Sagem RM50 #12

Interesting strings from:

$ strings rootfs1/lib/modules/2.6.28.9/kernel/drivers/net/wireless/kona/kona.ko

DSPG 802.11 Wireless LAN Driver 1.7n BYPASS RELEASE 4649037

DSPG 802.11abg

author=DSP GROUP,Inc.

description=DSPG WIFI Driver

license=GPL

vermagic=2.6.28.9 preempt mod_unload ARMv5

/home/jyoung/scm/kona-wnc-workaround/SME/Sme.c

/home/jyoung/scm/kona-wnc-workaround/SME/SmeOutput.c

/home/jyoung/scm/kona-wnc-workaround/include/DescUtils.h

/home/jyoung/scm/kona-wnc-workaround/Utils/DescUtils.c

/home/jyoung/scm/kona-wnc-workaround/HAL/HalUtils.c

/home/jyoung/scm/kona-wnc-workaround/LWE/LWE_handlers.c

/home/jyoung/scm/kona-wnc-workaround/Scheduler/scheduler.c

/home/jyoung/scm/kona-wnc-workaround/Decap/Decap.c

DSP Group http://www.dspg.com

http://www.dspg.com/GetFile.ashx?FilePath=/upload/Downloads/&FileName=file_188.pdf

Integrated circuits used in products by leading global brands including: [...] Sagem [...]

Sagem RM50 #11

Are those files really useful in a production firmware?

rootfs1/etc/network/interfaces.bak

rootfs1/usr/lib/alsa-lib/smixer/smixer-hda.la
rootfs1/usr/lib/alsa-lib/smixer/smixer-ac97.a
rootfs1/usr/lib/alsa-lib/smixer/smixer-ac97.la
rootfs1/usr/lib/alsa-lib/smixer/smixer-sbase.la
rootfs1/usr/lib/alsa-lib/smixer/smixer-hda.a
rootfs1/usr/lib/alsa-lib/smixer/smixer-sbase.a

rootfs1/usr/lib/pkgconfig/freetype2.pc

rootfs1/usr/include/readline/chardefs.h
rootfs1/usr/include/readline/tilde.h
rootfs1/usr/include/readline/history.h
rootfs1/usr/include/readline/rlstdc.h
rootfs1/usr/include/readline/keymaps.h
rootfs1/usr/include/readline/rltypedefs.h
rootfs1/usr/include/readline/readline.h
rootfs1/usr/include/readline/rlconf.h

rootfs1/usr/include/freetype2/freetype/ftwinfnt.h
rootfs1/usr/include/freetype2/freetype/ftmodapi.h
rootfs1/usr/include/freetype2/freetype/ftlist.h
rootfs1/usr/include/freetype2/freetype/ftgzip.h
rootfs1/usr/include/freetype2/freetype/fterrors.h
rootfs1/usr/include/freetype2/freetype/tttags.h
rootfs1/usr/include/freetype2/freetype/ftsizes.h
rootfs1/usr/include/freetype2/freetype/ttnameid.h
rootfs1/usr/include/freetype2/freetype/ftxf86.h
rootfs1/usr/include/freetype2/freetype/fttrigon.h
rootfs1/usr/include/freetype2/freetype/ftimage.h
rootfs1/usr/include/freetype2/freetype/ftsnames.h
rootfs1/usr/include/freetype2/freetype/ftsynth.h
rootfs1/usr/include/freetype2/freetype/ftbitmap.h
rootfs1/usr/include/freetype2/freetype/ftotval.h
rootfs1/usr/include/freetype2/freetype/ftchapters.h
rootfs1/usr/include/freetype2/freetype/ftbbox.h
rootfs1/usr/include/freetype2/freetype/ftmm.h
rootfs1/usr/include/freetype2/freetype/ftlzw.h
rootfs1/usr/include/freetype2/freetype/ftgxval.h
rootfs1/usr/include/freetype2/freetype/ftbdf.h
rootfs1/usr/include/freetype2/freetype/fterrdef.h
rootfs1/usr/include/freetype2/freetype/ftpfr.h
rootfs1/usr/include/freetype2/freetype/tttables.h
rootfs1/usr/include/freetype2/freetype/ftincrem.h

