EMBA firmware report

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./sbin/fw3 to identify missing areas

[*] Emulating binary name: fw3 in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/1568982-13971496.squashfs_v4_le_extract (1/1)

[*] Using CPU config:

1 brk(NULL) = 0x00424520

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3ffc8000

1 uname(0x4071e750) = 0

1 access("/etc/ld.so.preload",R_OK) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/etc/ld.so.cache",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/tls/libuci.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e4d4,512) = 512

1 prctl(46,8,1081205972,512,1073770496,0) = 0

1 fstat64(3,0x4071e398) = 0

1 mmap2(NULL,94880,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3ffb0000

1 mprotect(0x3ffb7000,61440,PROT_NONE) = 0

1 mmap2(0x3ffc6000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3ffc6000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libubox.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e4bc,512) = 512

1 prctl(46,8,1081205948,512,1073770496,0) = 0

1 fstat64(3,0x4071e380) = 0

1 mmap2(NULL,99696,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3ff97000

1 mprotect(0x3ff9f000,61440,PROT_NONE) = 0

1 mmap2(0x3ffae000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x7) = 0x3ffae000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libubus.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e4a4,512) = 512

1 prctl(46,8,1081205924,512,1073770496,0) = 0

1 fstat64(3,0x4071e368) = 0

1 mmap2(NULL,82560,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3ff82000

1 mprotect(0x3ff86000,61440,PROT_NONE) = 0

1 mmap2(0x3ff95000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x3) = 0x3ff95000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libxtables.so.12",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e48c,512) = 512

1 prctl(46,7,1081205900,512,1073770496,0) = 0

1 fstat64(3,0x4071e350) = 0

1 mmap2(NULL,109932,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3ff67000

1 mprotect(0x3ff6f000,61440,PROT_NONE) = 0

1 mmap2(0x3ff7e000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x7) = 0x3ff7e000

1 mmap2(0x3ff80000,7532,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3ff80000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libm.so.6",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e474,512) = 512

1 prctl(46,9,1081205876,512,1073770496,0) = 0

1 _llseek(3,0,648,0x4071e230,SEEK_SET) = 0

1 read(3,0x4071e260,32) = 32

1 fstat64(3,0x4071e338) = 0

1 mmap2(NULL,1061936,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3fe63000

1 mprotect(0x3ff56000,61440,PROT_NONE) = 0

1 mmap2(0x3ff65000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0xf2) = 0x3ff65000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libdl.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e45c,512) = 512

1 prctl(46,9,1081205852,512,1073770496,0) = 0

1 _llseek(3,0,680,0x4071e218,SEEK_SET) = 0

1 read(3,0x4071e248,32) = 32

1 fstat64(3,0x4071e320) = 0

1 mmap2(NULL,73952,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3fe50000

1 mprotect(0x3fe52000,61440,PROT_NONE) = 0

1 mmap2(0x3fe61000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3fe61000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libip4tc.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e444,512) = 512

1 prctl(46,7,1081205828,512,1073770496,0) = 0

1 fstat64(3,0x4071e308) = 0

1 mmap2(NULL,82468,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3fe3b000

1 mprotect(0x3fe3f000,61440,PROT_NONE) = 0

1 mmap2(0x3fe4e000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x3) = 0x3fe4e000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libip6tc.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e42c,512) = 512

1 prctl(46,7,1081205804,512,1073770496,0) = 0

1 fstat64(3,0x4071e2f0) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3fe39000

1 mmap2(NULL,86580,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3fe23000

1 mprotect(0x3fe27000,65536,PROT_NONE) = 0

1 mmap2(0x3fe37000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x4) = 0x3fe37000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libiptext.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e414,512) = 512

1 prctl(46,7,1081205780,512,1073770496,0) = 0

1 fstat64(3,0x4071e2d8) = 0

1 mmap2(NULL,122080,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3fe05000

1 mprotect(0x3fe12000,61440,PROT_NONE) = 0

1 mmap2(0x3fe21000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0xc) = 0x3fe21000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libiptext4.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e3fc,512) = 512

1 prctl(46,7,1081205756,512,1073770496,0) = 0

1 fstat64(3,0x4071e2c0) = 0

1 mmap2(NULL,91152,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3fdee000

1 mprotect(0x3fdf3000,65536,PROT_NONE) = 0

1 mmap2(0x3fe03000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x5) = 0x3fe03000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libiptext6.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e3e4,512) = 512

1 prctl(46,7,1081205732,512,1073770496,0) = 0

1 fstat64(3,0x4071e2a8) = 0

1 mmap2(NULL,87040,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3fdd8000

1 mprotect(0x3fddd000,61440,PROT_NONE) = 0

1 mmap2(0x3fdec000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x4) = 0x3fdec000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libgcc_s.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e3cc,512) = 512

1 prctl(46,9,1081205708,512,1073770496,0) = 0

1 fstat64(3,0x4071e290) = 0

1 mmap2(NULL,144160,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3fdb4000

1 mprotect(0x3fdc7000,61440,PROT_NONE) = 0

1 mmap2(0x3fdd6000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x12) = 0x3fdd6000

1 mprotect(0x4071e000,4096,PROT_EXEC|PROT_READ|PROT_WRITE|PROT_GROWSDOWN) = 0

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libc.so.6",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e3b4,512) = 512

