Android port for Samsung WAVE3 (GT-S8600)

Search This thread

BenzoX

Senior Member
Nov 11, 2013
296
276
Grenoble
@hero355 i know it won't be easy.... Maybe you can give some advice on kernel compiling for Qualcomm or compiling the LK bootloader to generate an apps_compressed bin...

As far as i know, apps_compressed is only a bada file and isn't needed here.
What we do need is :
A Little Kernel (LK) able to boot an android kernel (the one provided by Oleg_k may work, but we are unable to get the same file from his sources, maybe sources are too old, maybe we use wrong toolchain or maybe wrong commandlines)
An android kernel able to start on wave 3 device, this is probably the hardest part (Oleg provided incomplete sources, and using sources from another device with same CPU isn't enough).
And finally, a rom, but if we have correct kernel it will be the easy part.
After that the port of all drivers (modem, screen, audio, wifi...) can begin.

I don't understand any of these low level thing with memory adresses, so i can't help a lot...
 

adfree

Senior Member
Jun 14, 2008
10,611
6,167
Samsung Galaxy Watch 4
Samsung Galaxy S22
As far as i know, apps_compressed is only a bada file and isn't needed here.

Modified apps_compressed.bin included oleg_k LK...

Otherwise you need JTAG (solder wires to PCB) to write appsboot/emmcboot during f. Security checks...

Maybe we should be sure we mean same things... ;)

http://de.wikipedia.org/wiki/Compiler
http://en.wikipedia.org/wiki/Compiler

Decompress also known as unpack with any kind of Compression Tool...
ZIP... WINRAR... etc...

Decrypt and encrypt... is not the same like "compile"...

To put oleg_k LK into apps_compressed.bin you need:
WaveRemaker Tool for DEcryption and ENcryption.
Decompression is also possible, but NOT needed for this action...

Copy and Paste of few Bytes with WinHex possible.
@TStaudigl
apps_compressed.bin mit WaveRemaker ENTschlüsseln...
Dann mit WinHex LK einfügen.... dann mit WaveRemaker wieder VERschlüsseln.
Das hat 0 mit Compiler zu tun...

Best Regards
 

adfree

Senior Member
Jun 14, 2008
10,611
6,167
Samsung Galaxy Watch 4
Samsung Galaxy S22
Short to my Driver phenomenon...

If appsboot/emmcboot erased at 0x09000000...
Here from I9001 dump...

Diagnostic...
USB\VID_04E8&PID_6640&MI_02\6&2949281B&0&2_02


Modem...
USB\VID_04E8&PID_6640&MI_00\6&2949281B&0&2_00


Later more...

If I google for VID then I can find something about Bitpim...
Maybe this is really more Qualcomm then Samsung...

Best Regards

Edit 1....
VID_04E8&PID_6640&MI_00 leads to ADB ...
Hmmm...

Edit 2.
I am to stupid to edit Driver *.inf ...

So I will try to sniff ADB if Commands send...
http://xdaforums.com/showpost.php?p=54038941&postcount=466

Especially this one:
Code:
adb [B]reboot-bootloader[/B]
 
Last edited:

adfree

Senior Member
Jun 14, 2008
10,611
6,167
Samsung Galaxy Watch 4
Samsung Galaxy S22
He use codesourcery Toolchain (but he dont remember what number) for compiling source WITHOUT errors

Please, can you ask him...

Why he can not come back to XDA?
:confused:

Or why he can't read only XDA posts...
So maybe we can easier communicate... :cyclops:

Thanx in advance.
@oleg_k
Please, if you are alive...
Come back to XDA...
Nobody will punish you... :D

At the moment I don't think you are reading any posts here...
Magic... it is possible to read XDA Threads/posts without to be an XDA member nor you need to login to read... sometimes...

What is with Fastboot in your LK Boot?
Yes ?
No ?
Ignore?

In Germany we play as kids "Topfschlagen"...
You close your eyes (you are blind)... and you try to find something "hidden"...
And all other kids around can "help" if they say warm or cold...

Or for instance Batmans friend... The Riddler... :D

My moschem pobroujut poroski gavarivat... :D

Oder deutsch?

