[project]Port android to meizu M8

Guys, if i well understood the pictures are fakes.

banxian, i can understand the loss of interest cause you still have a life next to it

I kniw its lot of work, and im am investigatind as much smaung driver i can but we dont get any fast progress here...
the problem is that we have reaches a point from where progress can only by achieved by much try and error and investigation things....
and we are right now two developers as i see (dont saw bill for a while...) and now christmas holidays are on the doors and time for the famaly will be taken so dont expect fast pogress here... im working onnit but yes... it will take time, if it can be done

hi r3wDy, you are right and i do think we are all aware that for the current needed 'drivers' we would need more dev´s or more time

btw what kernel from git can run without major changes on the m8?

I got some 1.8mm zipper pins today.
I tired to debug by printk a week ago.

Hi Banxian,
so you will be trying to debug using jtag then?

Just received my replacement for m8, got an m8se instead, so now the pain starts all over again. Will see how to connect serial debug first cause if i am right according loonix the pins do not match on se like on fe ?

but the experiments will not be for immediatly since i am having a very busy time now.

Originally Posted by evow04

Hi Banxian,
so you will be trying to debug using jtag then?

Just received my replacement for m8, got an m8se instead, so now the pain starts all over again. Will see how to connect serial debug first cause if i am right according loonix the pins do not match on se like on fe ?

but the experiments will not be for immediatly since i am having a very busy time now.

Good for you, you finally have it!!!!!!!

but the experiments will not be for immediatly since i am having a very busy time now.

As i said i think we will be back in full motion in the next year
Im very busy right now too and as said such things like family and christmas and stuff exists too

Wing Linux

perhaps there are good people which can help us?

Originally Posted by BPM

people which can help us?

thanks for the link bpm! I will have a look onto it.

back in full motion in the next year

You´re right, end of the year means lots of work and family events :-)

you finally have it!!!!!!!

indeed and i am happy with it except.. i really hoped the wince was more stable since 3 months ago, seems not .. damn thing crashed twice allready

@Banxian & r3wdy;
since it is been a while i would need some help to get started again, so few questions;

Is android still getting loaded after tinyloader by using busybox to load the linux kernel that then loads the rootfs from the /disk?
Or is Tiny loader loading the kernel directly?
Reason why i am asking this is cause i think it is about time that we can use some disk space.

For now something loads the fysical drive to find mdroid.img, but can the mounting system detects virtual drives aka partitions? if so we should try to devide the /disk in 2 partitions where we can place the (extracted) rootfs & wince stuff... this way applications will be usefull?
Cause loading the disk to load the img to load a the same partition will provide issue´s..
I wanted to try myself to repartition the /disk but i realized that if i can not use the serial debug port i could get stuck and would need to request a new replacement and that is a no-no for me right now

I also was wondering if we could load haret (you know this right?) by using tinyloader, this to use the Reverse Engineering Tools ?

Next question is where i could find the images used by tinyloader since my mother language is dutch and i would prefer to modify so it is been written in dutch instead of english

And does anyone have feedback allready on serial/jtag on M8se?

Tinyloader loads the linux kernel direct by copieng it to ram and jumping to it.
Android is then startet from the init.rc file.

Now that you have a m8 again i can send you finally the seiral plug i have on my desk for weeks :P

erm okay...
as we have linux running, we dont need any debug tools like haret and stuff.
i personaly use bills m8 kernel for development of drivers and stuff becaus there i can use nfsroot and control the m8 from telnet which is the best way i think.
(personal reminder: take a look at the partially ported kernel sources form banxian so we can get 30 or 32 kernel running)

To the images: i think tinyloder draws this things for itself so you would need to change the sourcecode to change the language. i hope you are familar with c/c++

and finally (just to not loose the target)

We have android running but no hardware support.
We know what baseband and wlan chip is used.
i personally think the a phone which cant be used to phone is useless so i concentrated on the baseband chip.
I think the chip must be enabled somehow, because under linux i cant find a answering modem on com1. So i looked at some samsung kernels to see how it is done but im very unsure. I didnt found anything. Without hw documentation its very hard to find such a (maybe) gpio setting.
In these directions we need to do the investigations.

