Debricking ideas for Xperia Tablet S
Added xtskit.zip to this post which contains various scripts which can be used to debug various situations! Please use always latest version from this post and AT YOUR OWN RISK!
Decided to start new thread if anybody would still get any adeas for debricking my Xperia Tablet S before I call it unpossible... So, what has happened:
- Tried to upgrade my FI XTS from rooted 6b to rooted JB. Flashing apparently went fine but after reboot I got just Sony logo. Was able to boot to recovery and tried to recover by flashing firmware version 6, but got this error:
Write images to system0...
Write files to vendor0...
Random offset: 0x384
read_mod_link: failed to readlink "/system1/vendor": No such file or directory
E:Error in /tmp/desklunvr/desklunvr.zip
Don't know what went wrong when flashing, but my analysis of current state:
* /blflags is set to 1 (because recovery starts to flash system0).
* /system0 contains valid image of that firmware what I use to recover (since it was flashed properly)
* /datapp/vendor0 contains correct data from the same firmware (since files were written properly)
* /system1 is totally corrupted
* /datapp/vendor1 state is unknown
* /staging state is unknown but propably contains valid data from SOME firmware because recovery works, right?
Because of that /system1 corrupted state, recovering won't work as Sonys updater-script will try to read it before flashing /staging.
No, why my XTS does not boot? For me, it seems that /staging contains valid image (because I can get to recovery), doesn't it then contain also valid kernel for system0, right? Does my XTS not boot because:
* /blflags is set to 1. System tries to boot from /system1 and FAILS since it's corrupted. However bootloader does not recognize this and wont flip blfalgs.
* /staging is corrupted
In both cases, I could boot if I could just flip /blflags flag! In first case system would boot using /system0 and everything ok if /staging would have the right kernel for /system0 and since I can flash /system0 no problem. Also if flag would be flipped I could flash /system1 afterwards.
Now, any ideas? How to flip /blflags? I've been trying to poweroff in the middle of booting process but no luck. It just seems bootloader won't flip it no matter what.