Files
besser/fw-analysis/best2002_fw_boot_sdio.strings.txt
test0r e580126d84 Initial: BESser umbrella for BES2600 driver mainlining
Sets up the BES2600 mainlining work tree with:

- README: project overview, hardware target, driver lineage
  (CW1200 -> Bestechnic -> arjan-vlek -> Mobian/danctnix), patch series
  status, repo map, build/deploy workflow.

- patches/: c1 patch generated by git format-patch from
  marfrit/bes2600-dkms branch bes2600/factory-request-firmware
  (checkpatch.pl --no-tree --strict: 0 errors / 0 warnings / 0 checks).

- scripts/: build-bes2600-on-ohm.sh, deploy-c1-to-ohm.sh,
  backup-ohm-kernel.sh - reproducible build + deploy + backup.

- fw-analysis/: per-blob strings.txt + fnnames.txt extracted from the
  4 firmware blobs pulled from ohm 2026-04-21. Source binaries NOT
  committed (Bestechnic-proprietary).

- notes/: observed-bugs.md (4 known bug surfaces with file:line +
  patch-series cross-reference), source-map.md (every public driver
  source variant + their canonical role).

Companion work tree: marfrit/bes2600-dkms (Mobian DKMS fork) at
git.reauktion.de.

Signed-off-by: Markus Fritsche <fritsche.markus@gmail.com>
2026-04-22 10:13:23 +02:00

673 lines
13 KiB
Plaintext

------
0123456789abcdef
0123456789ABCDEF
0#2J%I
#0a2isa3isi
0c%eee
+0cIF@F
+0F9F
0`!F(F
0F*F!F
0HM\hHNEO
0iFKqi
0"IIKH
)#0JC 1I
`0K3J@F
;0; +N
%+16<AGLQUZ^bfjmpsuxz{}~~
1`bQK`
1@FYCIK
@@@@@@,1 SEQ_STATUS_IDLE
1YbZvYjA
2002, patch_wifi_testMode,cfg.test_rx_count:0x%08x
2002, patch_wifi_testMode,*rom_rx_signal_count:0x%08x
2F9F F
2F9F(F
2F;F0F9F
2F!F(F
2F)F F
#2FIF@F
2g freq_index:%d dpd_cali_num:%d find %d dB+-0.2db compression point success:%d
2?&+hAI
"2K F)F
@@@@@@,2 SEQ_STATUS_IDLE
30I0K1H
^36J7ID
3AJEID
3F:Fx!
3=JC AI
#3p F@K
3tKBFIF
3yMDqy
@40/R.
&#4J5ID
5%behn
6 7!H(I):";#
6ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
7KAF
87 F%K
9*F#nMF
abandon=%d.
abort error:%x,%x
aciCa#z
A#C )J)I
ahFB"h
AJm H"
alloc wakeup_timer fail
AOLOMPO
, APSR=%c%c%c%c%c
### ASSERT @ 0x%08X ###
assertion "%s" failed: file "%s", line %d%s%s
aXdYcXaY`
aYaYi!
BAB_TxFrameComplete()
BAB_TxFrameComplete()- BAB_TASK__PROCESS_TX_ADDBA_REQ_FRAME
BAB_TxFrameComplete()- BAB_TASK__SEND_BAR_FRAME
Bad func=%d for IOMUX pin=%d
Bad GPIO pin %u (should < %u)
bB`BhB
BeaconWindow=%d BeaconWindowTime=%d BeaconWindowAdj=%d
(BFAR valid)
BFKFPFYF
BG test, os_time= %d , sleep= %d
b`"i"`
B@J@Z@
.bqb{csbr
BTC is power down. CTRL:0x%x
bt msg len error. %u
(BusFault)
(BusFault during floating-point lazy state preservation)
(BusFault on stacking for exception entry)
(BusFault on unstacking for a return from exception)
bycxbpbz
bzc{bsbybrbxcpbq
%c %08X: %08X
C`3`EA
#ca#ac`8
###### CalibCountSaved= %d,CalibCounterRegStartVal= %d
cali_temperature:%d, rf_version:%d
can not add (%f), but keep running (+0.5)!
cc`chZ
CF*cc'c
CF:F!j(F
``ch#a
checksum error. 0x%x 0x%x
#c`#i#`
#c`#j#
c@JAID
c<JC =I
C ~J~I
close_usb_test
CPU freq: %u
cs`shC
Cx0;KC
Cx"`I`H
%,CYMO
D9FXh|K
(Data access violation)
(Data Watchpoint Match)
DC CAL ERROR!!!![%s]LINE%d------freq_index=%d
DC_cali_new_2g
DC_cali_new_5g_v2
DebugEvent :
####DEBUG: FastPsmEnabled=%d, UapsdFlags=0x%x,bcn_schedule_count=%d
####DEBUG: PsmState=%d, MgmtMode=%d,TxOutstanding=%d
####DEBUG: RxInProgressFlags=%d, SwitchingChannel=%d,PowerBusyEvents:0x%08x
Dec 27 2023 11:55:58 8125e20be:best2002_fw_boot
DelInterfaceFromChannel. ChanNum:%d, iner:%d
d F"K!s
DFSR =%08X
DFWFLF
dig_band_switch, band: %d
(Divide by zero UsageFault)
DMA chan not enabled: inst=%u hwch=%u
DMA not configured on UART %d
DMA not supported on UART %d
dMeN+h2h
DO8F"F)F
DOK&D@F
dpd_2003_config_new_2G
dpd_2003_config_new_5G
dpd_2003_rx_dc_cali_5g ()<
dpd_2003_rx_dc_cali_5g ()>
dpd_cali done !
dpd_cali faild !
dpd_cali_num:%d find final 2.5dB compression point success:%d
dpd_cali start %d %d
dpd_data_free
dpd_data_gen
dpd_write_table
DP*I*L
dQk!@Qc
#D UJWI
`eak/`
##### EbmMonitorHandler tx=%d cnt=%d reset=%d
EBM WORKAROUND INVOKED!!
efgEFG
e*!*!***G*I*I***K*M*M***O*Q*Q***S*U*U***W*Y*Y****[*]*]***_*a*a***c
#{e+h9e
eJfIB
!E ]J]I
eMx"1FdHl
------ Enter %s ------
entery downlaod process, close DOWNLOAD_TRACE
Ep)h#hQ
, EPSR=%08X, IPSR=%03X
Epta_bt_config dur %d
ERROR29!!!!!
error, read battery timeout0
error, read battery timeout1
error, read temperature timeout0. ret:%d
error, read temperature timeout1
ERROR: st->gin_mini must eq to 1.0
(Escalation HardFault)
### EXCEPTION ###
, ExceptionNumber=D'%d
, EXC_RETURN=%08X
------ Exit %s ------
#`` F#
*# #@F
F($,N-K
+F0F9F
F0F9F
F0F9FS
F0F"F9F+F
#)F1H
! F1K
&#F2FC
!F3F*F
F3F]`i`
!(F3`#p
+"FAFO
Failed to get DMA channel
Failed to get dst periph: %d
Failed to get src periph: %d
Failed to open pmu
FaultCause :
FaultInfo :
FBFcaQ
FBFKFPFYF
FBFKFQ
!F*F0F
"F)F0F
#:F!F0F
*F!F0F
+*F!F8F
)F,Ff~
"F)F@F
#F"F!F
)F"F@F
;F F)F
@F*F!F
F F)F
[F"F)F0F
+F*F)F2H
#F"F!F9H
F F)FD
"F+F F)F
;"F+F F)F
"F+F@FIF
F F)FO
F F)FS
!F#F\H
;F@FIF
@F"FIF
F@FIF
F@FIFc
!F#FQH
.F hah
[F;IC
*FIF0F
#"FIF8F
final_pa_i_cali_wifi_0x34: 0x%x
F+J+IB
:(F+J+K
{F+`n`@#
FPFBFYFKF
FPF"FYF+F
FPFYF
FPFYFC
#FP!HCS
fpRead fail!
FRF[F0F9F
FRF[FPFYF
FRF[FQ
!FSF(F
&Fsx2x
[Func %d io %d] is unsupported by pin_func_map. Check it or use reg assignment like iomux_set_uart0.
, function:
(Function %d matched)
)Fx` F
)Fx` F
+FYO hah
:@:F<@Z
FzAF:F
fZf]f\f
!)@:F,@zj/@\G1@|
g0F9F
G0"LILH
G1K!F F
G3h 3ca
G9F(FvK
G@"AFMH
gain_am[400]= %d
gain_am_max= %d
g_dc_iq_rst_u32_5g[0][0]:0x%08x, [1][0]:0x%08x
g_dc_iq_rst_u32_5g[0][0]:0x%08x, [1][0]:0x%08x, data_addr:%p
gen_B1_data end
gen_B1_data start
GF#2F9F F
g F)F2F;F
gfff|
gfffh
G I!J h
GIJ(`II
G[J(`[I
G[J\I(`
G\J\I(`
G\J]I(`
G]J]I(`
G]J^I(`
G^J^I(`
G{J{I(`
G{J|I(`
G|J|I(`
G|J}I(`
G}J}I(`
G}J~I(`
G~J~I(`
GJJ(`JI
G#K[ 3
GKF!0F
GKJ(`KI
G~K~OS
GLJ(`LI
GLK!F F
GMJ(`MI
GNJ(`NI
GOJ(`OI
GPJ(`PI
GqJqI(`
GqJrI(`
GrJrI(`
GrJsI(`
GsJsI(`
GsJtI(`
GtJtI(`
GtJuI(`
GuJuI(`
GuJvI(`
GvJvI(`
GvJwI(`
GwJwI(`
GwJxI(`
GxJxI(`
GxJyI(`
GyJyI(`
GyJzI(`
GzJ{I(`
GzJzI(`
#h1F8F
hal_gpadc_adc2volt_calib
hal_iomux_cfg_wifi_switch
hal_iomux_set_sdio_voltage
hal_pm_notif_register
hal_sdio_device_irq_handler
hal_sdio_device_recv
(Halted)
(HardFault)
#h+D#`
HF9F N
H#F"F!F
H F%K
:h+FrC
h[h!DS`
h{iZ@O
hJd!ZH
hook_post_sys_init rom_hook_cfg->rom_run_flag=0x%08x
hook_wifidrv_rfpll_en(%d) pm=%d os_time=%d
:hVLVI
HWTIMER-ALLOC: Invalid state: %d
HWTIMER collapsed: irq occurred too early
HWTIMER collapsed: irq when active is null
HWTIMER irq occurred early: old active timer might be deleted? %u
HWTIMER irq when active is null: might be deleted? %u
HWTIMER-START collapsed: cur=%u active=%u
ICSR =%08X, AIRCR=%08X, SCR =%08X, CCR =%08X
I+FC "F
#i*FIF@F
IFxa@F
IFxa@F
init wakeup gpio:%x
(Instruction access violation)
(Instruction bus error)
Invalid AUDMA chan: %u
Invalid baud param: %d
Invalid data bits param: %d
Invalid DMA inst: %u
Invalid DMA periph: %d
Invalid DMA policy: %d
Invalid flow control param: %d
Invalid parity param: %d
(Invalid PC load by EXC_RETURN UsageFault)
Invalid SPI RX bits: %d
Invalid SPI RX FRAME bits: %d
Invalid SPI TX bits: %d
(Invalid state UsageFault)
Invalid stop bits param: %d
Invalid UART ID: %d
IPSR():0x%x, PRIMASK:0x%x, BASEPRI:0x%x
;iq_2g_cfg_rx_mem_dump
iq_5g_cfg_rx_mem_dump
IQ CAL ERROR!!!![%s]LINE%d------freq_index=%d
iq_cali_data_free_2g
iq_cali_data_free_5g
iq_cali_data_gen_2g
iq_cali_data_gen_5g
iq_cali_new_5g_v2
irq: gpio %d, val %d
ISPI: Bad bits cfg
ISPI: SPI cs bad: %d
IUUUUU
]##JC $I
JF!F(F
`^J_I(`
\J\IC $h
J! Sh#
{@K@C@
KcpG'(
KFJFIF
K]h,C\`8
KIZ`C ;FZF
K!J"H"I
>!+K+N
K`pG'(
KXh@BpG
?/lj,D
*LjF)F
%L%J%h
%"L#KT
LMC_BA_AddActionFrameToTaskList()
LQ.3.13
LR.3.2#
m32J3ID
malloc B0_im fail
malloc B0_re fail
malloc B1_imag fail
malloc B1_real fail
malloc I_tone_filt_imag fail
malloc I_tone_filt_real fail
malloc origin_imag fail
malloc origin_real fail
malloc tx2tones fail
malloc txsingletone fail
malloc xx fail
(MemFault)
(MemFault during floating-point lazy state preservation)
(MemFault on stacking for exception entry)
(MemFault on unstacking for a return from exception)
METAL_ID: %d
,M,I+h hd
MMFAR=%08X, BFAR =%08X
(MMFAR valid)
/mnt/workspace/workspace/GCC-10-pipeline/jenkins-GCC-10-pipeline-338_20211018_1634516203/src/newlib/newlib/libc/stdlib/rand.c
../../mod_platform/int/wifi_patch.c
";M<O<I
(Monitor)
MSP =%08X, PSP =%08X
MSPLIM=%08X, PSPLIM=%08X
MYFeDO
NF F*F
NHOKOI
+N+M3h+H
(NMI)
(No coprocessor UsageFault)
(NoException)
(None)
non udp ping/pong, wake up host.
o3.JC /I
O(#kC0h
&O&M;h
p3p*FO
PAC_FiqHandler, AckFail, queue: %d
PAC_Fiq PAC_NTD_STATUS__RESP_RX_STORED
PAC_ProcessEbmIntContenAckFail()
pa_i_cali_wifi_0x34: 0x%x
PAS_GetEbmTxRequests(), pTxRequest->Flags: 0x%08x, pTxRequest->RateIndex: %d,TxBaAgreementNum=%d
PAS_GetEbmTxRequests(), SeqQueueIdleStatus: 0x%04x, sPasGlobal.AggrTxInProgress: %d
PAS_GetEbmTxRequests(), TxBaAgreementNum].State=%d,BATxTidMask=0x%x
PAS_SetTsfTimerOnStamp, %d, TSF=0x%08x
patch_config_dig_gain_table,index: %d, gain: %d,MaxPwrForChan: %d
patch_HI_DefaultMsgHandler(): (Id=0x%x, Len=%d)
patch_HI_Set_Coex_Params, hw_epta_enable:0x%x, new_run_flag:0x%x, gEptaBypass: %d
patch_LMAC_Req_PS_PowerMgmtMode() - Mode %x, PowerBusyEvents:0x%08x
patch_LMAC_Req_SYN_SetBssParams(), 0x%08x,0x%08x
patch_LMAC_Req_SYN_SetBssParams(), 0x%08x,0x%08x,0x%08x
patch_LMC_AddInterfaceToChannel. ChanNum:%d, iner:%d
patch_LPO_calib_IRQHandler, CalibCountSaved=%d, CalibCounterRegStartVal=%d
patch_PHY_RF_TX_TurnOffAuxAdc
&&& patch_PS_BeaconWindowTimerHandler(),BeaconLostCount=%d, rom_OS_Time=%u tsf:%u
@@@@ patch: switchchannel gPhyTemData.iChnlID: %d, eRadioBand_cfg: %d,current_band: %d
patch test mode, run_test_cmd= %d ,band= %d!
patch_TX_Generate_Backoff_Slots retry timeout. val0x%x
@@@@ patch: wifi_low_power_cfg_qfn_1p3v band:%d
@@@@ patch: wifi_low_power_cfg_qfn_1p8v band:%d
path_PHY_RF_TX_TurnOnAuxAdc
+pb)F F
+pb)F F
PC =%08X
pcS`pG
pcs`sh#
#pcYFPF
pG pG
pGpGpGp
pGY(O
p;hb|Yx
P HD*K
"pK F)F
pLpKqJqHrI
pmu_temperature_adc2temp_calib
Possible Backtrace:
power_compensate_by_temperature_2002
(Precise data bus error)
PRIMASK =%02X, FAULTMASK =%02X, BASEPRI =%02X, CONTROL =%02X
Q69!D@
QjAF:F
Qkkbal
R12=%08X, SP =%08X, LR =%08X
R%-2d=%08X, R%-2d=%08X, R%-2d=%08X, R%-2d=%08X
r5I(Da
ramrun_test_main
rand_filt_gen
RaNHD3h
receive a tcp ack
recover_wifi_cali_result
recv a normal tcp pkt1
recv a normal tcp pkt2
recv a tcp klv ack,rcv_time:%u ackno:%u seq:%u
recv a udp ping
recv pong, time %u.
REENT malloc succeeded
rELFOFN
@@@@@@@ retry 1, 0x%x
@@@@@@@ retry 2
@@@@@@@ retry 3, 0x%x
@@@@@@@ retry 4
RF[FPFYF
#RFIF8F
R!h$Hi
R!h0Hi
R/h+`2
R!h2Hi
R!h Hi
R!h"Hi
R!h&Hi
R!h(Hi
R!h*Hi
R!h,Hi
R!h.Hi
rx buf is NULL. buf:%p, len:%d
rx buf len %d > %d
RX/TX-DMA configured on SPI %d
%s ()<
%s ()>
s3fsh#
saJaIC MF
save_wifi_cali_result done, size:%d
%s %d band(0:2.4;1:5):%d tbl_idx(0:20;1:40):%d
%s:%d, error: rx length is 0
%s:%d, no rx buf
%s:%d, rx buf is NULL
%s:%d, rx buf len %d > %d
%s:%d, sdio_callback->hal_sdio_device_rxtx_start is NULL
(SecureFault)
%s efuse:%d/%d LV=%d, HV=%d, 1000*Slope=%d
%s efuse:%d/%d LV=%d, HV=%d, Slope:%d Intcpt:%d
%s: handler already registered: user=%d handler=%p existedUser=%d
%s: handler cannot be NULL: user=%d
%s: handler list full: user=%d handler=%p curCnt=%u
SHCSR=%08X, CFSR =%08X, HFSR =%08X, AFSR =%08X
%s L%d cali_temperature:%d
%s L%d rfpll temperature compensation error: timeout.
Sleep exit: schedule_evt%x pwr_busy_evt:%x
Sleep failed, event: 0x%08x pwr_busy:0x%08x
sleep terminate, transq:%d sleep_flag:%d
Sleep Timer:0x%08x callback:0x%08x
%s line%d ()<
%s line%d ()>
%s Line%d ()<
%s Line%d ()>
%s Line%d 0x5b:0x%04x, 0x5c:0x%04x
%s Line%d 2g dc CaliTime:%dms
%s Line%d 2g iq CaliTime:%dms
%s Line%d 2g iq data gen CaliTime:%dms
%s Line%d 5g dc CaliTime:%dms
%s Line%d 5g iq CaliTime:%dms
%s Line%d 5g iq data gen CaliTime:%dms
%s Line%d abs_centigrade:%d
%s Line%d band(0:2g,1:5g,2:dual):%d; mode(0:normal, 1:test):%d
%s Line%d cali_flag_one:0x%08x
%s Line%d cali_num:%d compression_dB:%d
%s Line%d can not add (%d), but keep running (+0.5)!
%s Line%d can not reduce (%d), but keep running (-0.5)!
%s Line%d can not reduce (%f), but keep running (-0.5)!
%s Line%d ch[%d, %d] 0x11d:0x%x
%s Line%d ch_id:%d, 0x11d:0x%04x
%s Line%d CpuFreq:%u, TotalCaliTime:%dms
%s Line%d dac CaliTime:%dms
%s Line%d dac:%d; dc:%d,%d; iq:%d,%d; dpd:%d,%d; rc:%d;
%s Line%d error: force continue!
%s Line%d error: recover cali data faild.
%s Line%d error:rx timeout
%s Line%d freq_index:%d, 2g dpd+dc+iq CaliTime:%dms
%s Line%d freq_index:%d, 5g dpd+dc+iq CaliTime:%dms
%s Line%d g_rf_sw_io_select:%d
%s Line%d g_rf_sw_io_select:%d, metal_id:%d
%s Line%d g_wf_cali_crc:%lu, crc:%lu
%s Line%d malloc tx2rand fail
%s Line%d malloc txsingletone fail
%s Line%d no need repeatable cali.
%s Line%d protect dpd table.
%s Line%d skip cali, freq_index:%d
%s Line%d skip wifi cali success.
%s Line%d temperature(%d, %d]
%s Line%d temperature(%d, %d] 0x11d:0x%x
%s Line%d WAFER_PACKAGE_2002_SELECT(0:wlcsp; 1:qfn; 3:fanout;):%d
%s Line%d warning: can not skip cali.
%s Line%d wifi reset
%s line%d WIFI_RF_SW_IO_SELECT:%d
%s: patch_2001_en_flag=0x%x relocation_marker=0x%x: %d
SPIPHY: Bad bits cfg
SPIPHY: SPI cs bad: %d
SPI rate too large: %u
SPI rate too small: %u
%s, recover wifi cali result
%s, rxbuf_cnt mismatch:%d, %d
sSDJEIC
%s: Set RT irq in hal_uart_dma_recv_mask... to avoid data lost
Stack:
(Stack overflow UsageFault)
*** stack smashing detected ***: terminated
%s temperature_25=%d
STE-P2P
%s, volt error. %u
#sv#z#
%s, wifi cali result crc error. addr:%p
sysfreq =%d,0x40000078= 0x%08x
SZBZA*`
T2YF F
@T.4'F
test_BG_timerHandler,PowerBusyEvents:0x%08x
The channel is not right,please check again
, ThreadMode
"tK F)F
tlC O H
tpEC;h+D
TRACE-%u: Wait memsc timeout
ts_C#h
TSF ProbeResponder = FALSE
TX-DMA configured on SPI %d
uCuJ}I
(Unaligned access UsageFault)
(Undefined instruction UsageFault)
(UsageFault)
usbphy open fail
?UUUUUU
V3&J+IC
=! V=a
vbat:reg 0x%x, vbat %d
V?LUUUUU
VUUU[F
wakeup host,reason=%d
wakeup_timer_handler. gpio:%u
wifi_agc_config
wifi_cali
wifi_cali_dac_v2
wifi_cali_data_crc_check
wifi_cali_data_crc_update
wifi cali result 0x%08x crc:0x%08x, len:%d.
wifi_cp_reset_skip_cali
wifi_deinit
wifi_dpd_boot_low_power_en
wifidrv_rf_init....
wifi_init
wifi_iomux_cfg_switch
wifi_iq_cali_2g_v2
wifi_recover_cali_data
wifi_rfpll_temperature_compensation
wifi_rf_switch_band(0:2g 1:5g),old: %d, new: %d
wifi_switch_freq, freq: %d
wifi_switch_freq, write cali_channel: %d, channel: %d
wifi_test patch start=0x%08x, __wifi_patch_code_end=0x%08x
wifi_test patch! wifi_sysHook->system_init=%p, patch_offset=%d
wrong udp length!
XBXApG
#`x#(H
x%hh`)pj
`]xh#kC
xJyIC
XJZIE
XPSR=%08X
XsC 2J3I
Y@1@K@a
YF8FdK
yF9K@"
YF F[K
yF!K@"
"YK F)F
y@Y@A@
+`!y`yj
z=7=7===N=P=P===R=T=T===V=X=X
@ZAF:F
zD 3J3I
zD iJnI
zE \J\I
ZFd!PF
'ZF)F0F
ZF)F0F
ZhC CFEI
zIF@F(
zJ{IB
=@zj?@L~@@\GA@l
~~}{zxuspmjfb^ZUQLGA<61+%