OMAPBootrom¶

Documentation¶

The droiddevelopers website has some information on trying to use bugs run free software on several Motorola devices.

Device	SOC
Motorola Milestone	OMAP 3430
Motorola Milestone 2	OMAP 3630
Motorola Defy	OMAP3630?
Motorola Defy+ (MB526)	OMAP3 (which one?)

That website has many information:

• It has documentation on the structure of signed MLOs

Code¶

• As march 2020, there are no fuses driver or code for any OMAP in either u-boot, barebox, linux, or crucible.
• U-boot documentation mention TI tools that have to be obtained after signing an NDA

Possible attacks¶

• Even if it's unlikely, once we understand the OMAP restricted boot better, we could check if some devices are signed but not in enforcing mode.

Links¶

• http://www.droid-developers.org : This attempts to run user code on several Motorolla smartphones. It includes analysis of the boot chain:
  • Application_Processor_Boot_ROM
  • Booting_chain