[U-Boot] u-boot boot process is broken, how do i recover?

[JPT]

Hi,

I've got a readynas and successfully installed a recent kernel into ROM 
and Debian onto hard-drive.
But when I tried to modify the uboot-env from uboot-console I had 
trouble with the ; in the vars. And did not know how to escape.
So I tried to access uboot-env from linux.

I applied something like this (well, not that straight forward)

/etc/fw_env.config
# device    offset   size      Flash sector size   Number of sectors
/dev/mtd1   0x0      0x20000   0x20000             1

Maybe there is something wrong in my config?

apt-get install uboot-envtools
fw_printenv bootcmd
fw_setenv bootcmd.bak 'nand read.e 0x1200000 0x200000 0x600000;nand 
read.e 0x2000000 0x800000 0x1000000;bootm 0x1200000 0x2000000'

fw_setenv bootcmd 'nand read.e 0x1200000 0x200000 0x600000;bootm 0x1200000'

fw_printenv bootcmd.bak bootcmd
fw_printenv bootargs
fw_setenv bootargs.bak 'console=ttyS0,115200 reason=normal 
mtdparts=nand_mtd:0x180000 at 0(u-boot),0x20000 at 0x180000(u-boot-env),0x600000 at 0x200000(uImage),0x1000000 at 0x800000(minirootfs),0x6800000 at 0x1800000(jffs2)'

fw_setenv bootargs 'console=ttyS0,115200 root=/dev/sda3 
mtdparts=nand_mtd:0x180000 at 0(u-boot),0x20000 at 0x180000(u-boot-env),0x600000 at 0x200000(uImage),0x1000000 at 0x800000(minirootfs),0x6800000 at 0x1800000(jffs2)'

fw_printenv bootargs.bak bootargs


btw, kernel said:
Creating 5 MTD partitions on "nand_mtd":
0x000000000000-0x000000180000 : "u-boot"
0x000000180000-0x0000001a0000 : "u-boot-env"
0x000000200000-0x000000800000 : "uImage"
0x000000800000-0x000001800000 : "minirootfs"
0x000001800000-0x000008000000 : "jffs2"

Now the boot process is broken. I don't understand why.
It stops right after the network (see below). Usually the boot countdown 
should appear afterwards.
Is there anything I can do except unsoldering the ROM?

If I have to remove the chip and burn it using an external writer...
Is there any way to buy similar chip which can be mounted on a socket?

It's a H27U1G8F2BTR-BC (newer version of HY27UF081G2B-TCB)
which is NAND flash, 2,7-3,6V, 1Gbitx8 (128 MiB), SLC Single Die + Large 
Block, TSOP 48 pin. There is also a FBGA 63 PIN available. are there any 
sockets for FBGA I can solder to TSOP?
Or do other manufacturers offer compatible chips which can be applied to 
a socket?

thanks for any help!

Jan

          __  __                      _ _
         |  \/  | __ _ _ ____   _____| | |
         | |\/| |/ _` | '__\ \ / / _ \ | |
         | |  | | (_| | |   \ V /  __/ | |
         |_|  |_|\__,_|_|    \_/ \___|_|_|
  _   _     ____              _
| | | |   | __ )  ___   ___ | |_
| | | |___|  _ \ / _ \ / _ \| __|
| |_| |___| |_) | (_) | (_) | |_
  \___/    |____/ \___/ \___/ \__|
  ** MARVELL BOARD: DB-88F6282A-BP LE

U-Boot 1.1.4 (Feb  6 2012 - 14:40:46) Marvell version: 3.4.27
Netgear version: Uboot-1_1_4-NetgearDUOV3-V1008

U-Boot code: 00600000 -> 0067FFF0  BSS: -> 006D0120

Soc: MV88F1155 Rev 1 (DDR3)
CPU running @ 1600Mhz L2 running @ 533Mhz
SysClock = 533Mhz , TClock = 200Mhz

DRAM unknown CAL  tRP = 8 tRAS = 20 tRCD=8
DRAM CS[0] base 0x00000000   size 256MB
DRAM Total size 256MB  16bit width
Addresses 8M - 0M are saved for the U-Boot usage.
Mem malloc Initialization (8M - 7M): Done
NAND:128 MB
Flash:  0 kB

CPU : Marvell Feroceon (Rev 1)

Streaming disabled
Write allocate disabled


USB 0: host mode
PEX 0: PCI Express Root Complex Interface
PEX interface detected Link X1
Switch On !

Net:   egiga0 [PRIME]