NOTICE: if somebody can figure this out, and find a way of flashing without the freezes I will give them $50 -- if you want to pledge money for this paypal it to me and let me know it's for this... I'll update in here
I'm going to post all the data I can about phatpatch's constant crashing I can in here in the hopes that somebody can figure out it:
I used a test phatpatch that just changes some code that's unused, the source is at http://downloads.phathack.com/sbingner/phatpatch-0.8.c -- there is no compiled version since it obviously does no good and I don't want somebody to try to use it.
It more often than not seems to be causing the phatbox to freeze up and reboot... sometimes it doesn't... here's one error:
flash = (volatile unsigned short *)0x40001000; flash[0x8a04&0xffff] = 0x65532;
Bad mode in prefetch abort handler detected: mode SVC_32
Vectors: (0xffff0000 to 0xffff0040)
0000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0020: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
Stubs: (0xffff0200 to 0xffff04b8)
0200: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0220: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0240: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0260: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0280: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
02a0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
02c0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
02e0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0300: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0320: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0340: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0360: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0380: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
03a0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
03c0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
03e0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0400: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0420: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0440: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0460: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0480: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
04a0: 00000000 00000000 00000000 00000000 00000000 00000000
Internal error: Oops: 0
CPU: 0
pc : [<c00484bc>] lr : [<c0043514>] Not tainted
sp : c0fdbf28 ip : 00000000 fp : bffffbf8
r10: 00000002 r9 : 0007b3fc r8 : c0fdbff4
r7 : c0fdbff9 r6 : 00000001 r5 : 00050000 r4 : 0005e688
r3 : 00000005 r2 : 00000000 r1 : ffffffff r0 : 0005e688
Flags: nZCv IRQs off FIQs on Mode SVC_32 Segment user
Control: 217D Table: C0FD4015 DAC: 00000015
Process phatpatch-0.8 (pid: 23, stackpage=c0fdb000)
Stack: (0xc0fdbf60 to 0xc0fdc000)
bf60: c0043514 c00484bc 60000093 ffffffff 40012408 c00ee768 c0fdbfb8 00008674
bf80: 0007b3fc c0fdbff9 c0fdbfb4 c0fdbf98 c0049cb4 c00497d4 e1c230b0 c0fdbff4
bfa0: 00000001 c00fcb7c 00000000 c0fdbfb8 c00438b4 c0049c90 00000000 00000000
bfc0: 40012408 0000fffc 0000fffe 00000005 00000001 bffffc5c 00008674 0007b3fc
bfe0: 00000002 bffffbf8 00000000 bffffbe0 000173a0 0000821c 60000010 ffffffff
Backtrace: invalid frame pointer 0xbffffbf8
Code: 13a05102 11a057c5 01a05001 e59f00bc (e5903000)
Segmentation fault
Another like this first one:
flash = (volatile unsigned short *)0x40001000; flash[0x8a10&0xffff] = 0x65532;
Bad mode in prefetch abort handler detected: mode UK12_32
Vectors: (0xffff0000 to 0xffff0040)
0000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0020: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
Stubs: (0xffff0200 to 0xffff04b8)
0200: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0220: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0240: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0260: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0280: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
02a0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
02c0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
02e0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0300: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0320: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0340: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0360: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0380: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
03a0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
03c0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
03e0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0400: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0420: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0440: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0460: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0480: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
04a0: 00000000 00000000 00000000 00000000 00000000 00000000
Internal error: Oops: 0
CPU: 0
pc : [<40021000>] lr : [<c004b20c>] Not tainted
sp : c0fdbee0 ip : c0fdbf0c fp : ffffffff
r10: c0fda000 r9 : c038d780 r8 : c038e2bc
r7 : c00fd9b4 r6 : c00fa000 r5 : c0049ed4 r4 : c005e254
r3 : 0005e3d8 r2 : 00000015 r1 : c0fda000 r0 : 0007a000
Flags: NZcv IRQs on FIQs on Mode UK12_32 Segment user
Control: 217D Table: C0FD4015 DAC: 00000015
Process phatpatch-0.8 (pid: 25, stackpage=c0fdb000)
Stack: (0xc0fdbf18 to 0xc0fdc000)
bf00: c004b20c 40021000
bf20: c000001c ffffffff c0fdbf60 c0fdbf38 c0049660 c005e13c c038e2bc c0fda000
bf40: c00ee768 c038e2a0 40012420 ffffffff c038e2bc c0fdbf94 c0fdbf64 c0049844
bf60: c00ecd58 c004ac5c 00000000 0000000f 40012420 c00ee768 c0fdbfb8 00008674
bf80: 0007b3fc 00000002 c0fdbfb4 c0fdbf98 c0049cb4 c00497d4 e1c230b0 c0fdbff4
bfa0: 00000001 c00fcb7c 00000000 c0fdbfb8 c00438b4 c0049c90 00000000 00000000
bfc0: 40012420 0000fffc 0000fffe 00000005 00000001 bffffc5c 00008674 0007b3fc
bfe0: 00000002 bffffbf8 00000000 bffffbe0 000173a0 0000821c 60000010 ffffffff
Backtrace: invalid frame pointer 0xffffffff
Code: ffffffff ffffffff ffffffff ffffffff bad PC value.
