News:

Re-organized the forum to more cleanly delineate the development section, as the end user support side appears to have taken a life of its own!

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - mrc333777

Pages: [1]
1
i know its been a while, but i hacked this firmware to enable telnet if anyone wants it

login = root
pass =

this is for the 2014 model of the iprobot3

2
Hacking & Modding / Re: Hacking the IPRobot3
« on: February 28, 2014, 01:48:14 am »
dont b!tch if you brick your sh!t.

telnet ip address
login: root
pass: blossom2012

now has anyone figured out how to make the pan/tilt faster than that lame crap they have the fastest set to?  way to slow for me!

3
Hacking & Modding / Re: Hacking the IPRobot3
« on: August 04, 2013, 06:59:29 am »
none of those two photos
the bottom of the board, not the top

from the bottom, j9 with the mic facing you and ethernet away from you at 38400 8n1

left to right

+3.3v , ground , receive , transmit - J9
make a photo of the bottom

4
Hacking & Modding / Re: Hacking the IPRobot3
« on: June 21, 2013, 11:57:49 pm »
from the bottom, j9 with the mic facing you and ethernet away from you at 38400 8n1

left to right

+3.3v , ground , receive , transmit - J9

MP SPI-NOR Bootstrap v0.2
Boot image offset: 0x10000. Booting Image .....
0567Will set the following freq...
PLL1: 800 MHz, PLL2: 540 MHz, CPU freq: 540 MHz, AHB freq: 270 MHz, DDR freq: 800 MHz
go...

*********************************************
Please input Space to run Linux
Please input ESC to run UBOOT
Please input . to run burn-in
Otherwise, system will run Linux after 2 sec
*********************************************
Load image from SPI-NOR offset 0x80000 to sdram 0x4000000
Jump 0x4000000
Uncompressing Linux...
................................................... done, booting the kernel.
Linux version 2.6.28 (song@songzc) (gcc version 4.4.0 (Faraday C/C++ Compiler Release 20100325) ) #189 PREEMPT Thu Dec 13 18:43:33 CST 2012
CPU: FA626TE [66056261] revision 1 (ARMv5TE), cr=0000797f
CPU: VIPT aliasing data cache, VIPT aliasing instruction cache
Machine: Faraday GM8126
Warning: bad configuration page, trying to continue
Memory policy: ECC disabled, Data cache writeback
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
Kernel command line: mem=128M console=uart,shift,2,io,0xF9830000,38400
Early serial console at I/O port 0xf9830000 (options '38400', shift 2)
console [uart0] enabled
PID hash table entries: 512 (order: 9, 2048 bytes)
IC: GM8128 MP
GM Clock: CPU = 540 MHz, AHBCLK = 270 MHz, PLL1CLK = 800 MHz, PLL2CLK = 540 MHz
console handover: boot [uart0] -> real [ttyS0]
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 128MB = 128MB total
Memory: 123064KB available (3398K code, 215K data, 3060K init)
Calibrating delay loop... 534.52 BogoMIPS (lpj=267264)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
net_namespace: 636 bytes
Fmem: node 0 is online, alloc pages = 20480(active pages = 32768)
high_memory:0xc8000000, VM Start:0xc8800000, End:0xe0000000
NET: Registered protocol family 16
PMU: Mapped at 0xf9900000
pmu_get_cpu_clk:221 <fclk_mode=2, pll2_out=540000000>
Attach GM AHB-DMA Driver
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
NET: Registered protocol family 1
Video Timer(timer3) Max 31000ms in 0xf9720840 HZ.
# of pwm can be used = 8
MPFX:
Register PWM character driver success!

JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
msgmni has been set to 240
alg: No test for stdrng (krng)
io scheduler noop registered
io scheduler anticipatory registered (default)
io scheduler deadline registered
io scheduler cfq registered
probe ftgpio010.0 OK!!, at c8814000
probe ftgpio010.1 OK!!, at c8818000
probe ftgpio010.2 OK!!, at c881c000
Serial: 8250/16550 driver 4 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xf9830000 (irq = 9) is a 16550A
serial8250: ttyS1 at I/O 0xf9840000 (irq = 10) is a 16550A
serial8250: ttyS2 at I/O 0xf9850000 (irq = 20) is a 16550A
serial8250: ttyS3 at I/O 0xf9880000 (irq = 21) is a 16550A
brd: module loaded
PPP generic driver version 2.4.2
NET: Registered protocol family 24
Linux video capture interface: v2.00
Driver 'sd' needs updating - please use bus_type methods
Driver 'sr' needs updating - please use bus_type methods
Can't identify flash type, use default setting
Creating 6 MTD partitions on "wb_spi_flash":
0x00080000-0x0051f000 : "Linux Section"
0x00520000-0x00800000 : "User Section"
0x00001000-0x00010000 : "Loader Section"
0x00010000-0x00060000 : "BurnIn Section"
0x00060000-0x00080000 : "UBoot Section"
0x006e0000-0x00700000 : "CFG Section"
Probe FTSSP010 SPI Controller at 0x98200000 (irq 6)
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
AMBA bus_register ok
Enter Device A
temp = 340
Drive Vbus because of ID pin shows Device A
otg2xx device_register ok
AMBA_bus_match(...) Found Driver FOTG2XX_DRV
AMBA_bus_match(...) Found Driver FOTG2XX_DRV
FOTG2XX_DRV fotg2xx_dev: GM  USB2.0 Host Controller
FOTG2XX_DRV fotg2xx_dev: new USB bus registered, assigned bus number 1
FOTG2XX_DRV fotg2xx_dev: irq 4, io mem 0xf9220000
FOTG2XX_DRV fotg2xx_dev: USB 2.0 started, EHCI 1.00
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
FOTG200 Controller Initialization
fotg200 int enable = 1f30
mice: PS/2 mouse device common for all mice
i2c /dev entries driver
ftiic010 ftiic010.0: irq 18, mapped at c887e000
Advanced Linux Sound Architecture Driver Version 1.0.18rc3.
ALSA device list:
  No soundcards found.
TCP cubic registered
NET: Registered protocol family 17
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
GPIO-9 autorequested

IC Card Registered.
initlializing alert gpio ...
gm8126 alarm in/out device driver initialized.
Freeing init memory: 3060K
usb 1-1: new high speed USB device using FOTG2XX_DRV and address 2
port status 10009
2nd port status 10009
***************************************
Busybox starts to run
***************************************
Mounting root fs rw ...
Mounting other filesystems ...
Setting hostname ...
Mounting user's MTD partion
Has JFFS2 on mtdblock1
FTMAC with FARADAY Internal PHY support
FTMAC110 Driver (Linux 2.6) 01/10/11 - (C) 2011 GM Corp.
reset Faraday Internal PHY.
mmc0: SDHCI controller on <NULL> [ftsdc010] using DMA

Frammap: 1536 pages in DDR0 are freed.
Frammap: DDR0: memory base=0x1800000, memory size=0x4a00000, alignment=256K
Frammap: version 0.28.3, 1 DDR is managed.

VideoGraph v0.44 You may use
   #echo 11 > /proc/videograph/dbg
to enable debug mode (0xbf04a50c)
Debug message at 0xc88d2000 start pointer 0xbf06a5f0 size 0x124f80
Insert dvr_common driver done.
Platform GM812600
    enc_in0=(buf: 1843200,4,0)
    enc_in0_d=(buf: 1843200,4,1)
    enc_out0=(res: 1280,720)
    enc_out0=(buf: 783360,4,0)
    ssenc_out0=(buf: 261120,1,0)
    enc_in1=(buf: 1843200,4,0)
    enc_in1_d=(buf: 1843200,4,1)
    enc_out1=(res: 1280,720)
    enc_out1=(buf: 783360,4,0)
    scl0_out1=(res: 848,480)
    scl0_out1=(buf: 829940,4,0)
    ssenc_out1=(buf: 783360,1,0)
    enc_in2=(buf: 1555200,4,0)
    enc_in2_d=(buf: 1555200,4,1)
    enc_out2=(res: 1080,720)
    enc_out2=(buf: 660960,4,0)
    ssenc_out2=(buf: 65280,1,0)
    enc_in3=(buf: 35840,4,0)
    enc_in3_d=(buf: 35840,4,1)
    enc_out3=(res: 160,112)
    enc_out3=(buf: 20000,4,0)
    ssenc_out3=(buf: 15232,1,0)
    sub1_enc_out3=(res: 160,112)
    sub1_enc_out3=(buf: 20000,3,0)
    sub2_enc_out3=(res: 160,112)
    sub2_enc_out3=(buf: 20000,3,0)
ISP v2.05, built @ May  7 2012 15:48:47
set cmos clk out 24545454 Hz
i2c-adapter i2c-0: NAK!
i2c-adapter i2c-0: I2C TX data 0x12 timeout!
sensor_i2c_transfer fail: i2c_transfer not OK
sen_ov9710(init): OV9710 init fail!!
insmod: cannot insert '/lib/modules/fisp_ov9710.ko': No such device
fcap: V0.3.13
vcap_dev:
  • :bAlbum_bug=0, bCrop_bug=1, bCU_bug=0

                LL_BusDeadlock_bug=0, bSupportSplitOSDDispRamWritePort=1

fcap:
  • : Link List mode!

fcap: fosd00: minor=54
fcap: fosd02: minor=53
fcap: fosd01: minor=52
fcap: fosd03: minor=51
vcap_dev: [1]:bAlbum_bug=0, bCrop_bug=1, bCU_bug=0
                LL_BusDeadlock_bug=0, bSupportSplitOSDDispRamWritePort=1

fcap: [1]: Link List mode!
fcap: fosd10: minor=50
fcap: fosd12: minor=49
fcap: fosd11: minor=48
fcap: fosd13: minor=47
load CFG: /mnt/mtd/isp_ov9710.cfg
isp_dev(dev_init):
  • Input device does not exist!


isp_drv(isp_drv_init_dev):
  • : initial fail!

