[Q/HELP]Samsung GT-I5510 bml partition mapping

Search This thread
By:
Advanced…
W

WillingMagic

Guest
TOPIC IS CLOSED

How to dump bml files
IMPORTANT:
Please any GT-I5510 user dump bml5, bml11 and bml14. How to dump:
You need root your phone via oneclickroot. And then via any terminal or adb shell
Code: 
su
dd if=/dev/block/bml5 of=/sdcard/bml5.img
dd if=/dev/block/bml11 of=/sdcard/bml11.img
dd if=/dev/block/bml14 of=/sdcard/bml14.img
Then copy to your computer and upload.
Add info about your model and country/world region.

Current status:
Code: 
bml1 mibib
bml2 qcsbl
bml3 oemsbl
bml4 amss
bml5 ????????FSR_STL 
bml6 empty or empty rfs partition
bml7 empty or stuff added clockwork recovery or similar softwrate
bml8 arm11boot
bml9 boot.img + initramfs?
bml10 recovery 
bml11 ???????? ....................MOT............................ON.....
bml12 system.rfs
bml13 data.rfs 
bml14 ????????FSR_STL

Anything useful:

Code: 
cat /proc/partitions

 major minor  #blocks  name
 137        0     513024 bml0/c
 137        1       1536 bml1
 137        2        512 bml2
 137        3        768 bml3 
 137        4      25600 bml4
 137        5      24832 bml5
 137        6       5120 bml6
 137        7      25600 bml7
 137        8       2048 bml8
 137        9      10240 bml9
 137       10      10240 bml10
 137       11        768 bml11
 137       12     195840 bml12
 137       13     184320 bml13
 137       14      25600 bml14

Ops File:
Code: 
0,mibib
1,qcsbl
2,oemsbl
3,amss
4,arm11boot
5,boot
6,recovery
7,system
8,data
9,csc
10,

GT-I5510L_kernel\kernel\include\linux\fsr_if.h:
Code: 
#ifndef __KERNEL__
/*Warning*/
/*If you modify BML, you must check this definition*/
/*****************************************************************************/
/* Partition Entry ID of BML_LoadPIEntry()                                   */
/* Partition Entry ID from 0 to 0x0FFFFFFF is reserved in BML                */
/* Following ID is the pre-defined value and User can use Partition Entry ID */
/* from PARTITION_USER_DEF_BASE                                              */
/*****************************************************************************/

#define     PARTITION_ID_NBL			0		///< NAND bootloader stage 1, 2 
#define     PARTITION_ID_BOOTLOADER		1		///< NAND bootloader stage 3
#define     PARTITION_ID_BOOT_PARAMETER		2		///< NAND bootloader parameter of stage 3
#define     PARTITION_ID_COPIEDOS		3		///< OS image copied from NAND flash memory to RAM
#define     PARTITION_ID_ROOT_FILESYSTEM	4		///< OS image loaded on demand
#define     PARTITION_ID_BMLAREA5		5		///< BML area 5
#define     PARTITION_ID_BMLAREA6		6		///< BML area 6
#define     PARTITION_ID_BMLAREA7		7		///< BML area 7
#define     PARTITION_ID_BMLAREA8		8		///< BML area 8
#define     PARTITION_ID_BMLAREA9		9		///< BML area 9
#define     PARTITION_ID_BMLAREA10		10		///< BML area 10
#define     PARTITION_ID_BMLAREA11		11		///< BML area 11
#define     PARTITION_ID_BMLAREA12		12		///< BML area 12
#define     PARTITION_ID_BMLAREA13		13		///< BML area 13
#define     PARTITION_ID_BMLAREA14		14		///< BML area 14
#define     PARTITION_ID_BMLAREA15		15		///< BML area 15
#define     PARTITION_ID_BMLAREA16		16		///< BML area 16
#define     PARTITION_ID_BMLAREA17		17		///< BML area 17
#define     PARTITION_ID_BMLAREA18		18		///< BML area 18
#define     PARTITION_ID_BMLAREA19		19		///< BML area 19
#define     PARTITION_ID_FILESYSTEM0		20		///< file system 0
#define     PARTITION_ID_FILESYSTEM1		21		///< file system 1
#define     PARTITION_ID_FILESYSTEM2		22		///< file system 2
#define     PARTITION_ID_FILESYSTEM3		23		///< file system 3
#define     PARTITION_ID_FILESYSTEM4		24		///< file system 4
#define     PARTITION_ID_FILESYSTEM5		25		///< file system 5
#define     PARTITION_ID_FILESYSTEM6		26		///< file system 6
#define     PARTITION_ID_FILESYSTEM7		27		///< file system 7
#define     PARTITION_ID_FILESYSTEM8		28		///< BML area 18
#define     PARTITION_ID_FILESYSTEM9		29		///< BML area 19
#define     PARTITION_ID_FILESYSTEM10		30		///< file system 0
#define     PARTITION_ID_FILESYSTEM11		31		///< file system 1
#define     PARTITION_ID_FILESYSTEM12		32		///< file system 2
#define     PARTITION_ID_FILESYSTEM13		33		///< file system 3
#define     PARTITION_ID_FILESYSTEM14		34		///< file system 4
#define     PARTITION_ID_FILESYSTEM15		35		///< file system 5

#define	    MAX_STL_PARTITIONS			(PARTITION_ID_FILESYSTEM7 - PARTITION_ID_FILESYSTEM0 + 1)

Code: 
cat /proc/mounts

rootfs / rootfs ro,relatime 0 0
tmpfs /dev tmpfs rw,relatime,mode=755 0 0
devpts /dev/pts devpts rw,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,relatime 0 0
tmpfs /mnt/asec tmpfs rw,relatime,mode=755,gid=1000 0 0
/dev/stl14 /cache rfs rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8 0 0
/dev/stl13 /data rfs rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8 0 0
/dev/stl12 /system rfs ro,relatime,vfat,log_off,check=no,gid/uid/rwx,iocharset=utf8 0 0
/dev/block/vold/179:1 /mnt/sdcard vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,g id=1015,fmask=0002,dmask=0002,allow_utime=0020,cod epage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro 0 0
/dev/block/vold/179:1 /mnt/secure/asec vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,g id=1015,fmask=0002,dmask=0002,allow_utime=0020,cod epage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro 0 0
tmpfs /mnt/sdcard/.android_secure tmpfs ro,relatime,size=0k,mode=000 0 0
/dev/block/dm-0 /mnt/asec/com.levelup.bw.forecast-1 vfat ro,dirsync,nosuid,nodev,noexec,relatime,uid=1000,f mask=0222,dmask=0222,codepage=cp437,iocharset=iso8 859-1,shortname=mixed,utf8,errors=remount-ro 0 0
/dev/block/dm-1 /mnt/asec/com.google.zxing.client.android-1 vfat ro,dirsync,nosuid,nodev,noexec,relatime,uid=1000,f mask=0222,dmask=0222,codepage=cp437,iocharset=iso8 859-1,shortname=mixed,utf8,errors=remount-ro 0 0
/dev/block/dm-2 /mnt/asec/ymst.android.homeswitcherfroyo-1 vfat ro,dirsync,nosuid,nodev,noexec,relatime,uid=1000,f mask=0222,dmask=0222,codepage=cp437,iocharset=iso8 859-1,shortname=mixed,utf8,errors=remount-ro 0 0
/dev/block/dm-3 /mnt/asec/com.keramidas.TitaniumBackup-1 vfat ro,dirsync,nosuid,nodev,noexec,relatime,uid=1000,f mask=0222,dmask=0222,codepage=cp437,iocharset=iso8 859-1,shortname=mixed,utf8,errors=remount-ro 0 0
/dev/block/dm-4 /mnt/asec/com.dolphin.browser-1 vfat ro,dirsync,nosuid,nodev,noexec,relatime,uid=1000,f mask=0222,dmask=0222,codepage=cp437,iocharset=iso8 859-1,shortname=mixed,utf8,errors=remount-ro 0 0

Code: 
cat /proc/LinuStoreIII/bmlinfo
FSR VERSION: FSR_1.2.1p1_b139_RTM
minor       position           size     units       id
   1: 0x00000000-0x00180000 0x00180000      6        1
   2: 0x00180000-0x00200000 0x00080000      2        2
   3: 0x00200000-0x002c0000 0x000c0000      3        3
   4: 0x002c0000-0x01bc0000 0x01900000    100        4
   5: 0x01bc0000-0x03400000 0x01840000     97       23
   6: 0x03400000-0x03900000 0x00500000     20       25
   7: 0x03900000-0x05200000 0x01900000    100        5
   8: 0x05200000-0x05400000 0x00200000      8        6
   9: 0x05400000-0x05e00000 0x00a00000     40        7
  10: 0x05e00000-0x06800000 0x00a00000     40        8
  11: 0x06800000-0x068c0000 0x000c0000      3        9
  12: 0x068c0000-0x12800000 0x0bf40000    765       21
  13: 0x12800000-0x1dc00000 0x0b400000    720       22
  14: 0x1dc00000-0x1f500000 0x01900000    100       24

(0)(0) bad mapping information
  No   BadUnit   RsvUnit

Dumped bml blocks:
bml1-11,14
bml12,13

BML7.img HEX CODE(Begin)
Code: 
0000:0000 | 41 4E 44 52  4F 49 44 21  00 78 22 00  00 80 20 00  19 3E 0B 00  00 00 20 01  00 00 00 00  00 00 10 01  00 01 20 00  00 08 00 00  00 00 00 00  00 00 | ANDROID!.x"... ..>.... ........... ...........
0000:002E | 00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 6D 65  6D 3D 32 31  31 4D 20 63  6F 6E 73 6F  6C 65 3D 74  74 79 4D 53  4D 32 2C 31  31 35 | ..................mem=211M console=ttyMSM2,115
0000:005C | 32 30 30 6E  38 20 61 6E  64 72 6F 69  64 62 6F 6F  74 2E 68 61  72 64 77 61  72 65 3D 71  63 6F 6D 20  63 6F 6E 73  6F 6C 65 3D  74 74 79 55  53 42 | 200n8 androidboot.hardware=qcom console=ttyUSB
0000:008A | 43 4F 4E 53  4F 4C 45 30  20 61 6E 64  72 6F 69 64  62 6F 6F 74  2E 63 6F 6E  73 6F 6C 65  3D 74 74 79  55 53 42 43  4F 4E 53 4F  4C 45 30 00  00 00 | CONSOLE0 androidboot.console=ttyUSBCONSOLE0...
0000:00B8 | 00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 | ..............................................
0000:00E6 | 00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 | ..............................................
0000:0114 | 00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 | ..............................................
0000:0142 | 00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 | ..............................................
0000:0170 | 00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 | ..............................................
0000:019E | 00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 | ..............................................
0000:01CC | 00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 | ..............................................
0000:01FA | 00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 | ..............................................
0000:0228 | 00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  99 68 EA 91  90 97 91 5C  97 96 B1 E1  22 48 42 4D  BD AC AB 6F  00 00 | .........................hê....\..±á"HBM½¬«o..
0000:0256 | 00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 | ..............................................
 
Last edited:
W

WillingMagic

Guest
Bml mapping is almost done.

Sent from my GT-I5510 using XDA Premium App
 
kraka23

kraka23

Senior Member
Feb 10, 2011
54
6
Here is kernel and ramdisk extracted from bml7 that willing uploaded.

megaupload.com/?d=4VRFR1G3

Could you extract the recovery partition?.
 
kraka23

kraka23

Senior Member
Feb 10, 2011
54
6
WillingMagic can you post de final partition layout please?. Very thanks!. Cheers.
 
K

keyurkarnik

Member
May 2, 2008
17
2
bml9 - boot image confirmed
bml10 - recovery confirmed

I had tried running clockworkmod earlier with some other recovery.
So my bml7 is showing the contents of clockworks partition. So, not sure if bml7 is param.fs, but it gets written to by clockworkmod!!
 
K

keyurkarnik

Member
May 2, 2008
17
2
Just checked on a friend's brand new 551.
The bml7 partition is empty :
All FF FF FF FFFFFFFFFFFFFFFFFFFFFFFF s
 
K

keyurkarnik

Member
May 2, 2008
17
2
Checked on another phone.
By default bml7 is empty (all FFs)

Seems that all of us have tried some stuff like clockwork, so the data on bml7
 
K

keyurkarnik

Member
May 2, 2008
17
2
Does anyone have a working flash_image binary (that works on 551)?
I am trying to flash my partitions with a few changed images, but unable to flash
 
W

WillingMagic

Guest
Maybe you friend have different model or maybe branded roms have different layout? I use latest open rom XWKA7 from Samsung. If anybody use those rom please upload your bml partition.
I tried build clockworld recovery, but may build don`t work, I can`t flash it on my phone. I also tried upload moddified PDA.tar.md5 via Odin, but also hang when i tried. But good news I didn`t bricked my phone:D .
 
K

keyurkarnik

Member
May 2, 2008
17
2
Nope.... checked with another phone at a Samsung showroom.
bml7 is confirmed to be blank - all FFs

We probably had bml7 with some stuff because of running Clockwormod.

Also, as you have issues in booting with your image, how about taking another route?

Lets try to modify basic things like default.prop or init scripts and rewriting to the partition. We could progress from there.

I have tried to do the same, but flash_image does not work. If you have a working version for bml, let me know
 
W

WillingMagic

Guest
I out for few days because my laptop power supply is broken.

IMPORTANT:
Please any GT-I5510 user dump bml6 and bml7. How to dump:
You need root your phone via oneclickroot. And then via any terminal or adb shell
su
dd if=/dev/block/bml7 of=/sdcard/bml7.img
dd if=/dev/block/bml6 of=/sdcard/bml6.img
Then copy to your computer and upload.
Add info about your model and country/world region.

Sent from my GT-I5510 using XDA Premium App
 
kraka23

kraka23

Senior Member
Feb 10, 2011
54
6
Well, what are partition bml6 and bml7 for?. My bml7 have ramdisk and kernel files. I will upload the files soon.
 
A

Ajay191191

Member
Feb 20, 2011
23
100
Here are my bml's:
bml6: h**p://tinyurl.com/6c6yxzh
bml7: h**p://tinyurl.com/62ly9lw
Model: I5510
Firmware version: DDJK4
Country: India.

I would be glad to help for any other thing....and eagerly waiting for gingerbread!!!!:D
 
kraka23

kraka23

Senior Member
Feb 10, 2011
54
6
Anyone know how to enter in Bootloader - Fastboot mode?. I tried with "W" + Power but don't work.
 
K

keyurkarnik

Member
May 2, 2008
17
2
For bootloader :

1. Attach usb cable. Start adb.
adb shell
su
reboot bootloader


2. Start terminal
su
reboot bootloader

3. Shut down phone
Press 'Q' key on keypad + Power button
Keep pressed till phone restarts
 
  • Like
Reactions: kraka23
kraka23

kraka23

Senior Member
Feb 10, 2011
54
6
Thanks buddy. But...

1. I haven't root access in adb shell i don't know why. I rooted my phone with Super One Click 1.7 but don't work adb shell with root permissions unless i click in "Root Shell" in the same program. In this case, adb shell is rooted but temporarily, not permantly.

2. In terminal i have root access but when i execute "su" and "reboot bootloader", the phone reboot normally as if nothing had happened. I guess the bootloader is locked.

3.When i push Q + power, the phone enter in Download mode, not in Bootloader mode.


I guess the phone is not full rooted.
 
W

WillingMagic

Guest
You successful rooted your phone, on official roms you can`t get root access via adb direct, only indirect way via su, all apps which need root works fine. I don`t think the bootloader is protected or encrypt. Some phones doesn`t support fastboot, because they use different block system like Callisto. Fastboot require mtd block, but Callisto use bml and stl blocks, so fastboot can`t work.
 
You must log in or register to reply here.

Similar threads

W
[DEV][Samsung Galaxy GT-I5510 Callisto][ROM & Kernel]Unofficial Cyanogenmod 7
Replies
341
Views
137K
jbanti
jbanti
ajay.al
  • Locked
[ROM][PORT][Samsung Galaxy GT-I5510 ]Unofficial Cyanogenmod 7
Replies
207
Views
113K
mark manning
mark manning
A
[DEV][JB][Samsung Galaxy GT-I5510]Unofficial Cyanogenmod 10
Replies
111
Views
95K
AshuGite
AshuGite
W
[DEV][Samsung Galaxy GT-I5510 Callisto]Unofficial Cyanogenmod 9.0
Replies
140
Views
94K
A
Antonio Almeida Filho
W
Samsung Galaxy GT-I5510 Callisto | Firmware Releases ,Custom Roms , Rooting
Replies
89
Views
90K
protox 109
protox 109

Top Liked Posts

24 Hours All time
  • There are no posts matching your filters.
  • 1
    K
    keyurkarnik
    For bootloader :

    1. Attach usb cable. Start adb.
    adb shell
    su
    reboot bootloader


    2. Start terminal
    su
    reboot bootloader

    3. Shut down phone
    Press 'Q' key on keypad + Power button
    Keep pressed till phone restarts
    View
    1
    K
    keyurkarnik
    551 does not have fastboot

    So, reboot bootloader opens up download mode!!

    The "Bootloader" mode is not present.
    View

New posts