數位天堂

buffalo wcr-g300這是一款最新出的路由器，採用Ralink 400Mhz cpu（具體可查看 http://www.buffalo-asia.com/cgi-bin/pro … e=4&id=638 ）
自帶的固件（韌體）極為討厭，所以就想更換成dd-wrt，可能因為新出的緣故，沒有找到任何資料，只有老式的wcr系列的刷機資料，看cpu都差不多，結構也差不多，於是就嘗試著想刷一下試試
買來TTL線，拆開路由器，將路由器與電腦連接上，然後使用SecureCRT （超級終端）來獲取信息，結果發現和老式的同型號機相比，開機信息完全不一樣，我發現了busybox的字樣
於是電腦那邊我使用hfs（http file server）掛載上dd-wrt的固件（韌體），然後在超級終端哪裡使用wget http://xxxxx ，也就是hfs的地址來下載，可是剛下載完就瘋狂的無限提示Out of memory: kill process 812 (httpd) score 53 or a child ，後來問了一下，有人說是內存(記憶體)不夠，怎麼解決他也不知道。
再後來 我切換為linux系統，使用tftp推送的辦法也不行，因為並不推送。

請問，誰有辦法刷這款路由器？

最後貼一下開機信息

OK
No initrd
## Transferring control to Linux (at address 80320000) ...
## Giving linux memsize in MB, 16

Starting kernel ...


LINUX started...

THIS IS ASIC
Linux version 2.6.21 (root@SWD1-CVS3) (gcc version 3.4.2) #3 Fri Feb 24 15:53:08 CST 2012

The CPU feqenuce set to 400 MHz
CPU revision is: 0001964c
Determined physical RAM map:
memory: 01000000 @ 00000000 (usable)
Built 1 zonelists.  Total pages: 4064
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock4
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 5080807c, status = 11000000
PID hash table entries: 64 (order: 6, 256 bytes)
calculating r4koff... 00186a00(1600000)
CPU frequency 400.00 MHz
Using 200.000 MHz high precision timer.
Dentry cache hash table entries: 2048 (order: 1, 8192 bytes)
Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)
Memory: 12840k/16384k available (2870k kernel code, 3544k reserved, 325k data, 108k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 512 (order: 0, 4096 bytes)
TCP bind hash table entries: 512 (order: -1, 2048 bytes)
TCP: Hash tables configured (established 512 bind 512)
TCP reno registered
deice id : c2 20 16 c2 20 (2016c220)
MX25L3205D(c2 2016c220) (4096 Kbytes)
mtd .name = raspi, .size = 0x00400000 (4M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
Creating 6 MTD partitions on "raspi":
0x00000000-0x00030000 : "Bootloader"
0x00030000-0x00040000 : "Config"
0x00040000-0x00050000 : "Factory"
0x00050000-0x00180000 : "Kernel"
0x00180000-0x003b0000 : "RootFS"
0x003b0000-0x00400000 : "User_CFG"
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
JFFS2 version 2.2. (NAND) (SUMMARY)  (C) 2001-2006 Red Hat, Inc.
io scheduler noop registered (default)
Ralink gpio driver initialized
HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096
N_HDLC line discipline registered.
Ralink APSoC Hardware Watchdog Timer
Serial: 8250/16550 driver $Revision: 1.7 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
loop: loaded (max 8 devices)
rdm_major = 254
Ralink APSoC Ethernet Driver Initilization. v2.1  256 rx/tx descriptors allocated, mtu = 1500!
MAC_ADRH -- : 0x0000000c
MAC_ADRL -- : 0x43335277
PROC INIT OK!
PPP generic driver version 2.4.2
PPP BSD Compression module registered
NET: Registered protocol family 24
PPPoL2TP kernel driver, V0.17
PPTP driver version 0.8.1
flash0: started
block2mtd: version $Revision: 1.1.1.1 $
nf_conntrack version 0.5.0 (128 buckets, 1024 max)
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear
All bugs added by David S. Miller
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 108k freed
init started: BusyBox v1.12.1 (2012-02-24 15:41:16 CST)
starting pid 13, tty '': '/etc_ro/rcS'
Algorithmics/MIPS FPU Emulator v1.5
devpts: called with bogus options
mount: mounting none on /proc/bus/usb failed: No such file or directory
Welcome to
     _______  _______  ___     __  ____   _  _   ___
    |  ___  \|   __  ||   |   |__||    \ | || | /  /
    | |___| ||  |__| ||   |__  __ |     \| || |/  /
    |   _   /|   _   ||      ||  || |\     ||     \
    |__| \__\|__| |__||______||__||_| \____||_|\___\

                     =System Architecture Department=

2[check_jffs]80 : JFFS_OK
Set: phy[0].reg[0] = 3100
Set: phy[1].reg[0] = 3100
Set: phy[2].reg[0] = 3100
Set: phy[3].reg[0] = 3100
Set: phy[4].reg[0] = 3100
nvram_init: INFO=>nvram MAC initialized successfully!
==>shm_init()!!
check_shm_hash: Check shm hash value
nvram_init: INFO=>nvram conf initialized successfully!
nvram_init: INFO=> RAM CONF successful created!
nvram_init: INFO=> RC.CONF successful created!
---------------- Get WLAN MAC xxxxxxxxxxxxxxxx---------------
switch reg write offset=94, value=1000
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1001
switch reg write offset=44, value=1001
switch reg write offset=48, value=1002
switch reg write offset=70, value=ffff506f

phy_tx_ring = 0x00ac4000, tx_ring = 0xa0ac4000

phy_rx_ring0 = 0x00ac5000, rx_ring0 = 0xa0ac5000
MAC_ADRH -- : 0x00004ce6
MAC_ADRL -- : 0x76a2a838
RT305x_ESW: Link Status Changed
CDMA_CSG_CFG = 81000007
GDMA1_FWD_CFG = C0710000
vlan0001: Setting MAC address to  4c e6 76 a2 a8 38.
VLAN (vlan0001):  Underlying device (eth2) has same MAC, not checking promiscious mode.
vlan0002: Setting MAC address to  4c e6 76 a2 a8 38.
VLAN (vlan0002):  Underlying device (eth2) has same MAC, not checking promiscious mode.
vlan0001: dev_set_promiscuity(master, 1)
device eth2 entered promiscuous mode
device vlan0001 entered promiscuous mode
input_access=[3]
echo 3 > /proc/lan_wlan_access_controller
br0: port 1(vlan0001) entering learning state
Fri Jan  1 00:00:00 GMT 2010
2
device ra2 is already a member of a bridge; can't enslave it to bridge br0.
[Enter Test] in wlan_led_ctrl.c main()
.brctl setwlanforward br0 15
libupnp: using UDP SSDP_PORT = 1900
rmmod: ipv6passthru: No such file or directory
rmmod: ipv6passthru: No such file or directory
/usr/shell/dnsmasq.sh stop ok
/usr/shell/dnsmasq.sh start ok
dnsmasq: [truncated] m
/usr/shell/udhcpd.sh config ok
/usr/shell/udhcpd.sh start ok

***** g_wl_interface = ra0 ******

MAX_NUM_SESSIONS : 5; NUM_SEES: 64
starting pid 812, tty '/dev/ttyS1': '/bin/sh'


BusyBox v1.12.1 (2012-02-24 15:41:16 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.