EMBA firmware report

-----------------------------------------------------------------

[*] Initial strace run with jchroot on the command ./sbin/logread to identify missing areas

[*] Emulating binary name: logread in strace mode to identify missing areas (with jchroot)

[*] Emulator used: qemu-mipsel-static

[*] Chroot environment used: jchroot

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/1568982-13971496.squashfs_v4_le_extract (1/1)

[*] Using CPU config:

1 brk(NULL) = 0x004132c0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3ffc8000

1 uname(0x4071e720) = 0

1 access("/etc/ld.so.preload",R_OK) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/etc/ld.so.cache",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/tls/librt.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e4a4,512) = 512

1 prctl(46,10,1081205924,512,1073770496,0) = 0

1 _llseek(3,0,704,0x4071e260,SEEK_SET) = 0

1 read(3,0x4071e290,32) = 32

1 fstat64(3,0x4071e368) = 0

1 mmap2(NULL,94912,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3ffb0000

1 mprotect(0x3ffb7000,61440,PROT_NONE) = 0

1 mmap2(0x3ffc6000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3ffc6000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libubox.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e48c,512) = 512

1 prctl(46,8,1081205900,512,1073770496,0) = 0

1 fstat64(3,0x4071e350) = 0

1 mmap2(NULL,99696,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3ff97000

1 mprotect(0x3ff9f000,61440,PROT_NONE) = 0

1 mmap2(0x3ffae000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x7) = 0x3ffae000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libubus.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e474,512) = 512

1 prctl(46,8,1081205876,512,1073770496,0) = 0

1 fstat64(3,0x4071e338) = 0

1 mmap2(NULL,82560,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3ff82000

1 mprotect(0x3ff86000,61440,PROT_NONE) = 0

1 mmap2(0x3ff95000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x3) = 0x3ff95000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libjson-c.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e45c,512) = 512

1 prctl(46,8,1081205852,512,1073770496,0) = 0

1 fstat64(3,0x4071e320) = 0

1 mmap2(NULL,94800,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3ff6a000

1 mprotect(0x3ff71000,61440,PROT_NONE) = 0

1 mmap2(0x3ff80000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3ff80000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libblobmsg_json.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e444,512) = 512

1 prctl(46,8,1081205828,512,1073770496,0) = 0

1 fstat64(3,0x4071e308) = 0

1 mmap2(NULL,73904,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3ff57000

1 mprotect(0x3ff59000,61440,PROT_NONE) = 0

1 mmap2(0x3ff68000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3ff68000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libgcc_s.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e42c,512) = 512

1 prctl(46,9,1081205804,512,1073770496,0) = 0

1 fstat64(3,0x4071e2f0) = 0

1 mmap2(NULL,144160,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3ff33000

1 mprotect(0x3ff46000,61440,PROT_NONE) = 0

1 mmap2(0x3ff55000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x12) = 0x3ff55000

1 mprotect(0x4071e000,4096,PROT_EXEC|PROT_READ|PROT_WRITE|PROT_GROWSDOWN) = 0

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libc.so.6",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e414,512) = 512

1 prctl(46,13,1081205780,512,1073770496,0) = 0

1 _llseek(3,0,792,0x4071e1d0,SEEK_SET) = 0

1 read(3,0x4071e200,32) = 32

1 fstat64(3,0x4071e2d8) = 0

1 mmap2(NULL,1630336,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3fda4000

1 mprotect(0x3ff1a000,61440,PROT_NONE) = 0

1 mmap2(0x3ff29000,28672,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x175) = 0x3ff29000

1 mmap2(0x3ff30000,8320,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3ff30000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpthread.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x4071e364,512) = 512

1 prctl(46,12,1081205604,512,1073770496,0) = 0

1 _llseek(3,0,768,0x4071e118,SEEK_SET) = 0

1 read(3,0x4071e148,32) = 32

1 fstat64(3,0x4071e228) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3fda2000

1 mmap2(NULL,181232,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3fd75000

1 mprotect(0x3fd8f000,61440,PROT_NONE) = 0

1 mmap2(0x3fd9e000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x19) = 0x3fd9e000

1 mmap2(0x3fda0000,5104,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3fda0000

1 close(3) = 0

1 set_thread_area(0x3fdaa400) = 0

1 mprotect(0x3ff29000,16384,PROT_READ) = 0

1 mprotect(0x3fd9e000,4096,PROT_READ) = 0

1 mprotect(0x3ff55000,4096,PROT_READ) = 0

1 mprotect(0x3ffae000,4096,PROT_READ) = 0

1 mprotect(0x3ff80000,4096,PROT_READ) = 0

1 mprotect(0x3ff68000,4096,PROT_READ) = 0

1 mprotect(0x3ff95000,4096,PROT_READ) = 0

1 mprotect(0x3ffc6000,4096,PROT_READ) = 0

1 mprotect(0x00412000,4096,PROT_READ) = 0

1 mprotect(0x3fffe000,4096,PROT_READ) = 0

1 set_tid_address(0x3fda2fd8) = 1

1 set_robust_list(0x3fda2fe0,12) = -1 errno=89 (Function not implemented)

1 rt_sigaction(32,0x4071ed68,NULL) = 0

1 rt_sigaction(33,0x4071ed68,NULL) = 0

1 rt_sigprocmask(SIG_UNBLOCK,0x4071edb0,NULL,16) = 0

1 getrlimit(3,0x4071ee38) = 0

1 rt_sigaction(SIGPIPE,0x4071ec50,0x4071ec30) = 0

1 epoll_create(32) = 3

1 fcntl64(3,F_GETFD) = 0

1 fcntl64(3,F_SETFD,1) = 0

1 pipe(1081208216,2,1073442864,0,0,0) = 4

1 fcntl64(4,F_GETFD) = 0

1 fcntl64(4,F_SETFD,1) = 0

1 fcntl64(4,F_GETFL) = 0

1 fcntl64(4,F_SETFL,O_RDONLY|O_NONBLOCK) = 0

1 fcntl64(5,F_GETFD) = 0

1 fcntl64(5,F_SETFD,1) = 0

1 fcntl64(5,F_GETFL) = 1

1 fcntl64(5,F_SETFL,O_WRONLY|O_NONBLOCK) = 0

1 fcntl64(4,F_GETFL) = 128

1 fcntl64(4,F_SETFL,O_RDONLY|O_NONBLOCK) = 0

1 epoll_ctl(3,1,4,1081208160,0,0) = 0

1 rt_sigaction(SIGINT,NULL,0x4071ebb8) = 0

1 rt_sigaction(SIGINT,0x4071ebd8,NULL) = 0

1 rt_sigaction(SIGTERM,NULL,0x4071ebb8) = 0

1 rt_sigaction(SIGTERM,0x4071ebd8,NULL) = 0

1 rt_sigaction(SIGCHLD,NULL,0x4071ebb8) = 0

1 rt_sigaction(SIGCHLD,0x4071ebd8,NULL) = 0

1 rt_sigaction(SIGPIPE,NULL,0x4071ec78) = 0

1 brk(NULL) = 0x004132c0

1 brk(0x004342c0) = 0x004342c0

1 brk(0x00435000) = 0x00435000

1 rt_sigaction(SIGINT,NULL,0x4071eb60) = 0

1 rt_sigaction(SIGTERM,NULL,0x4071eb60) = 0

1 rt_sigaction(SIGCHLD,NULL,0x4071eb60) = 0

1 rt_sigaction(SIGPIPE,NULL,0x4071ec20) = 0

1 socket(PF_UNIX,SOCK_STREAM,IPPROTO_IP) = 6

1 fcntl64(6,F_GETFD) = 0

1 fcntl64(6,F_SETFD,1) = 0

1 connect(6,0x4071ec90,110) = 0

1 read(6,0x4071ed38,12) = 12

1 read(6,0x42349c,0) = 0

1 fcntl64(6,F_GETFL) = 2

1 fcntl64(6,F_SETFL,O_RDWR|O_NONBLOCK|O_CLOEXEC) = 0

1 epoll_ctl(3,1,6,1081208216,0,0) = 0

1 sendmsg(6,1081207984,0,4,0,0) = 20

1 poll(0x4071ed18,1,-1) = 1

1 recvmsg(6,0x4071ec68,0) = 12

1 poll(0x4071ec84,1,-1) = 1

1 recvmsg(6,0x4071ec68,0) = 8

1 write(2,0x4071c7b8,37)Failed to find log object: Not found

 = 37

1 nanosleep(1081208208,1081208208,0,0,0,0)

= 0

1 sendmsg(6,1081207984,0,4,0,0) = 20

1 poll(0x4071ed18,1,-1) = 1

1 recvmsg(6,0x4071ec68,0) = 12

1 poll(0x4071ec84,1,-1) = 1

1 recvmsg(6,0x4071ec68,0) = 8

1 write(2,0x4071c7b8,37)Failed to find log object: Not found

 = 37

1 nanosleep(1081208208,1081208208,0,0,0,0)[*] Identification of missing filesytem areas.

[*] Found missing area: /etc/ld.so.cache

[*] Trying to identify this missing file: ld.so.cache

[*] Missing file /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/1568982-13971496.squashfs_v4_le_extract/etc/ld.so.cache

-----------------------------------------------------------------