Unable to handle kernel NULL pointer dereference at virtual address 00000008
pgd = c6620000
[00000008] *pgd=06618031, *pte=00000000, *ppte=00000000
Internal error: Oops: 17 [#1] PREEMPT
Modules linked in: fcap200_isp(+) fcap1 fcap0 fcap_common fisp_gm_awb fisp_gm_ae fisp0 fisp_common dvr_enc dvr_common videograph frammap ftsdc010 cpe_wdt ftmac100
CPU: 0    Not tainted  (2.6.28 #189)
PC is at isp_dev_set_sensor_size+0x20/0x88 [fisp_common]
LR is at Isp_Set_Size+0x70/0x9c [fisp_common]
pc : [<bf10bc4c>]    lr : [<bf1126b4>]    psr: a0000013
sp : c666fd78  ip : c666fda8  fp : c666fda4
r10: 40025000  r9 : c666e000  r8 : 000002d0
r7 : c6520000  r6 : 00000500  r5 : 00000500  r4 : c666fda8
r3 : 00000000  r2 : 00000500  r1 : c666fda8  r0 : c6520000
Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment kernel
Control: 0000797f  Table: 06620000  DAC: 00000017
Process insmod (pid: 79, stack limit = 0xc666e268)
Stack: (0xc666fd78 to 0xc6670000)
fd60:                                                       c6520000 c666fd94
fd80: c666fdb4 c666fda0 000002d0 00000500 00000500 c6520000 c666fdd4 c666fda8
fda0: bf1126b4 bf10bc3c 00000500 000002d0 bf10f888 bf1864e0 00000000 bf186388
fdc0: 00000000 bf1863a0 c666fe14 c666fdd8 bf189384 bf112654 00000000 00000001
fde0: 00000000 00000000 c0448f38 c0448c60 c666fe54 bf1863a0 bf189000 00000000
fe00: 00000000 c0308104 c666ff7c c666fe18 c0306a44 bf189010 c666fe88 00000001
fe20: c666fe84 c666fe30 c03aa0c0 c0591608 c7008a00 c666fe40 c666fe6c c075bda0
fe40: c065ce24 40000013 c666fe7c c666fe58 c034f3b4 c034cc70 00000000 80000013
fe60: c666fe84 c666fe70 c03132dc c0313238 c065ce24 c068f000 c666fea4 c666fe88
fe80: c03654a4 c03132d8 00000002 c6589520 00000003 00000001 c666fec4 c666fea8
fea0: c0363058 c0365474 00000000 bf1863a0 c6549660 00000001 c666fed4 c666fec8
fec0: c0363088 c0362fe0 c666ff7c c666fed8 c0343654 c0363084 00000000 c666ff48
fee0: c065cbb0 c0341ae4 c8e286a4 c8e27000 c8e285cd 00000046 c8e286a4 c8e286a4
ff00: c666ff34 c8e28e9c 00000046 c65497a0 c8e28a14 00000015 bf1863a0 bf1863e8
ff20: bf185b38 00000017 00000000 00000000 00000000 00000000 00000000 00000000
ff40: 00000000 bf1863a0 00075008 00000000 000026ac c0308104 c666ff7c c666ff68
ff60: bf1863a0 00075008 00000000 000026ac c666ffa4 c666ff80 c0343920 c0306a00
ff80: 60000010 ffffffff 000026ac 00060850 bea99f4d 00000080 00000000 c666ffa8
ffa0: c0307f80 c0343898 000026ac 00060850 00075038 000026ac 00075008 bea99f4d
ffc0: 000026ac 00060850 bea99f4d 00000080 000000f0 00000000 40025000 00000000
ffe0: bea99cc0 bea99cb0 000128d4 400e9420 60000010 00075038 ffffffff ffffffff
Backtrace:
[<bf10bc2c>] (isp_dev_set_sensor_size+0x0/0x88 [fisp_common]) from [<bf1126b4>] (Isp_Set_Size+0x70/0x9c [fisp_common])
 r7:c6520000 r6:00000500 r5:00000500 r4:000002d0
[<bf112644>] (Isp_Set_Size+0x0/0x9c [fisp_common]) from [<bf189384>] (init_module+0x384/0x45c [fcap200_isp])
 r8:bf1863a0 r7:00000000 r6:bf186388 r5:00000000 r4:bf1864e0
[<bf189000>] (init_module+0x0/0x45c [fcap200_isp]) from [<c0306a44>] (__exception_text_end+0x54/0x17c)
 r8:c0308104 r7:00000000 r6:00000000 r5:bf189000 r4:bf1863a0
[<c03069f0>] (__exception_text_end+0x0/0x17c) from [<c0343920>] (sys_init_module+0x98/0x184)
 r7:000026ac r6:00000000 r5:00075008 r4:bf1863a0
[<c0343888>] (sys_init_module+0x0/0x184) from [<c0307f80>] (ret_fast_syscall+0x0/0x2c)
 r7:00000080 r6:bea99f4d r5:00060850 r4:000026ac
Code: e59f306c e5912000 e7903003 e1a04001 (e5937008)
---[ end trace 0aed37a78ebccb83 ]---
SCL: Version, v1.17
SegmentSCL: div:4
ation fault
FAVC Encoder IRQ mode(29)v4.2.1
FAVC codec Max Resolution is 1280x720, built @ May 15 2012 15:43:33
MCP100 driver with CPU for VG,
GM8126 MPEG4 with CPU for VG, decoder ver: 3.2.2, encoder ver: 3.2.8, built @ May 14 2012 15:30:49
GM8126 MJPEG with CPU for VG, encoder ver: 3.2.5, decoder ver: 3.1.4, built @ May 14 2012 15:30:35

