News:

Did you know - Google aren't very nice.  Apparently we're all evil pirates here on OpenIPCam, and they cancelled my adsense account due to that.  Sigh.

Author Topic: Camera not working  (Read 11638 times)

November 13, 2011, 10:09:47 am
Hey,

So I guess the subject doesnt give much away, but hear me out.
I guess the camera is OEM, and I have no idea who the manufacturer is.

When the camera powers up the camera doesnt pan around as part of the power up sequence. There is a green LED on the front centre of the IR leds, that is also off. I cant talk to it over ethernet - but the ethernet lights do flash. The camera used to work, but one day it stopped.
I've soldered wires to J2 (rs232) and can terminal in.

I get the following printed out:
W90P745 Boot Loader [ Version 1.1 Revision 1] Rebuilt on May 11 2010
Memory Size is 0x1000000 Bytes, Flash size is 0x400000 Bytes
Board designed by Winbond
Hardware supported by Winbond
Copyright Winbond Limited 2001-2006. All Rights Reserved.
ERROR: Unknown data

Checking the image gives 0 checksum errors.
Typing Set -? returns Cant find bood loader information
ERROR: Data Abort @ pc=0x7F003100.

other stuff, cache is disabled, bootloader interface is MAC

Image: 0 name:BOOT INFO base:0x7F010000 isze:0x00000048 exec:0x7f010000 -f

Any ideas what is wrong?
Looking at the pyhsical PCB shows some (maybe) damage to pins 80-90 but my decent soldering iron is at work.

Thanks in advanced
Stephen

November 13, 2011, 10:15:37 am
So some extra hunting around

Presuming those pins lead to the flash chip, then its not working as those pins are damamged, and cant load the stuff from flash

OR....
somehow the flash stuff got corrupted, and all I need to do it rewrite the flash stuff

thoughts

  • No avatar
  • *****
November 13, 2011, 10:25:23 am
Definitely flash corrupt issue - thats what it says..

Quote
ERROR: Unknown data

Can try reflashing  something see if it can take, otherwise may be a write-off unless you feel up to resoldering smd mount flash and putting a new chip on..

November 13, 2011, 10:58:35 am
Hey,

This is a pic of the pins I was talking about


I think I'm going to try resoldering these - or putting jumpers on. I dont fancy replacing a flash chip - but I've had to hand solder the ARM pitch at work - so thats not too daunting.
Presumably if those pins have been damaged then a new flash image wouldnt take anyway.

Stephen

  • No avatar
  • *****
November 13, 2011, 03:44:53 pm
hmmm, such hardware damage doesn't usually occur overnight ????

according to the datasheet (see filesection) this are address lines, so the symptoms are what one expects with this kind of error ...

November 13, 2011, 04:34:42 pm
schufti,

I am as flumuxxed as you to be honest, and I have no idea how that came to be.
I should have a decent bit of luck soldering most of those back - i think one is a power rail and bends back underneither the device, so that may require a jumper.
I havent tried writing anything to the flash, so I guess if I fix those tracks then the thing should work fine - nothing a pit of flux and a bucket tip cant handle

November 14, 2011, 09:06:12 am
So, I've resoldered those pins and I'm getting something different now.

Quote
W90P745 Boot Loader [ Version 1.1 $Revision: 1 $ ] Rebuilt on May 11 2010
Memory Size is 0x1000000 Bytes, Flash Size is 0x400000 Bytes
Board designed by Winbond
Hardware support provided at Winbond
Copyright (c) Winbond Limited 2001 - 2006. All rights reserved.
Boot Loader Configuration:

        MAC Address         : 00:A8:F7:00:81:E4
        IP Address          : 0.0.0.0
        DHCP Client         : Enabled
        CACHE               : Enabled
        BL buffer base      : 0x00300000
        BL buffer size      : 0x00100000
        Baud Rate           : -1
        USB Interface       : Disabled
        Serial Number       : 0xFFFFFFFF


For help on the available commands type 'h'

Press ESC to enter debug mode ......
Cache enabled!
Processing image 1 ...
Processing image 2 ...
Processing image 3 ...
Processing image 4 ...
Processing image 5 ...
Processing image 6 ...
Processing image 7 ...
Unzip image 7 ...


ERROR: Prefetch Abort @ pc=0x7F007DE0
bootloader >

I am taking this to mean that part of it is working as the serial isnt set, and I get ERROR:Prefetch Abort @ pc=0x7f007DE0.
All of the pins looked soldered, but could it be the case that one actually isnt, and so always returns 0 (or shorted to power so 1).

What are your ideas?
« Last Edit: November 14, 2011, 10:22:34 am by steaky1212 »

November 14, 2011, 11:05:43 am
*Update*
So I've just done LS and CHK,
LS reveals
Quote
Image: 0 name:BOOT INFO base:0x7F010000 size:0x00000038 exec:0x7F010000 -af     
Image: 0 name:BOOT INFO base:0x7F010000 size:0x00000048 exec:0x7F010000 -f     
Image: 7 name:linux base:0x7F020000 size:0x000BF7B0 exec:0x00008000 -acxz       
Image: 6 name:romfs base:0x7F0E0000 size:0x000F9800 exec:0x7F0E0000 -a

CHK reveals
Quote
ERROR: Image 7 checksum error found !                                           
Image check finished. 1 checksum error found.

Could this still be an incorrectly soldered pin, or is it more likely a dodgy flash? Is it possible to download the image and verify it and/or find another compatable image?

  • No avatar
  • *****
November 14, 2011, 11:58:22 am
Either one of the higher address lines is borked on the board -> the flash chip (which is possible looking at your photo), or the flash needs reflashing.

You are getting there though.

Keep at it.

Suggest download a data sheet for the flash chip and check which lines are for the upper memory area access so you can buzz them out.


November 14, 2011, 12:00:04 pm
admin,

That is exactly what I am thinking.
Using the "d" command I have got to this...
Quote
bootloader > d                                                                 
Displaying memory at 0xFFFF00                                                   
[00FFFF00] 55555555 55555555 - 55555555 55555555  UUUUUUUUUUUUUUUU             
[00FFFF10] 55555555 55555555 - 55555555 55555555  UUUUUUUUUUUUUUUU             
[00FFFF20] 55555555 55555555 - 55555555 55555555  UUUUUUUUUUUUUUUU             
[00FFFF30] 55555555 55555555 - 0A7F0A64 30306630  UUUUUUUUd..0f00             
[00FFFF40] 0A303062 5555550A - 55555555 55555555  b00..UUUUUUUUUUU             
[00FFFF50] 55555555 55555555 - 55555555 55555555  UUUUUUUUUUUUUUUU             
[00FFFF60] 55555555 55555555 - 55555555 55555555  UUUUUUUUUUUUUUUU             
[00FFFF70] 55555555 55555555 - 55555555 55555555  UUUUUUUUUUUUUUUU             
[00FFFF80] 55555555 55555555 - 78300067 30303030  UUUUUUUUg.0x0000             
[00FFFF90] 30303030 55555500 - 55555555 55555555  0000.UUUUUUUUUUU             
[00FFFFA0] 55555555 55555555 - 55555555 55555555  UUUUUUUUUUUUUUUU             
[00FFFFB0] 55555555 55555555 - 55555555 55555555  UUUUUUUUUUUUUUUU             
[00FFFFC0] 55555555 55555555 - 55555555 55555555  UUUUUUUUUUUUUUUU             
[00FFFFD0] 55555555 0000000A - 00006020 00004D28  UUUU.....`..(M..             
[00FFFFE0] 00FFFF89 7F008CDF - 00000001 0000451C  ............E..             
[00FFFFF0] 00FFFF88 00000000 - 7F001A74 00FFFE74  ........t..t...             
                                                                               
