News:

Registered a URL and setup a forum as the IPCam stuff really needed its own site vs my irregular blog posts about IPCam hacking at http://www.computersolutions.cn/blog

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - ddeep

Pages: [1]
1
Help / Unable to create 5 partitions with setenv bootargs
« on: December 14, 2015, 06:43:10 am »
Hello,

Here is my problem:
when I use the command line to create 5 partitions, it does not matter:
setenv bootargs mem=64M console=ttyAMA0,115200 root=/dev/mtdblock2 rootfstype=jffs2 mtdparts=hi_sfc:1M(boot),3M(kernel),12M(rootfs),1M(config),64K(key)

By cons if I use this command line that create me partitons 5:
setenv bootargs mem=64M console=ttyAMA0,115200 root=/dev/mtdblock2 rootfstype=jffs2 mtdparts=hi_sfc:256k(boot)ro,128k(env),128k(conf),3072k(os),12800k(rootfs)

So I do not understand why the first line does not create me 5 partitions but only 3 partitions (boot, kernel, rootfs)

Do you have an idea? My goal is to have the partitions in the same order as the first command line.

Thk you.

2
Similar Hardware / Re: HiSilicon 3518e
« on: December 12, 2015, 04:44:56 am »
Salut,

Regarde avec un ohmmètre si les connecteurs TP6 et TP4 seraient reliés à J6 DUBUG sur les deux pistes du milieu. Puis test les deux autres pistes pour trouver la terre.

Si c'est le cas, branche ton adaptateur USB-TTL dessus, soit RX et TX et GND. Par contre l'ordre de RX et TX je ne sais pas, essaye ça ne craint rien. Après tu lance ton terminal sur 115200. Tu démarre ta caméra. Si tu n'a rien inverse RX et TX toujours en redémarrent ta caméra. Si toujours rien, vérifie bien ta terre.

Si vraiment rien faut trouver d'autres pistes.


3
Help / restore files camera with hilinux?
« on: December 11, 2015, 07:12:23 am »
Hello everyone,

I appeal to your talent in hilinux, that I restore all partitions of my camera files sdk, but now I do not have any camera function.

How can I do to inject the command line files with hilinux.
And would you have these files and where do I put them?


My goal is to install the drivers.

Unless one of you is a rootfs_64k.jffs2 his camera with all the drivers I can test?

I would also have access to webui, like I do not know how and where to put the webui.

Currently there are only the kernel and the basic rootfs from the SDK in my HI3518.

Thank you.
            _ _ _ _ _ _ _ _ _ _ _ _
            \  _  _   _  _ _ ___
            / /__/ \ |_/
           / __   /  -  _ ___
          / /  / /  / /
  _ _ _ _/ /  /  \_/  \_ ______
___________\___\__________________

[RCS]: /etc/init.d/S00devs
[RCS]: /etc/init.d/S01udev
udevd (509): /proc/509/oom_adj is deprecated, please use /proc/509/oom_score_adj instead.
[RCS]: /etc/init.d/S80network
Auto login as root ...
Jan  1 00:00:03 login[514]: root login on 'ttyS000'
Welcome to HiLinux.
None of nfsroot found in cmdline.

4
Similar Hardware / Re: HiSilicon 3518e
« on: December 10, 2015, 04:06:56 pm »
Salut,

Essaye ça:

telnet
root / cat1029

Tu as des photos du PCB?

5
Help / partiton config and key HI3518
« on: December 10, 2015, 10:42:07 am »
Hello,

I reinstall the kernel and rootfs by the SDK HI3518, but I have no partitions 'config' and 'key'.

Can you tell me how to install and where to find these partitions on the net?

Thank you.

6
Firmware / Re: research firmware HI3518
« on: December 08, 2015, 03:18:13 pm »
Nobody knows?

7
Firmware / research firmware HI3518
« on: December 08, 2015, 10:13:31 am »
Hello,

I have a camera based on HI3518, but it is blocked. I seek a linux.bin and rootfs.img that I will transfer TFTP. Do you have that?

Thank you.

8
Hacking & Modding / Re: HI3518 firmware recovery
« on: December 07, 2015, 09:40:24 pm »
Hello Filipe,

How do you manage to enter telnet after uboot because when I type "root" he said incorrect order. Can you help me? Thank you.

