niceboygithub / AqaraCameraHubfw

Aqara Camera Hub G2/G2H and Aqara Hub E1 firmwares
88 stars 24 forks source link

G2H stuck in a loop #10

Closed nedisonn closed 7 months ago

nedisonn commented 2 years ago

I've accidentally overwritten the S90app file with the hostname file. I tried getting access through UART but no luck, I can read the logs but can't write into it. It loads fine until it loads the S90app script and it gets stuck in the loop. Is there a way I can access this file and revert what I did?

rezmus commented 2 years ago

show log.

nedisonn commented 2 years ago

It literally has the normal log, I overwrote the S90app with a code that had a loop, so when it starts that it gets stuck, I would need to find a way to reoverwrite that file but I can't seem to be able to, any ideas?

nedisonn commented 2 years ago

`_[sdmmc0] Card Detect Fail! Bad device mmc 0 get file[kernel2.bin] fail [sdmmc0] Card Detect Fail! Bad device mmc 0 get file[customer.bin] fail [sdmmc_0] Card Detect Fail! Bad device mmc 0 get file[rootfs.bin] fail [NetUpgrade] ts_1st=0x119 No ethernet found. [NetUpgrade] ==== NetLoop(NETUPGRADE) return fail ====! net_upgrade - do net update from the specified file that is in tftpserver

Usage: net_upgrade -

Flash is detected (0x0513, 0xC2, 0x20, 0x19) SF: Detected nor0 with total size 32 MiB SF: 2097152 bytes @ 0x50000 Read: OK

Booting kernel from Legacy Image at 21000000 ...

Image Name: MVX2##I3g2e8b5bfKL_LX318####[BR: Image Type: ARM Linux Kernel Image (lzma compressed) Data Size: 2052192 Bytes = 2 MiB Load Address: 20008000 Entry Point: 20008000 Verifying Checksum ... OK Uncompressing Kernel Image ... [XZ] !!!reserved 0x21000000 length=0x 1000000 for xz!! XZ: uncompressed size=0x415d30, ret=7 OK ERR: Can't find KIMG header and initrd address, 0x00000000 atags:0x20000000

Starting kernel ...

