dafang-hacks / uboot Goto Github PK
View Code? Open in Web Editor NEWLicense: Other
License: Other
I cannot modify the flash further than 64Mb. I get ERROR: attempting update past flash size (0x800000)
As I understood Wyze cam pan has 128mb of flash and I'm using dafang_128mb_v2.bin
Now why am I trying to modify the flash on u-boot? I lost all the content of the flash trying to recover the uboot and decided to install the dafang hack directly on to the flash (following mem map from https://github.com/EliasKotlyar/Xiaomi-Dafang-Hacks/blob/master/hacks/unbrick.md). I would appreciate any help I can get.
I have a Sannce I41HD, which Ive managed to get Serial access. It appears to have 256MB of memory and Im trying to figure how to get route access, EDIT - Managed to get to root access, backups of the firmware etc link I just need help deciding which firmware to try.
This is also the same as the Wetrans wifi camera 1080P
U-Boot 2013.07-svn3437 (Oct 27 2018 - 14:21:02)
Board: ISVP (Ingenic XBurst T20 SoC)
DRAM: 256 MiB
Top of RAM usable for U-Boot at: 84000000
Reserving 457k for U-Boot at: 83f8c000
Reserving 32800k for malloc() at: 81f84000
Reserving 32 Bytes for Board Info at: 81f83fe0
Reserving 124 Bytes for Global Data at: 81f83f64
Reserving 128k for boot params() at: 81f63f64
Stack Pointer at: 81f63f48
Now running in RAM - U-Boot at: 83f8c000
MMC: msc: 0
idcode:684017
the manufacturer 68
idcode:684017
the manufacturer 68
In: serial
Out: serial
Err: serial
Net: Jz4775-9161
idcode:684017
the manufacturer 68
IRCUT Init
Sensor is [JXF22]
Bootargs Sensor is JXF22
Interface: MMC
Device 0: Vendor: Man 000003 Snr 064aae01 Rev: 8.5 Prod: SC32G▒
Type: Removable Hard Disk
Capacity: 30436.5 MB = 29.7 GB (62333952 x 512)
Filesystem: FAT16 "NO NAME "
Hit any key to stop autoboot: 0
idcode:684017
the manufacturer 68
SF: 2621440 bytes @ 0x48000 Read: OK
## Booting kernel from Legacy Image at 80600000 ...
Image Name: Linux-3.10.14
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 1420490 Bytes = 1.4 MiB
Load Address: 80010000
Entry Point: 8036e250
Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
Starting kernel ...
Initializing cgroup subsys cpu
Initializing cgroup subsys cpuacct
Linux version 3.10.14 (root@ubuntu-64) (gcc version 4.7.2 (Ingenic r2.3.3 2016.12) ) #1 PREEMPT Wed Jul 18 09:54:48 CST 2018
bootconsole [early0] enabled
CPU0 RESET ERROR PC:83F8C3FC
CPU0 revision is: 00d00101 (Ingenic Xburst)
FPU revision is: 00b70000
CCLK:835MHz L2CLK:417Mhz H0CLK:200MHz H2CLK:200Mhz PCLK:100Mhz
Determined physical RAM map:
memory: 00403000 @ 00010000 (usable)
memory: 0002d000 @ 00413000 (usable after init)
User-defined physical RAM map:
memory: 024d4000 @ 00000000 (usable)
Zone ranges:
Normal [mem 0x00000000-0x024d3fff]
Movable zone start for each node
Early memory node ranges
node 0: [mem 0x00000000-0x024d3fff]
Primary instruction cache 32kB, 8-way, VIPT, linesize 32 bytes.
Primary data cache 32kB, 8-way, VIPT, no aliases, linesize 32 bytes
pls check processor_id[0x00d00101],sc_jz not support!
MIPS secondary cache 128kB, 8-way, linesize 32 bytes.
