[flashrom] reading the flash image of my Celsius H265
Elmar Stellnberger
estellnb at elstel.org
Wed May 9 22:12:12 CEST 2018
When I boot with iomem=relaxed and enable flash writing in my BIOS I get
the following result with my Celsius H265 notebook:
> flashrom -p internal:laptop=force_I_want_a_brick --read celsius2.rom
flashrom p1.0-74-g2568357 on Linux 4.17.0-rc3+ (x86_64)
flashrom is free software, get the source code at https://flashrom.org
Using clock_gettime for delay loops (clk_id: 1, resolution: 1ns).
========================================================================
WARNING! You seem to be running flashrom on an unsupported laptop.
Laptops, notebooks and netbooks are difficult to support and we
recommend to use the vendor flashing utility. The embedded controller
(EC) in these machines often interacts badly with flashing.
See the manpage and https://flashrom.org/Laptops for details.
If flash is shared with the EC, erase is guaranteed to brick your laptop
and write may brick your laptop.
Read and probe may irritate your EC and cause fan failure, backlight
failure and sudden poweroff.
You have been warned.
========================================================================
Proceeding anyway because user forced us to.
Found chipset "Intel ICH9M-E".
Enabling flash write... OK.
Found Winbond flash chip "W25X32" (4096 kB, SPI) mapped at physical
address 0x00000000ffc00000.
Reading flash... done.
However if I execute this twice I get two different images:
wget https://www.elstel.org/uploads/celsius.rom
wget https://www.elstel.org/uploads/celsius2.rom
Using vbindiff I can see that quite a lot is different between both
images. - which would be difficult to achieve if the firmware was
changed while I am running my computer. The image may be somehow
corrupted as me_cleaner (BIOS offers Intel AMT) can not process the image:
python ../me_cleaner/me_cleaner.py -S -O celsius-no-me.rom celsius.rom
Unknown image
See also the dmidecode that I have attached.
How can it be that both images are different?
Do you think that the images are corrupted?
If so what could we do about it?
-------------- next part --------------
# dmidecode 3.0
Getting SMBIOS data from sysfs.
SMBIOS 2.5 present.
55 structures occupying 2106 bytes.
Table at 0x000DC010.
Handle 0x0000, DMI type 0, 24 bytes
BIOS Information
Vendor: Phoenix
Version: Z118D4FR.113 - R081 - 4807
Release Date: 12/11/2009
Address: 0xE0980
Runtime Size: 128640 bytes
ROM Size: 2048 kB
Characteristics:
ISA is supported
PCI is supported
PC Card (PCMCIA) is supported
PNP is supported
BIOS is upgradeable
BIOS shadowing is allowed
ESCD support is available
Boot from CD is supported
ACPI is supported
USB legacy is supported
AGP is supported
BIOS boot specification is supported
Targeted content distribution is supported
Handle 0x0001, DMI type 1, 27 bytes
System Information
Manufacturer: FUJITSU SIEMENS
Product Name: CELSIUS H265
Version: 1.0
Serial Number: e00123401A42A30123457
UUID: 9FA3CAF0-A6C6-11DD-A70E-001E330C4E7F
Wake-up Type: Power Switch
SKU Number: Not Specified
Family: Not Specified
Handle 0x0002, DMI type 2, 17 bytes
Base Board Information
Manufacturer: FUJITSU SIEMENS
Product Name: Z118M4A
Version: 1.0
Serial Number: e00123401A42A30123457
Asset Tag: Tag 12345
Features:
Board is a hosting board
Board is replaceable
Location In Chassis: Not Applicable
Chassis Handle: 0x0003
Type: Motherboard
Contained Object Handles: 1
0x0000
Handle 0x0003, DMI type 3, 17 bytes
Chassis Information
Manufacturer: FUJITSU SIEMENS
Type: Notebook
Lock: Not Present
Version: 1.0
Serial Number: YBLS004361
Asset Tag: None
Boot-up State: Safe
Power Supply State: Safe
Thermal State: Safe
Security Status: None
OEM Information: 0x00001234
Handle 0x0004, DMI type 4, 40 bytes
Processor Information
Socket Designation: U2E1
Type: Central Processor
Family: Core 2
Manufacturer: Intel
ID: 7A 06 01 00 FF FB EB BF
Signature: Type 0, Family 6, Model 23, Stepping 10
Flags:
FPU (Floating-point unit on-chip)
VME (Virtual mode extension)
DE (Debugging extension)
PSE (Page size extension)
TSC (Time stamp counter)
MSR (Model specific registers)
PAE (Physical address extension)
MCE (Machine check exception)
CX8 (CMPXCHG8 instruction supported)
APIC (On-chip APIC hardware supported)
SEP (Fast system call)
MTRR (Memory type range registers)
PGE (Page global enable)
MCA (Machine check architecture)
