summaryrefslogtreecommitdiff
path: root/utils/nwztools (follow)
Commit message (Collapse)AuthorAge
* nwztools/scsitool: add a command to query multiple nvp nodes at onceAmaury Pouly2017-06-18
| | | | Change-Id: I89fed904b282a202bc845b08f4c8d1200a49636d
* nwztools/scsitool: fix devinfo, add dhpAmaury Pouly2017-06-18
| | | | | | | | | | | The devinfo request returned the raw data, now the tool prints the various fields. Also add support for the dhp (destination/headphones/color ...): this one is untested because it's only supported starting from A10 or A20. There is still a problem with the dpcc prop: although it should work for DEVINFO, it does not, despite the fact that the get_dev_info command works and is internally (on the Sony) translated into a dpcc request. I keep the code just in case. Change-Id: I5aa8ef4afb0b11d3c0ddfa3d38f3e737ee1aff66
* nwztools/scsitool: print error on check senseAmaury Pouly2017-06-18
| | | | | | | The detailled error message is only printed if -d switch is on command line, otherwise there is no error message which is wrong so fix that. Change-Id: I397541c467940e9b290ee8d4ae704368b1ce132b
* nwztools: add KAS for NW-S10 (brute-forced using upgtool)Amaury Pouly2017-06-13
| | | | Change-Id: Ia37818faee29130ffe3690c83f85a39bd35637e0
* nwztools: add nvp description for NW-S10 seriesAmaury Pouly2017-06-13
| | | | Change-Id: Id6a6e51288f4ff24c0063b6c16b74109211e63c0
* Add NW-A36 and NW-A37 model IDs, based on the A30 service manual.Amaury Pouly2017-06-05
| | | | | | | | I am unsure about the names of the player, the manual says A36HN and A37HN but at the same time there is a A35 and A35HN with the same ID, and Sony does not usually put the "HN" in its device list. Change-Id: Idbf32970aa334b30f1b8947a78b8eebd524b193b
* nwztools/database: misc improvementsIgor Skochinsky2017-04-25
| | | | | | | | | | | | | | | | | | | | | | | | * make gen_db.py work on Windows/Python 2 - use hashlib module instead of md5sum, also don't rely on / for file path matching - don't use 'file' for a variable name * fix parse_nvp_header.sh for older kernels pre-emmc kernel sources use a slightly different #define format; adjust regexp to catch it. * add nwz-x1000 series NVP layout (from icx1087_nvp.h) some new tags have no description, alas the driver doesn't have them :/ * minor fixes to nvp/README fixed typos/wording Change-Id: I77d8c2704be2f2316e32aadcfd362df7102360d4
* nwztools/upgtools: misc fixesIgor Skochinsky2017-04-25
| | | | | | | | * added KAS for nwz-x1000 (extracted from an NWZ-X1060 via "get_dnk_nvp kas") * hint that -o is needed when extracting Change-Id: Ic91c448aa058a22c8ddcae54726f628f7cf60f6b
* nwztools/upgtools: add key for NWZ-A840Amaury Pouly2017-04-25
| | | | Change-Id: I0a191db1970e64b5ced518c68861392ba342404f
* nwztools: small cleanupsAmaury Pouly2017-04-25
| | | | Change-Id: I4fde020ca0556a84d051f9b5e46f49ee1241266e
* nwztools/script: fix dump_rootfs.sh to handle ext4Amaury Pouly2017-02-04
| | | | Change-Id: I04bd7599a58669df96dfd018a2ab0e3d53e06694
* nwztools/upgtools: add real KAS for NW-ZX100 and fix typoAmaury Pouly2017-01-14
| | | | Change-Id: I4e4679d6e92c1c0fc8a03db5201aee39d82b24b2
* nwztools: add a "reset all settings" message in dest_toolAmaury Pouly2017-01-09
| | | | | | Users can't read the wiki instructions, hopefully they can read this... Change-Id: I3840879fdc663fb6e7f9234f352eea04a556256a
* nwztools: fix typo (nwz-zx100 -> nw-zx100)Amaury Pouly2017-01-09
| | | | | | Also now gen_db.py can check for such mismatch Change-Id: I4d91aae0dde08c866eda2ed5da3c11431c46e06a
* nwztools: add various info about S740, S750, S640, E050Amaury Pouly2017-01-08
| | | | Change-Id: I2cc887ce2824a2d0b9aeb2a89df662c621c28750
* nwztools: forgot fileAmaury Pouly2017-01-08
| | | | Change-Id: I4341f2af71675cb795987ecc5ce12104445a9d97
* nwztools/upgtools: add real NW-A20 kasAmaury Pouly2017-01-08
| | | | Change-Id: I88fb2aefafbc7820a49847fbf0888de9cf81bd3f
* Makefile cleanupsAmaury Pouly2017-01-08
| | | | Change-Id: I69b8b81d357553c979682d42097eba864c951512
* nwztools/scitool: rework node size, remove relaxed modeAmaury Pouly2017-01-08
| | | | | | | | The cool now takes the database as a hint and will not complain if the device returns less data. The tool also supports user provided size and raw node numbers that are not in the database (advanced usage). Change-Id: I8cec536718d7eff01c7803bea648d6122b82377a
* nwztools: add NW-WM1 kasAmaury Pouly2017-01-08
| | | | | | Like the NW-A30, we don't know how to use it, but record it anyway. Change-Id: Iebd26637253613625a4885afe88695ad3ffb0605
* nwztools: add A35 model and KASAmaury Pouly2017-01-08
| | | | | | | | We don't know the encryption method, the KAS is completely different but it might be useful to record it anyway for future purposes. MID extracted from device, Japanese NW-A35. Change-Id: I4c4bb5b063da99003b5c316061d8c490b77428a4
* nwztool/upgtools: replace NWZ-A10 kas by the real oneAmaury Pouly2017-01-08
| | | | | | Extracted from a target. Change-Id: Ieb4aff15f332a681142a7079c1adf3b1da31de24
* nwztools: rename nwz-a20 to nw-a20, that was a typoAmaury Pouly2017-01-08
| | | | Change-Id: I88ae7391732c6f41c3c4adccce2ddf0a92142067
* nwztools: remove NW-ZX2Amaury Pouly2017-01-07
| | | | | | | It is Android based and despite the fact that Sony wrote an NVP driver for it, experiments suggest it is unused because it returns ff all the time... Change-Id: I37750b659e341b21bed5ebaccf60f9f5fe569f64
* nwztools: add NW-WM1A/Z model IDsAmaury Pouly2017-01-07
| | | | | | | Also fix code that was supposed to sort things deterministically and was a massive failure. Change-Id: Iedf25f05a94ef51421710a283eb60f33ee977de1
* nwztools/scsitools: use new SCSI libraryAmaury Pouly2017-01-07
| | | | Change-Id: I1b5688ba7ad99c7a22ba4532c8237b4563e4a9e4
* nwztools/scsitool: add relaxed mode for nvpAmaury Pouly2017-01-07
| | | | Change-Id: I0a139eb236f825368ae627fdbb2f75286f747f10
* imxtools: various fixes for WindowsAmaury Pouly2017-01-07
| | | | | | | | Don't use colors since the terminal doesn't support it. Also packing is broken on MinGW so use #pragma pack when compiling for windows, this is also supported by MSCV. Change-Id: I635649d52ed5f2e0af46cb9ca2ec325955b2ddb2
* nwztools/scsitool: add option to force/specify seriesAmaury Pouly2017-01-04
| | | | | | | | | | | We cannot auto-detect a device if we don't know its model ID, but we can't know the model ID if we haven't decrypted the upgrade which requires the key. The only way to solve this chicken-and-egg problem is to get the NVP table from kernel, create an empty series in the database (no model ID), then get the key using scsitool and forcing the model (using this commit), then decrypt the upgrade and get the model ID list. Change-Id: I8eced486a5f6a1a99028b25fdc4f87a3b11e31a8
* nwztools: cleanup crypto, switch MD5 to Crypto++Amaury Pouly2017-01-04
| | | | | | | We already use Crypto++ for DES anyway, and using OpenSSL is not great because of its incompatible licence. Change-Id: I78771b84c1708795a0c0c30afa5bdfe4885dea4e
* nwztools/upg: move upg handling to its own file, completely rework kas handlingAmaury Pouly2017-01-04
| | | | | | This was a huge mess, the new is much cleaner hopefully. Change-Id: I43663d021dc8bc31662d3923e1c3da22d987ebf9
* nwztools/upgtools: add more brute force algorithmsAmaury Pouly2017-01-04
| | | | | | | Allow to search for hex with upper case and alphanumeric. This is *much* slower of course. Change-Id: I41a2fc63c4b2220c21147b711098ebc37ddb3527
* nwztools: add NW-WM1 nvp table, regenerate databaseAmaury Pouly2017-01-04
| | | | Change-Id: If5781f0a98b3f2fee08a2daed383064cc59f1680
* nwztools: small fixesAmaury Pouly2017-01-04
| | | | | | Make sure scripts use bash, make nwz database generator more deterministic Change-Id: I26812b697abe0406fb3c60d6eb231cb27edc81d5
* nwztools/scripts: mount storage with ext3 instead of ext2Amaury Pouly2016-11-20
| | | | | | | | Since ext3 supports ext2, we can support more platforms. Some platforms use ext4 with a very specific set of options, we I haven't encountered those yet so it's not currently a problem. Change-Id: Iff87e925a4caa866c6a66b1883ad6baab88c0b8d
* nwztools/plattools: improve makefile to build images automaticallyAmaury Pouly2016-11-20
| | | | Change-Id: Ibf17fe523c6ef534368d6f94f43fce5ac0c91caf
* Add KAS for NWZ-E470Marcin Bukat2016-11-14
| | | | Change-Id: I1b8272a486ba2377e5047855acda3f80aa92c232
* nwztools: rework dualbootAmaury Pouly2016-11-12
