« previous next »
Pages: 1 2 [3] 4 5 6   Go Down

Author Topic: My new useless Nspire  (Read 30838 times)

0 Members and 4 Guests are viewing this topic.

Offline critor

  • Editor
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2079
  • Rating: +439/-13
    • View Profile
    • TI-Planet
Re: My new useless Nspire
« Reply #30 on: February 03, 2011, 08:36:34 pm »
The attached 1.4 OS is 100% identic to the one I tried to install 2 days ago.
When the computer "install OS" progress bar reaches 100%, I get the error "OS is invalid or damaged".


Yes, apcalc, you can send them my images or modified images, as you wish.


I think that my english written emails are being forwarded to the french speaking TI-Cares team, because of my registration... And either they know even less things than the english guys, either they don't understand english, either they do hate me (which is perfectly possible) :P
Logged
TI-Planet co-admin.

Offline Goplat

  • LV5 Advanced (Next: 300)
  • *****
  • Posts: 289
  • Rating: +82/-0
    • View Profile
Re: My new useless Nspire
« Reply #31 on: February 04, 2011, 12:59:08 am »
I recently found a boot code exploit that might be usable. No guarantee that it'll work on this older version, but it might... Are you interested?
Logged
Numquam te deseram; numquam te deficiam; numquam circa curram et te desolabo
Numquam te plorare faciam; numquam valedicam; numquam mendacium dicam et te vulnerabo

Offline DJ Omnimaga

  • Clacualters are teh gr33t
  • CoT Emeritus
  • LV15 Omnimagician (Next: --)
  • *
  • Posts: 55943
  • Rating: +3154/-232
  • CodeWalrus founder & retired Omnimaga founder
    • View Profile
    • Dream of Omnimaga Music
Re: My new useless Nspire
« Reply #32 on: February 04, 2011, 03:21:23 am »
Lol, they just sent a generic e-mail, as if they didn't know there were prototypes. X.x
Logged

Offline critor

  • Editor
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2079
  • Rating: +439/-13
    • View Profile
    • TI-Planet
Re: My new useless Nspire
« Reply #33 on: February 04, 2011, 04:08:27 am »
Quote from: Goplat on February 04, 2011, 12:59:08 am
I recently found a boot code exploit that might be usable. No guarantee that it'll work on this older version, but it might... Are you interested?


Yes. Please, tell me about it.
Logged
TI-Planet co-admin.

Offline Goplat

  • LV5 Advanced (Next: 300)
  • *****
  • Posts: 289
  • Rating: +82/-0
    • View Profile
Re: My new useless Nspire
« Reply #34 on: February 04, 2011, 01:06:41 pm »
I e-mailed you the details.
Logged
Numquam te deseram; numquam te deficiam; numquam circa curram et te desolabo
Numquam te plorare faciam; numquam valedicam; numquam mendacium dicam et te vulnerabo

Offline critor

  • Editor
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2079
  • Rating: +439/-13
    • View Profile
    • TI-Planet
Re: My new useless Nspire
« Reply #35 on: February 04, 2011, 03:10:54 pm »
Thank you Goplat.

The exploits are randomly triggering some things.
See your email.
Logged
TI-Planet co-admin.

Offline critor

  • Editor
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2079
  • Rating: +439/-13
    • View Profile
    • TI-Planet
Re: My new useless Nspire
« Reply #36 on: February 04, 2011, 05:55:16 pm »
Development boot2 1.1.8310 dumped.

It's running correctly if started directly by Goplat's emulator.
You even get the small square in the top left-hand corner.

Here's a log:

Code: [Select]
Boot Loader Stage 2 (1.1.8310)
Build: 2007/4/1, 23:28:14
Copyright (c)  2006, 2007 Texas Instruments Incorporated
Using developer keys
The last line usually said "Using production keys".

Same problem with the emulator of course: it won't install the OS.


But production boot1 1.1.8916 doesn't want to run the development boot2.

Code: [Select]
Boot Loader Stage 1 (1.1.8916)
Build: 2007/4/23, 23:37:16
Copyright (c) 2006, 2007 Texas Instruments Incorporated
Using production keys

Last boot progress: 0
Clocks:  CPU = 90MHz   AHB = 45MHz   APB = 22MHz

Available system memory: 37292
Checking for NAND: NAND Flash ID: ST Micro NAND256R3A
PM is turning the device OFF
PM has turned the device ON
SDRAM memory test:   Pass
Clearing SDRAM...Done.
Clearing SDRAM...Done.
Clearing SDRAM...Done.
Boot option: Normal

Read of bootdata failed

Loading DIAGS software...

Error reading/validating DIAGS image

Error loading DIAGS. Switching to BOOT2.

Loading BOOT2 software...

Error reading/validating BOOT2 image

Error loading BOOT2, looking for pre-installed images.
Checking for DIAGS image in pre-install area.
No DIAGS image found.
Checking for BOOT2 image in pre-install area.
Reading BOOT2 image from pre-install area.
Erasing old BOOT2 image.
Updating BOOT2 image.
BOOT2 image has been updated.
Finished loading pre-installed images.

Restarting now.

Boot Loader Stage 1 (1.1.8916)
Build: 2007/4/23, 23:37:16
Copyright (c) 2006, 2007 Texas Instruments Incorporated
Using production keys

Last boot progress: 1
Clocks:  CPU = 90MHz   AHB = 45MHz   APB = 22MHz

Available system memory: 37292
Checking for NAND: NAND Flash ID: ST Micro NAND256R3A
SDRAM memory test:   Pass
Clearing SDRAM...Done.
Clearing SDRAM...Done.
Clearing SDRAM...Done.
Boot option: Normal

Read of bootdata failed

Loading DIAGS software...

Error reading/validating DIAGS image

Error loading DIAGS. Switching to BOOT2.

Loading BOOT2 software...

20%Error reading/validating BOOT2 image

So upgrading my prototype would require to update both boot1 and boot2 simultaneously.
We can't even update the diags software correctly, so I suppose nobody wants to try that for now...

So we were right: I need a developer-signed 1.1 OS.



Edit: Diags is dumped too. The version is "simply" 1.1.8310.
« Last Edit: February 04, 2011, 06:05:40 pm by critor »
Logged
TI-Planet co-admin.

Offline Goplat

  • LV5 Advanced (Next: 300)
  • *****
  • Posts: 289
  • Rating: +82/-0
    • View Profile
Re: My new useless Nspire
« Reply #37 on: February 04, 2011, 07:05:51 pm »
It might be possible to use the exploit to patch boot2 in RAM and force it to accept a production OS. Much safer than trying to change boot1/boot2 in flash.
Logged
Numquam te deseram; numquam te deficiam; numquam circa curram et te desolabo
Numquam te plorare faciam; numquam valedicam; numquam mendacium dicam et te vulnerabo

Offline critor

  • Editor
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2079
  • Rating: +439/-13
    • View Profile
    • TI-Planet
Re: My new useless Nspire
« Reply #38 on: February 04, 2011, 07:19:22 pm »
Development Boot1 is now dumped too:

Code: [Select]
Boot Loader Stage 1 (1.1.8129)
Build: 2007/3/26, 23:28:47
Copyright (c) 2006, 2007 Texas Instruments Incorporated
Using developer keys
And as you can guess, it doesn't want to load a production boot2.



Goplat, do you think we could use the same trick to dump the 1.0 boot1/boot2/OS of a TI-Nspire CAS+ ?
If the hardware is not too different and if it's using the same developer keys, the 1.0 OS might be launched by my developer boot2 1.1.

Of course, the exploit may not be present...

But there's another difficulty: the TI-Nspire CAS+ are using a different transfer protocol and need the 1.0 version of the TI-Nspire Computer Link.
That version checks the TNC files before sending them to the calculator, and it's saying that all my current TNC files are bad.

Looking at the decompiled Java source code, it seems to look for a manifest file inside the TNC archive. But I cannot figure out everything as a part of the code is called through JNI.
« Last Edit: February 04, 2011, 07:20:31 pm by critor »
Logged
TI-Planet co-admin.

Offline jnesselr

  • King Graphmastur
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2270
  • Rating: +81/-20
  • TAO == epic
    • View Profile
Re: My new useless Nspire
« Reply #39 on: February 04, 2011, 07:54:42 pm »
Do you have the library file?
Logged

Offline critor

  • Editor
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2079
  • Rating: +439/-13
    • View Profile
    • TI-Planet
Re: My new useless Nspire
« Reply #40 on: February 04, 2011, 08:00:09 pm »
Logged
TI-Planet co-admin.

Offline Galandros

  • LV9 Veteran (Next: 1337)
  • *********
  • Posts: 1140
  • Rating: +42/-10
    • View Profile
Re: My new useless Nspire
« Reply #41 on: February 04, 2011, 08:05:23 pm »
Well done!
I am eager to know interesting finds in the boot code and who knows the OS if it is still there somewhere in the memory. If someone of the community get their hands in a prototype with its original working OS.

I became amused after seeing screenshot with "Using developer keys" on it.
No hell of a idea on how, in practical, to get an developer signed OS. Supposedly only TI staff have access to that and it would be really surprising to see them giving away that by mail.
Logged
Hobbing in calculator projects.

Offline willrandship

  • Omnimagus of the Multi-Base.
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2953
  • Rating: +98/-13
  • Insert sugar to begin programming subroutine.
    • View Profile
Re: My new useless Nspire
« Reply #42 on: February 04, 2011, 08:08:02 pm »
Haha my exploit idea in action. Probably not useable though, but I knew that message meant something, and I bet there's a way to change it so it uses the "Dev Keys"

@Galandros that was about Goplat's exploit in Boot2
« Last Edit: February 04, 2011, 08:19:12 pm by willrandship »
Logged

Offline bsl

  • LV4 Regular (Next: 200)
  • ****
  • Posts: 157
  • Rating: +14/-0
    • View Profile
Re: My new useless Nspire
« Reply #43 on: February 06, 2011, 11:53:22 am »
Quote from: Goplat on February 04, 2011, 07:05:51 pm
It might be possible to use the exploit to patch boot2 in RAM and force it to accept a production OS. Much safer than trying to change boot1/boot2 in flash.
..... Or accept anything else - like a Linux kernel   ;D  ;D  ;D
Logged

Offline critor

  • Editor
  • LV11 Super Veteran (Next: 3000)
  • ***********
  • Posts: 2079
  • Rating: +439/-13
    • View Profile
    • TI-Planet
Re: My new useless Nspire
« Reply #44 on: February 06, 2011, 05:45:17 pm »
Apcalc,  have you answered to the TI-Cares email?

It would be great if we could get an OS signed by the developer keys...
Logged
TI-Planet co-admin.
Pages: 1 2 [3] 4 5 6   Go Up
« previous next »