rootfs1/usr/include/freetype2/freetype/config/ftstdlib.h
rootfs1/usr/include/freetype2/freetype/config/ftheader.h
rootfs1/usr/include/freetype2/freetype/config/ftconfig.h
rootfs1/usr/include/freetype2/freetype/config/ftoption.h
rootfs1/usr/include/freetype2/freetype/config/ftmodule.h
rootfs1/usr/include/freetype2/freetype/ftmac.h
rootfs1/usr/include/freetype2/freetype/t1tables.h
rootfs1/usr/include/freetype2/freetype/freetype.h
rootfs1/usr/include/freetype2/freetype/ftstroke.h
rootfs1/usr/include/freetype2/freetype/fttypes.h
rootfs1/usr/include/freetype2/freetype/ftsystem.h
rootfs1/usr/include/freetype2/freetype/ftrender.h
rootfs1/usr/include/freetype2/freetype/ftoutln.h
rootfs1/usr/include/freetype2/freetype/ftcache.h
rootfs1/usr/include/freetype2/freetype/ttunpat.h
rootfs1/usr/include/freetype2/freetype/ftglyph.h
rootfs1/usr/include/freetype2/freetype/ftmoderr.h

rootfs1/usr/include/ft2build.h

rootfs1/usr/share/udhcpc/default.script

rootfs1/usr/share/aclocal/freetype2.m4

rootfs1/usr/share/alsa/cards/ICH4.conf
rootfs1/usr/share/alsa/cards/ENS1370.conf
rootfs1/usr/share/alsa/cards/aliases.alisp
rootfs1/usr/share/alsa/cards/CMI8338-SWIEC.conf
rootfs1/usr/share/alsa/cards/SI7018.conf
rootfs1/usr/share/alsa/cards/YMF744.conf
rootfs1/usr/share/alsa/cards/ICH.conf
rootfs1/usr/share/alsa/cards/FM801.conf
rootfs1/usr/share/alsa/cards/ENS1371.conf
rootfs1/usr/share/alsa/cards/CS46xx.conf
rootfs1/usr/share/alsa/cards/EMU10K1X.conf
rootfs1/usr/share/alsa/cards/RME9636.conf
rootfs1/usr/share/alsa/cards/RME9652.conf
rootfs1/usr/share/alsa/cards/PMac.conf
rootfs1/usr/share/alsa/cards/USB-Audio.conf
rootfs1/usr/share/alsa/cards/NFORCE.conf
rootfs1/usr/share/alsa/cards/aliases.conf
rootfs1/usr/share/alsa/cards/ATIIXP-MODEM.conf
rootfs1/usr/share/alsa/cards/PC-Speaker.conf
rootfs1/usr/share/alsa/cards/VXPocket.conf
rootfs1/usr/share/alsa/cards/Aureon71.conf
rootfs1/usr/share/alsa/cards/ES1968.conf
rootfs1/usr/share/alsa/cards/CMI8338.conf
rootfs1/usr/share/alsa/cards/ICH-MODEM.conf
rootfs1/usr/share/alsa/cards/AU8810.conf
rootfs1/usr/share/alsa/cards/AU8820.conf
rootfs1/usr/share/alsa/cards/VX222.conf
rootfs1/usr/share/alsa/cards/ATIIXP-SPDMA.conf
rootfs1/usr/share/alsa/cards/CMI8738-MC8.conf
rootfs1/usr/share/alsa/cards/VIA8233.conf
rootfs1/usr/share/alsa/cards/VXPocket440.conf
rootfs1/usr/share/alsa/cards/VIA8237.conf
rootfs1/usr/share/alsa/cards/Aureon51.conf
rootfs1/usr/share/alsa/cards/ICE1724.conf
rootfs1/usr/share/alsa/cards/VIA686A.conf
rootfs1/usr/share/alsa/cards/Maestro3.conf
rootfs1/usr/share/alsa/cards/ICE1712.conf
rootfs1/usr/share/alsa/cards/PMacToonie.conf
rootfs1/usr/share/alsa/cards/AU8830.conf
rootfs1/usr/share/alsa/cards/TRID4DWAVENX.conf
rootfs1/usr/share/alsa/cards/Audigy.conf
rootfs1/usr/share/alsa/cards/VIA8233A.conf
rootfs1/usr/share/alsa/cards/CA0106.conf
rootfs1/usr/share/alsa/cards/GUS.conf
rootfs1/usr/share/alsa/cards/AACI.conf
rootfs1/usr/share/alsa/cards/EMU10K1.conf
rootfs1/usr/share/alsa/cards/CMI8738-MC6.conf
rootfs1/usr/share/alsa/cards/SI7018
rootfs1/usr/share/alsa/cards/SI7018/sndop-mixer.alisp
rootfs1/usr/share/alsa/cards/SI7018/sndoc-mixer.alisp
rootfs1/usr/share/alsa/cards/Audigy2.conf
rootfs1/usr/share/alsa/cards/ATIIXP.conf
rootfs1/usr/share/alsa/cards/HDA-Intel.conf