1 prctl(46,13,1081205684,512,1073770496,0) = 0

1 _llseek(3,0,792,0x4071e170,SEEK_SET) = 0

1 read(3,0x4071e1a0,32) = 32

1 fstat64(3,0x4071e278) = 0

1 mmap2(NULL,1630336,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3fc25000

1 mprotect(0x3fd9b000,61440,PROT_NONE) = 0

1 mmap2(0x3fdaa000,28672,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x175) = 0x3fdaa000

1 mmap2(0x3fdb1000,8320,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3fdb1000

1 close(3) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3fc23000

1 set_thread_area(0x3fc2a980) = 0

1 mprotect(0x3fdaa000,16384,PROT_READ) = 0

1 mprotect(0x3fdd6000,4096,PROT_READ) = 0

1 mprotect(0x3ff65000,4096,PROT_READ) = 0

1 mprotect(0x3fe61000,4096,PROT_READ) = 0

1 mprotect(0x3ff7e000,4096,PROT_READ) = 0

1 mprotect(0x3fdec000,4096,PROT_READ) = 0

1 mprotect(0x3fe03000,4096,PROT_READ) = 0

1 mprotect(0x3fe21000,4096,PROT_READ) = 0

1 mprotect(0x3fe37000,4096,PROT_READ) = 0

1 mprotect(0x3fe4e000,4096,PROT_READ) = 0

1 mprotect(0x3ffae000,4096,PROT_READ) = 0

1 mprotect(0x3ff95000,4096,PROT_READ) = 0

1 mprotect(0x3ffc6000,4096,PROT_READ) = 0

1 mprotect(0x00422000,4096,PROT_READ) = 0

1 mprotect(0x3fffe000,4096,PROT_READ) = 0

1 brk(NULL) = 0x00424520

1 brk(0x00445520) = 0x00445520

1 brk(0x00446000) = 0x00446000

1 epoll_create(32) = 3

1 fcntl64(3,F_GETFD) = 0

1 fcntl64(3,F_SETFD,1) = 0

1 pipe(1081207936,2,1073442864,0,0,0) = 4

1 fcntl64(4,F_GETFD) = 0

1 fcntl64(4,F_SETFD,1) = 0

1 fcntl64(4,F_GETFL) = 0

1 fcntl64(4,F_SETFL,O_RDONLY|O_NONBLOCK) = 0

1 fcntl64(5,F_GETFD) = 0

1 fcntl64(5,F_SETFD,1) = 0

1 fcntl64(5,F_GETFL) = 1

1 fcntl64(5,F_SETFL,O_WRONLY|O_NONBLOCK) = 0

1 fcntl64(4,F_GETFL) = 128

1 fcntl64(4,F_SETFL,O_RDONLY|O_NONBLOCK) = 0

1 epoll_ctl(3,1,4,1081207880,0,0) = 0

1 rt_sigaction(SIGINT,NULL,0x4071eaa0) = 0

1 rt_sigaction(SIGINT,0x4071eac0,NULL) = 0

1 rt_sigaction(SIGTERM,NULL,0x4071eaa0) = 0

1 rt_sigaction(SIGTERM,0x4071eac0,NULL) = 0

1 rt_sigaction(SIGCHLD,NULL,0x4071eaa0) = 0

1 rt_sigaction(SIGCHLD,0x4071eac0,NULL) = 0

1 rt_sigaction(SIGPIPE,NULL,0x4071eb60) = 0

1 rt_sigaction(SIGPIPE,0x4071eb80,NULL) = 0

1 socket(PF_UNIX,SOCK_STREAM,IPPROTO_IP) = 6

1 fcntl64(6,F_GETFD) = 0

1 fcntl64(6,F_SETFD,1) = 0

1 connect(6,0x4071ebd0,110) = 0

1 read(6,0x4071ec78,12) = 12

1 read(6,0x4348f4,0) = 0

1 fcntl64(6,F_GETFL) = 2

1 fcntl64(6,F_SETFL,O_RDWR|O_NONBLOCK|O_CLOEXEC) = 0

1 sendmsg(6,1081207792,0,4,0,0) = 36

1 poll(0x4071ec58,1,-1) = 1

1 recvmsg(6,0x4071eba8,0) = 12

1 poll(0x4071ebc4,1,-1) = 1

1 recvmsg(6,0x4071eba8,0) = 288

1 recvmsg(6,0x4071eba8,0) = 12

1 poll(0x4071ebc4,1,-1) = 1

1 recvmsg(6,0x4071eba8,0) = 8

1 sendmsg(6,1081207776,0,5,0,0) = 36

1 clock_gettime(CLOCK_MONOTONIC,0x4071ec50) = 0 ({tv_sec = 299299,tv_nsec = 416859762})

1 clock_gettime(CLOCK_MONOTONIC,0x4071ec50) = 0 ({tv_sec = 299299,tv_nsec = 416941674})

1 poll(0x4071ec50,1,2000)

[*] Identification of missing filesytem areas.

[*] Found missing area: /etc/ld.so.cache

[*] Trying to identify this missing file: ld.so.cache

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/1568982-13971496.squashfs_v4_le_extract/etc/ld.so.cache

-----------------------------------------------------------------