unbricking tp link C7 V4

Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware
Author Message
mikiha
DD-WRT Novice


Joined: 09 Dec 2018
Posts: 4

PostPosted: Sun Dec 09, 2018 21:44    Post subject: unbricking tp link C7 V4 Reply with quote
hi i got a C7 from a friend who tried flashing dd-wrt and bricked the router
i connected a ttl to serial and managed to get the error log . and managed to dump the stock v4 firmware .
now i get the web recovery .
but when i try to flash the full firmware i get an error .

and in the log i see :

#######################################
#######################################
#######################################
#######################################
#######################################
#######################################
#######################################
#######################################
#######################################
#######################################
#######################################

Firmware Recovery file length : 4114989
Firmware process common.
Image verify OK!
Firmware file Verify ok!
[Error]sysmgr_proinfo_buildStruct(): 552 @ should be 2 args (1).
[Error]sysmgr_cfg_checkSupportList(): 945 @ productName Archer C7 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 871 @ Entry 0 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 945 @ productName Archer C7 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 871 @ Entry 1 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 945 @ productName Archer C7 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 871 @ Entry 2 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 945 @ productName Archer C7 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 871 @ Entry 3 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 945 @ productName Archer C7 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 871 @ Entry 4 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 945 @ productName Archer C7 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 871 @ Entry 5 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 945 @ productName Archer C7 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 871 @ Entry 6 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 945 @ productName Archer C7 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 871 @ Entry 7 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 945 @ productName Archer C7 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 871 @ Entry 8 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 945 @ productName Archer C7 NOT Match.
[Error]sysmgr_cfg_checkSupportList(): 871 @ Entry 9 NOT Match.
Firmwave not supports, check failed.
[NM_Error](nm_checkUpdateContent) 01201: the firmware is not for this model
[NM_Error](nm_buildUpgradeStruct) 01301: checkUpdateContent failed.
## Error: HTTP upgrade file check failed!




i tried the recover to factory and stock firmware from us eu and tw . it seems like the list of approved devices is blank on one of the partitions inside the device.

help would be appreciated .
thanks.
Sponsor
fifi29
DD-WRT Novice


Joined: 27 Nov 2018
Posts: 20

PostPosted: Mon Dec 10, 2018 2:37    Post subject: Reply with quote
Hi, the C7 you can dfebrick very easy via TFTP.
Just download the latest original Firmware from TP Link,
create a folder on your computer, copy in the firware.bin.
Rename to special name.bin
set on your computer the ip 192.168.0.66
start TFTP and browse to your file on the computer,choose the ip( 192.166.0.66) when turn on router press reset button for few second. Once you get the message file sent... wait 2-3 until the firmware is recovered.
mikiha
DD-WRT Novice


Joined: 09 Dec 2018
Posts: 4

PostPosted: Mon Dec 10, 2018 9:51    Post subject: Reply with quote
I am already pass this as i am able to start the firmware upgrade procedure . But it always fails . As the firmware is cheked against a file in the firmware


fifi29 wrote:
Hi, the C7 you can dfebrick very easy via TFTP.
Just download the latest original Firmware from TP Link,
create a folder on your computer, copy in the firware.bin.
Rename to special name.bin
set on your computer the ip 192.168.0.66
start TFTP and browse to your file on the computer,choose the ip( 192.166.0.66) when turn on router press reset button for few second. Once you get the message file sent... wait 2-3 until the firmware is recovered.
mikiha
DD-WRT Novice


Joined: 09 Dec 2018
Posts: 4

PostPosted: Mon Dec 10, 2018 15:09    Post subject: Reply with quote
soo looking at the documentation i found a way to get around the issue and debrick the router ..


Quote:
Note: the TFTP flashing process requires that the product hardware id and version in the new image header match those in the existing image in flash, otherwise the new image is rejected, flashing is cancelled and the bootloader proceeds to boot the old image. When this happens, the following output is seen on the serial console:

original_product_id = ffffffff
original_product_ver = ffffffff
recovery_product_id = c7000002
recovery_product_ver = 01
auto update firmware: product id verify fail!
Autobooting in 1 seconds
While this would be a fine safety feature in another context, it means the recovery process can reject a valid new image if the image in flash is corrupted. Unfortunately, such corruption can easily occur if the flashing process is interrupted: when an image is accepted, the flashing process first erases the whole space, which takes a while, and then writes the new image. If this process is interrupted during the erasure phase, the in flash header will appear as all 0xFF, and further recovery attempts will therefore fail because the header hardware id and version values will no longer match. If this happens, you'll need to try either a serial connection, or building an image with the header values overridden (in tp-link.mk set TPLINK_HWREV and TPLINK_HWID to 0xffffffff).



So i need a compiled image with the modified product id and model id . does anyone know where can i get one ? for the v4 ?
mikiha
DD-WRT Novice


Joined: 09 Dec 2018
Posts: 4

PostPosted: Tue Dec 11, 2018 16:48    Post subject: Reply with quote
any one ?
marianosz
DD-WRT Novice


Joined: 25 Sep 2017
Posts: 1

PostPosted: Wed Jun 17, 2020 15:50    Post subject: Reply with quote
mikiha wrote:
any one ?


Did you find a solution for this?
ian5142
DD-WRT Guru


Joined: 23 Oct 2013
Posts: 2318
Location: Canada

PostPosted: Wed Jun 17, 2020 17:06    Post subject: TFTP / Serial Recovery Reply with quote
I can easily modify the product ID and model in the stock TP-Link firmware but I can't seem to find where in the file to modify it like Archer C7 v2, etc.

Recovery via Serial is still possible. https://openwrt.org/toh/tp-link/archer-c5-c7-wdr7500#recovery_using_serial_connection

Make sure your hex values (0x...) are correct. I would put factory firmware back on then DD-WRT.

Code:
tftp 0x81000000 [name of your firmware file].bin

Starts the TFTP transfer from the TFTP server. 0x81... is in RAM. Note how many bytes were transferred in hex.
Code:
erase 0x9f020000 +f80000

Erases from one location for the length of the file received, noted above.

Code:

cp.b 0x81000000 0x9f020000 0xf80000
reset

Copy command pretty self explanatory. Reset, reboots the router and tries to boot the new firmware.

Note, I have only ever done this on TP-Link routers that I own (not v3-v5). I only own up to Archer C7 v2. I have done TFTP recovery on all of my TP-Links at some point though. Serial recovery as well.

_________________
Before asking a question on the forums, update dd-wrt: Where do I download firmware? I suggest reading it all.
QCA Best WiFi Settings


Some dd-wrt wiki pages are up to date, others are not. PM me if you find an old one.

Atheros:
Netgear R7800 x3 - WDS AP / station, gateway, QoS
TP-Link Archer C7 v2 x2 - WDS Station
TP-Link TL-WDR3600 v1 - WDS Station
TP-Link 841nd v8 - NU
D-Link 615 C1/E3/I1 x 7 - 1 WDS station
D-Link 825 B1 - NU
D-Link 862L A1 x2 - WDS Station
Netgear WNDR3700v2 - NU
UBNT loco M2 x2 - airOS

Broadcom
Linksys EA6400 - Gateway, QoS
Asus N66U - AP
Netgear WNDR3700v3 - not used
MediaTek
UBNT EdgeRouter X - switch
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum