EMBA firmware report

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./usr/html/axis-cgi/clientnotes/getkeys.cgi to identify missing areas

[*] Emulating binary name: getkeys.cgi in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract (1/2)

[*] Using CPU config:

--- SIGILL {si_signo=SIGILL, si_code=SI_KERNEL, si_pid=0, si_uid=0} ---

qemu: uncaught target signal 4 (Illegal instruction) - core dumped

[*] Identification of missing filesytem areas.

[*] No missing areas found.

-----------------------------------------------------------------

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./html/axis-cgi/clientnotes/getkeys.cgi to identify missing areas

[*] Emulating binary name: getkeys.cgi in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr (2/2)

[*] Using CPU config: 24KEc

1 brk(NULL) = 0x40012100

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f7c7000

1 uname(0x3ff1d620) = 0

1 access("/etc/ld.so.preload",R_OK) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/etc/ld.so.cache",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/tls/libglib-utils.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3b4,512) = 512

1 prctl(46,1072813256,1072812980,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d270) = 0

1 mmap2(NULL,106016,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f7ad000

1 mprotect(0x3f7b2000,61440,PROT_NONE) = 0

1 mmap2(0x3f7c1000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x4) = 0x3f7c1000

1 mmap2(0x3f7c3000,15904,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f7c3000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libaxlog.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3a4,512) = 512

1 prctl(46,1072813240,1072812964,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d260) = 0

1 mmap2(NULL,73920,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f79a000

1 mprotect(0x3f79c000,61440,PROT_NONE) = 0

1 mmap2(0x3f7ab000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f7ab000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libgthread-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d394,512) = 512

1 prctl(46,1072813224,1072812948,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d250) = 0

1 mmap2(NULL,69712,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f788000

1 mprotect(0x3f789000,61440,PROT_NONE) = 0

1 mmap2(0x3f798000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0) = 0x3f798000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libglib-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d384,512) = 512

1 prctl(46,1072813240,1072812932,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d240) = 0

1 mmap2(NULL,1257552,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f654000

1 mprotect(0x3f775000,61440,PROT_NONE) = 0

1 mmap2(0x3f784000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x120) = 0x3f784000

1 mmap2(0x3f787000,80,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f787000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libcgihelper.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d374,512) = 512

1 prctl(46,1072813192,1072812916,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d230) = 0

1 mmap2(NULL,78032,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f640000

1 mprotect(0x3f643000,61440,PROT_NONE) = 0

1 mmap2(0x3f652000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x2) = 0x3f652000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libjansson.so.4",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d364,512) = 512

1 prctl(46,1072813176,1072812900,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d220) = 0

1 mmap2(NULL,119392,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f622000

1 mprotect(0x3f62f000,61440,PROT_NONE) = 0

1 mmap2(0x3f63e000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0xc) = 0x3f63e000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpthread.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d354,512) = 512

1 prctl(46,1072813288,1072812884,512,1065377792,0) = 0

1 _llseek(3,0,768,0x3ff1d120,SEEK_SET) = 0

1 read(3,0x3ff1d150,32) = 32

1 fstat64(3,0x3ff1d210) = 0

1 mmap2(NULL,181248,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f5f5000

1 mprotect(0x3f60f000,61440,PROT_NONE) = 0

1 mmap2(0x3f61e000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x19) = 0x3f61e000

1 mmap2(0x3f620000,5120,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f620000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libc.so.6",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d344,512) = 512

1 prctl(46,1072813304,1072812868,512,1065377792,0) = 0

1 _llseek(3,0,760,0x3ff1d118,SEEK_SET) = 0

1 read(3,0x3ff1d148,32) = 32

1 fstat64(3,0x3ff1d200) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f5f3000

1 mmap2(NULL,1593152,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f46e000

1 mprotect(0x3f5db000,61440,PROT_NONE) = 0

1 mmap2(0x3f5ea000,28672,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x16c) = 0x3f5ea000

1 mmap2(0x3f5f1000,8000,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f5f1000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpcre.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d284,512) = 512

1 prctl(46,1072812952,1072812676,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d140) = 0

1 mmap2(NULL,545216,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f3e8000

1 mprotect(0x3f45d000,61440,PROT_NONE) = 0

1 mmap2(0x3f46c000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x74) = 0x3f46c000

1 close(3) = 0

1 set_thread_area(0x3f5fb700) = 0

1 mprotect(0x3f5ea000,16384,PROT_READ) = 0

1 mprotect(0x3f61e000,4096,PROT_READ) = 0

1 mprotect(0x3f46c000,4096,PROT_READ) = 0

1 mprotect(0x3f63e000,4096,PROT_READ) = 0

1 mprotect(0x3f784000,4096,PROT_READ) = 0

1 mprotect(0x3f652000,4096,PROT_READ) = 0

1 mprotect(0x3f798000,4096,PROT_READ) = 0

1 mprotect(0x3f7ab000,4096,PROT_READ) = 0

1 mprotect(0x3f7c1000,4096,PROT_READ) = 0

1 mprotect(0x40011000,4096,PROT_READ) = 0

1 mprotect(0x3f7fd000,4096,PROT_READ) = 0

1 set_tid_address(0x3f5f42d8) = 1

1 set_robust_list(0x3f5f42e0,12) = -1 errno=89 (Function not implemented)

1 rt_sigaction(32,0x3ff1dc70,NULL) = 0

1 rt_sigaction(33,0x3ff1dc70,NULL) = 0

1 rt_sigprocmask(SIG_UNBLOCK,0x3ff1dcb8,NULL,16) = 0

1 getrlimit(3,0x3ff1dd40) = 0

1 brk(NULL) = 0x40012100

1 brk(0x40033100) = 0x40033100

1 brk(0x40034000) = 0x40034000

1 gettimeofday(0x3ff1dc78,NULL) = 0 ({tv_sec = 1689943256,tv_usec = 272043},NULL)

1 fstat64(1,0x3ff1d6b0) = 0

1 write(1,0x40015808,32)Content-Type: application/json

 = 32

1 write(1,0x40015808,20)Content-Length: 13

 = 20

1 write(1,0x40015808,2)

= 2

1 write(1,0x40015808,13){"Status": 1} = 13

1 exit_group(0)

[*] Identification of missing filesytem areas.

[*] Found missing area: /etc/ld.so.cache

[*] Trying to identify this missing file: ld.so.cache

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/etc/ld.so.cache

-----------------------------------------------------------------