Jump to content

Recovering from failed firmware attempt (** Bad Magic Number 0x73797375 **)


Recommended Posts


I previously attempted a firmware update on my Tetra using the UI (update was done using an ethernet connection and stable power source). The Tetra hung and became unresponsive requiring me to reboot it. After the reboot the Tetra failed to come up.

I completed the steps detailed at https://docs.hak5.org/hc/en-us/articles/360010471774-Firmware-Recovery and had a similiar experience. I tested this using the 2.5.4 & 2.5.3 firmwares from https://downloads.hak5.org/pineapple/tetra.

Serial connection works (below) and uboot seems okay. Issue seems to be a bad magic number error (** Bad Magic Number 0x73797375 **). Any clues on where to go next?


uboot> reset


U-Boot 1.1.4 (Dec 22 2015 - 12:54:58)

Wasp 1.3
wasp_ddr_initial_config(249): (32bit) ddr2 init
wasp_ddr_initial_config(426): Wasp ddr init done
Tap value selected = 0xf [0x0 - 0x1f]
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 276k for U-Boot at: 87fb8000
Reserving 192k for malloc() at: 87f88000
Reserving 44 Bytes for Board Info at: 87f87fd4
Reserving 36 Bytes for Global Data at: 87f87fb0
Reserving 128k for boot params() at: 87f67fb0
Stack Pointer at: 87f67f98
Now running in RAM - U-Boot at: 87fb8000
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x14
flash size 1MB, sector count = 16
Flash:  1 MB
*** Warning - bad CRC, using default environment

Now starting pci_init process
pci_init_board: PCIe PLL not set for 40MHz refclk
pci_init finished

In:    serial
Out:   serial
Err:   serial
Net:   ag934x_enet_initialize...
No valid address in Flash. Using fixed address
No valid address in Flash. Using fixed address
 wasp  reset mask:c02200 
WASP ----> S27 PHY 
s27 reg init 
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
WASP ----> S27 PHY 
s27 reg init lan 
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: 00:03:7f:09:0b:ad
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Atheros on-chip NAND FLash Controller Driver, Version 0.1 (c) 2010 Atheros Communications, Ltd.
Ath Nand ID[87fef17c]: 2c:48:00:26:89
Micronset ns -0x80000-0x1000
====== NAND Parameters ======
sc = 0x87fef158 bbt = 0x87f98538 bbt_size = 0x400 nf_ctrl = 0x485
page = 0x1000 block = 0x80000 oob = 0xe0
size = 2048MB
Setting 0xb8116290 to 0x20402d0f
Hit any key to stop autoboot:  0 

Loading from device 0: ath-nand (offset 0x0)

** Bad Magic Number 0x73797375 **

Link to comment
Share on other sites

  • 1 year later...

Confirmed working solution.



https://docs.hak5.org/hc/en-us/articles/360010471774-Firmware-Recovery says

Reset the the WiFi Pineapple facing USB Ethernet interface back to DHCP or with netmask

While https://docs.hak5.org/hc/en-us/articles/360010555313-Setup-Basics says:

Browse to

The latter one be what worked for me.


Link to comment
Share on other sites


This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...