So ist das momentan echt "lustig"... :eek:

Best Rgards
 
  • Like
Reactions: TStaudigl

ghoslslender124

Senior Member
Apr 23, 2014
217
109
Jeleńcz
@adfree

Maybe fast you can make facebook? I can give you mine second account, only change Name xD

When I ask him about comeback he write: I post something. Wait. or something like that:

Me:
- Why not post
anything on xda? Dont like adfree or what? I dont
know.

Oleg:
-i will post later))
i promise)
 

adfree

Senior Member
Jun 14, 2008
10,611
6,167
Samsung Galaxy Watch 4
Samsung Galaxy S22
Have you read my Private Messeage?

Yes, thank you very much for your offerS...
I don't need any gift nor money donation...

About Facebook account...
I am too lazy...
I can create Facebook account, but I am paranoid...
My browser is blocking Facebook... :good:

About my lucky finding... again by "mistake", maybe more luck and hundrets of hours flashing, trying, flashing again and so on...

For now my solution is 2000 MB big... 0 - 0x8000 0000
It is without oleg_k LK...

I have used again RIFF JTAG...
Display will be very hot... :eek:

Later I will try to write whole 4 GB of 7 GB... maybe then more luck...
2 GB of 7 GB is less then 30 % of I9001 Firmware dump... so I am pretty sure many things are missing...

For Video I need "few" minutes...

Best Regards
 

Attachments

  • I9001onS8600v1.zip
    8.8 MB · Views: 406
Last edited:

adfree

Senior Member
Jun 14, 2008
10,611
6,167
Samsung Galaxy Watch 4
Samsung Galaxy S22

:eek:

I know, sorry for this...
But "solution" is 100 % I9001 dumped Software... nothing really modified...

Magic was only to use 150 MB dump from my I9001...
No idea why the other I9001 dumps all failed...

I will dump my whole 4 GB EMMC to be sure... "magic" is not also behind address 0x8000 0000... :D

Display could be hot because wrong parameter...
Its I9001 Firmware... boot + kernel...

Booting is also very slow...

DL Mode JIG not work...
Later I will try UART... if I can see something usefull...

My evidence Video is soon uploaded... 9 MB ZIP... contain AVI Video...

Best Regards

Edit 1.
I9001onS8600v1.zip
Video attached... 1 or 2 posts before...
 
Last edited:

BenzoX

Senior Member
Nov 11, 2013
296
276
Grenoble
:eek:

I know, sorry for this...
But "solution" is 100 % I9001 dumped Software... nothing really modified...

Magic was only to use 150 MB dump from my I9001...
No idea why the other I9001 dumps all failed...

I will dump my whole 4 GB EMMC to be sure... "magic" is not also behind address 0x8000 0000... :D

Display could be hot because wrong parameter...
Its I9001 Firmware... boot + kernel...

Booting is also very slow...

DL Mode JIG not work...
Later I will try UART... if I can see something usefull...

My evidence Video is soon uploaded... 9 MB ZIP... contain AVI Video...

Best Regards

Edit 1.
I9001onS8600v1.zip
Video attached... 1 or 2 posts before...



Wow, that's more than impressive adfree !
Congrats !
That mean that we have an already "functionning" android kernel booted whithout LK (by default bootloader ? ) ?
Maybe possible to boot to recovery in this case, see if it reboot like in rom or not.

All these dump thing i don't understand, have you replaced all memory on wave 3 by 9001 one, or some is conserved (bootloader...) ?

I only have knowledge on wave 1&2, where /boot and /recovery are non existant (recovery is inside kernel), so once kernel is booted, we can do nearly anything we want easily, format nand and install rom as we want and this kind of thing.
I think LK bootloader allow this, and i hope it allow loading kernel from everywhere (as Fota do on wave 2), i'm not sure the default one can...

Hi, guys
How Can I Help...?

Hi Oleg, glad to see you.
I wasn't able to compile your LK sources with "bootable" result... Maybe wrong toolchain, but with the instruction you gave on page 1 i build a file adfree couldn't successfully boot. Yours succeeded.
Also, kernel sources returned many errors, maybe again wrong toolchain...
 
Last edited:
  • Like
Reactions: hero355 and adfree

ghoslslender124

Senior Member
Apr 23, 2014
217
109
Jeleńcz
@oleg_k

Welcome Back my friend :)

Now we have team.


