News:

Re-organized the forum to more cleanly delineate the development section, as the end user support side appears to have taken a life of its own!

Author Topic: Maygion Kernel Assistance  (Read 17208 times)

February 10, 2011, 11:57:48 am
HI!
I find Maygion (http://www.openipcam.com/files/Firmware/firmware3.1_full.rar) original files linux and romfs. Help!

  • No avatar
  • *****
February 10, 2011, 05:19:31 pm
Help what?

Its already in the list, and they already split it into a separate file from their linux image.
app.bin has their romfs program stuff, although it looks like they use 0xdead 0xbeef as a custom header.
The file system format is flat but not quite the same as romfs.   Probably slightly customized from that.


Code: [Select]
head /home/lawrence/Downloads/firmware3.1_full/app.bin | hexdump

0000000 beef dead 0000 0000 cac4 4c86 90fa 0004
0000010 0001 0000 0000 0000 0000 0000 0000 0000
0000020 0000 0000 0000 0000 0000 0000 0000 0000

Which, I'll admit is cutesy.

The code (which you already have extracted in that rar file anyway is at these 2 locations in the app.bin file.

Code: [Select]
0x000000e0: 06 6f f1 4a cd 84 01 00 - 62 46 4c 54 00 00 00 04 .o.J....bFLT....

0x00018660: 96 0a 03 00 62 46 4c 54 - 00 00 00 04 00 00 01 50 ....bFLT.......P

cs is their main equivalent to camera.

Its compressed, so flthdr -Z cs, then strings cs will get you more than enough info.

They use /tmp/eye/ ... as a folder structure hard coded in the file though, so we could probably run this on ours with the appropriate folder structure in place.

ws does the wifi setup.

If you want, I can post strings ws and strings cs, but its similar enough to ours.



February 11, 2011, 07:30:12 am
I need linux.zip

The original (ldr BAD):

Image: 0 name:BOOT INFO base:0x7F010000 size:0x00000048 exec:0x7F010000 -f
Image: 7 name:linux.zip base:0x7F020000 size:0x000B9E00 exec:0x00008000 -acxz
Image: 6 name:romfs.img base:0x7F0E0000 size:0x0001D000 exec:0x7F0E0000 -a


W90P710 Boot Loader [ Version 1.1 $Revision: 1 $ ] Rebuilt on Jun 13 2008
Memory Size is 0x800000 Bytes, Flash Size is 0x200000 Bytes
Board designed by Winbond
Hardware support provided at Winbond
Copyright (c) Winbond Limited 2001 - 2006. All rights reserved.
Boot Loader Configuration:

        MAC Address         : 00:00:00:00:00:01
        IP Address          : 192.168.1.252
        DHCP Client         : Disabled
        CACHE               : Enabled
        BL buffer base      : 0x00300000
        BL buffer size      : 0x00100000
        Baud Rate           : 115200
        USB Interface       : Enabled
        Serial Number       : 0x00000000


For help on the available commands type 'h'