U-Boot 2010.06-svn777 (Mar 06 2014 - 17:24:24)

Check spi flash controller v350... Found
Spi(cs1) ID: 0xEF 0x40 0x18 0x00 0x00 0x00
Spi(cs1): Block:64KB Chip:16MB Name:"W25Q128B"
In:    serial
Out:   serial
Err:   serial
Hit any key to stop autoboot:  0
hisilicon # root
Unknown command 'root' - try 'help'

9
Help / camera reboot continuously
« on: December 07, 2015, 06:22:47 pm »
My camera will reboot loop, here's what I have on the serial port, have you any idea?
Do I inject linux roofs and where can I unlock otherwise?
Thank you.

U-Boot 2010.06-svn777 (Mar 06 2014 - 17:24:24)

Check spi flash controller v350... Found
Spi(cs1) ID: 0xEF 0x40 0x18 0x00 0x00 0x00
Spi(cs1): Block:64KB Chip:16MB Name:"W25Q128B"
In:    serial
Out:   serial
Err:   serial
Hit any key to stop autoboot:  0
do_upgrade now
16384 KiB hi_sfc at 0:0 is now current device
read 0x82000000 0xf00000 0x10000

upgradeAddr:0xffffffff
upgradeAddr erro
16384 KiB hi_sfc at 0:0 is now current device

## Booting kernel from Legacy Image at 82000000 ...
   Image Name:   Linux-3.0.8
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2933856 Bytes = 2.8 MiB
   Load Address: 80008000
   Entry Point:  80008000
   Loading Kernel Image ... OK
OK

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
Linux version 3.0.8 (bt@vvvsvr) (gcc version 4.4.1 (Hisilicon_v100(gcc4.4-290+uclibc_0.9.32.1+eabi+linuxpthread)) ) #1 Tue Mar 25 23:33:30 CST 2014
CPU: ARM926EJ-S [41069265] revision 5 (ARMv5TEJ), cr=00053177
CPU: VIVT data cache, VIVT instruction cache
Machine: hi3518
Memory policy: ECC disabled, Data cache writeback
AXI bus clock 200000000.
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 18796
Kernel command line: mem=74M console=ttyAMA0,115200 root=/dev/mtdblock2 rootfstype=jffs2 mtdparts=hi_sfc:1M(boot),3M(kernel),10M(rootfs),1M(config),64K(key)
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 74MB = 74MB total
Memory: 69492k/69492k available, 6284k reserved, 0K highmem
Virtual kernel memory layout:
    vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
    DMA     : 0xffc00000 - 0xffe00000   (   2 MB)
    vmalloc : 0xc5000000 - 0xfe000000   ( 912 MB)
    lowmem  : 0xc0000000 - 0xc4a00000   (  74 MB)
    modules : 0xbf000000 - 0xc0000000   (  16 MB)
      .init : 0xc0008000 - 0xc0029000   ( 132 kB)
      .text : 0xc0029000 - 0xc0527000   (5112 kB)
      .data : 0xc0528000 - 0xc054c200   ( 145 kB)
       .bss : 0xc054c224 - 0xc05684a0   ( 113 kB)
SLUB: Genslabs=13, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
NR_IRQS:32 nr_irqs:32 32
sched_clock: 32 bits at 100MHz, resolution 10ns, wraps every 42949ms
Console: colour dummy device 80x30
Calibrating delay loop... 218.72 BogoMIPS (lpj=1093632)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
Serial: AMBA PL011 UART driver
uart:0: ttyAMA0 at MMIO 0x20080000 (irq = 5) is a PL011 rev2
console [ttyAMA0] enabled
uart:1: ttyAMA1 at MMIO 0x20090000 (irq = 5) is a PL011 rev2
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
cfg80211: Calling CRDA to update world regulatory domain
Switching to clocksource timer1
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
RPC: Registered named UNIX socket transport module.
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
NetWinder Floating Point Emulator V0.97 (double precision)
VFS: Disk quotas dquot_6.5.2
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.16)
msgmni has been set to 135
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 253)
io scheduler noop registered
io scheduler deadline registered (default)
io scheduler cfq registered
brd: module loaded
loop: module loaded
Spi id table Version 1.22
Spi(cs1) ID: 0xEF 0x40 0x18 0x00 0x00 0x00
SPI FLASH start_up_mode is 3 Bytes
Spi(cs1):
Block:64KB
Chip:16MB
Name:"W25Q128B"
spi size: 16MB
chip num: 1
5 cmdlinepart partitions found on MTD device hi_sfc
Creating 5 MTD partitions on "hi_sfc":
0x000000000000-0x000000100000 : "boot"
0x000000100000-0x000000400000 : "kernel"
0x000000400000-0x000000e00000 : "rootfs"
0x000000e00000-0x000000f00000 : "config"
0x000000f00000-0x000000f10000 : "key"
Fixed MDIO Bus: probed
himii: probed
usbcore: registered new interface driver rt2500usb
usbcore: registered new interface driver rt73usb
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
hiusb-ehci hiusb-ehci.0: HIUSB EHCI
hiusb-ehci hiusb-ehci.0: new USB bus registered, assigned bus number 1
hiusb-ehci hiusb-ehci.0: irq 15, io mem 0x100b0000
hiusb-ehci hiusb-ehci.0: USB 0.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
hiusb-ohci hiusb-ohci.0: HIUSB OHCI
hiusb-ohci hiusb-ohci.0: new USB bus registered, assigned bus number 2
hiusb-ohci hiusb-ohci.0: irq 16, io mem 0x100a0000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
usbcore: registered new interface driver cdc_acm
cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
usbcore: registered new interface driver cdc_wdm
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver ums-alauda
usbcore: registered new interface driver ums-datafab
usbcore: registered new interface driver ums-freecom
usbcore: registered new interface driver ums-isd200
usbcore: registered new interface driver ums-jumpshot
usbcore: registered new interface driver ums-sddr09
usbcore: registered new interface driver ums-sddr55
usbcore: registered new interface driver mdc800
mdc800: v0.7.5 (30/10/2000):USB Driver for Mustek MDC800 Digital Camera
mousedev: PS/2 mouse device common for all mice
usbcore: registered new interface driver usbhid
usbhid: USB HID core driver
TCP cubic registered
Initializing XFRM netlink socket
NET: Registered protocol family 10
NET: Registered protocol family 17
NET: Registered protocol family 15
lib80211: common routines for IEEE802.11 drivers
Registering the dns_resolver key type
registered taskstats version 1
drivers/rtc/hctosys.c: unable to open rtc device (rtc0)
øusb 1-1: new high speed USB device number 2 using hiusb-ehci
VFS: Mounted root (jffs2 filesystem) on device 31:2.
Freeing init memory: 132K

            _ _ _ _ _ _ _ _ _ _ _ _
            \  _  _   _  _ _ ___
            / /__/ \ |_/
           / __   /  -  _ ___
          / /  / /  / /
  _ _ _ _/ /  /  \_/  \_ ______
___________\___\__________________

[RCS]: /etc/init.d/S00devs
[RCS]: /etc/init.d/S01udev
udevd (528): /proc/528/oom_adj is deprecated, please use /proc/528/oom_score_adj instead.
[RCS]: /etc/init.d/S04tmpfs
[RCS]: /etc/init.d/S08onvif
[RCS]: /etc/init.d/S10mpp
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1
/etc/init.d/S10mpp: line 20: set_path_before: not found
/etc/init.d/S10mpp: line 21: set_path_before: not found
/etc/init.d/S10mpp: line 32: /*PTZ: not found
*** Board tools : ver0.0.1_20121120 ***
[debug]: {source/utils/cmdshell.c:166}cmdstr:himm
0x20090030: 0x00000300 --> 0x00004F01
[END]
*** Board tools : ver0.0.1_20121120 ***
[debug]: {source/utils/cmdshell.c:166}cmdstr:himm
0x2005003c: 0x000001E0 --> 0x000001E2
[END]
[RCS]: /etc/init.d/S80network
ADDRCONF(NETDEV_UP): eth0: link is not ready
[RCS]: /etc/init.d/S82mast.sh
[RCS]: /etc/init.d/S90p2p
=== start run boottab ===
Auto login as root ...killall: vs_server: no process killed
BT 20130927- board---3300
use as mode 0
Init hsdx ko OK
Hisilicon Media Memory Zone Manager
hi3518_base: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
Hisilicon UMAP device driver interface: v3.00
pa:84a00000, va:c5200000
load sys.ko for Hi3518...OK!

