EMBA firmware report

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./usr/bin/overlayimage.cgi to identify missing areas

[*] Emulating binary name: overlayimage.cgi in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract (1/2)

[*] Using CPU config:

--- SIGILL {si_signo=SIGILL, si_code=SI_KERNEL, si_pid=0, si_uid=0} ---

qemu: uncaught target signal 4 (Illegal instruction) - core dumped

[*] Identification of missing filesytem areas.

[*] No missing areas found.

-----------------------------------------------------------------

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./bin/overlayimage.cgi to identify missing areas

[*] Emulating binary name: overlayimage.cgi in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr (2/2)

[*] Using CPU config: 24KEc

1 brk(NULL) = 0x40017230

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f7c7000

1 uname(0x3ff1d650) = 0

1 access("/etc/ld.so.preload",R_OK) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/etc/ld.so.cache",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/tls/libgio-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3e4,512) = 512

1 prctl(46,1072813336,1072813028,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d2a0) = 0

1 mmap2(NULL,1990784,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f5e0000

1 mprotect(0x3f7b0000,61440,PROT_NONE) = 0

1 mmap2(0x3f7bf000,24576,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1cf) = 0x3f7bf000

1 mmap2(0x3f7c5000,4224,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f7c5000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libgobject-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3d4,512) = 512

1 prctl(46,1072813288,1072813012,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d290) = 0

1 mmap2(NULL,446160,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f573000

1 mprotect(0x3f5ce000,65536,PROT_NONE) = 0

1 mmap2(0x3f5de000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x5b) = 0x3f5de000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libjansson.so.4",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3c4,512) = 512

1 prctl(46,1072813272,1072812996,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d280) = 0

1 mmap2(NULL,119392,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f555000

1 mprotect(0x3f562000,61440,PROT_NONE) = 0

1 mmap2(0x3f571000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0xc) = 0x3f571000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libcgi_form_data.so.0",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/libcgi_form_data.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3b4,512) = 512

1 prctl(46,1072813256,1072812980,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d270) = 0

1 mmap2(NULL,78032,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f541000

1 mprotect(0x3f544000,61440,PROT_NONE) = 0

1 mmap2(0x3f553000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x2) = 0x3f553000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libcgi_buffer.so.0",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/libcgi_buffer.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3a4,512) = 512

1 prctl(46,1072813240,1072812964,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d260) = 0

1 mmap2(NULL,73888,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f52e000

1 mprotect(0x3f530000,61440,PROT_NONE) = 0

1 mmap2(0x3f53f000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f53f000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libcgi_header.so.0",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/libcgi_header.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d394,512) = 512

1 prctl(46,1072813224,1072812948,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d250) = 0

1 mmap2(NULL,73936,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f51b000

1 mprotect(0x3f51d000,61440,PROT_NONE) = 0

1 mmap2(0x3f52c000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f52c000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libglib-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d384,512) = 512

1 prctl(46,1072813240,1072812932,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d240) = 0

1 mmap2(NULL,1257552,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f3e7000

1 mprotect(0x3f508000,61440,PROT_NONE) = 0

1 mmap2(0x3f517000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x120) = 0x3f517000

1 mmap2(0x3f51a000,80,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f51a000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libparhand.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d374,512) = 512

1 prctl(46,1072813192,1072812916,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d230) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f3e5000

1 mmap2(NULL,186304,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f3b7000

1 mprotect(0x3f3d4000,61440,PROT_NONE) = 0

1 mmap2(0x3f3e3000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1c) = 0x3f3e3000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpthread.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d364,512) = 512

1 prctl(46,1072813304,1072812900,512,1065377792,0) = 0

1 _llseek(3,0,768,0x3ff1d130,SEEK_SET) = 0

1 read(3,0x3ff1d160,32) = 32

1 fstat64(3,0x3ff1d220) = 0

1 mmap2(NULL,181248,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f38a000

1 mprotect(0x3f3a4000,61440,PROT_NONE) = 0

1 mmap2(0x3f3b3000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x19) = 0x3f3b3000

1 mmap2(0x3f3b5000,5120,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f3b5000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libc.so.6",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d354,512) = 512

1 prctl(46,1072813320,1072812884,512,1065377792,0) = 0

1 _llseek(3,0,760,0x3ff1d128,SEEK_SET) = 0

1 read(3,0x3ff1d158,32) = 32

1 fstat64(3,0x3ff1d210) = 0

1 mmap2(NULL,1593152,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f205000

1 mprotect(0x3f372000,61440,PROT_NONE) = 0

1 mmap2(0x3f381000,28672,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x16c) = 0x3f381000

1 mmap2(0x3f388000,8000,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f388000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libgmodule-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d284,512) = 512

1 prctl(46,1072812952,1072812676,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d140) = 0

1 mmap2(NULL,78096,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f1f1000

1 mprotect(0x3f1f4000,61440,PROT_NONE) = 0

1 mmap2(0x3f203000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x2) = 0x3f203000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libz.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d274,512) = 512

1 prctl(46,1072812968,1072812660,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d130) = 0

1 mmap2(NULL,155984,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f1ca000

1 mprotect(0x3f1df000,65536,PROT_NONE) = 0

1 mmap2(0x3f1ef000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x15) = 0x3f1ef000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libresolv.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d264,512) = 512

1 prctl(46,1072812952,1072812644,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1d028,SEEK_SET) = 0

1 read(3,0x3ff1d058,32) = 32

1 fstat64(3,0x3ff1d120) = 0

1 mmap2(NULL,149696,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f1a5000

1 mprotect(0x3f1b7000,61440,PROT_NONE) = 0

1 mmap2(0x3f1c6000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x11) = 0x3f1c6000

1 mmap2(0x3f1c8000,6336,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f1c8000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libffi.so.7",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d254,512) = 512

1 prctl(46,1072812936,1072812628,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d110) = 0

1 mmap2(NULL,95072,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f18d000

1 mprotect(0x3f194000,61440,PROT_NONE) = 0

1 mmap2(0x3f1a3000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3f1a3000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpcre.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d244,512) = 512

1 prctl(46,1072812888,1072812612,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d100) = 0

1 mmap2(NULL,545216,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f107000

1 mprotect(0x3f17c000,61440,PROT_NONE) = 0

1 mmap2(0x3f18b000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x74) = 0x3f18b000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libxmlnode.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d234,512) = 512

1 prctl(46,1072812872,1072812596,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d0f0) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f105000

1 mmap2(NULL,82192,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f0f0000

1 mprotect(0x3f0f4000,61440,PROT_NONE) = 0

1 mmap2(0x3f103000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x3) = 0x3f103000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/../glib/tls/libdl.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d224,512) = 512

1 prctl(46,1072812888,1072812580,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1cfe0,SEEK_SET) = 0

1 read(3,0x3ff1d010,32) = 32

1 fstat64(3,0x3ff1d0e0) = 0

1 mmap2(NULL,73968,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f0dd000

1 mprotect(0x3f0df000,61440,PROT_NONE) = 0

1 mmap2(0x3f0ee000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f0ee000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libconfutils.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d214,512) = 512

1 prctl(46,1072812840,1072812564,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d0d0) = 0

1 mmap2(NULL,82256,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f0c8000

1 mprotect(0x3f0cc000,61440,PROT_NONE) = 0

1 mmap2(0x3f0db000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x3) = 0x3f0db000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libexpat.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d204,512) = 512

1 prctl(46,1072812856,1072812548,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d0c0) = 0

1 mmap2(NULL,307440,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f07c000

1 mprotect(0x3f0b6000,61440,PROT_NONE) = 0

1 mmap2(0x3f0c5000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x39) = 0x3f0c5000

