0 Members and 2 Guests are viewing this topic.
I recently found a boot code exploit that might be usable. No guarantee that it'll work on this older version, but it might... Are you interested?
Boot Loader Stage 2 (1.1.8310)Build: 2007/4/1, 23:28:14Copyright (c) 2006, 2007 Texas Instruments IncorporatedUsing developer keys
Boot Loader Stage 1 (1.1.8916)Build: 2007/4/23, 23:37:16Copyright (c) 2006, 2007 Texas Instruments IncorporatedUsing production keysLast boot progress: 0Clocks: CPU = 90MHz AHB = 45MHz APB = 22MHzAvailable system memory: 37292Checking for NAND: NAND Flash ID: ST Micro NAND256R3APM is turning the device OFFPM has turned the device ONSDRAM memory test: PassClearing SDRAM...Done.Clearing SDRAM...Done.Clearing SDRAM...Done.Boot option: NormalRead of bootdata failedLoading DIAGS software...Error reading/validating DIAGS imageError loading DIAGS. Switching to BOOT2.Loading BOOT2 software...Error reading/validating BOOT2 imageError loading BOOT2, looking for pre-installed images.Checking for DIAGS image in pre-install area.No DIAGS image found.Checking for BOOT2 image in pre-install area.Reading BOOT2 image from pre-install area.Erasing old BOOT2 image.Updating BOOT2 image.BOOT2 image has been updated.Finished loading pre-installed images.Restarting now.Boot Loader Stage 1 (1.1.8916)Build: 2007/4/23, 23:37:16Copyright (c) 2006, 2007 Texas Instruments IncorporatedUsing production keysLast boot progress: 1Clocks: CPU = 90MHz AHB = 45MHz APB = 22MHzAvailable system memory: 37292Checking for NAND: NAND Flash ID: ST Micro NAND256R3ASDRAM memory test: PassClearing SDRAM...Done.Clearing SDRAM...Done.Clearing SDRAM...Done.Boot option: NormalRead of bootdata failedLoading DIAGS software...Error reading/validating DIAGS imageError loading DIAGS. Switching to BOOT2.Loading BOOT2 software...20%Error reading/validating BOOT2 image
Boot Loader Stage 1 (1.1.8129)Build: 2007/3/26, 23:28:47Copyright (c) 2006, 2007 Texas Instruments IncorporatedUsing developer keys
It might be possible to use the exploit to patch boot2 in RAM and force it to accept a production OS. Much safer than trying to change boot1/boot2 in flash.