Skip to content

Firmware m1900

mefistotelis edited this page Jul 30, 2021 · 10 revisions

Table of Contents

Target
Purpose
Versions
Structure
Boot process
OS and Libraries
Flashing
Interfaces

Target

The firmware programs ATH542 NAND array which loads bitstream into Altera Cyclone V FPGA. Location of this chip:

In later Lightbridge implementations, this module was replaced by functionally identical ASIC chip from Artosyn.

Purpose

The firmware is a synthesis of Lightbridge transmission technology and contains digital part of transmission system.

Versions

There are multiple versions, always unencrypted.

Marking Packages Timestamp Overview
01.00.2107 P3S_FW_V01.01.0008 P3S_FW_V01.01.0009 P3X_FW_V01.01.0006 P3X_FW_V01.01.0008 P3X_FW_V01.01.0009 P3X_FW_V01.01.1003 2015-04-30 ... 2015-05-12
01.00.2144 P3S_FW_V01.02.0007 P3S_FW_V01.02.0008 P3S_FW_V01.03.0020 P3S_FW_V01.04.0010 P3S_FW_V01.05.0030 P3S_FW_V01.06.0040 P3S_FW_V01.07.0060 P3S_FW_V01.08.0080 P3S_FW_V01.09.0060 P3S_FW_V01.10.0090 P3X_FW_V01.01.1007 P3X_FW_V01.02.0006 P3X_FW_V01.03.0020 P3X_FW_V01.04.0005 P3X_FW_V01.04.0010 P3X_FW_V01.05.0030 P3X_FW_V01.06.0040 P3X_FW_V01.07.0043_beta P3X_FW_V01.07.0060 P3X_FW_V01.08.0080 P3X_FW_V01.09.0060 P3X_FW_V01.10.0090 WM610_FC550_FW_V01.08.00.92 WM610_FW_V01.08.00.92 2015-06-12 ... 2016-11-07
01.00.2322 LBTX_FW_V01.01.00 LBTX_FW_V01.01.0010 LBTX_FW_V01.01.0030 LBTX_FW_V01.01.0031 LBTX_FW_V01.01.0040 LBTX_FW_V01.01.0041 2016-03-28 ... 2016-08-18

Structure

The module contains the FPGA bitstream in a format proprietary to Altera FPGAs.

Boot process

No analysis of the booting procedure were performed.

OS and Libraries

The module uses IP core integrated with Altera Quartus synthesis process.

Flashing

Below are the known methods to program the serial flash chip.

By official package in camera

This method requires a working communication between the OFDM board and Camera Top board. Ambarella FW and OFDM MCU must be in working order.

See Flashing firmware via SD-card by official package in camera for details.

By firmware module in camera

This method requires a working communication between the OFDM board and Camera Top board. Ambarella FW and OFDM MCU must be in working order. The firmware module file needs to be unencrypted - flashing a dji-encrypted firmware this way will cause the updated device to crash during startup, and the only way to bring it back to life will be to hook to it directly and flash it using a hardware programmer stick.

See Flashing firmware via SD-card by firmware module in camera for details.

By hardware programmer

It is possible to buy a programmer for serial flash chips with a clamp which can be put on the IC without de-soldering it.

Interfaces

TODO

Clone this wiki locally