EMBA firmware report

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./usr/bin/ctod to identify missing areas

[*] Emulating binary name: ctod in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract (1/2)

[*] Using CPU config:

--- SIGILL {si_signo=SIGILL, si_code=SI_KERNEL, si_pid=0, si_uid=0} ---

qemu: uncaught target signal 4 (Illegal instruction) - core dumped

[*] Identification of missing filesytem areas.

[*] No missing areas found.

-----------------------------------------------------------------

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./bin/ctod to identify missing areas

[*] Emulating binary name: ctod in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr (2/2)

[*] Using CPU config: 24KEc

1 brk(NULL) = 0x400151e0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f7c7000

1 uname(0x3ff1d6d0) = 0

1 access("/etc/ld.so.preload",R_OK) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/etc/ld.so.cache",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/tls/libglib-utils.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d464,512) = 512

1 prctl(46,1072813432,1072813156,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d320) = 0

1 mmap2(NULL,106016,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f7ad000

1 mprotect(0x3f7b2000,61440,PROT_NONE) = 0

1 mmap2(0x3f7c1000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x4) = 0x3f7c1000

1 mmap2(0x3f7c3000,15904,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f7c3000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libgio-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d454,512) = 512

1 prctl(46,1072813448,1072813140,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d310) = 0

1 mmap2(NULL,1990784,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f5c6000

1 mprotect(0x3f796000,61440,PROT_NONE) = 0

1 mmap2(0x3f7a5000,24576,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1cf) = 0x3f7a5000

1 mmap2(0x3f7ab000,4224,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f7ab000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libgobject-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d444,512) = 512

1 prctl(46,1072813400,1072813124,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d300) = 0

1 mmap2(NULL,446160,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f559000

1 mprotect(0x3f5b4000,65536,PROT_NONE) = 0

1 mmap2(0x3f5c4000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x5b) = 0x3f5c4000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libaxlog.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d434,512) = 512

1 prctl(46,1072813384,1072813108,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d2f0) = 0

1 mmap2(NULL,73920,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f546000

1 mprotect(0x3f548000,61440,PROT_NONE) = 0

1 mmap2(0x3f557000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f557000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libglib-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d424,512) = 512

1 prctl(46,1072813400,1072813092,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d2e0) = 0

1 mmap2(NULL,1257552,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f412000

1 mprotect(0x3f533000,61440,PROT_NONE) = 0

1 mmap2(0x3f542000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x120) = 0x3f542000

1 mmap2(0x3f545000,80,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f545000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libbootblock.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d414,512) = 512

1 prctl(46,1072813352,1072813076,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d2d0) = 0

1 mmap2(NULL,78064,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f3fe000

1 mprotect(0x3f401000,61440,PROT_NONE) = 0

1 mmap2(0x3f410000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x2) = 0x3f410000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libc.so.6",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d404,512) = 512

1 prctl(46,1072813496,1072813060,512,1065377792,0) = 0

1 _llseek(3,0,760,0x3ff1d1d8,SEEK_SET) = 0

1 read(3,0x3ff1d208,32) = 32

1 fstat64(3,0x3ff1d2c0) = 0

1 mmap2(NULL,1593152,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f279000

1 mprotect(0x3f3e6000,61440,PROT_NONE) = 0

1 mmap2(0x3f3f5000,28672,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x16c) = 0x3f3f5000

1 mmap2(0x3f3fc000,8000,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f3fc000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpthread.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d344,512) = 512

1 prctl(46,1072813272,1072812868,512,1065377792,0) = 0

1 _llseek(3,0,768,0x3ff1d110,SEEK_SET) = 0

1 read(3,0x3ff1d140,32) = 32

1 fstat64(3,0x3ff1d200) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f277000

1 mmap2(NULL,181248,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f24a000

1 mprotect(0x3f264000,61440,PROT_NONE) = 0

1 mmap2(0x3f273000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x19) = 0x3f273000

1 mmap2(0x3f275000,5120,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f275000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libgmodule-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d284,512) = 512

1 prctl(46,1072812952,1072812676,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d140) = 0

