大家好，我是拆机小能手小鱼。书接上回，昨天在快要串口接入系统的时候，突然出现意外短路，导致板子的一个模块烧掉。
看这个烧掉的模块应该是一个稳压模块。
这里解释下稳压模块，简单理解就是降压模块，把5V电压降低到3.3V给板子上的3.3V元器件用。小鱼烧掉的时候可能就是不小心把3.3V接到地上，导致直接电流过大烧掉了。（以后接线的时候第一时间要断电！！）
如果要换一个，需要知道这个模块是什么型号，这烧的模块上的字都看不太清了。
不过，同一个模块在同块电路板上应该会反复用
找找看
找到了，SS开头的这个
到网上找找，先买几个屯着
找了半天，没找到同一个丝印的，有了解这个型号的同学请留言
类似的有
实在找不到就从板子上拆一个下来吧
不管怎么修，第一步要把这个模块拿下来，不然会一直短路
要说拿元器件，小鱼最拿手了，毕竟经常割铜飞线～
安排祖传刀头
使用最拿手的手法，左右烫
然后稍微用点力
结果旁边的0201的电阻没了。。。（下图绿框里的
稳压模块却纹丝未动。。
低估了这个板子的散热，居然那么好，难怪CPU上连个风扇都没
有句话说得好，大力出奇迹
没错，用力一点，然后
模块动了
继续用力，模块拿下来了，可是
焊盘也跟着下来了
本来五个脚的焊盘，只剩下三个了。。
这板子算废了，想剁手，早知道用风枪吹了
既然拿下来了，还是去上个电吧
插上电池，按下开机键
亮了，亮了，它亮了
亮了就继续干！
把刚刚找到的TX接到USB转TTL上。
打开监视器，调整好波特率，开机
看到了不断的打印！！
最后可以看到，Ubuntu14.04.3 已经启动，没想到吧，这个扫地机器人居然用的是十年前的操作系统，其实用什么操作系统对开发人员来说差异并不大
最后提示等待登录：rockrobo login: 现在还没有找到RX,没法输入数据，也还不知道密码，更没法登录。
既然开机了，我们就先对开机日志进行一个简单分析，要想搞到密码或者进入系统，还要从开机日志入手
看到这一段
DRAM work mode register value = 004318e4
DRAM SIZE =512 M
set one rank ODTMAP
DRAM simple test OK.
dram size =512
内存难道真的是512M的吗？明明贴的是4G的
继续看，存储大小——4GB,符合
[mmc]: MMC ver 5.0
[mmc]: SD/MMC Card: 4bit, capacity: 3776MB
[mmc]: vendor: Man 00110100 Snr 020f9ea4
[mmc]: product: 004G6
前面这些算是一个开机的基本硬件检查，接着就要到重点了
Ready to disable icache.
Jump to secend Boot.
[ 0.334]U-Boot 2011.09-rc1-00001-g03b4561-dirty (Mar 16 2017 - 16:40:53) Allwinner Technology
normal or secure os
pmbus: ready
PMU: AXP221
BOOT_POWER22_POK_SET: 59
BOOT_POWER22_POK_SET: 1
PMU: AXP22x found
这里有个重点，Jump to secend Boot，跳到了 U-Boot 上
U-Boot 是一个开源的开机引导程序，这个玩意的最主要功能是 硬件初始化 （初始化设备上的外设备（如内存、串口、网络等）以便于系统的启动和操作）
还有 引导加载——引导加载： 负责从存储设备（如闪存、SD卡、网络等）读取引导映像或操作系统内核，并将其加载到内存中运行
最重要的是对我们来说，可以用它的调试功能——内存内容查看、寄存器值查看等。
接着来
sunxi flash init ok
[ 0.790]board_status_probe
[ 0.792]boot_reason init from pmic, set to env: 0x0
[ 0.797]boot reason=0x0, is boot from poweroff
[ 0.802]recovery detect id val: 0
[ 0.805]usb vbus gpio fd: 1386422320
[ 0.809]usb vbus cable not connectted
[ 0.813]board_check_vbus2boot = 0
[ 0.816]axp_probe_key loop: 499
[ 0.831]axp_probe_key loop: 498
[ 0.845]axp_probe_key loop: 497
接着flash初始化完，打印了启动boot的原因，是从关机启动的
recovery detect id val: 0
这句话应该是从flash中读取是否要恢复出厂设置
接下来是很长一段的
axp_probe_key loop
这段话是开机按键按下在倒计时
接着打印了整个flash的分区表
--------fastboot partitions--------
-total partitions:9-
-name- -start- -size-
boot-res : 1000000 800000
env : 1800000 1000000
app : 2800000 1000000
recovery : 3800000 20000000
system_a : 23800000 20000000
system_b : 43800000 20000000
Download : 63800000 21000000
reserve : 84800000 1000000
UDISK : 85800000 0
-----------------------------------
可以看到，一共有9个分区，这里的分区设计非常有意思，主要放系统的分区是 recovery，system_a 和 system_b，这些分区的设计主要考虑了，操作系统损坏和OTA更新考虑的，后续如果能进入系统，我们再详细查看和分析各个分区的作用
接着看这段日志
upgrade stage:0x0
No upgradeover system found, check if has normal system, pmu: 0x0
board_common.c:check_android_misc:will be boot A system
to be run cmd=run setargs_mmc boot_normal
boot A system
没有需要更新的系统，检查正常系统存在，然后选择启动了 A system
这说明，系统A是默认启动的分区
继续看
WORK_MODE_BOOT
[ 2.387]Hit any key to stop autoboot: 0
这里有个关键点，Hit any key to stop auboboot
按下任意按键就可以停止boot,然后就可以进入了u-boot的调试模式，这里很重要，下次要考
我们还没接上，RX，现在没办法停止Boot
接着看
Loading file "/boot/zImage" from mmc device 2:8
3883496 bytes read
加载了 zImage
这里介绍下 zImage,简单理解Zip(压缩)+Image(内核镜像)=zImage
所以 zImage是 Linux 内核的一种压缩格式
这里就开始加载Linux内核了
reload config to 0x43000000
[ 2.553]Starting kernel ...
