FreeCalypso > hg > freecalypso-sw

comparison doc/Compal-unlock @ 433:2d8ab1b0df8d

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
rvinterf/doc/tfc139.usage: written doc/Compal-unlock: typo fix
author Michael Spacefalcon <msokolov@ivan.Harhan.ORG>
date Sun, 22 Jun 2014 00:17:44 +0000
parents 7e305184b0b4
children 3f67d5bf96ef
comparison
equal deleted inserted replaced
432:15e69d31c96f 433:2d8ab1b0df8d
140 140
141 Do as it says. The -c none option tells fc-loadtool to skip compalstage and 141 Do as it says. The -c none option tells fc-loadtool to skip compalstage and
142 proceed directly to feeding loadagent to the Calypso boot ROM. You should now 142 proceed directly to feeding loadagent to the Calypso boot ROM. You should now
143 be in full control of the phone via fc-loadtool. 143 be in full control of the phone via fc-loadtool.
144 144
145 There is one additional quick worth mentioning. It appears that Mot/Compal's 145 There is one additional quirk worth mentioning. It appears that Mot/Compal's
146 main fw (at least TF's version 8.8.17, which is the version we break into with 146 main fw (at least TF's version 8.8.17, which is the version we break into with
147 tfc139; other versions are anyone's guess) keeps resetting the RTC alarm 147 tfc139; other versions are anyone's guess) keeps resetting the RTC alarm
148 registers in the Calypso DBB as it runs, always keeping the alarm time in the 148 registers in the Calypso DBB as it runs, always keeping the alarm time in the
149 near future relative to the current time. When one breaks into this firmware 149 near future relative to the current time. When one breaks into this firmware
150 with tfc139 and takes over the control of the device with fc-loadtool, this 150 with tfc139 and takes over the control of the device with fc-loadtool, this
162 tfc139) handles this special form of boot rather oddly: it proceeds to the same 162 tfc139) handles this special form of boot rather oddly: it proceeds to the same
163 end state it would have reached via a normal power button hold-down boot 163 end state it would have reached via a normal power button hold-down boot
164 (powered on with the "Insert SIM" message on the LCD), but it reaches this state 164 (powered on with the "Insert SIM" message on the LCD), but it reaches this state
165 almost instantly, without going through the power-on LCD logo and buzz phase. 165 almost instantly, without going through the power-on LCD logo and buzz phase.
166 Odd, but harmless. This explanation has been included to save other hackers 166 Odd, but harmless. This explanation has been included to save other hackers
167 the hours of bewildered head-scratching I spent chasing this quick down. 167 the hours of bewildered head-scratching I spent chasing this quirk down.
168 168
169 Dumping and reloading flash 169 Dumping and reloading flash
170 =========================== 170 ===========================
171 171
172 Once you break in with fc-loadtool (either through the bootloader or through 172 Once you break in with fc-loadtool (either through the bootloader or through