From c3ece63d6879e14c8d65a8dc3e32f47e0f891f27 Mon Sep 17 00:00:00 2001 From: INAGAKI Hiroshi Date: Mon, 23 Jan 2023 13:01:13 +0900 Subject: [PATCH] ipq807x: add support for Buffalo WXR-5950AX12 Buffalo WXR-5950AX12 is a 2.4/5 GHz band 11ax (Wi-Fi 6) router, based on IPQ8074A. Specification: - SoC : Qualcomm IPQ8074A - RAM : DDR3 1024 MiB (2x Nanya NT5CC256M16ER-EK) - Flash : RAW NAND 256 MiB (Winbond W29N02GZBIBA) - WLAN : 2.4/5 GHz (IPQ8074A) - Ethernet : 5 ports - WAN : 100/1000/2500/10000 Mbps x1 (AQR113C) - LAN : 100/1000/2500/10000 Mbps x1 (AQR113C), 10/100/1000 Mbps x3 (QCA8075) - LED/Keys : 8x/5x - UART : pin header on PCB (J7) - assignment: 3.3V, GND, TX, RX from disc marking - settings : 115200n8 - Power : 12 VDC, 4 A Flash instruction using initramfs image: 1. Prepare TFTP server with IP address 192.168.11.10 2. Rename OpenWrt initramfs image to "WXR-5950AX12-initramfs.uImage and place it to TFTP directory 3. Hold AOSS (WPS) button and power on WXR-5950AX12 4. WXR-5950AX12 downloads initramfs image from TFTP server and boots with it automatically 5. Upload sysupgrade image to WXR-5950AX12 and perform sysupgrade 6. Wait ~120 seconds to complete flashing Partition layout: 0x000000000000-0x000000100000 : "0:sbl1" 0x000000100000-0x000000200000 : "0:mibib" 0x000000200000-0x000000280000 : "0:bootconfig" 0x000000280000-0x000000300000 : "0:bootconfig1" 0x000000300000-0x000000600000 : "0:qsee" 0x000000600000-0x000000900000 : "0:qsee_1" 0x000000900000-0x000000980000 : "0:devcfg" 0x000000980000-0x000000a00000 : "0:devcfg_1" 0x000000a00000-0x000000a80000 : "0:apdp" 0x000000a80000-0x000000b00000 : "0:apdp_1" 0x000000b00000-0x000000b80000 : "0:rpm" 0x000000b80000-0x000000c00000 : "0:rpm_1" 0x000000c00000-0x000000c80000 : "0:cdt" 0x000000c80000-0x000000d00000 : "0:cdt_1" 0x000000d00000-0x000000d80000 : "0:appsblenv" 0x000000d80000-0x000000e80000 : "0:appsbl" 0x000000e80000-0x000000f80000 : "0:appsbl_1" 0x000000f80000-0x000001000000 : "0:art" 0x000001000000-0x000001080000 : "0:art_1" 0x000001080000-0x000001100000 : "0:orgdata" 0x000001100000-0x000001180000 : "0:orgdata_1" 0x000001180000-0x000005180000 : "rootfs" 0x000005180000-0x000009180000 : "rootfs_recover" 0x000009180000-0x000010000000 : "user_property" Notes: - WXR-5950AX12 has 2x OS images on NAND flash. The 1st image is for normal operation and the 2nd one is for recoverying or firmware upgrading on stock. - Stock U-Boot checks MD5 hashes in "fw_hash" volume in each "root*" partition when booting. This is just a comparation of hash strings. Behaviors: - both "fw_hash" volumes exist, hashes are rootfs == rootfs_recover ---> boot from rootfs - both "fw_hash" volumes exist, hashes are rootfs != rootfs_recover ---> boot from rootfs_recover Note: this behavior is used for firmware upgrading on stock - "fw_hash" volume in rootfs is missing ---> boot from rootfs_recover - "fw_hash" volume in rootfs_recover is missing ---> boot from rootfs - "fw_hash" volumes in both root* partition are missing ---> boot from rootfs_recover Reverting to stock firmware: 1. Decrypt official image by buffalo-enc and remove header example of decryption: $ buffalo-enc -i wxr_5950ax12_jp_305 -o wxr_5950ax12_jp_305.dec \ -d -k olaffuB -O 0xc8 example of removing header (v3.05): - before $ hexdump -n 64 -v -C wxr_5950ax12_jp_305.dec 00000000 57 58 52 2d 35 39 35 30 41 58 31 32 5f 33 2e 30 |WXR-5950AX12_3.0| 00000010 35 5f 31 2e 30 31 5f 4a 50 5f 6a 70 5f 71 63 61 |5_1.01_JP_jp_qca| 00000020 0a 66 69 6c 65 6c 65 6e 3d 34 35 33 35 30 39 31 |.filelen=4535091| 00000030 32 0a 55 42 49 23 01 00 00 00 00 00 00 00 00 00 |2.UBI#..........| 00000040 - after $ hexdump -n 64 -v -C wxr_5950ax12_jp_305.ubi 00000000 55 42 49 23 01 00 00 00 00 00 00 00 00 00 00 00 |UBI#............| 00000010 00 00 08 00 00 00 10 00 78 cf c4 91 00 00 00 00 |........x.......| 00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000030 00 00 00 00 00 00 00 00 00 00 00 00 3d 2a 64 fd |............=*d.| 00000040 2. Boot WXR-5950AX12 with OpenWrt initramfs image 3. Upload modified stock image to WXR-5950AX12 4. Find partitions "rootfs" and "rootfs_recover" example: root@OpenWrt:/# cat /proc/mtd dev: size erasesize name ... mtd22: 04000000 00020000 "rootfs" mtd23: 04000000 00020000 "rootfs_recover" ... in this case, "rootfs" is mtd22 and "rootfs_recover" is mtd23 5. Format "rootfs"/"rootfs_recover" partition with the uploaded image example: ubiformat /dev/mtd22 -f /tmp/wxr_5950ax12_jp_305.ubi ubiformat /dev/mtd23 -f /tmp/wxr_5950ax12_jp_305.ubi 6. Remove "rootfs"/"rootfs_data" volume from user_property partition example: . /lib/upgrade/nand.sh UBI=$(nand_attach_ubi user_property) ubirmvol /dev/$UBI -N rootfs ubirmvol /dev/$UBI -N rootfs_data 7. Reboot MAC addresses: LAN : 50:C4:DD:xx:xx:28 (0:APPSBLENV, ethaddr (text)) WAN : 50:C4:DD:xx:xx:28 (0:APPSBLENV, ethaddr (text)) 2.4 GHz: 50:C4:DD:xx:xx:30 (0:APPSBLENV, wlan0addr (text)) 5 GHz : 50:C4:DD:xx:xx:38 (0:APPSBLENV, wlan1addr (text)) Reviewed-by: Robert Marko Signed-off-by: INAGAKI Hiroshi --- board-buffalo_wxr-5950ax12.ipq8074 | Bin 0 -> 131184 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 board-buffalo_wxr-5950ax12.ipq8074 diff --git a/board-buffalo_wxr-5950ax12.ipq8074 b/board-buffalo_wxr-5950ax12.ipq8074 new file mode 100644 index 0000000000000000000000000000000000000000..57badaa53553d9c81797c6ef761d37f7358ea8f2 GIT binary patch literal 131184 zcmeHw33OCfdgiV7N<|5)QAtQ82?W{~2=2%jETIK0AQmGDpC-2{-Eq5TdM24pcW0bV$H{aiy`Ah|5e@p-TU9=yZ>_ERh4SPiqgkR>()H+#Jb1J)|b|-RJ(WYR=Dbv#uv2$ zspF-+MO!*M7QMK8=i^&DcXmC#b6Zi4!F9Z_WzROUi_R-E91BF@A3} zYU7vZHD)-HLWZ89z%M%Z;A`N51h>?8r5Kmiu3q zISP%RT*ngQXQ^Yc@#AqM`hN=XIwyd;Td`$=$(H%bmifw-`O230%9i=cmifw-`RcnI z%HeRCj8b7r4>FQ_bP&+guZ&f%pLhS9?x}nC-yGzQ&rA6We|wNh<8b?(kdBm!#Lq~s z5b+5d=Y#MZ$yg_AoVtn#>1rfcPIz6HOC9^ul0Q54-@f`cC4Z}a^6^hb-eaHd8o3}O z`Ua75#Jlx}ISn#wTeqDm(YG(KReP994#%emBf&IG^+&qc2^@w>Q)u!