Reverse Engineering Bravia KDL-52LX900 Firmware.


Index:
Firmware Information Service Manuals Widget Development Kit
nmap scan result and Service Menu info
The tear down
Parts used in the TV Update! Service Manuals!
Software Manual for Sony KDL-52LX900 (Version Up Procedure) Service (Repair) Manual for Sony KDL-52LX900 The Firmware: 00050100_01fb0000.bin

The source code: Sony Global - Source Code Distribution Service

It is now certain that TV runs Linux 2.6.22. Look down for the nmap result. 2 ports open via Wireless, 4 ports open via LAN.

The firmware is updated via USB. When insterted, TV detects USB and looks for the Firmware. After that TV unpacks the firmware and then flashes. This takes about 30 seconds. TV reboots itself.

The firmware consists of:

Kod:Panoya kopyala
linux-kernel busybox pump-autoip libjs dosfstools directfb iptables cairo glib pango exceptionmonitor


Binwalk analysis (Probably Wrong) - Now re-analyzed with BinWalk 4.1:

Kod:Panoya kopyala
binwalk: /usr/local/lib/libcurl.so.4: no version information available (required by binwalk) DECIMAL HEX DESCRIPTION ------------------------------------------------------------------------------------------------------- 24439192 0x174E998 BFLT executable version 3698180314, code offset: 0xD0DBFC89, data segment starts at: 0xFC57E3C8, bss segment starts at: 0x314AD91C, bss segment ends at: 0x579AC36E, stack size: -209315630 bytes, relocation records start at: 0x10C36FC1, number of reolcation records: 1388897630, gotpic gzdata 40790549 0x26E6A15 gzip compressed data, ASCII, has CRC, extra field, last modified: Sat Dec 8 07:18:40 2012


New Firmware Version from Sony Analyzed:

Kod:Panoya kopyala
root@ubuntu:/home/İndirilenler/sony_dtv0FA00A00A0A0_00050100# binwalk fw.bin binwalk: /usr/local/lib/libcurl.so.4: no version information available (required by binwalk) DECIMAL HEX DESCRIPTION ------------------------------------------------------------------------------------------------------- 9400157 0x8F6F5D JFFS2 filesystem data little endian, JFFS node length: 840583 15166178 0xE76AE2 gzip compressed data, ASCII, has CRC, has comment, comment, encrypted, last modified: Thu Jul 25 23:42:10 2019 15652966 0xEED866 JFFS2 filesystem data little endian, JFFS node length: 572650 29628716 0x1C4192C JFFS2 filesystem (old) data little endian, JFFS node length: 692636