ok guys I got this output from the precompiled metldrpwn:
Code:
+ insmod ./metldrpwn.ko
+ cat metldr
+ sleep 1
+ cat appldr-metldrexploit350.self
+ sleep 2
+ echo 1
+ sleep 5
+ cat /proc/metldrpwn/debug
PPE id (0x0000000000000001) VAS id (0x0000000000000002)
lv1_construct_logical_spe (0x00000000)
SPE id (0x0000000000000033)
lv1_enable_logical_spe (0x00000000)
lv1_set_spe_interrupt_mask(0) (0x00000000)
lv1_set_spe_interrupt_mask(1) (0x00000000)
lv1_set_spe_interrupt_mask(2) (0x00000000)
lv1_set_spe_privilege_state_area_1_register (0x00000000)
ea (0xc00000000d5d0000) esid (0xc000000008000000) vsid (0x0000408f92c94500)
lv1_get_spe_interrupt_status(0) (0x00000000)
lv1_get_spe_interrupt_status(1) (0x00000000)
lv1_get_spe_interrupt_status(2) (0x00000000)
sleep
lv1_get_spe_interrupt_status(0) (0x00000000)
lv1_get_spe_interrupt_status(1) (0x00000000)
lv1_get_spe_interrupt_status(2) (0x00000000)
out interrupt mbox (0x0000000000000001)
lv1_clear_spe_interrupt_status(2) (0x00000000)
transferring EID0, ldr args and revoke list to LS
waiting until MFC transfers are finished
MFC transfers done
out mbox (0x00000001)
problem status (0x00000089)
lv1_destruct_logical_spe (0x00000000)
I got a 256KB dump and the app CEX2DEX by gunner54 say that I created successfully my DEX flash. I made 2 dump of my actual flash with 2 different programs (dump_flash.pkg and memdump) and I got the same output.
how can I know if the metldrpwn dump is ok and I'm not going to brick?!?
tnx!