rootfs1/usr/share/alsa/pcm/center_lfe.conf
rootfs1/usr/share/alsa/pcm/surround50.conf
rootfs1/usr/share/alsa/pcm/modem.conf
rootfs1/usr/share/alsa/pcm/rear.conf
rootfs1/usr/share/alsa/pcm/dsnoop.conf
rootfs1/usr/share/alsa/pcm/side.conf
rootfs1/usr/share/alsa/pcm/surround41.conf
rootfs1/usr/share/alsa/pcm/front.conf
rootfs1/usr/share/alsa/pcm/iec958.conf
rootfs1/usr/share/alsa/pcm/dmix.conf
rootfs1/usr/share/alsa/pcm/surround71.conf
rootfs1/usr/share/alsa/pcm/surround40.conf
rootfs1/usr/share/alsa/pcm/default.conf
rootfs1/usr/share/alsa/pcm/dpl.conf
rootfs1/usr/share/alsa/pcm/surround51.conf

Sagem RM50 #10

$ find rootfs1/usr/lib/ -maxdepth 1 -not -type l -not -type d

rootfs1/usr/lib/libssl.so.0.9.7

rootfs1/usr/lib/libsysfs.so.2.0.1

rootfs1/usr/lib/libasound.so.2.0.0

rootfs1/usr/lib/libdbus-1.so.3.4.0

rootfs1/usr/lib/libteaklite_ctrl.so

rootfs1/usr/lib/libexpat.so.1.5.2

rootfs1/usr/lib/libz.so.1.2.3

rootfs1/usr/lib/libplayer.so

rootfs1/usr/lib/libjpeg.so.62.0.0

rootfs1/usr/lib/libdbus-c++-1.so.0.0.0

rootfs1/usr/lib/libfreetype.so.6.3.10

rootfs1/usr/lib/libcrypto.so.0.9.7

rootfs1/usr/lib/libusbpp-0.1.so.4.4.4

rootfs1/usr/lib/libubootenv.so

rootfs1/usr/lib/libpng12.so.0.25.0

rootfs1/usr/lib/libfile2flash.so

rootfs1/usr/lib/libusb-0.1.so.4.4.4

rootfs1/usr/lib/libdspgspiritmp3wma.so

rootfs1/usr/lib/libmad.so.0.2.1

rootfs1/usr/lib/libplayer.so.0.0.1

Sagem RM50 #9

$ find rootfs1/usr/sbin/ -not -type l -not -type d

rootfs1/usr/sbin/nandwrite

rootfs1/usr/sbin/ubicrc32

rootfs1/usr/sbin/ubootenv

rootfs1/usr/sbin/pddcustomize

rootfs1/usr/sbin/unubi

rootfs1/usr/sbin/alsactl

rootfs1/usr/sbin/ubiattach

rootfs1/usr/sbin/ubicrc32.pl

rootfs1/usr/sbin/flash_lock

rootfs1/usr/sbin/mtd_debug

rootfs1/usr/sbin/sumtool

rootfs1/usr/sbin/ubiformat

rootfs1/usr/sbin/ubirmvol

rootfs1/usr/sbin/ubinfo

rootfs1/usr/sbin/racoon

rootfs1/usr/sbin/ubimkvol

rootfs1/usr/sbin/docfdisk

rootfs1/usr/sbin/nand2bin

rootfs1/usr/sbin/nftl_format

rootfs1/usr/sbin/ubigen

rootfs1/usr/sbin/plainrsa-gen

rootfs1/usr/sbin/pfiflash