Press ESC to enter debug mode .
Cache enabled!
Processing image 1 ...
Processing image 2 ...
Processing image 3 ...
Processing image 4 ...
Processing image 5 ...
Processing image 6 ...
Processing image 7 ...
Unzip image 7 ...
Executing image 7 ...
Linux version 2.4.20-uc0 (root@localhost.localdomain) (gcc version 3.0) #669 ?? 7?? 4 23:44:33 CST 2009
Processor: Winbond W90N745 revision 1
Architecture: W90N745
On node 0 totalpages: 2048
zone(0): 0 pages.
zone(1): 2048 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/rom0 rw
Calibrating delay loop... 39.83 BogoMIPS
Memory: 8MB = 8MB total
Memory: 6332KB available (1444K code, 224K data, 44K init)
Dentry cache hash table entries: 1024 (order: 1, 8192 bytes)
Inode cache hash table entries: 512 (order: 0, 4096 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 2048 (order: 1, 8192 bytes)
POSIX conformance testing by UNIFIX
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
JFFS2 version 2.2. (C) 2001-2003 Red Hat, Inc.
Winbond W90N745 Serial driver version 1.0 (2005-08-15) with no serial options enabled
ttyS00 at 0xfff80000 (irq = 9) is a W90N745
Winbond W90N7451 Serial driver version 1.0 (2005-08-15) with no serial options enabled
ttyS00 at 0xfff80100 (irq = 10) is a W90N7451
Blkmem copyright 1998,1999 D. Jeff Dionne
Blkmem copyright 1998 Kenneth Albanowski
Blkmem 1 disk images:
0: 7F0E0000-800EFFFF [VIRTUAL 7F0E0000-800EFFFF] (RO)
RAMDISK driver initialized: 16 RAM disks of 1024K size 1024 blocksize
loop: loaded (max 8 devices)
No supported flash detected!
01 eth0 initial ok!
which:0
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
Linux video capture interface: v1.00
SCSI subsystem driver Revision: 1.00
kmod: failed to exec /sbin/modprobe -s -k scsi_hostadapter, errno = 2
Winbond Audio Driver v1.0 Initialization successfully.
POS-TAX flash device: 200000 at ff000000
Winbond flash device: Probing for AMD compatible flash...
MTD:  00bf 234bWinbond flash device: Found 1 x 2MiB CYC-FLASH at 0x0
Creating 2 MTD partitions on "Winbond flash device":
0x00000000-0x00100000 : "data (1024k)"
0x00100000-0x00200000 : "user (1024k)"
usb.c: registered new driver hub
add a static ohci host controller device
: USB OHCI at membase 0xfff05000, IRQ 15
hc_alloc_ohci
usb-ohci.c: AMD756 erratum 4 workaround
hc_reset
usb.c: new USB bus registered, assigned bus number 1
Product: USB OHCI Root Hub
SerialNumber: fff05000
hub.c: USB hub found
hub.c: 2 ports detected
main_usb.c: VIA Networking Wireless LAN USB Driver 1.14_2
usb.c: registered new driver vntwusb
usb.c: registered new driver spca5xx
Initializing USB Mass Storage driver...
usb.c: registered new driver usb-storage
USB Mass Storage support registered.
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 512 bind 1024)
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
802.1Q VLAN Support v1.7 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
FAT: bogus logical sector size 38240
FAT: bogus logical sector size 38240
VFS: Mounted root (romfs filesystem) readonly.
Freeing init memory: 44K
BINFMT_FLAT: bad magic/rev (0x74202d74, need 0x4)
Shell invoked to run file: /bin/init
Command: mount -t proc none /proc
Command: mount -t ramfs none /tmp
Command: mkdir  /tmp/eye
Command: mount -t jffs2 dev/mtdblock1 /tmp/eye
Command: cd /tmp/eye
Command: ./ldr&
[13]
Command: sh

Sash command shell (version 1.1.1)
Unhandled fault: external abort on linefetch (F4) at 0x00000001
fault-common.c(97): start_code=0x1d8040, start_stack=0x1fdfa0)
/tmp/eye>


Now:


W90P710 Boot Loader [ Version 1.1 $Revision: 1 $ ] Rebuilt on Jun 13 2008
Memory Size is 0x800000 Bytes, Flash Size is 0x200000 Bytes
Board designed by Winbond
Hardware support provided at Winbond
Copyright (c) Winbond Limited 2001 - 2006. All rights reserved.
Boot Loader Configuration:

        MAC Address         : 00:00:00:00:00:01
        IP Address          : 192.168.1.252
        DHCP Client         : Disabled
        CACHE               : Enabled
        BL buffer base      : 0x00300000
        BL buffer size      : 0x00100000
        Baud Rate           : 115200
        USB Interface       : Enabled
        Serial Number       : 0x00000000


For help on the available commands type 'h'

Press ESC to enter debug mode .
Cache enabled!
Processing image 1 ...
Processing image 2 ...
Processing image 3 ...
Processing image 4 ...
Processing image 5 ...
Processing image 6 ...
Processing image 7 ...
Unzip image 7 ...
Executing image 7 ...
Linux version 2.4.20-uc0 (root@maverick-linux) (gcc version 3.0) #1221 ¶? 12?? 15 09:31:56 CST 2009
Processor: Winbond W90N745 revision 1
Architecture: W90N745
On node 0 totalpages: 2048
zone(0): 0 pages.
zone(1): 2048 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/rom0 rw
Calibrating delay loop... 39.83 BogoMIPS
Memory: 8MB = 8MB total
Memory: 6248KB available (1470K code, 287K data, 40K init)
Dentry cache hash table entries: 1024 (order: 1, 8192 bytes)
Inode cache hash table entries: 512 (order: 0, 4096 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 2048 (order: 1, 8192 bytes)
POSIX conformance testing by UNIFIX
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
PTZ Driver has been installed successfully.
Winbond W90N745 Serial driver version 1.0 (2005-08-15) with no serial options enabled
ttyS00 at 0xfff80000 (irq = 9) is a W90N745
Winbond W90N7451 Serial driver version 1.0 (2005-08-15) with no serial options enabled
ttyS00 at 0xfff80100 (irq = 10) is a W90N7451
I2C Bus Driver has been installed successfully.
Blkmem copyright 1998,1999 D. Jeff Dionne
Blkmem copyright 1998 Kenneth Albanowski
Blkmem 1 disk images:
0: 700000-6FFFFF [VIRTUAL 700000-6FFFFF] (RO)
No supported flash detected!
01 eth0 initial ok!
which:0
PPP generic driver version 2.4.2
Linux video capture interface: v1.00
Winbond Audio Driver v1.0 Initialization successfully.
usb.c: registered new driver hub
add a static ohci host controller device
: USB OHCI at membase 0xfff05000, IRQ 15
hc_alloc_ohci
usb-ohci.c: AMD756 erratum 4 workaround
hc_reset
usb.c: new USB bus registered, assigned bus number 1
hub.c: USB hub found
hub.c: 2 ports detected
usb.c: registered new driver audio
audio.c: v1.0.0:USB Audio Class driver
usb.c: registered new driver serial
usbserial.c: USB Serial Driver core v1.4

 _____     ____    _    ____
|__  /   _|  _ \  / \  / ___|
  / / | | | | | |/ _ \ \___ \
 / /| |_| | |_| / ___ \ ___) |
/____\__, |____/_/   \_\____/
     |___/
ZD1211B - version 2.24.0.0
usb.c: registered new driver zd1211b
main_usb.c: VIA Networking Wireless LAN USB Driver 1.20.04
usb.c: registered new driver vntwusb
usb.c: registered new driver rt73
dvm usb cam driver 0.0.0.0 by Maverick Gao in 2006-8-12
usb.c: registered new driver dvm
dvm usb cam driver 0.1 for sonix288 by Maverick Gao in 2009-4-20
usb.c: registered new driver dvm usb cam driver for sonix288
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 512 bind 1024)
Blkmem: bad access: block=0, count=2 (pos=400, len=0)
end_request: I/O error, dev 1f:00 (Blkmem), sector 0
romfs: unable to read superblock
Kernel panic: VFS: Unable to mount root fs on 1f:00

  • No avatar
  • *****
February 11, 2011, 08:49:59 am
Quote
0: 700000-6FFFFF [VIRTUAL 700000-6FFFFF] (RO)
No supported flash detected!

You've flashed an incorrect kernel for your board haven't you, that was dumb.
The kernel doesn't have drivers for your flash.
I could build you a kernel with the appropriate flash drivers I guess, but I'd speak to Maygion first..

They're definitely building with the BSP also, as they haven't removed the POS-TAX mtd stuff hehe.

Quote
POS-TAX flash device: 200000 at ff000000
Winbond flash device: Probing for AMD compatible flash...
MTD:  00bf 234b Winbond flash device: Found 1 x 2MiB CYC-FLASH at 0x0

Their details.


http://www.maygion.com/

MayGion Tech Company.

