search

bkerler / mtkclient

MTK reverse engineering and flash tool
GNU General Public License v3.0
2.55k stars 510 forks source link

Watchdog not disabled #818

Closed Conti93 closed 11 months ago

Conti93 commented 11 months ago

Hi,

I'm trying to do a full backup of my Android head unit based off a MT8163, however after 5 minutes in preloader mode the unit resets and turns on: MTKclient

In the initial connection log it says "Disabling Watchdog...": Port - Device detected :) Preloader - CPU: MT8163() Preloader - HW version: 0x0 Preloader - WDT: 0x10007000 Preloader - Uart: 0x11002000 Preloader - Brom payload addr: 0x100a00 Preloader - DA payload addr: 0x201000 Preloader - CQ_DMA addr: 0x10212c00 Preloader - Var1: 0xb1 Preloader - Disabling Watchdog... Preloader - HW code: 0x8163 Preloader - Target config: 0x0 Preloader - SBC enabled: False Preloader - SLA enabled: False Preloader - DAA enabled: False Preloader - SWJTAG enabled: False Preloader - EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: False Preloader - Root cert required: False Preloader - Mem read auth: False Preloader - Mem write auth: False Preloader - Cmd 0xC8 blocked: False Preloader - Get Target info Preloader - HW subcode: 0x8a00 Preloader - HW Ver: 0xcb00 Preloader - SW Ver: 0x1 legacyext - Legacy DA2 is patched. Preloader - Jumping to 0x200000 Preloader - Jumping to 0x200000: ok. m_emmc_ret = 0x0 m_emmc_boot1_size = 0x400000 m_emmc_boot2_size = 0x400000 m_emmc_rpmb_size = 0x1000000 m_emmc_gp_size[0] = 0x0 m_emmc_gp_size[1] = 0x0 m_emmc_gp_size[2] = 0x0 m_emmc_gp_size[3] = 0x0 m_emmc_ua_size = 0xe92000000 m_emmc_cid = 534f434f040101493dd16a814d119e6f m_emmc_fwver = 1100000000000000

How can I verify if the watchdog is truly disabled?

Pic of the SoC: image

Thanks. Best regards.

Conti93 commented 11 months ago

FOUND IT. Not a software related problem, on ZXDZ boards and similar you have to start flashing with ACC and BATT+ wires connected, then you need to disconnect the BATT+ wire. Watch out, on some ISO adapters ACC and BATT+ are inverted (like on mine, of course..), if you disconnect BATT+ it will instantly fail.