Graf Chokolo Releases Petitboot Tools for Linux on PS3

Type Offset VirtAddr PhysAddr
FileSiz MemSiz Flags Align
LOAD 0x0000000000010000 0xc000000000000000 0x0000000000000000
0x00000000005bc668 0x0000000000609c8c RWE 10000
NOTE 0x0000000000499f70 0xc000000000489f70 0x0000000000489f70
0x0000000000000024 0x0000000000000024 4
NOTE 0x0000000000499f94 0xc000000000489f94 0x0000000000489f94
0x000000000000000c 0x000000000000000c 1

Section to Segment mapping:
Segment Sections...
00 .text .text.unlikely .devinit.text .meminit.text .devexit.text .rodata __bug_table __ksymtab __ksymtab_gpl __ksymtab_strings __param __ex_table .notes .dummy .init.text .exit.text .init.data .init.setup .initcall.init .con_initcall.init __ftr_fixup __lwsync_fixup __fw_ftr_fixup .init.ramfs .data..percpu .machine.desc .data .opd .got .data..init_task .data..page_aligned .data..cacheline_aligned .data..read_mostly .bss
01 .notes
02 .dummy

BootOS:
root@Compiler:/home/jerry/workspace/ps3dev/bootos/tools# ./dbgcli
BootOS Stage 2 starting.
Waiting for thread 1...
Thread 1 is alive, all systems go.
Installing exception handlers...
Cleaning up after Lv-2...
GPU closed
PPE id: 1
VAS id: 0
Selected VAS 0
Disconnected 0 IRQ plugs
Destructed 0 IRQ outlets
Removed 0 state bitmaps
Locating device with type 3 and index 0...
Device found: bus #1 id 1 type 4, dev #0 id 0 type 3 intr 2
Closing all devices...
Bus #0 id 0 type 3 num_dev 1
- Dev #0 id 0 type 0 intr -1
Bus #1 id 1 type 4 num_dev 4
- Dev #0 id 0 type 3 intr 2 KEPT (gelic)
- Dev #1 id 1 type 4 intr 3
- Dev #2 id 2 type 4 intr 3
- Dev #3 id 3 type 6 intr 5
Bus #2 id 2 type 1 num_dev 0
Bus #3 id 3 type 2 num_dev 0
Bus #4 id 4 type 5 num_dev 5
- Dev #0 id 0 type 255 intr 2
- Dev #1 id 1 type 254 intr 2
- Dev #2 id 2 type 5 intr 2
- Dev #3 id 3 type 0 intr 2
- Dev #4 id 4 type 14 intr 2
Closed 0 devices
Allocating all possible lv1 memory...
Allocated 127537152 bytes in 8 blocks
Current allocation address counter is 0x8000
Brute forcing Lv1 allocation regions...
300000009000: size 1000 rights 3 pagesize 12 ( 1000) flags 0x0000000000000000 CLEANED
440000100000: size 20000 rights 3 pagesize 12 ( 1000) flags 0x0000000000000000 CLEANED
4c0000380000: size 80000 rights 3 pagesize 12 ( 1000) flags 0x0000000000000000 CLEANED
500000600000: size 100000 rights 3 pagesize 12 ( 1000) flags 0x0000000000000000 CLEANED
5c0002800000: size 800000 rights 3 pagesize 12 ( 1000) flags 0x0000000000000000 CLEANED
600004000000: size 1000000 rights 3 pagesize 12 ( 1000) flags 0x0000000000000000 CLEANED
640006000000: size 2000000 rights 3 pagesize 12 ( 1000) flags 0x0000000000000000 CLEANED
680008000000: size 4000000 rights 3 pagesize 12 ( 1000) flags 0x0000000000000000 CLEANED
Cleaned up 127537152 bytes in 8 blocks
Cleared IRQ mask for VUART 0
Cleared IRQ mask for VUART 2
Cleared IRQ mask for VUART 10
Initializing memory management...
New VAS ID: 2
