UniXNU

简体中文

English

简体中文

English

外观

三星 Galaxy Tab S7 FE Wi-Fi（SM-T733） ​

RigoLigoRLC/unixnu-sm-t733

Samsung SM-T733 format 2 baseline48f records eight CPUs, UFS, CPU display and touch. A642L driver and Turnip tooling compiled and deployed as49h with verbose diagnostics; GPU hardware execution remains pending. The49g IODT interrupt-parent panic is addressed by emitting AAPL,phandle in the shared converter.

源记录: porting.toml, 7ec704db1f60d99ea8606aabada919ed2dcbae1b.

本页按设备记录自动生成。

部分状态
配置implemented
固件与启动implemented
CPU 与中断implemented
内存与 DMAimplemented
存储与根卷implemented
显示implemented
输入implemented
GPUimplemented
网络implemented
音频planned
电源implemented
镜像组装implemented
诊断implemented

配置 ​

implemented

组件: ArmDTPlatform, device.

硬件与依赖 ​

  • SM-T733 uses the SM7325 profile and the iPad7,1 21H461 restore inputs.
  • The device's 14 driver and kit submodules retain their community repositories and adaptation revisions.

配置 ​

  • Both boards select schema_version 2, sm7325 and ipados-17.7.11-21H461.
  • The component list and archive list are complete arrays; device components.toml supplies community identities and board-specific recipes.
  • Public payload.adt.chip_id is hexadecimal 733; private local.toml hardware.unique_chip_id enters the official UNIXNU_UNIQUE_CHIP_ID environment variable.

操作步骤 ​

  • Run bash scripts/build.sh TAG for the system configuration or add --platform for the platform configuration.
  • The official driver resolves output paths from the selected OS profile and defconfig.

开发经验 ​

  • Format 2 arrays replace inherited arrays, so every selected component, configuration fragment, patch series and archive remains explicit.
  • The SM7325 profile owns common CPU, interrupt, timer, PSCI and UFS facts; the device owns memory span, identity and board policies.
  • system-format2-48f completed configure, resolve, kernel, menu, wallpaper, debug-tools and payload with exit code 0.

完成条件 ​

  • The selected components and source revisions resolve and the unified build produces the requested payload.

当前范围 ​

  • The format 2 observations cover the recorded eight-core, UFS, display and touch boot activity; other hardware observations retain their earlier build TAGs.

下一步 ​

  • Record subsequent system operations under the current build TAG.

证据 ​

固件与启动 ​

implemented

组件: DarwinBoot, EarlyEntry.

硬件与依赖 ​

  • Samsung bootloader is unlocked; BOOT/recovery use memory-input-display-46.
  • DarwinBoot receives the actual UEFI memory map, framebuffer and loaded sidecar addresses.

配置 ​

  • gts7fewifi.dsc supplies the Samsung firmware package and userdata payload driver.
  • The normal system menu entry is Boot UniXNU.

操作步骤 ​

  • Use the device build entry with --firmware when firmware source changes require a matching image.
  • Ordinary system updates write only the userdata FAT and restart the firmware.

开发经验 ​

  • The 47a runtime reaches the Apple logo, lock screen and USB with the existing 46 firmware.
  • 48f also booted with the existing 46 firmware and produced its own USB record.
  • The firmware's actual conventional-memory allocations define BootArgs memory ownership.

完成条件 ​

  • Firmware enters the menu, loads the payload and publishes the inherited framebuffer and UEFI reservations.

当前范围 ​

  • Samsung recovery and PARAM handling remain device-specific.

下一步 ​

  • Retain the existing firmware and record any new firmware-dependent behavior with its build TAG.

证据 ​

CPU 与中断 ​

implemented

组件: ArmCpu, NativeQcomTsens.

硬件与依赖 ​

  • CPU affinities are 0 through 0x700 in 0x100 steps.
  • GIC distributor is 0x17a00000; redistributors begin at 0x17a60000 with 0x20000 stride; the architectural counter is 19.2 MHz.

配置 ​

  • The SM7325 DTSI records four efficiency cores, three performance cores and one highest-performance core across three scheduler clusters.
  • The current CPU power code reads the three hardware EPSS LUTs and the 27 TSENS channels.

操作步骤 ​

  • The kernel build applies the SM7325 startup and scheduler patches before generating compiler records.
  • build-cpu-power.py compiles the scheduler adapter, EPSS policy and TSENS reader from those records.

开发经验 ​

  • The 45f runtime started all eight CPUs, used three Edge scheduler clusters and registered perfcontrol.
  • The 48f USB record confirms all eight CPUs online=1 with fail=0.
  • Thermal policy uses the actual stock sensor groups and EPSS rows.

完成条件 ​

  • All enabled CPUs start, timer/IPI delivery works and policy chooses hardware LUT rows for each frequency domain.

当前范围 ​

  • Format 2 must preserve the cluster-type, die-cluster-id and cluster-core-id properties consumed by XNU.

下一步 ​

  • Record further scheduler and thermal observations under the current build TAG.

证据 ​

内存与 DMA ​

implemented

硬件与依赖 ​

  • The device DRAM address span is 0x80000000 through 0x200000000 and contains reserved holes.
  • UEFI conventional-memory ranges exclude firmware, TZ, framebuffer and DMA reservations.

配置 ​

  • payload.adt.owned_memory_size remains auto.
  • The shared converter emits darwinboot-memory-range with a 1 GiB minimum and the existing 2 MiB-aligned maximum.

操作步骤 ​

  • DarwinBoot chooses a real contiguous UEFI allocation, then reports the successful base and size in BootArgs.

开发经验 ​

  • The 46b runtime reported 4548722688 bytes of XNU-managed memory, approximately 4.236 GiB; 48f has no separate LLDB memory probe.
  • The 6 GiB physical capacity is a DRAM span input; reservations and contiguous allocation still determine XNU ownership.

完成条件 ​

  • The owned window fits one successful UEFI allocation and preserves every reserved range.

当前范围 ​

  • Available contiguous memory depends on the live UEFI memory map.

下一步 ​

  • Record the actual allocated range during the format 2 boot.

证据 ​

存储与根卷 ​

implemented

组件: NativeUfs, NativeRamBlock, SoftwareAES, VirtioMmioBlock, VerifiedRoot.

硬件与依赖 ​

  • SM7325 UFS MMIO is 0x01d84000, SMMU MMIO is 0x15000000, stream ID is 0x80 and GIC INTID is 297.
  • USERDATA LBAs are 2320896 through 31099898 with 4096-byte sectors.

配置 ​

  • The NativeUfs community component retains its native-ufs-smmu-reg, native-ufs-stream-id and native-ufs-interrupt ABI.
  • The Data UUID remains 09A342FC-CB72-44DE-A10E-B89F14508869; its logical size remains 103079215104 bytes.
  • VirtioMmioBlock supplies storage ABI declarations to the existing archive builder.

操作步骤 ​

  • The ordered archive plan builds verified-root policies, original AES bindings, NativeUfs and NativeRamBlock before final kernel linking.
  • Ordinary deployment replaces the 512 MiB FAT at userdata offset 9382658048 and preserves the existing Data location and seed.

开发经验 ​

  • The 45f runtime completed 1213669 UFS requests with zero failures or timeouts and peak queue depth 16.
  • The 48f USB record shows 300788 completed UFS requests, failed=0, both timeout counts 0 and peak queue depth 14.
  • The existing Data implementation persists changes across ordinary FAT updates.

完成条件 ​

  • UFS publishes the signed OS/SystemOS windows, root mounts, launchd starts and Data writes survive reboot at the fixed offset.

当前范围 ​

  • Install / erase Data intentionally initializes the fixed Data region and requires the explicit menu action.

下一步 ​

  • Retain the layout and associate further storage activity with its build TAG.

证据 ​

显示 ​

implemented

组件: NativeMobileDisplay, NativeGeniI2c, NativeQcomDsi.

硬件与依赖 ​

  • UEFI leaves the panel, DSI PHY and video scanout running.
  • The original 21H461 AppleARMBacklight and MobileFramebuffer classes supply the runtime ABI.

