search

n4ru / 1vyrain

LiveUSB Bootable exploit chain to unlock all features of xx30 ThinkPad machines. WiFi Whitelist, Advanced Menu, Overclocking.
1.03k stars 65 forks source link

T431s #46

Closed Tikimotel closed 4 years ago

Tikimotel commented 4 years ago

Machine: T431s BIOS: GHET44WW Version: 1.29 Flashsize: 16 M

digmorepaka commented 4 years ago

Do you have a ch341a flasher or any other SPI flasher? And would you be willing to do test patches for this machine?

digmorepaka commented 4 years ago

Try this, THIS ROM IS UNTESTED DO NOT FLASH IF YOU DON'T HAVE AN EXTERNAL FLASHER

T431s.zip

Tikimotel commented 4 years ago

I have a SPI flasher, but my mainboard has very small solder points, my clamp won't connect. Don't know if it can be fixed so my clamp can connect for flashing.. However my Winbond chip is 16MB, flashrom is complaining about different size, so it wont flash.

digmorepaka commented 4 years ago

@Tikimotel could you post the entire error?

Tikimotel commented 4 years ago

Using clock_gettime for delay loops (clk_id:1, resolution: 1ms). Found chipset "Intel QM77". Enabling flash write... Warning: BIOS regions SMM protection is enabled! Warning: Setting Bios Controle at 0xdc from 0x2a to 0x09 failed. New value is 0x2a. SPI Configuration is locked down. FREG0: Flash Descriptor region (0x00000000-0x00000fff) is read-only. FREG2: Management Engine region (0x00003000-0x004fffff) is locked. Not all flash regions are freely accessible by flashrom. This is most likely due to an active ME. Please see https://flashrom.org/ME for details. PR0: Warning: 0x01000000-0x012affff is read-only. PR1: Warning: 0x012b0000-0x012cffff is read-only. PR2: Warning: 0x01340000-0x013fffff is read-only. At least some flash regions are read protected. You have to use a flash layout and include only accessible regions. For write operations, you'll additionally need the --noverify-all switch. See manpage for details. OK. Error accessing MT25QL02G, 0x10000000 bytes at 0x00000000f0000000 /dev/map mmap failed: Resource temporarily unavailable. Could not map flash chip MT25QL02G at 0x00000000f0000000. Error accessing MT25QU02G, 0x10000000 bytes at 0x00000000f0000000 /dev/map mmap failed: Resource temporarily unavailable. Could not map flash chip MT25QU02G at 0x00000000f0000000. Found Winbond flash chip "W25Q128.V" (16384 kB, SPI) mapped at physical address 0x00000000ff000000. Reading ich descriptor... done. Using region: "bios". Error: Image size (4194304 B) doesn't match the flash chip's size (16777216 B)!

digmorepaka commented 4 years ago

Oh, you are using the current script from master. That one is currently non functional. Use this one.

Tikimotel commented 4 years ago

I tried the rev5 script (added T431 in the script locally), flash failed to write anything even after padding the file, guess GHET44WW (1.29) is either too new, or the patch isn't working. I will try to downgrade to the oldest bios revision.

digmorepaka commented 4 years ago

It is not, according to your flashrom log the regions are unlocked.

digmorepaka commented 4 years ago

No activity, closing. If you come back to test, will re-open.