rootfs1/usr/sbin/file2flash

rootfs1/usr/sbin/mtdinfo

rootfs1/usr/sbin/mkbootenv

rootfs1/usr/sbin/flash_info

rootfs1/usr/sbin/ubidetach

rootfs1/usr/sbin/ubimirror

rootfs1/usr/sbin/doc_loadbios

rootfs1/usr/sbin/flash_eraseall

rootfs1/usr/sbin/mkfs.jffs2

rootfs1/usr/sbin/ntpd

rootfs1/usr/sbin/setkey

rootfs1/usr/sbin/ubirename

rootfs1/usr/sbin/nanddump

rootfs1/usr/sbin/ubiupdatevol

rootfs1/usr/sbin/ftl_check

rootfs1/usr/sbin/flash_unlock

rootfs1/usr/sbin/bin2nand

rootfs1/usr/sbin/pfi2bin

rootfs1/usr/sbin/racoonctl

rootfs1/usr/sbin/flash_erase

rootfs1/usr/sbin/jffs2dump

rootfs1/usr/sbin/ftl_format

rootfs1/usr/sbin/nftldump

rootfs1/usr/sbin/flashcp

rootfs1/usr/sbin/ubinize

rootfs1/usr/sbin/mkfs.jffs

rootfs1/usr/sbin/mkpfi

rootfs1/usr/sbin/swupgrade

rootfs1/usr/sbin/dmtest

rootfs1/usr/sbin/xpndr-teaklite_ctrl_app

Sagem RM50 #8

$ find rootfs1/usr/bin/ -not -type l -not -type d

rootfs1/usr/bin/microperl

rootfs1/usr/bin/iostat

rootfs1/usr/bin/supplicant-console

rootfs1/usr/bin/ftp

rootfs1/usr/bin/smbmount

rootfs1/usr/bin/whois

rootfs1/usr/bin/sqlite3

rootfs1/usr/bin/dbus-daemon

rootfs1/usr/bin/mplayer

rootfs1/usr/bin/xpndr-dsploader

rootfs1/usr/bin/dbus-launch

rootfs1/usr/bin/logger

rootfs1/usr/bin/rlogin

rootfs1/usr/bin/telnet

rootfs1/usr/bin/test-player

rootfs1/usr/bin/memtester

rootfs1/usr/bin/supplicant-passprase

rootfs1/usr/bin/iperf

rootfs1/usr/bin/cjpeg

rootfs1/usr/bin/file

rootfs1/usr/bin/dbus-monitor

rootfs1/usr/bin/aplay

rootfs1/usr/bin/djpeg

rootfs1/usr/bin/tftp

rootfs1/usr/bin/xpndr-console

rootfs1/usr/bin/dialog

rootfs1/usr/bin/rcp

rootfs1/usr/bin/freetype-config

rootfs1/usr/bin/ping

rootfs1/usr/bin/wmdbussrv

rootfs1/usr/bin/dbus-uuidgen

rootfs1/usr/bin/alsamixer

rootfs1/usr/bin/smbmnt

rootfs1/usr/bin/ping6

rootfs1/usr/bin/dbus-cleanup-sockets

rootfs1/usr/bin/dmdbussrv

rootfs1/usr/bin/amixer

rootfs1/usr/bin/rsh

rootfs1/usr/bin/jpegtran

rootfs1/usr/bin/supplicant

rootfs1/usr/bin/smbumount

rootfs1/usr/bin/strace

rootfs1/usr/bin/dbus-send

Sagem RM50 #7

$ find rootfs1/lib/ -maxdepth 1 -not -type l -not -type d

rootfs1/lib/libnss_nisplus-2.3.6.so

rootfs1/lib/libcidn-2.3.6.so

rootfs1/lib/ld-2.3.6.so

rootfs1/lib/libreadline.so.5.1

rootfs1/lib/libm-2.3.6.so

rootfs1/lib/libanl-2.3.6.so

rootfs1/lib/libgcc_s.so.1

rootfs1/lib/libthread_db-1.0.so

rootfs1/lib/libpthread-2.3.6.so

rootfs1/lib/libcrypt-2.3.6.so

rootfs1/lib/libnss_hesiod-2.3.6.so

rootfs1/lib/libncurses.so.5.6

rootfs1/lib/libresolv-2.3.6.so

rootfs1/lib/libhistory.so.5.1

rootfs1/lib/libnss_nis-2.3.6.so

rootfs1/lib/libnss_files-2.3.6.so

rootfs1/lib/libnss_compat-2.3.6.so

rootfs1/lib/librt-2.3.6.so

rootfs1/lib/libnss_dns-2.3.6.so

rootfs1/lib/libdl-2.3.6.so

rootfs1/lib/libsqlite3-3.3.17.so.0.8.6

rootfs1/lib/libc-2.3.6.so

rootfs1/lib/libutil-2.3.6.so

rootfs1/lib/libBrokenLocale-2.3.6.so

rootfs1/lib/libstdc++.so.6.0.8

rootfs1/lib/libnsl-2.3.6.so

$ strings rootfs1/lib/libsqlite3-3.3.17.so.0.8.6 | grep -E "[0-9]\.[0-9]\.[0-9]{2}"

libsqlite3-3.3.17.so.0

3.3.17

SQLite 3.3.17

Sagem RM50 #6

$ find rootfs1/bin/ -not -type l -not -type d

rootfs1/bin/busybox

rootfs1/bin/lrz

rootfs1/bin/lsz

$ strings rootfs1/bin/busybox | grep -E "BusyBox v[0-9]\.[0-9]{1,2}\.[0-9]"

BusyBox v1.14.1 (2009-12-22 16:52:28 CST)

syslogd started: BusyBox v1.14.1

BusyBox 1.14.1
http://www.busybox.net/downloads/busybox-1.14.1.tar.bz2

$ strings rootfs1/bin/lrz | grep -E "[0-9]{1}\.[0-9]{2}\.[0-9]{2}"

0.12.20

$ strings rootfs1/bin/lsz | grep -E "[0-9]{1}\.[0-9]{2}\.[0-9]{2}"

0.12.20

lrzsz 0.12.20
http://www.ohse.de/uwe/releases/lrzsz-0.12.20.tar.gz

Sagem RM50 #5

$ strings u-boot-RM50-YD3-V0.40-E-20101108-182755.img0 | grep -E "20[0-9]{2}\.[0-9]{2}"

U-Boot dw 4.05 2009.03 (Nov 08 2010 - 18:46:06)

U-Boot 2009.03
ftp://ftp.denx.de/pub/u-boot/u-boot-2009.03.tar.bz2

Sagem RM50 #4

$ sudo aptitude install sqlite3

$ sqlite3 -line rootfs1/etc/syssettings/syssettings.sqlite '.table'

BINARY_TYPE INTEGER_TYPE PLAIN_TABLE STRING_TYPE

$ sqlite3 -line rootfs1/etc/syssettings/syssettings.sqlite 'select * from PLAIN_TABLE'

ID = 2

GROUP_NAME = WifiMgr

KEY_NAME = CountryCodeSettings

TYPE = 0

ID = 3

GROUP_NAME = WifiMgr

KEY_NAME = LastAutoConnectValue

TYPE = 0

ID = 4

GROUP_NAME = wifimgr

KEY_NAME = uuid_e

TYPE = 1

ID = 5

GROUP_NAME = RfCalib_RegistersByBand

KEY_NAME = RegistersList

TYPE = 1

ID = 6

GROUP_NAME = RfCalib_RegistersByBand

KEY_NAME = Reg294

TYPE = 1

ID = 7

GROUP_NAME = RfCalib_RegistersByBand

KEY_NAME = Reg65

TYPE = 1

ID = 8

GROUP_NAME = RfCalib_RegistersByBand

KEY_NAME = Reg74

TYPE = 1

ID = 9

GROUP_NAME = RfCalib_RegistersByChannel24

KEY_NAME = RegistersList

TYPE = 1

ID = 10

GROUP_NAME = RfCalib_RegistersByChannel24

KEY_NAME = Reg340

TYPE = 1

ID = 11

GROUP_NAME = WifiMgr

KEY_NAME = WmDBusType

TYPE = 0

ID = 12

GROUP_NAME = RfCalib_RegistersByBand

KEY_NAME = Reg351

TYPE = 1

ID = 13

GROUP_NAME = RfCalib_RegistersByBand

KEY_NAME = Reg3

TYPE = 1

Sagem RM50 #3

$ cat rootfs1/.version

RM50-YD3-V0.40-E

20101108-182755

$ cat rootfs1/etc/fstab

# /etc/fstab: static file system information.

#

#
proc /proc proc defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
tmpfs /mnt tmpfs defaults 0 0
sysfs /sys sysfs defaults 0 0
devpts /dev/pts devpts defaults,gid=5,mode=620 0 0

$ cat rootfs1/etc/inetd.conf
telnet stream tcp nowait root /usr/sbin/telnetd telnetd -i

$ cat rootfs1/etc/issue


Welcome to the DSPG DW Platform development environment.

$ cat rootfs1/etc/ld.so.conf
/lib
/usr/lib
/opt/Qtopia-4.4.2-release/lib
/opt/Qtopia-4.4.2-release/qt_plugins
/opt/Qtopia-4.4.2-release/plugins
/opt/Qtopia-4.2.1-release/lib

$ cat rootfs1/etc/resolv.conf
search expedio.dspg
nameserver 172.19.35.1
nameserver 194.90.1.5
nameserver 212.143.212.143

Sagem RM50 #2

$ sudo unsquashfs -d rootfs1 rootfs1.squashfs-RM50-YD3-V0.40-E-20101108-182755.img2

Parallel unsquashfs: Using 4 processors

1424 inodes (1772 blocks) to write

[===========================================================================================================-] 1772/1772 100%

created 960 files

created 116 directories

created 273 symlinks

created 191 devices

created 0 fifos

$ sudo unsquashfs -d rootfs2 rootfs2.squashfs-RM50-YD3-V0.40-E-20101108-182755.img3

Parallel unsquashfs: Using 4 processors

123 inodes (686 blocks) to write

[=============================================================================================================/] 686/686 100%

created 119 files

created 15 directories

created 4 symlinks

created 0 devices

created 0 fifos

Sagem RM50 #1

$ wget http://support.sagemcom.com/site/driver/RM50%201117.rar

$ unrar x RM50\ 1117.rar

UNRAR 4.00 beta 3 freeware Copyright (c) 1993-2010 Alexander Roshal


Extracting from RM50 1117.rar

Extracting zImage-RM50-YD3-V0.40-E-20101108-182755.img1 OK
Extracting rootfs1.squashfs-RM50-YD3-V0.40-E-20101108-182755.img2 OK
Extracting rootfs2.squashfs-RM50-YD3-V0.40-E-20101108-182755.img3 OK
Extracting u-boot-RM50-YD3-V0.40-E-20101108-182755.img0 OK
All OK

$ file rootfs1.squashfs-RM50-YD3-V0.40-E-20101108-182755.img2
rootfs1.squashfs-RM50-YD3-V0.40-E-20101108-182755.img2: Squashfs filesystem, little endian, version 3.0, 11863851 bytes, 1540 inodes, blocksize: 65536 bytes, created: Mon Nov 8 13:09:00 2010

$ file rootfs2.squashfs-RM50-YD3-V0.40-E-20101108-182755.img3
rootfs2.squashfs-RM50-YD3-V0.40-E-20101108-182755.img3: Squashfs filesystem, little endian, version 3.0, 14278764 bytes, 138 inodes, blocksize: 65536 bytes, created: Mon Nov 8 13:09:03 2010

$ file u-boot-RM50-YD3-V0.40-E-20101108-182755.img0
u-boot-RM50-YD3-V0.40-E-20101108-182755.img0: data

$ file zImage-RM50-YD3-V0.40-E-20101108-182755.img1
zImage-RM50-YD3-V0.40-E-20101108-182755.img1: data