bootloader > d                                                                 
Displaying memory at 0x1000000                                                 
[01000000] 00000000 55555555 - 00000000 55555555  ....UUUU....UUUU             
[01000010] 00000000 55555555 - 00000000 55555555  ....UUUU....UUUU             
[01000020] 00000000 0000791E - 00000000 00000000  .....y..........             
[01000030] 00000000 FFFFFFFF - 00000000 0000791D  .............y..             
[01000040] 00000000 55555555 - 00000000 55555555  ....UUUU....UUUU             
[01000050] 00000000 E28DD0FC - 00000000 00005EF0  .............^..             
[01000060] 00000000 00006070 - 00000000 00082073  ....p`......s...             
[01000070] 00000000 00006325 - 00000000 0000451C  ....%c.......E..             
[01000080] 00000000 E92D4008 - 00000000 EB000FAB  .....@-.........             
[01000090] 00000000 55555555 - 00000000 55555555  ....UUUU....UUUU             
[010000A0] 00000000 55555555 - 00000000 55555555  ....UUUU....UUUU             
[010000B0] 00000000 55555555 - 00000000 55555555  ....UUUU....UUUU             
[010000C0] 00000000 55555555 - 00000000 55555555  ....UUUU....UUUU             
[010000D0] 00000000 55555555 - 00000000 55555555  ....UUUU....UUUU             
[010000E0] 00000000 55555555 - 00000000 55555555  ....UUUU....UUUU             
[010000F0] 00000000 55555555 - 00000000 55555555  ....UUUU....UUUU             
                                                                               
ERROR: Data Abort @ pc=0x7F000EB8                                       

I am guessing there is an open circuit somewhere

  • No avatar
  • *****
November 14, 2011, 12:11:20 pm
Actually having actually seen the full photo now (jumped on a vpn) - thats the CPU, not the flash chip.
Still, looks like address line problem.

I'd just return the unit - its definitely a QC issue.
Contact the supplier, and arrange for another one.

  • No avatar
  • *****
November 14, 2011, 12:16:29 pm
Hi
AFAIK the regions you dumped are not flash
flash starts at 0x7F000000

I'm not sure where RAM is located in these devices.
Try finding out and do a fill and dump on page boundaries.

I wouldnt try flashing some new fw until it's granted there is no missing addressline, it could end in a destroyed bootloader .... so no "del ..." either

November 15, 2011, 03:30:27 am
admin, the thing has been taken apart and it's already out of its warrenty - so I guess a return would be out of the question.

schufti, what do you mean by fill and dump of page boundaries.
Sorry but this is the lowest level I've worked with before (at least on a consumer item).

thank you both for your help though, it is extremely useful.

*UPDATE* I've tried buzzing out the address connections and everything seems to be there - though it is still early here so I'll give my brain a chance to settle down and try again later. Out of interest, reading http://wiki.openipcam.com/index.php/Test_Firmware_Installation seems to suggest I can load another firmware to a different part of the flash and get around my higher address line issues.
Also, unless I am mistaken this error "ERROR: Prefetch Abort @ pc=0x7F007DE0" points to a problem in the bootload code - as 0x7F007DE0 is in the "bootload" section of FLASH
« Last Edit: November 15, 2011, 06:12:32 am by steaky1212 »

  • No avatar
  • *****
November 15, 2011, 09:40:04 am
Hi,

having nonfunctional addresslines results in certain parts (size depending on which line failed) of the flash occuring twice in the memory window.

Consider the highest line of a 4MB chip being stuck on "L" then a write to 0x000100 will be ok and go to the lowest part of the flash, but you won't do this because your bootloader is located there.

A write to 0x200100 will unfortunately also go to 0x000100 and therefor ruin your bootloader with you not beeing aware of any wrong doing ....

November 15, 2011, 11:23:35 am
schufti, is there any way of verifying the flash chip then - so reading parts of the flash chip and checking against what should be known values.

presumably reading 0x0000001 would not read correctly if a pin is held high, and 0xffffff would read incorrectly if held low? Also, using something similar to Kermit95 and capcam I can read every memory location, attempt to modify one location and see what else has been modified (purely in flash)

I have also tried loading the homebrew firmware directly into RAM, and that seems to be working fine - so I am fairly confident the issue is taking stuff from the Flash and not loading stuff onto the RAM.

*UPDATE*
webui.txt atteched
« Last Edit: November 17, 2011, 08:14:33 am by steaky1212 »