1 mmap2(NULL,78096,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f236000

1 mprotect(0x3f239000,61440,PROT_NONE) = 0

1 mmap2(0x3f248000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x2) = 0x3f248000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libz.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d274,512) = 512

1 prctl(46,1072812968,1072812660,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d130) = 0

1 mmap2(NULL,155984,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f20f000

1 mprotect(0x3f224000,65536,PROT_NONE) = 0

1 mmap2(0x3f234000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x15) = 0x3f234000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libresolv.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d264,512) = 512

1 prctl(46,1072812952,1072812644,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1d028,SEEK_SET) = 0

1 read(3,0x3ff1d058,32) = 32

1 fstat64(3,0x3ff1d120) = 0

1 mmap2(NULL,149696,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f1ea000

1 mprotect(0x3f1fc000,61440,PROT_NONE) = 0

1 mmap2(0x3f20b000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x11) = 0x3f20b000

1 mmap2(0x3f20d000,6336,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f20d000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libffi.so.7",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d254,512) = 512

1 prctl(46,1072812936,1072812628,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d110) = 0

1 mmap2(NULL,95072,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f1d2000

1 mprotect(0x3f1d9000,61440,PROT_NONE) = 0

1 mmap2(0x3f1e8000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3f1e8000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpcre.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d244,512) = 512

1 prctl(46,1072812888,1072812612,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d100) = 0

1 mmap2(NULL,545216,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f14c000

1 mprotect(0x3f1c1000,61440,PROT_NONE) = 0

1 mmap2(0x3f1d0000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x74) = 0x3f1d0000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/../glib/tls/libdl.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d234,512) = 512

1 prctl(46,1072812904,1072812596,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1cff0,SEEK_SET) = 0

1 read(3,0x3ff1d020,32) = 32

1 fstat64(3,0x3ff1d0f0) = 0

1 mmap2(NULL,73968,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f139000

1 mprotect(0x3f13b000,61440,PROT_NONE) = 0

1 mmap2(0x3f14a000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f14a000

1 close(3) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f137000

1 set_thread_area(0x3f13f160) = 0

1 mprotect(0x3f3f5000,16384,PROT_READ) = 0

1 mprotect(0x3f14a000,4096,PROT_READ) = 0

1 mprotect(0x3f273000,4096,PROT_READ) = 0

1 mprotect(0x3f1d0000,4096,PROT_READ) = 0

1 mprotect(0x3f1e8000,4096,PROT_READ) = 0

1 mprotect(0x3f20b000,4096,PROT_READ) = 0

1 mprotect(0x3f234000,4096,PROT_READ) = 0

1 mprotect(0x3f542000,4096,PROT_READ) = 0

1 mprotect(0x3f248000,4096,PROT_READ) = 0

1 mprotect(0x3f410000,4096,PROT_READ) = 0

1 mprotect(0x3f557000,4096,PROT_READ) = 0

1 mprotect(0x3f5c4000,4096,PROT_READ) = 0

1 mprotect(0x3f7a5000,12288,PROT_READ) = 0

1 mprotect(0x3f7c1000,4096,PROT_READ) = 0

1 mprotect(0x40014000,4096,PROT_READ) = 0

1 mprotect(0x3f7fd000,4096,PROT_READ) = 0

1 set_tid_address(0x3f137d38) = 1

1 set_robust_list(0x3f137d40,12) = -1 errno=89 (Function not implemented)

1 rt_sigaction(32,0x3ff1dd20,NULL) = 0

1 rt_sigaction(33,0x3ff1dd20,NULL) = 0

1 rt_sigprocmask(SIG_UNBLOCK,0x3ff1dd68,NULL,16) = 0

1 getrlimit(3,0x3ff1ddf0) = 0

1 brk(NULL) = 0x400151e0

1 brk(0x400361e0) = 0x400361e0

1 brk(0x40037000) = 0x40037000

1 gettimeofday(0x3ff1dd28,NULL) = 0 ({tv_sec = 1689943076,tv_usec = 200245},NULL)

1 syscall(4238,1062489804,129,2147483647,0,0)1 futex(0x3f544ecc,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,NULL,0) = 0

= 0

1 syscall(4238,1062489804,129,2147483647,0,1063016960)1 futex(0x3f544ecc,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f5c5a00,1063016960) = 0

= 0

1 openat(AT_FDCWD,"/etc/nsswitch.conf",O_RDONLY|O_CLOEXEC) = 3

1 fstat64(3,0x3ff1da98) = 0

1 read(3,0x4001bca0,4096) = 482

1 read(3,0x4001bca0,4096) = 0

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libnss_compat.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d59c,512) = 512

1 prctl(46,1072813776,1072813468,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1d350,SEEK_SET) = 0

1 read(3,0x3ff1d380,32) = 32

1 fstat64(3,0x3ff1d458) = 0

1 mmap2(NULL,100016,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f11e000

1 mprotect(0x3f126000,61440,PROT_NONE) = 0

1 mmap2(0x3f135000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x7) = 0x3f135000

1 close(3) = 0

1 mprotect(0x3f135000,4096,PROT_READ) = 0

1 openat(AT_FDCWD,"/lib/tls/libnss_nis.so.2",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/libnss_nis.so.2",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 stat64("/lib",0x3ff1d3b0) = 0

1 openat(AT_FDCWD,"/usr/lib/tls/libnss_nis.so.2",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 stat64("/usr/lib/tls",0x3ff1d3b0) = 0

1 openat(AT_FDCWD,"/usr/lib/libnss_nis.so.2",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 stat64("/usr/lib",0x3ff1d3b0) = 0

1 openat(AT_FDCWD,"/etc/passwd",O_RDONLY|O_CLOEXEC) = 3

1 _llseek(3,0,0,0x3ff1db60,SEEK_CUR) = 0

1 fstat64(3,0x3ff1da30) = 0

1 mmap2(NULL,29,PROT_READ,MAP_SHARED,3,0) = 0x3f11d000

1 _llseek(3,0,29,0x3ff1d9f8,SEEK_SET) = 0

1 fstat64(3,0x3ff1da28) = 0

1 munmap(0x3f11d000,29) = 0

1 close(3) = 0

1 time(0,1072815340,1,0,0,0) = 1689943076

1 openat(AT_FDCWD,"/etc/localtime",O_RDONLY|O_CLOEXEC) = 3

1 fstat64(3,0x3ff1dab8) = 0

1 fstat64(3,0x3ff1d958) = 0

1 read(3,0x4001f080,4096) = 148

1 _llseek(3,4294967295,4294967290,0x3ff1d968,SEEK_CUR) = 0

1 read(3,0x4001f080,4096) = 6

1 close(3) = 0

1 socket(PF_UNIX,SOCK_DGRAM|SOCK_CLOEXEC,IPPROTO_IP) = 3

1 connect(3,0x3f3fc4e0,110) = -1 errno=2 (No such file or directory)

1 close(3) = 0

1 time(0,1072815340,1,0,0,0) = 1689943076

1 socket(PF_UNIX,SOCK_DGRAM|SOCK_CLOEXEC,IPPROTO_IP) = 3

1 connect(3,0x3f3fc4e0,110) = -1 errno=2 (No such file or directory)

1 close(3) = 0

1 exit_group(0)

[*] Identification of missing filesytem areas.

[*] Found missing area: /etc/ld.so.cache

[*] Trying to identify this missing file: ld.so.cache

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/etc/ld.so.cache

[*] Found missing area: /lib/libnss_nis.so.2

[*] Trying to identify this missing file: libnss_nis.so.2

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/libnss_nis.so.2

[*] Found missing area: /lib/tls/libnss_nis.so.2

[*] Trying to identify this missing file: libnss_nis.so.2

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/tls/libnss_nis.so.2

[*] Found missing area: /usr/lib/libnss_nis.so.2

[*] Trying to identify this missing file: libnss_nis.so.2

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/usr/lib/libnss_nis.so.2

[*] Found missing area: /usr/lib/tls/libnss_nis.so.2

[*] Trying to identify this missing file: libnss_nis.so.2

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/usr/lib/tls/libnss_nis.so.2

-----------------------------------------------------------------