SLB[0] = 0000000000000400 0000000008000000 (caused by 0000000000000000)
MMU initialized, now running in virtual mode
Region size = 261750784 bytes (249MB)
Bootmem = 134217728 bytes (128MB)
Highmem = 117440512 bytes (112MB) at 0x6c0050000000
Initializing network...
lwIP Initialized
gelicif: gelicif_init()
gelicif: low_level_init()
Locating device with type 3 and index 0...
Device found: bus #1 id 1 type 4, dev #0 id 0 type 3 intr 2
gelicif: device is on bus 1, device 0
gelicif: allocated 0x6820 bytes for DMA buffer
gelicif: ethernet MAC is fc0fe6314c01
gelicif: no VLAN in use
gelicif: base bus address is 0xd0000160
gelicif: cleared old RX DMA job
gelicif: started RX DMA
Ethernet interface initialized
Starting DHCP
Waiting for DHCP lease...
Network is up:
IP address: 192.168.1.139
Netmask: 255.255.255.0
Gateway: 192.168.1.1
TFTP server: 192.168.1.1
Bootfile: NONE
Use default configure: ServerIP:192.168.1.102 Bootfile: mykboot.conf
Downloading configuration file...
TFTP: starting download for file 'mykboot.conf'
TFTP: sent TFTP RRQ (65 bytes)
TFTP: received first packet, remote port is 50818
TFTP: download complete (123 bytes)
Transfer complete, status 0, size: 123 bytes
Configuration: 123 bytes
==== kboot.conf dump ====
Entry #0 'linux' (default):
Kernel: vmlinux-linux2.6
Root: /dev/nfs
Parameters: video=ps3fb:mode:3 rw nfsroot=192.168.1.102:/home/jerry/exports/ps3/rootfs ip=dhcp
=========================
Starting to boot 'linux'
Downloading kernel...
TFTP: starting download for file 'vmlinux-linux2.6'
TFTP: sent TFTP RRQ (69 bytes)
TFTP: received first packet, remote port is 54628
SLB[1] = 000000006c005400 00006c0058000001 (caused by 00006c0050000000)
TFTP: downloaded 512kB so far...
TFTP: downloaded 1024kB so far...
TFTP: downloaded 1536kB so far...
TFTP: downloaded 2048kB so far...
TFTP: downloaded 2560kB so far...
TFTP: downloaded 3072kB so far...
TFTP: downloaded 3584kB so far...
TFTP: downloaded 4096kB so far...
TFTP: downloaded 4608kB so far...
TFTP: downloaded 5120kB so far...
TFTP: downloaded 5632kB so far...
TFTP: downloaded 6144kB so far...
TFTP: download complete (6575232 bytes)
Transfer complete, status 0, size: 6575232 bytes
Loading PHDR to [0x0...0xf916ac] the ADDR_LIMIT is: [0xc00000]
PHDR out of bounds [0x0...0xf916ac]
Load The MAX Size inside
load_elf_kernel: LOAD 0x10000 @0x0 [0x634980/0xc00000]
load_elf_kernel: skipping PHDR of type 4
load_elf_kernel: skipping PHDR of type 4
load_elf_kernel: kernel loaded, entry at 0x0
Kernel command line: 'root=/dev/nfs video=ps3fb:mode:3 rw nfsroot=192.168.1.102:/home/jerry/exports/ps3/rootfs ip=dhcp'
Releasing DHCP lease...
Shutting down network...
gelicif: low_level_shutdown()
gelicif: stopped RX DMA
gelicif: unmapped DMA memory
gelicif: low_level_shutdown() complete
Shutting down memory management...
Now running in real mode
Destroyed VAS 2
Device tree prepared
Relocating vectors...
Letting thread1 run loose...
Taking the plunge...

Kernel:
root@192:/# dmesg
Allocated 4096 bytes for 2 pacas at c000000007fff000
Using PS3 machine description
Page orders: linear mapping = 24, virtual = 12, io = 12
CPU maps initialized for 2 threads per core
(thread shift is 1)
Starting Linux PPC64 #1 SMP Tue Apr 5 21:15:37 CST 2011
-----------------------------------------------------
ppc64_pft_size = 0x14
physicalMemorySize = 0x8000000
htab_hash_mask = 0x1fff
-----------------------------------------------------
Linux version 2.6.38 (root@Compiler) (gcc version 4.3.5 (GCC) ) #1 SMP Tue Apr 5 21:15:37 CST 2011
*** 0000 : CF000012

*** 0000 : Setup Arch
[boot]0012 Setup Arch
PS3 firmware version 3.5.5
ps3fb videomemory: 9437184 bytes at c000000001a00000
ps3flash bounce buffer: 262144 bytes at c000000002300000
Top of RAM: 0x8000000, Total RAM: 0x8000000
Memory hole size: 0MB
Zone PFN ranges:
DMA 0x00000000 -> 0x00008000
Normal empty
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x00008000
On node 0 totalpages: 32768
DMA zone: 448 pages used for memmap
DMA zone: 0 pages reserved
DMA zone: 32320 pages, LIFO batch:7
*** 0000 : CF000015

