Related posts

• T-Mobile G1 Nand Flash Dumped! (0)
• WebNetta Interview: Seth Lemons a contributor to the “Wifi Tether for Root Users” app. (0)
• Rooted RC33 Posted, JFv1.41 *Updated* (0)
• How to Downgrade your G1 to get Root. (0)
• Haykuro releases Rodgers Android Rom before Rogers (0)

<Eddie C. Dost>
now it is clear why we do not see the full nand device. If the
msm_nand driver registers partitions, it will not register the
device itself, so we cannot access this as char device.
Could you compile a kernel where you remove the two lines containing
the word “else” in drivers/mtd/devices/msm_nand.c, lines 1237 and 1263?
With this the msm_nand.c driver will register the whole device as
7th device after the 6 partions. A dump of the partitions is not really
interesting, as we know what is on there. Maybe you can also change
line 72 in drivers/mtd/mtdcore.c from DEBUG(0, “mtd:…”) to
printk(”mtd:…”);

Once you have this, and the kernel is booted you should see seven
nand devices registered in the kernel boot log you get with “dmesg”.

Now, please create the device nodes for the 7ths nand:
mknod /dev/mtd/mtd6 c 90 12
mknod /dev/mtd/mtd6ro c 90 13
Then you should be able to dump the nand image before the partitions
used by linux:
dd if=/dev/mtd/mtd6ro of=<path to dump> bs=2048 count=18944
which should produce around 38797312 bytes of data. This data is the
start of the nand interesting to analyze and the “misc” partition, to
verify we have it dumped correctly.

<Jay Freeman>

That got exactly the expected amount of data: 38797312 bytes. More
importantly:

# strings mtd6ro | head -n 3
0.95.0000
Dream SPL EVT
Shipped

This is followed by a bunch of ARM code. Congratulations, you won! ;P

(By the way, I find this sort of thing both really fun and really important,
so don’t think you’re taking up my time: I’m thankful you are also working
on G1 hacks. I only didn’t respond to the e-mail asking me to try out the
other nand dumper because today was too busy, still recovering from
Thanksgiving break.)

For people who have root’d G1’s, get this boot.img (which is compatible with
my previous ones, but has a slightly updated Bluetooth driver Google
committed and Eddie’s MTD hack):
http://test.saurik.com/g1-hackers/boot-mtd.img. I’ll have this hack in my
next update image as well (as it seems completely harmless: it just
activates more devices).

You can install this with “flash_image boot boot-mtd.img”, after which you
should reboot. (It also has all my other standard modifications to mount and
init, so you can use this and keep using whatever cool stuff you have setup,
although note I removed “include” from init and corrected it to using
“import”, although I doubt many are using that.)

Past that, you should use Eddie’s dd command (you don’t need to make the
device nodes, as init does this for us: it has a udev-alike in it).

dd if=/dev/mtd/mtd6ro of=<path to dump> bs=2048 count=18944

UPDATE:

Nand Dump file here http://www.2shared.com/file/4394944/b791a62e/nand.html

Related posts

• Rooted RC33 Posted, JFv1.41 *Updated* (0)
• How to Downgrade your G1 to get Root. (0)
• G1 USB Connector (0)
• WebNetta Interview: Seth Lemons a contributor to the “Wifi Tether for Root Users” app. (0)
• Haykuro releases Rodgers Android Rom before Rogers (0)