Give me correctly zImage and 10 min and i give you working kernel

@BenzoX

He replace FULL Bootloader and Kernel from I9001 with JTAG.

No bada boot.
 
Last edited:

Top Liked Posts

  • There are no posts matching your filters.
  • 32
    Hi all.
    This thread only for developers! Only! No questions - when?!!!!!!!

    This is my attempt to porting android on S8600.
    I wrote custom bootloader - emmcboot, based on codeaurora LK-bootloader.
    Bootloader is successfully start, work and trying to load android kernel from internal
    microsd card.
    Now is unsuccessfully,after type message "Uncompressing Linux... done, booting the kernel." device rebooted or stopped.

    [370] Panel is power on
    [370] Display initialized
    [370] Display logo
    [370] Waiting for modem+++
    [370] Waiting for modem: Done
    [370] smem ram ptable found: ver: 0 len: 6
    [370] scratch: 0x8000000
    [370] Starting in SD mode!
    [370] SD_DETECT pin : 0x0
    [380] Initializing MMC host data structure and clock!
    [380] Error No. 2: Failure Initializing MMC Card!
    [400] Decoded CID fields:
    [400] Manufacturer ID: 27
    [400] OEM ID: 0x5048
    [400] Product Name: SD16G
    [400] Product revision: 3.0
    [400] Product serial number: 7C88FF04
    [400] Manufacturing date: 2 2012
    [410] Serial number -[410] serial number:
    [410] partition misc doesn't exist
    [410] error in emmc_recovery_init
    [580]
    kernel @ 208000 (4132528 bytes)
    [580] ramdisk @ 1200000 (175204 bytes)
    [580] cmdline = 'console=null androidboot.hardware=qcom user_debug=31'
    [580]
    Booting Linux
    [580] smem ram ptable found: ver: 0 len: 6
    [580] booting linux @ 0x208000, ramdisk @ 0x1200000 (175204)
    [590] cmdline: console=null androidboot.hardware=qcom user_debug=31
    Uncompressing Linux... done, booting the kernel.

    source code for lk-bootloader for S8600:
    https://github.com/Oleg-k/LK_BOOT_S8600
    To build for S8600, type: "make -j4 s8600 EMMC_BOOT=1"

    Also, i got memory dump, stage - after load oemsbl and before loading my bootloader.
    as we see, oemsbl decompress and load apps_compressed.bin into memory,
    starting at 0x200000.
    https://www.dropbox.com/s/5wf6dp5gfgudkdc/MEM_DUMP_128MB.rar

    And for for understanding boot process on MSM7x30, read this:
    http://tjworld.net/wiki/Android/HTC/Vision/BootProcess#BootProcess
    12
    YES! YES! YES!

    WE HAVE KERNEL!

    https://github.com/Oleg-k/kernel_source_s8600
    @oleg_k is, big thanks :*

    But he tell, we can brick our device
    9
    FASTBOOT Driver and Commands working. :good: :cool:
    But now it is really dangerous to try without to know what you do...

    I have JTAG to fix Software failures...

    Enter help, you see some Commands:
    Code:
    fastboot help
    result:
    Code:
    usage: fastboot [ <option> ] <command>
    
    commands:
      update <filename>                        reflash device from update.zip
      flashall                                 flash boot + recovery + system
      flash <partition> [ <filename> ]         write a file to a flash partition
      erase <partition>                        erase a flash partition
      getvar <variable>                        display a bootloader variable
      boot <kernel> [ <ramdisk> ]              download and boot kernel
      flash:raw boot <kernel> [ <ramdisk> ]    create bootimage and flash it
      devices                                  list all connected devices
      reboot                                   reboot device normally
      reboot-bootloader                        reboot device into bootloader
    
    options:
      -w                                       erase userdata and cache
      -s <serial number>                       specify device serial number
      -p <product>                             specify product name
      -c <cmdline>                             override kernel commandline
      -i <vendor id>                           specify a custom USB vendor id

    Best Regards
    8
    Welcome back my friend ))

    If you able to port,I 100% will buy S8600 :)

    Good Luck
    8
    it's my current config for my kernel: