They have added this Firmware Version: BZ.qca956x.v3.4.7.3284.150911.1650 RSA Signed Firmware. Verfiying please wait...
Decrypted hash: f8 2b 45 72 9f e4 5f 46 a0 96 43 37 57 4f 49 ab 43 dc 1e 8c Image hash : f8 2b 45 72 9f e4 5f 46 a0 96 43 37 57 4f 49 ab 43 dc 1e 8c RSA signature check. Could it be similar to this? https://github.com/xdarklight/mktplinkfw3/blob/master/README.md -------------------------------------------------------------------------- They must have some sort of protection in there bootloader, immediately after OpenWRT is put onto the device via TFTP the error "Application terminated, rc=0xFFFFFFFF" shows up. I wonder what it's expecting? Interestingly enough, there is a 2nd kernel partition ( kernel0 and kernel1 ) It boots into kernel1 if kernel0 fails. Receiving file from 192.168.1.25:53844 Received 3539292 bytes TFTP Transfer Complete. Bytes transferred = 3539292 (36015c hex) ## Starting application at 0x80200020 ... Firmware Version: BZ.qca956x.v6.0.0-OpenWrt-r47065 ## Application terminated, rc = 0xFFFFFFFF ## Starting application at 0x80200020 ... Number of boot partitions = 2 get_mtd_params: name=bs ubnt_flash_read: addr=8023b480, sa=9ff90000, sz=131072 ubnt_get_bootsel: Boot partition selected = 1 Loading Kernel Image @ 81000000, size = 7929856 Verifying 'kernel1' parition:OK ## Application terminated, rc = 0x0 ## Booting image at 9f800000 ... Image Name: MIPS OpenWrt Linux-3.3.8 Created: 2015-09-12 0:03:12 UTC Image Type: MIPS Linux Multi-File Image (lzma compressed) Data Size: 6877256 Bytes = 6.6 MB Load Address: 80060000 Entry Point: 80060000 Contents: Image 0: 6877248 Bytes = 6.6 MB Verifying Checksum at 0x9f800040 ...OK Uncompressing Multi-File Image ... OK No initrd ## Transferring control to Linux (at address 80060000) ... ## Giving linux memsize in bytes, 134217728 Starting kernel ... -- Davey _______________________________________________ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
