Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bricked new GD-SC03 with new firmware #96

Closed
gymnae opened this issue Jan 26, 2019 · 30 comments
Closed

Bricked new GD-SC03 with new firmware #96

gymnae opened this issue Jan 26, 2019 · 30 comments

Comments

@gymnae
Copy link

gymnae commented Jan 26, 2019

I tried to load the ONVIF firmware onto the system which is floating around. After that, the camera wouldn't boot no more. I have it at a state now where I can access it via uboot and telnet, for some seconds even have it available on LAN, but then it crashes.

My camera has a different Flash chip than most reported here: GD25Q64C, which has only 8 MiB instead of 16MiB, requiring a reduced /home folder - at least that is my current understanding.

I soldered myself an UART adapter out of an RS232 to USB adapter and here's the uboot log.

U-Boot 2012.10 (Sep 17 2018 - 17:43:53) for GK7102 rb-sc1045-v2.0 (GOKE)

HAL:   20160913 
DRAM:  64 MiB
Flash: 8 MiB
NAND:  [No SPI nand] 
SD/MMC: 0
SF:    8 MiB [page:256 Bytes] [sector:64 KiB] [count:128] (GD25Q64C)
In:    serial
Out:   serial
Err:   serial
Net:   Int PHY 
Hit any key to stop autoboot:  1 ��� 0 
[PROCESS_SEPARATORS] sf probe;sf read 0xc1000000 0x50000 0x1A0000;bootm 0xc1000000;
SF:    8 MiB [page:256 Bytes] [sector:64 KiB] [count:128] (GD25Q64C)
put param to memory
mem size (36)
total mem size (64)
bsb size (1)
usr size (0)

the kernel image is zImage or Image
entry = 0xc1000000 
## Transferring control to Linux (at address c1000000)...

Starting kernel ...