*** 0000 : Setup Done
[boot]0015 Setup Done
PERCPU: Embedded 12 pages/cpu @c000000002400000 s16640 r0 d32512 u524288
pcpu-alloc: s16640 r0 d32512 u524288 alloc=1*1048576
pcpu-alloc: [0] 0 1
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32320
Kernel command line: root=/dev/nfs video=ps3fb:mode:3 rw nfsroot=192.168.1.102:/home/jerry/exports/ps3/rootfs ip=dhcp
PID hash table entries: 512 (order: 0, 4096 bytes)
Dentry cache hash table entries: 16384 (order: 5, 131072 bytes)
Inode-cache hash table entries: 8192 (order: 4, 65536 bytes)
Memory: 103080k/131072k available (5556k kernel code, 27992k reserved, 800k data, 9585k bss, 228k init)
Hierarchical RCU implementation.
RCU-based detection of stalled CPUs is disabled.
NR_IRQS:512 nr_irqs:512 16
time_init: decrementer frequency = 79.800000 MHz
time_init: processor frequency = 3192.000000 MHz
clocksource: timebase mult[3220149] shift[22] registered
clockevent: decrementer mult[146dc5d6] shift[32] cpu[0]
Console: colour dummy device 80x25
console [tty0] enabled
Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar
... MAX_LOCKDEP_SUBCLASSES: 8
... MAX_LOCK_DEPTH: 48
... MAX_LOCKDEP_KEYS: 8191
... CLASSHASH_SIZE: 4096
... MAX_LOCKDEP_ENTRIES: 16384
... MAX_LOCKDEP_CHAINS: 32768
... CHAINHASH_SIZE: 16384
memory used by lock dependency info: 5855 kB
per task-struct memory footprint: 1920 bytes
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 256
------------[ cut here ]------------
WARNING: at kernel/lockdep.c:2465
Modules linked in:
NIP: c00000000007a1f0 LR: c00000000007a1d4 CTR: 0000000000000000
REGS: c00000000606b620 TRAP: 0700 Not tainted (2.6.38)
MSR: 8000000000020032 CR: 22000022 XER: 00000000
TASK = c000000006064140[0] 'swapper' THREAD: c000000006068000 CPU: 1
GPR00: 0000000000000000 c00000000606b8a0 c000000000627170 0000000000000001
GPR04: 00000000000080d0 c00000000009d46c 0000000000000001 c000000006064140
GPR08: 0000000000000000 c000000000f80b64 0000000001f18000 0000000000000001
GPR12: 0000000044000024 c000000007fff280 c00000000606bf90 0000000000000000
GPR16: 0000000000000000 0000000000000000 0000000000000000 0000000000000000
GPR20: 0000000000000000 0000000000000000 0000000000000001 0000000000000010
GPR24: 0000000000000010 0000000000000001 0000000000000003 c000000006000500
GPR28: 0000000000000010 00000000000080d0 c0000000005bc600 0000000000000000
NIP [c00000000007a1f0] .lockdep_trace_alloc+0xc0/0x104
LR [c00000000007a1d4] .lockdep_trace_alloc+0xa4/0x104
Call Trace:
[c00000000606b8a0] [c00000000007a174] .lockdep_trace_alloc+0x44/0x104 (unreliable)
[c00000000606b930] [c0000000000da6b4] .kmem_cache_alloc+0x40/0x150
[c00000000606b9d0] [c000000000090f1c] .alloc_desc+0x40/0xec
[c00000000606ba70] [c00000000009d42c] .irq_alloc_descs+0xf8/0x224
[c00000000606bb40] [c00000000009d588] .irq_to_desc_alloc_node+0x30/0x70
[c00000000606bbc0] [c00000000000b5cc] .irq_setup_virq+0x38/0xd4
[c00000000606bc50] [c00000000000b770] .irq_create_mapping+0x108/0x16c
[c00000000606bcf0] [c00000000003128c] .ps3_irq_plug_setup+0x6c/0x144
[c00000000606bd90] [c000000000031514] .ps3_event_receive_port_setup+0x4c/0x68
[c00000000606be30] [c00000000053eaf0] .ps3_smp_setup_cpu+0x64/0xd4
[c00000000606bee0] [c0000000003c4380] .start_secondary+0xc4/0x370
[c00000000606bf90] [c000000000007268] .start_secondary_prolog+0x10/0x14
Instruction dump:
2f800000 409e0034 2fbf0000 409e002c 481aed61 60000000 2fa30000 419e0024
e93e80b0 80090000 2f800000 409e0014 4800000c 38800002 4bfffe75
---[ end trace 31fd0ba7d8756001 ]---
irq: irq 3 on host null mapped to virtual irq 16
irq: irq 4 on host null mapped to virtual irq 17
irq: irq 5 on host null mapped to virtual irq 18
irq: irq 6 on host null mapped to virtual irq 19
Brought up 2 CPUs
irq: irq 7 on host null mapped to virtual irq 20
irq: irq 8 on host null mapped to virtual irq 21
irq: irq 9 on host null mapped to virtual irq 22
irq: irq 10 on host null mapped to virtual irq 23
NET: Registered protocol family 16
bio: create slab at 0
SCSI subsystem initialized
Switching to clocksource timebase
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 1, 8192 bytes)
IPv4 FIB: Using LC-trie version 0.409
TCP established hash table entries: 4096 (order: 4, 65536 bytes)
TCP bind hash table entries: 4096 (order: 6, 262144 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
UDP hash table entries: 64 (order: 1, 10240 bytes)
UDP-Lite hash table entries: 64 (order: 1, 10240 bytes)
NET: Registered protocol family 1
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
irq: irq 12 on host null mapped to virtual irq 24
irq: irq 13 on host null mapped to virtual irq 25
irq: irq 14 on host null mapped to virtual irq 26
irq: irq 16 on host null mapped to virtual irq 27
irq: irq 17 on host null mapped to virtual irq 28
irq: irq 18 on host null mapped to virtual irq 29
irq: irq 20 on host null mapped to virtual irq 30
irq: irq 21 on host null mapped to virtual irq 31
irq: irq 22 on host null mapped to virtual irq 32
irq: irq 24 on host null mapped to virtual irq 33
irq: irq 25 on host null mapped to virtual irq 34
irq: irq 26 on host null mapped to virtual irq 35
irq: irq 28 on host null mapped to virtual irq 36
irq: irq 29 on host null mapped to virtual irq 37
irq: irq 30 on host null mapped to virtual irq 38
irq: irq 32 on host null mapped to virtual irq 39
irq: irq 33 on host null mapped to virtual irq 40
irq: irq 34 on host null mapped to virtual irq 41
System RAM resource 8000000 - 7ffffff cannot be added
ps3_mm_add_memory:317: add_memory failed: (-17)
irq: irq 35 on host null mapped to virtual irq 42
ps3_system_bus_match:369: dev=4.0(vuart_01), drv=4.0(ps3_av): match
irq: irq 36 on host null mapped to virtual irq 43
ps3_system_bus_match:369: dev=13.0(vuart_03), drv=13.0(ps3dm): match
HugeTLB registered 16 MB page size, pre-allocated 0 pages
VFS: Disk quotas dquot_6.5.2
Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
msgmni has been set to 203
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
io scheduler noop registered
io scheduler deadline registered
io scheduler cfq registered (default)
ps3_system_bus_match:369: dev=10.1(ioc0_01), drv=10.1(ps3fb): match
irq: irq 39 on host null mapped to virtual irq 44
Console: switching to colour frame buffer device 140x40
ps3fb ioc0_01: graphics fb0, using 9152 KiB of video memory
ps3_system_bus_match:369: dev=8.0(sb_02), drv=8.0(ps3flash): match
irq: irq 40 on host null mapped to virtual irq 45
ps3flash sb_02: accessible region 0 start 0 size 32768
ps3flash sb_02: accessible region 1 start 8 size 30712
ps3flash sb_02: accessible region 2 start 30976 size 256
ps3flash sb_02: accessible region 3 start 31232 size 1024
ps3flash sb_02: ps3stor_probe_access:132: 4 accessible regions found
ps3flash sb_02: ps3flash_probe:424: registered misc device 63
ps3disk_init:569: registered block device major 254
ps3_system_bus_match:369: dev=6.0(sb_04), drv=6.0(ps3disk): match
irq: irq 41 on host null mapped to virtual irq 46
ps3disk sb_04: accessible region 0 start 0 size 312581808
ps3disk sb_04: accessible region 1 start 524304 size 307863200
ps3disk sb_04: accessible region 2 start 308387512 size 4194296
ps3disk sb_04: ps3stor_probe_access:132: 3 accessible regions found
ps3disk sb_04: ps3da is a Hitachi HTS545016B9SA00 (152627 MiB total, 152627 MiB region)
ps3da: unknown partition table
ps3disk sb_04: ps3db is a Hitachi HTS545016B9SA00 (152627 MiB total, 150323 MiB region)
ps3db: unknown partition table
ps3disk sb_04: ps3dc is a Hitachi HTS545016B9SA00 (152627 MiB total, 2047 MiB region)
ps3dc:
brd: module loaded
loop: module loaded
ps3_system_bus_match:369: dev=7.0(sb_03), drv=7.0(ps3rom): match
irq: irq 42 on host null mapped to virtual irq 47
scsi0 : ps3rom
scsi 0:0:0:0: CD-ROM SONY PS-SYSTEM 306R 6230 PQ: 0 ANSI: 0
sr0: scsi3-mmc drive: 0x/0x cd/rw xa/form2 cdda tray
cdrom: Uniform CD-ROM driver Revision: 3.20
sr 0:0:0:0: Attached scsi CD-ROM sr0
ps3_system_bus_match:369: dev=3.0(sb_06), drv=3.0(ps3_gelic_driver): match
dma_sb_region_create_linear:989: forcing 16M pages for linear map
ps3_gelic_driver sb_06: internal vlan disabled
irq: irq 43 on host null mapped to virtual irq 48
ps3_gelic_driver sb_06: eth0: MAC addr fc:0f:e6:31:4c:01
mousedev: PS/2 mouse device common for all mice
ps3_system_bus_match:369: dev=5.0(vuart_02), drv=5.0(ps3_sys_manager): match
TCP cubic registered
NET: Registered protocol family 10
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
Registering the dns_resolver key type
Sending DHCP requests ., OK
IP-Config: Got DHCP answer from 192.168.1.1, my address is 192.168.1.139
IP-Config: Complete:
device=eth0, addr=192.168.1.139, mask=255.255.255.0, gw=192.168.1.1,
host=192.168.1.139, domain=, nis-domain=(none),
bootserver=192.168.1.1, rootserver=192.168.1.102, rootpath=
VFS: Mounted root (nfs filesystem) on device 0:13.
Freeing unused kernel memory: 228k freed
ps3av_do_pkt: ps3av_send_cmd_pkt() failed (result=-11)
ps3av_do_pkt: failed cid:10003 res:-11
eth0: no IPv6 routers present
root@192:/#

Section Headers:
[Nr] Name Type Address Offset
Size EntSize Flags Link Info Align
[ 0] NULL 0000000000000000 00000000
0000000000000000 0000000000000000 0 0 0
[ 1] .text PROGBITS c000000000000000 00010000
00000000003c3fb8 0000000000000000 AX 0 0 256
ERROMSG:
TFTP: download complete (6575232 bytes)
Transfer complete, status 0, size: 6575232 bytes
PHDR out of bounds [0x0...0xf916ac]
Failed to load kernel. Rebooting...

Offset 0 1 2 3 4 5 6 7 8 9 A B C D E F
00000000 7F 45 4C 46 02 02 01 00 00 00 00 00 00 00 00 00 ELF............
00000010 00 02 00 15 00 00 00 01 C0 00 00 00 00 00 00 00 ........?......
00000020 00 00 00 00 00 00 00 40 00 00 00 00 00 64 4B 40 .......@.....dK@
00000030 00 00 00 00 00 40 00 38 00 03 00 40 00 25 00 24 .....@.8...@.%.$
00000040 00 00 00 01 00 00 00 07 00 00 00 00 00 01 00 00 ................
00000050 C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ?..............
00000060 00 00 00 00 00 63 49 80 00 00 00 00 00 F9 16 AC .....cI�.....?

ps3-linux -> git://git.kernel.org/pub/scm/linux/kernel/git/geoff/ps3-linux.git
root@Compiler:/home/jerry/workspace/ps3dev/ps3-linux# powerpc64-linux-readelf -S ./vmlinux.stripped
There are 37 section headers, starting at offset 0x678bc0:

Section Headers:
[Nr] Name Type Address Offset
Size EntSize Flags Link Info Align
[ 0] NULL 0000000000000000 00000000
0000000000000000 0000000000000000 0 0 0
[ 1] .text PROGBITS c000000000000000 00010000
00000000003d6938 0000000000000000 AX 0 0 256
ERROMSG:
Transfer complete, status 0, size: 6788352 bytes
PHDR out of bounds [0x0...0xef799c]
Failed to load kernel. Rebooting...

WinHex Display:
Offset 0 1 2 3 4 5 6 7 8 9 A B C D E F
00000000 7F 45 4C 46 02 02 01 00 00 00 00 00 00 00 00 00 ELF............
00000010 00 02 00 15 00 00 00 01 C0 00 00 00 00 00 00 00 ........?......
00000020 00 00 00 00 00 00 00 40 00 00 00 00 00 67 8B C0 .......@.....g嬂
00000030 00 00 00 00 00 40 00 38 00 03 00 40 00 25 00 24 .....@.8...@.%.$
00000040 00 00 00 01 00 00 00 07 00 00 00 00 00 01 00 00 ................
00000050 C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ?..............
00000060 00 00 00 00 00 66 8A 00 00 00 00 00 00 EF 79 9C .....f?.....飝

root@Compiler:/home/jerry/workspace/ps3dev/petitboot/openwrt/build_dir/linux-ps3_petitboot/linux-2.6.30.10# powerpc64-linux-readelf -S vmlinux.stripped
There are 35 section headers, starting at offset 0x7ceea0:

Section Headers:
[Nr] Name Type Address Offset
Size EntSize Flags Link Info Align
[ 0] NULL 0000000000000000 00000000
0000000000000000 0000000000000000 0 0 0
[ 1] .text PROGBITS c000000000000000 00010000
000000000036e998 0000000000000000 AX 0 0 256

WinHex Display:
Offset 0 1 2 3 4 5 6 7 8 9 A B C D E F
00000000 7F 45 4C 46 02 02 01 00 00 00 00 00 00 00 00 00 ELF............
00000010 00 02 00 15 00 00 00 01 C0 00 00 00 00 00 00 00 ........?......
00000020 00 00 00 00 00 00 00 40 00 00 00 00 00 7C EE A0 .......@.....|顮
00000030 00 00 00 00 00 40 00 38 00 03 00 40 00 23 00 22 .....@.8...@.#."
00000040 00 00 00 01 00 00 00 07 00 00 00 00 00 01 00 00 ................
00000050 C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ?..............
00000060 00 00 00 00 00 7B ED 00 00 00 00 00 00 7F 08 24 .....{?......$