Thanks for clearing that out r3wdy!

Problem is that still no one confirmed the serial port on m8SE
So telnet is not an option.. and it is the reason why i am a bit scarred to re-partition myself cause if it fails i am screwed: Can not use eboot menu to recover the movinand.
But maybe if i can´t hold myself anymore i will try to repartition /disk.

About the baseband, did you check the git for android source, There are some examples on baseband?
And about the baseband, that was why i reffered to haret, people over at XDA forums seems to use it with lots of succes to build a baseband /... 'driver'.

so we can get 30 or 32 kernel running

Do you know on what kernel android 2.0 is based?

hope you are familar with c/c++

it is been a long while, so i wil take slow start :-) That was why i will be focusing in the beginning on the easier ports to get back on track ;-)

No i didnt had a look on android2.
As said imn focused only on the sgold2 chip right now.
And yes i had a look at the ril implemetations in android but these are useless without a confirmation that the sgold2 is on and answering.

hum right now im kind of out of ideas how to find the way to enable this thing.... its just too much to try to find it through disassembeling the windows codes because thats that much code...

I will try to change the com port in my windows registry and start the phone connected to serial line, i know that the phone cant start with the wrong com port (i think because i needs the radio to be initialized)
maybe i can see something through the error output...

another interesting thing i found is the nkdbgprintfw function which prints plenty of debug messages, but i think not to the serial port. There seems to be a tool in windowcs6 package which can dump these messages. this could help us too i will have a look at it

is there anything in the m8 sdk to talk to the modem?
perhaps we can find infos inside the sdk?
i did not find english docu for the sdk so it is hard for me to find anything with it.

I just went through the mux710.dll code which inits the com ports and i could restore this informations:

Handle to comport:
MOV r3 sp,#0x414+arg_0
add R3 0x28

CreateFile
GetCommState
<init comstate struct>
SetCommState
EscapeCommFunction 5 (Sends the DTR (data-terminal-ready) signal.)
SetCommMask E1 (1110 0001) EV_ERR | EV_BREAK | EV_RLSD | EV_RXCHAR
memset
SetCommTimeouts

Call ResetRadio (function)

sprintf AT+IPR=230400
EscapeCommFunction 4 (Clears the RTS (request-to-send) signal.)
sleep 0x64
EscapeCommFunction 3 (Sends the RTS (request-to-send) signal)
strlen
WriteFile (At command -> com)

Sleep 0x2bc
GetCommState
(mov r3 38400) seems baudrate setting
SetCommState
Sleep 0x3E8

sprintf AT+XPOW=4,200,0
EscapeCommFunction 4 (Clears the RTS (request-to-send) signal.)
sleep 0x64
EscapeCommFunction 3 (Sends the RTS (request-to-send) signal)
strlen
WriteFile (AT->com)

This is what is done to init the modem.
we can clearly see how to send at commands to the chip. Its done by clear rts line for 0x64 and then set it again. Then the command is written to the port.
The ResetRadio function seems to be realtively os independant as there are very few call to imported funcions, so maybe one can ript the code out of the dll. I think in there ineresting stuff is done. Another intresting thing is the CommTimeOut structure and the ComState Structure which we should investigate.

The first at command is sent after the reset radio so if we can get infos to switch it on, i think its in there.
But maybe just sending AT commands the right way might help.

I will investigate further

Just want to say you people are doing a great job here!! Would be so awsome if the meizu community will make this work.
Don't think I can help at the moment because my programmer skils are very limited.

Keep up the good work!

Im just here to say that im still working on this
New year and christmas is over and i will get back to active development soon

good luck dude
great work

Hello, help with where to get Dualboot package: 8gb to firmware 0,9,5,186 or'll show what to do?

sania,
this should help you..
(it was listed in post 1 aswell)

Originally Posted by evow04

[HowTo] - create your own dualboot package (with needed tools).

i will get back to active development soon

take your time and a happy 2010 to all of you ;-)

good luck to all who are helping to make this happen android is cool

btw im on my meizu