EMBA firmware report

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./usr/html/axis-cgi/mqtt/client.cgi to identify missing areas

[*] Emulating binary name: client.cgi in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract (1/2)

[*] Using CPU config:

--- SIGILL {si_signo=SIGILL, si_code=SI_KERNEL, si_pid=0, si_uid=0} ---

qemu: uncaught target signal 4 (Illegal instruction) - core dumped

[*] Identification of missing filesytem areas.

[*] No missing areas found.

-----------------------------------------------------------------

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./html/axis-cgi/mqtt/client.cgi to identify missing areas

[*] Emulating binary name: client.cgi in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr (2/2)

[*] Using CPU config: 24KEc

1 brk(NULL) = 0x400448c0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f7c7000

1 uname(0x3ff1d650) = 0

1 access("/etc/ld.so.preload",R_OK) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/etc/ld.so.cache",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/tls/libaxlog.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3e4,512) = 512

1 prctl(46,1072813304,1072813028,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d2a0) = 0

1 mmap2(NULL,73920,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f7b4000

1 mprotect(0x3f7b6000,61440,PROT_NONE) = 0

1 mmap2(0x3f7c5000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f7c5000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libglib-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3d4,512) = 512

1 prctl(46,1072813320,1072813012,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d290) = 0

1 mmap2(NULL,1257552,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f680000

1 mprotect(0x3f7a1000,61440,PROT_NONE) = 0

1 mmap2(0x3f7b0000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x120) = 0x3f7b0000

1 mmap2(0x3f7b3000,80,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f7b3000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libsystemd.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3c4,512) = 512

1 prctl(46,1072813304,1072812996,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d280) = 0

1 mmap2(NULL,814232,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f5b9000

1 mprotect(0x3f66c000,61440,PROT_NONE) = 0

1 mmap2(0x3f67b000,20480,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0xb2) = 0x3f67b000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libjsoncgi.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3b4,512) = 512

1 prctl(46,1072813256,1072812980,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d270) = 0

1 mmap2(NULL,94704,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f5a1000

1 mprotect(0x3f5a8000,61440,PROT_NONE) = 0

1 mmap2(0x3f5b7000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3f5b7000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libjansson.so.4",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3a4,512) = 512

1 prctl(46,1072813240,1072812964,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d260) = 0

1 mmap2(NULL,119392,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f583000

1 mprotect(0x3f590000,61440,PROT_NONE) = 0

1 mmap2(0x3f59f000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0xc) = 0x3f59f000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libstdc++.so.6",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d394,512) = 512

1 prctl(46,1072813256,1072812948,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d250) = 0

1 mmap2(NULL,1706432,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f3e2000

1 mprotect(0x3f563000,65536,PROT_NONE) = 0

1 mmap2(0x3f573000,57344,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x181) = 0x3f573000

1 mmap2(0x3f581000,6592,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f581000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libgcc_s.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d384,512) = 512

1 prctl(46,1072813208,1072812932,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d240) = 0

1 mmap2(NULL,243584,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f3a6000

1 mprotect(0x3f3d2000,61440,PROT_NONE) = 0

1 mmap2(0x3f3e1000,4096,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x2b) = 0x3f3e1000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libc.so.6",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d374,512) = 512

1 prctl(46,1072813352,1072812916,512,1065377792,0) = 0

1 _llseek(3,0,760,0x3ff1d148,SEEK_SET) = 0

1 read(3,0x3ff1d178,32) = 32

1 fstat64(3,0x3ff1d230) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f3a4000

1 mmap2(NULL,1593152,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f21f000

1 mprotect(0x3f38c000,61440,PROT_NONE) = 0

1 mmap2(0x3f39b000,28672,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x16c) = 0x3f39b000

1 mmap2(0x3f3a2000,8000,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f3a2000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpcre.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d2b4,512) = 512

1 prctl(46,1072813000,1072812724,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d170) = 0

1 mmap2(NULL,545216,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f199000

1 mprotect(0x3f20e000,61440,PROT_NONE) = 0

1 mmap2(0x3f21d000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x74) = 0x3f21d000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpthread.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d2a4,512) = 512

1 prctl(46,1072813112,1072812708,512,1065377792,0) = 0

1 _llseek(3,0,768,0x3ff1d070,SEEK_SET) = 0

1 read(3,0x3ff1d0a0,32) = 32

1 fstat64(3,0x3ff1d160) = 0

1 mmap2(NULL,181248,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f16c000

1 mprotect(0x3f186000,61440,PROT_NONE) = 0

1 mmap2(0x3f195000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x19) = 0x3f195000

1 mmap2(0x3f197000,5120,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f197000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/src/basic/tls/librt.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d1e4,512) = 512

1 prctl(46,1072812856,1072812516,512,1065377792,0) = 0

1 _llseek(3,0,704,0x3ff1cfa8,SEEK_SET) = 0

1 read(3,0x3ff1cfd8,32) = 32

1 fstat64(3,0x3ff1d0a0) = 0

1 mmap2(NULL,94928,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f154000

1 mprotect(0x3f15b000,61440,PROT_NONE) = 0

1 mmap2(0x3f16a000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3f16a000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/src/basic/tls/libcap.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d1d4,512) = 512

1 prctl(46,1072812776,1072812500,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d090) = 0

1 mmap2(NULL,86384,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f13e000

1 mprotect(0x3f142000,65536,PROT_NONE) = 0

1 mmap2(0x3f152000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x4) = 0x3f152000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libm.so.6",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d1c4,512) = 512

1 prctl(46,1072812792,1072812484,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1cf88,SEEK_SET) = 0

1 read(3,0x3ff1cfb8,32) = 32

1 fstat64(3,0x3ff1d080) = 0

1 mmap2(NULL,1078320,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f036000

1 mprotect(0x3f12d000,61440,PROT_NONE) = 0

1 mmap2(0x3f13c000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0xf6) = 0x3f13c000

1 close(3) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f034000

1 set_thread_area(0x3f03c240) = 0

1 mprotect(0x3f39b000,16384,PROT_READ) = 0

1 mprotect(0x3f13c000,4096,PROT_READ) = 0

1 mprotect(0x3f152000,4096,PROT_READ) = 0

1 mprotect(0x3f195000,4096,PROT_READ) = 0

1 mprotect(0x3f16a000,4096,PROT_READ) = 0

1 mprotect(0x3f21d000,4096,PROT_READ) = 0

1 mprotect(0x3f573000,45056,PROT_READ) = 0

1 mprotect(0x3f59f000,4096,PROT_READ) = 0

1 mprotect(0x3f7b0000,4096,PROT_READ) = 0

1 mprotect(0x3f5b7000,4096,PROT_READ) = 0

1 mprotect(0x3f67b000,12288,PROT_READ) = 0

1 mprotect(0x3f7c5000,4096,PROT_READ) = 0

1 mprotect(0x40042000,8192,PROT_READ) = 0

1 mprotect(0x3f7fd000,4096,PROT_READ) = 0

1 set_tid_address(0x3f034e18) = 1

1 set_robust_list(0x3f034e20,12) = -1 errno=89 (Function not implemented)

1 rt_sigaction(32,0x3ff1dca0,NULL) = 0

1 rt_sigaction(33,0x3ff1dca0,NULL) = 0

1 rt_sigprocmask(SIG_UNBLOCK,0x3ff1dce8,NULL,16) = 0

1 getrlimit(3,0x3ff1dd70) = 0

1 brk(NULL) = 0x400448c0

1 brk(0x400698c0) = 0x400698c0

1 brk(0x4006a000) = 0x4006a000

1 gettimeofday(0x3ff1dca8,NULL) = 0 ({tv_sec = 1689943234,tv_usec = 25903},NULL)

1 prctl(4,0,1074056400,13,1060797968,0) = 0

1 rt_sigaction(SIGPIPE,0x3ff1dc58,NULL) = 0

1 time(0,1072815148,1,0,0,0) = 1689943234

1 openat(AT_FDCWD,"/etc/localtime",O_RDONLY|O_CLOEXEC) = 3

1 fstat64(3,0x3ff1d9f8) = 0

1 fstat64(3,0x3ff1d898) = 0

1 read(3,0x4004f018,4096) = 148

1 _llseek(3,4294967295,4294967290,0x3ff1d8a8,SEEK_CUR) = 0

1 read(3,0x4004f018,4096) = 6

1 close(3) = 0

1 socket(PF_UNIX,SOCK_DGRAM|SOCK_CLOEXEC,IPPROTO_IP) = 3

1 connect(3,0x3f3a24e0,110) = -1 errno=2 (No such file or directory)

1 close(3) = 0

1 exit_group(1)

[*] Identification of missing filesytem areas.

[*] Found missing area: /etc/ld.so.cache

[*] Trying to identify this missing file: ld.so.cache

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/etc/ld.so.cache

-----------------------------------------------------------------