1311>!mtdpart=0x4,offset=0x0,mtdpartoffset=0x4200000,mtdPartsize=0x600000,length=0x1000
BootImageNum=0x00000000,0
select=0x0
search=0x2
search->result[select].entry=2001e0
mtd_length=1796a80
<nand_read_skip_bad_,1311>!mtdpart=0x2,offset=0x0,mtdpartoffset=0x200000,mtdPartsize=0x2000000,length=0x1796a80
<nand_read_skip_bad_,1311>!mtdpart=0x0,offset=0x0,mtdpartoffset=0x0,mtdPartsize=0x180000,length=0x80000
lseek=0x4687f000
cmdline=U-Boot 1.0.0 20210730173741
## Booting kernel from Legacy Image at 440001e0 ...
   Image Name:   Linux Kernel Image
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    24733779 Bytes = 23.6 MiB
   Load Address: 40008000
   Entry Point:  40008000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK

NAND read: device 0 offset 0xe000000, size 0x22
34 bytes read: OK
sky: get magic cmd is [&#9618;&#9618;nd read 4f5469c0 E000000 22], data read [&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;&#9618;nd read 4f5469c0 E000000 22]
----------------------
|-->setup versioninfo tag...

Starting kernel ...

seam***

rightuser2 发表于 2022-10-13 02:00

感谢大师，可以启动了，但是无法单用户启动，大神能否指导下，我就是想进入到单用户修改root

right***

seamango 发表于 2022-10-13 21:41
感谢大师，可以启动了，但是无法单用户启动，大神能否指导下，我就是想进入到单用户修改root

进去后是啥情况

right***

可能你进去后也改不了，首先rootfs分区格式你没说，有可能是只读的，其次我看启动时有验证分区的校验和，你改了东西校验和就变了，可能启动不了。要改东西前记得备份分区

66666***

rightuser2 发表于 2022-10-13 02:00

0x44000000
大神，是怎么计算？

seam***

rightuser2 发表于 2022-10-13 21:53
进去后是啥情况

加入
setev bootargs single init=/bin/sh
bootm启动
但还是进入到登录界面，需要用户名和密码
localhost login:

right***

seamango 发表于 2022-10-14 19:25
加入
setev bootargs single init=/bin/sh
bootm启动

那你要把rootfs分区上传出来，然后挂载，修改/etc/passwd，然后再把修改后的rootfs分区写回去。但是有没有校验不知道