[flashrom] reading the flash image of my Celsius H265

Elmar Stellnberger estellnb at elstel.org
Wed May 9 22:12:12 CEST 2018


When I boot with iomem=relaxed and enable flash writing in my BIOS I get 
the following result with my Celsius H265 notebook:

 > flashrom -p internal:laptop=force_I_want_a_brick --read celsius2.rom
flashrom p1.0-74-g2568357 on Linux 4.17.0-rc3+ (x86_64)
flashrom is free software, get the source code at https://flashrom.org

Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
========================================================================
WARNING! You seem to be running flashrom on an unsupported laptop.
Laptops, notebooks and netbooks are difficult to support and we
recommend to use the vendor flashing utility. The embedded controller
(EC) in these machines often interacts badly with flashing.
See the manpage and https://flashrom.org/Laptops for details.

If flash is shared with the EC, erase is guaranteed to brick your laptop
and write may brick your laptop.
Read and probe may irritate your EC and cause fan failure, backlight
failure and sudden poweroff.
You have been warned.
========================================================================
Proceeding anyway because user forced us to.
Found chipset "Intel ICH9M-E".
Enabling flash write... OK.
Found Winbond flash chip "W25X32" (4096 kB, SPI) mapped at physical 
address 0x00000000ffc00000.
Reading flash... done.

However if I execute this twice I get two different images:
wget https://www.elstel.org/uploads/celsius.rom
wget https://www.elstel.org/uploads/celsius2.rom

Using vbindiff I can see that quite a lot is different between both 
images. - which would be difficult to achieve if the firmware was 
changed while I am running my computer. The image may be somehow 
corrupted as me_cleaner (BIOS offers Intel AMT) can not process the image:

python ../me_cleaner/me_cleaner.py -S -O celsius-no-me.rom celsius.rom
Unknown image

See also the dmidecode that I have attached.
How can it be that both images are different?
Do you think that the images are corrupted?
If so what could we do about it?

-------------- next part --------------
# dmidecode 3.0
Getting SMBIOS data from sysfs.
SMBIOS 2.5 present.
55 structures occupying 2106 bytes.
Table at 0x000DC010.

Handle 0x0000, DMI type 0, 24 bytes
BIOS Information
	Vendor: Phoenix
	Version: Z118D4FR.113 - R081 - 4807
	Release Date: 12/11/2009
	Address: 0xE0980
	Runtime Size: 128640 bytes
	ROM Size: 2048 kB
	Characteristics:
		ISA is supported
		PCI is supported
		PC Card (PCMCIA) is supported
		PNP is supported
		BIOS is upgradeable
		BIOS shadowing is allowed
		ESCD support is available
		Boot from CD is supported
		ACPI is supported
		USB legacy is supported
		AGP is supported
		BIOS boot specification is supported
		Targeted content distribution is supported

Handle 0x0001, DMI type 1, 27 bytes
System Information
	Manufacturer: FUJITSU SIEMENS
	Product Name: CELSIUS H265        
	Version: 1.0
	Serial Number: e00123401A42A30123457
	UUID: 9FA3CAF0-A6C6-11DD-A70E-001E330C4E7F
	Wake-up Type: Power Switch
	SKU Number: Not Specified
	Family: Not Specified

Handle 0x0002, DMI type 2, 17 bytes
Base Board Information
	Manufacturer: FUJITSU SIEMENS
	Product Name: Z118M4A  
	Version: 1.0
	Serial Number: e00123401A42A30123457
	Asset Tag: Tag 12345
	Features:
		Board is a hosting board
		Board is replaceable
	Location In Chassis: Not Applicable
	Chassis Handle: 0x0003
	Type: Motherboard
	Contained Object Handles: 1
		0x0000

