Here's rx1950 nand flash layout:

0x0000 - 0x1000 - First stage bootloader
0x1000 - 0x4000 - Some data, i.e. wifi mac is here
0x4000 - 0x44000 - Second stage bootloader. This block starts with 0x1000 byte header,
0x44000 - 0x-------- - WinCE image. This block starts with 0x400-byte partition table (???) followed by 0x1000 byte header (almost same as bootloader, but different addresses)

Bootloader header looks like this:
0xfe 0x03 0x00 0xea ; some magic bytes?
0x00 * 0x3c ; 0x3c zeros
0x45 0x43 0x45 0x43 ; "ECEC" - more magic bytes?
0x8c0b5dcc ; stored in little endian format, virtual address in ram where image ends
0x00035dcc ; stored in little endian format, image size
0x00 * 0xfb4 ; 0xfb4 zeros

So, bootloader will be loaded at 0x8c0b5dcc - 0x00035dcc = 0x8c080000 (virtual address)

WinCE header looks almost the same, except address is 0x8014e388 and size is 0x0014e388, so WinCE image will be loaded at 0x80000000 (virtual)

WinCE partition table is not looking interesting to me, we're not going to use WinCE-compatible FS :)

So, rx1950 will use following mtd partition table:
0x00000000-0x00004000 : "Boot0"
0x00004000-0x00044000 : "Boot1"
0x00044000-0x00344000 : "Kernel"
0x00344000-0x04000000 : "Filesystem"

If anyone interested in Boot0/Boot1/Kernel images - I can put it on tuxfamily ftp :)

P.S. I ported basic rx1950 patches to latest git kernel, and I'm going to submit it mainstream again :)

Comments

Anonymous said…
Since, the rx3000 series uses pretty much the same hardware specs with the exception of the different (but compatible) S3C2440A, and the older revision of WLAN and sound hardware, would you consider adding support for the rx3000 series, since the port seems to have disappeared. Since the root file systems are compatible (correct me if I am wrong), the only thing that would need to be done, is compile a separate kernel for the rx3000 series.
March 7, 2010 at 8:38 PM
anarsoul said…
Sorry, but I don't own rx3000, so I doubt that compiled kernel will work (As it doesn't for h1940 - we need some fixes to make mainline kernel work on h1940) and I can't fix it without testing, however Daniel Faulkner worked on rx3000 port about a year ago - you should contact him - daniel d0t faulkner at boltblue d0t com, or you can compile it by yourself - it's easy :)
March 7, 2010 at 9:28 PM
Post a Comment

Popular posts from this blog

Access point with Raspberry Pi and rtl8192cu dongle

On Thursday ethernet ports (WAN and LAN1-4) in my Asus WL500GPv1 router have completely died, so I needed a replacement. Hopefully, recently I've got Raspberry Pi, so I decided to use it as a router. I've got TP-LINK TL-WN821NC USB stick from local store which is based on RTL8192CU chipset. Unfortunately, its driver doesn't work with vanilla hostapd, but requires patched ancient version of hostapd from Realtek . I'm using Archlinux on my rpi and I've found manual how to setup AP using this USB stick  here , but I don't want to overwrite binaries from repository packages, since it's not a sane way, and it can (and will) be broken by hostapd update. So I prepared a package, here's source package (just unpack it and build with makepkg directly on rpi), and here's binary package for armv6h (you can install it with pacman -U). I can't put PKGBUILD in AUR, since there's no stable hosting for Realtek's hostapd. If anyone is willing to host
Read more

Wayland and software rendering

Image
Recently I spent few evenings for hacking wayland . I like idea of wayland - rendering is done completely on client (in whatever way), compositor (server part) is responsible in rendering buffers from clients on the screen. Issue for me was rendering part of weston (reference compositor for wayland) - it uses GLES for compositing, but I want to try wayland and weston on devices without hw acceleration (pure software rendering), and running software GL on PXA270@312MHz does not sound like a good idea, does it? :) So I asked on #wayland@irc.freenode.org if it possible to implement software renderer, Kristian Høgsberg (khr) responded that in master branch of weston repo there's a nice abstraction of renderer, so it's possible to implement pixman renderer. So I did :) weston with x11-backend and pixman renderer khr and pq from #wayland were very helpful, and described place of renderer in wayland architecture, here're some points renderer just performs rendering of
Read more

qemu with Z2 support

I spent some days getting qemu to emulate some Z2 hardware, and got some results :) Almost all hw is emulated, it lacks only voltage regulator and WiFi, but it's not easy to implement Marvell's WiFi chip, because there's no datasheet, and anyway it makes no sense. Also screen rotation is not supported (yet). Stock bootloader - blob - (with slight modification) and stock kernel works. Blob puts Z2 into deepsleep on reset, so I hacked it not to do this. How to compile qemu: git clone git://github.com/anarsoul/qemu-z2.git cd qemu-z2 ./configure --audio-drv-list=alsa --target-list=arm-softmmu make -j4 arm-softmmu/qemu-system-arm binary is what you need. So, how to hack blob: put your blob image (first 64kb of NOR) somewhere convert it to hex representation with xxd: xxd mtdblock1.bin >mtdblock1.hex apply patch onto mtdblock1.hex convert hex back to bin: mv mtdblock1.bin mtdblock1.bin.bak; xxd -r mtdblock1.hex >mtdblock1.bin I don't pu
Read more