From: eLinux.org

VGF-CP1

Contents

Sony VAIO Canvas Online - Digital Picture Frame

http://bb.watch.impress.co.jp/cda/static/image/2008/05/07/cp101s.jpg

specification in brief:

  • Display Size: 7″
  • Pixel Format: 800 x 480
  • Internal Memory: 100MB (80MB for pic­tures, 15MB for audio)
  • External Storage: CF, MS, SD
  • Image Support: JPEG, BMP, PNG, GIF
  • Audio Support: MP3, WAV
  • CPU: 400Mhz ARM11 (i.MX31)
  • OS: Timesys Linux 2.6.19
  • Wireless: 802.11b/g
  • Availability: May 17, 2008

Firmware

Though the CP1 was available in the US and UK, there seems to be no
english firmware for download available. Two japanese firmware images
are available. You can flash them by just placing the .IMG file in a
sub-folder called ‘Update’.

  1. VGF-CP1 japanese firmware Ver.2.00.00.09032516: http://vcl.vaio.sony.co.jp/download/EP0000177017.html
  2. .IMG File: http://dlv.update.sony.net/pub/vaio/download/EP0000177017/EP0000177017.img
  4. VGF-CP1 japanese firmware Ver.1.01.00.08082520: http://vcl.vaio.sony.co.jp/download/EP0000162984.html
  5. .IMG File: http://dlv.update.sony.net/pub/vaio/download/EP0000162984/EP0000162984.img

Bootlog

Captured with serial interface (115200,8,n,1) on MX31 UART1.

