EMBA firmware report

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./usr/bin/htdigest to identify missing areas

[*] Emulating binary name: htdigest in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract (1/2)

[*] Using CPU config:

--- SIGILL {si_signo=SIGILL, si_code=SI_KERNEL, si_pid=0, si_uid=0} ---

qemu: uncaught target signal 4 (Illegal instruction) - core dumped

[*] Identification of missing filesytem areas.

[*] No missing areas found.

-----------------------------------------------------------------

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./bin/htdigest to identify missing areas

[*] Emulating binary name: htdigest in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr (2/2)

[*] Using CPU config: 24KEc

1 brk(NULL) = 0x40012120

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f7c7000

1 uname(0x3ff1d6b0) = 0

1 access("/etc/ld.so.preload",R_OK) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/etc/ld.so.cache",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/tls/libaprutil-1.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d444,512) = 512

1 prctl(46,1072813400,1072813124,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d300) = 0

1 mmap2(NULL,239312,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f78c000

1 mprotect(0x3f7b5000,65536,PROT_NONE) = 0

1 mmap2(0x3f7c5000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x29) = 0x3f7c5000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libapr-1.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d434,512) = 512

1 prctl(46,1072813416,1072813108,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d2f0) = 0

1 mmap2(NULL,301280,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f742000

1 mprotect(0x3f77b000,61440,PROT_NONE) = 0

1 mmap2(0x3f78a000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x38) = 0x3f78a000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libc.so.6",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d424,512) = 512

1 prctl(46,1072813528,1072813092,512,1065377792,0) = 0

1 _llseek(3,0,760,0x3ff1d1f8,SEEK_SET) = 0

1 read(3,0x3ff1d228,32) = 32

1 fstat64(3,0x3ff1d2e0) = 0

1 mmap2(NULL,1593152,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f5bd000

1 mprotect(0x3f72a000,61440,PROT_NONE) = 0

1 mmap2(0x3f739000,28672,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x16c) = 0x3f739000

1 mmap2(0x3f740000,8000,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f740000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libexpat.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d354,512) = 512

1 prctl(46,1072813192,1072812884,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d210) = 0

1 mmap2(NULL,307440,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f571000

1 mprotect(0x3f5ab000,61440,PROT_NONE) = 0

1 mmap2(0x3f5ba000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x39) = 0x3f5ba000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libuuid.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d344,512) = 512

1 prctl(46,1072813208,1072812868,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d200) = 0

1 mmap2(NULL,94560,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f559000

1 mprotect(0x3f560000,61440,PROT_NONE) = 0

1 mmap2(0x3f56f000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3f56f000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/librt.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d334,512) = 512

1 prctl(46,1072813192,1072812852,512,1065377792,0) = 0

1 _llseek(3,0,704,0x3ff1d108,SEEK_SET) = 0

1 read(3,0x3ff1d138,32) = 32

1 fstat64(3,0x3ff1d1f0) = 0

1 mmap2(NULL,94928,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f541000

1 mprotect(0x3f548000,61440,PROT_NONE) = 0

1 mmap2(0x3f557000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3f557000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libcrypt.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d324,512) = 512

1 prctl(46,1072813144,1072812836,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1d0f0,SEEK_SET) = 0

1 read(3,0x3ff1d120,32) = 32

1 fstat64(3,0x3ff1d1e0) = 0

1 mmap2(NULL,262716,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f500000

1 mprotect(0x3f509000,61440,PROT_NONE) = 0

1 mmap2(0x3f518000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x8) = 0x3f518000

1 mmap2(0x3f51a000,156220,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f51a000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpthread.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d314,512) = 512

1 prctl(46,1072813224,1072812820,512,1065377792,0) = 0

1 _llseek(3,0,768,0x3ff1d0e0,SEEK_SET) = 0

1 read(3,0x3ff1d110,32) = 32

1 fstat64(3,0x3ff1d1d0) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f4fe000

1 mmap2(NULL,181248,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f4d1000

1 mprotect(0x3f4eb000,61440,PROT_NONE) = 0

1 mmap2(0x3f4fa000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x19) = 0x3f4fa000

1 mmap2(0x3f4fc000,5120,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f4fc000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libdl.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d304,512) = 512

1 prctl(46,1072813112,1072812804,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1d0d8,SEEK_SET) = 0

1 read(3,0x3ff1d108,32) = 32

1 fstat64(3,0x3ff1d1c0) = 0

1 mmap2(NULL,73968,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f4be000

1 mprotect(0x3f4c0000,61440,PROT_NONE) = 0

1 mmap2(0x3f4cf000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f4cf000

1 close(3) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f4bc000

1 set_thread_area(0x3f4c34a0) = 0

1 mprotect(0x3f739000,16384,PROT_READ) = 0

1 mprotect(0x3f4cf000,4096,PROT_READ) = 0

1 mprotect(0x3f4fa000,4096,PROT_READ) = 0

1 mprotect(0x3f518000,4096,PROT_READ) = 0

1 mprotect(0x3f557000,4096,PROT_READ) = 0

1 mprotect(0x3f56f000,4096,PROT_READ) = 0

1 mprotect(0x3f5ba000,8192,PROT_READ) = 0

1 mprotect(0x3f78a000,4096,PROT_READ) = 0

1 mprotect(0x3f7c5000,4096,PROT_READ) = 0

1 mprotect(0x40011000,4096,PROT_READ) = 0

1 mprotect(0x3f7fd000,4096,PROT_READ) = 0

1 set_tid_address(0x3f4bc078) = 1

1 set_robust_list(0x3f4bc080,12) = -1 errno=89 (Function not implemented)

1 rt_sigaction(32,0x3ff1dd00,NULL) = 0

1 rt_sigaction(33,0x3ff1dd00,NULL) = 0

1 rt_sigprocmask(SIG_UNBLOCK,0x3ff1dd48,NULL,16) = 0

1 getrlimit(3,0x3ff1ddd0) = 0

1 brk(NULL) = 0x40012120

1 brk(0x40033120) = 0x40033120

1 brk(0x40034000) = 0x40034000

1 rt_sigaction(SIGINT,0x3ff1d1c8,0x3ff1d1a8) = 0

1 write(2,0x400181b0,49)Usage: htdigest [-c] passwordfile realm username

 = 49

1 write(2,0x400181b0,32)The -c flag creates a new file.

 = 32

1 brk(0x40033000) = 0x40033000

1 exit_group(1)

[*] Identification of missing filesytem areas.

[*] Found missing area: /etc/ld.so.cache

[*] Trying to identify this missing file: ld.so.cache

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/etc/ld.so.cache

-----------------------------------------------------------------