Re: [flashrom] Write protection problem on PEGATRON IPIEL-LA3 motherboard of HP Pro 3010

[Smoluszek]

And output from the most recent flashrom version:

sudo flashrom -p internal -V -c W25X80 -w eu35.17.1.rom
flashrom v0.9.7-r1854 on Linux 3.13.0-39-generic (x86_64)
flashrom is free software, get the source code at http://www.flashrom.org

flashrom was built with libpci 3.2.1, GCC 4.8.2, little endian
Command line (7 args): flashrom -p internal -V -c W25X80 -w eu35.17.1.rom
Calibrating delay loop... OS timer resolution is 1 usecs, 1289M loops per
second, 10 myus = 11 us, 100 myus = 100 us, 1000 myus = 1002 us, 10000 myus
= 10000 us, 4 myus = 5 us, OK.
Initializing internal programmer
No coreboot table found.
Using Internal DMI decoder.
DMI string chassis-type: "Desktop"
DMI string system-manufacturer: "Hewlett-Packard"
DMI string system-product-name: "                                "
DMI string system-version: "                                "
DMI string baseboard-manufacturer: "PEGATRON CORPORATION"
DMI string baseboard-product-name: "2A94"
DMI string baseboard-version: "1.03"
Found chipset "Intel ICH10" with PCI ID 8086:3a18. Enabling flash write...
Root Complex Register Block address = 0xfed1c000
GCS = 0x461: BIOS Interface Lock-Down: enabled, Boot BIOS Straps: 0x1 (SPI)
Top Swap: not enabled
0xfff80000/0xffb80000 FWH IDSEL: 0x0
0xfff00000/0xffb00000 FWH IDSEL: 0x0
0xffe80000/0xffa80000 FWH IDSEL: 0x1
0xffe00000/0xffa00000 FWH IDSEL: 0x1
0xffd80000/0xff980000 FWH IDSEL: 0x2
0xffd00000/0xff900000 FWH IDSEL: 0x2
0xffc80000/0xff880000 FWH IDSEL: 0x3
0xffc00000/0xff800000 FWH IDSEL: 0x3
0xff700000/0xff300000 FWH IDSEL: 0x4
0xff600000/0xff200000 FWH IDSEL: 0x5
0xff500000/0xff100000 FWH IDSEL: 0x6
0xff400000/0xff000000 FWH IDSEL: 0x7
0xfff80000/0xffb80000 FWH decode enabled
0xfff00000/0xffb00000 FWH decode enabled
0xffe80000/0xffa80000 FWH decode disabled
0xffe00000/0xffa00000 FWH decode disabled
0xffd80000/0xff980000 FWH decode disabled
0xffd00000/0xff900000 FWH decode disabled
0xffc80000/0xff880000 FWH decode disabled
0xffc00000/0xff800000 FWH decode disabled
0xff700000/0xff300000 FWH decode disabled
0xff600000/0xff200000 FWH decode disabled
0xff500000/0xff100000 FWH decode disabled
0xff400000/0xff000000 FWH decode disabled
Maximum FWH chip size: 0x100000 bytes
SPI Read Configuration: prefetching disabled, caching enabled,
BIOS_CNTL = 0x02: BIOS Lock Enable: enabled, BIOS Write Enable: disabled
Warning: Setting Bios Control at 0xdc from 0x02 to 0x01 failed.
New value is 0x02.
SPIBAR = 0x00007fd97b4b4000 + 0x3800
0x04: 0xa008 (HSFS)
HSFS: FDONE=0, FCERR=0, AEL=0, BERASE=1, SCIP=0, FDOPSS=1, FDV=0, FLOCKDN=1
Warning: SPI Configuration Lockdown activated.
Reading OPCODES... done
0x90: 0x04 (SSFS)
SSFS: SCIP=0, FDONE=1, FCERR=0, AEL=0
0x91: 0x007f10 (SSFC)
SSFC: SCGO=0, ACS=0, SPOP=0, COP=1, DBC=63, SME=0, SCF=0
0x94: 0x0006     (PREOP)
0x96: 0x543b     (OPTYPE)
0x98: 0x05200302 (OPMENU)
0x9C: 0x0006019f (OPMENU+4)
PROBLEMS, continuing anyway
The following protocols are supported: FWH, SPI.
Probing for Winbond W25X80, 1024 kB: probe_spi_rdid_generic: id1 0xef, id2
0x3014
Found Winbond flash chip "W25X80" (1024 kB, SPI) mapped at physical address
0x00000000fff00000.
Chip status register is 0x02.
Flash image seems to be a legacy BIOS. Disabling coreboot-related checks.
Reading old flash chip contents... done.
Erasing and writing flash chip... Trying erase function 0...
0x000000-0x000fff:ETransaction error!
SSFS: SCIP=0, FDONE=1, FCERR=1, AEL=0
SSFC: SCGO=0, ACS=1, SPOP=0, COP=2, DBC=0, SME=0, SCF=0
Running OPCODE 0x20 failed at address 0x000000 (payload length was 0).
spi_block_erase_20 failed during command execution at address 0x0
Reading current flash chip contents... done. Looking for another erase
function.
Trying erase function 1... 0x000000-0x00ffff:EInvalid OPCODE 0xd8, will not
execute.
spi_block_erase_d8 failed during command execution at address 0x0
Reading current flash chip contents... done. Looking for another erase
function.
Trying erase function 2... 0x000000-0x0fffff:EInvalid OPCODE 0xc7, will not
execute.
spi_chip_erase_c7 failed during command execution
Looking for another erase function.
No usable erase functions left.
FAILED!
Uh oh. Erase/write failed.Checking if anything has changed.
Reading current flash chip contents... done.
Good, writing to the flash chip apparently didn't do anything.
This means we have to add special support for your board, programmer or
flash
chip. Please report this on IRC at chat.freenode.net (channel #flashrom) or
mail [e-mail], thanks!
-------------------------------------------------------------------------------
You may now reboot or simply leave the machine running.
Restoring PCI config space for 00:1f:0 reg 0xdc

On 8 November 2014 20:15, Smoluszek  wrote:
> Hello,
>
> I'm trying to flash BIOS of motherboard PEGATRON IPIEL-LA3 -
> http://goo.gl/xh4qVa
>
> Done that successfully before, but I must have uploaded a write protected
> bios last time.
>
> Output of flashrom -p internal -VVV -c W25X80 can be found here:
> http://paste.flashrom.org/view.php?id=2686
>
> I've also tried flashing with Raspberyy PI via ROM_RECOVERY header on the
> motherboard, but managed only to detect and read, but each read gave
> somewhat different file.
>
> Any hints how can I override BIOS_CNTL?
>
> Thanks in advance!
> Smoluch