Differences

This shows you the differences between two versions of the page.

--- projects:panohax [2026/08/14 09:12] – [Flash Layout] informatic
+++ projects:panohax [2026/08/14 09:37] (current) – [Flash Layout] q3k
@@ Line 11: / Line 11: @@
 ==== TX1 ====
-Stock module, probably 4GiB LPDDR4 and 16GB eMMC?
+Stock module, 4GiB LPDDR4, 16GB eMMC. Production-fused.
 ==== I/O ====
@@ Line 42: / Line 42: @@
 ==== Flash Layout ====
-<code>
+(in bold our current best guess for what the bootchain needs to get to CBOOT.
-Model:  (file)
-Disk polycom-pano-mmcblk-dump-20260805.img: 15.8GB
+^ Number ^ Start ^ Size ^ Name ^ Description ^
-Sector size (logical/physical): 512B/512B
+| 1 | 17.4kB | 2097kB | **BPF** | TegraBoot (a.k.a. nvtboot) for BPMP |
-Partition Table: gpt
+| 2 | 2115kB | 262kB | **TBC** | TegraBoot for CPU |
-Disk Flags:
+| 3 | 2377kB | 262kB | TBC-B | TegraBoot for CPU, B-partition |
+| 4 | 2639kB | 2097kB | **EBT** | CBOOT, loaded by TegraBoot |
+| 5 | 4736kB | 2097kB | RBL | CBOOT, B-partition |
+| 6 | 6833kB | 2097kB | NCT | Non-volatile vital product data |
+| 7 | 8930kB | 6291kB | WB0 | Warm Boot Firmware for device unsuspend |
+| 8 | 15.2MB | 2097kB | DFI | all 0x00 |
+| 9 | 17.3MB | 4194kB | **RP1** | DTB for CBOOT |
+| 10 | 21.5MB | 4194kB | RP2 | 0x24 random bytes, then 0x00 |
+| 11 | 25.7MB | 6291kB | **TOS** | Trusted OS/Firmware, loaded by TegraBoot |
+| 12 | 32.0MB | 80.9kB | EKS | "Encrypted Key Storage" |
+| 13 | 32.1MB | 2097kB | UKS | all 0x00 |
+| 14 | 34.2MB | 2097kB | FB | all 0x00 |
+| 15 | 36.3MB | 134MB | BMP | Splashscreen partition |
+| 16 | 170MB | 26.7MB | SOS | Android Recovery image |
+| 17 | 197MB | 4194kB | DTB | DTB for Kernel |
+| 18 | 201MB | 26.7MB | LNX | Android Boot image ("boot" fastboot partition) |
+| 19 | 228MB | 2147MB | APP | ext4 /system |
+| 20 | 2376MB | 2147MB | CAC | ext4 /cache |
+| 21 | 4523MB | 805MB | vendor | ext4 /vendor |
+| 22 | 5328MB | 2097kB | MSC | all 0x00 |
+| 23 | 5331MB | 33.6MB | USP | all 0x00 |
+| 24 | 5364MB | 2097kB | MDA | verity metadata partition |
+| 25 | 5366MB | 8389kB | RP3 | empty ext4 |
+| 26 | 5375MB | 8389kB | RP4 | all 0x00 |
+| 27 | 5383MB | 16.8MB | FCT | empty ext4 |
+| 28 | 5400MB | 8389kB | UCB | empty ext4, "touchscreen" and "mpu" directories |
+| 29 | 5408MB | 2147MB | FAC | ext4 with "factory_restore.zip" update image applied when touch button is pressed on boot |
+| 30 | 7556MB | 1074MB | PLC | ext4 with some polycom config stuff |
+| 31 | 8629MB | 262kB | CRT | public/private key pair? |
+| 32 | 8630MB | 7128MB | UDA | ext4 /data |
-Number  Start   End     Size    File system  Name    Flags
-      17.4kB  2115kB  2097kB               BPF     msftdata ← BPMP Firmware?
-      2115kB  2377kB  262kB                TBC     msftdata ← CBOOT 1st stage?
-      2377kB  2639kB  262kB                TBC-B   msftdata ← CBOOT 1st stage backup?
-      2639kB  4736kB  2097kB               EBT     msftdata ← CBOOT
-      4736kB  6833kB  2097kB               RBL     msftdata ← CBOOT backup? same contents as EBT
-      6833kB  8930kB  2097kB               NCT     msftdata
-      8930kB  15.2MB  6291kB               WB0     msftdata ← "Warm Boot Firmware?"
-      15.2MB  17.3MB  2097kB               DFI     msftdata ← all 0x00
-      17.3MB  21.5MB  4194kB               RP1     msftdata ← "Bootloader DTB Binary"
-      21.5MB  25.7MB  4194kB               RP2     msftdata ← 0x24 random bytes, then 0x00
-      25.7MB  32.0MB  6291kB               TOS     msftdata ← "Trusted OS"
-      32.0MB  32.1MB  80.9kB               EKS     msftdata ← "Encrypted Key Storage"
-      32.1MB  34.2MB  2097kB               UKS     msftdata ← all 0x00
-      34.2MB  36.3MB  2097kB               FB      msftdata ← all 0x00
-      36.3MB  170MB   134MB                BMP     msftdata ← Splashscreen partition
-      170MB   197MB   26.7MB               SOS     msftdata ← Android Recovery image?
-      197MB   201MB   4194kB               DTB     msftdata ← Device tree (?)
-      201MB   228MB   26.7MB               LNX     msftdata ← Android Boot image ("boot" fastboot partition)
-      228MB   2376MB  2147MB  ext4         APP     msftdata ← /system
-      2376MB  4523MB  2147MB  ext4         CAC     msftdata ← /cache
-      4523MB  5328MB  805MB   ext4         vendor  msftdata ← /vendor
-      5328MB  5331MB  2097kB               MSC     msftdata ← all 0x00
-      5331MB  5364MB  33.6MB               USP     msftdata ← all 0x00
-      5364MB  5366MB  2097kB               MDA     msftdata ← verity?
-      5366MB  5375MB  8389kB  ext4         RP3     msftdata ← empty ext4
-      5375MB  5383MB  8389kB               RP4     msftdata ← all 0x00
-      5383MB  5400MB  16.8MB  ext4         FCT     msftdata ← empty ext4
-      5400MB  5408MB  8389kB  ext4         UCB     msftdata ← empty ext4, "touchscreen" and "mpu" directories
-      5408MB  7556MB  2147MB  ext4         FAC     msftdata ← ext4 with "factory_restore.zip" update image applied when touch button is pressed on boot
-      7556MB  8629MB  1074MB  ext4         PLC     msftdata ← ext4 with some polycom config stuff
-      8629MB  8630MB  262kB                CRT     msftdata ← public/private key pair?
-      8630MB  15.8GB  7128MB  ext4         UDA     msftdata ← /data
-</code>
 ===== Flashing =====
@@ Line 134: / Line 129: @@
   * https://yifan.lu/2022/06/17/unbricking-shield-tv-2015-with-a-bootrom-exploit/
+  * https://docs.nvidia.com/jetson/archives/l4t-archived/l4t-3275/index.html#page/Tegra%20Linux%20Driver%20Package%20Development%20Guide/part_config.html