FTDI210 registers 32 entities to video graph!
FTDI210 Driver v1.4 (1 engine(s))
ft-32ssp: common[ver:0.3.4] INIT OK!
card->cardno = 2
card->pbase = 98a00000
card->vbase = c8efc000
card->irq = 11
my_card->capture.dma_ch = 4
my_card->playback.dma_ch = 5
AHB DMA Interrupt Mode
AHB DMA Interrupt Mode
ft-32ssp: SoundCard(2) attached OK (c14239d0)
I2S probe ok in Slave mode.
ftrtc011_init()
ftrtc011 ftrtc011: rtc core: registered ftrtc011 as rtc0
rtusb init --->
usbcore: registered new interface driver rt2870
usb 1-1: configuration #1 chosen from 1 choice


=== pAd = c9202000, size = 502944 ===

<-- RTMPAllocAdapterBlock, Status=0
ADDR: 00:84:14:81:26:00
ftmac110_link_change:2113 <SPEED100>
ftmac110_link_change:2127 <FULL>
/mnt/mtd/boot.sh: line 51: can't create /proc/isp0/ae/ev_mode: nonexistent directory
mke2fs 1.41.12 (17-May-2010)
ext2fs_check_if_mount: Can't check if filesystem is mounted due to missing mtab file while determining whether /dev/ram0 is mounted.
Filesystem label=
OS type: Linux
Block size=1024 (log=0)
Fragment size=1024 (log=0)
Stride=0 blocks, Stripe width=0 blocks
1024 inodes, 4096 blocks
204 blocks (4.98%) reserved for the super user
First data block=1
Maximum filesystem blocks=4194304
1 block group
8192 blocks per group, 8192 fragments per group
1024 inodes per group

Writing inode tables: done
Writing superblocks and filesystem accounting information: done

This filesystem will be automatically checked every 35 mounts or
180 days, whichever comes first.  Use tune2fs -c or -i to override.
WDT base virtual address = c8fd4000
*** TAS-Tech IPCAM/DVS
*** Version: 1.2.0.3
*** Release date: 2012-12-21 15:02:04
esam auth ok.
Unsupported stop bits
CTP Server Started at  9999
killall: udhcpc: no process killed
<-- RTMPAllocTxRxRingMemory, Status=0
-->RTUSBVenderReset
<--RTUSBVenderReset
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
1. Phy Mode = 5
2. Phy Mode = 5
NVM is Efuse and its size =2d[2d0-2fc]
phy mode> Error! The chip does not support 5G band 5!
RTMPSetPhyMode: channel is out of range, use first channel=1
3. Phy Mode = 9
MCS Set = ff 00 00 00 01
<==== rt28xx_init, Status=0
0x1300 = 00064300
ip of ra0= 6301A8C0
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 ra0
0.0.0.0         192.168.1.254   0.0.0.0         UG    0      0        0 ra0
IOTC version: 1070300, AVApi version: 1020800
All ervices started.
ntpclient: cann't resolve host time.nist.gov

Pages: [1]