Harman Kardon AVR1700 BCO update #fail Posted on September 17, 2016 by Kathy E. Gill If you own a Harman Kardon AVR1700 receiver that has locked up after displaying a BCO Update message, this fix may work for you. I just bought the AVR 1700 and one of the first (apparently stupid) things I did was a software update. When I selected update the receiver seemed to.
![]() ![]()
Oct 22, 2010 Home Theater Recievers: A step-by-step guide to help you upgrade the software on your Harman Kardon AVR 2600 or AVR 3600. Harman Kardon AVR 1700 5.1-Channel Network-Connected Audio/Video Receiver. Trying to update the firmware does not work as the USB port is for some.
A moderated community dedicated to all things reverse engineering. STICKIED THREADS. (or, 'why are there all of these papers about theoretical computer science and mathematics?' ) QUESTIONS POLICY If you have a question about how to use a reverse engineering tool, or what types of tools might be applicable to your project, or your question is specific to some particular target, ask it on the. Apart from that, self-posts severely degraded the quality of this subreddit when they were enabled, so they have been disabled in favor of a biweekly questions thread which is posted automatically by a robot (the latest of which is in the list of stickied threads above). SUBMISSION, COMMENTING, AND VOTING When feasible, post direct links to content. Blogs and websites that re-host or merely link to content that was originally available on another site, and remains available on its original site, are not allowed.
Domains that do not produce original content of their own and only exist to re-host content will be banned on the grounds of being spam. If it's a non-HTML link (e.g., a PDF), please tag it (e.g., put PDF at the end of the title). Similarly for videos, please tag them with VIDEO. Don't post it if it's irrelevant or has no content: we have technical standards and might remove these posts. Please vote for no reason other than quality of content. When commenting, please discuss content and not presentation. This is a technical community, so pointing out technical flaws is certainly within the realm of discourse, but please try not to be an asshole when you do.
Imagine yourself speaking your comment in a public place to the person's face when you write it. It would be tragic if needlessly negative commentary discouraged participation in the already-microscopic world of reverse engineering.
If the point of your comment is to put down someone else so as to demonstrate your superiority, please delete it without posting it, and then make an appointment with a psychotherapist regarding your inferiority complex. The legality of reverse engineering is a miasmic subject compounded by differing laws in differing jurisdictions. For basic legal information (not 'legal advice') surrounding reverse engineering in the United States, see the on the subject. None of the moderators are trained lawyers, so please use your best discretion when submitting, and we shall do the same while moderating. Subjects such as stolen source code and pirated software are never acceptable and will always be removed. Please instead post these links to (not affiliated with or endorsed by the moderators of ).
RELATED RESOURCES. sister subreddit for non-technical submissions and discussion. sister subreddit for mathematics related to program analysis. ##re on FreeNode IRC. I'm trying to extract firmware for the Harman Kardon AVR 1700, with the eventual goal of modifying it but mostly just for fun.
(This is a networked receiver and it has a remote app that can be used to control the device. Unfortunately, it's horribly unreliable, and I'd much prefer to get shell access to the device and write some basic software to be able to control it remotely from my computer.) There's a firmware update available (EU version is numbered 170 but otherwise identical), which I installed recently. This is a fairly small file (3MB unpacked), so I'm not sure whether it contains the full firmware or I'm just not used to the small size of embedded OS's. A file system?
Not where we're going! Browsing around using, looks like the image contains:. 0x000000 6kB bootloader. 0x010000 62kB main image.
0x100000 small mystery data section. 0x110000 large mystery data section. 0x200000 another small data section - looks kind of like image data? Opening the thing up and taking some nice photos of PCBs + chip part numbers will result in datasheets for whatever microprocessor + storage are on the device, and make reversing much easier. You could identify some things with just an image (bootloader has status print function at 0x63D4, main image printf at 0x56944) but why do it the time consuming way:).
Thanks for the suggestions! Hadn't run into bz before, looks useful. I'm obviously a bit out of my depth here. Would you mind explaining why knowing the microprocessor/storage would make it easier to identify/extract whatever is in the mystery data sections? As in, why would they affect the format?
Also, how did you identify 0x63D4 and 0x56944 as print functions? Looking at 0x63D4 I certainly agree it looks like a little loop to copy a null-terminated string off somewhere. 0x56944 appears to deal with varargs but is too short to actually do any printing (looks like it just increments the stack pointer by 12 bytes). Thanks for the help!
Part numbers to identify what exactly all the memory mapped peripheral stuff is; those are your libraries and syscalls. General component layout, too, to figure out what external components it's talking to via those libraries/syscalls. If you want to do fun stuff to the device beyond editing strings/pictures, you'll need 'em.
On closer look it looks like covers everything needed for the STM32 F4 line. Seems to at least partially match the firmware, so I guess the part number isn't too important. 3MB is a bit much for internal storage on an STM32, some of the firmware upgrade image probably gets written to something external. Hm, find comms interface used to do so, walk up to read/write code, then get lost in whatever the image/audio routines are? At a glance, code doesn't seem to be using the SPI registers, but is doing some bitbanging with unrolled nop-loops around 0x805674A.
Ehh, this looks time consuming, fully reversing the boot process (especially communication with external stuff) may be a better first step. I wonder if there's a static standard library for this part's peripherals? The print functions were purely due to string arguments. Huh - that printf is a bit weird. Implementation #ifdef'd out, but arguments got left in? Does the demo work if you blindly throw the firmware in an ELF via something like the below command? Objcopy -B arm -I binary -O elf32-littlearm -adjust-vma $*1 -strip-all -rename-section.data=.text,contents,alloc,load,readonly,code 'AVR170USB(V0305A).fw' AVR170.elf If you get processor options when loading it in the IDA demo, choose cortex-m.
The first 32bit value (at 0x08000000) is the initial SP, followed by a whole heap of 32bit exception vectors, the last being at +0x180. If you follow the reset exception (@0x08000004 - value of 0x0800d0c9) and turn it into code (press c on 0x0800d0c8 - LSBit is set in the exception vector table because it's thumb code.) it should give you a starting point. From a very brief look, that code is just for the USB-firmware-upgrade stuff, and it later loads an exception vector table/etc for the main app from 0x08010000 (so you want to do similar with that table). I noticed the padding to 3MB too.
Based on extrwi's post above noting the STM32 string, I figured it was likely a, although nothing in that series of chips has higher than 2MB flash or 256kB RAM. Any thoughts on where this thing might be hiding a filesystem?
It has a web interface (running GoAhead web server), but I can't find any trace of the associated files in the firmware (at least, nothing that shows up in strings, and as I mentioned in OP binwalk finds no signatures for compressed files either).
I just bought the AVR 1700 and one of the first (apparently stupid) things I did was a software update. When I selected 'update' the receiver seemed to go into some kind of standby mode and displays nothing on the TV.
The front of the receiver has said 'Software Update' and then its IP address for going on an hour now. I cannot find anything in any manuals, even the extended PDF version online, that says anything about how long it should take or if I'm supposed to be doing something. I don't want to sit here like an idiot if there is something I'm supposed to do. I also am afraid of unplugging it and bricking it. I've never seen any type of firmware update take this long. Any help would be appreciated.
I just did the same thing on my new AVR 1700. What you are supposed to do is go to the IP address listed, which is the IP of the receiver. When you hit that in a web browser, instead of the usual configuration page it will present you with a page where it shows the current firmware versions and allows you to upload a file from your computer. There is currently no update available on Harman's site AND the worst part is that there is no way on that firmware update page to cancel the process and revert to normal functioning - I had to do a hard reset as well. I would say to e-mail HK but I doubt they would do anything - maybe release a software update. Just set up my 1700 and avoided looking for any updates, and it is working great. However I have two questions I am hoping someone may be able to help with as I can't find any info in the full manual.
First, is it possible when connected through hdmi To have tv picture from directv/cable box showing while outputting airplay or fm through receiver? I like to have sports on the tv while playing music. Second, I can't get the iOS app to work. I've downloaded the app to my iPad and the receiver states it is connected on the osd menu, however the app states that it can't locate a device. Thanks for the help. First, is it possible when connected through hdmi To have tv picture from directv/cable box showing while outputting airplay or fm through receiver? If you want to do separate audio on your receiver while watching TV you might as well run a component video cable directly to the TV for video from your DirecTV or cable box.
Then you can play whatever source you want on the receiver. DirectV and cable boxes have simultanenous video output so you can run HDMI and component video from the box at the same time if necessary. I have a Denon AVR 591 connected to my bedroom LCD TV via HDMI. The DirecTV HD reciever is connected to my receiver via HDMI if I want to use audio and video watching TV. DirectV box is also connected to the TV with component video for the times I want listen to the radio, CD's or whatever while watching TV. Its only 1 additional cable and a very simple solution. Or just connect the DirecTV box to the TV via HDMI and run an optical cable from the box to the receiver for audio.
Choose whatever source on the receiver you want if you don't want to listen to TV audio. Originally Posted by Neal Moritz I have a Galaxy S2 and this reciever isn't setup to use it in any way, I can't even get the HK remote control app to work. No streaming files from android, I have yet to see a reciever that does.
But it does work well with seeing all my music on my computer (win 7 and Win 8) hooked up to the network, you can play it all using the reciever remote. And the sound is spectacular. I have the Galaxy S3. The H/K AVR app is able to control the receiver. I still haven't tried the vTuner feature and thus the DLNA support (if there is any) to see if I can stream from my android phone. I am not sure if any receiver supports Samsung all share (same promise as airplay), but if this receiver supports DLNA, you might be able to stream using something like Plex. I was trying to get the iPhone app working and stumbled across the software update - which led me to this forum.
First, I'm glad to have this option once I found out what it actually does (thanks brshoemak!). I'd much rather be able to update the AVR's software this way than with a USB drive! Next, after restarting the AVR to get out of 'software update' mode, my iPhone app magically started working! Strange that I've had the app for a week or two and the solution to get it working was to simply restart the AVR! I've been using airplay with the AVR since day 1 with no problems, I wonder why the app required an AVR restart? Also, while I was on a role, I went ahead and updated the 'H/K Remote' app & downloaded the 'Play' app.
Both work fine - although I wish the play app could do pictures & video - but that seems to be a licensing limitation with airplay (audio only for third party products - thanks Apple). First let me note there is nothing I can find wrong with my AVR1700 receiver. I always am checking for possible updates for the bevy of equipment I own. But this piece of equipment has me more than a bit confused with what is possible. The front of my receiver plainly has AVR1700 written on it.
The USA site has no software update - Check! When I go to the web site embedded in the receiver - plain as day it shows 'harman/kardon AVR 170'. NOT AVR 1700. It also shows a firmware version s9133.0200.0 4. So I instead search the web for an update for the AVR 170 and I find here: an update file AVR170EUSoftwareV3.01 So it appears that the European naming is different than the US naming, but the internals and/ or web server inside are the same??
Or something. And whereas the European site has an update, the US site doesn't post it. Anyone want to venture a guess at what's going on?
Should I chance an update with the available file or not? Originally Posted by spin9k First let me note there is nothing I can find wrong with my AVR1700 receiver. I always am checking for possible updates for the bevy of equipment I own. But this piece of equipment has me more than a bit confused with what is possible. The front of my receiver plainly has AVR1700 written on it.
The USA site has no software update - Check! When I go to the web site embedded in the receiver - plain as day it shows 'harman/kardon AVR 170'. NOT AVR 1700. It also shows a firmware version s9133.0200.0 4. So I instead search the web for an update for the AVR 170 and I find here: an update file AVR170EUSoftwareV3.01 So it appears that the European naming is different than the US naming, but the internals and/ or web server inside are the same?? Or something. And whereas the European site has an update, the US site doesn't post it.
Anyone want to venture a guess at what's going on? Should I chance an update with the available file or not? HK AVR design/marketing decisions are done from China.
AVRs sold in Europe and other export markets use a 3 digit model # while North America uses 4 digit. The internals are essentially the same, but do not load any other firmware though HK has designed in some software protection schemes to prevent loading the wrong firmware. Forget it unless it has the right model #, my understanding is that the 170 had some RDS issues that required updating. If you want more detailed info, contact their tech support directly.
Just my $0.05. Hi, I encountered the combination of two problems: BCO Update and UBS-Port-Disable. My problem is, that 'BCO Update' occurs every time I turn on the receiver. At few months ago this problem occurs for the first time but after reseting (Pressing the Surround Mode button for seconds in stand-by-mode) it was gone for months. But now the BCO-Update occurs every time I turn on the receiver. The 'BCO-Update-Problem' was solved via 'unsuccessful Web-Interface-Upload'. If this problem is solved and other problem occurs: The USB-port gets disabled.
I can only enable the USB-Port via doing a reset (pressing the Surround-Mode-Button until 'Reset' is display on the receiver. After the reset the USB-Port is enables again. But before I can do the update via a USB-Stick the 'BCO Update' problem reoccurs. Thus I'm not able to make an update. Uplaoding the correct firmware file xxxx didn't work either.
Firmware: Thus I have no solution to do make an firmware-upgrade in the expectation of solving the BCO-Update problem. Originally Posted by RIPPEY77 Hi, I encountered the combination of two problems: BCO Update and UBS-Port-Disable.
My problem is, that 'BCO Update' occurs every time I turn on the receiver. At few months ago this problem occurs for the first time but after reseting (Pressing the Surround Mode button for seconds in stand-by-mode) it was gone for months. But now the BCO-Update occurs every time I turn on the receiver. The 'BCO-Update-Problem' was solved via 'unsuccessful Web-Interface-Upload'. If this problem is solved and other problem occurs: The USB-port gets disabled.
I can only enable the USB-Port via doing a reset (pressing the Surround-Mode-Button until 'Reset' is display on the receiver. After the reset the USB-Port is enables again.
But before I can do the update via a USB-Stick the 'BCO Update' problem reoccurs. Thus I'm not able to make an update. Uplaoding the correct firmware file xxxx didn't work either. Firmware: Thus I have no solution to do make an firmware-upgrade in the expectation of solving the BCO-Update problem. I would be really happy if anyone has some useful hints??????? Thanks in advance What AVR do U have? If yes, that model is not sold in North America.
Just my $0.05. This is an old thread, but in case anyone else stumbles across it. Selecting 'network update' displays an IP address on the VFD. During this time if you type that address into a computer browser (connected to the same local network) instead of the normal status page you'll get a select/upload file interface. Don't try to use it: The file format the receiver is looking for via the web interface (xxx.BCO) does not match the file available from HK (xxx.FW).
The update file from HK (xxx.FW) works via the USB method of updating and should not be accepted by the network update. Selecting/uploading a xxx.FW file should return a file error, in which case nothing has been uploaded/deleted/or installed on the receiver.
Power cycling the receiver via the switch near the rear power cord should return it to normal operation. Update the receiver via the USB flash drive method as outlined in the instructions bundled with the firmware download.
It's beyond me why HK would place the 'network update' in the user menu with no documentation or appropriate files available. So many other connected devices these days incorporate automated internet fetching of software updates through similarly labeled buttons. I too assumed this was it's 'obvious' functionality and pushed it.
When I noticed the receiver appeared to hang while displaying an IP address my first assumption was it was looking for a TFTP connection to get the file (similar/ common procedure for installing aftermarket firmware on a router such as DD-WRT). After a brief period of panic I calmed down and figured this all out.
![]() Comments are closed.
|
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
December 2022
Categories |