CMOV (Conditional move instruction supported)
PAT (Page attribute table)
PSE-36 (36-bit page size extension)
CLFSH (CLFLUSH instruction supported)
DS (Debug store)
ACPI (ACPI supported)
MMX (MMX technology supported)
FXSR (FXSAVE and FXSTOR instructions supported)
SSE (Streaming SIMD extensions)
SSE2 (Streaming SIMD extensions 2)
SS (Self-snoop)
HTT (Multi-threading)
TM (Thermal monitor supported)
PBE (Pending break enabled)
Version: CPU Version
Voltage: 3.3 V
External Clock: Unknown
Max Speed: 4096 MHz
Current Speed: 2260 MHz
Status: Populated, Enabled
Upgrade: ZIF Socket
L1 Cache Handle: 0x0005
L2 Cache Handle: 0x0006
L3 Cache Handle: Not Provided
Serial Number: Not Specified
Asset Tag: Not Specified
Part Number: Not Specified
Core Count: 4
Core Enabled: 4
Thread Count: 4
Characteristics:
64-bit capable
Handle 0x0005, DMI type 7, 19 bytes
Cache Information
Socket Designation: L1 Cache
Configuration: Enabled, Socketed, Level 1
Operational Mode: Write Back
Location: Internal
Installed Size: 64 kB
Maximum Size: 64 kB
Supported SRAM Types:
Burst
Pipeline Burst
Asynchronous
Installed SRAM Type: Asynchronous
Speed: Unknown
Error Correction Type: Unknown
System Type: Unknown
Associativity: Unknown
Handle 0x0006, DMI type 7, 19 bytes
Cache Information
Socket Designation: L2 Cache
Configuration: Enabled, Socketed, Level 2
Operational Mode: Write Back
Location: Internal
Installed Size: 6144 kB
Maximum Size: 6144 kB
Supported SRAM Types:
Burst
Pipeline Burst
Asynchronous
Installed SRAM Type: Burst
Speed: Unknown
Error Correction Type: Unknown
System Type: Unknown
Associativity: Unknown
Handle 0x0007, DMI type 8, 9 bytes
Port Connector Information
Internal Reference Designator: J19
Internal Connector Type: 9 Pin Dual Inline (pin 10 cut)
External Reference Designator: COM 1
External Connector Type: DB-9 male
Port Type: Serial Port 16550A Compatible
Handle 0x0008, DMI type 8, 9 bytes
Port Connector Information
Internal Reference Designator: J1A1
Internal Connector Type: None
External Reference Designator: Keyboard
External Connector Type: Circular DIN-8 male
Port Type: Keyboard Port
Handle 0x0009, DMI type 8, 9 bytes
Port Connector Information
Internal Reference Designator: J1A1
Internal Connector Type: None
External Reference Designator: PS/2 Mouse
External Connector Type: Circular DIN-8 male
Port Type: Mouse Port
Handle 0x000A, DMI type 9, 13 bytes
System Slot Information
Designation: PEG Slot J6B2
Type: 32-bit PCI Express
Current Usage: In Use
Length: Long
ID: 6
Characteristics:
5.0 V is provided
3.3 V is provided
Handle 0x000B, DMI type 9, 13 bytes
System Slot Information
Designation: PCI Express Slot J6B1
Type: 32-bit PCI Express
Current Usage: Available
Length: Long
ID: 7
Characteristics:
5.0 V is provided
3.3 V is provided
Handle 0x000C, DMI type 9, 13 bytes
System Slot Information
Designation: PCI Express Slot J6D1
Type: 32-bit PCI Express
Current Usage: Available
Length: Long
ID: 8
Characteristics:
5.0 V is provided
3.3 V is provided
Handle 0x000D, DMI type 10, 6 bytes
On Board Device Information
Type: Sound
Status: Enabled
Description: HD-Audio
Handle 0x000E, DMI type 10, 6 bytes
On Board Device Information
Type: Ethernet
Status: Enabled
Description: WLAN
Handle 0x000F, DMI type 126, 6 bytes
Inactive
Handle 0x0010, DMI type 10, 6 bytes
On Board Device Information
Type: Other
Status: Enabled
Description: Cardbus
Handle 0x0011, DMI type 10, 6 bytes
On Board Device Information
Type: Other
Status: Enabled
Description: IEEE1394
Handle 0x0012, DMI type 10, 6 bytes
On Board Device Information
Type: Ethernet
Status: Enabled
Description: UMTS
Handle 0x0013, DMI type 10, 6 bytes
On Board Device Information
Type: Other
Status: Disabled
Description: FingerPrint
Handle 0x0014, DMI type 10, 6 bytes
On Board Device Information
Type: Other
Status: Enabled
Description: SmartCard
Handle 0x0015, DMI type 10, 6 bytes
On Board Device Information
Type: Ethernet
Status: Enabled
Description: Bluetooth
Handle 0x0016, DMI type 10, 6 bytes
On Board Device Information
Type: Other
Status: Enabled
Description: CardReader
Handle 0x0017, DMI type 10, 6 bytes
On Board Device Information
Type: Other
Status: Enabled
Description: WebCam
Handle 0x0018, DMI type 11, 5 bytes
OEM Strings
String 1: Inventec
String 2: Z118DV
Handle 0x0019, DMI type 12, 5 bytes
System Configuration Options
Option 1: Jumper settings can be described here.
Handle 0x001A, DMI type 15, 25 bytes
System Event Log
Area Length: 96 bytes
Header Start Offset: 0x0000
Header Length: 16 bytes
Data Start Offset: 0x0010
Access Method: General-purpose non-volatile data functions
Access Address: 0x0000
Status: Invalid, Full
Change Token: 0x0000004C
Header Format: Type 1
Supported Log Type Descriptors: 1
Descriptor 1: POST error
Data Format 1: POST results bitmap
Handle 0x001B, DMI type 16, 15 bytes
Physical Memory Array
Location: System Board Or Motherboard
Use: System Memory
Error Correction Type: None
Maximum Capacity: 4 GB
Error Information Handle: Not Provided
Number Of Devices: 2
Handle 0x001C, DMI type 17, 27 bytes
Memory Device
Array Handle: 0x001B
Error Information Handle: No Error
Total Width: 64 bits
Data Width: 64 bits
Size: 4096 MB
Form Factor: SODIMM
Set: 1
Locator: M1
Bank Locator: Bank 0
Type: DDR2
Type Detail: Synchronous
Speed: 667 MHz
Manufacturer: Mfg 0
Serial Number: 1234-B0
Asset Tag: Not Specified
Part Number: SODIMM000
Handle 0x001D, DMI type 17, 27 bytes
Memory Device
Array Handle: 0x001B
Error Information Handle: No Error
Total Width: 64 bits
Data Width: 64 bits
Size: 4096 MB
Form Factor: SODIMM
Set: 1
Locator: M2
Bank Locator: Bank 1
Type: DDR2
Type Detail: Synchronous
Speed: 667 MHz
Manufacturer: Mfg 1
Serial Number: 1234-B1
Asset Tag: Not Specified
Part Number: SODIMM001
Handle 0x001E, DMI type 18, 23 bytes
32-bit Memory Error Information
Type: OK
Granularity: Unknown
Operation: Unknown
Vendor Syndrome: Unknown
Memory Array Address: Unknown
Device Address: Unknown
Resolution: Unknown
Handle 0x001F, DMI type 18, 23 bytes
32-bit Memory Error Information
Type: OK
Granularity: Unknown
Operation: Unknown
Vendor Syndrome: Unknown
Memory Array Address: Unknown
Device Address: Unknown
Resolution: Unknown
Handle 0x0020, DMI type 19, 15 bytes
Memory Array Mapped Address
Starting Address: 0x00000000000
Ending Address: 0x001FFFFFFFF
Range Size: 8 GB
Physical Array Handle: 0x001B
Partition Width: 2
Handle 0x0021, DMI type 20, 19 bytes
Memory Device Mapped Address
Starting Address: 0x00000000000
Ending Address: 0x000FFFFFFFF
Range Size: 4 GB
Physical Device Handle: 0x001C
Memory Array Mapped Address Handle: 0x0020
Partition Row Position: Unknown
Interleave Position: Unknown
Interleaved Data Depth: Unknown
Handle 0x0022, DMI type 20, 19 bytes
Memory Device Mapped Address
Starting Address: 0x00100000000
Ending Address: 0x001FFFFFFFF
Range Size: 4 GB
Physical Device Handle: 0x001D
Memory Array Mapped Address Handle: 0x0020
Partition Row Position: Unknown
Interleave Position: Unknown
Interleaved Data Depth: Unknown
Handle 0x0023, DMI type 22, 26 bytes
Portable Battery
Location: MAIN
Manufacturer: Samsung
Manufacture Date: Samsung
Serial Number: e03647401C34C27004894
Name:
Chemistry: Lithium Ion
Design Capacity: 76960 mWh
Design Voltage: 14800 mV
SBDS Version: 00
Maximum Error: Unknown
OEM-specific Information: 0x00000000
Handle 0x0024, DMI type 126, 26 bytes
Inactive
Handle 0x0025, DMI type 23, 13 bytes
System Reset
Status: Enabled
Watchdog Timer: Present
Boot Option: Do Not Reboot
Boot Option On Limit: Do Not Reboot