``

  1.  Linux 2.6 Freescale MXC processor
  4.  Choose an option from below:
  6.  1. Load kernel to RAM and then boot from [0x80008000]
  7.  2. Change the Linux kernel destination loading address [0x80008000]
  8.  3. Enter command line option for kernel
  9.  4. Change command line option address [0x80000100]
  11.    Please enter selection ->   Timeout occured
  15.  -->Booting from RAM...
  16.  RAM size is 128MB
  18.  Copying pages....
  20.  -->Goint Start
  22.  Copying pages....
  24.  -->Goint Start
  25.  -->Starting kernel...
  26.  Uncompressing Linux............................................................................................................. done, booting the kernel.
  27.  Linux version 2.6.19.2 (akatsuka@akatsuka2.sm.sony.co.jp) () #1 PREEMPT Fri Apr 25 10:29:51 JST 2008
  28.  CPU: Some Random V6 Processor [4107b364] revision 4 (ARMv6TEJ), cr=00e5387f
  29.  Machine: Sony IDAM
  30.  Memory policy: ECC disabled, Data cache writeback
  31.  CPU0: D VIPT write-back cache
  32.  CPU0: I cache: 16384 bytes, associativity 4, 32 byte lines, 128 sets
  33.  CPU0: D cache: 16384 bytes, associativity 4, 32 byte lines, 128 sets
  34.  Built 1 zonelists.  Total pages: 32128
  35.  Kernel command line: initrd=0x83000000,8M root=/dev/ram0 rw console=ttymxc0,115200 ip=on
  36.  MXC IRQ initialized
  37.  PID hash table entries: 512 (order: 9, 2048 bytes)
  38.  Actual CLOCK_TICK_RATE is 16625000 Hz
  39.  Console: colour dummy device 80x30
  40.  Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
  41.  Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
  42.  Memory: 64MB 64MB = 128MB total
  43.  Memory: 118072KB available (2416K code, 601K data, 472K init)
  44.  Mount-cache hash table entries: 512
  45.  CPU: Testing write buffer coherency: ok
  46.  checking if image is initramfs...it isn't (no cpio magic); looks like an initrd
  47.  Freeing initrd memory: 8192K
  48.  NET: Registered protocol family 16
  49.  MXC GPIO hardware
  50.  system_rev is: 0x20
  51.  Clock input source is 26000000
  52.  Machine Type: iDAM
  53.  L2 cache: WB
  54.  Using SDMA I.API
  55.  MXC DMA API initialized
  56.  usb: Host 2 registered
  57.  SCSI subsystem initialized
  58.  CSPI: mxc_spi-0 probed
  59.  CSPI: mxc_spi-1 probed
  60.  usbcore: registered new interface driver usbfs
  61.  usbcore: registered new interface driver hub
  62.  usbcore: registered new device driver usb
  63.  MXC I2C driver
  64.  NET: Registered protocol family 23
  65.  NET: Registered protocol family 2
  66.  IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
  67.  TCP established hash table entries: 4096 (order: 2, 16384 bytes)
  68.  TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
  69.  TCP: Hash tables configured (established 4096 bind 2048)
  70.  TCP reno registered
  71.  Low-Level PM Driver module loaded
  72.  JFFS2 version 2.2. (NAND) (SUMMARY)  (C) 2001-2006 Red Hat, Inc.
  73.  io scheduler noop registered
  74.  io scheduler anticipatory registered
  75.  io scheduler deadline registered
  76.  io scheduler cfq registered (default)
  77.  Console: switching to colour frame buffer device 100x30
  78.  mxcfb: fb registered, using mode SAMSUNG-WVGA-32
  79.  MXC WatchDog Driver 2.0
  80.  MXC Watchdog Timer: initial timeout 60 sec
  81.  Serial: MXC Internal UART driver
  82.  mxcintuart.0: ttymxc0 at MMIO 0x43f90000 (irq = 45) is a Freescale MXC
  83.  mxcintuart.2: ttymxc2 at MMIO 0x5000c000 (irq = 18) is a Freescale MXC
  84.  RAMDISK driver initialized: 16 RAM disks of 16384K size 1024 blocksize
  85.  loop: loaded (max 8 devices)
  86.  MXC MTD nor Driver 2.0
  87.  mxc_nor_flash: probe of mxc_nor_flash.0 failed with error -5
  88.  MXC MTD nand Driver 2.0
  89.  NAND device: Manufacturer ID: 0xad, Chip ID: 0xdc (Hynix NAND 512MiB 3,3V 8-bit)
  90.  Scanning device for bad blocks
  91.  Bad eraseblock 732 at 0x05b80000
  92.  Bad eraseblock 1450 at 0x0b540000
  93.  Bad eraseblock 2678 at 0x14ec0000
  94.  Bad eraseblock 2680 at 0x14f00000
  95.  Bad eraseblock 3981 at 0x1f1a0000
  96.  Creating 6 MTD partitions on "NAND 512MiB 3,3V 8-bit":
  97.  0x00000000-0x00040000 : "IPL-SPL"
  98.  0x00040000-0x00440000 : "nand.kernel"
  99.  0x00440000-0x00c40000 : "nand.rootfs"
  100.  0x00c40000-0x02c40000 : "nand.userreg"
  101.  0x02c40000-0x06c40000 : "nand.userprog"
  102.  0x06c40000-0x20000000 : "nand.userdata"
  103.  fsl-ehci fsl-ehci.0: Freescale On-Chip EHCI Host Controller
  104.  fsl-ehci fsl-ehci.0: new USB bus registered, assigned bus number 1
  105.  write priority to fc004400 302154
  106.  iram0 = 1ffc0000 iram1 = 1ffc0800
  107.  fsl-ehci fsl-ehci.0: irq 36, io base 0x43f88400
  108.  fsl-ehci fsl-ehci.0: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004
  109.  usb usb1: configuration #1 chosen from 1 choice
  110.  hub 1-0:1.0: USB hub found
  111.  hub 1-0:1.0: 1 port detected
  112.  Initializing USB Mass Storage driver...
  113.  usb 1-1: new high speed USB device using fsl-ehci and address 2
  114.  usb 1-1: configuration #1 chosen from 1 choice
  115.  hub 1-1:1.0: USB hub found
  116.  hub 1-1:1.0: 2 ports detected
  117.  usb 1-1.1: new high speed USB device using fsl-ehci and address 3
  118.  usb 1-1.1: configuration #1 chosen from 1 choice
  119.  scsi0 : SCSI emulation for USB Mass Storage devices
  120.  usbcore: registered new interface driver usb-storage
  121.  USB Mass Storage support registered.
  122.  usbcore: registered new interface driver asix
  123.  MXC keypad loaded
  124.  input: mxckpd as /class/input/input0
  125.  IPU Post-filter loading
  126.  SSI module loaded successfully
  127.  Advanced Linux Sound Architecture Driver Version 1.0.13 (Tue Nov 28 14:07:24 2006 UTC).
  128.  Control ALSA component registered
  129.  MXC audio support initialized
  130.  ALSA device list:
  131.    #0: MXC audio for iDAM
  132.  TCP cubic registered
  133.  NET: Registered protocol family 1
  134.  NET: Registered protocol family 17