[ 2.553]enable watchdog 1c20cb8 value 0xb1(16s)
Uncompressing Linux... done, booting the kernel.
[ 0.000000] Booting Linux on physical CPU 0
[ 0.000000] Initializing cgroup subsys cpuset
[ 0.000000] Initializing cgroup subsys cpu
[ 0.000000] Linux version 3.4.39 (jenkins@93800916726f) (gcc version 4.8.4 (Ubuntu/Linaro 4.8.4-2ubuntu1~14.04.1) ) #1 SMP PREEMPT Sat Jan 9 09:34:52 UTC 2021
解压内核，开始下载，Linux 版本 Linux version 3.4.39
再接下来，就是网卡，雷达串口，MCU等等驱动加载启动等等，小鱼就不一一介绍了，还是抓紧想办法进系统再说
加载内核后的日志贴这里，有兴趣的小伙伴可以看看
小鱼提示：很长，不感兴趣的请快速翻页！
Uncompressing Linux... done, booting the kernel.
[ 0.000000] Booting Linux on physical CPU 0
[ 0.000000] Initializing cgroup subsys cpuset
[ 0.000000] Initializing cgroup subsys cpu
[ 0.000000] Linux version 3.4.39 (jenkins@93800916726f) (gcc version 4.8.4 (Ubuntu/Linaro 4.8.4-2ubuntu1~14.04.1) ) #1 SMP PREEMPT Sat Jan 9 09:34:52 UTC 2021
[ 0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d
[ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[ 0.000000] Machine: sun8i
[ 0.000000] cma: CMA: reserved 96 MiB at 5a000000
[ 0.000000] Memory policy: ECC disabled, Data cache writealloc
[ 0.000000] script_init enter!
[ 0.000000] script_init exit!
<6>[ 0.000000] PERCPU: Embedded 8 pages/cpu @c0cec000 s10752 r8192 d13824 u32768
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 129920
[ 0.000000] Kernel command line: rootwait boot_fs=a console=ttyS0,115200 root=/dev/mmcblk0p8 rootfstype=ext4 loglevel=7 partitions=boot-res@mmcblk0p2:env@mmcblk0p5:app@mmcblk0p6:recovery@mmcblk0p7:system_a@mmcblk0p8:system_b@mmcblk0p9:Download@mmcblk0p10:reserve@mmcblk0p11:UDISK@mmcblk0p1 boot_reason=0x0 location=prc boot_ver=2011.09-rc1-00001-g03b4561-dirty
[ 0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[ 0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[ 0.000000] Memory: 512MB = 512MB total
[ 0.000000] Memory: 411968k/411968k available, 112320k reserved, 0K highmem
[ 0.000000] Virtual kernel memory layout:
[ 0.000000] vector : 0xffff0000 - 0xffff1000 ( 4 kB)
[ 0.000000] fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB)
[ 0.000000] vmalloc : 0xe0800000 - 0xff000000 ( 488 MB)
[ 0.000000] lowmem : 0xc0000000 - 0xe0000000 ( 512 MB)
[ 0.000000] modules : 0xbf000000 - 0xc0000000 ( 16 MB)
[ 0.000000] .text : 0xc0008000 - 0xc0755614 (7478 kB)
[ 0.000000] .init : 0xc0756000 - 0xc079ba00 ( 279 kB)
[ 0.000000] .data : 0xc079c000 - 0xc07fcea0 ( 388 kB)
[ 0.000000] .bss : 0xc07fe098 - 0xc0858080 ( 360 kB)
[ 0.000000] Preemptible hierarchical RCU implementation.
[ 0.000000] NR_IRQS:416
[ 0.000000] try to syncboot of clk ats
[ 0.000000] try to syncboot of clk sdmmc2mod
[ 0.000000] try to syncboot of clk uart0
[ 0.000000] try to syncboot of clk pll_ddr1
[ 0.000000] try to syncboot of clk debe0
[ 0.000000] try to syncboot of clk dma
[ 0.000000] try to syncboot of clk sat
[ 0.000000] try to syncboot of clk pio
[ 0.000000] try to syncboot of clk mbus
[ 0.000000] try to syncboot of clk drc0
[ 0.000000] try to syncboot of clk lvds
[ 0.000000] try to syncboot of clk axi
[ 0.000000] Architected local timer running at 24.00MHz.
[ 0.000000] Switching to timer-based delay loop
[ 0.000000] sched_clock: 32 bits at 24MHz, resolution 41ns, wraps every 178956ms
[ 0.000000] Console: colour dummy device 80x30
[ 0.000241] Calibrating delay loop (skipped), value calculated using timer frequency.. 4800.00 BogoMIPS (lpj=24000000)
[ 0.000268] pid_max: default: 32768 minimum: 301
[ 0.000581] Mount-cache hash table entries: 512
[ 0.001622] Initializing cgroup subsys debug
[ 0.001642] Initializing cgroup subsys cpuacct
[ 0.001654] Initializing cgroup subsys freezer
[ 0.001699] CPU: Testing write buffer coherency: ok
[ 0.001756] ftrace: allocating 19621 entries in 58 pages
[ 0.030295] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[ 0.030317] [sunxi_smp_prepare_cpus] enter
[ 0.030362] Setting up static identity map for 0x4050d580 - 0x4050d5d8
[ 0.010000] CPU1: Booted secondary processor
[ 0.010000] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[ 0.010000] CPU2: Booted secondary processor
[ 0.010000] CPU2: thread -1, cpu 2, socket 0, mpidr 80000002
[ 0.010000] CPU3: Booted secondary processor
[ 0.010000] CPU3: thread -1, cpu 3, socket 0, mpidr 80000003
[ 0.210228] Brought up 4 CPUs
[ 0.210247] SMP: Total of 4 processors activated (19200.00 BogoMIPS).
[ 0.210542] devtmpfs: initialized
[ 0.214311] pinctrl core: initialized pinctrl subsystem
[ 0.214311] dummy:
[ 0.223619] NET: Registered protocol family 16
[ 0.241710] DMA: preallocated 2048 KiB pool for atomic coherent allocations
[ 0.241817] script_sysfs_init success
[ 0.242107] sunxi pinctrl probe enter
[ 0.242803] gpiochip_add: registered GPIOs 0 to 383 on device: sunxi-pinctrl
[ 0.243871] sunxi-pinctrl sunxi-pinctrl: initialized sunXi PIO driver
[ 0.244064] axp_pinctrl_probe enter...
[ 0.244215] gpiochip_add: registered GPIOs 1024 to 1029 on device: axp-pinctrl
[ 0.244236] mainkey total count : 77
[ 0.244277] map mainkey [motor_para] to pinctrl, map number [2]
[ 0.244341] axp pinctrl driver probe ok
[ 0.245392] [sunxi-module]: [sunxi-module.0] probe success
[ 0.245435] script config pll3 to 297 Mhz
[ 0.245452] script config pll4 to 300 Mhz
[ 0.245487] script config pll6 to 600 Mhz
[ 0.245501] script config pll8 to 408 Mhz
[ 0.245525] script config pll9 to 480 Mhz
[ 0.245539] script config pll10 to 297 Mhz
[ 0.245548] sunxi_default_clk_init
[ 0.245557] try to set pll6ahb1 to 200000000
[ 0.245611] try to set ahb clk source to pll6ahb1
[ 0.245621] set ahb clk source to pll6ahb1
[ 0.245640] set apb2 to low freq 1.2 Mhz
[ 0.245668] set ahb clk source to pll6
[ 0.245678] recove apb2 to pre freq 24000000
[ 0.245694] try to set ahb1 to 200000000
[ 0.245706] try to set apb1 to 100000000
[ 0.245723] script config apb2 to 37 Mhz
[ 0.250815] bio: create slab <bio-0> at 0
[ 0.250815] [ARISC] :sunxi-arisc driver v1.60
[ 0.288123] [ARISC] :arisc version: [v0.0.76]
[ 0.288138] [sunxi-module]: arisc register success
[ 0.507422] [ARISC] :sunxi-arisc driver v1.60 startup succeeded
[ 0.510544] SCSI subsystem initialized
[ 0.510687] usbcore: registered new interface driver usbfs
[ 0.510764] usbcore: registered new interface driver hub
[ 0.510807] usbcore: registered new device driver usb
[ 0.510807] twi_chan_cfg()350 - [twi0] has no twi_regulator.
[ 0.510807] twi_chan_cfg()350 - [twi1] has no twi_regulator.
[ 0.510807] twi_chan_cfg()350 - [twi2] has no twi_regulator.
[ 0.510807] twi_chan_cfg()358 - [twi1] has no power_ctrl!
[ 0.510807] Linux video capture interface: v2.00
[ 0.510037] axp22_board axp22_board: AXP (CHIP ID: 0x06) detected
[ 0.511789] axp22_dcdc1: 1600 <--> 3400 mV at 3300 mV
[ 0.511789] axp22_dcdc2: 600 <--> 1540 mV at 1100 mV
[ 0.511789] axp22_dcdc3: 600 <--> 1860 mV at 1240 mV
[ 0.511789] axp22_dcdc4: 600 <--> 1540 mV at 1100 mV
[ 0.511789] axp22_dcdc5: 1000 <--> 2550 mV at 1350 mV
[ 0.511789] axp22_rtc: 3000 mV
[ 0.511789] axp22_aldo1: 700 <--> 3300 mV at 3300 mV
[ 0.511789] axp22_aldo2: 700 <--> 3300 mV at 2500 mV
[ 0.511789] axp22_aldo3: 700 <--> 3300 mV at 3000 mV
[ 0.511789] axp22_dldo1: 700 <--> 3300 mV at 700 mV
[ 0.511789] axp22_dldo2: 700 <--> 3300 mV at 700 mV
[ 0.511789] axp22_dldo3: 700 <--> 3300 mV at 700 mV
[ 0.511789] axp22_dldo4: 700 <--> 3300 mV at 700 mV
[ 0.520085] axp22_eldo1: 700 <--> 3300 mV at 700 mV
[ 0.520085] axp22_eldo1: supplied by axp22_dcdc1
[ 0.520295] axp22_eldo2: 700 <--> 3300 mV at 700 mV
[ 0.520295] axp22_eldo2: supplied by axp22_dcdc1
[ 0.520295] axp22_eldo3: 700 <--> 3300 mV at 700 mV
[ 0.520295] axp22_eldo3: supplied by axp22_dcdc1
[ 0.520295] axp22_dc5ldo: 700 <--> 1400 mV at 1100 mV
[ 0.520295] axp22_ldoio0: 700 <--> 3300 mV at 3800 mV
[ 0.520295] axp22_ldoio1: 700 <--> 3300 mV at 3800 mV
[ 0.520295] axp22_dc1sw: at 700 mV
[ 0.520295] axp22_dc1sw: supplied by axp22_dcdc1
[ 0.520425] input: axp22-supplyer as /devices/platform/axp22_board/axp22-supplyer.20/input/input0
[ 0.520721] now_rest_vol = 0
[ 0.520721] Advanced Linux Sound Architecture Driver Version 1.0.25.
[ 0.521079] cfg80211: Calling CRDA to update world regulatory domain
[ 0.521144] Switching to clocksource arch_sys_counter
[ 0.535453] FS-Cache: Loaded
[ 0.535781] CacheFiles: Loaded
[ 0.546359] [usb_manager]: CONFIG_USB_SUNXI_USB0_OTG
[ 0.546397] get usbc0(usb_restrict pin) failed
[ 0.546808] [sw_udc]: udc_init: version 20080411
[ 0.547406] [ddrfreq] dram_clk value is 600
[ 0.547418] [ddrfreq] sunxi_ddrfreq_max=600000
[ 0.547429] [ddrfreq] dram_type value is 3
[ 0.547440] [ddrfreq] dram_zq value is 0x3bbb
[ 0.547450] [ddrfreq] dram_odt_en value is 1
[ 0.547462] [ddrfreq] dram_para1 value is 0x10f20200
[ 0.547473] [ddrfreq] dram_para2 value is 0x0
[ 0.547484] [ddrfreq] dram_mr0 value is 0x1c70
[ 0.547494] [ddrfreq] dram_mr1 value is 0x40
[ 0.547504] [ddrfreq] dram_mr2 value is 0x18
[ 0.547515] [ddrfreq] dram_mr3 value is 0x0
[ 0.547525] [ddrfreq] dram_tpr0 value is 0x47a14f
[ 0.547536] [ddrfreq] dram_tpr1 value is 0x1c2294c
[ 0.547547] [ddrfreq] dram_tpr2 value is 0x69049
[ 0.547558] [ddrfreq] dram_tpr3 value is 0x0
[ 0.547568] [ddrfreq] dram_tpr4 value is 0x0
[ 0.547579] [ddrfreq] dram_tpr5 value is 0x0
[ 0.547589] [ddrfreq] dram_tpr6 value is 0x0
[ 0.547599] [ddrfreq] dram_tpr7 value is 0x0
[ 0.547610] [ddrfreq] dram_tpr8 value is 0x0
[ 0.547620] [ddrfreq] dram_tpr9 value is 0x0
[ 0.547630] [ddrfreq] dram_tpr10 value is 0x0
[ 0.547641] [ddrfreq] dram_tpr11 value is 0x0
[ 0.547651] [ddrfreq] dram_tpr12 value is 168
[ 0.547661] [ddrfreq] sunxi_ddrfreq_min=168000
[ 0.547671] [ddrfreq] dram_tpr13 value is 0x10901
[ 0.547855] [dsm] use sysconfig
[ 0.547865] [dsm] -----------Dram scene-freq Table------------
[ 0.547877] [dsm] scene = 0 frequency = 600000KHz
[ 0.547887] [dsm] scene = 1 frequency = 360000KHz
[ 0.547898] [dsm] scene = 2 frequency = 240000KHz
[ 0.547908] [dsm] scene = 3 frequency = 168000KHz
[ 0.547918] [dsm] --------------------------------------------
[ 0.548043] [ddrfreq] LV_count value is 3
[ 0.548067] [ddrfreq] ---------------Dram V-F Table---------------
[ 0.548080] [ddrfreq] voltage = 1100mv frequency = 552000KHz
[ 0.548091] [ddrfreq] voltage = 1100mv frequency = 360000KHz
[ 0.548102] [ddrfreq] voltage = 1100mv frequency = 0KHz
[ 0.548112] [ddrfreq] --------------------------------------------
[ 0.548259] [ddrfreq] last_vdd=1100
[ 0.548334] [ddrfreq] __sram_start: 0xc07fd000, __sram_end: 0xc07fe074, __sram_text_start: 0xf0000000, __sram_data_end: 0xf0001074
[ 0.548351] [ddrfreq] sunxi dramfreq probe ok!
[ 0.548695] NET: Registered protocol family 2
[ 0.549016] IP route cache hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.549654] TCP established hash table entries: 16384 (order: 5, 131072 bytes)
[ 0.549902] TCP bind hash table entries: 16384 (order: 5, 196608 bytes)
[ 0.550222] TCP: Hash tables configured (established 16384 bind 16384)
[ 0.550237] TCP: reno registered
[ 0.550254] UDP hash table entries: 256 (order: 1, 8192 bytes)
[ 0.550283] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[ 0.550614] NET: Registered protocol family 1
[ 0.551046] RPC: Registered named UNIX socket transport module.
[ 0.551060] RPC: Registered udp transport module.
[ 0.551070] RPC: Registered tcp transport module.
[ 0.551080] RPC: Registered tcp NFSv4.1 backchannel transport module.
[ 0.551521] [pm]aw_pm_init!
[ 0.551537] standby_mode = 1.
[ 0.551546] wakeup src cnt is : 1.
[ 0.551558] [exstandby]leave extended_standby_enable_wakeup_src : event 0x2000
[ 0.551570] [exstandby]leave extended_standby_enable_wakeup_src : wakeup_gpio_map 0x80
[ 0.551584] [exstandby]leave extended_standby_enable_wakeup_src : wakeup_gpio_group 0x0
[ 0.551598] sunxi_reg_init enter
[ 0.554978] NTFS driver 2.1.30 [Flags: R/W].
[ 0.555198] fuse init (API version 7.18)
[ 0.555680] msgmni has been set to 996
[ 0.557431] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 253)
[ 0.557452] io scheduler noop registered
<6>[ 0.557462] io scheduler deadline registered
[ 0.557567] io scheduler cfq registered (default)
[ 0.557978] pwm module init!
[ 0.558546] sw_uart_get_devinfo()1448 - uart0 has no uart_regulator.
[ 0.558566] sw_uart_get_devinfo()1448 - uart1 has no uart_regulator.
[ 0.558583] sw_uart_get_devinfo()1448 - uart2 has no uart_regulator.
[ 0.559120] uart0: ttyS0 at MMIO 0x1c28000 (irq = 32) is a SUNXI
[ 0.559145] sw_console_setup()1208 - console setup baud 115200 parity n bits 8, flow n
[ 0.559169] sw_uart_set_termios()690 - sw_uart_set_termios:uart0 set baudrate: 115200, real baud is 117187
[ 0.613163] axp22_mfd_irq_work: 4000020000:600080cf6c
[ 0.613511] axp22_mfd_irq_work: 20000:600080cf6c
[ 0.709413] console [ttyS0] enabled
[ 0.709774] uart1: ttyS1 at MMIO 0x1c28400 (irq = 33) is a SUNXI
[ 0.710091] uart2: ttyS2 at MMIO 0x1c28800 (irq = 34) is a SUNXI
[ 0.714768] loop: module loaded
[ 0.714951] [MCU_UART] sent ap resume event to mcu
[ 0.715132] TIMER1_INTVAL_REG = 5dc
[ 0.715299] jiffies initialized success
[ 0.715307] [lds]: lds_module_init module init!
