[INFO] Nexus 7 Partitions!

zedomax · Jun 28, 2012

Here's an output of /proc/mounts, might be help full other devs:

which one is recovery partition does anyone know?

zoneinfo
[email protected]:/proc $ cat mounts
cat mounts
rootfs / rootfs ro,relatime 0 0
tmpfs /dev tmpfs rw,nosuid,relatime,mode=755 0 0
devpts /dev/pts devpts rw,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,relatime 0 0
debugfs /sys/kernel/debug debugfs rw,relatime 0 0
none /acct cgroup rw,relatime,cpuacct 0 0
tmpfs /mnt/asec tmpfs rw,relatime,mode=755,gid=1000 0 0
tmpfs /mnt/obb tmpfs rw,relatime,mode=755,gid=1000 0 0
none /dev/cpuctl cgroup rw,relatime,cpu 0 0
/dev/block/platform/sdhci-tegra.3/by-name/APP /system ext4 ro,relatime,user_xatt
r,acl,barrier=1,data=ordered 0 0
/dev/block/platform/sdhci-tegra.3/by-name/CAC /cache ext4 rw,nosuid,nodev,noatim
e,errors=panic,user_xattr,acl,barrier=1,nomblk_io_submit,data=ordered 0 0
/dev/block/platform/sdhci-tegra.3/by-name/UDA /data ext4 rw,nosuid,nodev,noatime
,errors=panic,user_xattr,acl,barrier=1,nomblk_io_submit,data=ordered 0 0
/dev/fuse /storage/sdcard0 fuse rw,nosuid,nodev,relatime,user_id=1023,group_id=1
023,default_permissions,allow_other 0 0

Indirect · Jun 28, 2012

run

Code:

ls -l /dev/block/platform/sdhci-tegra.3/by-name/

and that should show all partitions.

zedomax · Jun 28, 2012

Indirect said:
run

Code:

ls -l /dev/block/platform/sdhci-tegra.3/by-name/

and that should show all partitions.

Thanks!

C:\Users\max\Downloads\Nexus7Root>adb shell
[email protected]:/ $ ls -l /dev/block/platform/sdhci-tegra.3/by-name/
ls -l /dev/block/platform/sdhci-tegra.3/by-name/
lrwxrwxrwx root root 2012-06-28 11:51 APP -> /dev/block/mmcblk0p3
lrwxrwxrwx root root 2012-06-28 11:51 CAC -> /dev/block/mmcblk0p4
lrwxrwxrwx root root 2012-06-28 11:51 LNX -> /dev/block/mmcblk0p2
lrwxrwxrwx root root 2012-06-28 11:51 MDA -> /dev/block/mmcblk0p8
lrwxrwxrwx root root 2012-06-28 11:51 MSC -> /dev/block/mmcblk0p5
lrwxrwxrwx root root 2012-06-28 11:51 PER -> /dev/block/mmcblk0p7
lrwxrwxrwx root root 2012-06-28 11:51 SOS -> /dev/block/mmcblk0p1
lrwxrwxrwx root root 2012-06-28 11:51 UDA -> /dev/block/mmcblk0p9
lrwxrwxrwx root root 2012-06-28 11:51 USP -> /dev/block/mmcblk0p6

Indirect · Jun 28, 2012

try

Code:

ls -l /dev/block/

and if you see r on the 3rd from last line of each partition, do the following commands:

Code:

adb shell cat /dev/block/platform/sdhci-tegra.3/by-name/lnx > lnxfile.bin
adb shell cat /dev/block/platform/sdhci-tegra.3/by-name/SOS > SOSfile.bin

zedomax · Jun 28, 2012

Indirect said:
try

Code:

ls -l /dev/block/

and if you see r on the 3rd from last line of each partition, do the following commands:

Code:

adb shell cat /dev/block/platform/sdhci-tegra.3/by-name/lnx > lnxfile.bin adb shell cat /dev/block/platform/sdhci-tegra.3/by-name/SOS > SOSfile.bin

C:\Users\max\Downloads\Nexus7Root>adb shell
[email protected]:/ $ ls -l /dev/block/
ls -l /dev/block/
brw------- root root 7, 0 2012-06-28 11:51 loop0
brw------- root root 7, 1 2012-06-28 11:51 loop1
brw------- root root 7, 2 2012-06-28 11:51 loop2
brw------- root root 7, 3 2012-06-28 11:51 loop3
brw------- root root 7, 4 2012-06-28 11:51 loop4
brw------- root root 7, 5 2012-06-28 11:51 loop5
brw------- root root 7, 6 2012-06-28 11:51 loop6
brw------- root root 7, 7 2012-06-28 11:51 loop7
brw------- root root 179, 0 2012-06-28 11:51 mmcblk0
brw------- root root 179, 16 2012-06-28 11:51 mmcblk0boot0
brw------- root root 179, 32 2012-06-28 11:51 mmcblk0boot1
brw------- root root 179, 1 2012-06-28 11:51 mmcblk0p1
brw------- root root 179, 2 2012-06-28 11:51 mmcblk0p2
brw------- root root 179, 3 2012-06-28 11:51 mmcblk0p3
brw------- root root 179, 4 2012-06-28 11:51 mmcblk0p4
brw------- root root 179, 5 2012-06-28 11:51 mmcblk0p5
brw------- root root 179, 6 2012-06-28 11:51 mmcblk0p6
brw------- root root 179, 7 2012-06-28 11:51 mmcblk0p7
brw------- root root 179, 8 2012-06-28 11:51 mmcblk0p8
brw------- root root 179, 9 2012-06-28 11:51 mmcblk0p9
drwxr-xr-x root root 2012-06-28 11:51 platform
drwx------ root root 2012-06-28 11:51 vold
[email protected]:/ $

Permission denied for cat

Indirect · Jun 28, 2012

yep, that's what I figured but it was still worth a shot. :x

You'll need root. If you can get it before you have to surrender that tab, it'd be great.

m11kkaa · Jun 28, 2012

run this one:

Code:

cat /proc/partitions

and this one:

Code:

fdisk -l /dev/block/mmcblk0

this command would be interesting too:

Code:

cat /proc/cmdline

And if the file exists execute "adb pull /proc/config.gz"(or copy it via rootexplorer) and post it here. It's the kernel-config

rayman · Jun 28, 2012

Cool - these are btw mostly generic tegra names, while most are probably obvious I've "translated" them below.

zedomax said:
C:\Users\max\Downloads\Nexus7Root>adb shell
[email protected]:/ $ ls -l /dev/block/platform/sdhci-tegra.3/by-name/
ls -l /dev/block/platform/sdhci-tegra.3/by-name/
lrwxrwxrwx root root 2012-06-28 11:51 APP -> /dev/block/mmcblk0p3
lrwxrwxrwx root root 2012-06-28 11:51 CAC -> /dev/block/mmcblk0p4
lrwxrwxrwx root root 2012-06-28 11:51 LNX -> /dev/block/mmcblk0p2
lrwxrwxrwx root root 2012-06-28 11:51 MDA -> /dev/block/mmcblk0p8
lrwxrwxrwx root root 2012-06-28 11:51 MSC -> /dev/block/mmcblk0p5
lrwxrwxrwx root root 2012-06-28 11:51 PER -> /dev/block/mmcblk0p7
lrwxrwxrwx root root 2012-06-28 11:51 SOS -> /dev/block/mmcblk0p1
lrwxrwxrwx root root 2012-06-28 11:51 UDA -> /dev/block/mmcblk0p9
lrwxrwxrwx root root 2012-06-28 11:51 USP -> /dev/block/mmcblk0p6

APP -> system
CAC -> cache
LNX -> boot.img
MDA -> Unknown
MSC -> Misc (bootloader commands and other misc stuff )
PER -> usually a fat partition containing sensor calibration etc. - per device provisioned.
SOS -> recovery.img
UDA -> /data - "user data area"
USP -> Staging

---------- Post added at 10:18 PM ---------- Previous post was at 10:17 PM ----------

m11kkaa said:
run this one:

Code:

cat /proc/partitions

and this one:

Code:

fdisk -l /dev/block/mmcblk0

There's no standard "dos" partition anywhere, so that won't work.

m11kkaa said:
this command would be interesting too:

Code:

cat /proc/cmdline

And if the file exists execute "adb pull /proc/config.gz"(or copy it via rootexplorer) and post it here. It's the kernel-config

At least cmdline is actually protected from normal users in newer kernels and same with config.gz I believe. Worth a shot though. (FWIW, usually tegra bootloader fills in kernel cmdline rather than hardcoding it in boot.img )

zedomax · Jun 28, 2012

Code:

1|[email protected]:/dev/block/platform/sdhci-tegra.3/by-name $ cat /proc/partitions

/partitions                                                                   <
major minor  #blocks  name