Handle 0x0003, DMI type 3, 17 bytes
Chassis Information
	Manufacturer: FUJITSU SIEMENS
	Type: Notebook
	Lock: Not Present
	Version: 1.0
	Serial Number: YBLS004361
	Asset Tag: None                 
	Boot-up State: Safe
	Power Supply State: Safe
	Thermal State: Safe
	Security Status: None
	OEM Information: 0x00001234

Handle 0x0004, DMI type 4, 40 bytes
Processor Information
	Socket Designation: U2E1
	Type: Central Processor
	Family: Core 2
	Manufacturer: Intel
	ID: 7A 06 01 00 FF FB EB BF
	Signature: Type 0, Family 6, Model 23, Stepping 10
	Flags:
		FPU (Floating-point unit on-chip)
		VME (Virtual mode extension)
		DE (Debugging extension)
		PSE (Page size extension)
		TSC (Time stamp counter)
		MSR (Model specific registers)
		PAE (Physical address extension)
		MCE (Machine check exception)
		CX8 (CMPXCHG8 instruction supported)
		APIC (On-chip APIC hardware supported)
		SEP (Fast system call)
		MTRR (Memory type range registers)
		PGE (Page global enable)
		MCA (Machine check architecture)
		CMOV (Conditional move instruction supported)
		PAT (Page attribute table)
		PSE-36 (36-bit page size extension)
		CLFSH (CLFLUSH instruction supported)
		DS (Debug store)
		ACPI (ACPI supported)
		MMX (MMX technology supported)
		FXSR (FXSAVE and FXSTOR instructions supported)
		SSE (Streaming SIMD extensions)
		SSE2 (Streaming SIMD extensions 2)
		SS (Self-snoop)
		HTT (Multi-threading)
		TM (Thermal monitor supported)
		PBE (Pending break enabled)
	Version: CPU Version
	Voltage: 3.3 V
	External Clock: Unknown
	Max Speed: 4096 MHz
	Current Speed: 2260 MHz
	Status: Populated, Enabled
	Upgrade: ZIF Socket
	L1 Cache Handle: 0x0005
	L2 Cache Handle: 0x0006
	L3 Cache Handle: Not Provided
	Serial Number: Not Specified
	Asset Tag: Not Specified
	Part Number: Not Specified
	Core Count: 4
	Core Enabled: 4
	Thread Count: 4
	Characteristics:
		64-bit capable

Handle 0x0005, DMI type 7, 19 bytes
Cache Information
	Socket Designation: L1 Cache
	Configuration: Enabled, Socketed, Level 1
	Operational Mode: Write Back
	Location: Internal
	Installed Size: 64 kB
	Maximum Size: 64 kB
	Supported SRAM Types:
		Burst
		Pipeline Burst
		Asynchronous
	Installed SRAM Type: Asynchronous
	Speed: Unknown
	Error Correction Type: Unknown
	System Type: Unknown
	Associativity: Unknown

Handle 0x0006, DMI type 7, 19 bytes
Cache Information
	Socket Designation: L2 Cache
	Configuration: Enabled, Socketed, Level 2
	Operational Mode: Write Back
	Location: Internal
	Installed Size: 6144 kB
	Maximum Size: 6144 kB
	Supported SRAM Types:
		Burst
		Pipeline Burst
		Asynchronous
	Installed SRAM Type: Burst
	Speed: Unknown
	Error Correction Type: Unknown
	System Type: Unknown
	Associativity: Unknown

Handle 0x0007, DMI type 8, 9 bytes
Port Connector Information
	Internal Reference Designator: J19
	Internal Connector Type: 9 Pin Dual Inline (pin 10 cut)
	External Reference Designator: COM 1
	External Connector Type: DB-9 male
	Port Type: Serial Port 16550A Compatible

Handle 0x0008, DMI type 8, 9 bytes
Port Connector Information
	Internal Reference Designator: J1A1
	Internal Connector Type: None
	External Reference Designator: Keyboard
	External Connector Type: Circular DIN-8 male
	Port Type: Keyboard Port

