EMBA firmware report

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./usr/html/axis-cgi/shuttergain.cgi to identify missing areas

[*] Emulating binary name: shuttergain.cgi in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract (1/2)

[*] Using CPU config:

--- SIGILL {si_signo=SIGILL, si_code=SI_KERNEL, si_pid=0, si_uid=0} ---

qemu: uncaught target signal 4 (Illegal instruction) - core dumped

[*] Identification of missing filesytem areas.

[*] No missing areas found.

-----------------------------------------------------------------

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./html/axis-cgi/shuttergain.cgi to identify missing areas

[*] Emulating binary name: shuttergain.cgi in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr (2/2)

[*] Using CPU config: 24KEc

1 brk(NULL) = 0x4001c2d0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f7c7000

1 uname(0x3ff1d630) = 0

1 access("/etc/ld.so.preload",R_OK) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/etc/ld.so.cache",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/tls/libglib-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3c4,512) = 512

1 prctl(46,1072813304,1072812996,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d280) = 0

1 mmap2(NULL,1257552,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f693000

1 mprotect(0x3f7b4000,61440,PROT_NONE) = 0

1 mmap2(0x3f7c3000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x120) = 0x3f7c3000

1 mmap2(0x3f7c6000,80,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f7c6000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libgio-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3b4,512) = 512

1 prctl(46,1072813288,1072812980,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d270) = 0

1 mmap2(NULL,1990784,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f4ac000

1 mprotect(0x3f67c000,61440,PROT_NONE) = 0

1 mmap2(0x3f68b000,24576,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1cf) = 0x3f68b000

1 mmap2(0x3f691000,4224,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f691000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libgobject-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d3a4,512) = 512

1 prctl(46,1072813240,1072812964,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d260) = 0

1 mmap2(NULL,446160,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f43f000

1 mprotect(0x3f49a000,65536,PROT_NONE) = 0

1 mmap2(0x3f4aa000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x5b) = 0x3f4aa000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libjansson.so.4",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d394,512) = 512

1 prctl(46,1072813224,1072812948,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d250) = 0

1 mmap2(NULL,119392,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f421000

1 mprotect(0x3f42e000,61440,PROT_NONE) = 0

1 mmap2(0x3f43d000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0xc) = 0x3f43d000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libcgiparser.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d384,512) = 512

1 prctl(46,1072813208,1072812932,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d240) = 0

1 mmap2(NULL,78048,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f40d000

1 mprotect(0x3f410000,61440,PROT_NONE) = 0

1 mmap2(0x3f41f000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x2) = 0x3f41f000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libparhand.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d374,512) = 512

1 prctl(46,1072813192,1072812916,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d230) = 0

1 mmap2(NULL,186304,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f3df000

1 mprotect(0x3f3fc000,61440,PROT_NONE) = 0

1 mmap2(0x3f40b000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1c) = 0x3f40b000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/librt.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d364,512) = 512

1 prctl(46,1072813240,1072812900,512,1065377792,0) = 0

1 _llseek(3,0,704,0x3ff1d138,SEEK_SET) = 0

1 read(3,0x3ff1d168,32) = 32

1 fstat64(3,0x3ff1d220) = 0

1 mmap2(NULL,94928,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f3c7000

1 mprotect(0x3f3ce000,61440,PROT_NONE) = 0

1 mmap2(0x3f3dd000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3f3dd000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libc.so.6",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d354,512) = 512

1 prctl(46,1072813320,1072812884,512,1065377792,0) = 0

1 _llseek(3,0,760,0x3ff1d128,SEEK_SET) = 0

1 read(3,0x3ff1d158,32) = 32

1 fstat64(3,0x3ff1d210) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f3c5000

1 mmap2(NULL,1593152,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f240000

1 mprotect(0x3f3ad000,61440,PROT_NONE) = 0

1 mmap2(0x3f3bc000,28672,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x16c) = 0x3f3bc000

1 mmap2(0x3f3c3000,8000,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f3c3000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpcre.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d294,512) = 512

1 prctl(46,1072812968,1072812692,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d150) = 0

1 mmap2(NULL,545216,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f1ba000

1 mprotect(0x3f22f000,61440,PROT_NONE) = 0

1 mmap2(0x3f23e000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x74) = 0x3f23e000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpthread.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d284,512) = 512

1 prctl(46,1072813080,1072812676,512,1065377792,0) = 0

1 _llseek(3,0,768,0x3ff1d050,SEEK_SET) = 0

1 read(3,0x3ff1d080,32) = 32

1 fstat64(3,0x3ff1d140) = 0

1 mmap2(NULL,181248,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f18d000

1 mprotect(0x3f1a7000,61440,PROT_NONE) = 0

1 mmap2(0x3f1b6000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x19) = 0x3f1b6000

1 mmap2(0x3f1b8000,5120,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f1b8000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libgmodule-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d1c4,512) = 512

1 prctl(46,1072812760,1072812484,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d080) = 0

1 mmap2(NULL,78096,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f179000

1 mprotect(0x3f17c000,61440,PROT_NONE) = 0

1 mmap2(0x3f18b000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x2) = 0x3f18b000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libz.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d1b4,512) = 512

1 prctl(46,1072812776,1072812468,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d070) = 0

1 mmap2(NULL,155984,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f152000

1 mprotect(0x3f167000,65536,PROT_NONE) = 0

1 mmap2(0x3f177000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x15) = 0x3f177000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libresolv.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d1a4,512) = 512

1 prctl(46,1072812760,1072812452,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1cf68,SEEK_SET) = 0

1 read(3,0x3ff1cf98,32) = 32

1 fstat64(3,0x3ff1d060) = 0

1 mmap2(NULL,149696,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f12d000

1 mprotect(0x3f13f000,61440,PROT_NONE) = 0

1 mmap2(0x3f14e000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x11) = 0x3f14e000

1 mmap2(0x3f150000,6336,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f150000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libffi.so.7",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d194,512) = 512

1 prctl(46,1072812744,1072812436,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d050) = 0

1 mmap2(NULL,95072,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f115000

1 mprotect(0x3f11c000,61440,PROT_NONE) = 0

1 mmap2(0x3f12b000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3f12b000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libxmlnode.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d184,512) = 512

1 prctl(46,1072812696,1072812420,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d040) = 0

1 mmap2(NULL,82192,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f100000

1 mprotect(0x3f104000,61440,PROT_NONE) = 0

1 mmap2(0x3f113000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x3) = 0x3f113000

1 close(3) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f0fe000

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/../glib/tls/libdl.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d174,512) = 512

1 prctl(46,1072812712,1072812404,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1cf30,SEEK_SET) = 0

1 read(3,0x3ff1cf60,32) = 32

1 fstat64(3,0x3ff1d030) = 0

1 mmap2(NULL,73968,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f0eb000

1 mprotect(0x3f0ed000,61440,PROT_NONE) = 0

1 mmap2(0x3f0fc000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f0fc000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libconfutils.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d164,512) = 512

1 prctl(46,1072812664,1072812388,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d020) = 0

1 mmap2(NULL,82256,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f0d6000

1 mprotect(0x3f0da000,61440,PROT_NONE) = 0

1 mmap2(0x3f0e9000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x3) = 0x3f0e9000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libexpat.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d154,512) = 512

1 prctl(46,1072812680,1072812372,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d010) = 0

1 mmap2(NULL,307440,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f08a000

1 mprotect(0x3f0c4000,61440,PROT_NONE) = 0

1 mmap2(0x3f0d3000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x39) = 0x3f0d3000

1 close(3) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f088000

1 set_thread_area(0x3f08f4a0) = 0

1 mprotect(0x3f3bc000,16384,PROT_READ) = 0

1 mprotect(0x3f0d3000,8192,PROT_READ) = 0

1 mprotect(0x3f1b6000,4096,PROT_READ) = 0

1 mprotect(0x3f23e000,4096,PROT_READ) = 0

1 mprotect(0x3f7c3000,4096,PROT_READ) = 0

1 mprotect(0x3f12b000,4096,PROT_READ) = 0

1 mprotect(0x3f4aa000,4096,PROT_READ) = 0

1 mprotect(0x3f0e9000,4096,PROT_READ) = 0

1 mprotect(0x3f0fc000,4096,PROT_READ) = 0

1 mprotect(0x3f113000,4096,PROT_READ) = 0

1 mprotect(0x3f14e000,4096,PROT_READ) = 0

1 mprotect(0x3f177000,4096,PROT_READ) = 0

1 mprotect(0x3f18b000,4096,PROT_READ) = 0

1 mprotect(0x3f3dd000,4096,PROT_READ) = 0

1 mprotect(0x3f68b000,12288,PROT_READ) = 0

1 mprotect(0x3f40b000,4096,PROT_READ) = 0

1 mprotect(0x3f41f000,4096,PROT_READ) = 0

1 mprotect(0x3f43d000,4096,PROT_READ) = 0

1 mprotect(0x4001b000,4096,PROT_READ) = 0

1 mprotect(0x3f7fd000,4096,PROT_READ) = 0

1 set_tid_address(0x3f088078) = 1

1 set_robust_list(0x3f088080,12) = -1 errno=89 (Function not implemented)

1 rt_sigaction(32,0x3ff1dc80,NULL) = 0

1 rt_sigaction(33,0x3ff1dc80,NULL) = 0

1 rt_sigprocmask(SIG_UNBLOCK,0x3ff1dcc8,NULL,16) = 0

1 getrlimit(3,0x3ff1dd50) = 0

1 brk(NULL) = 0x4001c2d0

1 brk(0x4003d2d0) = 0x4003d2d0

1 brk(0x4003e000) = 0x4003e000

1 gettimeofday(0x3ff1dc88,NULL) = 0 ({tv_sec = 1689943249,tv_usec = 492056},NULL)

1 syscall(4238,1065115340,129,2147483647,0,0)1 futex(0x3f7c5ecc,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,NULL,0) = 0

= 0

1 syscall(4238,1065115340,129,2147483647,0,1061861888)1 futex(0x3f7c5ecc,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f4aba00,1061861888) = 0

= 0

1 openat(AT_FDCWD,"/dev/urandom",O_RDONLY) = 3

1 read(3,0x3ff1dbb0,4) = 4

1 close(3) = 0

1 openat(AT_FDCWD,"lib/charset.alias",O_RDONLY|O_LARGEFILE) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/gconv/gconv-modules.cache",O_RDONLY) = 3

1 fstat64(3,0x3ff1d768) = 0

1 mmap2(NULL,26358,PROT_READ,MAP_SHARED,3,0) = 0x3f081000

1 close(3) = 0

1 futex(0x3f3c2460,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f1bf020,1058795552) = 0

1 fstat64(1,0x3ff1da58) = 0

1 write(1,0x40022b28,45)Content-Type: application/json;charset=utf8

 = 45

1 write(1,0x40022b28,90){

  "apiVersion": "2.0",

  "error": {

    "code": 2,

    "message": "Parsing error"

 = 90

1 exit_group(0)

[*] Identification of missing filesytem areas.

[*] Found missing area: /etc/ld.so.cache

[*] Trying to identify this missing file: ld.so.cache

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/etc/ld.so.cache

[*] Found missing area: lib/charset.alias

[*] Trying to identify this missing file: charset.alias

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usrlib/charset.alias

-----------------------------------------------------------------