1 close(3) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f07a000

1 set_thread_area(0x3f081720) = 0

1 mprotect(0x3f381000,16384,PROT_READ) = 0

1 mprotect(0x3f0c5000,8192,PROT_READ) = 0

1 mprotect(0x3f3b3000,4096,PROT_READ) = 0

1 mprotect(0x3f18b000,4096,PROT_READ) = 0

1 mprotect(0x3f517000,4096,PROT_READ) = 0

1 mprotect(0x3f1a3000,4096,PROT_READ) = 0

1 mprotect(0x3f5de000,4096,PROT_READ) = 0

1 mprotect(0x3f0db000,4096,PROT_READ) = 0

1 mprotect(0x3f0ee000,4096,PROT_READ) = 0

1 mprotect(0x3f103000,4096,PROT_READ) = 0

1 mprotect(0x3f1c6000,4096,PROT_READ) = 0

1 mprotect(0x3f1ef000,4096,PROT_READ) = 0

1 mprotect(0x3f203000,4096,PROT_READ) = 0

1 mprotect(0x3f7bf000,12288,PROT_READ) = 0

1 mprotect(0x3f3e3000,4096,PROT_READ) = 0

1 mprotect(0x3f52c000,4096,PROT_READ) = 0

1 mprotect(0x3f53f000,4096,PROT_READ) = 0

1 mprotect(0x3f553000,4096,PROT_READ) = 0

1 mprotect(0x3f571000,4096,PROT_READ) = 0

1 mprotect(0x40016000,4096,PROT_READ) = 0

1 mprotect(0x3f7fd000,4096,PROT_READ) = 0

1 set_tid_address(0x3f07a2f8) = 1

1 set_robust_list(0x3f07a300,12) = -1 errno=89 (Function not implemented)

1 rt_sigaction(32,0x3ff1dca0,NULL) = 0

1 rt_sigaction(33,0x3ff1dca0,NULL) = 0

1 rt_sigprocmask(SIG_UNBLOCK,0x3ff1dce8,NULL,16) = 0

1 getrlimit(3,0x3ff1dd70) = 0

1 brk(NULL) = 0x40017230

1 brk(0x40038230) = 0x40038230

1 brk(0x40039000) = 0x40039000

1 gettimeofday(0x3ff1dca8,NULL) = 0 ({tv_sec = 1689943063,tv_usec = 989578},NULL)

1 syscall(4238,1062313676,129,2147483647,0,0)1 futex(0x3f519ecc,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,NULL,0) = 0

= 0

1 syscall(4238,1062313676,129,2147483647,0,1063123456)1 futex(0x3f519ecc,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f5dfa00,1063123456) = 0

= 0

--- SIGSEGV {si_signo=SIGSEGV, si_code=1, si_addr=NULL} ---

qemu: uncaught target signal 11 (Segmentation fault) - core dumped

[*] Identification of missing filesytem areas.

[*] Found missing area: /etc/ld.so.cache

[*] Trying to identify this missing file: ld.so.cache

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/etc/ld.so.cache

[*] Found missing area: /lib/tls/libcgi_buffer.so.0

[*] Trying to identify this missing file: libcgi_buffer.so.0

[*] Possible matching file found: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/libcgi_buffer.so.0

[*] Copy file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/libcgi_buffer.so.0 to /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/tls/

[*] Found missing area: /lib/tls/libcgi_form_data.so.0

[*] Trying to identify this missing file: libcgi_form_data.so.0

[*] Possible matching file found: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/libcgi_form_data.so.0

[*] Copy file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/libcgi_form_data.so.0 to /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/tls/

[*] Found missing area: /lib/tls/libcgi_header.so.0

[*] Trying to identify this missing file: libcgi_header.so.0

[*] Possible matching file found: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/libcgi_header.so.0

[*] Copy file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/libcgi_header.so.0 to /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/tls/

-----------------------------------------------------------------