Ricoh GR3(x) firmware reversing / hacking effort - Non-CANON cameras development - CHDK Forum supplierdeeply

Ricoh GR3(x) firmware reversing / hacking effort

  • 2 Replies
Ricoh GR3(x) firmware reversing / hacking effort
« on: 26 / June / 2023, 13:09:01 »
Hey CHDK forum Community,
I wanted to share an exciting project I've been working on related to the Ricoh GRIII(x) camera. The goal is to find a way to run custom applications on the camera without altering its firmware, just like MagicLantern does for other models.
The camera runs a customized Poky 2.2 on Linux kernel v4.4 and has various system daemons controlling its functions, along with a few custom libraries.
I've been diving deep into this project, analyzing the firmware image, building the kernel, and creating a Docker container for easy system and application testing. Started reverse engineering the webapid, sysmgrd, camctrld, and custom libraries is also underway.
Moving forward, I'll be focusing on getting the system up and running with mocked components, exploring the firmware update process, and investigating display output. I'm also on the lookout for potential vulnerabilities in order to inject own code or gain remote shell access.

To make my work more streamlined, I've set up dedicated Docker containers for kernel building, mocks, and running the firmware image rootfs.
I wanted to share this project with you all, as your insights and contributions would be valuable.
Looking forward to your thoughts and involvement.

Here's a link to the repository:


Re: Ricoh GR3(x) firmware reversing / hacking effort
« Reply #1 on: 08 / April / 2024, 20:45:42 »
Hello, Harry.
jonr, thank you for inviting me. Hi all.

I'm doing reverse engineering on a Pentax K-3M3.
In particular, I focus on RTOS.
It is very similar to the Richo GR3.
I think there is common information, so I would like to share it.

If you have any questions about RTOS, please let me know. I will answer to the best of my knowledge.

Re: Ricoh GR3(x) firmware reversing / hacking effort
« Reply #2 on: 09 / April / 2024, 04:06:22 »
The RTOS contains several Shell Commands.
I'd like to know how to execute this.
Is it going to run from camctld on Linux?


Related Topics

SimplePortal 2.3.6 © 2008-2014, SimplePortal