配置 ​

  • Software rendering and CPU framebuffer copies remain enabled.
  • The current payload retains the CoreGraphics and CoreUI text fixups, framebuffer write-combine and display binding arguments.

操作步骤 ​

  • build-software-display.py emits original ABI bindings and the software display archive.
  • The board display coordinator sends DSI commands and controls panel power through the existing I2C resources.

开发经验 ​

  • The 46l runtime's backlight control and normal shutdown were confirmed by the user.
  • The 47a runtime reaches the graphical lock screen with CPU rendering.
  • The 48f USB record reports display ready=1 and awake=1 with continuing CPU display frames.

完成条件 ​

  • Frames have correct geometry and colors, userland presentation advances and brightness/shutdown controls work.

当前范围 ​

  • GPU acceleration is a separate hardware implementation stage.

下一步 ​

  • Record subsequent brightness and presentation operations with the current build TAG.

证据 ​

输入 ​

implemented

组件: NativeFocaltechTouch, NativeGeniSpi, NativeQcomSpmi, NativePmicKeys.

硬件与依赖 ​

  • The touch controller is FT8203 on GENI SPI and uses GPIO81.
  • PM7325 supplies the power, volume-down and volume-up inputs through SPMI arbiter v5.

配置 ​

  • The board touch HID descriptor retains multitouch IDs and grouped digitizer dispatch.
  • The original button ADT names remain hold, voldown and volup.

操作步骤 ​

  • The touch archive compiles the FT8203 protocol, GENI SPI transport and original IOHIDDevice subclass.
  • The PMIC archive compiles the SPMI controller, key protocol and board Consumer Control subclass.

开发经验 ​

  • Earlier runtime records contain complete power/volume DOWN and UP events.
  • The 48f USB record contains continuing touch DOWN/UP events.
  • The TLMM owner services registered GPIO sources and the PMIC transport preserves inherited hardware reset policy.

完成条件 ​

  • Touch coordinates and contact releases arrive, and all three physical buttons produce press/release HID reports.

当前范围 ​

  • Firmware and board electrical routing remain SM-T733 inputs.

下一步 ​

  • Associate further touch and physical-button operations with the current build TAG.

证据 ​

GPU ​

implemented

组件: Adreno6xx, ArmSmmu4K, AdrenoPM4, AdrenoFirmware.

硬件与依赖 ​

  • SM7325 A642L chip ID 0x06030500, 512 KiB GMEM and A660 GMU/SQE/ZAP inputs.

配置 ​

  • The independent Adreno6xx archive is force-loaded with native-adreno-a6xx=1.
  • GPU classes register after IOBSD; screen and early diagnostics are enabled.

操作步骤 ​

  • Initialize live command-db votes, clocks, GPU/GMU SMMU and HFI, then require CP fence and GPU memory readback before publication.
  • Run the raw ABI command followed by Turnip fill, compute and triangle readback.

开发经验 ​

  • 49h completed eight build stages and its FAT was written and synced; GPU runtime results are pending.
  • 49g panicked in IODTGetICellCounts because interrupt-parent resolution requires AAPL,phandle;49h includes the shared converter correction.

完成条件 ​

  • Actual A642L submissions and rendering succeed before enabling system Metal composition and direct DPU scanout.

当前范围 ​

  • No successful A642L GPU hardware execution has been recorded.
  • Final display presentation uses GPU-rendered surfaces directly; framebuffer copies remain a diagnostic fallback.

下一步 ​

  • Collect 49h screen and USB initialization results.

证据 ​

网络 ​

implemented

组件: NativeUsbNetwork.

硬件与依赖 ​

  • The DWC3 device transport supplies the current USB ECM link.

配置 ​

  • The system archive plan includes NativeUsbNetwork and retains native-usb-debug=1.

操作步骤 ​

  • The existing USB implementation exposes ECM and the XNU ifnet adapter exchanges frames with the host.
  • Pairing and RSD setup use the native iOS diagnostics tool when required.

开发经验 ​

  • The current ECM connection supports native debugserver capture and detach.

完成条件 ​

  • The host connects through ECM and completes the requested native diagnostics session.