Handle 0x0009, DMI type 8, 9 bytes
Port Connector Information
	Internal Reference Designator: J1A1
	Internal Connector Type: None
	External Reference Designator: PS/2 Mouse
	External Connector Type: Circular DIN-8 male
	Port Type: Mouse Port

Handle 0x000A, DMI type 9, 13 bytes
System Slot Information
	Designation: PEG Slot J6B2
	Type: 32-bit PCI Express
	Current Usage: In Use
	Length: Long
	ID: 6
	Characteristics:
		5.0 V is provided
		3.3 V is provided

Handle 0x000B, DMI type 9, 13 bytes
System Slot Information
	Designation: PCI Express Slot J6B1
	Type: 32-bit PCI Express
	Current Usage: Available
	Length: Long
	ID: 7
	Characteristics:
		5.0 V is provided
		3.3 V is provided

Handle 0x000C, DMI type 9, 13 bytes
System Slot Information
	Designation: PCI Express Slot J6D1
	Type: 32-bit PCI Express
	Current Usage: Available
	Length: Long
	ID: 8
	Characteristics:
		5.0 V is provided
		3.3 V is provided

Handle 0x000D, DMI type 10, 6 bytes
On Board Device Information
	Type: Sound
	Status: Enabled
	Description: HD-Audio

Handle 0x000E, DMI type 10, 6 bytes
On Board Device Information
	Type: Ethernet
	Status: Enabled
	Description: WLAN

Handle 0x000F, DMI type 126, 6 bytes
Inactive

Handle 0x0010, DMI type 10, 6 bytes
On Board Device Information
	Type: Other
	Status: Enabled
	Description: Cardbus

Handle 0x0011, DMI type 10, 6 bytes
On Board Device Information
	Type: Other
	Status: Enabled
	Description: IEEE1394

Handle 0x0012, DMI type 10, 6 bytes
On Board Device Information
	Type: Ethernet
	Status: Enabled
	Description: UMTS

Handle 0x0013, DMI type 10, 6 bytes
On Board Device Information
	Type: Other
	Status: Disabled
	Description: FingerPrint

Handle 0x0014, DMI type 10, 6 bytes
On Board Device Information
	Type: Other
	Status: Enabled
	Description: SmartCard

Handle 0x0015, DMI type 10, 6 bytes
On Board Device Information
	Type: Ethernet
	Status: Enabled
	Description: Bluetooth

Handle 0x0016, DMI type 10, 6 bytes
On Board Device Information
	Type: Other
	Status: Enabled
	Description: CardReader

Handle 0x0017, DMI type 10, 6 bytes
On Board Device Information
	Type: Other
	Status: Enabled
	Description: WebCam

Handle 0x0018, DMI type 11, 5 bytes
OEM Strings
	String 1: Inventec
	String 2: Z118DV

Handle 0x0019, DMI type 12, 5 bytes
System Configuration Options
	Option 1: Jumper settings can be described here.

Handle 0x001A, DMI type 15, 25 bytes
System Event Log
	Area Length: 96 bytes
	Header Start Offset: 0x0000
	Header Length: 16 bytes
	Data Start Offset: 0x0010
	Access Method: General-purpose non-volatile data functions
	Access Address: 0x0000
	Status: Invalid, Full
	Change Token: 0x0000004C
	Header Format: Type 1
	Supported Log Type Descriptors: 1
	Descriptor 1: POST error
	Data Format 1: POST results bitmap

Handle 0x001B, DMI type 16, 15 bytes
Physical Memory Array
	Location: System Board Or Motherboard
	Use: System Memory
	Error Correction Type: None
	Maximum Capacity: 4 GB
	Error Information Handle: Not Provided
	Number Of Devices: 2

Handle 0x001C, DMI type 17, 27 bytes
Memory Device
	Array Handle: 0x001B
	Error Information Handle: No Error
	Total Width: 64 bits
	Data Width: 64 bits
	Size: 4096 MB
	Form Factor: SODIMM
	Set: 1
	Locator: M1
	Bank Locator: Bank 0
	Type: DDR2
	Type Detail: Synchronous
	Speed: 667 MHz
	Manufacturer: Mfg 0
	Serial Number: 1234-B0
	Asset Tag: Not Specified
	Part Number: SODIMM000

Handle 0x001D, DMI type 17, 27 bytes
Memory Device
	Array Handle: 0x001B
	Error Information Handle: No Error
	Total Width: 64 bits
	Data Width: 64 bits
	Size: 4096 MB
	Form Factor: SODIMM
	Set: 1
	Locator: M2
	Bank Locator: Bank 1
	Type: DDR2
	Type Detail: Synchronous
	Speed: 667 MHz
	Manufacturer: Mfg 1
	Serial Number: 1234-B1
	Asset Tag: Not Specified
	Part Number: SODIMM001

Handle 0x001E, DMI type 18, 23 bytes
32-bit Memory Error Information
	Type: OK
	Granularity: Unknown
	Operation: Unknown
	Vendor Syndrome: Unknown
	Memory Array Address: Unknown
	Device Address: Unknown
	Resolution: Unknown

Handle 0x001F, DMI type 18, 23 bytes
32-bit Memory Error Information
	Type: OK
	Granularity: Unknown
	Operation: Unknown
	Vendor Syndrome: Unknown
	Memory Array Address: Unknown
	Device Address: Unknown
	Resolution: Unknown

Handle 0x0020, DMI type 19, 15 bytes
Memory Array Mapped Address
	Starting Address: 0x00000000000
	Ending Address: 0x001FFFFFFFF
	Range Size: 8 GB
	Physical Array Handle: 0x001B
	Partition Width: 2

Handle 0x0021, DMI type 20, 19 bytes
Memory Device Mapped Address
	Starting Address: 0x00000000000
	Ending Address: 0x000FFFFFFFF
	Range Size: 4 GB
	Physical Device Handle: 0x001C
	Memory Array Mapped Address Handle: 0x0020
	Partition Row Position: Unknown
	Interleave Position: Unknown
	Interleaved Data Depth: Unknown

Handle 0x0022, DMI type 20, 19 bytes
Memory Device Mapped Address
	Starting Address: 0x00100000000
	Ending Address: 0x001FFFFFFFF
	Range Size: 4 GB
	Physical Device Handle: 0x001D
	Memory Array Mapped Address Handle: 0x0020
	Partition Row Position: Unknown
	Interleave Position: Unknown
	Interleaved Data Depth: Unknown

Handle 0x0023, DMI type 22, 26 bytes
Portable Battery
	Location: MAIN                            
	Manufacturer: Samsung                         
	Manufacture Date: Samsung                         
	Serial Number: e03647401C34C27004894           
	Name:                                 
	Chemistry: Lithium Ion
	Design Capacity: 76960 mWh
	Design Voltage: 14800 mV
	SBDS Version: 00
	Maximum Error: Unknown
	OEM-specific Information: 0x00000000

Handle 0x0024, DMI type 126, 26 bytes
Inactive

Handle 0x0025, DMI type 23, 13 bytes
System Reset
	Status: Enabled
	Watchdog Timer: Present
	Boot Option: Do Not Reboot
	Boot Option On Limit: Do Not Reboot
	Reset Count: Unknown
	Reset Limit: Unknown
	Timer Interval: Unknown
	Timeout: Unknown

Handle 0x0026, DMI type 24, 5 bytes
Hardware Security
	Power-On Password Status: Disabled
	Keyboard Password Status: Unknown
	Administrator Password Status: Disabled
	Front Panel Reset Status: Unknown

Handle 0x0027, DMI type 25, 9 bytes
	System Power Controls
	Next Scheduled Power-on: 12-31 23:59:59