machid = 3988 r2 = 0xc0000100 
Uncompressing Linux... done, booting the kernel.
[    0.000000] Booting Linux on physical CPU 0
[    0.000000] Linux version 3.4.43-gk (root@localhost.localdomain) (gcc version 4.6.1 (crosstool-NG 1.18.0) ) #71 PREEMPT Fri Nov 10 15:20:07 CST 2017
[    0.000000] CPU: ARMv6-compatible processor [410fb767] revision 7 (ARMv7), cr=00c5387d
[    0.000000] CPU: VIPT aliasing data cache, VIPT aliasing instruction cache
[    0.000000] Machine: Goke IPC Board
[    0.000000] Memory policy: ECC disabled, Data cache writeback
[    0.000000] AHB: 0x90000000  0xf2000000  -- 0x1000000
[    0.000000] APB: 0xa0000000  0xf3000000  -- 0x1000000
[    0.000000] PPM: 0xc0000000  0xc0000000  -- 0x200000
[    0.000000] BSB: 0xc2600000  0xf5000000  -- 0x100000
[    0.000000] DSP: 0xc2700000  0xf6000000  -- 0x18f0000
[    0.000000] USR: 0xc3ff0000  0xfe000000  -- 0x10000
[    0.000000] hal version = 20160913 
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 9144
[    0.000000] Kernel command line: console=ttySGK0,115200 mem=36M rootfstype=squashfs root=/dev/mtdblock2 init=linuxrc mtdparts=gk_flash:320K(U),1664K(K),896K(R),-(A)
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Memory: 36MB = 36MB total
[    0.000000] Memory: 31776k/31776k available, 5088k reserved, 0K highmem
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
[    0.000000]     DMA     : 0xff600000 - 0xffe00000   (   8 MB)
[    0.000000]     vmalloc : 0x82800000 - 0xff000000   (1992 MB)
[    0.000000]     lowmem  : 0x80000000 - 0x82400000   (  36 MB)
[    0.000000]     modules : 0x7f000000 - 0x80000000   (  16 MB)
[    0.000000]       .text : 0x80008000 - 0x80412000   (4136 kB)
[    0.000000]       .init : 0x80412000 - 0x80433000   ( 132 kB)
[    0.000000]       .data : 0x80434000 - 0x8045bbe0   ( 159 kB)
[    0.000000]        .bss : 0x8045bc04 - 0x8048e1b8   ( 202 kB)
[    0.000000] NR_IRQS:128
[    0.000000] >> gk init irq vic1...
[    0.000000] >> gk init irq vic2...
[    0.000000] gk init vic...
[    0.000000] mach gk init timer...
[    0.000000] sched_clock: 32 bits at 100 Hz, resolution 10000000ns, wraps every 4294967286ms
[    0.000000] Console: colour dummy device 80x30
[    0.000000] console [ttySGK0] enabled
[    0.020000] Calibrating delay loop... 597.60 BogoMIPS (lpj=2988032)
[    0.080000] pid_max: default: 32768 minimum: 301
[    0.080000] Mount-cache hash table entries: 512
[    0.090000] CPU: Testing write buffer coherency: ok
[    0.100000] Setting up static identity map for 0xc0544288 - 0xc05442c0
[    0.110000] NET: Registered protocol family 16
[    0.120000] init timer...
[    0.120000] Init HW timer for DSP communication
[    0.120000] init gpio...
[    0.130000] ###################################
[    0.130000] [BOOT VERSION] GK7102 rb-sc1045-v2.0 v2.0 
[    0.140000] [NET  INT_CLK] Internal PHY clock 
[    0.140000] [GPIO]#############################
[    0.150000] [GPIO] gpio map get from uboot
[    0.150000] [GPIO CFG] gpio   count = 53
[    0.160000] [GPIO CFG] intphy count = 3
[    0.160000] [GPIO CFG] extphy count = 3
[    0.170000] [GPIO CFG] IR LED CTL    (55)
[    0.170000] [GPIO CFG] IR CUT1       (55)
[    0.170000] [GPIO CFG] IR CUT2       (55)
[    0.180000] [GPIO CFG] SENSOR Reset  (10)
[    0.180000] [GPIO CFG] PHY Reset     (55)
[    0.190000] [GPIO CFG] PHY Speed Led (34)
[    0.190000] [GPIO CFG] SPI0 EN       (55)
[    0.200000] [GPIO CFG] SPI1 EN       (55)
[    0.200000] [GPIO CFG] USB HOST      (55)
[    0.210000] [GPIO CFG] SD Detect     (35)
[    0.210000] [GPIO CFG] SD Power      (55)
[    0.210000] [GPIO]#############################
[    0.220000] gpiochip_add: registered GPIOs 0 to 63 on device: gk-gpio0
[    0.230000] create proc dir
[    0.230000] gk register devices 10
[    0.240000] gk register I2C
[    0.250000] bio: create slab <bio-0> at 0
[    0.260000] spi spi.0: gk SPI Controller 0 created 
[    0.260000] spi spi.0: master is unqueued, this is deprecated
[    0.270000] spi spi.1: gk SPI Controller 1 created 
[    0.270000] spi spi.1: master is unqueued, this is deprecated
[    0.280000] usbcore: registered new interface driver usbfs
[    0.290000] usbcore: registered new interface driver hub
[    0.290000] usbcore: registered new device driver usb
[    0.300000] i2c regbase: 0xf3003000 
[    0.300000] i2c i2c.0: i2c irq:registers 9
[    0.310000] i2c i2c.0: GK I2C[0] adapter[i2c-0] probed!
[    0.310000] i2c regbase: 0xf3004000 
[    0.320000] i2c i2c.1: i2c irq:registers 58
[    0.320000] i2c i2c.1: GK I2C[1] adapter[i2c-1] probed!
[    0.340000] cfg80211: Calling CRDA to update world regulatory domain
[    0.340000] FS-Cache: Loaded
[    0.350000] CacheFiles: Loaded
[    0.360000] gk-sd gk-sd.0: Slot0 req_size=0x00010000, segs=16, seg_size=0x00010000
[    0.390000] gk-sd gk-sd.0: GK SD/MMC[0] has 1 slots @ 50181818Hz, [0x09e130b0:0x00000000]
[    0.400000] NET: Registered protocol family 2
[    0.400000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.410000] TCP established hash table entries: 2048 (order: 2, 16384 bytes)
[    0.420000] TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
[    0.430000] TCP: Hash tables configured (established 2048 bind 2048)
[    0.430000] TCP: reno registered
[    0.440000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.440000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.450000] NET: Registered protocol family 1
[    0.460000] RPC: Registered named UNIX socket transport module.
[    0.470000] RPC: Registered udp transport module.
[    0.470000] RPC: Registered tcp transport module.
[    0.480000] RPC: Registered tcp NFSv4.1 backchannel transport module.
[    0.480000] mdma init...
[    0.490000] mdma request irq: 54 
[    0.500000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.500000] NFS: Registering the id_resolver key type
[    0.510000] jffs2: version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
[    0.520000] msgmni has been set to 62
[    0.530000] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 253)
[    0.540000] io scheduler noop registered
[    0.540000] io scheduler deadline registered
[    0.550000] io scheduler cfq registered (default)
[    0.550000] uart.0: ttySGK0 at MMIO 0xa0005000 (irq = 31) is a gkuart
[    0.560000] uart.1: ttySGK1 at MMIO 0xa001f000 (irq = 15) is a gkuart
[    0.570000] uart.2: ttySGK2 at MMIO 0xa001e000 (irq = 27) is a gkuart
[    0.590000] brd: module loaded
[    0.600000] loop: module loaded
[    0.600000] adc initialized (10:11)
[    0.600000] speed_mod is 0
[    0.610000] USE 1X mode read and 1X mode write
[    0.610000] gk_flash gk_flash.0: GD25Q64C (8192 Kbytes)
[    0.620000] 4 cmdlinepart partitions found on MTD device gk_flash
[    0.620000] Creating 4 MTD partitions on "gk_flash":
[    0.630000] 0x000000000000-0x000000050000 : "U"
[    0.640000] 0x000000050000-0x0000001f0000 : "K"
[    0.640000] 0x0000001f0000-0x0000002d0000 : "R"
[    0.650000] 0x0000002d0000-0x000000800000 : "A"
[    0.660000] slram: not enough parameters.
[    0.660000] GKETH_init
[    0.670000] [GKETH_drv_probe] eth_base = 0xf200e000
[    0.670000] mii id = 0 
[    0.670000] ###### PHY Reset.1.0.2
[    0.790000] mdiobus_register: PHY[0] whose id 0x00000000 
[    0.800000] goke MII Bus: probed
[    0.800000] gk-eth gk-eth.0: MAC Address[02:11:22:a3:a0:00].
[    0.810000] musb-hdrc: version 6.0, ?dma?, otg (peripheral+host)
[    0.820000] musb phy Begin initial sequence ...
[    1.120000] gk musb init end...
[    1.130000] dma_controller_create_non_init ok
[    1.130000] musb-hdrc musb-hdrc: MUSB HDRC host driver
[    1.140000] musb-hdrc musb-hdrc: new USB bus registered, assigned bus number 1
[    1.150000] hub 1-0:1.0: USB hub found
[    1.150000] hub 1-0:1.0: 1 port detected
[    1.160000] musb-hdrc musb-hdrc: USB Host mode controller at f0006000 using DMA, IRQ 26
[    1.170000] platform add gk musb...
[    1.170000] mousedev: PS/2 mouse device common for all mice
[    1.180000] input: GKInput as /devices/virtual/input/input0
[    1.180000] Protocol NEC[0]
[    1.190000] ir request irq: 62 
[    1.190000] IR Host Controller probed!
[    1.200000] gk rtc init...
[    1.200000] rtc base: 0xf2080000 
[    1.200000] os read tm: t=0 
[    1.210000] gk-rtc gk-rtc: rtc core: registered gk-rtc as rtc0
[    1.210000] i2c /dev entries driver
[    1.220000] gk_wdt_v1_00: GK Watchdog Timer, (c) 2014 Goke Microelectronics
[    1.230000] [gk_wdt_init]: init
[    1.230000] [gk_wdt_probe]: probe
[    1.230000] [gk_wdt_probe]: probe mapped wdt_base=f3006000
[    1.240000] watchdog inactive, reset disabled, irq disabled
[    1.250000] IPv4 over IPv4 tunneling driver
[    1.250000] gre: GRE over IPv4 demultiplexor driver
[    1.260000] ip_gre: GRE over IPv4 tunneling driver
[    1.260000] TCP: cubic registered
[    1.270000] Initializing XFRM netlink socket
[    1.270000] NET: Registered protocol family 10
[    1.280000] IPv6 over IPv4 tunneling driver
[    1.290000] NET: Registered protocol family 17
[    1.290000] NET: Registered protocol family 15
[    1.300000] Registering the dns_resolver key type
[    1.310000] VFP support v0.3: implementor 41 architecture 1 part 20 variant b rev 5
[    1.320000] os read tm: t=0 
[    1.320000] gk-rtc gk-rtc: setting system clock to 1970-01-01 00:00:00 UTC (0)
[    1.340000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[    1.340000] Freeing init memory: 132K
[    1.610000] usb 1-1: new high-speed USB device number 2 using musb-hdrc
Starting logging: /etc/init.d/S01logging: line 24: start-stop-daemon: not found
/etc/init.d/S01logging: line 24: start-stop-daemon: not found
OK
Starting mdev...
Initializing random number generator... read-only file system detected...done
Starting network...
/etc/init.d/S40network: line 22: /sbin/ifup: not found
GOKE 7102S BOARD 20170515 START:
Press 'q' in 1 seconds to exit: rm: remove '/bin/wpa_supplicant'? 

