I've been working on reversing the slingbox firmware. I didn't get anywhere trying to get into a current firmware file (see my other question - appears to be encrypted), so I found a download for an older slingbox firmware at http://autoupdate.sling.com/tinybird/200.00.US.99/ Using http://autoupdate.sling.com/tinybird/200.00.US.99/SlingboxSoloFwV2_1_110HwV1_0_3Current.bin as a place to start I noticed with binwalk the following:
$ binwalk -D 'filesystem:d' SlingboxSoloFwV2_1_110HwV1_0_3Current.bin
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
2947692 0x2CFA6C YAFFS filesystem
2948896 0x2CFF20 YAFFS filesystem
2948980 0x2CFF74 YAFFS filesystem
2949096 0x2CFFE8 YAFFS filesystem
2949244 0x2D007C YAFFS filesystem
2949424 0x2D0130 YAFFS filesystem
2950196 0x2D0434 YAFFS filesystem
2950288 0x2D0490 YAFFS filesystem
2950412 0x2D050C YAFFS filesystem
2950568 0x2D05A8 YAFFS filesystem
2950756 0x2D0664 YAFFS filesystem
2971856 0x2D58D0 SHA256 hash constants, little endian
3000600 0x2DC918 Base64 standard index table
3088905 0x2F2209 Unix path: /services.sling.com/configservices/rest/v2/configuration/product
3302671 0x32650F HTML document header
3302714 0x32653A HTML document footer
3344945 0x330A31 Unix path: /www.w3.org/XML/1998/namespace
3358301 0x333E5D XML document, version: "1.0"
3368469 0x336615 Unix path: /www.w3.org/XML/1998/namespace
3376275 0x338493 XML document, version: ""1."
3376594 0x3385D2 Unix path: /www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd
3385025 0x33A6C1 Unix path: /www.adobe.com/xml/dtds/cross-domain-policy.dtd
This yielded 11 different files (different based on md5). I tried the unyaffs tool on each of them, but got errors for each of them:
Can't determine flash layout, perhaps not a yaffs2 image
Repeating the same binwalk command on one of the resultant files yields 11 (smaller) files, also appearing to be YAFFS. Same error as before when I try unyaffs.
So at this point I'm stuck and out of ideas. Any assistance? Thanks!
binwalk
output should be consider a guess. I really doubt you have multiples YAFFS that are distant by 18 bytes, it does not make any sense.