[ 0.715482] [lds]: lds_motor_probe
[ 0.715697] [lds]: request irq, 9!
[ 0.715815] [lds]: allocate gpio irq 9 ok
[ 0.716165] input: lds_input as /devices/virtual/input/input1
[ 0.716239] [wifi_pm]: select wifi: rtl8189es !!
[ 0.716404] [rtl8189es]: exec rtl8189es_wifi_gpio_init
[ 0.716415] [rtl8189es]: module power name axp22_dldo1
[ 0.716424] [rtl8189es]: failed to fetch wifi_power_ext1
[ 0.716433] [rtl8189es]: failed to fetch wifi_power_ext2
[ 0.716442] [rtl8189es]: use wifi card shutdown pin
[ 0.716450] [rtl8189es]: rtl8189es module power set by axp.
[ 0.716507] [rtl8189es]: first time
[ 0.803144] [rtl8189es]: regulator on.
[ 0.903898] [rtl8189es]: gpio rtl8189es_shdn set val 0, act val 0
[ 2.017587] [wifi_pm]: wifi gpio init is OK !!
[ 2.022497] module init!
[ 2.025271] [hwinfo]: hwinfo_mod_init E
[ 2.029463] [hwinfo]: 0, 0
[ 2.032439] [hwinfo]: 2, 0
[ 2.035606] tun: Universal TUN/TAP device driver, 1.6
[ 2.041230] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[ 2.048203] PPP generic driver version 2.4.2
[ 2.053089] PPP BSD Compression module registered
[ 2.058226] PPP Deflate Compression module registered
[ 2.064619] PPP MPPE Compression module registered
[ 2.069851] NET: Registered protocol family 24
[ 2.074756] [sw_hcd0]: usb host driver initialize........
[ 2.080754] [sw_hcd0]: open_usb_clock
[ 2.084836] get usb_regulator id vbus is nocare
[ 2.089777] [sunxi_hcd0]: host_init_state = 0
[ 2.094545] [sw_hcd0]: platform is usb host
[ 2.099159] [sw_hcd0]: sunxi_hcd_init_controller: sunxi_hcd_host0: USB Host mode controller at f1c19000 using PIO, IRQ 103
[ 2.111259] sunxi_hcd_host0 sunxi_hcd_host0: sunxi_hcd host driver
[ 2.118009] sunxi_hcd_host0 sunxi_hcd_host0: new USB bus registered, assigned bus number 1
[ 2.127769] hub 1-0:1.0: USB hub found
[ 2.131895] hub 1-0:1.0: 1 port detected
[ 2.136579] [sw_hcd0]: sunxi_usb_host0_disable start
[ 2.142020] [sw_hcd0]: sunxi_hcd_wait_for_disconnect cnt=0
[ 2.148012] [sunxi_hcd_host0]: Set USB Power OFF
[ 2.153065] -------sunxi_hcd0_soft_disconnect---------
[ 2.158670] wrn: hcd is not enable, need not stop hcd
[ 2.164191] [sunxi_hcd_host0]: Set USB Power OFF
[ 2.169252] [sw_hcd0]: close_usb_clock
[ 2.173376] [sw_hcd0]: sunxi_usb_host0_disable end
[ 2.179354] sunxi-rtc sunxi-rtc: rtc core: registered sunxi-rtc as rtc0
[ 2.186731] sunxi cedar version 0.1
[ 2.190702] [cedar]: install start!!!
[ 2.194895] [cedar]: install end!!!
[ 2.202595] sunxi_wdt_init_module: sunxi WatchDog Timer Driver v1.0
[ 2.209642] sunxi_wdt_probe: devm_ioremap return wdt_reg 0xf1c20ca0, res->start 0x01c20ca0, res->end 0x01c20cbf
[ 2.220728] sunxi wdt request irq 57 ok
[ 2.225105] sunxi_wdt_probe: initialized (g_timeout=16s, g_nowayout=0)
[ 2.232317] [boot_reason]: br_wdt_check entry
[ 2.237181] sunxi wdt start in uboot
[ 2.241635] device-mapper: ioctl: 4.22.0-ioctl (2011-10-19) initialised: dm-devel@redhat.com
[ 2.251170] autohotplug_init init ok
[ 2.255097] sunxi_cpufreq_initcall: clocks pll=1008000000,cpu=1008000000,axi=336000000
[ 2.263764] cur: pll=1008000000, cpudiv=1, axidiv=3
[ 2.269104] axp22_dcdc3: Failed to create debugfs directory
[ 2.275214] sunxi_cpufreq_initcall, get cpu frequency from sysconfig, max freq: 1200MHz, min freq: 648MHz
[ 2.285698] -------------------CPU V-F Table--------------------
[ 2.292263] frequency = 1536000KHz voltage = 1500mv
[ 2.297772] frequency = 1344000KHz voltage = 1460mv
[ 2.303294] frequency = 1200000KHz voltage = 1360mv
[ 2.308804] frequency = 1008000KHz voltage = 1240mv
[ 2.314329] frequency = 816000KHz voltage = 1140mv
[ 2.319744] frequency = 648000KHz voltage = 1140mv
[ 2.325169] frequency = 0KHz voltage = 1120mv
[ 2.330406] frequency = 0KHz voltage = 1120mv
[ 2.335631] -----------------------------------------------------
[ 2.342624] [mmc]: SD/MMC/SDIO Host Controller Driver(v1.117 2015-12-1 14:13) Compiled in Jan 9 2021 at 09:34:37
[ 2.353882] [mmc]: get mmc1's sdc_power failed
[ 2.358751] [mmc]: get mmc2's sdc_power failed
[ 2.363615] [mmc]: get mmc2's 2xmode ok, val = 1
[ 2.368652] [mmc]: get mmc2's ddrmode ok, val = 1
[ 2.373799] [mmc]: MMC host used card: 0x6, boot card: 0x4, io_card 2
[ 2.382392] [mmc]: mmc not poweroff notifiy
[ 2.386964] [mmc]: sdc2 set ios: clk 0Hz bm OD pm OFF vdd 3.3V width 1 timing LEGACY(SDR12) dt B
[ 2.397728] [mmc]: sdc2 set ios: clk 0Hz bm PP pm UP vdd 3.3V width 1 timing LEGACY(SDR12) dt B
[ 2.407550] [mmc]: mmc not poweroff notifiy
[ 2.408784] [mmc]: sdc2 power_supply is null
[ 2.416778] [mmc]: sdc1 set ios: clk 0Hz bm OD pm OFF vdd 3.3V width 1 timing LEGACY(SDR12) dt B
[ 2.420042] [mmc]: sdc2 set ios: clk 400000Hz bm PP pm ON vdd 3.3V width 1 timing LEGACY(SDR12) dt B
[ 2.439795] usbcore: registered new interface driver usbhid
[ 2.440886] [mmc]: *** sunxi_mci_dump_errinfo(L828): smc 2 err, cmd 52, RTO !!
[ 2.441749] [mmc]: *** sunxi_mci_dump_errinfo(L828): smc 2 err, cmd 52, RTO !!
[ 2.441782] [mmc]: sdc2 set ios: clk 400000Hz bm PP pm ON vdd 3.3V width 1 timing LEGACY(SDR12) dt B
[ 2.444277] [mmc]: sdc2 set ios: clk 400000Hz bm PP pm ON vdd 3.3V width 1 timing LEGACY(SDR12) dt B
[ 2.446192] [mmc]: *** sunxi_mci_dump_errinfo(L828): smc 2 err, cmd 8, RTO !!
[ 2.446218] *******************Try sdio*******************
[ 2.447047] [mmc]: *** sunxi_mci_dump_errinfo(L828): smc 2 err, cmd 5, RTO !!
[ 2.447894] [mmc]: *** sunxi_mci_dump_errinfo(L828): smc 2 err, cmd 5, RTO !!
[ 2.448739] [mmc]: *** sunxi_mci_dump_errinfo(L828): smc 2 err, cmd 5, RTO !!
[ 2.449584] [mmc]: *** sunxi_mci_dump_errinfo(L828): smc 2 err, cmd 5, RTO !!
[ 2.449611] *******************Try sd *******************
[ 2.450442] [mmc]: *** sunxi_mci_dump_errinfo(L828): smc 2 err, cmd 55, RTO !!
[ 2.451289] [mmc]: *** sunxi_mci_dump_errinfo(L828): smc 2 err, cmd 55, RTO !!
[ 2.452137] [mmc]: *** sunxi_mci_dump_errinfo(L828): smc 2 err, cmd 55, RTO !!
[ 2.452984] [mmc]: *** sunxi_mci_dump_errinfo(L828): smc 2 err, cmd 55, RTO !!
[ 2.453011] *******************Try mmc*******************
[ 2.453023] [mmc]: sdc2 set ios: clk 400000Hz bm OD pm ON vdd 3.3V width 1 timing LEGACY(SDR12) dt B
[ 2.453460] [mmc]: sdc2 set ios: clk 400000Hz bm OD pm ON vdd 3.3V width 1 timing LEGACY(SDR12) dt B
[ 2.453559] [mmc]: sdc2 set ios: clk 400000Hz bm OD pm ON vdd 3.3V width 1 timing LEGACY(SDR12) dt B
[ 2.453654] [mmc]: sdc2 set ios: clk 400000Hz bm OD pm ON vdd 3.3V width 1 timing LEGACY(SDR12) dt B
[ 2.456140] [mmc]: sdc2 set ios: clk 400000Hz bm OD pm ON vdd 3.3V width 1 timing LEGACY(SDR12) dt B
[ 2.491273] [mmc]: sdc2 set ios: clk 400000Hz bm PP pm ON vdd 3.3V width 1 timing LEGACY(SDR12) dt B
[ 2.491929] [hwinfo]: 1, 0
[ 2.491936] [hwinfo]: EMMC: 17, 0x34473630
[ 2.503820] [mmc]: sdc2 set ios: clk 25000000Hz bm PP pm ON vdd 3.3V width 1 timing LEGACY(SDR12) dt B
[ 2.503945] [mmc]: sdc2 set ios: clk 25000000Hz bm PP pm ON vdd 3.3V width 1 timing MMC-HS(SDR20) dt B
[ 2.504009] [mmc]: sdc2 set ios: clk 50000000Hz bm PP pm ON vdd 3.3V width 1 timing MMC-HS(SDR20) dt B
[ 2.504513] [mmc]: sdc2 set ios: clk 50000000Hz bm PP pm ON vdd 3.3V width 8 timing MMC-HS(SDR20) dt B
[ 2.504690] [mmc]: sdc2 set ios: clk 50000000Hz bm PP pm ON vdd 3.3V width 8 timing UHS-DDR50 dt B
[ 2.504755] [mmc]: sdc2 set ios: clk 50000000Hz bm PP pm ON vdd 3.3V width 8 timing UHS-DDR50 dt B
[ 2.504858] mmc0: new high speed DDR MMC card at address 0001
[ 2.505296] mmcblk0: mmc0:0001 004G60 3.68 GiB
[ 2.505518] mmcblk0boot0: mmc0:0001 004G60 partition 1 2.00 MiB
[ 2.505727] mmcblk0boot1: mmc0:0001 004G60 partition 2 2.00 MiB
[ 2.506700] mmcblk0: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 >
[ 2.506748] mmcblk0: p1 size 3366912 extends beyond EOD, truncated
[ 2.509535] mmcblk0boot1: unknown partition table
[ 2.510761] mmcblk0boot0: unknown partition table
[ 2.510967] *******************mmc init ok *******************
[ 2.576242] usbhid: USB HID core driver
[ 2.672381] [audiocodec] : aif2 not used!
[ 2.761094] [audiocodec] : aif3 not used!
[ 2.767117] asoc: sndcodec <-> sunxi-codec mapping ok
[ 2.773682] u32 classifier
[ 2.776635] Actions configured
[ 2.780361] Netfilter messages via NETLINK v0.30.
[ 2.785558] nf_conntrack version 0.5.0 (7973 buckets, 31892 max)
[ 2.792534] ctnetlink v0.93: registering with nfnetlink.
[ 2.798385] NF_TPROXY: Transparent proxy support initialized, version 4.1.0
[ 2.805989] NF_TPROXY: Copyright (c) 2006-2007 BalaBit IT Ltd.
[ 2.812776] xt_time: kernel timezone is -0000
[ 2.817918] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 2.823903] arp_tables: (C) 2002 David S. Miller
[ 2.829003] TCP: cubic registered
[ 2.832634] Initializing XFRM netlink socket
[ 2.837607] NET: Registered protocol family 10
[ 2.843384] Mobile IPv6
[ 2.846081] ip6_tables: (C) 2000-2006 Netfilter Core Team
[ 2.852177] NET: Registered protocol family 17
[ 2.857047] NET: Registered protocol family 15
[ 2.861924] L2TP core driver, V2.0
[ 2.865649] PPPoL2TP kernel driver, V2.0
[ 2.869924] L2TP IP encapsulation support (L2TPv3)
[ 2.875228] L2TP netlink interface
[ 2.878970] L2TP ethernet pseudowire support (L2TPv3)
[ 2.884687] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
[ 2.893074] ThumbEE CPU extension supported.
[ 2.897739] Registering SWP/SWPB emulation handler
[ 2.903763] axp22_dc5ldo: incomplete constraints, leaving on
[ 2.910269] axp22_aldo3: incomplete constraints, leaving on
[ 2.916403] axp22_aldo2: incomplete constraints, leaving on
[ 2.922552] axp22_aldo1: incomplete constraints, leaving on
[ 2.928685] axp22_rtc: incomplete constraints, leaving on
[ 2.934633] axp22_dcdc5: incomplete constraints, leaving on
[ 2.940771] axp22_dcdc4: incomplete constraints, leaving on
[ 2.946892] axp22_dcdc3: incomplete constraints, leaving on
[ 2.953038] axp22_dcdc2: incomplete constraints, leaving on
[ 2.959177] axp22_dcdc1: incomplete constraints, leaving on
[ 2.965511] [boot_reason]: module init!
[ 2.969720] otg_wakelock_init: No USB transceiver found
[ 2.975480] sunxi-rtc sunxi-rtc: setting system clock to 1970-01-01 00:00:06 UTC (6)
[ 2.983967] ths_fetch_sysconfig_para: type err device_used = 1.
[ 2.990630] ths_fetch_sysconfig_para: type err ths_trip1_3 = 110.
[ 2.997384] ths_fetch_sysconfig_para: type err ths_trip1_4 = 110.
[ 3.004166] ths_fetch_sysconfig_para: type err ths_trip1_5 = 110.
[ 3.010930] ths_fetch_sysconfig_para: type err ths_trip1_6 = 110.
[ 3.017669] ths_fetch_sysconfig_para: type err ths_trip1_7 = 110.
[ 3.024427] ths_fetch_sysconfig_para: type err ths_trip1_3_min = 0.
[ 3.031368] ths_fetch_sysconfig_para: type err ths_trip1_3_max = 0.
[ 3.038296] ths_fetch_sysconfig_para: type err ths_trip1_4_min = 0.
[ 3.045264] ths_fetch_sysconfig_para: type err ths_trip1_4_max = 0.
[ 3.052221] ths_fetch_sysconfig_para: type err ths_trip1_5_min = 0.
[ 3.059161] ths_fetch_sysconfig_para: type err ths_trip1_5_max = 0.
[ 3.066117] ths_fetch_sysconfig_para: type err ths_trip1_6_min = 0.
[ 3.073068] ths_fetch_sysconfig_para: type err ths_trip1_6_max = 0.
[ 3.079997] ths_fetch_sysconfig_para: type err ths_trip2_count = 0.
[ 3.086954] ths_fetch_sysconfig_para: type err ths_trip2_0 = 0.
[ 3.093734] input: sunxi-ths as /devices/virtual/input/input2
[ 3.100460] suxi_ths: Kernel Thermal management registered
[ 3.106469] fetch C0_LV_count from sysconfig failed
[ 3.112276] CPU Budget:Register notifier
[ 3.116566] CPU Budget:register Success
[ 3.120778] sunxi-budget-cooling sunxi-budget-cooling: Cooling device registered: thermal-budget-0
[ 3.133766] ALSA device list:
[ 3.137019] #0: audiocodec
[ 3.140375] sw_uart_startup()601 - ttyS0 start up by swapper/0, pid 1
[ 3.147448] sw_uart_set_termios()690 - sw_uart_set_termios:uart0 set baudrate: 115200, real baud is 117187
[ 3.163482] EXT4-fs (mmcblk0p8): mounted filesystem with ordered data mode. Opts: (null)
[ 3.172386] VFS: Mounted root (ext4 filesystem) on device 179:8.
[ 3.180695] devtmpfs: mounted
[ 3.184170] Freeing init memory: 276K
Mount failed for selinuxfs on /sys/fs/selinux: No such file or directory
[ 3.250077] sw_uart_shutdown()633 - ttyS0 shut down by init, pid 1
[ 3.327113] sw_uart_startup()601 - ttyS0 start up by init, pid 79
[ 3.333885] sw_uart_set_termios()690 - sw_uart_set_termios:uart0 set baudrate: 115200, real baud is 117187
[ 3.363877] sw_uart_shutdown()633 - ttyS0 shut down by plymouth-upstar, pid 79
[ 3.407468] init: plymouth-upstart-bridge main process (79) terminated with status 1
[ 3.416234] init: plymouth-upstart-bridge main process ended, respawning
[ 3.429400] sw_uart_startup()601 - ttyS0 start up by init, pid 89
[ 3.436247] sw_uart_set_termios()690 - sw_uart_set_termios:uart0 set baudrate: 115200, real baud is 117187
[ 3.458091] sw_uart_shutdown()633 - ttyS0 shut down by plymouth-upstar, pid 89
[ 3.488904] init: plymouth-upstart-bridge main process (89) terminated with status 1
[ 3.497461] init: plymouth-upstart-bridge main process ended, respawning
[ 3.509274] init: ureadahead main process (82) terminated with status 5
[ 3.522144] sw_uart_startup()601 - ttyS0 start up by init, pid 93
[ 3.528878] sw_uart_set_termios()690 - sw_uart_set_termios:uart0 set baudrate: 115200, real baud is 117187
[ 3.547401] sw_uart_shutdown()633 - ttyS0 shut down by plymouth-upstar, pid 93
[ 3.565300] init: plymouth-upstart-bridge main process (93) terminated with status 1
[ 3.573949] init: plymouth-upstart-bridge main process ended, respawning
[ 3.592462] sw_uart_startup()601 - ttyS0 start up by init, pid 98
[ 3.599173] sw_uart_set_termios()690 - sw_uart_set_termios:uart0 set baudrate: 115200, real baud is 117187
[ 3.663084] EXT4-fs (mmcblk0p1): mounted filesystem with ordered data mode. Opts: nomblk_io_submit,errors=remount-ro
[ 3.805452] EXT4-fs (mmcblk0p6): mounted filesystem with ordered data mode. Opts: nomblk_io_submit,errors=remount-ro
[ 3.903522] EXT4-fs (mmcblk0p10): mounted filesystem with ordered data mode. Opts: nomblk_io_submit,errors=remount-ro
[ 4.014292] EXT4-fs (mmcblk0p11): mounted filesystem with ordered data mode. Opts: nomblk_io_submit,errors=remount-ro
* Starting Signal sysvinit that the rootfs is mounted [ OK ]
* Starting Populate /dev filesystem [ OK ]
* Stopping Populate /dev filesystem [ OK ]
* Starting Clean /tmp directory [ OK ]
* Stopping Clean /tmp directory [ OK ]
* Starting Populate and link to /run filesystem [ OK ]
* Stopping Populate and link to /run filesystem [ OK ]
* Stopping Track if upstart is running in a container [ OK ]
* Starting Initialize or finalize resolvconf [ OK ]
* Starting set console keymap [ OK ]
* Starting Signal sysvinit that virtual filesystems are mounted [ OK ]
* Starting Signal sysvinit that virtual filesystems are mounted [ OK ]
* Stopping set console keymap [ OK ]
* Starting Signal sysvinit that remote filesystems are mounted [ OK ]
* Starting Bridge udev events into upstart [ OK ]
* Starting device node and kernel event manager [ OK ]
* Starting load modules from /etc/modules [ OK ]
* Starting cold plug devices [ OK ]
* Starting rockrobo play bootring service [ OK ]
* Starting log initial device creation [ OK ]
* Stopping load modules from /etc/modules [ OK ]
* Starting configure network device security [ OK ]
* Stopping Read required files in advance (for other mountpoints) [ OK ]
* Starting Mount network filesystems [ OK ]
* Stopping cold plug devices [ OK ]
* Starting set console font [ OK ]
* Stopping log initial device creation [ OK ]
* Stopping set console font [ OK ]
* Stopping Read required files in advance (for other mountpoints) [ OK ]
* Starting userspace bootsplash [ OK ]
* Stopping userspace bootsplash [ OK ]
* Starting Send an event to indicate plymouth is up [ OK ]
* Starting Signal sysvinit that local filesystems are mounted [ OK ]
* Starting configure network device security [ OK ]
* Starting configure network device [ OK ]
* Stopping Send an event to indicate plymouth is up [ OK ]
* Starting flush early job output to logs [ OK ]
* Starting adb daemon [ OK ]
* Stopping Failsafe Boot Delay [ OK ]
* Starting System V initialisation compatibility [ OK ]
* Stopping flush early job output to logs [ OK ]
* Stopping Mount network filesystems [ OK ]
* Starting configure virtual network devices [ OK ]
* Stopping System V initialisation compatibility [ OK ]
* Starting rrwatchdoge daemon [ OK ]
* Starting system logging daemon [ OK ]
* Starting System V runlevel compatibility [ OK ]
* Starting logrotate 5s check daemon [ OK ]
* Starting save kernel messages [ OK ]
* Starting regular background program processing daemon [ OK ]
* Stopping save kernel messages [ OK ]
dnsmasq: unknown interface wlan0
* Starting OpenSSH server [ OK ]
* Starting DNS forwarder and DHCP server dnsmasq [fail]
* Stopping System V runlevel compatibility [ OK ]
[ 7.322107] WDIOC_SETFUNCCONFIG: 1
[ 7.341094] WDIOC_SETFUNCCONFIG: 1
Ubuntu 14.04.3 LTS rockrobo ttyS0
rockrobo login:
接着，我们来找RX,RX简单，当给RX输入回车的时候，TX上就会有数据，利用这一个特性，把剩下的几根线接到USB转TTL上
虽然就几根线，小鱼也不会乱测试
选了TX附近的，刚好没有标测试点的
发送回车，测试
一发入魂
说起来这个，这家工程师也很有意思，别的测试点你都添加丝印，给名字，唯独串口附近这两三个你不加丝印，这不是此地无银三百两吗？
可以输入数据交互，接下来就准备破密码，切入系统了。
小鱼能不能成功进入系统？
下期揭晓！
最后声明，以上内容仅供学习参考，如有侵权，随时联系小鱼删文~
1757
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
