Toshiba BDX2500 Blu-Ray player: Bad software or bad flash?

[Grapeshot]

This Toshiba Blu-ray player died on me back in February, and I finally got around to checking it out. Power rails were all fine, nothing looked blown on the board, but the only thing it would do was blink the power light every 10 seconds. I found a service manual online which wasn't too helpful, but it did tell me the pinout of the UART. I tried hooking a FT232 up to that and I actually got something out of it! Probably the syslog from a Linux kernel, and it's full of YAFFS errors and then a kernel oops inside YAFFS code.

Looks like either the file system on the Flash is corrupt or the actual Flash chip is damaged somehow.

Unfortunately now I'm stuck because it doesn't look like it mounts any USB storage or spins up the optical drive before the kernel panic, so it's not going to accept the firmware file I have to reflash it.

How would I go about pulling the TSOP Flash chip off this board and reading/rewriting/replacing it? The flash is a Toshiba TC58NVG1S3ETA00 (48-pin, 2Gbit). I know it's not exactly economical to spend any time on this but I'd like to get it working for the experience.

[Grapeshot]

Here's the syslog I captured from it, I tried a few more times with different things plugged in and the other boards connected or disconnected, and it was substantially the same.

Code: [Select]

BCM76300010
Setting NAND Params

CFE starting from ROM
Chip specific init
TLB init
Board init
Starting memory configuration
Valid memory config = D3128256
Disable refresh - set byte lane 8
Setting up PLL
Setting up memory controller 
Enable DDR encryption
SooooooooooooooR
Preparing to copy code to RAM
Prepare for NAND loading


Starting code in RAM
Booting Secured uCFE... 


BCM97630 B0-BSEC  uCfe v2.1.17 (CFE core v2.1, BSP_REV 17), Endian Mode: Little
Build Date: Fri Apr  9 17:48:43 EDT 2010 (kdasu@stb-mhtb-02)
Copyright (C) Broadcom Corporation.


DDR                        : Bank0:128MB@667MHz | Bank1:256MB@667MHz 
NAND Boot                  : FlashSize 256MB on CS0, BlkSize 128KB, PgSize 2048B
NAND vendor timing         : 98da9015 Toshiba TC58NVG1S3ETA00 SLC  t1(33535233) t2(80000b98)
Secure boot                : secure boot enabled, BSECK unlocked
Port lock                  : Enabled



--vvv----vv-----vv----------- ATV DUMP -----------vv-----vv----vvv--
     cfg.espring_enabled  size< 004 >     u32< 1 >
         bst[-1].version  size< 041 >     str< Signed PKG_DVD_3_1_013_02_BDX >
    bst[-1].bootline_fmt  size< 134 >     str< boot -z -elf flash0.vmlinux.%d: 'root=/dev/romblock%d rootfstype=squashfs ro %s BDVD_BOOT_AUTOSTART=y  BAPP_OUT=/dev/console panic=8' >
       bst[-1].part_info  size< 051 >     str< cfe,2,1:rootfs,2,1:vmlinux,2,1:ofefw,2,1:ofews,2,0 >
        bst[0].part_info  size< 051 >     str< cfe,2,0:rootfs,2,0:vmlinux,2,0:ofefw,2,1:ofews,2,0 >
     bst[0].bootline_fmt  size< 134 >     str< boot -z -elf flash0.vmlinux.%d: 'root=/dev/romblock%d rootfstype=squashfs ro %s BDVD_BOOT_AUTOSTART=y  BAPP_OUT=/dev/console panic=8' >
          bst[0].version  size< 041 >     str< Ver 1.77 BDX2500 Signed >
        cfg.bst_versions  size< 004 >     i32< 2 >
         cfg.version_log  size< 216 >     str< 0  xxx xxx xx xx:xx:xx xxxx  1.0
+  Wed Jun 11 00:01:33 2008  Signed Encrypt PKG_DVD_3_1_013_04_02_BDX
+  Wed Jun 11 00:02:32 2008  Signed PKG_DVD_3_1_013_02_BDX
+  Sun Dec 25 20:04:20 2011  Ver 1.77 BDX2500 Signed
 >
    cfg.launch_successes  size< 004 >     u32< 3 >
     cfg.launch_attempts  size< 004 >     u32< 3 >
--^^^----^^-----^^--------------^^^---------------^^-----^^----^^^--

BUPE     attempts<3>  success<3>  revert<0>  wr_stats<0>
BUPE     bootline< boot -elf flash0.cfe.0: >Loader:elf Filesys:raw Dev:flash0.cfe.0 File: Options:(null)
Loading: 0x87000000/20220 0x87004efc/468 0x87005100/39 0x87007efc/604921 0x8709ba00/16128 0x8709f900/7272 
Successfully loaded secure elf image....
Entry address is 0x87000000
Starting program at 0x87000000


BCM76300010
TLB init
Board init
 RAM


BCM97630 B0-FULLSEC  CFE v2.1.21 (CFE core v2.1, BSP_REV 21), Endian Mode: Little
Build Date: Thu Dec  2 18:15:03 EST 2010 (kdasu@stb-mhtb-02)
Copyright (C) Broadcom Corporation.



DDR                        : Bank0:128MB@667MHz | Bank1:256MB@667MHz 
NAND Boot                  : FlashSize 256MB on CS0, BlkSize 128KB, PgSize 2048B
NAND vendor timing         : 98da9015 Toshiba TC58NVG1S3ETA00 SLC  t1(33535233) t2(80000b98)
Secure boot                : secure boot enabled, BSECK unlocked
Port lock                  : Enabled


Timestamp started ...

--vvv----vv-----vv----------- ATV DUMP -----------vv-----vv----vvv--
     cfg.espring_enabled  size< 004 >     u32< 1 >
         bst[-1].version  size< 041 >     str< Signed PKG_DVD_3_1_013_02_BDX >
    bst[-1].bootline_fmt  size< 134 >     str< boot -z -elf flash0.vmlinux.%d: 'root=/dev/romblock%d rootfstype=squashfs ro %s BDVD_BOOT_AUTOSTART=y  BAPP_OUT=/dev/console panic=8' >
       bst[-1].part_info  size< 051 >     str< cfe,2,1:rootfs,2,1:vmlinux,2,1:ofefw,2,1:ofews,2,0 >
        bst[0].part_info  size< 051 >     str< cfe,2,0:rootfs,2,0:vmlinux,2,0:ofefw,2,1:ofews,2,0 >
     bst[0].bootline_fmt  size< 134 >     str< boot -z -elf flash0.vmlinux.%d: 'root=/dev/romblock%d rootfstype=squashfs ro %s BDVD_BOOT_AUTOSTART=y  BAPP_OUT=/dev/console panic=8' >
          bst[0].version  size< 041 >     str< Ver 1.77 BDX2500 Signed >
        cfg.bst_versions  size< 004 >     i32< 2 >
         cfg.version_log  size< 216 >     str< 0  xxx xxx xx xx:xx:xx xxxx  1.0
+  Wed Jun 11 00:01:33 2008  Signed Encrypt PKG_DVD_3_1_013_04_02_BDX
+  Wed Jun 11 00:02:32 2008  Signed PKG_DVD_3_1_013_02_BDX
+  Sun Dec 25 20:04:20 2011  Ver 1.77 BDX2500 Signed
 >
    cfg.launch_successes  size< 004 >     u32< 3 >
     cfg.launch_attempts  size< 004 >     u32< 3 >
--^^^----^^-----^^--------------^^^---------------^^-----^^----^^^--

booting ARM...
Reading flash0.ofefw.1 to V:0x80000000 from offset 0 len 1048576 
validating ofe fw_ldt@0x800fffa0 ...
Calculated FW checksum: 0x031865c0, LDT checksum: 0x031865c0
parsed fw_ldt@800fffa0 : ws0_sadr=0xc0000 ws0_eadr=0xdffff prodid:BD PLAYER R02    
parsed fw_ws @800c0000 : vendor: BROADCOM prodid: BD PLAYER R02     
Reading flash0.ofews.0 to V:0x80100000 from offset 0 len 131072 
ws partition contains no data
Initializing OFE...ofefw@0x2fd00000 
OFE ARM Initialized and held in reset

Elapsed time  504mS (504069 uS) 


BUPE     attempts<3>  success<3>  need_to_ask_player_to_increment_launch_successes<0>
BUPE     bootline< boot -z -elf flash0.vmlinux.0: 'root=/dev/romblock10 rootfstype=squashfs ro  BDVD_BOOT_AUTOSTART=y  BAPP_OUT=/dev/console panic=8' >Loader:elf Filesys:raw Dev:flash0.vmlinux.0 File: Options:root=/dev/romblock10 rootfstype=squashfs ro  BDVD_BOOT_AUTOSTART=y  BAPP_OUT=/dev/console panic=8
Loading: 
Successfully verified application....
0x80008000/5108544 0x804e7340/306944 
Successfully loaded secure elf image....
Entry address is 0x8000c870
Starting program at 0x8000c870

[    0.000000] -- DDR Bank 0: 128 MB
[    0.000000] -- DDR Bank 1: 256 MB
[    0.000000] Linux version 2.6.28.9 (root@stbcm-mhtb-1) (gcc version 4.2.0 20070124 (prerelease) - BRCM 10ts-20080721) #664 Fri Apr 29 03:52:23 EDT 2011
[    0.000000] Kernel command line: root=/dev/romblock10 rootfstype=squashfs ro  BDVD_BOOT_AUTOSTART=y  BAPP_OUT=/dev/console panic=8 console=0,115200n8 LD_BIND_NOW=on
[4294667.366000] DIGSIG: no valid key, digsig security disabled
[4294667.388000] checker_0 control 0x00000008 addr low 0x00002000 hi 0x003aa000 
[4294667.395000] read rights _0 0xffffffff _1 0xffffffff write rights _0 0x00000000 _1 0x00000000 
[4294667.404000] checker_1 control 0x00000008 addr low 0x003ab000 hi 0x027fff80 
[4294667.411000] read rights _0 0xffffffff _1 0xffffffff write rights _0 0x00000000 _1 0x00e4fca0 
[4294667.420000] checker_2 control 0x00000008 addr low 0x20000000 hi 0x238fff80 
[4294667.427000] read rights _0 0xffffffff _1 0xffffffff write rights _0 0x00000000 _1 0x00e4fca0 
[4294667.436000] checker_3 control 0x00000018 addr low 0x2fd00000 hi 0x2fdfff80 
[4294667.443000] read rights _0 0xffffffff _1 0xffffffff write rights _0 0x00000000 _1 0x00010000 
[4294667.470000] Driver 'sd' needs updating - please use bus_type methods
[4294667.477000] Driver 'sr' needs updating - please use bus_type methods
[4294667.484000] vide_ofe_probe: FE SECURITY NOT ENABLED
[4294667.552000] Creating 28 MTD partitions on "bcm7xxx-nand":
[4294667.558000] 0x00000000-0x00180000 : "ucfe"
[4294667.564000] 0x00180000-0x00200000 : "drmregion"
[4294667.569000] 0x00200000-0x00280000 : "drmregion.1"
[4294667.575000] 0x00280000-0x00300000 : "rawnvr"
[4294667.580000] 0x00300000-0x00300090 : "macadr"
[4294667.584000] mtd: partition "macadr" doesn't end on an erase block -- force read-only
[4294667.593000] 0x00300090-0x00300800 : "nvram"
[4294667.597000] mtd: partition "nvram" doesn't start on an erase block boundary -- force read-only
[4294667.607000] 0x00300800-0x00400000 : "virtual"
[4294667.612000] mtd: partition "virtual" doesn't start on an erase block boundary -- force read-only
[4294667.621000] 0x00400000-0x00600000 : "cfe.0"
[4294667.626000] 0x00600000-0x00800000 : "cfe.1"
[4294667.631000] 0x00800000-0x00880000 : "vault-a"
[4294667.637000] 0x00880000-0x06080000 : "rootfs.0"
[4294667.643000] 0x06080000-0x06100000 : "vault-b"
[4294667.648000] 0x06100000-0x0b900000 : "rootfs.1"
[4294667.654000] 0x0b900000-0x0bd00000 : "vmlinux.0"
[4294667.659000] 0x0bd00000-0x0bd80000 : "vault-c"
[4294667.665000] 0x0bd80000-0x0c180000 : "vmlinux.1"
[4294667.670000] 0x0c180000-0x0c200000 : "paniclog"
[4294667.676000] 0x0c200000-0x0c280000 : "cfelog"
[4294667.681000] 0x0c280000-0x0c880000 : "splash"
[4294667.686000] 0x0c880000-0x0cc80000 : "syslog"
[4294667.692000] 0x0cc80000-0x0d080000 : "psnv"
[4294667.697000] 0x0d080000-0x0f600000 : "pstor"
[4294667.702000] 0x0f600000-0x0f900000 : "ofefw.0"
[4294667.708000] 0x0f900000-0x0fa00000 : "ofews.0"
[4294667.713000] 0x0fa00000-0x0fd00000 : "ofefw.1"
[4294667.718000] 0x0fd00000-0x0fe00000 : "ofews.1"
[4294667.724000] 0x00300000-0x00400000 : "config"
[4294667.729000] 0x00000000-0x0fe00000 : "all"
rcS: BDVD_BOOT_AUTOSTART<y>  BQ<y>  BAPP<./app_player>  BAPP_OUT</dev/console>  BNET<>  BNET_DLY<0> OFE_SB<y>
[4294668.512000] yaffs: restored from checkpoint
Mounting pstor, psnv with yaffs2!
rcS: Launch PSTOR mount in background
[4294668.582000] yaffs: restored from checkpoint
[4294668.952000] **>> yaffs chunk 1775 was not erased
[4294668.957000] **>> yaffs chunk 1776 was not erased
[4294668.962000] **>> yaffs chunk 1777 was not erased
[4294668.967000] **>> yaffs chunk 1778 was not erased
[4294668.972000] **>> yaffs chunk 1779 was not erased

 (snip about 100 more of these messages)