  135.  VFP support v0.3: implementor 41 architecture 1 part 20 variant b rev 2
  136.  RAMDISK: Compressed image found at block 0
  137.  VFS: Mounted root (ext2 filesystem).
  138.  Freeing init memory: 472K
  139.  Using fallback suid method
  140.  Using fallback suid method
  141.  Using fallback suid method
  142.  Using fallback suid method
  143.  #/etc/rc.d/rcS start
  144.  Using fallback suid method
  145.  usb_address[0] 3
  146.  scsi 0:0:0:0: Direct-Access     Sony     MCR-U HS-MS      5.58 PQ: 0 ANSI: 0
  147.  sd 0:0:0:0: Attached scsi removable disk sda
  148.  scsi 0:0:0:1: Direct-Access     Sony     MCR-U HS-CF      5.58 PQ: 0 ANSI: 0
  149.  sd 0:0:0:1: Attached scsi removable disk sdb
  150.  scsi 0:0:0:2: Direct-Access     Sony     MCR-U HS-SD      5.58 PQ: 0 ANSI: 0
  151.  k3d_chk_one: ejected, device sda
  152.  k3d_chk_one: ejected, device sdb
  153.  sd 0:0:0:2: Attached scsi removable disk sdc
  154.  k3d_chk_one: ejected, device sdc
  155.  ysdev: module license 'unspecified' taints kernel.
  156.  ysdev: Yosemite misc driver (Mar 13 2008)
  157.  GPIO port 2 (0-based), pin 31 is already reserved!
  158.  GPIO port 2 (0-based), pin 31 is already reserved!
  159.  EnablePA=0x01
  160.  PA Group #0: level=13dbm, Rate Bitmap=0x1800 (54 48 Mbps)
  161.  PA Group #1: level=14dbm, Rate Bitmap=0x7e0 (36 24 18 12 9 6 Mbps)
  162.  PA Group #2: level=16dbm, Rate Bitmap=0x0f (11 5.5 2 1 Mbps)
  163.  eth0      version:sd2480-9.70.3.p20-26409.p43 (r208)
  164.  #/usr/sony/etc/rcS start
  165.  CLCDC_Init: major device 251
  166.  CAMERA_Init: major device 250
  167.  Loaded PowerVR consumer services.
  168.  command : time
  170.  Get time val : 1199232528
  171.  set system clock : date 010200082008.48(1199232528)
  172.  Wed Jan  2 00:08:48 UTC 2008
  173.  Yostart  was started in dll [2]
  174.  Yostar:writeing pid=1064
  175.  Yostart with CHECK was started in dll [2]
  176.  Yostart  was started in dll [6]
  177.  Yostar:writeing pid=1066
  178.  Yostart with CHECK was started in dll [6]
  179.  ysem.c: 230: ysem_open: k != -1 failed
  180.  ysem.c: 230: ysem_open: k != -1 failed
  181.  Yostart  was started in dll [42]
  182.  Yostar:writeing pid=1069
  183.  Yostart with CHECK was started in dll [42]
  184.  zero clear memory
  185.  ysem.c: 230: ysem_open: k != -1 failed
  186.  ysem.c: 230: ysem_open: k != -1 failed
  187.  ADD 0 MTX: msgc_alive_mtx_00, SEM: msgc_result_sem_00
  188.  Yostart  was started in dll [45]
  189.  Yostar:writeing pid=1073
  190.  Yostart with CHECK was started in dll [45]
  191.  Yostart with CHECK was started in dll [30]
  192.  Yostart  was started in dll [30]
  193.  Yostar:writeing pid=1076
  194.  0:08:48 PID1076 event.c( 401)event_open_mem       : failed open_share()
  195.  Yostart  was started in dll [5]
  196.  Yostar:writeing pid=1079
  197.  Yostart with CHECK was started in dll [5]
  198.  ysem.c: 230: ysem_open: k != -1 failed
  199.  ADD 1 MTX: msgc_alive_mtx_01, SEM: msgc_result_sem_01
  200.  Yostart  was started in dll [48]
  201.  Yostar:writeing pid=1083
  202.  Yostart with CHECK was started in dll [48]
  203.  ysem.c: 230: ysem_open: k != -1 failed
  204.  ADD 2 MTX: msgc_alive_mtx_02, SEM: msgc_result_sem_02
  205.  [vunp] 1 hour sleep!!
  206.  Yostart  was started in dll [49]
  207.  Yostar:writeing pid=1091
  208.  Yostart with CHECK was started in dll [49]
  209.  ysem.c: 230: ysem_open: k != -1 failed
  210.  ADD 3 MTX: msgc_alive_mtx_03, SEM: msgc_result_sem_03
  211.  [nled] write : ledset -s -b 80 0
  213.  [systemapi] local_time ti:0  time_st:0  time_js:3600  time_ut:0
  214.  ontimer set event!!!!
  215.  ontimer set event!!!!
  216.  ontimer set event!!!!
  217.  ontimer set event!!!!
  218.  Yostart with CHECK was started in dll [51]
  219.  Yostart  was started in dll [51]
  220.  Yostar:writeing pid=1095
  221.  ysem.c: 230: ysem_open: k != -1 failed
  222.  ADD 4 MTX: msgc_alive_mtx_04, SEM: msgc_result_sem_04
  223.  Yostart with CHECK was started in dll [52]
  224.  Yostart  was started in dll [52]
  225.  Yostar:writeing pid=1099
  226.  Yostart with CHECK was started in dll [10]
  227.  Yostart  was started in dll [10]
  228.  Yostar:writeing pid=1103
  231.  [terahttp] dll_init
  232.  MAIN_LOOP_START_REQ
  233.  MAIN_LOOP_START_END
  234.  Yostart  was started in dll [12]
  235.  Yostar:writeing pid=1106
  236.  Yostart with CHECK was started in dll [12]
  237.  Yostart with CHECK was started in dll [23]
  238.  Yostart  was started in dll [23]
  239.  Yostar:writeing pid=1108
  240.  pmb_start
  241.  pmb_loop
  242.  Message send Success. reply=1
  243.  region_code=0x41
  244.  mode=0x60
  245.  WPA2-PSK CCMP
  246.  error:[commontool.c]:L1373 -Mar 25 2009 ret=-5
  247.  ssid=<yournetworkname>
  248.  pairwise=CCMP
  249.  key=<yournetworkkey>
  250.  udhcpc (v0.9.9-pre+autoip) started
  251.  udhcpc[1230]: udhcpc (v0.9.9-pre+autoip) started
  252.  Sending discover...
  253.  udhcpc[1230]: Sending discover...
  254.  Sending select for 192.168.x.x...
  255.  udhcpc[1230]: Sending select for 192.168.x.x...
  256.  Lease of 192.168.x.x obtained, lease time 86400
  257.  udhcpc[1230]: Lease of 192.168.x.x obtained, lease time 86400
  258.  deleting routers
  259.  route: SIOC[ADD|DEL]RT: No such process
  260.  adding dns 192.168.y.y
  261.  !!!enter ntp callback
  262.  ##### ntp: get network change
  263.  ntp set on
  264.  Message send Success. reply=1
  265.  0:09:00 PID1079 event.c( 969)event_api_add        : -------------------------------
  266.  0:09:00 PID1079 event.c( 970)event_api_add        : TERAAPI_REQ_ADD  registerd ID:3 data:[0]
  267.  0:09:00 PID1079 event.c( 971)event_api_add        : 2008/01/03(THU)10:28:26
  268.  0:09:00 PID1079 event.c( 972)event_api_add        : -------------------------------
  270.  Freescale Semiconductor, Inc.
  271.  i.MX31 Applications Development System
  273.  (none) login: terahttpd bind successfully
  275.  Freescale Semiconductor, Inc.
  276.  i.MX31 Applications Development System
  278.  (none) login:

