Payloads

Spam UART A TX
spam_uartA_payload.bin
543B
Binary
FuseeGeleePayload - Spams UART-A-TX
uart_payload.c
6KB
Text
FuseeGeleePayload - Spams UART-A-TX (source)
ECHO UART RX to TX
work in progress.
Hardware (PinMUX)
Looks like UARTA is using the ULPI pins as noted here (https://github.com/u-boot/u-boot/blob/master/arch/arm/mach-tegra/tegra30/pinmux.c#L238)

So we know we can setup our UARTA and UARTD on the ULPI pins

#if defined UARTA
 /* set pinmux for uart-a (nexus 7) */
 reg_write(PINMUX_BASE, PINMUX_AUX_ULPI_DATA0_0, 0b00000110); /* tx */
 reg_write(PINMUX_BASE, PINMUX_AUX_ULPI_DATA1_0, 0b00100110); /* rx */
#elif defined UARTD
 /* set pinmux for uart-d (ouya */
 reg_write(PINMUX_BASE, PINMUX_AUX_ULPI_CLK_0, 0b00000110); /* tx */
 reg_write(PINMUX_BASE, PINMUX_AUX_ULPI_DIR_0, 0b00100110); /* rx */
#endif

APX Mode (USB Recovery Mode "RCM")

Dump platform key (SBK)

Last modified 2yr ago