[4294670.564000] **>> yaffs chunk 2095 was not erased
[4294670.569000] **>> yaffs write required 321 attempts
[4294670.574000] page 1728 in gc has no object: 0 0 0 
[4294670.579000] page 1729 in gc has no object: 0 0 0 
[4294670.584000] page 1730 in gc has no object: 0 0 0 
[4294670.589000] page 1731 in gc has no object: 0 0 0 
[4294670.595000] page 1732 in gc has no object: 0 0 0 
[4294670.600000] page 1733 in gc has no object: 0 0 0 
[4294670.605000] page 1734 in gc has no object: 0 0 0 
[4294670.610000] page 1735 in gc has no object: 0 0 0 
[4294670.615000] page 1736 in gc has no object: 0 0 0 
[4294670.620000] page 1737 in gc has no object: 0 0 0 
[4294670.625000] page 1738 in gc has no object: 0 0 0 
[4294670.630000] page 1739 in gc has no object: 0 0 0 
[4294670.636000] page 1740 in gc has no object: 0 0 0 
[4294670.641000] page 1741 in gc has no object: 0 0 0 
[4294670.646000] page 1742 in gc has no object: 0 0 0 
[4294670.651000] page 1743 in gc has no object: 0 0 0 
[4294670.656000] page 1744 in gc has no object: 0 0 0 
[4294670.661000] page 1746 in gc has no object: 0 0 0 
[4294670.666000] page 1747 in gc has no object: 0 0 0 
[4294670.671000] page 1748 in gc has no object: 0 0 0 
[4294670.676000] page 1749 in gc has no object: 0 0 0 
[4294670.682000] page 1750 in gc has no object: 0 0 0 
[4294670.687000] page 1751 in gc has no object: 0 0 0 
[4294670.692000] page 1752 in gc has no object: 0 0 0 
[4294670.697000] page 1753 in gc has no object: 0 0 0 
[4294670.702000] page 1754 in gc has no object: 0 0 0 
[4294670.707000] page 1755 in gc has no object: 0 0 0 
[4294670.712000] page 1756 in gc has no object: 0 0 0 
[4294670.717000] page 1757 in gc has no object: 0 0 0 
[4294670.723000] page 1758 in gc has no object: 0 0 0 
[4294670.728000] page 1759 in gc has no object: 0 0 0 
[4294670.733000] page 1760 in gc has no object: 0 0 0 
[4294670.738000] page 1761 in gc has no object: 0 0 0 
[4294670.743000] page 1762 in gc has no object: 0 0 0 
[4294670.748000] page 1763 in gc has no object: 0 0 0 
[4294670.753000] page 1764 in gc has no object: 0 0 0 
[4294670.758000] page 1765 in gc has no object: 0 0 0 
[4294670.764000] page 1766 in gc has no object: 0 0 0 
[4294670.769000] page 1767 in gc has no object: 0 0 0 
[4294670.774000] page 1768 in gc has no object: 0 0 0 
[4294670.779000] page 1769 in gc has no object: 0 0 0 
[4294670.784000] page 1770 in gc has no object: 0 0 0 
[4294670.789000] page 1771 in gc has no object: 0 0 0 
[4294670.794000] page 1774 in gc has no object: 0 0 0 
[4294670.800000] **>> yaffs chunk 2096 was not erased
[4294670.805000] **>> yaffs chunk 2097 was not erased
[4294670.810000] **>> yaffs chunk 2098 was not erased
[4294670.815000] **>> yaffs chunk 2099 was not erased
[4294670.820000] **>> yaffs chunk 2100 was not erased
[4294670.825000] **>> yaffs chunk 2101 was not erased
[4294670.830000] **>> yaffs chunk 2102 was not erased
[4294670.835000] **>> yaffs chunk 2103 was not erased
[4294670.840000] **>> yaffs chunk 2104 was not erased
[4294670.845000] **>> yaffs chunk 2105 was not erased
[4294670.850000] **>> yaffs chunk 2106 was not erased
[4294670.855000] **>> yaffs chunk 2107 was not erased
[4294670.860000] **>> yaffs chunk 2108 was not erased
[4294670.865000] **>> yaffs chunk 2109 was not erased
[4294670.870000] **>> yaffs chunk 2110 was not erased
[4294670.875000] **>> yaffs chunk 2111 was not erased
[4294670.880000] yaffs tragedy: no more erased blocks
[4294670.885000] !!!!!!!!! Allocator out !!!!!!!!!!!!!!!!!
[4294670.890000] **>> yaffs write required 16 attempts
[4294670.895000] yaffs tragedy: no more erased blocks
[4294670.900000] !!!!!!!!! Allocator out !!!!!!!!!!!!!!!!!
[4294670.905000] yaffs tragedy: no more erased blocks
[4294670.910000] !!!!!!!!! Allocator out !!!!!!!!!!!!!!!!!
[4294670.916000] page 1778 in gc has no object: 271 0 0 
[4294670.921000] yaffs tragedy: no more erased blocks
[4294670.926000] !!!!!!!!! Allocator out !!!!!!!!!!!!!!!!!
[4294670.931000] yaffs tragedy: no more erased blocks
[4294670.936000] !!!!!!!!! Allocator out !!!!!!!!!!!!!!!!!
/etc/init.d/rcS: /var/log/wtmp: Cannot allocate memory
cannot access `/var/log/wtmp': No such file or directory

app_ofe_sb: Read current FW image for validation checking
cannot access `/var/log/wtmp': No such file or directory

app_ofe_sb: No-Toggle partition name: ofefw.1

[4294671.641000] page 1780 in gc has no object: 259 0 0 
app_ofe_sb[4294671.646000] page 1781 in gc has no object: 259 0 0 
: Issue SB_IOCTL[4294671.652000] yaffs tragedy: no more erased blocks
_GETCMD
[4294671.658000] !!!!!!!!! Allocator out !!!!!!!!!!!!!!!!!
[4294671.665000] page 1783 in gc has no object: 259 0 0 
[4294671.670000] page 1784 in gc has no object: 259 0 0 
[4294671.675000] page 1785 in gc has no object: 259 0 0 
[4294671.681000] yaffs tragedy: no more erased blocks
[4294671.685000] !!!!!!!!! Allocator out !!!!!!!!!!!!!!!!!
[4294671.691000] yaffs tragedy: no more erased blocks
[4294671.695000] !!!!!!!!! Allocator out !!!!!!!!!!!!!!!!!
[4294671.701000] page 1787 in gc has no object: 259 0 0 
[4294671.706000] page 1788 in gc has no object: 259 0 0 
[4294671.711000] page 1789 in gc has no object: 259 0 0 
[4294671.717000] yaffs tragedy: no more erased blocks
[4294671.722000] !!!!!!!!! Allocator out !!!!!!!!!!!!!!!!!
[4294671.727000] page 1791 in gc has no object: 259 0 0 
[4294671.732000] yaffs tragedy: no more erased blocks
[4294671.737000] !!!!!!!!! Allocator out !!!!!!!!!!!!!!!!!
                 syslogd: /var/log/messages: Cannot allocate memory

                 syslogd: cannot create /dev/log: Address already in use

[Grapeshot]

and part 2:

Code: [Select]

Wed Jun 11 00:00:00 UTC 2008
[4294672.149000] bcmdriver: module license 'Proprietary' taints kernel.
[4294672.190000] BCMDRV: Initializing bcmdriver version $ bdvd_v3.0/6 $
[4294672.196000] BCMDRV: Using Interrupt Definition for 7630 (uname -a)
[4294672.203000] BCMDRV: Total intc words=2,Total Irqs=65
[4294672.208000] BCMDRV: Initialization complete...
Use source aspect ratio for VBI

Use 'red green blue yellow' key order

Disable VCD/SVCD support

Disable CPRM support

Disable WMV

HDMI 1080p deep color setting for Toshiba BDX2200

app 74016:00:08.145  -.--- main(): Application Started
app 74016:00:08.145 +0.000 Time from Startup to Application Start: 16.630 seconds

 Heaps created for 384M memcfg
Heap XPT Handle 0x0045a5d8, PA 0x02800000/ 40M, Size 0x00300000/  3M BW 0
Heap RAP Handle 0x0045ab18, PA 0x23900000/569M, Size 0x00800000/  8M BW 0
Heap CTX Handle 0x0045b058, PA 0x04300000/ 67M, Size 0x00880000/  8M BW 0
Heap XVD Handle 0x0045b598, PA 0x04b80000/ 75M, Size 0x01c80000/ 28M BW 0
Heap PBK Handle 0x0045bad8, PA 0x06800000/104M, Size 0x00600000/  6M BW 0
Heap SUB Handle 0x0045c018, PA 0x06e00000/110M, Size 0x00c80000/ 12M BW 0
Heap VDC Handle 0x0045c558, PA 0x02b00000/ 43M, Size 0x01800000/ 24M BW 1
Heap GPI Handle 0x0045ca98, PA 0x24100000/577M, Size 0x00980000/  9M BW 0
Heap GFX Handle 0x0045cfd8, PA 0x24a80000/586M, Size 0x0a500000/165M BW 0
Heap PIC Handle 0x0045d518, PA 0x04300000/ 67M, Size 0x03780000/ 55M BW 1

enabling realtime scheduling
app 74016:00:08.486 +0.341 PslExternalGetPMState: Metanav not created!
app 74016:00:08.627 +0.140 QA_OUTPUT(1): PlayerSettings: 	 
app 74016:00:08.627 +0.000 QA_OUTPUT(2): AllowInternalBDLiveStorage: 	Off 
app 74016:00:08.627 +0.000 QA_OUTPUT(3): AudioLanguage: 	Default 
app 74016:00:08.627 +0.000 QA_OUTPUT(4): AutoPowerDown: 	Minutes_30 
app 74016:00:08.627 +0.000 QA_OUTPUT(5): BD3DMode: 	BD3D_Auto 
app 74016:00:08.627 +0.000 QA_OUTPUT(6): BDLiveNetworkAccess: 	AlwaysAllow 
app 74016:00:08.627 +0.000 QA_OUTPUT(7): BDLiveStorage: 	NA 
app 74016:00:08.627 +0.000 QA_OUTPUT(8): BDProfile: 	Profile_5 
app 74016:00:08.627 +0.000 QA_OUTPUT(9): BDRegion: 	LevelA 
app 74016:00:08.627 +0.000 QA_OUTPUT(10): BDSharpnessOffset: 	14000 
app 74016:00:08.627 +0.000 QA_OUTPUT(11): BootupToFullPower: 	Off 
app 74016:00:08.628 +0.000 QA_OUTPUT(12): BootupToFullPowerAfterUpdate: 	Off 
app 74016:00:08.628 +0.000 QA_OUTPUT(13): CECSupport: 	On 
app 74016:00:08.628 +0.000 QA_OUTPUT(14): CFEResolution: 	Res1080i 
app 74016:00:08.628 +0.000 QA_OUTPUT(15): Center: 	Small 
app 74016:00:08.628 +0.000 QA_OUTPUT(16): ColorDepth: 	ColorDepth_36bit 
app 74016:00:08.628 +0.000 QA_OUTPUT(17): Colorspace: 	XVYCC 
app 74016:00:08.628 +0.000 QA_OUTPUT(18): ConnectedAppDebugMode: 	Off 
app 74016:00:08.628 +0.000 QA_OUTPUT(19): CurrentAP: 	0:22:69:b:b4:d7 
app 74016:00:08.628 +0.000 QA_OUTPUT(20): DRC: 	DRCOn 
app 74016:00:08.628 +0.000 QA_OUTPUT(21): DVDRegion: 	Level1 
app 74016:00:08.628 +0.000 QA_OUTPUT(22): DefaultPBCOn: 	On 
app 74016:00:08.628 +0.000 QA_OUTPUT(23): DialogNormalization: 	DiagNormDefault 
app 74016:00:08.628 +0.000 QA_OUTPUT(24): DigitalOutput: 	PCM7_1 
app 74016:00:08.628 +0.000 QA_OUTPUT(25): EnablenfsDevice: 	Off 
app 74016:00:08.628 +0.000 QA_OUTPUT(26): EthernetMAC: 	00:23:18:73:F0:32 
app 74016:00:08.629 +0.000 QA_OUTPUT(27): FilmMode: 	Off 
app 74016:00:08.629 +0.000 QA_OUTPUT(28): FirmwareRollback: 	Off 
app 74016:00:08.629 +0.000 QA_OUTPUT(29): FrontL: 	Small 
app 74016:00:08.629 +0.000 QA_OUTPUT(30): FrontR: 	Small 
app 74016:00:08.629 +0.000 QA_OUTPUT(31): Gateway: 	0.0.0.0 
app 74016:00:08.629 +0.000 QA_OUTPUT(32): IgnoreDeviceName: 	Off 
app 74016:00:08.629 +0.000 QA_OUTPUT(33): IpAddress: 	0.0.0.0 
app 74016:00:08.629 +0.000 QA_OUTPUT(34): IpMode: 	Dynamic 
app 74016:00:08.629 +0.000 QA_OUTPUT(35): LinkStatus: 	LinkDown 
app 74016:00:08.629 +0.000 QA_OUTPUT(36): MediaMWP: 	On 
app 74016:00:08.629 +0.000 QA_OUTPUT(37): MediaPlaylist: 	Off 
app 74016:00:08.629 +0.000 QA_OUTPUT(38): MenuLanguage: 	English 
app 74016:00:08.629 +0.000 QA_OUTPUT(39): Neo6: 	Neo6Off 
app 74016:00:08.629 +0.000 QA_OUTPUT(40): NetworkInterface: 	Wired 
app 74016:00:08.629 +0.000 QA_OUTPUT(41): NoiseType: 	Pink 
app 74016:00:08.629 +0.000 QA_OUTPUT(42): OSDLanguage: 	English 
app 74016:00:08.630 +0.000 QA_OUTPUT(43): OpticalAutoPlay: 	On 
app 74016:00:08.630 +0.000 QA_OUTPUT(44): PCMDownSampling: 	Freq48KHz 
app 74016:00:08.630 +0.000 QA_OUTPUT(45): ParentalControl: 	Off 
app 74016:00:08.630 +0.000 QA_OUTPUT(46): ParentalCountry: 	USA 
app 74016:00:08.630 +0.000 QA_OUTPUT(47): ParentalLevel: 	Level1 
app 74016:00:08.630 +0.000 QA_OUTPUT(48): ParentalPassword: 	0 
app 74016:00:08.630 +0.000 QA_OUTPUT(49): PostProcMode: 	Custom 
app 74016:00:08.630 +0.000 QA_OUTPUT(50): PrimaryDNS: 	0.0.0.0 
app 74016:00:08.630 +0.000 QA_OUTPUT(51): QAPrintLevel: 	0 
app 74016:00:08.630 +0.000 QA_OUTPUT(52): QuickSetupDone: 	On 
app 74016:00:08.630 +0.000 QA_OUTPUT(53): RearL: 	Small 
app 74016:00:08.630 +0.000 QA_OUTPUT(54): RearR: 	Small 
app 74016:00:08.630 +0.000 QA_OUTPUT(55): Resolution: 	ResHdmiAuto 
app 74016:00:08.630 +0.000 QA_OUTPUT(56): ScreenSaverDuration: 	Minutes_5 
app 74016:00:08.630 +0.000 QA_OUTPUT(57): SecondaryDNS: 	0.0.0.0 
app 74016:00:08.631 +0.000 QA_OUTPUT(58): Sharpness: 	Off 
app 74016:00:08.631 +0.000 QA_OUTPUT(59): SignalStrength: 	Fair 
app 74016:00:08.631 +0.000 QA_OUTPUT(60): SlideShowBackgroundMusic: 	Off 
app 74016:00:08.631 +0.000 QA_OUTPUT(61): SlideShowDelay: 	0 
app 74016:00:08.631 +0.000 QA_OUTPUT(62): SlideShowEffect: 	None 
app 74016:00:08.631 +0.000 QA_OUTPUT(63): StereoDownmix: 	StereoDownmixAuto 
app 74016:00:08.963 +0.332 QA_OUTPUT(64): SubNetMask: 	0.0.0.0 
app 74016:00:08.963 +0.000 QA_OUTPUT(65): SubtitleLanguage: 	Default 
app 74016:00:08.963 +0.000 QA_OUTPUT(66): Subwoofer: 	Freq80Hz 
app 74016:00:08.964 +0.000 QA_OUTPUT(67): SurroundL: 	Small 
app 74016:00:08.964 +0.000 QA_OUTPUT(68): SurroundR: 	Small 
app 74016:00:08.964 +0.000 QA_OUTPUT(69): TVAspect: 	Aspect16_9PillarBox 
app 74016:00:08.964 +0.000 QA_OUTPUT(70): TVType: 	NTSC 
app 74016:00:08.964 +0.000 QA_OUTPUT(71): TimeZone: 	PacificTime_USCanada_Daylight 
app 74016:00:08.964 +0.000 QA_OUTPUT(72): ToggleUpdateUrl: 	Off 
app 74016:00:08.964 +0.000 QA_OUTPUT(73): TrayLockCtrl: 	TrayLock_UnLocked 
app 74016:00:08.964 +0.000 QA_OUTPUT(74): UBN: 	On 
app 74016:00:08.964 +0.000 QA_OUTPUT(75): VideoQualityDebug: 	Off 
app 74016:00:08.964 +0.000 QA_OUTPUT(76): Volume: 	96 
### Null image pointer!!!
### 
Error in Opening the Image Interface for FW_ID =129 

### Null image pointer!!!
### 
Error in Opening the Image Interface for FW_ID =129 

### Null image pointer!!!
### 
Error in Opening the Image Interface for FW_ID =77 

### bdvd_audio_output_open_sound failed -- audio_output_settings.state != bdvd_audio_output_state_open

### bdvd_bmem_destroy_avc_heap: AVC 5.1 heap memory was not freed because it was never allocated!
PECreate: initialFormat is 9, disp0.format is 9

       ---------------------- DirectFB v0.9.22 ---------------------
             (c) 2000-2002  convergence integrated media GmbH  
             (c) 2002-2004  convergence GmbH                   
        -----------------------------------------------------------

(*) DirectFB/Core: Single Application Core. (2011-05-16 08:46) 
(*) DirectFB/BCMCore/system_p_init: video memory size is 173014940
(*) DirectFB/BCMCore/system_p_init: using cached memory for surfaces, cache flush is required
bdvd_graphics: Doing HD full resolution graphics planes
bdvd_graphics: Doing HD full resolution graphics planes
(*) DirectFB/BCMCore/system_p_init: display is set to video_format 9
bdvd_graphics: Using Anisotropic filtering
(*) DirectFB/BCMCore/system_p_init: using mixer compositor for flip-blit
(*) DirectFB/BCMCore/system_p_init: Flip with do a forcefull DSFLIP_WAITFORSYNC
(*) DirectFB/BCMCore/system_p_init: using compositor M2MC for both mixer and driver
(*) DirectFB/BCMGfx/driver_init_driver: driver compositor area threshold is 0
(*) DirectFB/BCMGfx/driver_init_driver: surface memory will not be cleared
(*) DirectFB/Graphics: Broadcom Corporation BCM7438/xxxAPI 0.1 (Broadcom Corporation)
(*) VideoRamSize = 173014940
(*) DirectFB/BCMCore/BCMCoreInitLayer: output layer primary buffer mode is triple
(*) DirectFB/Core/WM: Default 0.2 (Convergence GmbH)
 (!!!)  *** UNIMPLEMENTED [fusion_reactor_set_lock] *** [reactor.c:802]
### bdvd_decode_window_get: decode window wrong
### bdvd_decode_window_set: decode window wrong
### bdvd_decode_window_get: decode window wrong
### bdvd_decode_window_set: decode window wrong
app 74016:00:10.574 +1.609 peiConfigStartWatchdogService: watchdog is not running
### Not able to reset SM HW
app 74016:00:10.680 +0.105 IoCustomCreate(): Board Type[BCM97630]!
app 74016:00:10.688 +0.008 IoCustomCreate: .........................     Config DAC Mute for Toshiba
### OS_TaskSpawnParam: Could not set thread 'IOTask' stack size to 4096 (min is 16384); using 1048576 instead!
### BRAP_SM_P_Close: Open Count =0
### Not able to reset SM HW
### BRAP_SM_P_Close: Open Count =0
### Not able to reset SM HW
### BRAP_SM_P_Close: Open Count =0
### Not able to reset SM HW
app 74016:00:12.581 +1.892 CecProcEnable:  *******   ENABLE CEC  ******
app 74016:00:12.581 +0.000 cMetaNav::SetNetworkAccessSetting: networkAccessSetting: (1).
app 74016:00:12.589 +0.007 QA_OUTPUT(77): BDLiveStorage: 	NA 
### BRAP_SM_P_Close: Open Count =0
### Not able to reset SM HW
### OS_TaskSpawnParam: Could not set thread 'DataReader' stack size to 4096 (min is 16384); using 1048576 instead!
app 74016:00:12.695 +0.106 DataReader: OS_TaskSpawnParam failed!
### Could not determine boot reason since current CFE is not tracking boot progress, etc. for Eternal Spring
### OS_TimerStop: FAILED

app 74016:00:13.[4294685.135000] Oops[#1]:
[4294685.135000] Cpu 0
[4294685.135000] $ 0   : 00000000 00020f58 00000001 00000000
[4294685.135000] $ 4   : 00000000 00000005 00000015 00002123
[4294685.135000] $ 8   : 804405f0 7fffffff feced300 ffffffff
[4294685.135000] $12   : 86d6a7cf 00000002 00000001 804f0a98
[4294685.135000] $16   : 00000000 8240e000 804b0000 804b0000
[4294685.135000] $20   : 00000000 804b0000 804c0000 0088a5c0
[4294685.135000] $24   : 804f0ab8 8019ac9c                  
[4294685.135000] $28   : 81c5a000 81c5bcc8 00010000 801a7754
[4294685.135000] Hi    : 000f41fe
[4294685.135000] Lo    : 4de4d1c0
[4294685.135000] epc   : 801a9b8c yaffs_CheckpointClose+0x3c/0x1f4
[4294685.135000]     Tainted: PF         
[4294685.135000] ra    : 801a7754 yaffs_CheckpointSave+0xdc/0x54c
[4294685.135000] Status: 10004403    KERNEL EXL IE 
[4294685.135000] Cause : 00800008
[4294685.135000] BadVA : 00000000
[4294685.135000] PrId  : 0201937c (MIPS 24Kc)
[4294685.135000] Modules linked in: wl(P) bcm_usbshim bcmdriver(PF)
[4294685.135000] Process MetaSimpleCmdTa (pid: 157, threadinfo=81c5a000, task=82489b60, tls=54f69960)
[4294685.135000] Stack : 00000000 8003a2e4 8240e000 801a9f78 00000000 8240e000 804b0000 804b0000
[4294685.135000]         00000000 804b0000 801a7754 801a7724 800bcaf0 800bcae8 00000000 00000000
[4294685.135000]         00000000 00000000 00000000 7fffffff 8274a600 8274a640 804b0000 804aa530
[4294685.135000]         804b0000 00000000 804c0000 0088a5c0 00010000 800bcc60 8240e000 82701c00
[4294685.135000]         82701c40 804b0000 00000000 804b0000 804c0000 0088a5c0 00010000 8019af2c
[4294685.135000]         ...
[4294685.135000] Call Trace:
[4294685.135000] [<801a9b8c>] yaffs_CheckpointClose+0x3c/0x1f4
[4294685.135000] [<801a7754>] yaffs_CheckpointSave+0xdc/0x54c
[4294685.135000] [<8019af2c>] yaffs_do_sync_fs+0x68/0xa0
[4294685.135000] [<8019af9c>] yaffs_sync_fs+0x38/0x60
[4294685.135000] [<8009fbec>] sync_filesystems+0x120/0x174
[4294685.135000] [<800c03c8>] do_sync+0x30/0x8c
[4294685.135000] [<800c0434>] sys_sync+0x10/0x20
[4294685.135000] [<8001cd08>] power_standby+0xdc/0x1dc
[4294685.135000] [<8001d9a4>] power_ioctl+0x278/0x3b4
[4294685.135000] [<800ab400>] do_vfs_ioctl+0x3fc/0x5c0
[4294685.135000] [<800ab65c>] sys_ioctl+0x98/0xb0
[4294685.135000] [<8000a1a4>] stack_done+0x20/0x3c
[4294685.135000] 
[4294685.135000] 
[4294685.135000] Code: 18400035  00000000  8c8400f0 <8c900000> 06000032  3c02ff0f  3455ffff  00009021  3c138045 
036 +0.341 WaitForIdle:  CEC activity is now quiescent
app 74016:00:13.036 +0.000 IoCustomHandleStatus: Enter Standby