 179        0    7467008 mmcblk0
 179        1      12288 mmcblk0p1
 179        2       8192 mmcblk0p2
 179        3     665600 mmcblk0p3
 179        4     453632 mmcblk0p4
 179        5        512 mmcblk0p5
 179        6      10240 mmcblk0p6
 179        7       5120 mmcblk0p7
 179        8        512 mmcblk0p8
 179        9    6302720 mmcblk0p9
 179       32       2048 mmcblk0boot1
 179       16       2048 mmcblk0boot0

zedomax · Jun 28, 2012

Config.gz

Here's Config.gz attached

m11kkaa · Jun 28, 2012

zedomax said:

Code:

1|[email protected]:/dev/block/platform/sdhci-tegra.3/by-name $ cat /proc/partitions

.....[/QUOTE]

4096Bytes are missing. Maybe the bootloader+PartitionTable at first bytes of Nand :)

Did anyone of you try if there is an bootloader-mode(the usual key-combinations)?

linuxwarrior · Jul 3, 2012

Partition sizes

Could you/someone please post a df to see the size of each partition, I wonder how much of the 8GB are available and how much is for /data.

Thanks!

tikiral · Jul 3, 2012

Filesystem Size Used Free Blksize
/dev 487M 32K 487M 4096
/mnt/asec 487M 0K 487M 4096
/mnt/obb 487M 0K 487M 4096
/system 639M 422M 217M 4096
/cache 436M 7M 428M 4096
/data 5G 4G 1G 4096
/storage/sdcard0 5G 4G 1G 4096
/mnt/asec/com.lexi.android-1 3M 1M 1M 4096

Partitionator · Oct 7, 2012

Is there any way to creat a extra partition or at least to change the size?

brando56894 · Oct 7, 2012

I don't believe so or someone would have done it already.

osm0sis · Dec 6, 2012

rayman said:
Cool - these are btw mostly generic tegra names, while most are probably obvious I've "translated" them below.

APP -> system

CAC -> cache

LNX -> boot.img

MDA -> Unknown

MSC -> Misc (bootloader commands and other misc stuff )

PER -> usually a fat partition containing sensor calibration etc. - per device provisioned.

SOS -> recovery.img

UDA -> /data - "user data area"

USP -> Staging

Just a bit of an update on these from what I've found. MDA is listed in the fstab as encrypted data.

/dev/block/platform/sdhci-tegra.3/by-name:
lrwxrwxrwx 1 root root 20 Nov 12 00:10 SOS -> /dev/block/mmcblk0p1 -> recovery
lrwxrwxrwx 1 root root 20 Nov 12 00:10 LNX -> /dev/block/mmcblk0p2 -> boot
lrwxrwxrwx 1 root root 20 Nov 12 00:10 APP -> /dev/block/mmcblk0p3 -> system
lrwxrwxrwx 1 root root 20 Nov 12 00:10 CAC -> /dev/block/mmcblk0p4 -> cache
lrwxrwxrwx 1 root root 20 Nov 12 00:10 MSC -> /dev/block/mmcblk0p5 -> misc
lrwxrwxrwx 1 root root 20 Nov 12 00:10 USP -> /dev/block/mmcblk0p6 -> bootloader
lrwxrwxrwx 1 root root 20 Nov 12 00:10 PER -> /dev/block/mmcblk0p7 -> per device calibration
lrwxrwxrwx 1 root root 20 Nov 12 00:10 MDA -> /dev/block/mmcblk0p8 -> encrypted userdata
lrwxrwxrwx 1 root root 20 Nov 12 00:10 UDA -> /dev/block/mmcblk0p9 -> userdata

APP -> system
CAC -> cache
LNX -> boot
MDA -> encrypted userdata
MSC -> misc
PER -> per device calibration
SOS -> recovery
UDA -> userdata
USP -> bootloader

Edit, Jan. 9th: Dug up the N7 tilapia equivalents today because I was curious (found on the Ubuntu site of all places).

/dev/block/platform/sdhci-tegra.3/by-name/
lrwxrwxrwx root root 2012-11-20 13:48 SOS -> /dev/block/mmcblk0p1
lrwxrwxrwx root root 2012-11-20 13:48 LNX -> /dev/block/mmcblk0p2
lrwxrwxrwx root root 2012-11-20 13:48 APP -> /dev/block/mmcblk0p3
lrwxrwxrwx root root 2012-11-20 13:48 RDO -> /dev/block/mmcblk0p4
lrwxrwxrwx root root 2012-11-20 13:48 CAC -> /dev/block/mmcblk0p5
lrwxrwxrwx root root 2012-11-20 13:48 MSC -> /dev/block/mmcblk0p6
lrwxrwxrwx root root 2012-11-20 13:48 USP -> /dev/block/mmcblk0p7
lrwxrwxrwx root root 2012-11-20 13:48 PER -> /dev/block/mmcblk0p8
lrwxrwxrwx root root 2012-11-20 13:48 MDA -> /dev/block/mmcblk0p9
lrwxrwxrwx root root 2012-11-20 13:48 UDA -> /dev/block/mmcblk0p10