Segmentation fault
After this one it rebooted itself:
flash = (volatile unsigned short *)0x40001000; flash[0x8a06&0xffff] = 0x65532;
Unable to handle kernel paging request at virtual address c1804000
pgd = c0034000
*pgd = c0ce6031, *pmd = c0ce6031, *pte = 00000000, *ppte = 00000000
Internal error: Oops: ffffffff
CPU: 0
pc : [<c00434e4>] lr : [<00000000>] Not tainted
sp : c1803fd4 ip : c00f8678 fp : e92dd800
r10: 00000000 r9 : 60000093 r8 : 00000000
r7 : ffffffff r6 : 0000ffff r5 : c00495ac r4 : ff100000
r3 : de6e75d0 r2 : 00000000 r1 : c00f8680 r0 : 00000000
Flags: nzCv IRQs off FIQs on Mode SVC_32 Segment kernel
Control: 217D Table: C0FD4015 DAC: 00000015
Process (pid: 0, stackpage=c1803000)
Yet another, no reboot on this one:
flash = (volatile unsigned short *)0x40001000; flash[0x8a0a&0xffff] = 0x65532;
pc : [<0002908c>] lr : [<00029088>] Not tainted
sp : bffff64c ip : bffffbd0 fp : bffffbcc
r10: 00000002 r9 : 0007b3fc r8 : 00008674
r7 : bffffc5c r6 : 00000001 r5 : 00000005 r4 : 0000fffe
r3 : 0007b434 r2 : 00000000 r1 : 000d4110 r0 : 0007b448
Flags: nZCv IRQs on FIQs on Mode USER_32 Segment user
Control: 217D Table: C0FD4015 DAC: 00000015
Segmentation fault
Simlar crash:
flash = (volatile unsigned short *)0x40001000; flash[0x8a0e&0xffff] = 0x65532;
pc : [<00382e30>] lr : [<00008228>] Not tainted
sp : bffffffc ip : 00000000 fp : bffffbf8
r10: 00000002 r9 : 0007b3fc r8 : 2d686374
r7 : 61707461 r6 : 68702f2e r5 : 00736f64 r4 : 2f3d4457
r3 : 0000fffc r2 : 4001241c r1 : 00000000 r0 : fe1681b0
Flags: nZCv IRQs on FIQs on Mode USER_32 Segment user
Control: 217D Table: C0FD4015 DAC: 00000015
Segmentation fault
Crash, no reboot:
flash = (volatile unsigned short *)0x40001000; flash[0x8a0c&0xffff] = 0x65532;
pc : [<c004ae48>] lr : [<c0043964>] Not tainted
sp : c0fdbfd4 ip : c0fdc000 fp : c0fdbffc
r10: e5813020 r9 : e2622014 r8 : 00000001
r7 : e0833142 r6 : 0007b3fc r5 : 00008674 r4 : c0fda000
r3 : c038e2a0 r2 : e2622018 r1 : 0000fffe r0 : 0005e688
Flags: nZCv IRQs on FIQs on Mode USER_32 Segment user
Control: 217D Table: C0FD4015 DAC: 00000015
Bad mode in data abort handler detected: mode ABT_32
Vectors: (0xffff0000 to 0xffff0040)
0000: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0020: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
Stubs: (0xffff0200 to 0xffff04b8)
0200: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0220: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0240: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0260: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0280: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
02a0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
02c0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
02e0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0300: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0320: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0340: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0360: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0380: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
03a0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
03c0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
03e0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0400: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0420: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0440: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0460: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
0480: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
04a0: 00000000 00000000 00000000 00000000 00000000 00000000
Internal error: Oops: 0
CPU: 0
pc : [<ffff0308>] lr : [<c0043964>] Not tainted
sp : c0fdbf8c ip : c0fdc000 fp : c0fdbffc
r10: e5813020 r9 : e2622014 r8 : 00000001
r7 : e0833142 r6 : 0007b3fc r5 : 00008674 r4 : c0fda000
r3 : c038e2a0 r2 : e2622018 r1 : 0000fffe r0 : 0005e688
Flags: nZCv IRQs off FIQs on Mode ABT_32 Segment user
Control: 217D Table: C0FD4015 DAC: 00000015
Process phatpatch-0.8 (pid: 24, stackpage=c0fdb000)
Stack: (0xc0fdbfc4 to 0xc0fdc000)
bfc0: c0043964 ffff0308 60000097 ffffffff bffffc5c 00008674 0007b3fc
bfe0: 00000002 bffffbf8 00000000 bffffbe0 000173a0 0000821c 60000010 ffffffff
Backtrace:
Function entered at [<ffffffef>] from [<60000010>]
Backtrace aborted due to bad frame pointer <c0fdbffc>
Code: bad PC value.
note: phatpatch-0.8[24] exited with preempt_count 1
Segmentation fault
But after this one I couldn't run verify or even save the rom out:
/dos # ./phatpatch-0.8 s test
Unable to handle kernel NULL pointer dereference at virtual address 00000004
pgd = c0fd4000
*pgd = c0fec011, *pmd = c0fec011, *pte = 00000000, *ppte = 00000000
Internal error: Oops: 0
CPU: 0
pc : [<c00ecb88>] lr : [<c005a648>] Not tainted
sp : c0fdbf74 ip : c0fdbf9c fp : c0fdbfac
r10: 00000003 r9 : c0fda000 r8 : c0043aa0
r7 : 0000007a r6 : bffffe54 r5 : 0007b7bc r4 : bffffc5c
r3 : 00000000 r2 : 00000000 r1 : 00000001 r0 : c00fe808
Flags: Nzcv IRQs on FIQs on Mode SVC_32 Segment user
Control: 217D Table: C0FD4015 DAC: 00000015
Process phatpatch-0.8 (pid: 31, stackpage=c0fdb000)
Stack: (0xc0fdbf64 to 0xc0fdc000)
bf60: c005a648 c00ecb88 80000013 ffffffff 00009714 00000003 c0fdbfa4
bf80: c0fdbf8c bffffc5c 0007b7bc c0fdbfac c0fdbf9c c005a648 c00ecb84 00000000
bfa0: 00000000 c0fdbfb0 c0043920 c005a640 00000000 c0049d20 bffffc5c 00000001
bfc0: 0000000f 00000000 00000000 0007b7bc bffffe54 bffffc5c bffffe54 00009714
bfe0: 00000003 0007b3fc 0007a68c bffffc58 0000934c 000172a4 60000010 bffffc5c
Backtrace:
Function entered at [<c005a630>] from [<c0043920>]
r4 = 00000000
Code: e92dd830 e24dd010 a0000093 e3c2203f (e5923004)
Segmentation fault
reboot, top or halt would also not work (ls about the only thing that did):
/dos # reboot
Unable to handle kernel NULL pointer dereference at virtual address 00000004
pgd = c0fd4000
*pgd = c0fec011, *pmd = c0fec011, *pte = 00000000, *ppte = 00000000
Internal error: Oops: 0
CPU: 0
pc : [<c00ecb88>] lr : [<c00954a8>] Not tainted
sp : c0fdbe48 ip : c0fdbe70 fp : c0fdbf58
r10: c0fdbf20 r9 : 00000000 r8 : c0fdbf28
r7 : c038e0a0 r6 : c0028000 r5 : c0fda000 r4 : c038e0bc
r3 : 00000000 r2 : 00000000 r1 : 00000000 r0 : c038e0bc
Flags: NzCv IRQs on FIQs on Mode SVC_32 Segment user
Control: 217D Table: C0FD4015 DAC: 00000015
Process busybox (pid: 39, stackpage=c0fdb000)
Stack: (0xc0fdbe38 to 0xc0fdc000)
be20: c00954a8 c00ecb88
be40: a0000013 ffffffff c0fdbe54 c006a544 c006a03c 00000041 c038e0bc c0fda000
be60: c0fdbf58 c0fdbe70 c00954a8 c00ecb84 c0fdbe7c c00889b4 c00eaf70 c0392008
be80: 01c5a71f 00000004 c0fdbedc 00000000 c0f26260 c0fdbf60 c0fda000 c0fdbf64
bea0: c0f26260 c0fdbec8 c0fdbeb4 c00878d0 c00ecef0 c0f27a80 00000000 20000013
bec0: 00000000 00000041 c00fcf38 00000000 000001f0 c00fcd3c c0fda000 c00fcf34
bee0: c0fdbf18 c0fdbef0 c006a544 c006a03c c0f27a80 c00fcd3c c00fcd3c 00000000
bf00: 000001f0 00000053 00000000 ffffffff c0fdbf1c 00000000 00000000 c0f52000
bf20: c0fdbf2c c006d410 c006d348 c0028000 c0028000 00000100 c0f27a80 c0391dc0
bf40: c0f52000 c0fda000 000bfe00 c0fdbf80 c0fdbf5c c0092b1c c00953b0 00000000
bf60: ffffffea c0391da0 00000100 000bfe00 000a05d0 c0fdbfac c0fdbf84 c0070ee0
bf80: c0092ad8 c00720d0 bffff864 000c3f80 00000100 bffff897 00000003 c0043aa0
bfa0: 00000000 c0fdbfb0 c0043920 c0070e14 000c3f80 c0049c90 00000005 000bfe00
bfc0: 00000100 0006fda8 000c3f80 00000100 bffff897 bffff897 bffffd90 00000000
bfe0: 000a05d0 bffff844 bffff848 bffff834 0006fdbc 000778b8 20000010 00000005
Backtrace:
Function entered at [<c00953a0>] from [<c0092b1c>]
Function entered at [<c0092ac8>] from [<c0070ee0>]
Function entered at [<c0070e04>] from [<c0043920>]
r8 = C0043AA0 r7 = 00000003 r6 = BFFFF897 r5 = 00000100
r4 = 000C3F80
Code: e92dd830 e24dd010 a0000093 e3c2203f (e5923004)
Segmentation fault