Remote Access

Since firmware Ver.2.00 a web server is set up - however in japanese.
Initial login is

  1.  ユーザー名 (loginname): root
  2.  パスワード (password): password

The web server allows you to configure your account data more easily
than with the remote control. Unfortunately this login and password is
not working on the serial console. With a root access account one might
be able to add english translations.

No other services seems to run as all ports are closed.

Hardware Disassembly

WARNING ! Disassembling the VGF-CP1 may cause damage ! It’s on your
own risk !!

VGF-CP1 - 图1

remove two screws to seperate acrylic glass

  1. To open the nice housing, you first have to remove two white square
    shaped sticker on the lower back side. The screws fix two white
    bushings, which have to be taken out in order to seperate the acrylic
    glass base.

VGF-CP1 - 图2

remove sticker to open cover

  1. Next you have to remove a rectangular white sticker. which is used as
    a diffusor for the blue led.

VGF-CP1 - 图3

slightly shift display in arrow direction

  1. To seperate the cover, you have to move carefully the display towards
    the direction marked with red arrows. The ribbon cable is on the bottom
    side, so you can open the housing now.

VGF-CP1 - 图4

next remove 6 screws to open shield

  1. The PCBs are shielded with a blank sheet fixed with six screws. For
    those you need well fitting screw driver, because the four ones marked
    in red are tightend very hard. I had to drill them out !

VGF-CP1 - 图5

mainboard with display connector

  1. Front display is connected to ribbon connector (red square). Another
    pwr button is inside (blue marking), next to it a reset button (green
    marking).

VGF-CP1 - 图6

UART1 serial connector

  1. A serial console can be connected through UART1 CN853. I already
    soldered another plug on top of the original one. Pinout see below.
    You’ll need a level shifter LVTTL-to-RS232 as well in order to connect a
    PC serial port.

Pin 1 of the connector the left one on the picture and it is marked on
the PCB with a white dot.

MX31 UART1 CN853 Pinout

























Pin Signal
1Power (3.3V)*
2Transmit (TX)
3Receive (RX)
4Ground (GND)

Categories: