- B9A: read-only audit of stock LK/DT: the panel is an ST7735S 128x128 on SPI (BLSP1 QUP4, 16 MHz, mode 3, D/C GPIO116, RESET GPIO118), backlight = PM8916 MPP4 current sink 40 mA. - B9B: upstream panel-mipi-dbi with the stock init sequence as firmware; MPP4 sink via pinctrl + gpio-backlight; first light with correct colours/orientation/offsets. - B9C: fbcon (6x8, 21x16) on tty1 + getty, UART console kept, aurora-display service; cache B9C b9ce13c9 written and verified, cold boots with LTE + Wi-Fi + display. - B9L (RAM only): lk2nd second stage with an msm8916 SPI panel port shows a picture before Linux. - Sanitizer: whitelist for b8/ and b9/.
1.1 KiB
1.1 KiB
B9L-0 — lk1st chainloads an unmodified 32-bit lk2nd 23.1 (RAM only) — PASS (2026-10-03)
RESET-held power-on → lk1st fastboot (product lk1st-msm8916) → fastboot boot b9/b9l/lk2nd-23.1-stock.img
(= lk2nd-build/out/lk2nd.img 555826ea, FORCE_FASTBOOT). Nothing written.
UART (l0/uart.log):
- lk1st:
[1360] fastboot: boot→booting linux @ 0x80008000, ramdisk @ 0x82000000 (1), tags/device tree @ 0x81e00000 - 2nd LK:
welcome to lk→lk2nd_init()→Booted @ 0x80008000, r0=0x0, r1=0x0, r2=0x81e00000→Found valid DTB with 1867 bytes total→Command line from previous bootloader: lk2nd androidboot.emmc=true …→No continuous splash: MDP GDSC is not enabled→Fastboot mode was forced with compile-time flag.→fastboot: processing commands - host:
fastboot getvar product→lk2nd-msm8916,kernel: lk.
=> A second-stage 32-bit LK runs on the migrated chain (DB410c TZ + qhypstub). Basis for B9L-RAM.
(Driver note: the first identity probe after boot raced with lk1st still being enumerated; re-checked by hand.)