Seems they just stuck RDO (radio) in the middle at p4 so everything else just shifts down, and up a p#.

osm0sis · Jan 10, 2013

Also worth mentioning for both N7 variants (and apparently Tegras in general), mmcblk0boot0 and mmbblk0boot1 are continuous and contain 3 partitions: BCT, PT and the start of the bootloader. BCT takes up all of boot0 and the beginning of boot1. They are encrypted and boot0 is where lockstate is stored. For more info check out my BootUnlocker Script thread.

Credits to lilstevie for that information.

Partitionator · Dec 23, 2013

USP is only staging Area for bootloader flashes not the bootloader itself...

Is the per partition on all N7 the same or are there differences from device to device, so that I can´t use the per partion of another N7?

Dvalin21 · Mar 23, 2015

osm0sis said:
Just a bit of an update on these from what I've found. MDA is listed in the fstab as encrypted data.

/dev/block/platform/sdhci-tegra.3/by-name:
lrwxrwxrwx 1 root root 20 Nov 12 00:10 SOS -> /dev/block/mmcblk0p1 -> recovery
lrwxrwxrwx 1 root root 20 Nov 12 00:10 LNX -> /dev/block/mmcblk0p2 -> boot
lrwxrwxrwx 1 root root 20 Nov 12 00:10 APP -> /dev/block/mmcblk0p3 -> system
lrwxrwxrwx 1 root root 20 Nov 12 00:10 CAC -> /dev/block/mmcblk0p4 -> cache
lrwxrwxrwx 1 root root 20 Nov 12 00:10 MSC -> /dev/block/mmcblk0p5 -> misc
lrwxrwxrwx 1 root root 20 Nov 12 00:10 USP -> /dev/block/mmcblk0p6 -> bootloader
lrwxrwxrwx 1 root root 20 Nov 12 00:10 PER -> /dev/block/mmcblk0p7 -> per device calibration
lrwxrwxrwx 1 root root 20 Nov 12 00:10 MDA -> /dev/block/mmcblk0p8 -> encrypted userdata
lrwxrwxrwx 1 root root 20 Nov 12 00:10 UDA -> /dev/block/mmcblk0p9 -> userdata

APP -> system
CAC -> cache
LNX -> boot
MDA -> encrypted userdata
MSC -> misc
PER -> per device calibration
SOS -> recovery
UDA -> userdata
USP -> bootloader

Edit, Jan. 9th: Dug up the N7 tilapia equivalents today because I was curious (found on the Ubuntu site of all places).

/dev/block/platform/sdhci-tegra.3/by-name/
lrwxrwxrwx root root 2012-11-20 13:48 SOS -> /dev/block/mmcblk0p1
lrwxrwxrwx root root 2012-11-20 13:48 LNX -> /dev/block/mmcblk0p2
lrwxrwxrwx root root 2012-11-20 13:48 APP -> /dev/block/mmcblk0p3
lrwxrwxrwx root root 2012-11-20 13:48 RDO -> /dev/block/mmcblk0p4
lrwxrwxrwx root root 2012-11-20 13:48 CAC -> /dev/block/mmcblk0p5
lrwxrwxrwx root root 2012-11-20 13:48 MSC -> /dev/block/mmcblk0p6
lrwxrwxrwx root root 2012-11-20 13:48 USP -> /dev/block/mmcblk0p7
lrwxrwxrwx root root 2012-11-20 13:48 PER -> /dev/block/mmcblk0p8
lrwxrwxrwx root root 2012-11-20 13:48 MDA -> /dev/block/mmcblk0p9
lrwxrwxrwx root root 2012-11-20 13:48 UDA -> /dev/block/mmcblk0p10

Seems they just stuck RDO (radio) in the middle at p4 so everything else just shifts down, and up a p#.

Having issues decompiling the Boot and Recovery, code suggestions

[INFO] Nexus 7 Partitions!

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Recognized Dev / Inactive Recognized Contributor

Senior Recognized Developer

Senior Member

Senior Member

Attachments

Recognized Dev / Inactive Recognized Contributor

Member

Senior Member

Senior Member

Senior Member

Senior Recognized Developer / Contributor

Senior Recognized Developer / Contributor

Senior Member

Senior Member

Similar threads

Top Liked Posts