Contact us:
xwpcom@gmail.com
QQ:117620974


  • No avatar
  • *****
March 10, 2011, 09:20:49 pm
Have added a Maygion firmware with Linux bin in the firmware files section.
( http://www.openipcam.com/files/Firmware/Maygion )

See if flashing that linux will help recover your one.

If not, let me know, and I ask xmp



March 20, 2011, 01:56:50 am
Does not work, too big size.  :(
It, unfortunately not Maygion, from other camera www.grand.com.tw

  • No avatar
  • *****
March 20, 2011, 11:54:44 am
Did you talk to xwp?

MSN is  xwpcom @ msn . com

He can write enough English to chat with, so why not ask him like I recommended before...

March 21, 2011, 03:09:18 pm
Asked, does not answer.
I have ordered the new camera for reading firmware.

March 22, 2011, 07:05:21 pm
Hi, I have maygion camera, and I can download the firmware image, but I d'not know how (what commands to use). Now I can just upload the firmware on the camera... If you tell me what to do - I'll do it.

March 22, 2011, 07:09:06 pm
I'm waiting for reply from them for three weeks. If they send you the original firmware - upload it to the site, please.

  • No avatar
  • *****
March 23, 2011, 07:43:03 am
XMIX - he should reply to you tonight.

Chatted quickly with him this morning some of that below:

----


Me:
http://www.openipcam.com/forum/index.php/topic,26.msg203.html#msg203
maybe you can reply them..


xwpcom@msn.com:
let me look
yes,I do receive some mail which I have not reply just for too busy(maybe a excuse).
I will reply all mails tonight.
in fact,I have write some FAQ on www.maygion.com,it can solve many problems.

Me:
maybe give me url
i post on there.
or you can put this on this post
so people know


XWP:
http://www.maygion.com/faq.html
http://www.maygion.com/upgrade.html

March 23, 2011, 10:57:39 am
I looked at the contents of Maygion site many times. I just broke my two cameras when trying to flash according to instructions. Now I'm connected to the RS232 interface and try to flash the camera different firmware that I found on the Internet. But none of this works, I was able to make only work correctly the Linux kernel. I think it is fair to place somewhere the original files 'linux.zip' and 'romfs.img', so people can fix their cameras. But they do not want to do this.

  • No avatar
  • *****
March 23, 2011, 02:26:07 pm
Why should he place his firmware for you?

He places the romfs and webui online - which are what he updates and changes.  The OS he doesn't upgrade, and so why does he need to upload that?  If you wipe that from your own bad decisions, thats your fault really.

I will make mine open for changing by others, but doesn't mean others will do the same.

In China consumers are responsible for their actions.  You are totally free to mess with a device, unlike in the USA, but you also bear the consequences. 

I don't say that you shouldn't play around with things, but I do think that you should be aware of what you can do and what you cannot and play within those parameters, unless you can deal with consequences.


Lawrence.

March 23, 2011, 03:35:55 pm
I think that if I follow the upgrade instructions and the video camera dies, I should be able to recover it without wasting time and money to send parcels. I know I made ​​a mistake when removed romfs.img, but what could I do? The camera was dead... The only way to liven up the camera - flash it via RS232. only need to post a couple of files and many problems will be solved. Why not do it?
I would love to use the camera and did not spend to much time on them if they did not die during a simple firmware upgrade via WEB interface.
The only reason I bought the CP2102-USB-TTL-RS232-Serial-Port-Converter-Transceiver and began to understand how to operate these cameras because they are constantly broken. That's why I think that the manufacturer could publish on its website a couple of files.

I have not found at his website file romfs.img, only app.bin or www.bin but it's not the same thing.
Maybe you can tell me where to get what I need?

  • No avatar
  • *****
March 25, 2011, 02:17:48 pm
app.bin is what i call the romfs.
www.bin is the webui.

You are missing the Linux binary image.
I think this is packaged within the repair tool and instructions on that are here - http://www.maygion.com/upgrade.html#upgradefw