ln: /bin/wpa_supplicant: File exists
cp: can't create '/bin/tees': File exists
[   26.780000] hal: module license 'Proprietary' taints kernel.
[   26.790000] Disabling lock debugging due to kernel taint
[   26.820000] crypto initialized (10:11)
[   27.020000] 
Media driver version (gcc version 4.6.1 (crosstool-NG 1.18.0) (uClibc)) v2.0.0 #svn r11887 Thu Apr 27 14:04:15 CST 2017
[   27.120000]  request_irq...24 ok-- video_sync
[   27.120000]  request_irq...59 ok-- video_frame_last_pixel
[   27.130000]  request_irq...61 ok-- video_frame
GOKE ADI: R(10836) LIBC(uClibc) (gcc version 4.6[   27.370000] sensor board reset...
.1 (crosstool-NG 1.18.0) ) 2016-10-27 15:58:20
[   27.630000] detect:imx122 at 0x34
[   27.630000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.640000] i2c i2c.0: I2C state 0x10, please check address 0x34!
[   27.650000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.650000] i2c i2c.0: I2C state 0x10, please check address 0x34!
[   27.660000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.660000] i2c i2c.0: I2C state 0x10, please check address 0x34!
[   27.670000] imx122 i2c read 0x00000000 is 0x00000000
[   27.680000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.680000] i2c i2c.0: I2C state 0x10, please check address 0x34!
[   27.690000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.700000] i2c i2c.0: I2C state 0x10, please check address 0x34!
[   27.700000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.710000] i2c i2c.0: I2C state 0x10, please check address 0x34!
[   27.720000] imx122 i2c read 0x00000001 is 0x00000000
[   27.720000] detect:jxh42 at 0x6c
[   27.730000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.730000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.740000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.750000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.750000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.760000] i2c i2c.0: I2C state 0x9, please check address 0x6c!
[   27.770000] jxh42 i2c read 0x0000000a is 0x00000000
[   27.770000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.780000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.780000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.790000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.800000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.800000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.810000] jxh42 i2c read 0x0000000b is 0x00000000
[   27.820000] detect:jxh61 at 0x6c
[   27.820000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.830000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.830000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.840000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.850000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.850000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.860000] jxh61 i2c read 0x0000000a is 0x00000000
[   27.870000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.870000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.880000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.890000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.890000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.900000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.910000] jxh61 i2c read 0x0000000b is 0x00000000
[   27.910000] detect:jxh62 at 0x6c
[   27.910000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.920000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.930000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.930000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.940000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.950000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.950000] jxh62 i2c read 0x0000000a is 0x00000000
[   27.960000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.970000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.970000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.980000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   27.990000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   27.990000] i2c i2c.0: I2C state 0x10, please check address 0x6c!
[   28.000000] jxh62 i2c read 0x0000000b is 0x00000000
[   28.010000] detect:jxh65 at 0x60
[   28.010000] jxh65 i2c read 0x0000000a is 0x00000000
[   28.010000] jxh65 i2c read 0x0000000b is 0x00000000
[   28.020000] detect:jxf22 at 0x8c
[   28.020000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   28.030000] i2c i2c.0: I2C state 0x10, please check address 0x8c!
[   28.040000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   28.040000] i2c i2c.0: I2C state 0x10, please check address 0x8c!
[   28.050000] i2c i2c.0: I2C state 0x9, please check address 0x8c!
[   28.050000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   28.060000] jxf22 i2c read 0x0000000a is 0x00000000
[   28.070000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   28.080000] i2c i2c.0: I2C state 0x10, please check address 0x8c!
[   28.080000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   28.090000] i2c i2c.0: I2C state 0x10, please check address 0x8c!
[   28.100000] i2c i2c.0: I2C state 0x9, please check address 0x8c!
[   28.100000] i2c i2c.0: i2c[60]:gk_i2c_irq in wrong state[0x9]
[   28.110000] jxf22 i2c read 0x0000000b is 0x00000000
[   28.110000] detect:sc1135 at 0x60
[   28.120000] sc1135 i2c read 0x00003107 is 0x00000022
[   28.120000] sc1135 i2c read 0x00002148 is 0x00000000
[   28.130000] detect:sc2135 at 0x60
[   28.130000] sc2135 i2c read 0x00003107 is 0x00000022
[   28.140000] sc2135 i2c read 0x00003108 is 0x00000035
[   28.150000] detect:sc2235 at 0x60
[   28.150000] sc2235 i2c read 0x00003107 is 0x00000022
[   28.150000] sc2235 i2c read 0x00003108 is 0x00000035
[   28.160000] ===================================================
[   28.170000] ================find:sc2235 at 0x60================
[   28.170000] ===================================================
find:sc2235 at 0x60
rm: can't remove '/tmp/sensor_hw.bin': No such file or directory
rm: can't remove '/tmp/sensor_ex.ko.lzma': No such file or directory
insmod: can't open '/home/gio.ko': No such file or directory
GPIO open failed. error=2
GPIO open failed. error=2
exec factory_tool.sh .......
ls: /mnt/*-hwcfg.ini: No such file or directory
ls: /mnt/*-VOICE.tgz: No such file or directory
ls: /mnt/*-ptz.cfg: No such file or directory
ls: /mnt/*-hardinfo.bin: No such file or directory
ls: /mnt/*-custom_init.sh: No such file or directory
umount: can't umount /mnt: Invalid argument
insmod: can't open '/home/8188fu.ko': No such file or directory
ifconfig: SIOCGIFFLAGS: No such device
ifconfig: SIOCGIFFLAGS: No such device
[   30.510000] net eth0: ###### GKETH_start_hw
[   30.520000] net eth0: ###### GKETH_phy_start_aneg...
[   30.520000] ADDRCONF(NETDEV_UP): eth0: link is not ready
/home/start.sh: line 107: /tmp/tees: not found
tees: bind to /var/run/tees.sock: No such file or directory
mv: can't rename '/home/gkptz-dsa.ko': No such file or directory
insmod: can't open '/home/gkptz.ko': No such file or directory
Auto login as root ...
/bin/sh: -l: not found
Jan  1 08:00:32 login[178]: root login on 'ttySGK0'



BusyBox v1.20.2 (2017-11-07 11:47:24 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

# °æAPP START°ø:
========v2 pthread statck size 131072===
eye+ wait. av[0] id[0] testMode[0]



===============================
  ver: 3.1.0.0824
===============================



========v2 pthread statck size 32768===
========v2 pthread statck size 32768===
gk ic type 1[0- 7102S; 1-7102]
gpio9, 4 parts, pinmux reg[0x0]:[0x0], effectValue[1]
gpio9, 4 parts, pinmux reg[0x0]:[0x0], effectValue[1]
gpio30, 4 parts, pinmux reg[0x0]:[0x0], effectValue[0]
gpio6, 4 parts, pinmux reg[0x0]:[0x0], effectValue[0]
gpio22, 4 parts, pinmux reg[0x0]:[0x0], effectValue[1]
gpio20, 4 parts, pinmux reg[0x0]:[0x0], effectValue[1]
[HW] auto_reboot : 1
[HW] support_ptz : 1
[HW] ptz_one_step : 2
[HW] sensor_position : 0
[HW] support_eth : 1
[HW] main_bps : 768
[HW] main_fps : -1
[HW] support_fisheye : 0
[HW] local_quality_auto : 1
[HW] voice_prompt : 1
[HW] sound_detect : 1
[HW] sound_level : 98
[HW] motion_level : 1
[HW] support_twoway_speech : 0
[HW] ir_detect_type : 2
[HW] adc_chan : 0
[HW] adc_setting_max : 700
[HW] adc_setting_min : -300
[HW] buzzer_time : 30
[HW] cds_lvl_night : 1
[HW] ircut_reverse : 0
[HW] ircut1_lvl : 1
[HW] ircut2_lvl : 1
[HW] ir_light_lvl : 1
[HW] support_433 : 0
[HW] support_onvif : 1
---------open /tmp/sc2135 failed
---------open /tmp/sc1145 failed
---------open /tmp/jxh42 failed
---------open /tmp/sc1135 failed
[HW] gk_mirror_type : 0
[HW] max_pps : -1
[HW] max_pps : -1
[HW] xchg_dir : -1
[HW] xchg_dir : 3
[HW] other_flags : -1
[HW] other_flags : 32
[HW] hmotor_upbound : -1
[HW] hmotor_upbound : 510
[HW] vmotor_upbound : -1
[HW] vmotor_upbound : 180
[HW] hspd_normal : -1
[HW] hspd_normal : -1
[HW] vspd_normal : -1
[HW] vspd_normal : -1
[HW] hspd_slfck : -1
[HW] hspd_slfck : -1
[HW] vspd_slfck : -1
[HW] vspd_slfck : -1
[HW] hspd_reloc : -1
[HW] hspd_reloc : -1
[HW] vspd_reloc : -1
[HW] vspd_reloc : -1
######Get Hardware Info: model:CloudCamera,  firmware-ident:eyeplus_ipc_gk_002
GPIO: RedLed[9], BlueLed[9], BoardReset[30] ptzSupport[1], LocalImageAuto[1] promptVoice[1]...
GPIO init failed. error=2
silent_reboot_time = 1439
---------open /home/silent_reboot failed
sys init finished.
oepn /dev/ptz: No such file or directory
---------open /home/cls.conf failed
ºÏ≤‚µΩŒ™∫£Õ‚∞ʱæ
open /etc/passwd file errno=30GET EYE SER: AJWL181101101P2VJKYDOIU8IR075191
linktest(eth0) = 0
wlan0 is linked.
NET INTERFACE is 
avEncInit start, sensorMode = 0
GOKE ADI: R(11883) LIBC(uClibc) (gcc version 4.6.1 (crosstool-NG 1.18.0) ) 2017-04-27 10:01:34
[PRI] firmware version:6080.
0: Watchdog started... feed interval 15 seconds.
Watchdog wd_setTimeOut [15] complete.

Image library version (gcc version 4.6.1 (crosstool-NG 1.18.0) (uClibc)) v2.0.0 #svn r11883 Thu Apr 27 10:01:52 CST 2017
[   34.570000] ===================================================
[   34.580000] =====sc2235 drv create at 20171024 ver:20170210====
[   34.580000] ===================================================
[   34.590000] [sensor_get_dev_id 276]find sensor id: 00002235
[   34.610000] sensor board reset...
===========================gadi_venc_map_dsp call======================
got sensor size: 1920x1080
viParams:
resoluMode=0x991e021c, frameRate=25, mirrorMode={0,0}

stream_formats:
streamId encodeType channelId flipRotate width height xOffset yOffset fps keepAspRat
       0          1         0          0  1920   1080       0       0  12 0
       1          1         1          0   640    360       0       0  12 0
       2          0         2          0   320    180       0       0  12 0
       3          2         1          0   640    360       0       0   3 0

h264Conf:
streamId brcMode cbrAvgBps gopM gopModel gopN idrInterval profile reEncMode vbrMaxbps vbrMinbps
       0       1    400000    1        0   80           1       0         1    384000     80000
       1       1    130000    1        0   80           1       0         1    200000     60000
       2       1    200000    1        0   50           1       0         1    400000    100000
       3       1    200000    1        0   50           1       0         1    400000    100000

chanParams:
chan1Type=1, chan1Width=1920, chan1Height=1080
chan2Type=1, chan2Width=640, chan2Height=360
chan3Type=0, chan3Width=320, chan3Height=180
chan4Type=0, chan4Width=0, chan4Height=0
[   35.920000] sensor board reset...
[   36.220000] agc_db 0x00000000, gain_index 00, 0x3e08 0x00, 0x3e09 0x10
[   36.230000] agc_db 0x06000000, gain_index 15, 0x3e08 0x00, 0x3e09 0x1f
[   36.240000] win_height:0 win_width:0
[   36.240000] win_height:0 win_width:0
[   36.340000] --0x1d, 0x50
[   36.340000] --0x0, 0x1f
############################## venc_isp_start##########################
start stream[0]
=======================================
[GK]DE-MBLK 4x4 basing on 1/16 orig pic version: v2.1.0
=======================================
eye+ wait. av[0] id[1] testMode[0]
[   36.860000] agc_db 0x00000000, gain_index 00, 0x3e08 0x00, 0x3e09 0x10
[   36.900000] --0x46, 0x10
[   36.900000] --0x0, 0x10
start stream[1]
start stream[3]
[   37.380000] --0x38, 0xc0
VENC INIT OK!
audio frame size: 160
/etc/sensors/sc2235.bin/etc/sensors/sc2235.binbin file name :sc2[   37.460000] --0x2d, 0xb0
235
size is 194252
[Loading] sensor bin:sc2235.bin

Handle next connect...
[   37.540000] --0x24, 0xd0
[   37.620000] --0x1e, 0x70
[   37.700000] --0x1a, 0x0
[   37.780000] --0x17, 0x20
[   37.860000] --0x15, 0x30
gk_md_start
----------------soundDetectInit: sensitivity[98]
========v2 pthread statck size 32768===
no SD card, do not init record buffer.
---------open /opt/upgrading failed
getMainStreamVideoSize: w 1280 h 960 [res = 0x9]
================CHANGE BPS [768] AND FPS [12]=================
#####GOKE_change_bpsfps bpsType = 1 bps = 768 fps = 12 keyFrmae = 48(not use now), quant = 2
------------------venc_video_set_qp--------------
qpMaxOnI[35], qpMaxOnP[42], qpMinOnI[29], qpMinOnP[33]
#####GOKE_change_bpsfps bpsType = 1 bps = 256 fps = 12 keyFrmae = 48(not use now), quant = 2
------------------venc_video_[   37.940000] --0x13, 0xf0
set_qp--------------
qpMaxOnI[35], qpMaxOnP[42], qpMinOnI[29], qpMinOnP[33]
========v2 pthread statck size 32768===
========v2 pthread statck size 32768===
========v2 pthread statck size 32768===
--------------SONG TOOL INIT------------
connect to /var/run/tees.sock: No such file or directory
Sender Inited
ERROR: can not get mac from net interface, please check hardware...
[   38.100000] --0x13, 0x50
[   38.180000] --0x13, 0x0
[   38.260000] --0x12, 0xb0
[   38.340000] --0x12, 0x80
[   38.420000] --0x12, 0x60
[   38.500000] --0x12, 0x50
[   38.580000] --0x12, 0x30
ERROR: can not get mac from net interface, please check hardware...
getVideoStandard : 0
[gk_isp_daynight]gadi_venc_set_framerate:streamid:0,fps:12 
[gk_isp_daynight]gadi_venc_set_framerate:streamid:1,fps:12 
gk_isp_daynight: set day mode
[   38.940000] --0x8c, 0x60
             total         used         free       shared      buffers
Mem:         31908        19856        12052            0          156
-/+ buffers:              19700        12208
Swap:            0            0            0
eye+ wait. av[1] id[1] testMode[0]
#####IR CUT in Day Mode.
ERROR: can not get mac from net interface, please check hardware...
[   40.020000] --0xa, 0x90
[   40.180000] --0x6, 0x20
[   40.340000] --0x6, 0x40
[   40.500000] --0x6, 0x90
[   40.660000] --0x7, 0x10
[   40.820000] --0x7, 0x70
ERROR: can not get mac from net interface, please check hardware...
[   40.980000] --0x8, 0x10
[   41.140000] --0x8, 0x80
[   41.300000] --0x9, 0x30
[   41.460000] --0x9, 0xb0
[   41.620000] --0xa, 0x0
[   41.780000] --0xa, 0x50
eye+ wait. av[1] id[1] testMode[0]
ERROR: can not get mac from net [   41.940000] --0xa, 0xa0
interface, please check hardware...
[   42.100000] --0xb, 0x0
[   42.260000] --0xb, 0x60
[   42.420000] --0xb, 0xc0
[   42.580000] --0xc, 0x20
[   42.740000] --0xc, 0x80
[   42.900000] --0xc, 0xf0
ERROR: can not get mac from net interface, please check hardware...
[   43.060000] --0xd, 0x60
[   43.220000] --0xd, 0xd0
[   43.380000] --0xe, 0x40
[   43.540000] --0xe, 0xc0
[   43.700000] --0xf, 0x40
[   43.860000] --0xf, 0xa0
ERROR: can not get mac from net interface, please check hardware...
[   44.020000] --0x10, 0x0
[   44.180000] --0x10, 0x40
eye+ wait. av[1] id[1] testMode[[   44.340000] --0x10, 0x70
0]
[   44.500000] --0x10, 0xa0
[   44.660000] --0x10, 0xc0
[   44.820000] --0x10, 0xf0
ERROR: can not get mac from net interface, please check hardware...
ERROR: can not get mac from net interface, please check hardware...
@repute
Copy link

repute commented Jan 27, 2019

Having the same problem ...

@gymnae
Copy link
Author

gymnae commented Jan 27, 2019

I'm at the stage now where it boots with root in r/w mode and that the hacks load from an SD.
But I cannot get to see an image, stream rtsp etc.

Can anyone zip up their /home folder? I assume that it contains all files necessary for proper operation, inlcuding wifi drivers. My /home folder containts very little files, no drivers subfolders and no kernel modules.

@paus56
Copy link

paus56 commented Jan 29, 2019

@gymnae
Copy link
Author

gymnae commented Jan 29, 2019

https://github.com/ant-thomas/zsgx1hacks/tree/master/home

I was excited to see this and try the tolder, but it's total size is around 8MB - while on my GD-SC03 the /home partition is mounted with only 5MB. I wasn't yet able to find the subset of files needed for a stable boot. I can get the device to boot and do a self test with a /home folder from a different image, but there again I'm missing files due to the smaller flash and the image comes from a different make.

Ideally an image, tar ball etc from an GD-SC03 with the smaller flash like mine would help

@paus56
Copy link

paus56 commented Jan 30, 2019

Папка HOME в вашей камере находится в сжатом виде в блоке: mtd3
попросите nykroy из поста #95 сделать образ блока mtd3 командой в telnet:

  • dd if=/dev/mtd3 of=/media/mtd3.img
    затем вам надо будет записать этот блок во флеш камеры...

Google translate:
The HOME folder in your camera is compressed in a block: mtd3
Ask nykroy from the #95 post to make an image of the mtd3 block with a command in telnet:

  • dd if = / dev / mtd3 of = / media / mtd3.img
    then you need to write this block to flash cameras ...

@nykroy
Copy link

nykroy commented Jan 30, 2019

This is the result of this command:

# dd if=/dev/mtd3 of=/media/mtd3.img
dd: can't open '/dev/mtd3': No such file or directory
#

@paus56
Copy link

paus56 commented Jan 30, 2019

на команду:
cat /proc/mtd
должно быть примерно так:

dev:    size   erasesize  name
mtd0: 00050000 00010000 "U"
mtd1: 001a0000 00010000 "K"
mtd2: 000e0000 00010000 "R"
mtd3: 00530000 00010000 "A"

Backup firmware:

Google translate:
on team:
cat / proc / mtd
should be something like this:

dev:    size   erasesize  name
mtd0: 00050000 00010000 "U"
mtd1: 001a0000 00010000 "K"
mtd2: 000e0000 00010000 "R"
mtd3: 00530000 00010000 "A"

@nykroy
Copy link

nykroy commented Jan 30, 2019

cat /proc/mtd

dev: size erasesize name
mtd0: 00050000 00010000 "U"
mtd1: 00260000 00010000 "K"
mtd2: 00d50000 00010000 "A"
guudgo_mtd.zip

@paus56
Copy link

paus56 commented Jan 31, 2019

nykroy your blocks mtd are not suitable for Gymnae

@paus56
Copy link

paus56 commented Jan 31, 2019

from the log Gymnae:
[ 0.610000] gk_flash gk_flash.0: GD25Q64C (8192 Kbytes)
[ 0.620000] 4 cmdlinepart partitions found on MTD device gk_flash
[ 0.620000] Creating 4 MTD partitions on "gk_flash":
[ 0.630000] 0x000000000000-0x000000050000 : "U"
[ 0.640000] 0x000000050000-0x0000001f0000 : "K"
[ 0.640000] 0x0000001f0000-0x0000002d0000 : "R"
[ 0.650000] 0x0000002d0000-0x000000800000 : "A"

@gymnae
Copy link
Author

gymnae commented Feb 1, 2019

I hope for a clean firmware.bin from the manufacturer to get the camera at least back into a working state. Right now it's booting then reboots after a minute, there's no reliable way to contact it on the network and now way to get an image output

@gymnae
Copy link
Author

gymnae commented Feb 15, 2019

cat /proc/mtd

dev: size erasesize name
mtd0: 00050000 00010000 "U"
mtd1: 00260000 00010000 "K"
mtd2: 00d50000 00010000 "A"
guudgo_mtd.zip

Dear @nykroy, I got myself a new flash chip with 16MB storage. Is your "guudgo_mtd.zip" from an GD-SC03 camera? I asked this already in the other thread, but could you make backups like this from your other GD-SC03s? I'd like to try and flash the mtd, packed as .bin files, onto the flash chip and then solder it onto the PCB.
Cheers

@nykroy
Copy link

nykroy commented Feb 15, 2019 via email

@gymnae
Copy link
Author

gymnae commented Feb 17, 2019

Thank you very much, looking forward to it. I will report back and could share the binaries and process of using different flash chips to modify these cameras.

@nykroy
Copy link

nykroy commented Feb 17, 2019

Camera 1 updateversion=3.2.8.0121):
`# cat /proc/mtd
dev: size erasesize name
mtd0: 00050000 00010000 "U"
mtd1: 00260000 00010000 "K"
mtd2: 00d50000 00010000 "A"

dd if=/dev/mtd3 of=/media/mtd0.img

dd: can't open '/dev/mtd3': No such file or directory

dd if=/dev/mtd0 of=/media/mtd0.img

640+0 records in
640+0 records out
327680 bytes (320.0KB) copied, 0.233062 seconds, 1.3MB/s

dd if=/dev/mtd1 of=/media/mtd1.img

4864+0 records in
4864+0 records out
2490368 bytes (2.4MB) copied, 3.698943 seconds, 657.5KB/s

dd if=/dev/mtd2 of=/media/mtd2.img

27264+0 records in
27264+0 records out
13959168 bytes (13.3MB) copied, 10.356532 seconds, 1.3MB/s
#`
camera 1.zip

@nykroy
Copy link

nykroy commented Feb 17, 2019

Camera 2 (updateversion=3.2.8.0208):
`# cat /proc/mtd
dev: size erasesize name
mtd0: 00050000 00010000 "U"
mtd1: 00260000 00010000 "K"
mtd2: 00d50000 00010000 "A"

dd if=/dev/mtd0 of=/media/mtd0.img

640+0 records in
640+0 records out
327680 bytes (320.0KB) copied, 0.193887 seconds, 1.6MB/s

dd if=/dev/mtd1 of=/media/mtd1.img

4864+0 records in
4864+0 records out
2490368 bytes (2.4MB) copied, 1.630897 seconds, 1.5MB/s

dd if=/dev/mtd2 of=/media/mtd2.img

27264+0 records in
27264+0 records out
13959168 bytes (13.3MB) copied, 9.979429 seconds, 1.3MB/s
#`
camera 2.zip

@nykroy
Copy link

nykroy commented Feb 17, 2019

I am noob on linux. If hoy need something else tell me how can i help you

@gymnae
Copy link
Author

gymnae commented Feb 18, 2019

Thank you, @nykroy for creating mtd images and sharing them. That is great.

I created .bin files with a GK7102_Tools_ver.2.zip shared by @paus56 here:

camera1.bin.zip
camera2.bin.zip

Sadly, if I flash these with a modified CH341A programmer, I can get the flash to verify after using CH341A software version 1.1.1.32. But then when I solder the flash chip back, I get no output on UART and no IP. If I flash my 8MB backup or @paus56 supplied .bin for the IL-HIP291G-2M-AI, I can get it to boot, but then crash because my backup is faulty or because I don't have an IL-HIP291G-2M-AI

@nykroy
Copy link

nykroy commented Feb 18, 2019

:( I am Sorry to hear that. If I can help you the another way. Tell me how.

@gymnae
Copy link
Author

gymnae commented Feb 18, 2019

You are plenty helpful, thank you :) Just to make really sure: You have also have a GD-SC03 camera from guudgo, correct?

@nykroy
Copy link

nykroy commented Feb 18, 2019 via email

@paus56
Copy link

paus56 commented Feb 19, 2019

Ваша камера сильно отличается от HIP291G сигналам ввода - вывода:
ваша камера (из лога):

[    0.130000] ###################################
[    0.130000] [BOOT VERSION] GK7102 rb-sc1045-v2.0 v2.0 
[    0.140000] [NET  INT_CLK] Internal PHY clock 
[    0.140000] [GPIO]#############################
[    0.150000] [GPIO] gpio map get from uboot
[    0.150000] [GPIO CFG] gpio   count = 53
[    0.160000] [GPIO CFG] intphy count = 3
[    0.160000] [GPIO CFG] extphy count = 3
[    0.170000] [GPIO CFG] IR LED CTL    (55)
[    0.170000] [GPIO CFG] IR CUT1       (55)
[    0.170000] [GPIO CFG] IR CUT2       (55)
[    0.180000] [GPIO CFG] SENSOR Reset  (10)
[    0.180000] [GPIO CFG] PHY Reset     (55)
[    0.190000] [GPIO CFG] PHY Speed Led (34)
[    0.190000] [GPIO CFG] SPI0 EN       (55)
[    0.200000] [GPIO CFG] SPI1 EN       (55)
[    0.200000] [GPIO CFG] USB HOST      (55)
[    0.210000] [GPIO CFG] SD Detect     (35)
[    0.210000] [GPIO CFG] SD Power      (55)
[    0.210000] [GPIO]#############################

камера HIP291G (из лога):

[    0.130000] ###################################
[    0.130000] [BOOT VERSION] GK7102 rb-sc1045-v2.0 v2.0
[    0.140000] [NET  INT_CLK] Internal PHY clock
[    0.140000] [GPIO]#############################
[    0.150000] [GPIO] gpio map get from uboot
[    0.150000] [GPIO CFG] gpio   count = 53
[    0.160000] [GPIO CFG] intphy count = 3
[    0.160000] [GPIO CFG] extphy count = 3
[    0.170000] [GPIO CFG] IR LED CTL    (12)
[    0.170000] [GPIO CFG] IR CUT1       (44)
[    0.170000] [GPIO CFG] IR CUT2       (39)
[    0.180000] [GPIO CFG] SENSOR Reset  (27)
[    0.180000] [GPIO CFG] PHY Reset     (53)
[    0.190000] [GPIO CFG] PHY Speed Led (54)
[    0.190000] [GPIO CFG] SPI0 EN       (53)
[    0.200000] [GPIO CFG] SPI1 EN       (53)
[    0.200000] [GPIO CFG] USB HOST      (53)
[    0.210000] [GPIO CFG] SD Detect     (55)
[    0.210000] [GPIO CFG] SD Power      (55)
[    0.210000] [GPIO]#############################

в камерах разные сенсоры....
ваша камера (из лога):

[   28.150000] sc2235 i2c read 0x00003107 is 0x00000022
[   28.150000] sc2235 i2c read 0x00003108 is 0x00000035
[   28.160000] ===================================================
[   28.170000] ================find:sc2235 at 0x60================
[   28.170000] ===================================================
find:sc2235 at 0x60

камера HIP291G (из лога):

[   10.280000] detect:gc2033 at 0x6e
[   10.280000] gc2033 i2c read 0x000000f0 is 0x00000020
[   10.290000] gc2033 i2c read 0x000000f1 is 0x00000033
[   10.290000] ===================================================
[   10.300000] ================find:gc2033 at 0x6e================
[   10.310000] ===================================================
find:gc2033 at 0x6e

в прошивке HIP291G нет модуля сенсора: sc2235 поэтому возможно и перегружается ваша камера с прошивкой от HIP291G...

вам надо искать прошивку версии:

===============================
  ver: 3.1.0.0824
===============================

у вас что то осталось от родной прошивки ?
когда вы загружали прошивку программатором во флешь, вы делали бэкап флешь ?

@gymnae
Copy link
Author

gymnae commented Feb 19, 2019

Спасибо, что обратили внимание на различия в чипах SC2235 и HIP291G.
Проблема в том, что я пытался прошить прошивку данный сразу после получения пакета. Возможно, это был 3.1.0.0824, который "завалил" мою камеру - перезагрузка и неправильная работа.

Я сделал резервную копию своего флеш-чипа после прошивки этой прошивки:
[gd25q64_backup.Bin.zip] (https://github.com/ant-thomas/zsgx1hacks/files/2879606/gd25q64_backup.Bin.zip)

Это резервное копирование возвращает камеру в состояние перезагрузки, описанное в моем первоначальном сообщении

Может быть, камера ожидает флеш-чип с четырьмя разделами (mtd0 - mtd3)? Помимо резервного копирования с IL-HIP291G-2M-AI, до сих пор я получал резервные копии только с тремя разделами.

Переведено с помощью www.DeepL.com/Translator


Thank you for pointing out the difference in the SC2235 and HIP291G chips.
The problem is, that I tried to flash this firmware directly after receiving the package. This might have been the 3.1.0.0824, which "bricked" my camera - making it reboot and not work correctly.

I did make a backup of my flash chip after flashing this firmware:
gd25q64_backup.Bin.zip

This backup brings the camera back to the reboot state described in my initial post.

Could it be that the camera expects the flash chip with four partitions (mtd0 - mtd3)? Besides the backup from your IL-HIP291G-2M-AI, the backups I received so far are with three partitions only.

@paus56
Copy link

paus56 commented Feb 19, 2019

that I tried to flash this firmware directly
содержание той прошивки не должно было испортить камеру, вот что там внутри:

fw_01

@paus56
Copy link

paus56 commented Feb 19, 2019

  • разобрал вашу прошивку: gd25q64_backup.Bin
  • есть надежда восстановить вашу камеру...
  • блоки: mtd0, mtd1, mtd2 хорошо сохранились и думаю полностью работоспособны
  • блок mtd3 (папка HOME) полностью разрушен, сохранилось только 3 файла, но её возможно ещё восстановить...
    это уже остатки не от вашей папки HOME, а от попыток что то туда записать...
    вот что осталось в папке HOME:

mtd3

@nykroy
Copy link

nykroy commented Feb 19, 2019

If you want i can add the home folder this friday when i return to home

@paus56
Copy link

paus56 commented Feb 19, 2019

для этой камеры требуется файл сенсора: sc2235.bin
такого файла нет в выложенных на форумах прошивках

поэтому не получается собрать блок mtd3 для прошивки этой камеры

@gymnae
Copy link
Author

gymnae commented Feb 19, 2019

Damn it. I cannot find this sc2235.bin anywhere :(
So I guess I'm out of luck here.

Thank you so much for spending time. Maybe a solution comes up - I will continue searching and annoy people :)


Черт возьми. Я не могу найти этот sc2235.bin где бы то ни было :((
Так что, полагаю, мне здесь не повезло.

Большое спасибо, что уделили время. Может быть, появится решение - я продолжу искать и раздражать людей :)

@gymnae
Copy link
Author

gymnae commented Mar 15, 2019

Great news!
I received a replacement camera with the same 8MB flash chip. I de-soldered it and read it with a flasher. Here's the bin:
gd25q64_factory.Bin.zip

@paus56, this flasher readout also includes the much sought after sc2235.bin

I flashed the bin onto a fresh 8MB flash chip, soldered it back onto the PCB and my camera is back from the dead and doing mighty fine with the read-only hack

I also created a new repo to store my findings:
https://github.com/Gymnae/gd-sc03

@nishant2019
Copy link

nishant2019 commented Oct 6, 2019

that I tried to flash this firmware directly
содержание той прошивки не должно было испортить камеру, вот что там внутри:

fw_01

can you share the software ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants