CHDK Forum
CHDK Development => General Discussion and Assistance => Topic started by: srunyon1 on 04 / April / 2009, 00:33:36
-
I have a SD780 and really need to be able to use Usb remote.. is there anyone working on this... I'd love to help. I've been trying to get a Dump of the firmware but not much luck. It wont start with NewDryOS, starts with DryOS and VXWorks but goes right to Locked card..Any Help would be great......
-
I found out to get the firmware version on this camera you put the ver.req on the disk then you press the func/set button then the Trash button. at the same time. not the DISP Like other Cams..
my firmware is
GM1.00c
There is also an easter egg there to show the clock as rotating Cubes.. i think that it trash then set/func..
I keep getting it but not sure how...
-
looks like you just hold the func key down
-
Another cam dumped - nice !
If you can, please upload the dump somewhere and post a link to it in this thread:
http://chdk.setepontos.com/index.php/topic,288.0.html (http://chdk.setepontos.com/index.php/topic,288.0.html)
wim
-
no you miss understood I've tried and tried with no luck.. I need to get a smaller card and try.. but still trying
-
Ok, sorry ...
Just keep in mind: you said NewDryOS doesn't start, that's a good sign. It *should* appear to be dead - just wait 30 seconds, and remove first battery, then card. Then check the empty.dum
(if you're using CardTricks just press 'Strings' to do that)
[ DryOS and VxWorks versions will show 'card locked': they will cause the cam to start
normally because the 'DISKBOOT.BIN' is not encoded and therefor not recognised as valid ]
wim
-
Tried using the universal dumper in cardtricks 1.44.
I have a 16GB card so I formatted it with two partitions:
FAT16 (16 MB)
FAT32 (rest of card)
Prepared the card by loading the NewDryOS universal dumper onto the FAT16 partition.
The camera "responds" by not starting normally when the write protected card is inserted, so apparently it's reading BOOTDISK.BIN. :)
So waited the 30 or so seconds.
But... :( Nothing is dumped to empty.dum. Repeated several times.
Therefore I hash checked the first 24MB of the card (thus encompassing the whole FAT16 partition) before and after booting - nothing is written to it. :-[
Any ideas how to proceed? Guess some changes are needed in udumper source.
- Louis
-
Tried using the universal dumper in cardtricks 1.44.
I have a 16GB card so I formatted it with two partitions:
FAT16 (16 MB)
FAT32 (rest of card)
Prepared the card by loading the NewDryOS universal dumper onto the FAT16 partition.
The camera "responds" by not starting normally when the write protected card is inserted, so apparently it's reading BOOTDISK.BIN. :)
So waited the 30 or so seconds.
But... :( Nothing is dumped to empty.dum. Repeated several times.
Therefore I hash checked the first 24MB of the card (thus encompassing the whole FAT16 partition) before and after booting - nothing is written to it. :-[
Any ideas how to proceed? Guess some changes are needed in udumper source.
- Louis
I too tried to dump the firmware with all the different diskboots that Wim provided but no luck :-[
Frans
-
I picked up one of these (version 1.00C) yesterday and have experienced pretty much the same thing. No firmware dump yet...
-
I am also trying to dump this firmware.
I've got an SD780, a 256 MB SD card and a card reader.
Cardtricks 144 does not seem to help. :-(
A question to the pros: The SD780 switches off if you open the lid above the SD card and the battery. Did previous models do that, too? If not, could that be a problem for dumping the firmware?
I ask this because you are supposed to remove the battery before the SD card but if you open the lid the cam switches off. I don't know if this is a problem and I don't know if this happens with NewDryOS where the camera seems dead.
-
Ok, so I set up a compiling environment and tried to run a small program to find the LEDs on the SD780 / IXUS 100.
I know some C but problem is I'm not even sure I'm compiling and post-processing it right.
