If you like BoxMatrix then please contribute Supportdata, Supportdata2, Firmware and/or Hardware (get in touch).
My metamonk@yahoo.com is not reachable by me since years. Please use hippie2000@webnmail.de instead.
Property:QSEE
| BoxMatrix >> System >> QSEE | @ BoxMatrix - IRC-Chat - Translate: de es fr it nl pl |
| News | Selectors | Models | Accessories | Components | Environment | Config | Commands | System | Webif | Software | Develop | Lexicon | Community | Project | Media |
| Devices | Filesystems | Partitions | Sockets | Netlink | Pipes | Interfaces | Bridges | Ports | Events | Sources | Sinks | AVMIPC | Processes | Watchdogs | Memory | Slab | Vmalloc | ProcFS | SysFS | Research |
Linux-Partition
| Partition: | QSEE - type Part | Wiki | Freetz | IPPF | whmf | AVM | Web |
| Location: | System >> Linux-Partitions - Origin: AVM | ||||||
| Device: | mmcblk0p5, mmcblk0p6 | ||||||
| Properties: | Firmware: 7.27 - 7.81 | ||||||
| Function: | SBL: Qualcomm Secure Execution Environment - TrustZone #0 (Hawkeye). | ||||||
Goto: Hawkeye - Dakota - Weblinks - Dependencies - Model-Matrix - Missing Supportdata - SMW-Browser
Details
QSEE is the Qualcomm Secure Execution Environment partition. It contains the first instance of the TrustZone OS.
The label of this partition is originally named 0:QSEE, which is an invalid article name in Mediawiki.
QSEE is stored in 2 instances and is loaded by the SBL and executed in the TrustZone environment.
The size and location differ each platform, see below.
The QSEE partitions are updated at boot time by tz_update and at update time by tzupdate.
See also the qseecom.ko communication driver.
Multi-EVA boot on Qualcomm-ARM:
- SoCs: Hawkeye, Alder, Miami, Dakota, Maple
- Lexicon: PBL, SBL, TrustZone, EVA
- Procfs: sbl_version, sbl_reboot, struct_version
- Procfs: sbl_fault_register, sbl_reset_debug, sbl_wdog_status, sbl_wonce
- Procfs: tz0_verified, tz0_version, tz1_verified, tz1_version
- Procfs: tz_boot_ack, tz_boot_index, tz_version
- Procfs: eva0_verified, eva0_version, eva1_verified, eva1_version
- Procfs: eva_boot_ack, eva_boot_index
- Firmware: sblupdate, tzupdate, urladerupdate
- Commands: tz_update
- Startup: E02-tz_update, cortexa9, cortexa9.service
- Partitions: GPT, alignto512, align_config_to_4mb, SBL1, SBL1_1, MIBIB
- Partitions: BOOTCONFIG, BOOTCONFIG1, QSEE, QSEE_1, DEVCFG, DEVCFG_1, RPM, RPM_1
- Partitions: CDT, CDT_1, APPSBL, APPSBL_1, CONFIG, CONFIG_1, TME, TME_1
- Kconfig: CONFIG_AVM_FASTIRQ, CONFIG_AVM_TZ_EXTENSIONS, CONFIG_QSEECOM
- Kernel: avm_sbl.ko, avm_tz.ko, qseecom.ko, ipq40xx_qseecom.ko
Hawkeye
On Hawkeye both 4 MB sized QSEE partitons are located on the eMMC, the second instance is named QSEE_1.
See the SBL article for the partition table.
Dakota
On Dakota both *hidden* 512 KB sized QSEE partitons are located in mtd2, the second instance is named QSEE_B.
See the SBL article for the partition table.
Weblinks
Some interesting research links about the TrustZone and QSEE:
- The Road to Qualcomm TrustZone Apps Fuzzing
- Qualcomm IPQ40xx: Analysis of Critical QSEE Vulnerabilities
Dependencies
Daily updated index of all dependencies of this partition. Last update: GMT.
A * in the Mod column marks info from Supportdata-Probes, which will always stay incomplete.
A ** in the Mod column marks info from Supportdata2 probes, which by their nature will stay way more incomplete.
A - in the Mod column marks manual research, the Firmware then shows where the item occurs, not the Relation.
| Relation | Typ | Object | Mod | Firmware | Info | Origin |
|---|---|---|---|---|---|---|
| 0 dependencies for this partition | ||||||
Model-Matrix
Daily updated index of the presence, path and size of this partition for each model. Last update: 2024-12-21 07:02 GMT.
Showing all models using this partition. Click any column header (click-wait-click) to sort the list by the respective data.
The (main/scrpn/boot/arm/prx/atom/rtl) label in the Model column shows which CPU is meant for Multi-Linux models.
Note that this list comes from Supportdata-Probes, which can have arbitrary settings and come from different firmware versions.
It doesn't say much if a model is not listed here. It may be a missing supportdata file or just a disabled feature.
| Model | Firmware | Device | Size |
|---|---|---|---|
| FRITZ!Box 4060 | 7.28 - 7.29 | mmcblk0p5 | 4.0M |
| FRITZ!Box 5590 Fiber (main) | 7.27 - 7.81 | mmcblk0p5 | 4.0M |
| FRITZ!Box 5690 Pro (main) | 7.61 | mmcblk0p6 | 2.0M |
| FRITZ!Box 7682 | 7.60 | mmcblk0p6 | 2.0M |
| FRITZ!Box 7690 | 7.60 - 7.61 | mmcblk0p6 | 2.0M |
| 5 models use this partition | |||
Missing Supportdata
The data in this article is incomplete due to missing Supportdata-Probes for the models listed below.
If you own any of these models and would like to help then please get in touch.
| Model | Method | Info |
|---|---|---|
| FRITZ!Box WLAN 3270 IT | lua | http://fritz.box/support.lua |
| FRITZ!Box Fon ata | html | http://fritz.box/html/support.html |
| FRITZ!Box Fon ata 1020 | html | http://fritz.box/html/support.html |
| FRITZ!Box Fon 5010 | html | http://fritz.box/html/support.html |
| FRITZ!Box Fon 5012 | html | http://fritz.box/html/support.html |
| FRITZ!Box Fon WLAN 7113 INT | html | http://fritz.box/html/support.html |
| Speedport W 501V | telnet | |
| Speedport W 722V | console | |
| Eumex 300 IP | telnet | |
| 9 models without supportdata probes | ||