=z?eegm7$Iw z0%7VK!Fa)d=HrIWjbHcDk{~c<1YGJnK^-1*Ytn!q@Yy0TL&f_;vLmPG-o1N0X_hPU z7n;N2u%>k!Z6q$%!Xb`3EOhve_y;wD7Bov5wvq7|N$9vn#ktjYUZY^wp)-ANzYB1T zOR1zkS1R!XrQ+`>7269unw5%Ju9SN|PO<)Z_~+i#zeF1!DmC}tD;4*uQqh|sp96Uh zhx}Z~|NZdtsa32Q$YxpswU>)Z{kLJJ@ z0_&KEIV4~XKObH`8Mc&&HAsMbENscs4h&3N{6`z|e+7AB_{A~U!azM}vFL#f43c3B z^S+8P+`$-*VGh)z5v*gfIS138q02LK{Ca4^9|h!z0WgfDKPZBHBG%xahR1L`{6RAO ziJ{A|rGPFM_{Z>z;m2Ui0X{7r7#jWvYcTT($fsZqHvCaC^e~ZYKs|y_^=t+Pg^;H$ z+0Y|mpr-jH7$_we2nKWmq6dP3=z%XFiY@qT;liz^-u&+L9dX#7nb&I{7}};1nfV}>)g5KmkW1iY>KZm z?} zWbcTz-0Qtr*ZUhUr0$5b%=h~3O{a?vW$sMC-p;&kT-toBWKUK{f~Ai)Z*A>e(v{lb zwcLC4M%}Bq2U53N@jKVobZXhb^iJz~+`O{+c*)-EtqGR7z1g?*^pY1-w|Xu2j$hw! zvh;AuGqH{4NaR%z_-qmAI`j7Z4@&)??UA<^H<+^``s_!{otG5H4iug zuh}0dm4P$1RGcf!$GJcP&ZlA)!f*z#3 z4|(d*DU2UD8sn!P+Bh3x|Ea(+`FGJj&YI&|(f<>qlN3_VJO9&k?+ zodfwO$p7!*<+K0Nk0132=fv^Y|HR}&o_c6w{DvOVj&N2!59h>&9zF$mH{@-ct@*S7 zdVqCIBMvyDn+F`?H(?wFXooo3IPW&*0X?EU&&N6#_6Qsed$eKCne3l9!XG69hdAJ1 z=s`64{}&rLLXTV&>@fp+m2@%_RCX`0&#`=0~`J@V27qZ zAE7@A=mGTcfqvCyTnNN>`cpB|pZCJN9+~!FSC2lzI>4V8`z*u-<9UJWVAr2PJ`Mc`;!-o_Pk$7R z@!POx<9QA8sqkm>VMhrZ|C5OCjEgqrZ|u_%*8KwmNk9*v&ly<9RM_);*aOdPV{$MK z>a(5aZ*!l5eO4mk+en`~t$uO-Y4mUU1DoduhP-Ldu%|#=v1!lQf9_ug(;jJ0&|}YR zd-Km6qdzdtKd_Fe^oPJNp$X>)umcb6$j1AN3_E~7G5jI@8P|{gz@|Sm^ z*i#bpX%6(+I0vF%v2hN>_#8Ng8O1oPdN7YTP!AB7?4BbHjBBPp@yx;aZ9F#_dSLqH zfp%bL9T=bK4`D~6IX|%KfpHGk4*WTP55{lf{ep%+qaDBwd5&ey-|jh9h#nxmq`@yG z!7t50e2QI+aZsQB=AIhvGW5WVPovQT;F$hC<}q-8VAmhOp3`AZlsEJUI2wACfbrXi zuiT$xd0v5xbPqkqVc$RBh5 z#2@_!&Y_mUAJ8A#*k_u0un_i~342I`J}1Gi&VgTvrC($_KNuc|fM0@qKp*ok4x8ty zv`1qd?*Iq*BjX$j@zrj83^`ZkI�i1oG4)JLlqvYZ+F5V8#Wmqm8&|>~o<<$ryjg zbED1kOv4{j5243~KiCZXIe)wUU?@AX;SU3P@L!<^??VqTkECOGh6ava_@!vgvEQXXp*`7HhlPks8R(yXpJ05P)9&|+eD1UH9^{3zXU12*JnbnEUv0!S zLyzEBjr|e)Y9Kyy9c-NM8*vGGWIS(Behc&v@!hT+7=K@&9m1XsJA@t@{+Mz3zYlMR zAvb13iF0;`<+rzjMt74tDI3 zdIY~1_&XW>!IKz2_uF>l;SY?s1U;GuJq+2W+OQ|%xefRQ&gD7&0_XwpvvDrG0Qebt zOn-0&c0hkHlKp{Y`~iQ;_2c|)#6?pNLi7>#Jcs&d#swSu14AFpbr`sgcKpGg`1R0= z1O1}Szn9Uk8veu*UtTZ8T`v!6+*4?=YK z^wwkepEjEls)F}=FI68Yc`2nWp)PoD|H-z)1<$27$E^$AJAbX=mE1ikTM`q6#FQl}^tqwyu zmUO1J#H$}~0deIA*uchBhS6Yte?@4Qq+YqdG=~iR!(*5b%V=a1hBx@n*w`rF&Di#@1M5&$k?2_FP&BerK;julC}9AX(;d^K9$E+|G<<@9LoJt-jXY zW&1<%yLP$lSW#ET=J@Jhz1yf)fbqpy$9Ji%r{MYYkoA4@`nK~$hckCs|A*9-3#~`; zfpeS%ze~59si!-=7JYf;OwGa4uI#qitAhRh)>~UH6dlRj#m|JASI?OZ2TNW|X-cr* zclK5d@JrhsqW5Ro4(9JnYqa8b?8>$?#ogJRR(rdAYU6=rJJK5BEVx{|(F~i(cqZ1O ze{Y@Ju($Zx%;uO15u%^pN@XoUGYbvMYOIg2iS|T&q2?cu!Kh^?!Bsoo(wb z?96D2x6Jq2jg2Sr_oi=+v*`2jQ(KQLr+>EC`SlykC-P9w+TP96o4boT(?iF1wfXq6 z7t=eu79D@{eEZ8q&t-(nx994%v!#ciFL*DbdEGwUcA#)aW}|h!eb-uFDSR<=i`Ayz zxVY(X{;rJHILmx5-hln?3ANuVr&`1S-ws-ML<$EakjW? zac6R~_5bQ!J-24hGT2d^MXxSkzPWo+L*nn1lX)GFZ_KETD+~5}{(Sw*OP)<_vBruE zml-cpHqEx!(cx?DXNwMI?zH~jy5rFM(&v(DVpjy)dlmbGCwC`@>Qde6m^!U4t3Gu{ zeM!Bi?y7I7|Drw`@N*ZX#~_oV-0H9I`+UWnZKc@>MknbR=~n7*L4AjtMHs&)df?#G zGcvQX7c6|Z=8%CaIEnQB1%WyEaGZj_!Df{8O)?3z(7DZ1a=x48DdedD!q7 zdbER=4js*_Q$55>}T&UwhWf$ttKz_zB_1&oBMtwKxha(?8bp5WkgS~gX``~=>BYG*U zg~D1Wz@@MjSfC--LSZcw)zQ+BjFzq$n{A0he-GbBo`dU zg!_j`_=iaNhe-H`NcaaN4apff!Tuo<{vi_nArk%}68<4_lKg|j@d;4gY1E_#cItth zdSIs>*eR0BGYNL;ft`9_rykg;2X>02Avrx0Y^NUBsRwrIft`9_ryjA>X{7B_cdAja z(6(A;6i&L?_~v#zwr$Fepb8fyU||AdtbrZc>k;2<||r1 z`0j)1R-FIJgKn$A?oTbNkkJYPQwsqNehdk3>+W|VeTw&ZgO8XMe4jVUb(HHU*ZaHi zp6^L}-}eI@#TajDuKs(W?V=KXqfJ8?n-jSm{QrbR$-}5i8w@m2QcZBQ+JNF9-+%(-?tp z#L95Q%5cO=xKBqoVkMG>tenPHFH;u;1c8wv;6ki)Ay&E& zD~*5gjacbItVD7mb-NHNkzB4vBv!f*D_w|{F2qU~VxqOr2&HKoinQd^MvqeCEY=q;IXL11*NAX0*W z4}oz}!fD=!=+e|eV4ADzxJ-X)t+N=w7KWr--iO+x_X-H0_ zPw_n+;3H-QzpDe~ID0~JB6UyZcXx~kSeun2an=<2ogkPW&YF<$ogn>gBo9*iWPVqO z&7qH~S|rYzLcfcozh^SPk7QJX9)pm47W-lIFftxNKoAfF1OY)n5Eu*r5BA|m8j=&~ zQ+y8>_=s7-@8Uu^_TflQr0&W5ZmuzG#|9PkU>_d(onM$A_TfnQ&aZwqk_V}MGQSIK z(7}#Ffd~8W(C-@S@0rZ+8yklyjHn6OhYx1ya$gV-1Ox#=KoAfF9ySD`un$Mlkeo=L z;(Ip1N6ZR-*Cxub4@Yt$bx-DZZ;ogKX0vh>_Ti!5>52JaAC83Y^z3&dd63#C^SeH6 z4t-SBqOcDS{Vvh|p2_?^(NPV03_`LGf7m>Xj7Ja<1Ox#=KoAfF218&BTOJV=1RgpB zW+|tegSz)#M2zO#rn=53g)j0^PUTj&aQ!webI^Bjjpg2>)Q1yTHT8YzKTjl9k3t`& z?#QbkAP5Kog22OxK%{cUKb#|zQ3(QqfFK|U2m*qDARq_`0)l`bAP5Kof`A|(2nYg# zfFK|U2m*q@SP}5}-w!a>c0^tf5CjAPK|l}?1g0JWQEJzu4mw)ZIoM&7_SfUyZ;y6w z+}oUpaZW^=v;F(IH5*AROIK;C zw4OvRoBh?1$R$y(g+y+VDo|y$Byu^bS(U9JvCYM*MwP83v22M-QDtQ$a$RV%43(P= zE{|L}iDh-FNR_pa$Q5EnWtAjyC9GLTBDYd)Qf2E&zYaA&VyUAijifk;uJGxh4|1cgU?Lk^3WZH6$W<%mHpKiDe(6hcz`Ma{me3ie?hI zZ(TLD|Z361il| zef1g=xpb7RUP~gkh+GYcTn@Pk61gRge6@NdiCiAbs!8MuSyoRXSHiM761g=F6f~2_ zRiNgYIuf}$jAcy~iCh!8btH1FXk|@3iCjClwY4O2+Z@emZ54@Jr=vlwT}dLIU97o* z#Ik+l%1Pw99Z#vX6(n+pSyo3Pchd2Rdb*NC?y{pyJ-wbp?xI6i>sm-qNOj$@L9Ht% zvFtTRn_5>xBKH=0Sl37*_bz&PY0iO0J$n z?(1l!ay^M$mY%CB*OAEmF=|#elF0q3BSBR*lgRyvat(>x z4_LN=MDB;=YDnaMOs<|p?)RaC&2=PlpE!zDWfO_qYP7kkl0@!bD7TVC?w`r6Ad&0m zjH*cFe#x?O61h)-XJsjgoKyRmswyRsi_m_ms;WukJn*zt6($!=zgtCO*+Q*YRke`F zJ*90@RjWzlR&wsuByyhzSGATzu8eK2Cy`U&)>o3qJ+0NN>UAV?Yav(NNFujh`?;zv zC6Q~;3RLxK61gUF%_MTIIIHa_3RAtb#=DnzmW3t0IxR39e!ViQFyJtXxGR z_ZqnBN)oxZz%{HOk=q0PY^){Gm%oFu+ENnBeoy;E)mD+ny@#@zS`xXhV`R0fN#s7H z+&U7u|3GdniQFHfW=koF-1kvdUP~hP32WAn$X$j{u2@H+pXg^Qw}wPcVSaV1Nt|Bhr6h75l$Dl~$mOGz)nz1dYjm%wuO*Rd(Nk1?Gl^U)darLGkxR#@ z8|q2q+VoV_P);KE4VG1rva6M<(eqWqS`y24as5`2$Q{si)m%=ZAN&q5YiT60?6l*w zdb*lKPA)-U>L8%Qjy?FOcNAWemBW#u9Iz0FDkR!9<<@_$!eIw9VQr7;Iq(2Q>T|H)S$d|5)U#o|St?3jprYYJX6yB8wyPX|p+UvC z%2cerQF--EDo$^Mci5~F^z~{E_7-#X7L}+ss(E^|ny+`MB>l%KdB%$>#q~3ls{d4_ z>945tu-hubd0J(J{guiL`;p2DYgY?qZb9lm+N!d{pF!HDvfbO&0{2d&9cn>%C(^S> zyO5^N>P+2{c7%T^JX_7j1bjJ!9e*y}$bA{5zI)91>M<8AjYGZL;l5H$y%YZR@E8?` zr!`+LMwOv_q}S(XADtaz^jl%%QqaH`XaAl5-r|^7Vyf|kg6B*l#}W8)9H}qIk@|A{ zn4~Wk9mt`c=DP=3Bj=mj;+XHn+(Ew@B$%V@E67!2Ms9yDCXkB`a_jg!h`^YyDXv%^hWZPh@ZBQsRIU(tw)gllUx$zf8lQ`sZ?{QO^dH(itG=ra&>F+N`n~CzU$n*k#eaMqfUSj2) zvyzsF@+rk;`&bPXm@d|ne2K3RzsaLTe{0~4@rOk|<*(rzZ&aXxoG{`OHY?Q}uYs2{ zDz(HX!1_-0*qn^QAP+nimHJqJ`_5Uv>E}I8A6~g8kI|rhw3QE2`s{^^eH{}2Fy)N> zjVJRB3G%F8WNF{2W+o*08{qtO6&`QSrv$tMEtpq{?(3h=A-u?=)Tzz#-68K#S-wL2 zz6W_tMdX<`$m=R1F>u2ykXJ!K5D)|efoXt1EdD0OtFW+eT$2}nZ<@+ioch&N9{!le z9*?tdHnQ;EBK$1GkMDKSz0VuG-B(l2e6=fQ)~jnj-}i<0KKPa?Z@!x4c3(|7^VP1L zS?^&R2UlYxKZnlrjaer?%LWoutJ%H7;n1{-rq1(szVg9$&6`8KcAb2Ch*E#i9OFD+ zsl>#zOs1hE=BiJEkD)_Vlrlj;5SX$EB&zBaQ+Dt&a6v#25CjAPK|l}?1Ox#=KoAfF z1OY)n5D)|e0YN|z5CjAPK|l}?1Ox#=KoAfF1OY)n5D)|e0YN|z5CjAPK|l}?1Ox#= yKoAfF1OY)n5D)|e0YN|z5CjAPK|l}?1Ox#=KoAfF1OY)n5D)|e0YTsa2>gGQyD~li literal 0 HcmV?d00001 -- 2.30.2