My steps looks like this:
arm-elf-gcc -fno-builtin -O2 -Ilib -nostdinc -c entry.s
arm-elf-gcc -fno-builtin -O1 -Ilib -c main.c
arm-elf-gcc -fno-builtin -O2 -nostdlib -lgcc -o main.bin entry.o main.o
arm-elf-objcopy -O binary main.bin $(BIN)DISKBOOT1.BIN
arm-elf-objdump -d main.bin > main.dump
# encode binary
dancingbits $(BIN)DISKBOOT1.BIN $(BIN)DISKBOOT.BIN
rm $(BIN)DISKBOOT1.BINIt seems that when I don't encode the binary the camera starts normally with "card locked", other wise it 'responds' by not starting, and no LEDs flashing :-[
So you are my compiling options right??
Files used are below:
entry.s .text
.org 0
.globl _start
_start:
B mainmain.c
#define DEL 50
long* led;
void on(void){
*led=0x46;
}
void off(void){
*led=0x44;
}
void delay(int i){
while(--i) {
asm("nop\n");
asm("nop\n");
}
}
int i;
char *p;
int main(){
long ciclo;
long start=0xC022002F;
long end=0xC02201FF;
while(1) {
for (ciclo=start; ciclo<=end; ciclo+=1)
{
led=(long*)ciclo;
on();
delay(DEL);
}
delay(5000);
for (ciclo=start; ciclo<=end; ciclo+=1)
{
led=(long*)ciclo;
off();
delay(DEL);
}
delay(5000);
}
return 0;
}I can compile CHDK without errors, so I think my environment works.
Please help, so we can bring this baby to life :)
-
It doesn't look to me like you are are specifying the load address anywhere.
I'd suggest just re-cycling a CHDK cameras loader. Essentially, just stick your code in loader/<platform>/main.c my_restart() of a random dryos cam that uses encoded diskboot. The following code will be bogus, but that doesn't matter because you won't get there.
-
Just ordered the IXUS100IS (European version of the SD780) and was quite surprised to hear that there was custom firmware out there for the IXUS range! It doesn't have RAW output or even SuperFine JPEG and only a small amount of manual control, so I'm quite looking forward to this custom firmware. :)
If there is something I can help with using the european version, feel free to poke me on the IRC channel.
first post!
-
http://chdk.setepontos.com/index.php/topic,3347.msg34355.html#msg34355 (http://chdk.setepontos.com/index.php/topic,3347.msg34355.html#msg34355)
may be of interest for dumping.
-
Hi everyone (first post)
I also have this camera (IXUS 100 IS) and am willing to help. As for now, I am not able to dump firmware. Will keep trying.
-
I tried dumping my SD780 using Cardtricks 144, trying NewDryOS, DryOS, and VxWorks. Each one said "card locked" when tried several times in the camera, removing the battery for different amounts of time.
As another user said, when you open the battery/card cover, the camera turns off (hidden switch somewhere).
Also, when I format the card and install NewDryOS using Cardtricks 144, I don't see anything on the card using windows explorer. I'm not sure if its installed on a hidden partition, but I wanted to point that out. Cardtricks says it was successful in both formatting and copying the different operating systems onto the card.
I used a Lexar 128mb card formatted to fat16, and a USB SD card reader. I should also note that the "make bootable" button was always grayed out, even after installing the different OS's. Picture of cardtricks after NewDryOS was installed - http://i44.tinypic.com/15dlv6h.png (http://i44.tinypic.com/15dlv6h.png)
Has anyone else had any luck, or know anything else I can try?
-
It's already been verified that udumper does not work on this camera. There's no need to keep trying. Getting a dump will require a developer to have the camera, or create a new version of udumper which works on these new cameras.
Without a developer who has the camera to do the port, there isn't any hurry to get the dump anyway.
-
Bah, so I shouldn't expect to unlock my ixus anytime soon then? :(
-
Bah, so I shouldn't expect to unlock my ixus anytime soon then? :(
Correct, see http://chdk.wikia.com/wiki/FAQ#Q._My_camera_isn.27t_ported_yet._Is_a_port_planned_.3F_When_will_it_be_ready_.3F_How_can_I_help_.3F (http://chdk.wikia.com/wiki/FAQ#Q._My_camera_isn.27t_ported_yet._Is_a_port_planned_.3F_When_will_it_be_ready_.3F_How_can_I_help_.3F)
-
I just wanted to make my contribuition to this thread. Some people say there is a hidden switch that turns the camera off when the card/battery cover is opened.
It's actually very easily accessible.
(https://chdk.setepontos.com/proxy.php?request=http%3A%2F%2Fimg407.imageshack.us%2Fimg407%2F3404%2Fswitch.th.jpg&hash=3cd799e485ecd7b3aebfef59dde22e8c) (http://img407.imageshack.us/i/switch.jpg/)
As you can see in the pic above, the circled part of the cover trips a small switch pointed by the arrow. You can use a pencil or anything small enough to push the switch, and turn the camera on with the cover open.
My old SD1000 worked the exact same way, so it should be common to many other models.
-
FYI - I am working on getting this FW dumped but as it will be my first try at CHDK don't expect it too quickly. Obviously from the posts on this subject card tricks 1.44 does not work. (I have also tried).
I am working on finding the LEDs so that I can blink out the firmware but so far have been unable to find a LED.
If anyone has a suggest code to run on this camera please feel free to send to me.
I'll keep everyone updated on any success.
Harpo
-
Harpo:
The LEDs should be at addresses close to those in other CHDK ports (I'd start with similar ixus). You can usually find these in the wiki page for the each camera.
Of course, until you've found an LED, it's hard to tell if your code is actually loading/running or the camera is just crashing somewhere. On the non-udumper compatible cameras, it appears that diskboot.bin doesn't get loaded correctly. PS.FI2 does load OK, but needs to be encoded correctly. The sx200 thread here http://chdk.setepontos.com/index.php/topic,3347.msg34355.html#msg34355 (http://chdk.setepontos.com/index.php/topic,3347.msg34355.html#msg34355) has some information.
feel free to stop by #CHDK on irc.freenode.net if you want more realtime advice.
-
Is there a thread somewhere that tells me how to make a ps.fi2 file with my compiled diskboot.bin? I find lots of reference to ps.fi2 being a packed version of it and it relating to the ver.req/vers.req but can't find how to make one so it can run my code.
Harpo.
-
Is there a thread somewhere that tells me how to make a ps.fi2 file with my compiled diskboot.bin? I find lots of reference to ps.fi2 being a packed version of it and it relating to the ver.req/vers.req but can't find how to make one so it can run my code.
see fi2 encoder/decoder (http://chdk.setepontos.com/index.php/topic,2995.0.html) ...
-
Ok - I have the ps.fi2 file created and it allows me to select it and start upgrade...black screen after start.
Couple of questions...
1. Does the ps.fi2 file need the 1900 offset in the diskboot.bin?
2. Does the ps.fi2 file need packing to 16k in the diskboot.bin?
3. If the "encryption" is incorrect will it still pass the stage of starting the firmware upgrade? Ie do I know for certain that the encryption is correct by having the black screen?
I am hopeful that it is running but I'm crashing it trying to find LEDs.
Harpo.
-
I suggest building the FI2 file using the normal CHDK build process, as I did in the SX200 thread linked earlier. The binary used to make the FI2 is the same one used to make DISKBOOT.BIN (in older cameras diskboot is just a raw binary, but in newer ones this is encoded with a different encoding than FI2 files)
ISTR the camera will reject incorrectly encoded FI2 files. You can verify this easily by randomly changing your FI2 key and seeing what happens. You also need to use the correct platformid with your FI2.
-
Minor success - PS.FI2 file has yielded first LED
0xC0220128 Right Side Indicator Light (orange=0x46)
See http://chdk.setepontos.com/index.php/topic,3995.msg37547.html#msg37547 (http://chdk.setepontos.com/index.php/topic,3995.msg37547.html#msg37547) for all future updates.
-
Excellent job HarpoMa. I just got the ixus100_sd780 from the trunk and it build successfully. I am trying to build FI2.FIR but can't find the FI2KEY and FI2IV that should be specified in the fi2.inc file under the ixus100_sd7800 directory. I looked in the full firmware for the key-value pair according to this thread (http://chdk.setepontos.com/index.php/topic,2995.0.html (http://chdk.setepontos.com/index.php/topic,2995.0.html)) but i cannot find it. Can someone please hold my hand.