| | | | | | | | | | | | | | | | | The new code gets closer to an actual bootloader: - it provides a menu with three options: Sony, Rockox, tools with icons (and extracts the Sony logo from the NVP) - the dualboot install script now creates a symlink from /.rockbox to /contents/.rockox which is necessary to run rockbox - more text drawing / framebuffer functions In the long run, we will move this under bootloader/ and rbutil/ and also use firmware/ drawing facilities, at the moment we use OF display program which is slow and creates some flickering. The logo extraction/placement code was tested with resolution 240x320 and I guessed some reasonable values for 240x400, but those will probably need some tweaking. Change-Id: I0319be902d21a7d33c1dee0fffdb4797065dbf8a
* nwztool/scsitools: cleanup and add destination changer toolAmaury Pouly2016-11-11
| | | | | | | | | | | | | Now that we have a nice database of player index, the scsitool becomes more useful and supports a lot more players. I did some general cleanup of the code, though eventually it would be nice to really split it into a library and a CLI. The SCSI vendor command allow to read but also write most NVP nodes. Since there seems to a demand to change destination and sound pressure settings on device, I implement this feature in the tool. I do not plan to allow arbitrary NVP writes because this could easily brick the device. Changing the destination should be safe, but as usual, use at your own risks. Change-Id: Iff4e8cc3ac97b965c1df849051c5fd373756cda5
* nwztools/plattools: use player database and rework stuffAmaury Pouly2016-11-11
| | | | | | | Using the database, we can now safely read/write the NVP. I also add more support for Sony's "display" tool. Change-Id: I8439fe9bad391c7f29859d99f236781be7983625
* nwztools/database: add database of information on Sony NWZ linux playersAmaury Pouly2016-11-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There must be an evil genius in Sony's Walkman division. Someone who made sure that each model is close enough to the previous one so that little code is needed but different enough so that an educated guess is not enough. Each linux-based Sony player has a model ID (mid) which is a 32-bit integer. I was able to extract a list of all model IDs and the correspoding name of the player (see README). This gives us 1) a nice list of all players (because NWZ-A729 vs NWZ-A729B, really Sony?) 2) an easy way to find the name of player programatically. It seems that the lower 8-bit of the model ID gives the storage size but don't bet your life on it. The remaining bytes seem to follow some kind of pattern but there are exceptions. From this list, I was able to build a list of all Sony's series (up to quite recent one). The only safe way to build that is by hand, with a list of series, each series having a list of model IDs. The notion of series is very important because all models in a series share the same firmware. A very important concept on Sony's players is the NVP, an area of the flash that stores data associated with keys. The README contains more information but basically this is where is record the model ID, the destination, the boot flags, the firmware upgrade flags, the boot image, the DRM keys, and a lot of other stuff. Of course Sony decided to slightly tweak the index of the keys regularly over time which means that each series has a potentially different map, and we need this map to talk to the NVP driver. Fortunately, Sony distributes the kernel for all its players and they contain a kernel header with this information. I wrote a script to unpack kernel sources and parse this header, producing a bunch of nw-*.txt files, included in this commit. This map is very specific though: it maps Sony's 3-letter names (bti) to indexes (1). This is not very useful without the decription (bti = boot image) and its size (262144). This information is harder to come by, and is only stored in one place: if icx_nvp_emmc.ko drivers, found on the device. Fortunately, Sony distributes a number of firmware upgrade, that contain the rootfs, than once extracted contain this driver. The driver is a standard ELF files with symbols. I wrote a parsing tool (nvptool) that is able to extract this information