Handle 0x0028, DMI type 26, 20 bytes
Voltage Probe
	Description: Voltage Probe
	Location: Processor
	Status: OK
	Maximum Value: Unknown
	Minimum Value: Unknown
	Resolution: Unknown
	Tolerance: Unknown
	Accuracy: Unknown
	OEM-specific Information: 0x00000000

Handle 0x0029, DMI type 27, 12 bytes
Cooling Device
	Temperature Probe Handle: 0x002A
	Type: Fan
	Status: OK
	OEM-specific Information: 0x00000000

Handle 0x002A, DMI type 28, 20 bytes
Temperature Probe
	Description: Temperature Probe
	Location: Processor
	Status: OK
	Maximum Value: Unknown
	Minimum Value: Unknown
	Resolution: Unknown
	Tolerance: Unknown
	Accuracy: Unknown
	OEM-specific Information: 0x00000000

Handle 0x002B, DMI type 29, 20 bytes
Electrical Current Probe
	Description: Electrical Current Probe
	Location: Processor
	Status: OK
	Maximum Value: Unknown
	Minimum Value: Unknown
	Resolution: Unknown
	Tolerance: Unknown
	Accuracy: Unknown
	OEM-specific Information: 0x00000000

Handle 0x002C, DMI type 30, 6 bytes
Out-of-band Remote Access
	Manufacturer Name: Intel
	Inbound Connection: Disabled
	Outbound Connection: Enabled

Handle 0x002D, DMI type 32, 20 bytes
System Boot Information
	Status: No errors detected

Handle 0x002E, DMI type 39, 22 bytes
System Power Supply
	Power Unit Group: 1
	Location: To Be Defined By O.E.M
	Name: To Be Defined By O.E.M
	Manufacturer: To Be Defined By O.E.M
	Serial Number: To Be Defined By O.E.M
	Asset Tag: To Be Defined By O.E.M
	Model Part Number: To Be Defined By O.E.M
	Revision: 2.50
	Max Power Capacity: Unknown
	Status: Present, Unknown
	Type: Unknown
	Input Voltage Range Switching: Unknown
	Plugged: Yes
	Hot Replaceable: No
	Input Voltage Probe Handle: 0x0028
	Cooling Device Handle: 0x0029
	Input Current Probe Handle: 0x002B

Handle 0x002F, DMI type 129, 8 bytes
OEM-specific Type
	Header and Data:
		81 08 2F 00 01 01 02 01
	Strings:
		Intel_ASF
		Intel_ASF_001

Handle 0x0030, DMI type 130, 20 bytes
OEM-specific Type
	Header and Data:
		82 14 30 00 24 41 4D 54 01 00 00 00 00 00 00 00
		00 00 00 00

Handle 0x0031, DMI type 131, 64 bytes
OEM-specific Type
	Header and Data:
		83 40 31 00 34 00 00 00 00 00 40 2A 00 00 00 00
		F8 00 17 29 00 00 00 00 0F 00 00 00 00 00 04 00
		64 04 03 00 03 00 01 15 C8 00 F5 10 00 00 00 00
		00 00 00 00 07 00 00 00 76 50 72 6F 00 00 00 00

Handle 0x0032, DMI type 176, 6 bytes
OEM-specific Type
	Header and Data:
		B0 06 32 00 00 00

Handle 0x0033, DMI type 188, 8 bytes
OEM-specific Type
	Header and Data:
		BC 08 33 00 24 31 38 38

Handle 0x0034, DMI type 136, 6 bytes
OEM-specific Type
	Header and Data:
		88 06 34 00 FF FF

Handle 0x0035, DMI type 150, 14 bytes
OEM-specific Type
	Header and Data:
		96 0E 35 00 01 01 00 00 00 00 00 00 00 00
	Strings:
		ABSOLUTE(PHOENIX) CLM

Handle 0x0036, DMI type 127, 4 bytes
End Of Table



More information about the flashrom mailing list