Built 1 zonelists in Zone order, mobility grouping off. Total pages: 9354
Kernel command line: console=ttyS1,115200n8 mem=37712K@0x0 ispmem=8100K@0x24D4000 rmem=19724K@0x2CBD000 init=/linuxrc rootfstype=squashfs root=/dev/mtdblock3 flash=SF sensor=JXF22 maxheight=1080 eeprom=NONE device_id=3040006 ethaddr=00:11:22:33:44:72 devinfo=jcoxa20181001o217701b85d351d8ff206292d283c261f64 cpu=T20 ddr=64M mtdparts=jz_sfc:256K@0K(sf-bootloader),32K@256K(sf-bootenv),1472K@288K(sf-kernel),1152K@1760K(sf-rootfs),4576K@2912K(sf-ipcfs),704K@7488K(sf-miscfs) feature=4 lang=2
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 32368k/37712k available (3483k kernel code, 5344k reserved, 623k data, 180k init, 0k highmem)
SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
Preemptible hierarchical RCU implementation.
NR_IRQS:418
clockevents_config_and_register success.
Calibrating delay loop... 829.84 BogoMIPS (lpj=4149248)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
Initializing cgroup subsys debug
Initializing cgroup subsys freezer
regulator-dummy: no parameters
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
jz-dma jz-dma: JZ SoC DMA initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
i2c-gpio i2c-gpio.1: using pins 57 (SDA) and 58 (SCL)
(null): set:249 hold:250 dev=100000000 h=500 l=500
media: Linux media interface: v0.10
Linux video capture interface: v2.00
Switching to clocksource jz_clocksource
cfg80211: Calling CRDA to update world regulatory domain
jz-dwc2 jz-dwc2: cgu clk gate get error
jz-dwc2 jz-dwc2: regulator vbus get error
DWC IN OTG MODE
sft id =========================off
dwc2 dwc2: Keep PHY ON
dwc2 dwc2: Using Buffer DMA mode
dwc2 dwc2: Core Release: 3.00a
dwc2 dwc2: DesignWare USB2.0 High-Speed Host Controller
dwc2 dwc2: new USB bus registered, assigned bus number 1
usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb1: Product: DesignWare USB2.0 High-Speed Host Controller
usb usb1: Manufacturer: Linux 3.10.14 dwc2-hcd
usb usb1: SerialNumber: dwc2
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
dwc2 dwc2: DWC2 Host Initialized
NET: Registered protocol family 2
TCP established hash table entries: 512 (order: 0, 4096 bytes)
TCP bind hash table entries: 512 (order: -1, 2048 bytes)
TCP: Hash tables configured (established 512 bind 512)
TCP: reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
freq_udelay_jiffys[0].max_num = 10
cpufreq udelay loops_per_jiffy
12000 59588 59588
24000 119176 119176
60000 297941 297941
120000 595882 595882
200000 993137 993137
300000 1489705 1489705
600000 2979411 2979411
dwc2 dwc2: ID PIN CHANGED!
init DWC as A_HOST
792000 3932823 3932823
1008000 5005411 5005411
1200000 5958823 5958823
squashfs: version 4.0 (2009/01/31) Phillip Lougher
jffs2: version 2.2. © 2001-2006 Red Hat, Inc.
msgmni has been set to 63
io scheduler noop registered
io scheduler cfq registered (default)
jz-uart.1: ttyS1 at MMIO 0x10031000 (irq = 58) is a uart1
console [ttyS1] enabled, bootconsole disabled
console [ttyS1] enabled, bootconsole disabled
loop: module loaded
logger: created 256K log 'log_main'
jz SADC driver registeres over!
jz TCU driver register completed
the id code = 684017, the flash name is BH25Q64BS
JZ SFC Controller for SFC channel 0 driver register
6 cmdlinepart partitions found on MTD device jz_sfc
Creating 6 MTD partitions on "jz_sfc":
0x000000000000-0x000000040000 : "sf-bootloader"
0x000000040000-0x000000048000 : "sf-bootenv"
0x000000048000-0x0000001b8000 : "sf-kernel"
0x0000001b8000-0x0000002d8000 : "sf-rootfs"
0x0000002d8000-0x000000750000 : "sf-ipcfs"
0x000000750000-0x000000800000 : "sf-miscfs"
SPI NOR MTD LOAD OK
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <[email protected]>
usbcore: registered new interface driver cdc_wdm
jzmmc_v1.2 jzmmc_v1.2.0: vmmc regulator missing
jzmmc_v1.2 jzmmc_v1.2.0: card inserted, state=0
jzmmc_v1.2 jzmmc_v1.2.0: register success!