from the drivers. Using that, I produced a bunch of nodes-nw*.txt files. A reasonable assumption is that nodes meaning and size do not change over time (bti is always the boot image and is always 262144 bytes), so by merging a few of those file, we can get a complete picture (note that some nodes that existed in older player do not exists anymore so we really need to merge several ones from different generations). The advantage of storing all this information in plain text files, is that it now makes it easy to parse it and produce whatever format we want to use it. I wrote a python script that parses all this mess and produces a C file and header with all this information (nwz_db.{c,h}). Change-Id: Id790581ddd527d64418fe9e4e4df8e0546117b80
* nwztools/upgtools: cleanupAmaury Pouly2016-11-11
| | | | | | | There is no need to store the key and sig since those are derived from the KAS anyway. Change-Id: I228913b1cb32e496db265e9a7aaf3bb4200a9f6b
* forgot fileAmaury Pouly2016-11-06
| | | | Change-Id: I32e23035a608ee04a69690975ab4bf629a902388
* nwztools/plattools: fix black screen issue in dualboot, rework dualbootAmaury Pouly2016-11-06
| | | | | | | | | | Sony added extensions to the frambuffer interface. It is important to take them into account since the OF uses them and might leave the framebuffer in an unusual state which would make the dualboot not display anything. Also rework the dualboot code so that it can boot rockbox (not doing anything at the moment), display all tools or boot the OF. Change-Id: Ia0f589c9ec8558f375270841503c0964aff07f0b
* nwztools: add preliminary dualboot and dualboot install scriptAmaury Pouly2016-11-01
| | | | | | | | | | | | | | | | | | | At the moment, the script install_duaboot does the following: - rename SpiderApp to SpiderApp.of (unless it already exists) - install payload as SpiderApp - fixes permissions Since SpiderApp is the main app, it will execute instead of the OF. The current dualboot code (dualboot.c) is still a preliminary but the current version displays an "all tools" menu to choose for. When exitting the menu using BACK, it will run the OF. With the modifications made by the install script, it should not be possible to break the device. In the worst case scenario, the dualboot code crashes and it restarted by the sysmgrd, or hangs. A safe way to recover is to plug the USB cable and reset the device: the system manager will then start the USB app and one can reflash the device if necessary. Change-Id: Id9edab0347538ad2a8651a28aea7fd083feaa626
* nwztools/upgtools: sanitize series name and add keysAmaury Pouly2016-10-31
| | | | | | | | Unify series names: e46x -> e460 to be consistent with Sony' name. Add keys for various players that were cracked using upgtools. The real KAS would need to be extracted from a target but at least we can open/create firmware upgrades. Change-Id: Id23a10e10170d7f6330c6699bf205c4df5ddebfe
* nwztools/plattools: rework/clean and add an all-in-one toolAmaury Pouly2016-10-31
| | | | | | | This new tool (all_tools) embeds all the other tools and provides a menu to choose which one to run. Change-Id: I0e07864dd46559a7079b0f942c25155e6fa07112
* nwztools/plattools: add a tool to change destination and sound pressureAmaury Pouly2016-10-28
| | | | | | | | Since the nwz_lib does not have any nvp code yet, it's quite of ugly hack with hardcoded nvp node (11) for shipment information (shp). Thus I whitelisted two series (NWZ-E460 and NWZ-A860) which I know for sure use this node ID. Change-Id: I94c9b0db1f9d7ad764d2aa50576a911e710f25e1
* nwztools/plattools: add device listAmaury Pouly2016-10-28
| | | | | | | | This list can map from model id to device name. It was automatically extracted from Sony's tools. In the future, we will probably generate it from a clean database containing more useful information. Change-Id: Ibe580edf25b60bf0bf4aef4a06f40dddd19c5404
* nwztools/scripts: export model id in an environment variableAmaury Pouly2016-10-28
| | | | | | | This is useful because there is no easy way to get it except from Sony's tool, unless one knows the npv node, but that requires to know the model already... Change-Id: I202f7cdb2f7cf924cc5bdb53c17e34600d4bf153
generated by cgit v1.1 at 2026-04-25 07:19:21 +0000