(none) login: load viu.ko for Hi3518...OK!
ISP Mod init!
hi_i2c init is ok!
*** Board tools : ver0.0.1_20121120 ***
[debug]: {source/utils/cmdshell.c:166}cmdstr:himm
0x200f0138: 0x00000000 --> 0x00000000
[END]
*** Board tools : ver0.0.1_20121120 ***
[debug]: {source/utils/cmdshell.c:166}cmdstr:himm
0x20140400: 0x00000061 --> 0x00000061
[END]
*** Board tools : ver0.0.1_20121120 ***
[debug]: {source/utils/cmdshell.c:166}cmdstr:himm
0x20140100: 0x00000040 --> 0x00000040
[END]
sh: force: unknown operand
Sensor Detect  mt9p006 AA
sensor_cfg 111
sensor_cfg 222
sensor_cfg 222
Set Sensor mt9p006 1080P
Reconfig Sensor as mt9p006
sensor_cfg 333
curr:AUTO detect:mt9p006
AAAA SensorType ar0330 AAAA
umount: tmpfs busy - remounted read-only
The system is going down NOW!
Sent SIGTERM to all processes
Sent SIGKILL to all processes
Requesting system reboot
Restarting system.


U-Boot 2010.06-svn777 (Mar 06 2014 - 17:24:24)

Check spi flash controller v350... Found
Spi(cs1) ID: 0xEF 0x40 0x18 0x00 0x00 0x00
Spi(cs1): Block:64KB Chip:16MB Name:"W25Q128B"
In:    serial
Out:   serial
Err:   serial
Hit any key to stop autoboot:  0
do_upgrade now
16384 KiB hi_sfc at 0:0 is now current device
read 0x82000000 0xf00000 0x10000

upgradeAddr:0xffffffff
upgradeAddr erro
16384 KiB hi_sfc at 0:0 is now current device

## Booting kernel from Legacy Image at 82000000 ...
   Image Name:   Linux-3.0.8
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2933856 Bytes = 2.8 MiB
   Load Address: 80008000
   Entry Point:  80008000
   Loading Kernel Image ...

10
Help / How romfs extract a firmware .OV
« on: December 07, 2015, 01:04:02 pm »
Hello,

I have a firmware .OV you can tell me how to extract and romfs linux.bin in?

Thank you

11
Help / Re: Camera stopped working how recovering telnet?
« on: December 04, 2015, 04:36:55 pm »
I managed to communicate with the microcontroller STC15F2K60S2 at the jtag J2 use 5V by using the STC -ISP software. But I do not see the uboot in a putty or tera term, there is nothing .

Is it possible that there is no bootloader in this microcontroller ?


12
Help / Re: Camera stopped working how recovering telnet?
« on: December 03, 2015, 01:56:45 pm »
OK,
I connected my converter on cr-x, c-tx and gnd, but nothing. If I remove the GND I have some thing putty or tera term but it is unreadable with unknown symbols. Do you have an idea ?

This is how the chip and the serial port, information taken in the documentation:
Is this C-C-RX and TX where I have to plug my USB-TTL adapter?

Here's what I have on the electronic board


The documentation for the serial port


Does someone can help me to correctly connect my adapter?
Thank you.


13
Help / Re: Camera stopped working how recovering telnet?
« on: December 02, 2015, 10:37:18 am »
OK thank you.

I will test Saturday when I will receive the USB - TTL adapter.

I have no oscilloscope does this risk anything if I try to connect the adapter directly to C- RX , C-TX and GND ?

The 3.3V are supplied by the USB port on the computer ?

If I could retrieve an oscilloscope what should I do with it? can you explain me?

Thank you.

14
Help / Re: Camera stopped working how recovering telnet?
« on: December 01, 2015, 08:12:26 am »
Can you tell me where the jtag is? on PCB


15
Help / Camera stopped working how recovering telnet?
« on: November 30, 2015, 03:06:02 pm »
Good evening,

I recently acquired a brand camera COTIER :
Equipment Version: 5300 - mt9p006
Software Version : V2.3.4.2102 -S50 -SMA - B20150625D

http://www.lightinthebox.com/fr/camera-ip-ptz-etanche-jour-nuit-detection-de-presence-dual-stream-acces-a-distance-coupure-infrarouge-wi-fi-protected-setup-pret-a_p4219816.html

But I for some concern with it : ir LED flashing in red constantly night Consequently an image which also flashes .
Then the PTZ function that no longer works , you can not start a movement by the interface without the camera does plant.

So I wanted to inject a new firmware from another camera hi3510 but I eventually bricked the camera.

So I refer to you, could you give me a tip to retrieve the camera and do you have a firmware compatible with the camera ?

Thank you in advance.

Pages: [1]