usbcore: registered new interface driver usbhid
usbhid: USB HID core driver
TCP: cubic registered
NET: Registered protocol family 17
drivers/rtc/hctosys.c: unable to open rtc device (rtc0)
VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
Freeing unused kernel memory: 180K (80413000 - 80440000)
usb 1-1: new high-speed USB device number 2 using dwc2
usb 1-1: New USB device found, idVendor=0bda, idProduct=0179
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: 802.11n NIC
usb 1-1: Manufacturer: Realtek
mmc0: new high speed SDHC card at address aaaa
mmcblk0: mmc0:aaaa SC32G 29.7 GiB
mmcblk0: p1
_ _____ _
(_) ___ ___ |_ _| ___ | | __
| | / __| / _ \ _____ | | / _ \ | |/ /
| | | (__ | (_) | |_____| | | | __/ | < hello to jco&jz world
_/ | \___| \___/ |_| \___| |_|\_\
|__/
mdev is ok......
--- mount squashfs succ! ---
--- mount jfss2 succ! ---
Auto login as root ...
jabsco login: Mon Oct 1 00:00:10 UTC 2018
PATH: /ipc/bin:/bin:/sbin:/usr/bin:/usr/sbin
LD_LIBRARY_PATH: /ipc/lib:/lib
register all isp device successfully!
@@@@ tx-isp-probe ok @@@@@
EGISTER Device Driver $Version: 1.0.0.0 (REGISTER DRIVER) $ OK
i2c Driver OK
UNIQUE:[00-03] [00][00][00][00]
UNIQUE:[04-07] [50][14][e9][17]
UNIQUE:[08-11] [30][72][97][1c]
UNIQUE:[12-15] [50][14][e9][17]
UNIQUE:[16-19] [30][72][97][1c]
UNIQUE:[20-23] [50][14][e9][17]
gd25q Device Driver OK
jz_codec_register: probe() successful!
dma dma0chan24: Channel 24 have been requested.(phy id 7,type 0x06 desc a087c000)
dma dma0chan25: Channel 25 have been requested.(phy id 6,type 0x06 desc a087d000)
FAT-fs (mmcblk0p1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
nc: can't connect to remote host (127.0.0.1): Connection refused
___________ sd card probe ______________
________ scan after sd card mount ________
usb 1-1: USB disconnect, device number 2
usb 1-1: new high-speed USB device number 3 using dwc2
usb 1-1: New USB device found, idVendor=0bda, idProduct=0179
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: 802.11n NIC
usb 1-1: Manufacturer: Realtek
USB DEV - idVendor:0bda idProduct:0179
RTL871X: module init start
RTL871X: rtl8188eu rtl8188EUS_linux_v4.3.0.9_15178.20150907_modify_by_Di3_for_airlink_2JieGao
RTL871X: build time: Jul 10 2017 10:32:13
bFWReady == _FALSE call reset 8051...
RTL871X: rtw_ndev_init(wlan0)
RTL871X: rtw_ndev_init(wlan1)
usbcore: registered new interface driver rtl8188eu
RTL871X: module init ret=0
+------------------------------------------------+
Hello Server World @2018-10-01.00:00:14!!
+------------------------------------------------+
[-DBG-] [ctrl/wifi_factory_config.c: 228] soft limit -1, hard limit:-1
[-DBG-] [ctrl/wifi_factory_config.c: 233] soft limit 6291456, hard limit:6291456
[-DBG-] [ctrl/wifi_factory_config.c: 109] szDevID: 30400065083
[-DBG-] [ctrl/wifi_factory_config.c: 116] danale.conf is exist,id:9895c41e7d7e87bfd8d4f54abcffd253
[-DBG-] [ctrl/wifi_factory_config.c: 385] device id is ok, danale conf is ok
<log_0> [j_schedule.c:82]:create_BGread_schedule init sche_thread:0x97d640
[j_schedule.c: 69] create_BGread_schedule start sche_thread:0x97d640 pid:214 ppid:71
<log_0> [j_event.c:437]:new event loop:0x97d760
<log_0> [j_schedule.c:199]:new sched:0x97d5f0
[ctrl/system_main.cpp: 121] init support str_dev_type:enhanced str_platfUNIQUE:[00-03] [00][00][00][00]
orm:danale ...
UNIQUE:[04-07] [50][14][e9][17]
UNIQUE:[08-11] [30][72][97][1c]
UNIQUE:[12-15] [50][14][e9][17]
UNIQUE:[16-19] [30][72][97][1c]
UNIQUE:[20-23] [50][14][e9][17]
[-DBG-] [ctrl/system_ctrl.c: 792] systemType:secure=1 sectype=2 devid=30400065083 cpu=3 sensor=25 cpufreq=829
[-DBG-] [conf/jconfig.cpp: 4267] config init
[ctrl/system_main.cpp: 131] init JCPCMD...
[jcp/jcpService.cpp: 65] success create socket (socket:8)
[ctrl/system_main.cpp: 134] init timezone...
[ctrl/system_main.cpp: 140] init Encode ___1___
[-ENC-] [encode/system/encode_system.c: 103] --- gstVencSystem:[13]
set sensor gpio as PA-low-10bit
jxf22 0-0040: jxf22 chip found @ 0x40 (i2c0)
tx_isp: Registered sensor subdevice jxf22 0-0040
Sensor ISP File :/ipc/sensor/jxf22.bin
###### image_tuning_v4l2_open 4329 #######
[-ENC-] [encode/sdk/encode_sdk.c: 195] --- IMP Version:IMP-3.11.1 CPU Info:T20-Lite
[conf/conf_nand.c: 892] read sensor[JXF22] and maxheight[1080]
[-DBG-] [src/pthread_manage.cpp: 92] Init pthreadManage...
[-ENC-] [encode/message/encode_message.c: 541] --- Audio [1][0][80][84][1][2]
[ctrl/system_main.cpp: 142] init Encode ___2___
[-ENC-] [encode/common/encode_common.c: 615] --- priority_min=1,priority_max=99
[src/pthread_manage.cpp: 73] pthread_info [capture_audio_thread] tid:230 ptid:212 pid:212
[-DBG-] [src/pthread_manage.cpp: 74] thread begin = capture_audio_thread, pid = 230
[-ENC-] [encode/audio/encode_captureaudio.c: 374] --- Audio In GetPubAttr samplerate : 8000
[-ENC-] [encode/audio/encode_captureaudio.c: 375] --- Audio In GetPubAttr bitwidth : 16
[-ENC-] [encode/audio/encode_captureaudio.c: 376] --- Audio In GetPubAttr soundmode : 1
[-ENC-] [encode/audio/encode_captureaudio.c: 377] --- Audio In GetPubAttr frmNum : 20
[-ENC-] [encode/audio/encode_captureaudio.c: 378] --- Audio In GetPubAttr numPerFrm : 640
[-ENC-] [encode/audio/encode_captureaudio.c: 379] --- Audio In GetPubAttr chnCnt : 1
[src/pthread_manage.cpp: 73] pthread_info [play_audio_process] tid:229 ptid:212 pid:212
[-DBG-] [src/pthread_manage.cpp: 74] thread begin = play_audio_process, pid = 229
[-ENC-] [encode/audio/encode_playaudio.c: 766] --- Audio Out GetPubAttr samplerate : 8000
[-ENC-] [encode/audio/encode_playaudio.c: 767] --- Audio Out GetPubAttr bitwidth : 16
[-ENC-] [encode/audio/encode_playaudio.c: 768] --- Audio Out GetPubAttr soundmode : 1
[-ENC-] [encode/audio/encode_playaudio.c: 769] --- Audio Out GetPubAttr frmNum : 20
[-ENC-] [encode/audio/encode_playaudio.c: 770] --- Audio Out GetPubAttr numPerFrm : 640
[-ENC-] [encode/audio/encode_playaudio.c: 771] --- Audio Out GetPubAttr chnCnt : 1
[-ENC-] [encode/infrared/encode_infrared.c: 110] --- SU_ADC_Init is Finish
[-ENC-] [encode/infrared/encode_infrared.c: 113] --- SU_ADC_EnableChn is Finish
[-ENC-] [encode/infrared/encode_infrared.c: 56] --- eIRCUTMode:NORMAL
[-ENC-] [encode/stream/encode_stream.c: 58] --- encode_stream_init is OK
[-ENC-] [encode/osd/encode_osd.c: 398] --- encode_osd_init is OK
[-ENC-] [encode/encode/encode_encode.c: 2221] --- encode_encode_init is OK!
[-ENC-] [encode/message/encode_message.c: 1022] --- Enter message Init...
This event manager doesn't know about '64' events!
This event manager doesn't know about '103' events!
This event manager doesn't know about '105' events!
This eventcodec_set_device: set device: speaker...
manager doesn't know about '1012' events!
[-ENC-] [encode/message/encode_message.c: 75] --- cb video chage of profile
[-ENC-] [encode/message/encode_message.c: 186] --- gnum:2
[-ENC-] [encode/message/encode_message.c: 190] --- ------------------------------------------
[-ENC-] [encode/message/encode_message.c: 191] --- id:0
[-ENC-] [encode/message/encode_message.c: 192] --- enable:1
[-ENC-] [encode/message/encode_message.c: 193] --- codec:2
[-ENC-] [encode/message/encode_message.c: 194] --- vencsize:5
[-ENC-] [encode/message/encode_message.c: 195] --- standard:0
[-ENC-] [encode/message/encode_message.c: 196] --- fps:12
[-ENC-] [encode/message/encode_message.c: 197] --- bps:1024
[-ENC-] [encode/message/encode_message.c: 198] --- gop:16
[-ENC-] [encode/message/encode_message.c: 199] --- fixfps:1
[-ENC-] [encode/message/encode_message.c: 200] --- fixbps:2
[-ENC-] [encode/message/encode_message.c: 54] --- vencsize:[5] profile:[0]
[-ENC-] [encode/message/encode_message.c: 190] --- ------------------------------------------
[-ENC-] [encode/message/encode_message.c: 191] --- id:1
[-ENC-] [encode/message/encode_message.c: 192] --- enable:1
[-ENC-] [encode/message/encode_message.c: 193] --- codec:2
[-ENC-] [encode/message/encode_message.c: 194] --- vencsize:7
[-ENC-] [encode/message/encode_message.c: 195] --- standard:0
[-ENC-] [encode/message/encode_message.c: 196] --- fps:12
[-ENC-] [encode/message/encode_message.c: 197] --- bps:200
[-ENC-] [encode/message/encode_message.c: 198] --- gop:24
[-ENC-] [encode/message/encode_message.c: 199] --- fixfps:1
[-ENC-] [encode/message/encode_message.c: 200] --- fixbps:1
[-ENC-] [ecodec_set_device: set device: MIC...
ncode/message/encode_message.c: 54] --- vencsize:[7] profile:[0]
Thanks
I flashed dafang_128mb_v2.bin to my camera successfully. MD5 Sum of the downloaded file matches what is listed in the repository.
Camera boots to uboot and gets stuck there. This camera uses a ZB25VQ128 flash and I guess that isn't supported. It's one of the cameras that requires cfw-1.2 to work properly.
U-Boot> sf probe
SF: Unsupported manufacturer 5e
Failed to initialize SPI flash at 0:0
--->probe spend 6 ms
I managed to load a demo.bin and flash the original bootloader back onto the camera to unbrick it.
Here is the boot log from serial:
U-Boot SPL 2013.07-gba03eeb (Dec 04 2018 - 21:41:16)
pll_init:365
l2cache_clk = 375000000
pll_cfg.pdiv = 8, pll_cfg.h2div = 4, pll_cfg.h0div = 4, pll_cfg.cdiv = 1, pll_cfg.l2div = 3
nf=36 nr = 1 od0 = 1 od1 = 1
cppcr is 02404900
CPM_CPAPCR 0470890d
nf=42 nr = 1 od0 = 1 od1 = 1
cppcr is 02a04900
CPM_CPMPCR 07d0c90d
nf=50 nr = 1 od0 = 1 od1 = 1
cppcr is 03204900
CPM_CPVPCR 0320490d
cppcr 0x9a794410
apll_freq 860160000
mpll_freq 1000000000
vpll_freq = 1200000000
ddr sel mpll, cpu sel apll
ddrfreq 500000000
cclk 860160000
l2clk 286720000
h0clk 250000000
h2clk 250000000
pclk 125000000
DDRC_DLP:0000f003
U-Boot 2013.07-gba03eeb (Dec 04 2018 - 21:41:16)
Bootloader-Version: Dafanghacks v2
Board: Dafang 128MB (Ingenic XBurst T20 SoC)
DRAM: 128 MiB
Top of RAM usable for U-Boot at: 84000000
Reserving 419k for U-Boot at: 83f94000
Reserving 32784k for malloc() at: 81f90000
Reserving 32 Bytes for Board Info at: 81f8ffe0
Reserving 124 Bytes for Global Data at: 81f8ff64
Reserving 128k for boot params() at: 81f6ff64
Stack Pointer at: 81f6ff48
Now running in RAM - U-Boot at: 83f94000
MMC: msc: 0
SF: Unsupported manufacturer 5e
*** Warning - spi_flash_probe() failed, using default environment
In: serial
Out: serial
Err: serial
Setting yellow_gpio to off:
gpio_request lable = cmd_gpio gpio = 38
gpio: pin 38 (gpio 38) value is 1
Setting blue_gpio to off:
gpio_request lable = cmd_gpio gpio = 39
gpio: pin 39 (gpio 39) value is 1
Setting night_gpios:
gpio_request lable = cmd_gpio gpio = 81
gpio: pin 81 (gpio 81) value is 0
gpio_request lable = cmd_gpio gpio = 49
gpio: pin 49 (gpio 49) value is 0
gpio_request lable = cmd_gpio gpio = 25
gpio: pin 25 (gpio 25) value is 0
Setting USB enable:
gpio_request lable = cmd_gpio gpio = 47
gpio: pin 47 (gpio 47) value is 1
Setting Speaker enable:
gpio_request lable = cmd_gpio gpio = 63
gpio: pin 63 (gpio 63) value is 1
Setting Enable SDCARD:
gpio_request lable = cmd_gpio gpio = 43
gpio: pin 43 (gpio 43) value is 1
gpio_request lable = cmd_gpio gpio = 48
gpio: pin 48 (gpio 48) value is 0
Running SDupdate....
Interface: MMC
Device 0: Vendor: Man 000027 Snr 241e7301 Rev: 13.10 Prod: SD16GP
Type: Removable Hard Disk
Capacity: 14784.0 MB = 14.4 GB (30277632 x 512)
Filesystem: FAT32 "NO NAME "
SF: Unsupported manufacturer 5e
Failed to initialize SPI flash
sdupdate - auto upgrade file from mmc to flash
Usage:
sdupdate LOAD_ID ADDR_START ADDR_END
LOAD_ID: 0-->u-boot
1-->kernel
2-->rootfs
3-->demo.bin
ex:
sdupdate (update all)
or
sdupdate 0 0x0 0x40000
Hit any key to stop autoboot: 0
MMC Found
Trying to find FAT uEnv.txt
reading uEnv.txt
580 bytes read in 5 ms (113.3 KiB/s)
uEnv found - Booting from microsd ...
gpio_request lable = cmd_gpio gpio = 39
gpio: pin 39 (gpio 39) value is 0
SF: Unsupported manufacturer 5e
Failed to initialize SPI flash at 0:0
--->probe spend 6 ms
No SPI flash selected. Please run `sf probe'
Wrong Image Format for bootm command
ERROR: can't get kernel image!
Trying to find EXT3 uEnv.txt
Failed to mount ext2 filesystem...
** Unrecognized filesystem type **
Trying to find EXT3 uEnv_dafang128.txt
Failed to mount ext2 filesystem...
** Unrecognized filesystem type **
Booting from NAND....
gpio_request lable = cmd_gpio gpio = 38
gpio: pin 38 (gpio 38) value is 0
SF: Unsupported manufacturer 5e
Failed to initialize SPI flash at 0:0
--->probe spend 6 ms
No SPI flash selected. Please run `sf probe'
Wrong Image Format for bootm command
ERROR: can't get kernel image!
U-Boot>
To anyone who runs into this problem, you can load your firmware off of your sd card like this
fatload mmc 0:1 0x80600000 cfw-1.2.bin 0xa8ffc0 0x40
bootm 0x80600000
login root ismart12
flash_eraseall /dev/mtd0
dd if=original-bootloader.bin of=/dev/mtd0
I flash the custom bootloader for my cam xiaofang1s_64mb_v2.bin
flash is ok but doesn't boot from ext3 sdcard with rootfs, maybe because it's only for dafang and not xiaofang
now the cam boot correctly with fat32 sdcard and firmware_mod but doesn't work good
I have ssh access to my cam so I can flash back original bootloader
so...
how to flash original boot loader? or make the cam work correctly with rootfs?
Hello all, great projects.
A couple of weeks ago i bought a Xiaomi Dafang camera, for the sole reason to hack it and tinker with.
Flashed the cfw-1.3.bin (based on 5.5.1.243) + files as soon as I unboxed it.
Mounted a serial header to follow bootprocess.
After some tinkering, flashed the new bootloader 'dafang_128mb_v2.bin'.
All went well, but I have problems with the stability of WiFi, even when in short distance of the AP.
A couple of times a day, randomly, I get ping-responses (from another linux machine) of over 90 seconds.
I was looking for a newer firmware to try, but in one of the project-issues I found a suggestion to downgrade to 5.5.1.177.
So I copied the appropriate demo.bin to the SD-card and booted with SETUP-button pressed.
No update, normal boot followed.
Acccording to the serial log, and comparing this to previous log files, it seems this new bootloader doesn't check for the SETUP-button.
A short glance at the source code confirms this.
Now my question is:
Have I overlooked something, or is this deliberately?
I have read all the markdowns, but I can't remember a reference.
It's no problem to flash demo.bin some other way, but I was just wondering.
Cheers,
Rob
Hi there!
I brought an IP Camera with the following describtion:
Wetrans wifi camera 1080P fisheye mini wireless home security IP camera panoramic 180 wide angle ip cam 2.5mm Lens night vision
I can access the camera by telnet on port 9527 with root/jco66688
It has no Web- or RTSP and can only be used by the "Danale" App. Can anybody tell me which bootloader I can use? I guess Dafang 64MB?
Thanks!!
root@jabsco:/ipc/bin# cat /proc/cpuinfo
system type : bull
machine : Unknown
processor : 0
cpu model : Ingenic Xburst V0.1 FPU V0.0
BogoMIPS : 829.84
wait instruction : yes
microsecond timers : no
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : yes, count: 1, address/irw mask: [0x0fff]
isa : mips32r1
ASEs implemented :
shadow register sets : 1
kscratch registers : 7
core : 0
VCED exceptions : not available
VCEI exceptions : not available
Hardware : isvp
Serial : 00000000 00000000 00000000 00000000
root@jabsco:/ipc/bin# lzbox 3
[Success]
solution=ingenic
platform=DANALE
jcpver=3.0
kernelver=Thu Jul 9 15:46:54 CST 2015
serverver=WFT3.1.1806-20190102-DANALE-JCO-EN
webver=V2.3.4-20180608
devname=INGENIC-V01
devtype=IPCAM-100
devid=30400046157
devtype_select=0
custom_ui=JCO-EN
[Success]
arben=0
arbtm=1
arbweek=0
status=Cpu_Usage#CPU-31.92%
Clock_Info#CPU-829MHz
Memory_Info#Total-32548KB Used-25840KB Free-6708KB
System_Uptime#0 days 00:19:18
NvsApp_Uptime#0 days 00:18:55
Dns_Server#192.168.1.1
Wlan_ip#192.168.1.23
Release 2019-01-02.18:08:[email protected]
Platforms DANALE
Revirsion
Option -d1 -f -w 8f
I got two Sannce I41DH cameras. I've not been able to extract the firmware yet, but would love to be able to use them without the cloud. Any experience with this model?
Pictures: http://c-sannce.com/upload/I41DH/
Hi,
I think this is a Xiaomi clone too, very similar to Wyze... Would the boot loader for Wyzecam V2 128Mb work?
The technical sheet says 128MB.
Just don't want to brick a brand new toy!
Could someone tell me which firmware to use for the WyzeCam v2. I have been through the documentation for flashing the opensource u-boot but do not see the file for wyze with 128 ram.
Good Evening,
Hardware: Neos Smartcam
After having logged an issue on the main Dafang Hacks Repository (EliasKotlyar/Xiaomi-Dafang-Hacks#1475) attempting to get the v4l2rtspserver running I currently believe that an I have an issue with a library, and therefore could do with some extra space to add a few more for testing purposes.
On recommendation from nik0, in the previous issue, I have been looking into the older issues that have been raised on this repository and found #4 and #8.
Currently my camera detects a GD25Q128 chip on startup.
Etched onto the chip is the model number "25Q127CSIG". Datasheets online confirm that this is indeed an 128MB chip.
The line in the flash drivers header file: jz_sip.h states that my chip is recognised as a 16MB chip by the driver if I'm not mistaken?
Line 230 in a1d1931
I will attempt to modify this and recompile and see if I can get it working on my camera.
Many Thanks,
James.
After trying to understand why #4 was happening. I realized flash installed on my waze cam was QH128A-104HIP http://pdf1.alldatasheet.com/datasheet-pdf/view/675884/EON/EN25QH128A.html
Because of that I get
the id code = 1c7018
unsupport ID is if the id not be 0x00,the flash is ok for burner
the manufacturer 1c
SF: Detected FM25Q64
at start up. My guess is, new entry needed to be added to https://github.com/Dafang-Hacks/uboot/blob/a1d19316522425d61035a9e897e9d8b0424b7f74/drivers/spi/jz_spi.h
I'm alright with doing the work and testing it but I got stuck building the project. I used a ubuntu container to build it but I had no luck.
I know that this version of uboot is using old gcc-4-mips-linux-gnu but i wasn't able install anything less than version 5. I tried to compile with version 5 without any success. Do you have a proven way of building this project? and tools needed to build it?
I'm stuck with this build error
mips-linux-gnu-ld.bfd: /usr/lib/gcc-cross/mips-linux-gnu/5/libgcc.a(_lshrdi3.o): compiled for a big endian system and target is little endian
mips-linux-gnu-ld.bfd: /usr/lib/gcc-cross/mips-linux-gnu/5/libgcc.a(_lshrdi3.o): endianness incompatible with that of the selected emulation
mips-linux-gnu-ld.bfd: failed to merge target specific data of file /usr/lib/gcc-cross/mips-linux-gnu/5/libgcc.a(_lshrdi3.o)
mips-linux-gnu-ld.bfd: /usr/lib/gcc-cross/mips-linux-gnu/5/libgcc.a(_ashldi3.o): compiled for a big endian system and target is little endian
mips-linux-gnu-ld.bfd: /usr/lib/gcc-cross/mips-linux-gnu/5/libgcc.a(_ashldi3.o): endianness incompatible with that of the selected emulation
mips-linux-gnu-ld.bfd: failed to merge target specific data of file /usr/lib/gcc-cross/mips-linux-gnu/5/libgcc.a(_ashldi3.o)
Thanks
I'd like to put dafang on a Wyzecam v3 and run full HD, meaning i have to flash a custom bootloader. However I do not see a corresponding bootloader at: https://github.com/Dafang-Hacks/uboot/tree/master/compiled_bootloader
My device originally said it was 128MB during startup - I had to flash the uboot from the original folder in order to get hacks to work (it now reports 64MB). Is it possible to get a version of the bootloader that can use the entire 128MB my camera appears to have available?
I accidentally flashed Xiaofang uboot into Dafang camera, it boots only without SD card. Is there a sequence of GPIO settings, which would allow me to boot and install correct uboot? Please note, that open source rootfs also boots, but just as original on nand hangs when detecting SD card. I wish uboot could flash itself.
so my dafang is a 128mb one by when i do the m5sum the code is completely different from the one listed what can i do for it to work?
I followed the instructions flashed new u-boot bootloader
everything seams to be fine - I have a blue light after reboot, but md5sum of the bootloader dosent changed in Status -> overview
I even used your flash.sh script. Here is the output:
aab52eefe246dc1e15e56b253df3d64f dafang_128mb_v2.bin
Erasing 32 Kibyte @ 40000 - 100% complete.
461+1 records in
461+1 records out
236172 bytes (230.6KB) copied, 0.419952 seconds, 549.2KB/s
2846e9e8fab8ee42c40738ae04c7f576 -```
I have downloaded dafang_128mb_v2.bin and my md5sums are different. I have seen you updated the file recently. Have they changed?
By the way, I started to play with a Dafang camera and I want to integrate it to opehab; should this uboot be better? Or I should stick to "standard" dafang-hacks? I don't mind flashing and I can invest some time to make thinks work.
Thanks
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.