[ 0.000000] Booting Linux on physical CPU 0x0 [ 0.000000] Linux version 3.18.30 (yuanjianjun@compilex64-old-ipg) (gcc versi on 4.8.3 20140401 (prerelease) (crosstool-NG linaro-1.13.1-4.8-2014.04 - Linaro GCC 4.8-2014.04) ) #11 PREEMPT Fri Jun 19 15:50:19 CST 2020 [ 0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=50c53c7d [ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instructio n cache [ 0.000000] early_atags_to_fdt() success [ 0.000000] Machine model: INFINITY3 MSC000A-S04A [ 0.000000] Reserved memory: created CMA memory pool at 0x24000000, size 64 M iB [ 0.000000] Reserved memory: initialized node cma0, compatible id shared-dma- pool [ 0.000000] Memory policy: Data cache writeback [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pag es: 32512 [ 0.000000] Kernel command line: console=ttyS0,115200n8r root=/dev/mtdblock6 rw rootfstype=jffs2 init=/linuxrc isp_flag=0x0 [ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes) [ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) [ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Memory: 59592K/131072K available (2624K kernel code, 247K rwdata, 1208K rodata, 100K init, 170K bss, 71480K reserved) [ 0.000000] Virtual kernel memory layout: [ 0.000000] vector : 0xffff0000 - 0xffff1000 ( 4 kB) [ 0.000000] fixmap : 0xffc00000 - 0xffe00000 (2048 kB) [ 0.000000] vmalloc : 0xc8800000 - 0xff000000 ( 872 MB) [ 0.000000] lowmem : 0xc0000000 - 0xc8000000 ( 128 MB) [ 0.000000] modules : 0xbf800000 - 0xc0000000 ( 8 MB) [ 0.000000] .text : 0xc0008000 - 0xc03c6410 (3834 kB) [ 0.000000] .init : 0xc03c7000 - 0xc03e0000 ( 100 kB) [ 0.000000] .data : 0xc03e0000 - 0xc041dd30 ( 248 kB) [ 0.000000] .bss : 0xc041dd30 - 0xc0448858 ( 171 kB) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] Preemptible hierarchical RCU implementation. [ 0.000000] Dump stacks of tasks blocking RCU-preempt GP. [ 0.000000] NR_IRQS:16 nr_irqs:16 16 [ 0.000000] Find CLK_cpupll_clk, hook ms_cpuclk_ops [ 0.000000] [ms_cpuclk_init] get dvfs gpio vid_1 [ 0.000000] Architected cp15 timer(s) running at 6.00MHz (virt). [ 0.000008] sched_clock: 56 bits at 6MHz, resolution 166ns, wraps every 28633 11527936ns [ 0.000024] Switching to timer-based delay loop, resolution 166ns [ 0.223312] console [ttyS0] enabled [ 0.226797] Calibrating delay loop (skipped), value calculated using timer fr equency.. 12.00 BogoMIPS (lpj=60000) [ 0.237056] pid_max: default: 4096 minimum: 301 [ 0.241685] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.248217] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.255871] CPU: Testing write buffer coherency: ok [ 0.260814] Setting up static identity map for 0x20274d98 - 0x20274dc8 [ 0.272290] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5 [ 0.298639] NET: Registered protocol family 16 [ 0.303635] DMA: preallocated 256 KiB pool for atomic coherent allocations [ 0.310991] [ 0.310991] [ 0.310991] Version : MVX2##I3g2e8b5bfKL_LX318####[BR:new_poplar]#XVM [ 0.310991] [ 0.326138] GPIO: probe end [ 0.335821] usbcore: registered new interface driver usbfs [ 0.341407] usbcore: registered new interface driver hub [ 0.346769] usbcore: registered new device driver usb [ 0.352178] MSYS: INIT DONE. TICK=0x018AA78B [ 0.357416] Advanced Linux Sound Architecture Driver Initialized. [ 0.364690] Switched to clocksource arch_sys_counter [ 0.369590] cfg80211: Calling CRDA to update world regulatory domain [ 0.377044] NET: Registered protocol family 2 [ 0.382126] TCP established hash table entries: 1024 (order: 0, 4096 bytes) [ 0.389012] TCP bind hash table entries: 1024 (order: 2, 20480 bytes) [ 0.395427] TCP: Hash tables configured (established 1024 bind 1024) [ 0.401784] TCP: reno registered [ 0.404980] UDP hash table entries: 128 (order: 0, 6144 bytes) [ 0.410798] UDP-Lite hash table entries: 128 (order: 0, 6144 bytes) [ 0.417279] NET: Registered protocol family 1 [ 0.421816] RPC: Registered named UNIX socket transport module. [ 0.427637] RPC: Registered udp transport module. [ 0.432284] RPC: Registered tcp transport module. [ 0.437000] RPC: Registered tcp NFSv4.1 backchannel transport module. [ 0.443682] Unpacking initramfs... [ 0.446990] Initramfs unpacking failed: junk in compressed archive [ 0.453343] Freeing initrd memory: 128K (c0fe0000 - c1000000) [ 0.459757] futex hash table entries: 16 (order: -4, 448 bytes) [ 0.475431] ntfs: driver 2.1.31 [Flags: R/W]. [ 0.480003] jffs2: version 2.2. © 2001-2006 Red Hat, Inc. [ 0.486065] msgmni has been set to 244 [ 0.491351] io scheduler noop registered [ 0.495228] io scheduler deadline registered (default) [ 0.501087] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 0.507537] Mstar_ehc_init version:20150512 [ 0.511743] Mstar-ehci-2 H.W init [ 0.515066] Titania3_series_start_ehc start [ 0.519125] enable USB function [ 0.522262] [USB] config miu select [1] [ef] [ef] ][ef] [ 0.527516] [USB] enable miu lower bound address subtraction [ 0.534151] [USB] worring.... no platform_data [ 0.538497] hcd->rsrc_start:0xfd286400 [ 0.542175] BC disable [ 0.544614] [USB] soc:Mstar-ehci-2 irq --> 119 [ 0.549092] soc:Mstar-ehci-2 soc:Mstar-ehci-2: EHCI Host Controller [ 0.555370] soc:Mstar-ehci-2 soc:Mstar-ehci-2: new USB bus registered, assign ed bus number 1 [ 0.564006] soc:Mstar-ehci-2 soc:Mstar-ehci-2: irq 119, io mem 0xfd286400 [ 0.584872] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002 [ 0.591514] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber= 1 [ 0.598753] usb usb1: Product: EHCI Host Controller [ 0.603609] usb usb1: Manufacturer: Linux 3.18.30 ehci_hcd [ 0.609105] usb usb1: SerialNumber: mstar [ 0.613617] hub 1-0:1.0: USB hub found [ 0.617267] hub 1-0:1.0: 1 port detected [ 0.621590] Mstar-ehci-1 H.W init [ 0.624780] CHIP_FUNCTION SET. ID=4, param=1 [ 0.629024] Get power-enable-pad from DTS GPIO(81) [ 0.633807] [mstar_usb_vbus_control] Enable USB VBUS GPIO(81) [ 0.639557] Titania3_series_start_ehc start [ 0.643717] enable USB function [ 0.646865] [USB] config miu select [1] [ef] [ef] ][ef] [ 0.652074] [USB] enable miu lower bound address subtraction [ 0.658753] [USB] worring.... no platform_data [ 0.663060] hcd->rsrc_start:0xfd284800 [ 0.666793] BC disable [ 0.669216] [USB] soc:Mstar-ehci-1 irq --> 95 [ 0.673572] soc:Mstar-ehci-1 soc:Mstar-ehci-1: EHCI Host Controller [ 0.679885] soc:Mstar-ehci-1 soc:Mstar-ehci-1: new USB bus registered, assign ed bus number 2 [ 0.688519] soc:Mstar-ehci-1 soc:Mstar-ehci-1: irq 95, io mem 0xfd284800 [ 0.714939] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002 [ 0.721581] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber= 1 [ 0.728822] usb usb2: Product: EHCI Host Controller [ 0.733676] usb usb2: Manufacturer: Linux 3.18.30 ehci_hcd [ 0.739172] usb usb2: SerialNumber: mstar [ 0.743684] hub 2-0:1.0: USB hub found [ 0.747341] hub 2-0:1.0: 1 port detected [ 0.751603] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 0.757695] ohci-platform: OHCI generic platform driver [ 0.763019] i2c /dev entries driver [ 0.766964] logger: created 256K log 'log_main' [ 0.771532] [ms_uart_probe] uart port 0 use MUX_PM_UART [ 0.776650] 1f221000.uart0: ttyS0 at MMIO 0x0 (irq = 98, base_baud = 10750000 ) is a unknown [ 0.785273] [ms_uart_probe] uart port 1 use MUX_UART1 [ 0.790175] 1f221200.uart1: ttyS1 at MMIO 0x0 (irq = 99, base_baud = 10750000 ) is a unknown [ 0.798834] [ms_uart_probe] uart port 2 use MUX_UART0 [ 0.803736] 1f220400.uart2: ttyS2 at MMIO 0x0 (irq = 111, base_baud = 1075000 0) is a unknown [ 0.812516] >> [sdmmc] ms_sdmmc Driver Initializing... [ 0.817730] >> [sdmmc] ms_sdmmc_probe [ 0.924832] >> [sdmmc_0] Int CDZ use Ext GPIO IRQ: (151) [ 0.929990] >> [sdmmc_0] Probe Platform Devices...(Ret:0) [ 0.935528] >> [sdmmc_0] Get CD => (0) [ 0.940657] infinity-audio soc:sound: ASoC: CODEC DAI infinity-codec-dai-main not registered [ 0.950092] platform soc:sound: Driver infinity-audio requests probe deferral [ 0.957694] infinity-audio infinity-codec: ASoC: CODEC DAI infinity-codec-dai -main not registered [ 0.966539] platform infinity-codec: Driver infinity-audio requests probe def erral [ 0.977206] [HVSP]u32Dropmode on/n

[ 0.995033] mload_size = 35040 [ 0.997923] mload_virt_addr = c4090000 [ 1.001666] mload_dma_addr = 0x24090000

[ 1.010680] ShareData_Meminfo phyaddr:0x20e2ef80, viraddr:0xc0e2ef80, len:0x3 8 [ 1.017800] AE Base: virt=0xC40A0000 size=0xB400 [ 1.022382] AWB Base: virt=0xC40AB400 size=0x8700 [ 1.027094] AF Base: virt=0xC40B3B00 size=0xF0 [ 1.031521] HISTO Base: virt=0xC40B3BF0 size=0x2F0 [ 1.036318] MOT Base: virt=0xC40B3EE0 size=0x6E40 [ 1.041008] RGBIR Base: virt=0xC40BAD20 size=0x400 [ 1.046505] [ISP] register driver success [ 1.050521] [CSI] register driver success[ 1.055624] ms_rtc 1f002400.rtc: rtc core: registered 1f002400.rtc as rtc0 [ 1.062403] [ms_rtc_probe]: rtc setup, frequency=12000000 [ 1.068506] [SAR] infinity_sar_probe [ 1.072779] [JPE, JpeProbe] set base=0xfd264000 irq=93, nClockRate=288000000

[ 1.085711] [Ser flash] phys=0x24049000, virt=0xc4049000, bus=0x04049000 [ 1.092297] [FSP] Flash is detected (0x0513, 0xC2, 0x20, 0x19) ver1.1 [ 1.098748] [FSP] 1-1-1 FAST_READ MODE [ 1.102511] mtd .name = NOR_FLASH, .size = 0x02000000 (32MiB) [ 1.102511] .erasesize = 0x00010000 .numeraseregions = 0 [ 1.113623] MXP_PARTS!! [ 1.117748] MXP found at mxp_offset[1]=0x00020000, size=0x1000 [ 1.123731] Creating 7 MTD partitions on "NOR_FLASH": [ 1.128693] 0x000000000000-0x000000050000 : "BOOT" [ 1.134299] 0x000000050000-0x0000002a0000 : "KERNEL" [ 1.139962] 0x0000002a0000-0x0000004f0000 : "KERNEL2" [ 1.145752] 0x0000004f0000-0x000000600000 : "CONFIG" [ 1.151359] 0x000000600000-0x000001000000 : "CUSTOMER" [ 1.157226] 0x000001000000-0x000001050000 : "BOOT2" [ 1.162772] 0x000001050000-0x000002000000 : "ROOTFS" [ 1.168910] [ms_cpufreq_init] cpu current clk=796917760 [ 1.175740] TCP: cubic registered [ 1.179842] NET: Registered protocol family 10 [ 1.185190] sit: IPv6 over IPv4 tunneling driver [ 1.190465] NET: Registered protocol family 17 [ 1.195273] ThumbEE CPU extension supported.

[ 1.210718] infinity-audio soc:sound: infinity-codec-dai-main <-> infinity-cp u-dai mapping ok [ 1.220094] ms_rtc 1f002400.rtc: setting system clock to 1970-01-01 00:00:00 UTC (0) [ 1.239344] ALSA device list: [ 1.242158] #0: infinity_snd_machine [ 3.902030] VFS: Mounted root (jffs2 filesystem) on device 31:6. [ 3.908038] Freeing unused kernel memory: 100K (c03c7000 - c03e0000) mknod: /dev/null: File exists [ 4.526824] init: SERVICE: ueventd [ 4.531348] init: skipping insecure file '/ueventd.rc' [ 4.581747] init: SERVICE: rcs Welcome to Linux.

[ 4.596323] [Mstar GPIO] gpio(101) to irq(155)

[ 5.597213] [Mstar GPIO] gpio(78) to irq(182) [ 5.601558] [gpio] Disable EJ_MODE function [ 5.605763] [Mstar GPIO] gpio(62) to irq(-1) [ 5.610109] [Mstar GPIO] gpio(83) to irq(166) [ 5.614514] [Mstar GPIO] gpio(96) to irq(-1) [ 5.619044] [Mstar GPIO] gpio(97) to irq(-1) [ 5.623377] [Mstar GPIO] gpio(99) to irq(153) [ 5.627881] [Mstar GPIO] gpio(19) to irq(-1) [ 5.632538] [Mstar GPIO] gpio(63) to irq(-1) [ 5.637159] [Mstar GPIO] gpio(18) to irq(-1) [ 5.697685] codec_init[3]... [ 5.822562] exFAT: Version 1.2.9 [ 5.864784] ==20150512==> hub_port_init 1 #0 [ 5.868854] Plug in USB Port1 [ 6.024666] usb 2-1: new high-speed USB device number 2 using soc:Mstar-ehci-1 [ 6.235445] usb 2-1: New USB device found, idVendor=0bda, idProduct=8179 [ 6.241944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6.255751] usbcore: registered new interface driver rtl8188eu [ 6.266793] usb 2-1: Product: 802.11n NIC [ 6.270608] usb 2-1: Manufacturer: Realtek [ 6.287167] bFWReady == _FALSE call reset 8051... 19691231 21:00:05.951 NOTICE hotplug 113: can not find sdcard '/dev/stdin' -> '/proc/self/fd/0'

`

rezmus commented 2 years ago

look at the begining of the log. looks like uboot can recover rootfs from sdcard.

nedisonn commented 2 years ago

How would I do that? :) When I add uboot.bin from this repo to sdcard I get this and it stays like that until a hw reset: -OK offset:00010000 size:7fc8 chks:5551a134 ok

IPL_CUST gbf16da4 MXP found at 0x00020000 decomp_size=0x0003e268

U-Boot 2015.01 (Jun 19 2020 - 15:49:12)

Version: I3g2e8b5bf DEVINFO: NON [WDT] Enalbe WATCHDOG 60s Watchdog enabled I2C: ready DRAM: 64 MiB WARNING: Caches not enabled MMC: MStar SD/MMC: 0 nor_flash_mxp allocated success!! Flash is detected (0x0513, 0xC2, 0x20, 0x19) SF: Detected nor0 with total size 32 MiB MXP found at mxp_offset[1]=0x00020000, size=0x1000 env_offset=0x4F000 env_size=0x1000 Flash is detected (0x0513, 0xC2, 0x20, 0x19) SF: Detected nor0 with total size 32 MiB *** Warning - bad CRC, using default environment

In: serial Out: serial Err: serial gpio[96] is 1 gpio[97] is 0 Net: Net Initialization Skipped No ethernet found. get file[mtd.bin] fail load file[uboot.bin] reading uboot.bin

rezmus commented 2 years ago

ask someone for rootfs.bin dump, put on sdcard, check for errors.

nedisonn commented 2 years ago

Do you know where is the rootfs.bin located? I have another G2H I can try to get this dump... But I can't find the .bin 😄

rezmus commented 2 years ago

download full busybox and put on sdcard

https://busybox.net/downloads/binaries/1.31.0-defconfig-multiarch-musl/busybox-armv7l

/mnt/sdcard/busybox-armv7l dd if=/dev/mtd/mtd6 of=/mnt/sdcard/rootfs.bin
sync

it will dump rootfs from working camera to rootfs.bin on sdcard. try to boot broken camera with this card and check uart log.

nedisonn commented 2 years ago

Thanks! But no luck, it's in the same as before, then it hardware resets....

IPL gd156225 D-06 HW Reset 128MB BIST0_0001-OK offset:00010000 size:7fc8 chks:5551a134 ok

IPL_CUST gbf16da4 MXP found at 0x00020000 decomp_size=0x0003e268

U-Boot 2015.01 (Jun 19 2020 - 15:49:12)

Version: I3g2e8b5bf DEVINFO: NON [WDT] Enalbe WATCHDOG 60s Watchdog enabled I2C: ready DRAM: 64 MiB WARNING: Caches not enabled MMC: MStar SD/MMC: 0 nor_flash_mxp allocated success!! Flash is detected (0x0513, 0xC2, 0x20, 0x19) SF: Detected nor0 with total size 32 MiB MXP found at mxp_offset[1]=0x00020000, size=0x1000 env_offset=0x4F000 env_size=0x1000 Flash is detected (0x0513, 0xC2, 0x20, 0x19) SF: Detected nor0 with total size 32 MiB *** Warning - bad CRC, using default environment

In: serial Out: serial Err: serial gpio[96] is 1 gpio[97] is 0 Net: Net Initialization Skipped No ethernet found. get file[mtd.bin] fail get file[uboot.bin] fail get file[kernel.bin] fail get file[kernel2.bin] fail get file[customer.bin] fail load file[rootfs.bin] reading rootfs.bin

niceboygithub commented 2 years ago

The dumped raw rootfs binary may different from the uboot.bin that uboot flashing.

Currently, I can not find the kernel.bin/rootfs.bin for uboot flashing after I did the google search.

Back to the stuck problem. Your S90app is corrupt. So G2H did not continue to boot up.

There is a high risk way may help to recovery. But I am not recommend to normal user to do it.

  1. Stop uboot to boot before loading kernel. To stop uboot, need to interrupt flash reading.
  2. change bootcfg "init=/linuxrc" to "init=/bin/sh" then continue to boot kernel.
  3. After boot to sh, edit /etc/init.d/S90app

The best solution is calling Aqara Service.

nedisonn commented 2 years ago

I'm not a normal user, I'm just not used to this way of doing it. How exactly would I interrupt the flash reading? Thanks!

niceboygithub commented 2 years ago

You can find the pinout of flash IC and short data pin to ground while booting up kernel.

nedisonn commented 2 years ago

Is there a right moment to do this? I tried and it stops altogether, and it doesn't let me interact with the console also... I tried calling Aqara service and they said there's nothing they can do to help me. :(

almirus commented 1 year ago

i have same problem, same log

redelva commented 6 months ago

any guide for uart of g2h? my g2h stuck at boot, need to stock firmware

almirus commented 6 months ago

@redelva I restored the firmware of the camera using ch341 and a clip, directly flashing the patched image downloaded from the camera. The error was in the configuration.

redelva commented 6 months ago

in my option, restore to stock firmware means camera will start from scratch.

could u offer some picture of connect to camera and commands for ch341?

does it work on mac, no windows available now

almirus commented 6 months ago

@redelva image image

redelva commented 6 months ago

i am a newbie for hardware connection.

Just found some ch341 from ali express, found that it support uart and i2c mode.

for uart mode, it use gnd, tx, rx to connect.

just found one connect point from redline clip on above image.

almirus commented 6 months ago

@redelva then unfortunately, this method is not for you. I couldn't restore the camera via UART. Only flashing modified firmware using a clip.

image

redelva commented 6 months ago

just found ch341 and clip, is it ok to restore stock firmware via uart?

for modified firmware, it can not boot up?

1.Stop uboot to boot before loading kernel. To stop uboot, need to interrupt flash reading. 2.change bootcfg "init=/linuxrc" to "init=/bin/sh" then continue to boot kernel. 3.After boot to sh, edit /etc/init.d/S90app

do u have any idea to do 3 steps? it will be easy for me when change bootcfg, cause i update /etc/init.d/S90app with httpd, it stopped whole boot up

almirus commented 6 months ago

@redelva I couldn't recover the firmware via UART, I didn't use it. I used SPI. The red wire on the clamp should be positioned where I indicated. I had a problem due to incorrect camera configuration, which caused it to go into a bootloop. I connected the clamp, dumped the firmware to the computer, opened the firmware file in a HEX editor, corrected the incorrect configuration (in a text file), and flashed the firmware back using the clamp. This allowed the camera to start up again. I couldn't interrupt the bootloop via UART.

redelva commented 6 months ago

it should be same case for me. what i wanna do is update init script and remove httpd.

which os r u using? hope it is mac 2024年2月26日 +0800 18:05 almirus @.***>,写道:

@redelva I couldn't recover the firmware via UART, I didn't use it. I used SPI. The red wire on the clamp should be positioned where I indicated. I had a problem due to incorrect camera configuration, which caused it to go into a bootloop. I connected the clamp, dumped the firmware to the computer, opened the firmware file in a HEX editor, corrected the incorrect configuration (in a text file), and flashed the firmware back using the clamp. This allowed the camera to start up again. I couldn't interrupt the bootloop via UART. — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you were mentioned.Message ID: @.***>

almirus commented 6 months ago

@redelva win11 I believe the operating system won't be an issue, as there are tools available for both MAC and Windows. for example https://github.com/McMCCRU/SNANDer/tree/main/MacOSX

redelva commented 6 months ago

any hex editor recommend?

no idea about update conf for binary dumped. 2024年2月26日 +0800 18:14 almirus @.***>,写道:

@redelva win11 I believe the operating system won't be an issue, as there are tools available for both MAC and Windows. for example https://github.com/McMCCRU/SNANDer/tree/main/MacOSX — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you were mentioned.Message ID: @.***>