Attend XDA's Second Annual Developer Conference, XDA:DevCon 2014!
5,786,551 Members 37,674 Now Online
XDA Developers Android and Mobile Development Forum

Totally Revolutionary SDCard Bootloader For Galaxy S III

Tip us?
 
AdamOutler
Old
#1  
AdamOutler's Avatar
Recognized Developer - OP
Thanks Meter 9,611
Posts: 5,193
Join Date: Feb 2011
Location: Louisiana

 
DONATE TO ME
Default Totally Revolutionary SDCard Bootloader For Galaxy S III

Hey guys,

Tonight, Elite Recognized Developer Rebellos and myself managed two very major breakthroughs for Samsung Exynos based devices.

1. Stable implementation of the Open Galaxy Bootloader (based on Uboot)
Code:
��BL2                                                                           
                                                                                
                                                                                
                                                                                
U-Boot 2010.12-00051-g02bdbef-dirty (Dec 23 2012 - 01:53:11) for EXYNOS4_GALAXY 
                                                                                
                                                                                
CPU: S5PC220 [Samsung SOC on SMP Platform Base on ARM CortexA9]                 
APLL = 1000MHz, MPLL = 800MHz                                                   
DRAM:  1 GiB                                                                    
[I2C] CLK_GATE_IP_PERIL: 0xFFFFFFFF, enabling channel 7                         
[I2C] channel 7 initialised with freq 400000 and timeout 1000000.               
[I2C] ePrescaler: 16 nPrescaler: 15.                                            
                                                                                
[I2C->ERR] Timeout Slave Address                                                
pmic_s5m8767_init set reg 0xE to 0x6F with mask 0x0                             
pmic_s5m8767_init set reg 0x5A to 0x58 with mask 0x0                            
pmic_s5m8767_init set reg 0x5B to 0xB4 with mask 0x0                            
pmic_s5m8767_init set reg 0xA to 0xE with mask 0xE                              
pmic_s5m8767_init set reg 0x11 to 0xE with mask 0x0                             
pmic_s5m8767_init set LDO2 to enable 0x1                                        
pmic_s5m8767_init set LDO4 to enable 0x1                                        
pmic_s5m8767_init set LDO5 to enable 0x0                                        
pmic_s5m8767_init set LDO6 to enable 0x1                                        
pmic_s5m8767_init set LDO7 to enable 0x1                                        
pmic_s5m8767_init set LDO8 to enable 0x1                                        
pmic_s5m8767_init set LDO9 to V 1800                                            
pmic_s5m8767_init set LDO10 to enable 0x1                                       
pmic_s5m8767_init set LDO11 to V 1950 with enable 0x1                           
pmic_s5m8767_init set LDO12 to enable 0x1                                       
pmic_s5m8767_init set LDO13 to enable 0x0                                       
pmic_s5m8767_init set LDO14 to V 1950 with enable 0x1                           
pmic_s5m8767_init set LDO15 to enable 0x1                                       
pmic_s5m8767_init set LDO16 to enable 0x1                                       
pmic_s5m8767_init set LDO18 to enable 0x1                                       
pmic_s5m8767_init set LDO19 to V 1800 with enable 0x1                           
pmic_s5m8767_init set LDO20 to V 3300                                           
pmic_s5m8767_init set LDO21 to V 3300                                           
pmic_s5m8767_init set LDO22 to V 2800                                           
pmic_s5m8767_init set LDO27 to V 1500                                           
PMIC: S5M8767                                                                   
====================                                                            
S5M8767 PMIC registers                                                          
====================                                                            
ID = 0x05                                                                       
ONSRC = 0x01                                                                    
STATUS1 = 0x11                                                                  
STATUS2 = 0x11                                                                  
STATUS3 = 0x07                                                                  
IRQ1 = 0x09                                                                     
IRQ2 = 0x38                                                                     
IRQ3 = 0x00                                                                     
PWROFFSRC = 0x00                                                                
PMIC_RTC_WTSR_SMPL_REG = 0x80                                                   
S5M8767_REG_BUCHG = 0x6f                                                        
i2c_gpio_new_port virtual channel 0 registered                                  
max77693 charger PMIC rev = PASS2, REG_ID2: 0x4                                 
BL1 version: 20111128                                                           
                                                                                
Checking Boot Mode... EMMC4.41                                                  
REVISION: 1.1                                                                   
[ERROR] response timeout error : 00000104 cmd 1                                 
FAIL: waiting for status update.                                                
MMC Device 0: 0 MB                                                              
MMC Device 1: 7580 MB                                                           
MMC Device 2 not found                                                          
FAIL: waiting for status update.                                                
FAIL: waiting for status update.                                                
mmc read failed                                                                 
*** Warning - using default environment                                         
                                                                                
Hit any key to stop autoboot:  0                                                
GALAXY #                                                                        
GALAXY #
What's this mean? We can now work INSIDE the Samsung TrustZone on production devices! This means some serious debugging of bootloaders is possible.


2. fastboot on the Galaxy Camera
Code:
adam@adam-Desktop:~/Desktop/GCAMBoot$ sudo fastboot devices
SMDKEXYNOS-01	fastboot
adam@adam-Desktop:~/Desktop/GCAMBoot$ sudo fastboot boot ./BOOT.bin 
downloading 'boot.img'...
OKAY [  1.642s]
booting...
OKAY [  0.217s]
finished. total time: 1.859s
adam@adam-Desktop:~/Desktop/GCAMBoot$

What does this REALLY mean? It means that not only do we have a way to get away from Samsung closed source bootloaders, but we can now boot TOTALLY from SDCard on the Galaxy Camera and the Galaxy S3.... What's that mean? We can fix brick-bugged Galaxy S3 devices!

