* Firmware version 1.9.16: http://download.kobobooks.com/firmwares/kobo3/bowfin/kobo3-update-1.9.16.zip * Some hints the desktop application running using Wine: http://www.dawning.ca/2010/kobo-ereader-unboxed-linux/ * Excellent guide of hacking telnet & ftp onto the device: http://www.chauveau-central.net/pub/KoboTouch/ {{{ [root@(none) /]# dmesg Linux version 2.6.35.3-568-g4cf53cf-00050-g1422e3c-dirty (george@dilemma) (gcc version 4.4.1 (Sourcery G++ Lite 2010q1-202) ) #2 PREEMPT Fri Oct 14 12:23:27 EDT 2011 CPU: ARMv7 Processor [412fc085] revision 5 (ARMv7), cr=10c53c7f CPU: VIPT nonaliasing data cache, VIPT nonaliasing instruction cache Machine: Freescale MX50 ARM2 Board Memory policy: ECC disabled, Data cache writeback On node 0 totalpages: 65536 free_area_init_node: node 0, pgdat 803ab5d0, node_mem_map 803cb000 DMA zone: 192 pages used for memmap DMA zone: 0 pages reserved DMA zone: 24384 pages, LIFO batch:3 Normal zone: 320 pages used for memmap Normal zone: 40640 pages, LIFO batch:7 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 65024 Kernel command line: console=ttymxc0,115200 rootfstype=ext4 rootwait rw video=mxcepdcfb:E60_V220 quiet lpj=3997696 root=/dev/mmcblk0p1 PID hash table entries: 1024 (order: 0, 4096 bytes) Dentry cache hash table entries: 32768 (order: 5, 131072 bytes) Inode-cache hash table entries: 16384 (order: 4, 65536 bytes) Memory: 256MB = 256MB total Memory: 256016k/256016k available, 6128k reserved, 0K highmem Virtual kernel memory layout: vector : 0xffff0000 - 0xffff1000 ( 4 kB) fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB) DMA : 0xf9e00000 - 0xffe00000 ( 96 MB) vmalloc : 0x90800000 - 0xf4000000 (1592 MB) lowmem : 0x80000000 - 0x90000000 ( 256 MB) pkmap : 0x7fe00000 - 0x80000000 ( 2 MB) modules : 0x7f000000 - 0x7fe00000 ( 14 MB) .init : 0x80008000 - 0x80023000 ( 108 kB) .text : 0x80023000 - 0x80359000 (3288 kB) .data : 0x80372000 - 0x803ac320 ( 233 kB) Hierarchical RCU implementation. RCU-based detection of stalled CPUs is disabled. Verbose stalled-CPUs detection is disabled. NR_IRQS:368 MXC GPIO hardware MXC IRQ initialized You should not call the gpmi_set_parent MXC_Early serial console at MMIO 0x53fbc000 (options '115200') bootconsole [ttymxc0] enabled Console: colour dummy device 80x30 Calibrating delay loop (skipped) preset value.. 799.53 BogoMIPS (lpj=3997696) pid_max: default: 32768 minimum: 301 Mount-cache hash table entries: 512 CPU: Testing write buffer coherency: ok regulator: core version 0.5 NET: Registered protocol family 16 i.MX IRAM pool: 128 KB@0x90840000 CPU is i.MX50 Revision 1.1 Using SDMA I.API MXC DMA API initialized IMX usb wakeup probe the wakeup pdata is 0x8037e3fc IMX usb wakeup probe the wakeup pdata is 0x8037e4a8 bio: create slab at 0 SCSI subsystem initialized CSPI: mxc_spi-0 probed CSPI: mxc_spi-2 probed usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb PMIC Light driver loading... cfg80211: Calling CRDA to update world regulatory domain mc13892 Rev 2.1 FinVer 2 detected Initializing regulators for mx50 arm2. regulator: SW1: 600 <--> 1375 mV at 1150 mV regulator: SW2: 900 <--> 1850 mV at 1225 mV regulator: SW3: 900 <--> 1850 mV at 1200 mV regulator: SW4: 1100 <--> 1850 mV at 1800 mV regulator: SWBST: regulator: VIOHI: regulator: VPLL: 1050 <--> 1800 mV at 1800 mV regulator: VDIG: 1200 mV regulator: VSD: 1800 <--> 3150 mV at 3150 mV regulator: VUSB2: 2400 <--> 2775 mV at 2600 mV regulator: VVIDEO: 2775 mV regulator: VAUDIO: 2300 <--> 3000 mV at 3000 mV regulator: VCAM: 2500 <--> 3000 mV at 2750 mV fast normal regulator: VGEN1: 3150 mV regulator: VGEN2: 1200 <--> 3150 mV at 3150 mV regulator: VGEN3: 1800 mV regulator: VUSB: regulator: GPO1: regulator: GPO2: regulator: GPO3: regulator: GPO4: PMIC ADC start probe PMIC Light successfully loaded Device spi3.0 probed Switching to clocksource mxc_timer1 NET: Registered protocol family 2 IP route cache hash table entries: 2048 (order: 1, 8192 bytes) TCP established hash table entries: 8192 (order: 4, 65536 bytes) TCP bind hash table entries: 8192 (order: 3, 32768 bytes) TCP: Hash tables configured (established 8192 bind 8192) TCP reno registered UDP hash table entries: 256 (order: 0, 4096 bytes) UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) NET: Registered protocol family 1 LPMode driver module loaded Static Power Management for Freescale i.MX5 PM driver module loaded sdram autogating driver module loaded Bus freq driver module loaded mxc_dvfs_core_probe DVFS driver module loaded i.MXC CPU frequency driver DVFS PER driver module loaded msgmni has been set to 500 alg: No test for stdrng (krng) cryptodev: driver loaded. io scheduler noop registered io scheduler deadline registered io scheduler cfq registered (default) tps65180->vcom_uV= -1250000 regulator: DISPLAY: regulator: VCOM: -2500 <--> -300 mV regulator: V3P3_CTRL: regulator: PMIC_TEMP: at 0 mV regulator: PWR0_CTRL: regulator: PWR2_CTRL: tps65180 0-0068: PMIC TPS6518x for eInk display Serial: MXC Internal UART driver mxcintuart.0: ttymxc0 at MMIO 0x53fbc000 (irq = 31) is a Freescale i.MX console [ttymxc0] enabled, bootconsole disabled mxcintuart.1: ttymxc1 at MMIO 0x53fc0000 (irq = 32) is a Freescale i.MX mxcintuart.2: ttymxc2 at MMIO 0x5000c000 (irq = 33) is a Freescale i.MX loop: module loaded PMIC powerkey probe aigo_register_home_key_handler(), GPIO_4_1 irq request success. input: mxc_power_key as /devices/virtual/input/input0 neonode driver data allocated neonode input device allocated input: neonode_ts as /devices/virtual/input/input1 neonode input touchscreen loaded touchscreen IRQ request complete mc13892 rtc probe start pmic_rtc pmic_rtc.1: rtc core: registered pmic_rtc as rtc0 mc13892 rtc probe succeed i2c /dev entries driver APM Battery Driver mxsdhci: MXC Secure Digital Host Controller Interface driver mxsdhci: MXC SDHCI Controller Driver. mmc0: SDHCI detect irq 0 irq 3 INTERNAL DMA mxsdhci: MXC SDHCI Controller Driver. mmc1: SDHCI detect irq 0 irq 2 INTERNAL DMA mxsdhci: MXC SDHCI Controller Driver. mmc2: SDHCI detect irq 243 irq 1 INTERNAL DMA TCP cubic registered NET: Registered protocol family 17 VFP support v0.3: implementor 41 architecture 3 part 30 variant c rev 2 epdc waveform: E60_V220 epdc pwrdown delay: 0 Console: switching to colour frame buffer device 100x37 mxc_epdc_fb mxc_epdc_fb: Display HW not properly initialized. Aborting update. regulator_init_complete: disabling PWR2_CTRL regulator_init_complete: disabling PWR0_CTRL regulator_init_complete: disabling PMIC_TEMP regulator_init_complete: disabling VCOM pmic_rtc pmic_rtc.1: setting system clock to 2011-12-28 19:20:41 UTC (1325100041) Waiting for root device /dev/mmcblk0p1... mmc0: new high speed MMC card at address 0001 mmcblk0: mmc0:0001 M2G1DE 1.86 GiB mmcblk0: p1 p2 p3 EXT4-fs (mmcblk0p1): ext4_orphan_cleanup: deleting unreferenced inode 2738 EXT4-fs (mmcblk0p1): 1 orphan inode deleted EXT4-fs (mmcblk0p1): recovery complete EXT4-fs (mmcblk0p1): mounted filesystem with ordered data mode. Opts: (null) VFS: Mounted root (ext4 filesystem) on device 179:1. Freeing init memory: 108K EXT4-fs (mmcblk0p1): re-mounted. Opts: (null) FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! DVFS is started usb unplugged epdc pwrdown delay: 100 lit_ctl command exec successfully! lit_ctl set 3 cur 1 command exec successfully! lit_ctl set 3 dc 0 command exec successfully! lit_ctl set 3 bp 0 command exec successfully! lit_ctl command exec successfully! lit_ctl set 4 cur 1 command exec successfully! lit_ctl set 4 dc 0 command exec successfully! lit_ctl set 4 bp 0 command exec successfully! lit_ctl command exec successfully! lit_ctl set 5 cur 1 command exec successfully! lit_ctl set 5 dc 0 command exec successfully! lit_ctl set 5 bp 0 command exec successfully! PM: Preparing system for mem sleep Freezing user space processes ... (elapsed 0.01 seconds) done. Freezing remaining freezable tasks ... (elapsed 0.01 seconds) done. PM: Entering mem sleep Suspending console(s) (use no_console_suspend to debug) pmic_battery_suspend DVFS is stopped PM: suspend of devices complete after 1.265 msecs PM: late suspend of devices complete after 0.215 msecs PM: early resume of devices complete after 0.156 msecs DVFS is started pmic_battery_resume PM: resume of devices complete after 130.866 msecs PM: Finishing wakeup. Restarting tasks ... done. PM: Preparing system for mem sleep Freezing user space processes ... (elapsed 0.01 seconds) done. Freezing remaining freezable tasks ... (elapsed 0.01 seconds) done. PM: Entering mem sleep Suspending console(s) (use no_console_suspend to debug) pmic_battery_suspend DVFS is stopped PM: suspend of devices complete after 1.260 msecs PM: late suspend of devices complete after 0.215 msecs PM: early resume of devices complete after 0.155 msecs DVFS is started pmic_battery_resume PM: resume of devices complete after 130.441 msecs PM: Finishing wakeup. Restarting tasks ... done. PM: Preparing system for mem sleep Freezing user space processes ... (elapsed 0.01 seconds) done. Freezing remaining freezable tasks ... (elapsed 0.01 seconds) done. PM: Entering mem sleep Suspending console(s) (use no_console_suspend to debug) pmic_battery_suspend DVFS is stopped PM: suspend of devices complete after 1.276 msecs PM: late suspend of devices complete after 0.220 msecs PM: early resume of devices complete after 0.156 msecs DVFS is started pmic_battery_resume PM: resume of devices complete after 130.470 msecs PM: Finishing wakeup. Restarting tasks ... done. PM: Preparing system for mem sleep Freezing user space processes ... (elapsed 0.01 seconds) done. Freezing remaining freezable tasks ... (elapsed 0.01 seconds) done. PM: Entering mem sleep Suspending console(s) (use no_console_suspend to debug) pmic_battery_suspend DVFS is stopped PM: suspend of devices complete after 1.250 msecs PM: late suspend of devices complete after 0.217 msecs PM: early resume of devices complete after 0.156 msecs DVFS is started pmic_battery_resume PM: resume of devices complete after 130.482 msecs PM: Finishing wakeup. Restarting tasks ... done. [semco] ar6000_pm_probe [semco] call plat_setup_power_stub! mmc1: queuing unknown CIS tuple 0x01 (3 bytes) mmc1: queuing unknown CIS tuple 0x1a (5 bytes) mmc1: queuing unknown CIS tuple 0x1b (8 bytes) mmc1: queuing unknown CIS tuple 0x14 (0 bytes) mmc1: queuing unknown CIS tuple 0x80 (1 bytes) mmc1: queuing unknown CIS tuple 0x81 (1 bytes) mmc1: queuing unknown CIS tuple 0x82 (1 bytes) mmc1: new high speed SDIO card at address 0001 [semco] Host Rev: 0x3000016c(3.0.0.364)-r57 AR6000: configuration opcode 3 is not used for Linux SDIO stack [semco] Target Rev: 0x30000384(3.0.0.900) AR6000: configuration opcode 3 is not used for Linux SDIO stack HIF Interrupt processing is SYNC ONLY AR6000: configuration opcode 7 is only used for RTOS systems, not Linux systems AR6000: configuration opcode 5 is not used for Linux SDIO stack In aggr_init.. going out of aggr_init..status OK [semco] ath6k/AR6003/hw2.0/A30H_Generic_20101118.bin [semco] ath6k/AR6003/hw2.0/otp.bin.z77 [semco] ath6k/AR6003/hw2.0/athwlan.bin.z77 [semco] ath6k/AR6003/hw2.0/data.patch.bin ar6000_init() Got WMI @ 0x8f2c15a0. Target Ready: credits: 25 credit size: 1664 AR6K: ** HIF layer does not support scatter requests (17) AR6K: virtual scatter transfers enabled (max scatter items:16: maxlen:16384) AR6K: max recv: 16384 max send: 12288 ar6000_init() WMI is ready wmi_control_rx() : Unknown id 0x101e AR6000 Reg Code = 0x61 debug_hdr_ptr: 0x541e40 AR6000: SDIO bus operation failed! MMC stack returned : -110 Cannot write 0x4000 to window reg: 0x478 Failed to reset target aggr_module_destroy(): aggr = 8f658000 out aggr_module_destroy [semco] ar6000_pm_remove [semco] call plat_setup_power_stub! [semco] ar6000_pm_probe [semco] call plat_setup_power_stub! ar6k_wlan: probe of mmc1:0001:1 failed with error -110 mmc1: card 0001 removed mmc1: queuing unknown CIS tuple 0x01 (3 bytes) mmc1: queuing unknown CIS tuple 0x1a (5 bytes) mmc1: queuing unknown CIS tuple 0x1b (8 bytes) mmc1: queuing unknown CIS tuple 0x14 (0 bytes) mmc1: queuing unknown CIS tuple 0x80 (1 bytes) mmc1: queuing unknown CIS tuple 0x81 (1 bytes) mmc1: queuing unknown CIS tuple 0x82 (1 bytes) mmc1: new high speed SDIO card at address 0001 [semco] Host Rev: 0x3000016c(3.0.0.364)-r57 AR6000: configuration opcode 3 is not used for Linux SDIO stack [semco] Target Rev: 0x30000384(3.0.0.900) AR6000: configuration opcode 3 is not used for Linux SDIO stack HIF Interrupt processing is SYNC ONLY AR6000: configuration opcode 7 is only used for RTOS systems, not Linux systems AR6000: configuration opcode 5 is not used for Linux SDIO stack In aggr_init.. going out of aggr_init..status OK [semco] ath6k/AR6003/hw2.0/A30H_Generic_20101118.bin [semco] ath6k/AR6003/hw2.0/otp.bin.z77 [semco] ath6k/AR6003/hw2.0/athwlan.bin.z77 [semco] ath6k/AR6003/hw2.0/data.patch.bin ar6000_init() Got WMI @ 0x8f5587a0. Target Ready: credits: 25 credit size: 1664 AR6K: ** HIF layer does not support scatter requests (17) AR6K: virtual scatter transfers enabled (max scatter items:16: maxlen:16384) AR6K: max recv: 16384 max send: 12288 ar6000_init() WMI is ready wmi_control_rx() : Unknown id 0x101e AR6000 Reg Code = 0x61 AR6000 scan complete: 0 AR6000 scan complete: 0 AR6000 scan complete: 0 AR6000 scan complete: 0 Add Filter 0 = 5e:00:00:01 AR6000 scan complete: 0 Keep Filter 0 = 5e:00:00:01 AR6000 scan complete: 0 channel hint set to 2472 WMM params AC 0, ACM 0, AIFSN 2, CWmin 3, CWmax 10, TXOPlimit 64 AC 1, ACM 0, AIFSN 7, CWmin 4, CWmax 10, TXOPlimit 0 AC 2, ACM 0, AIFSN 2, CWmin 3, CWmax 4, TXOPlimit 94 AC 3, ACM 0, AIFSN 2, CWmin 2, CWmax 3, TXOPlimit 47 AR6000 connected event on freq 2472 with bssid 00:0b:6b:22:5c:15 listenInterval=3, beaconInterval = 100, beaconIeLen = 28 assocReqLen=74 assocRespLen =48 Network: Infrastructure AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 Keep Filter 0 = 5e:00:00:01 Keep Filter 0 = 5e:00:00:01 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 AR6000 Neighbor Report Event bssid 00:0b:6b:22:5c:15 }}}