Reset Count: Unknown
Reset Limit: Unknown
Timer Interval: Unknown
Timeout: Unknown
Handle 0x0026, DMI type 24, 5 bytes
Hardware Security
Power-On Password Status: Disabled
Keyboard Password Status: Unknown
Administrator Password Status: Disabled
Front Panel Reset Status: Unknown
Handle 0x0027, DMI type 25, 9 bytes
System Power Controls
Next Scheduled Power-on: 12-31 23:59:59
Handle 0x0028, DMI type 26, 20 bytes
Voltage Probe
Description: Voltage Probe
Location: Processor
Status: OK
Maximum Value: Unknown
Minimum Value: Unknown
Resolution: Unknown
Tolerance: Unknown
Accuracy: Unknown
OEM-specific Information: 0x00000000
Handle 0x0029, DMI type 27, 12 bytes
Cooling Device
Temperature Probe Handle: 0x002A
Type: Fan
Status: OK
OEM-specific Information: 0x00000000
Handle 0x002A, DMI type 28, 20 bytes
Temperature Probe
Description: Temperature Probe
Location: Processor
Status: OK
Maximum Value: Unknown
Minimum Value: Unknown
Resolution: Unknown
Tolerance: Unknown
Accuracy: Unknown
OEM-specific Information: 0x00000000
Handle 0x002B, DMI type 29, 20 bytes
Electrical Current Probe
Description: Electrical Current Probe
Location: Processor
Status: OK
Maximum Value: Unknown
Minimum Value: Unknown
Resolution: Unknown
Tolerance: Unknown
Accuracy: Unknown
OEM-specific Information: 0x00000000
Handle 0x002C, DMI type 30, 6 bytes
Out-of-band Remote Access
Manufacturer Name: Intel
Inbound Connection: Disabled
Outbound Connection: Enabled
Handle 0x002D, DMI type 32, 20 bytes
System Boot Information
Status: No errors detected
Handle 0x002E, DMI type 39, 22 bytes
System Power Supply
Power Unit Group: 1
Location: To Be Defined By O.E.M
Name: To Be Defined By O.E.M
Manufacturer: To Be Defined By O.E.M
Serial Number: To Be Defined By O.E.M
Asset Tag: To Be Defined By O.E.M
Model Part Number: To Be Defined By O.E.M
Revision: 2.50
Max Power Capacity: Unknown
Status: Present, Unknown
Type: Unknown
Input Voltage Range Switching: Unknown
Plugged: Yes
Hot Replaceable: No
Input Voltage Probe Handle: 0x0028
Cooling Device Handle: 0x0029
Input Current Probe Handle: 0x002B
Handle 0x002F, DMI type 129, 8 bytes
OEM-specific Type
Header and Data:
81 08 2F 00 01 01 02 01
Strings:
Intel_ASF
Intel_ASF_001
Handle 0x0030, DMI type 130, 20 bytes
OEM-specific Type
Header and Data:
82 14 30 00 24 41 4D 54 01 00 00 00 00 00 00 00
00 00 00 00
Handle 0x0031, DMI type 131, 64 bytes
OEM-specific Type
Header and Data:
83 40 31 00 34 00 00 00 00 00 40 2A 00 00 00 00
F8 00 17 29 00 00 00 00 0F 00 00 00 00 00 04 00
64 04 03 00 03 00 01 15 C8 00 F5 10 00 00 00 00
00 00 00 00 07 00 00 00 76 50 72 6F 00 00 00 00
Handle 0x0032, DMI type 176, 6 bytes
OEM-specific Type
Header and Data:
B0 06 32 00 00 00
Handle 0x0033, DMI type 188, 8 bytes
OEM-specific Type
Header and Data:
BC 08 33 00 24 31 38 38
Handle 0x0034, DMI type 136, 6 bytes
OEM-specific Type
Header and Data:
88 06 34 00 FF FF
Handle 0x0035, DMI type 150, 14 bytes
OEM-specific Type
Header and Data:
96 0E 35 00 01 01 00 00 00 00 00 00 00 00
Strings:
ABSOLUTE(PHOENIX) CLM
Handle 0x0036, DMI type 127, 4 bytes
End Of Table
More information about the flashrom
mailing list