当前范围 ​

  • Wi-Fi transport is pending; this area records the implemented USB network.

下一步 ​

  • Record the USB network connection after the format 2 boot.

证据 ​

音频 ​

planned

硬件与依赖 ​

  • SM-T733 audio requires its ADSP, transport, codec and board routes.

配置 ​

  • The current component list selects the implemented CPU, storage, display, input, power and USB services.

操作步骤 ​

  • Inventory the stock audio paths and firmware before adding an audio component.

开发经验 ​

  • The current working baseline reaches the graphical interface without an implemented audio route.

完成条件 ​

  • Each implemented playback or capture route carries its declared audio format and handles start/stop.

当前范围 ​

  • No audio playback or capture support is claimed.

下一步 ​

  • Implement audio after its hardware and firmware dependencies are collected.

证据 ​

按下一步操作收集证据。

电源 ​

implemented

硬件与依赖 ​

  • The board uses the SM5714 fuel gauge, TLMM GPIO54 notification and existing panel power resources.
  • CPU demand and temperature policy use EPSS and TSENS hardware.

配置 ​

  • The current battery, CPU DVFS, display power and managed-memory arguments remain enabled.
  • The system archive plan retains platform power, battery, thermal and display power ordering.

操作步骤 ​

  • The battery worker reads the fuel gauge and publishes the original IOPMPowerSource properties.
  • The platform shutdown implementation powers down the panel and invokes the existing firmware/PMIC path.

开发经验 ​

  • The 46l runtime's normal shutdown and brightness control were confirmed by the user.
  • The implemented battery service reports readings from the actual device resources.

完成条件 ​

  • Battery readings and charging changes update, brightness control works and normal shutdown completes.

当前范围 ​

  • Suspend/resume requires separate implementation and runtime evidence.

下一步 ​

  • Record the power services after the format 2 boot.

证据 ​

镜像组装 ​

implemented

组件: NativePrelink.

硬件与依赖 ​

  • The system payload contains the original Apple inputs, kernel, ADT, fixed Data seed and board addon files.

配置 ​

  • The payload remains a 512 MiB FAT with the existing menu, binary text replacements and root UUID.
  • The platform configuration retains its 64 MiB diagnostic payload.

操作步骤 ​

  • The official kernel builder owns prelinking; the unified device entry owns the dependent kernel, package and payload stages.
  • The coordinating agent deploys the complete resulting FAT with the existing MSC writer.

开发经验 ​

  • 48f completed all seven build stages, a full 536870912-byte FAT write and sync, followed by a USB boot record identifying its TAG.
  • Format 2 output directories include the OS profile and selected defconfig; build.py reads status --json output before copying artifacts.

完成条件 ​

  • All stages finish and the selected output contains a complete deployable payload for its TAG.

当前范围 ​

  • Deployment only replaces the ordinary FAT window; Data is preserved.

下一步 ​

  • Keep the delivered package and associate further runtime observations with system-format2-48f.

证据 ​

诊断 ​

implemented

组件: NativeUsbDebug.

硬件与依赖 ​

  • USB logging remains enabled, including the original opaque USB resource property in /chosen.
  • Native debugserver provides one attach session per normal boot.

配置 ​

  • The selected patch list includes process, page-table and SMP diagnostics.
  • Early framebuffer markers and regular screen startup logs remain disabled in the current normal configuration.

操作步骤 ​

  • Collect USB logs with the existing console tools.
  • Prepare symbols before a native attach, perform short reads, then continue and detach.

开发经验 ​

  • The 47a debugger entry records reason and caller before parsing the optional panic argument.
  • Native debugserver capture and detach have completed on the device.
  • 48f USB raw logs identify the current build and capture CPU, UFS, display and touch observations.

完成条件 ​

  • The build's selected patch list matches the delivered kernel and the requested logs or native capture are recorded with the build TAG.

当前范围 ​

  • A new native debugserver session requires a normal reboot after the prior session is consumed.

下一步 ​

  • Record further requested diagnostics with the current build TAG and its actual capture method.

证据 ​

Released under the BSD-2-Clause-Patent License.

Copyright 2026 UniXNU contributors