EMBA firmware report

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./usr/html/axis-cgi/network_settings.cgi to identify missing areas

[*] Emulating binary name: network_settings.cgi in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract (1/2)

[*] Using CPU config:

--- SIGILL {si_signo=SIGILL, si_code=SI_KERNEL, si_pid=0, si_uid=0} ---

qemu: uncaught target signal 4 (Illegal instruction) - core dumped

[*] Identification of missing filesytem areas.

[*] No missing areas found.

-----------------------------------------------------------------

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./html/axis-cgi/network_settings.cgi to identify missing areas

[*] Emulating binary name: network_settings.cgi in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr (2/2)

[*] Using CPU config: 24KEc

1 brk(NULL) = 0x4001b270

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f7c7000

1 uname(0x3ff1d5f0) = 0

1 access("/etc/ld.so.preload",R_OK) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/etc/ld.so.cache",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/tls/libjsoncgi.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d384,512) = 512

1 prctl(46,1072813208,1072812932,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d240) = 0

1 mmap2(NULL,94704,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f7af000

1 mprotect(0x3f7b6000,61440,PROT_NONE) = 0

1 mmap2(0x3f7c5000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3f7c5000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libaxlog.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d374,512) = 512

1 prctl(46,1072813192,1072812916,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d230) = 0

1 mmap2(NULL,73920,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f79c000

1 mprotect(0x3f79e000,61440,PROT_NONE) = 0

1 mmap2(0x3f7ad000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f7ad000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libjansson.so.4",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d364,512) = 512

1 prctl(46,1072813176,1072812900,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d220) = 0

1 mmap2(NULL,119392,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f77e000

1 mprotect(0x3f78b000,61440,PROT_NONE) = 0

1 mmap2(0x3f79a000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0xc) = 0x3f79a000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libnet.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d354,512) = 512

1 prctl(46,1072813160,1072812884,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d210) = 0

1 mmap2(NULL,131616,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f75d000

1 mprotect(0x3f76d000,61440,PROT_NONE) = 0

1 mmap2(0x3f77c000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0xf) = 0x3f77c000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libglib-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d344,512) = 512

1 prctl(46,1072813176,1072812868,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d200) = 0

1 mmap2(NULL,1257552,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f629000

1 mprotect(0x3f74a000,61440,PROT_NONE) = 0

1 mmap2(0x3f759000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x120) = 0x3f759000

1 mmap2(0x3f75c000,80,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f75c000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libc.so.6",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d334,512) = 512

1 prctl(46,1072813288,1072812852,512,1065377792,0) = 0

1 _llseek(3,0,760,0x3ff1d108,SEEK_SET) = 0

1 read(3,0x3ff1d138,32) = 32

1 fstat64(3,0x3ff1d1f0) = 0

1 mmap2(NULL,1593152,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f4a4000

1 mprotect(0x3f611000,61440,PROT_NONE) = 0

1 mmap2(0x3f620000,28672,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x16c) = 0x3f620000

1 mmap2(0x3f627000,8000,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f627000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libgio-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d274,512) = 512

1 prctl(46,1072812968,1072812660,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d130) = 0

1 mmap2(NULL,1990784,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f2bd000

1 mprotect(0x3f48d000,61440,PROT_NONE) = 0

1 mmap2(0x3f49c000,24576,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1cf) = 0x3f49c000

1 mmap2(0x3f4a2000,4224,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f4a2000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libgobject-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d264,512) = 512

1 prctl(46,1072812920,1072812644,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d120) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f2bb000

1 mmap2(NULL,446160,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f24e000

1 mprotect(0x3f2a9000,65536,PROT_NONE) = 0

1 mmap2(0x3f2b9000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x5b) = 0x3f2b9000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpcre.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d254,512) = 512

1 prctl(46,1072812904,1072812628,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d110) = 0

1 mmap2(NULL,545216,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f1c8000

1 mprotect(0x3f23d000,61440,PROT_NONE) = 0

1 mmap2(0x3f24c000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x74) = 0x3f24c000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpthread.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d244,512) = 512

1 prctl(46,1072813016,1072812612,512,1065377792,0) = 0

1 _llseek(3,0,768,0x3ff1d010,SEEK_SET) = 0

1 read(3,0x3ff1d040,32) = 32

1 fstat64(3,0x3ff1d100) = 0

1 mmap2(NULL,181248,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f19b000

1 mprotect(0x3f1b5000,61440,PROT_NONE) = 0

1 mmap2(0x3f1c4000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x19) = 0x3f1c4000

1 mmap2(0x3f1c6000,5120,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f1c6000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libgmodule-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d184,512) = 512

1 prctl(46,1072812696,1072812420,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d040) = 0

1 mmap2(NULL,78096,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f187000

1 mprotect(0x3f18a000,61440,PROT_NONE) = 0

1 mmap2(0x3f199000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x2) = 0x3f199000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libz.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d174,512) = 512

1 prctl(46,1072812712,1072812404,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d030) = 0

1 mmap2(NULL,155984,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f160000

1 mprotect(0x3f175000,65536,PROT_NONE) = 0

1 mmap2(0x3f185000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x15) = 0x3f185000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libresolv.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d164,512) = 512

1 prctl(46,1072812696,1072812388,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1cf28,SEEK_SET) = 0

1 read(3,0x3ff1cf58,32) = 32

1 fstat64(3,0x3ff1d020) = 0

1 mmap2(NULL,149696,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f13b000

1 mprotect(0x3f14d000,61440,PROT_NONE) = 0

1 mmap2(0x3f15c000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x11) = 0x3f15c000

1 mmap2(0x3f15e000,6336,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f15e000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libffi.so.7",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d154,512) = 512

1 prctl(46,1072812680,1072812372,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d010) = 0

1 mmap2(NULL,95072,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f123000

1 mprotect(0x3f12a000,61440,PROT_NONE) = 0

1 mmap2(0x3f139000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3f139000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/../glib/tls/libdl.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d144,512) = 512

1 prctl(46,1072812664,1072812356,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1cf00,SEEK_SET) = 0

1 read(3,0x3ff1cf30,32) = 32

1 fstat64(3,0x3ff1d000) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f121000

1 mmap2(NULL,73968,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f10e000

1 mprotect(0x3f110000,61440,PROT_NONE) = 0

1 mmap2(0x3f11f000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f11f000

1 close(3) = 0

1 set_thread_area(0x3f129830) = 0

1 mprotect(0x3f620000,16384,PROT_READ) = 0

1 mprotect(0x3f11f000,4096,PROT_READ) = 0

1 mprotect(0x3f139000,4096,PROT_READ) = 0

1 mprotect(0x3f15c000,4096,PROT_READ) = 0

1 mprotect(0x3f185000,4096,PROT_READ) = 0

1 mprotect(0x3f1c4000,4096,PROT_READ) = 0

1 mprotect(0x3f24c000,4096,PROT_READ) = 0

1 mprotect(0x3f759000,4096,PROT_READ) = 0

1 mprotect(0x3f199000,4096,PROT_READ) = 0

1 mprotect(0x3f2b9000,4096,PROT_READ) = 0

1 mprotect(0x3f49c000,12288,PROT_READ) = 0

1 mprotect(0x3f77c000,4096,PROT_READ) = 0

1 mprotect(0x3f79a000,4096,PROT_READ) = 0

1 mprotect(0x3f7ad000,4096,PROT_READ) = 0

1 mprotect(0x3f7c5000,4096,PROT_READ) = 0

1 mprotect(0x4001a000,4096,PROT_READ) = 0

1 mprotect(0x3f7fd000,4096,PROT_READ) = 0

1 set_tid_address(0x3f122408) = 1

1 set_robust_list(0x3f122410,12) = -1 errno=89 (Function not implemented)

1 rt_sigaction(32,0x3ff1dc40,NULL) = 0

1 rt_sigaction(33,0x3ff1dc40,NULL) = 0

1 rt_sigprocmask(SIG_UNBLOCK,0x3ff1dc88,NULL,16) = 0

1 getrlimit(3,0x3ff1dd10) = 0

1 brk(NULL) = 0x4001b270

1 brk(0x4003c270) = 0x4003c270

1 brk(0x4003d000) = 0x4003d000

1 gettimeofday(0x3ff1dc48,NULL) = 0 ({tv_sec = 1689943248,tv_usec = 444059},NULL)

1 syscall(4238,1064681164,129,2147483647,0,0)1 futex(0x3f75becc,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,NULL,0) = 0

= 0

1 syscall(4238,1064681164,129,2147483647,0,1059826176)1 futex(0x3f75becc,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f2baa00,1059826176) = 0

= 0

1 prctl(4,0,1073880016,13,1064706976,0) = 0

1 rt_sigaction(SIGPIPE,0x3ff1dbd0,NULL) = 0

1 time(0,1072815012,1,0,0,0) = 1689943248

1 openat(AT_FDCWD,"/etc/localtime",O_RDONLY|O_CLOEXEC) = 3

1 fstat64(3,0x3ff1d970) = 0

1 fstat64(3,0x3ff1d810) = 0

1 read(3,0x40023ee8,4096) = 148

1 _llseek(3,4294967295,4294967290,0x3ff1d820,SEEK_CUR) = 0

1 read(3,0x40023ee8,4096) = 6

1 close(3) = 0

1 socket(PF_UNIX,SOCK_DGRAM|SOCK_CLOEXEC,IPPROTO_IP) = 3

1 connect(3,0x3f6274e0,110) = -1 errno=2 (No such file or directory)

1 close(3) = 0

1 exit_group(1)

[*] Identification of missing filesytem areas.

[*] Found missing area: /etc/ld.so.cache

[*] Trying to identify this missing file: ld.so.cache

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/etc/ld.so.cache

-----------------------------------------------------------------