I need a Galaxy S3 to work with. Anyone have a brick or a GS3 they're not using? I need it.

I will be performing the following:
1. EMMC Disable hardware mod (can be undone later)
2. UART hookups for debugging and working in fastboot mode.
3. attempting to rework GS3 Ramdisk for SDCard boot.
4. recreating the proper partition structure on a 16 gig.

From the current track record, i'm guessing that just about everyone will need this in a year or so. We hope to have this ready fairly quickly so anyone can just open their device, drop a bead of solder over a resistor, insert an SDCard and boot up again.

The further implications of this are: directly booting ubuntu, Chrome OS, WebOS or just about anything else... This tool will make it easy!

I estimate this will take 3-6 weeks of research. If you can donate a GS3 or do an extended loan, it will help out many people with bricked EMMCs. The device can even be bricked.
Flash with Odin on Windows, Linux and Mac. Use JOdin3, Available in a web browser or offline
Check out my developer pages. Add me to your circles on Google Plus.
Wanna see the longest Linux BASH script ever made? click here.
The Following 248 Users Say Thank You to AdamOutler For This Useful Post: [ Click to Expand ]
 
qbking77
Old
#2  
qbking77's Avatar
Recognized Contributor
Thanks Meter 5,127
Posts: 2,676
Join Date: Dec 2010
Location: Elgin, IL

 
DONATE TO ME
Very good news. Great work Adam
Youtube Channel:
www.youtube.com/qbking77

http://www.qbking77.com
The Following 4 Users Say Thank You to qbking77 For This Useful Post: [ Click to Expand ]
 
Akshay (Aky)
Old
#3  
Akshay (Aky)'s Avatar
Senior Member
Thanks Meter 538
Posts: 791
Join Date: Jul 2012
Location: Pune
Great waiting for somebody to donate his dead s3

Sent from my GT-I9300 using xda app-developers app
Jair Player : Music Rainbow




Developing to make life easier
 
JJEgan
Old
#4  
Senior Member
Thanks Meter 4,418
Posts: 23,042
Join Date: Oct 2010
Thanks for all your hard work .

jje
 
bapsack
Old
#5  
Member
Thanks Meter 5
Posts: 55
Join Date: Feb 2008
brilliant.....

loking foreward to experimental roms to boot from my separate sd card

like cyanogen, ubuntu and so on!!!

Good news just before x-mas
 
semantsen
Old
#6  
semantsen's Avatar
Senior Member
Thanks Meter 113
Posts: 570
Join Date: Jul 2012
Location: Pune
Default Thanks

Thank god! Adam,
at least there is now hope for 'to be dead' S3s
+1
DR. Ketan's Custom Rom KTWELVE

 
Puenos
Old
#7  
Senior Member
Thanks Meter 15
Posts: 150
Join Date: Aug 2010
AWESOME!

Ty for your great work guys!


so in theory we could not only boot any ROM from SD to unbrick, but also boot Linux natively from our SD card instead of chrooting in?
Found my post usefull? --> Hit the thx-button!
U're confused? --> Hit the thx-button!
Wrote garbage? --> Hit the thx-button!
U're desperate? --> Hit the thx-button!
 
wwjoshdew
Old
#8  
wwjoshdew's Avatar
Recognized Contributor
Thanks Meter 1,388
Posts: 1,365
Join Date: Dec 2008
Location: KCMO
Leave it to Adam and other Elite Developers to find such awesomeness! It's great to know that you can't truly hard brick a phone. And running ANY rom you want from the sdcard? That sounds freaking awesome!
http://www.youtube.com/user/wwjoshdew

Below are links to some of the devices I've done videos on,
Behold... The Sprint HTC One: http://goo.gl/3Q6nP
Transformer Prime TF201: http://goo.gl/GtxzA
Galaxy Note II L900: http://goo.gl/06zdk
Galaxy S III L710: http://goo.gl/0X5KW
Galaxy Nexus: http://goo.gl/rxUgv
EVO 4G LTE: http://goo.gl/VaoeU
EVO 3D: http://goo.gl/rmdoA
 
coolhof
Old
#9  
coolhof's Avatar
Senior Member
Thanks Meter 250
Posts: 759
Join Date: Mar 2012
Location: Brabant.
Great news.
Good job.:thumbup:

Verzonden door mijn GT-I9300 met xda premium
----------------------------------------------
Samsung Galaxy S III GT-I9300 Dual Boot.
Kernel: Devil3 4_0.1.4 [4.4.x, 4.3.x] - f2fs Filesystem - Dualboot
Recovery: Devil-i9300-recovery
Rom1: My Own Custom Rom Base JB4.3
Rom2: Cm11.
----------------------------------------------
The Following User Says Thank You to coolhof For This Useful Post: [ Click to Expand ]
 
theq86
Old
#10  
theq86's Avatar
Senior Member
Thanks Meter 731
Posts: 918
Join Date: Jan 2009
Location: Nuremberg

 
DONATE TO ME
Just some questions to get the picture.


1. EMMC Disable hardware mod (can be undone later)

This would be a semi-permanent resistor shortening (same as we would do when following the instructions of the official samsung unbrick guide) or am I wrong?

3. attempting to rework GS3 Ramdisk for SDCard boot.
What ramdisk do you mean? do you want to boot a rom from sd or a custom bootloader from sd?
Please Search the forums and ask your questions there. I'm no personal supporter.
HTC One (m7_ul)

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes