EMBA firmware report

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./usr/html/axis-cgi/oak.cgi to identify missing areas

[*] Emulating binary name: oak.cgi in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract (1/2)

[*] Using CPU config:

--- SIGILL {si_signo=SIGILL, si_code=SI_KERNEL, si_pid=0, si_uid=0} ---

qemu: uncaught target signal 4 (Illegal instruction) - core dumped

[*] Identification of missing filesytem areas.

[*] No missing areas found.

-----------------------------------------------------------------

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./html/axis-cgi/oak.cgi to identify missing areas

[*] Emulating binary name: oak.cgi in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr (2/2)

[*] Using CPU config: 24KEc

1 brk(NULL) = 0x40014180

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f7c7000

1 uname(0x3ff1d680) = 0

1 access("/etc/ld.so.preload",R_OK) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/etc/ld.so.cache",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/tls/libglib-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d414,512) = 512

1 prctl(46,1072813384,1072813076,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d2d0) = 0

1 mmap2(NULL,1257552,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f693000

1 mprotect(0x3f7b4000,61440,PROT_NONE) = 0

1 mmap2(0x3f7c3000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x120) = 0x3f7c3000

1 mmap2(0x3f7c6000,80,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f7c6000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libcurl.so.4",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d404,512) = 512

1 prctl(46,1072813368,1072813060,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d2c0) = 0

1 mmap2(NULL,678656,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f5ed000

1 mprotect(0x3f67f000,65536,PROT_NONE) = 0

1 mmap2(0x3f68f000,16384,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x92) = 0x3f68f000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libcrypto.so.1.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3f4,512) = 512

1 prctl(46,1072813384,1072813044,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d2b0) = 0

1 mmap2(NULL,2304304,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f3ba000

1 mprotect(0x3f5c0000,61440,PROT_NONE) = 0

1 mmap2(0x3f5cf000,106496,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x205) = 0x3f5cf000

1 mmap2(0x3f5e9000,14640,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f5e9000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libjansson.so.4",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3e4,512) = 512

1 prctl(46,1072813304,1072813028,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d2a0) = 0

1 mmap2(NULL,119392,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f39c000

1 mprotect(0x3f3a9000,61440,PROT_NONE) = 0

1 mmap2(0x3f3b8000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0xc) = 0x3f3b8000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpolicykit_system.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3d4,512) = 512

1 prctl(46,1072813288,1072813012,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d290) = 0

1 mmap2(NULL,82064,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f387000

1 mprotect(0x3f38b000,61440,PROT_NONE) = 0

1 mmap2(0x3f39a000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x3) = 0x3f39a000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libc.so.6",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3c4,512) = 512

1 prctl(46,1072813432,1072812996,512,1065377792,0) = 0

1 _llseek(3,0,760,0x3ff1d198,SEEK_SET) = 0

1 read(3,0x3ff1d1c8,32) = 32

1 fstat64(3,0x3ff1d280) = 0

1 mmap2(NULL,1593152,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f202000

1 mprotect(0x3f36f000,61440,PROT_NONE) = 0

1 mmap2(0x3f37e000,28672,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x16c) = 0x3f37e000

1 mmap2(0x3f385000,8000,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f385000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpcre.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d304,512) = 512

1 prctl(46,1072813080,1072812804,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d1c0) = 0

1 mmap2(NULL,545216,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f17c000

1 mprotect(0x3f1f1000,61440,PROT_NONE) = 0

1 mmap2(0x3f200000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x74) = 0x3f200000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpthread.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d2f4,512) = 512

1 prctl(46,1072813192,1072812788,512,1065377792,0) = 0

1 _llseek(3,0,768,0x3ff1d0c0,SEEK_SET) = 0

1 read(3,0x3ff1d0f0,32) = 32

1 fstat64(3,0x3ff1d1b0) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f17a000

1 mmap2(NULL,181248,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f14d000

1 mprotect(0x3f167000,61440,PROT_NONE) = 0

1 mmap2(0x3f176000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x19) = 0x3f176000

1 mmap2(0x3f178000,5120,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f178000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libssh2.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d234,512) = 512

1 prctl(46,1072812872,1072812596,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d0f0) = 0

1 mmap2(NULL,316992,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f0ff000

1 mprotect(0x3f13c000,61440,PROT_NONE) = 0

1 mmap2(0x3f14b000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x3c) = 0x3f14b000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libssl.so.1.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d224,512) = 512

1 prctl(46,1072812888,1072812580,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d0e0) = 0

1 mmap2(NULL,566080,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f074000

1 mprotect(0x3f0e7000,61440,PROT_NONE) = 0

1 mmap2(0x3f0f6000,36864,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x72) = 0x3f0f6000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libz.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d214,512) = 512

1 prctl(46,1072812872,1072812564,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d0d0) = 0

1 mmap2(NULL,155984,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f04d000

1 mprotect(0x3f062000,65536,PROT_NONE) = 0

1 mmap2(0x3f072000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x15) = 0x3f072000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libdl.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d204,512) = 512

1 prctl(46,1072812856,1072812548,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1cfd8,SEEK_SET) = 0

1 read(3,0x3ff1d008,32) = 32

1 fstat64(3,0x3ff1d0c0) = 0

1 mmap2(NULL,73968,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f03a000

1 mprotect(0x3f03c000,61440,PROT_NONE) = 0

1 mmap2(0x3f04b000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f04b000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libgio-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d1f4,512) = 512

1 prctl(46,1072812840,1072812532,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d0b0) = 0

1 mmap2(NULL,1990784,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3ee53000

1 mprotect(0x3f023000,61440,PROT_NONE) = 0

1 mmap2(0x3f032000,24576,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1cf) = 0x3f032000

1 mmap2(0x3f038000,4224,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f038000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libgobject-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d1e4,512) = 512

1 prctl(46,1072812792,1072812516,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d0a0) = 0

1 mmap2(NULL,446160,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3ede6000

1 mprotect(0x3ee41000,65536,PROT_NONE) = 0

1 mmap2(0x3ee51000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x5b) = 0x3ee51000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libgmodule-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d1d4,512) = 512

1 prctl(46,1072812776,1072812500,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d090) = 0

1 mmap2(NULL,78096,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3edd2000

1 mprotect(0x3edd5000,61440,PROT_NONE) = 0

1 mmap2(0x3ede4000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x2) = 0x3ede4000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libresolv.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d1c4,512) = 512

1 prctl(46,1072812792,1072812484,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1cf88,SEEK_SET) = 0

1 read(3,0x3ff1cfb8,32) = 32

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3edd0000

1 fstat64(3,0x3ff1d080) = 0

1 mmap2(NULL,149696,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3edab000

1 mprotect(0x3edbd000,61440,PROT_NONE) = 0

1 mmap2(0x3edcc000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x11) = 0x3edcc000

1 mmap2(0x3edce000,6336,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3edce000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libffi.so.7",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d1b4,512) = 512

1 prctl(46,1072812776,1072812468,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d070) = 0

1 mmap2(NULL,95072,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3ed93000

1 mprotect(0x3ed9a000,61440,PROT_NONE) = 0

1 mmap2(0x3eda9000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3eda9000

1 close(3) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3ed91000

1 set_thread_area(0x3ed984a0) = 0

1 mprotect(0x3f37e000,16384,PROT_READ) = 0

1 mprotect(0x3eda9000,4096,PROT_READ) = 0

1 mprotect(0x3edcc000,4096,PROT_READ) = 0

1 mprotect(0x3f176000,4096,PROT_READ) = 0

1 mprotect(0x3f200000,4096,PROT_READ) = 0

1 mprotect(0x3f7c3000,4096,PROT_READ) = 0

1 mprotect(0x3f04b000,4096,PROT_READ) = 0

1 mprotect(0x3ede4000,4096,PROT_READ) = 0

1 mprotect(0x3ee51000,4096,PROT_READ) = 0

1 mprotect(0x3f072000,4096,PROT_READ) = 0

1 mprotect(0x3f032000,12288,PROT_READ) = 0

1 mprotect(0x3f5cf000,90112,PROT_READ) = 0

1 mprotect(0x3f0f6000,20480,PROT_READ) = 0

1 mprotect(0x3f14b000,4096,PROT_READ) = 0

1 mprotect(0x3f39a000,4096,PROT_READ) = 0

1 mprotect(0x3f3b8000,4096,PROT_READ) = 0

1 mprotect(0x3f68f000,4096,PROT_READ) = 0

1 mprotect(0x40013000,4096,PROT_READ) = 0

1 mprotect(0x3f7fd000,4096,PROT_READ) = 0

1 set_tid_address(0x3ed91078) = 1

1 set_robust_list(0x3ed91080,12) = -1 errno=89 (Function not implemented)

1 rt_sigaction(32,0x3ff1dcd0,NULL) = 0

1 rt_sigaction(33,0x3ff1dcd0,NULL) = 0

1 rt_sigprocmask(SIG_UNBLOCK,0x3ff1dd18,NULL,16) = 0

1 getrlimit(3,0x3ff1dda0) = 0

1 brk(NULL) = 0x40014180

1 brk(0x40035180) = 0x40035180

1 brk(0x40036000) = 0x40036000

1 gettimeofday(0x3ff1dcd8,NULL) = 0 ({tv_sec = 1689943266,tv_usec = 89266},NULL)

1 syscall(4238,1065115340,129,2147483647,0,0)1 futex(0x3f7c5ecc,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,NULL,0) = 0

= 0

1 syscall(4238,1065115340,129,2147483647,0,1055205888)1 futex(0x3f7c5ecc,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3ee52a00,1055205888) = 0

= 0

1 getpeername(2,0x3ff1db08,0x3ff1db88) = -1 errno=95 (Socket operation on non-socket)

1 syscall(4238,1065115340,129,2147483647,0,1065114756)1 futex(0x3f7c5ecc,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f7c5c84,1065114756) = 0

= 0

1 ioctl(2,TCGETS,0x3ff1dae0) = -1 errno=25 (Inappropriate ioctl for device)

1 getpid() = 1

1 gettimeofday(0x3ff1da28,NULL) = 0 ({tv_sec = 1689943266,tv_usec = 158001},NULL)

1 openat(AT_FDCWD,"/etc/localtime",O_RDONLY|O_CLOEXEC) = 3

1 fstat64(3,0x3ff1d8b0) = 0

1 fstat64(3,0x3ff1d750) = 0

1 read(3,0x4001ac80,4096) = 148

1 _llseek(3,4294967295,4294967290,0x3ff1d760,SEEK_CUR) = 0

1 read(3,0x4001ac80,4096) = 6

1 close(3) = 0

1 openat(AT_FDCWD,"lib/charset.alias",O_RDONLY|O_LARGEFILE) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/gconv/gconv-modules.cache",O_RDONLY) = 3

1 fstat64(3,0x3ff1d610) = 0

1 mmap2(NULL,26358,PROT_READ,MAP_SHARED,3,0) = 0x3ed8a000

1 close(3) = 0

1 futex(0x3f384460,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f17f020,1058533408) = 0

1 write(2,0x3ff1b568,97)

(process:1): GLib-CRITICAL **: 12:41:06.158: g_ascii_strncasecmp: assertion 's1 != NULL' failed

 = 97

1 time(0,1072815020,1,0,0,0) = 1689943266

1 socket(PF_UNIX,SOCK_DGRAM|SOCK_CLOEXEC,IPPROTO_IP) = 3

1 connect(3,0x3f3854e0,110) = -1 errno=2 (No such file or directory)

1 close(3) = 0

1 fstat64(1,0x3ff1d710) = 0

1 write(1,0x4001acb8,130)Content-Type: application/json

{"apiVersion" : "1.0", "method": "unknown", "error":{"code": 2000,"message":"Invalid request."}} = 130

1 exit_group(1)

[*] Identification of missing filesytem areas.

[*] Found missing area: /etc/ld.so.cache

[*] Trying to identify this missing file: ld.so.cache

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/etc/ld.so.cache

[*] Found missing area: lib/charset.alias

[*] Trying to identify this missing file: charset.alias

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usrlib/charset.alias

-----------------------------------------------------------------