PDA

Просмотр полной версии : Решено Планшет OK-706 заблокирован графическим ключем


Sergey
31.05.2013, 00:29
Имеется на руках китайская версия планшета под названием OK-706 с заблокированным графическим ключом и надписью "Слишком много попыток ввода графического ключа!". При включении просит Google аккаунт, ввести его в какой-либо Recovery для Wipe/Hard Reset не удается.

1494

На плате нашел контактные площадки для подключения COM порта, подпаялся к нему с помощью переходника COM-USB, пытаясь получить хоть какую-нибудь возможность управления системой. Через программу minicom под Linux или Putty под Windows это удалось, но кроме протокола загрузки и описания некоторых текущих процессов, больше ничего не получил. Подключение необходимо делать на скорости не ниже 115200 иначе вместо данных будут куски несвязанной информации.

1496

In
Init
Init OK
OUT
[main]: BUILD[0006]=====2
[main]: enable mmu
sc=0x2f
[main]: do FTLInit... 185
[main]: OK!
[main]: FltInit ===== 814
[main]: Current flash timing: 200000
[get_bootloader_ver]: BLOCK 0
[main]: Bootloader version: 2010-10-08#5.00
[main]: get parameter
[main]: analyze parameter
[ParseLine]: FW_VERSION: 1.0.0
[ParseLine]: ORG CMDLINE: noinitrd console=ttyS1,115200n8n init=/init root=/dev)
[main]: get command in misc
[main]: no command
[main]: Normal boot
[check_cramfs]: Check boot partition...
[check_cramfs]: Check ok!
[load_kernel]: Kernel loading...
[kernel_load_check]: Check kernel image...
[kernel_load_check]: Check OK!
[load_kernel]: Kernel load ok!
[start_linux]: END ===== 12933
[start_linux]: CMDLINE: noinitrd console=ttyS1,115200n8n init=/init root=/dev/m0
[bootm_linux]: Starting kernel...

[0] Linux version 2.6.25 (samuel@im-02) (gcc version 4.4.0 (GCC) ) #556 Thu Sep1
[0] CPU: ARM926EJ-S [41069265] revision 5 (ARMv5TEJ), cr=00053177
[0] Machine: RK28board
[0] Memory policy: ECC disabled, Data cache writeback
[0] On node 0 totalpages: 53248
[0] DMA zone: 416 pages used for memmap
[0] DMA zone: 0 pages reserved
[0] DMA zone: 52832 pages, LIFO batch:15
[0] Normal zone: 0 pages used for memmap
[0] Movable zone: 0 pages used for memmap
[0] CPU0: D VIVT write-back cache
[0] CPU0: I cache: 16384 bytes, associativity 4, 32 byte lines, 128 sets
[0] CPU0: D cache: 16384 bytes, associativity 4, 32 byte lines, 128 sets
[0] CPU: found DTCM 16k @ 00000000, not enabled
[0] CPU: DTCM was detected 16k but expected 4k!
[0] CPU DTCM: copied data from ff404000 - ff404078
[0] CPU: found ITCM 8k @ 00000000, enabled
[0] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 52832
[0] PID hash table entries: 1024 (order: 10, 4096 bytes)
[0] Console: colour dummy device 80x30
[0] console [ttyS1] enabled
[0] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[0] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[0] Memory: 208MB = 208MB total
[0] Memory: 205056KB available (3968K code, 1802K data, 140K init)
[0] Calibrating delay loop... 67.78 BogoMIPS (lpj=338944,armclk=136000000)
[0] Mount-cache hash table entries: 512
[0] CPU: Testing write buffer coherency: ok
[0] net_namespace: 152 bytes
[0] CPU ITCM: Added 000010d8 bytes @ ff400f28 to the TCM memory pool
[0] NET: Registered protocol family 16
[0] PLLGetDDRFreq=136 MHZ
[0] write dma reg channel 0
[0] write dma reg channel 1
[0] write dma reg channel 2
[0] write dma reg channel 3
[0] write dma reg channel 4
[0] write dma reg channel 5
[0] =======RK2818 SCU VERSION=20101012,V1.09=======
[0] Calibrating delay loop... 311.29 BogoMIPS (lpj=1556480,armclk=624000000)
[0] set iomux
[0] -----------------lcdc freq = 40------------
[0] Console: switching to colour frame buffer device 100x30 k==0
[0] rk2818fb_probe ok
[0] SCSI subsystem initialized
[0] usbcore: registered new interface driver usbfs
[0] usbcore: registered new interface driver hub
[0] usbcore: registered new device driver usb
[0] input: rk28_AD_button as /devices/platform/rk28_AD_button/input/input0
[0] rk28_dsp_mod_init dsp version v306_8
[0] SCU/W>dsp clk locked!!
[0] NET: Registered protocol family 2
[1] IP route cache hash table entries: 2048 (order: 1, 8192 bytes)
[1] TCP established hash table entries: 8192 (order: 4, 65536 bytes)
[1] TCP bind hash table entries: 8192 (order: 3, 32768 bytes)
[1] TCP: Hash tables configured (established 8192 bind 8192)
[1] TCP reno registered
[1] rk28_bl_change_clk: backlight device does not exist
[1] ashmem: initialized
[1] io scheduler noop registered
[1] io scheduler anticipatory registered (default)
[1] rockchip_usart.0: ttyS0 at MMIO 0x18000000 (irq = 19) is a ROCKCHIP_SERIAL
[1] rockchip_usart.1: ttyS1 at MMIO 0x18002000 (irq = 20) is a ROCKCHIP_SERIAL
[1] brd: module loaded
[1] loop: module loaded
[1] nbd: registered device at major 43
[1] PPP generic driver version 2.4.2
[1] PPP Deflate Compression module registered
[1] PPP BSD Compression module registered
[1] PPP MPPE Compression module registered
[1] NET: Registered protocol family 24
[1] PPPoL2TP kernel driver, V1.0
[1] Linux video capture interface: v2.00
[1]
[1] rk28_camera_probe..drivers/media/video/rk28_camera.c..834 ******** nzy **
[1]
[1] soc_camera_init..drivers/media/video/soc_camera.c..1148 ******** nzy ****
[1]
[1] soc_camera_init..drivers/media/video/soc_camera.c..1156 ******** nzy ****
[1] Driver 'sd' needs updating - please use bus_type methods
[1] Driver 'sr' needs updating - please use bus_type methods
[1] Flash 0 ID: ad d7 94 9a 74
[1] Flash 1 ID: 0 0 0 0 0
[1] Flash 2 ID: 0 0 0 0 0
[1] Flash 3 ID: 0 0 0 0 0
[1] AccessTime: 40 ns
[1] Flash timming: c2
[10] FTL INFO:Version = 416,Date = 20100830
[10] totalLogicBlkRaw = 1903
[10] max page blk = 256
[10] 9 cmdlinepart partitions found on MTD device rk28xxnand
[10] Creating 9 MTD partitions on "rk28xxnand":
[10] 0x00002000-0x00004000 : "misc"
[10] 0x00004000-0x00008000 : "kernel"
[10] 0x00008000-0x0000a000 : "boot"
[10] 0x0000a000-0x0000e000 : "recovery"
[10] 0x0000e000-0x00046000 : "system"
[10] 0x00046000-0x00080000 : "backup"
[10] 0x00080000-0x000ba000 : "cache"
[10] 0x000ba000-0x0013a000 : "userdata"
[10] 0x0013a000-0x0066f000 : "user"
[10] Creating 2 MTD partitions on "rk28xxnand":
[10] 0x00000000-0x00020000 : "pagecache"
[10] 0x00020000-0x00040000 : "swap"
[10] >>> part[0]: name=misc offset=0x2000
[10] >>> part[1]: name=kernel offset=0x4000
[10] >>> part[2]: name=boot offset=0x8000
[10] >>> part[3]: name=recovery offset=0xA000
[10] >>> part[4]: name=system offset=0xE000
[10] >>> part[5]: name=backup offset=0x46000
[10] >>> part[6]: name=cache offset=0x80000
[10] >>> SysImageWriteEndAdd=0x80000
[10] FtlSetSysProtAddr gFlashInfo.sysInfo.sysProtAddr = 143
[10] rockchip_spi_master rockchip_spi_master: rockchip SPI Master Controller at)
[10] spi spi0.1: setting pre-scaler to 416 (hz 125000)
[10] usbcore: registered new interface driver cdc_acm
[10] drivers/usb/class/cdc-acm.c: v0.25:USB Abstract Control Model driver for Us
[10] Initializing USB Mass Storage driver...
[10] usbcore: registered new interface driver usb-storage
[10] USB Mass Storage support registered.
[10] usbcore: registered new interface driver usbserial
[10] drivers/usb/serial/usb-serial.c: USB Serial support registered for generic
[10] usbcore: registered new interface driver usbserial_generic
[10] drivers/usb/serial/usb-serial.c: USB Serial Driver core
[10] drivers/usb/serial/usb-serial.c: USB Serial support registered for GSM mod)
[10] usbcore: registered new interface driver option
[10] drivers/usb/serial/option.c: USB Driver for GSM modems: v0.7.1
[10] dwc_otg_driver_probe,everest
[10] DWC_otg: ^^^^^^^^^^^^^^^^^Device Mode 20100827
[10] dwc_otg_hcd_init everest
[10] dwc_otg dwc_otg: DWC OTG Controller
[10] dwc_otg dwc_otg: new USB bus registered, assigned bus number 1
[10] dwc_otg dwc_otg: irq 8, io mem 0x00000000
[10] DWC_otg: dwc_otg_hcd_start! everest
[10] dwc_otg_hcd_start controller in device mode,everest
[10] usb usb1: configuration #1 chosen from 1 choice
[10] hub 1-0:1.0: USB hub found
[10] hub 1-0:1.0: 1 port detected
[11] DWC_otg: dwc_otg_hcd_init end,everest
[11] dwc_otg_pcd_init,everest
[11] dwc_otg_driver_probe end, everest
[11] android init
[11] android_probe pdata: c041222c
[11] android_bind
[11] mass_storage_function_add
[11] android_usb gadget: Number of LU[11] input: xpt2046 touchscreen as /device1
[11] ( 50, 40) => ( 50, 39)
[11] ( 750, 40) => ( 750, 41)
[11] ( 50, 440) => ( 50, 441)
[11] ( 750, 440) => ( 750, 439)
[11] v_CalcParam.a1=19113
[11] v_CalcParam.b1=75
[11] v_CalcParam.c1= -1832676
[11] v_CalcParam.a2 = -66
[11] v_CalcParam.b2 = 12749
[11] v_CalcParam.c2 = -3518323
[11] v_CalcParam.delta = 93344
[11] Auto set calibration successfully.
[11] i2c /dev entries driver
[11]
[11] ov9650_probe..drivers/media/video/ov9650.c..743 ******** nzy *********
[11]
[11] soc_camera_probe..drivers/media/video/soc_camera.c..861 ******** nzy ***
[11] camera 33-0: RK28 Camera driver attached to camera 0
[11]
[11] ov9650_init..drivers/media/video/ov9650.c..340 ******** nzy *********0x6
[11] camera 33-0: RK28 Camera driver detached from camera 0
[11]
[11] soc_camera_probe..drivers/media/video/soc_camera.c..883 ******** nzy ***
[11]
[11] ov9650_probe..drivers/media/video/ov9650.c..785 ******** nzy *********
[11] input: compass as /devices/virtual/input/input2
[11] rtc_HYM8563 0-0051: rtc core: registered rtc_HYM8563 as rtc0
[11] hym8563_init_device--->133 RTC_CTL2 = 0
[11] hym8563_init_device--->142 RTC_CTL2 = 0
[11] ---read time ------ year:2009, mon:10, day:1, weekday:4 hour:12 min:10 se8
[11] rockchip_battery_init::=========================== =============
[11] rk28_sdmmc0_set_ios..drivers/mmc/host/rk28_sdmmc0.c..143 ***********The cl*
[11] rk28_mci_send_command,errorflag=2,cmd=0,cmdr=80008 100,ret=0x0
[11] rk28_mci_send_command,errorflag=6,cmd=55,cmdr=8000 2177,ret=0x0
[11] rk28_mci_send_command,errorflag=6,cmd=55,cmdr=8000 2177,ret=0x0
[11] rk28_mci_send_command,errorflag=6,cmd=55,cmdr=8000 2177,ret=0x0
[11] rk28_mci_send_command,errorflag=6,cmd=55,cmdr=8000 2177,ret=0x0
[11] rk28_mci_send_command,errorflag=6,cmd=1,cmdr=80002 041,ret=0x0
[11] RK28 MMC SDIO HOST driver init ......
[11] Free DMA channel for SDMMC1.
[11] usbcore: registered new interface driver usbhid
[11] drivers/hid/usbhid/hid-core.c: v2.6:USB HID core driver
[11] logger: created 64K log 'log_main'
[11] logger: created 4K log 'log_events'
[11] Request DMA channel for SDMMC1.
[11] logger: created 64K log 'log_radio'
[11] pmem_setup::pmem pmem 1 init
[11] pmem_setup::pmem pmem-dsp 0 init
[11] CMD: 5 <arg=0> FAIL raw_ints: 104 masked ints: 4
[11] CMD: 5 <arg=0> FAIL raw_ints: 104 masked ints: 4
[11] CMD: 5 <arg=0> FAIL raw_ints: 104 masked ints: 4
[11] CMD: 5 <arg=0> FAIL raw_ints: 104 masked ints: 4
[11] Free DMA channel for SDMMC1.
[11] Advanced Linux Sound Architecture Driver Version 1.0.16rc2 (Thu Jan 31 16:.
[11] ASoC version 0.13.2
[11] rt5621: RT5621 Audio Codec rt5621 alsa 1.0.16 0.02
[11] asoc: RT5621 <-> rockchip-i2s mapping ok
[12] rt5621_dapm_event_POWER_D2
[12] run here1
[12] ALSA device list:
[12] #0: ROCKCHIP_RT5621_CODEC (RT5621)
[12] TCP cubic registered
[12] NET: Registered protocol family 1
[12] NET: Registered protocol family 17
[12] RPC: Registered udp transport module.
[12] RPC: Registered tcp transport module.
[12] ieee80211: 802.11 data/management/control stack, git-1.1.13
[12] ieee80211: Copyright (C) 2004-2005 Intel Corporation <jketreno@linux.intel>
[12] ---read time ------ year:2009, mon:10, day:1, weekday:4 hour:12 min:10 se8
[12] rtc_HYM8563 0-0051: setting system clock to 2009-10-01 12:10:58 UTC (12543)
[12] addr_console_init addr_console version v306_8
[12] VFS: Mounted root (cramfs filesystem) readonly.
[12] Freeing init memory: 140K
[12] Warning: unable to open an initial console.
[12] before start /init,now=0x2d76b3043
[12] rt5621_dapm_event_POWER_D3
[12] init: cannot open '/initlogo.rle'
[12] init: ext_check(/dev/block/mtdblock7):
[12] init: superblock offset = 0
[12] init: ext2fs_open2 retval = 0
[12] init: /dev/block/mtdblock7: recovering journal
[12] init: superblock offset = 0
[12] init: ext2fs_open2 retval = 0
[12] init: /dev/block/mtdblock7: Superblock last mount time is in the future. .
[12] init: /dev/block/mtdblock7: clean, 171/65536 files, 75328/262144 blocks
[12] init: /system/bin/e2fsck terminated by exit(0)
[12] init: filesystem '/dev/block/mtdblock7' had no errors
[12] kjournald starting. Commit interval 5 seconds
[12] EXT3 FS on mtdblock7, internal journal
[12] EXT3-fs: mounted filesystem with ordered data mode.
[12] init: ext_check(/dev/block/mtdblock6):
[12] init: superblock offset = 0
[12] init: ext2fs_open2 retval = 0
[12] init: /dev/block/mtdblock6: recovering journal
[12] init: superblock offset = 0
[12] init: ext2fs_open2 retval = 0
[12] init: /dev/block/mtdblock6: clean, 12/29760 files, 11595/118784 blocks
[12] init: /system/bin/e2fsck terminated by exit(0)
[12] init: filesystem '/dev/block/mtdblock6' had no errors
[12] kjournald starting. Commit interval 5 seconds
[13] EXT3 FS on mtdblock6, internal journal
[13] EXT3-fs: mounted filesystem with ordered data mode.
[13] init: ext_check(/dev/block/mtdblock9):
[13] init: superblock offset = 0
[13] init: ext2fs_open2 retval = 0
[13] init: /dev/block/mtdblock9: recovering journal
[13] init: superblock offset = 0
[13] init: ext2fs_open2 retval = 0
[13] init: /dev/block/mtdblock9: Superblock last mount time is in the future. .
[13] init: /dev/block/mtdblock9: clean, 1022/16384 files, 19506/65536 blocks
[13] init: /system/bin/e2fsck terminated by exit(0)
[13] init: filesystem '/dev/block/mtdblock9' had no errors
[13] kjournald starting. Commit interval 5 seconds
[13] EXT3 FS on mtdblock9, internal journal
[13] EXT3-fs: mounted filesystem with ordered data mode.
[13] init: cannot find '/init.sh', disabling 'init_sh'
[13] init: cannot find '/system/bin/playmp3', disabling 'bootsound'
[13] init: cannot find '/system/bin/flash_image', disabling 'flash_recovery'
[14] Adding 65528k swap on /dev/block/mtdblock10. Priority:-1 extents:1 acrossk
sh: can't access tty; job control turned off
# [17] get_coeff mclk=0,rate=48000
[17] rt5621_pcm_hw_params
[29] warning: `zygote' uses 32-bit capabilities (legacy support in use)
[29] SCU/W>dsp clk locked!!
[29] init: untracked pid 750 exited
[30] init: untracked pid 754 exited
[51] SN=0 uncali_x=294 uncali_y=506
[51] SN=1 uncali_x=3839 uncali_y=483
[51] SN=2 uncali_x=395 uncali_y=3666
[51] SN=3 uncali_x=3851 uncali_y=3603
[51] SN=4 uncali_x=2095 uncali_y=1429
[51] ( 50, 40) => ( 46, 39)
[51] ( 750, 40) => ( 754, 41)
[51] ( 50, 440) => ( 54, 441)
[51] ( 750, 440) => ( 745, 439)
[51] v_CalcParam.a1=22506
[51] v_CalcParam.b1=-408
[51] v_CalcParam.c1= -1212249
[51] v_CalcParam.a2 = 175
[51] v_CalcParam.b2 = 14338
[51] v_CalcParam.c2 = -2891527
[51] v_CalcParam.delta = 112589
[53] run 5621 trigger puase
[74] Gsensor mma7760 enter suspend
[74] AccessTime: 40 ns
[74] Flash timming: a2


Во всем протоколе загрузке, меня смущает единственная строка:
sh: can't access tty; job control turned off
Не означает ли это что работа sh (shell) закрыта на уровне ядра?

Аппарат из дешевой серии, собран на процессоре Rockchip RK2818.

remark
01.06.2013, 11:34
Может это чем то поможет?
http://4pda.ru/forum/index.php?showtopic=331715&st=360#entry16619140

Sergey
01.06.2013, 22:13
Аппарат перешит программой RK2818_v1.23 прошивкой от планшета PendoPad. Что конечно-же избавило от запроса графического ключа и аккаунта.

http://www.youtube.com/watch?v=NXBlfcAJaaM

MUS
11.12.2014, 21:51
Добрый вечер , не осталось ли у Вас образа прошивки . Спасибо.

Sergey
12.12.2014, 12:19
Добрый вечер , не осталось ли у Вас образа прошивки . Спасибо.

Здравствуйте, поискал в архиве и нашел, вот ссылка https://yadi.sk/d/kABKyJC0dKkkF. А во вложении, небольшая инструкция по процедуре прошивки.

vazonov11
12.01.2015, 15:51
что-то ссылка не открывается.

shilopopic
12.01.2015, 18:53
что-то ссылка не открывается.

если пишете, то конкретизируйте какая из ссылок не отрывается, так как у меня все рабоччие