S5IS Blinking for Beginners? - Firmware Dumping - CHDK Forum
« previous next »
Pages: [1] 2   Go Down

S5IS Blinking for Beginners?

  • 13 Replies
  • 12680 Views
*

Offline tommi2water

  • ***
  • 157
  • IXUS 220 HS Firmware: 1.00c
S5IS Blinking for Beginners?
« on: 04 / January / 2008, 06:30:59 »
Advertisements

Moved from Thread: "DryOS - some success"
Quote from: tommi2water on 03 / January / 2008, 14:29:00
Hi,

I'm new to this forum. I have a S5 and I am trying to dump its firmware, too. The version is also 1.01b.

I have a bootable SD-Card and tried to let some LED blink. But Camera only hangs. Ok, booting seems to work. ;-)

In blinker source code I only changed the following in main.c:

#define LED_AF 0xc02200E0
#define LED_PR 0xc02200D4

Do I have to adjust something else?

Dataghost, maybe you could provide your blinker source code that I can see, what I am doing wrong?

Thanks in advance and best regards,
tommi


I still don't have any success: S5 Camera only hangs but no LED blinking at all.

I tried the source code from here:
http://forums.dpreview.com/forums/read.asp?forum=1010&message=24988142

Can someone have a short look at sources and make file?
http://www.zshare.net/download/6176478fda614b/

Maybe I am doing only a very small mistake!? ;-)

The 'DISKBOOT.BIN' file has to be only a copy of 'PS.FIR' or shall it be a copy of 'main'?

Is the start adress 1900 in Make.bat correct for S5IS?

Thanks and best regards!

Logged
*

Offline jeff666

  • ****
  • 181
  • A720IS
Re: S5IS Blinking for Beginners?
« Reply #1 on: 04 / January / 2008, 06:46:10 »
Quote from: tommi2water on 04 / January / 2008, 06:30:59
Maybe I am doing only a very small mistake!? ;-)

Well, first of all. The program you are using is used to find out the addresses of the LEDs (or at least to get a rough idea about them). But for the S5 they have already been found. See: http://chdk.wikia.com/wiki/S5IS

For DryOS-cams you don't need pakwif anymore. It was used to generate 'this-is-a-valid-firmware-update'-signature for VxWorks cams and this method doesn't work with DryOS-Cams anymore.

Replace
  zero | dd bs=1k count=100 >>main
by
  zero | dd bs=1k count=100 >> diskboot.bin

and remove "pakwif ..." and "cp ps.fir..."

Cheers.
Logged
*

Offline tommi2water

  • ***
  • 157
  • IXUS 220 HS Firmware: 1.00c
Re: S5IS Blinking for Beginners?
« Reply #2 on: 04 / January / 2008, 08:37:36 »
Thanks for the comments, Jeff!

Now it's working fine.

I tried the "search-for-leds"-code because I wanted to see more than one light burning. ;-)

Now I have the blinker code working on my S5IS.

Any other S5 user can get it from here (src + bin):
http://www.zshare.net/download/6179497d393ec9/

Logged
*

Offline intrinsic

  • *
  • 29
  • S5IS
Re: S5IS Blinking for Beginners?
« Reply #3 on: 04 / January / 2008, 21:28:07 »
Quote from: tommi2water on 04 / January / 2008, 08:37:36
Any other S5 user can get it from here (src + bin):
http://www.zshare.net/download/6179497d393ec9/

Bingo, thanks for that, I'll rig up my photo transistor and should have a 1.01B dump in a few hours.
Logged
*

Offline intrinsic

  • *
  • 29
  • S5IS
Re: S5IS Blinking for Beginners?
« Reply #4 on: 05 / January / 2008, 01:38:19 »
Quote from: tommi2water on 04 / January / 2008, 08:37:36
Any other S5 user can get it from here (src + bin):
http://www.zshare.net/download/6179497d393ec9/

Just getting to do the dump now.

Your sources need to be modified, you're currently dumping from 0xffc00000, the firmware in the S/SD/G series cameras starts at 0xff81000 (according to the wiki) http://chdk.wikia.com/wiki/Loading_dump_to_IDA.
Logged
*

Offline DataGhost

  • ****
  • 314
  • EOS 40D, S5IS
    • DataGhost.com
Re: S5IS Blinking for Beginners?
« Reply #5 on: 05 / January / 2008, 03:32:51 »
With my crappy diode, I managed to dump the firmware anyway. I had to write my own tools for the job because of some strange interference, but it all dumped correctly at the first attempt (though not in one part, the recording was cut off after 2GB so I needed another hour (1,5MB firmware)). It all fit together nicely.

It can be downloaded from http://stack.dataghost.com/s5is-1.01b.rar (md5: 63f211fe670b185e48b3062aefd789ca).
Logged
*

Offline intrinsic

  • *
  • 29
  • S5IS
Re: S5IS Blinking for Beginners?
« Reply #6 on: 05 / January / 2008, 05:59:46 »
Quote from: DataGhost on 05 / January / 2008, 03:32:51
With my crappy diode, I managed to dump the firmware anyway. I had to write my own tools for the job because of some strange interference, but it all dumped correctly at the first attempt (though not in one part, the recording was cut off after 2GB so I needed another hour (1,5MB firmware)). It all fit together nicely.

Cool, I'm having some issues getting adc to process my data (I suspect it's a threshold issue related to the low amplitude of the input (see below)) so this'll save burning time to figure that out.

What diode did you use? I used a BPV11 Phototransistor (~0.65 @ 700nm) connected directly across the mic terminals (the schematic in the blinker.rar file is wrong) of a Creative SB-0270 USB Sound card , got a clean signal out (if low amplitude, but at ~1.2V with no external bias I expected as much)

>2GB, that's huge. mine only came to ~380MB (96kHz 8-bit Mono via Cool Edit Pro (What Adobe bought and turned into Audition)) and took a bit over an hour to dump.
Logged
*

Offline DataGhost

  • ****
  • 314
  • EOS 40D, S5IS
    • DataGhost.com
Re: S5IS Blinking for Beginners?
« Reply #7 on: 05 / January / 2008, 08:29:17 »
I used the BPW34, I wanted to dump via the serial port :) turned out that it wasn't sensitive enough for that, it didn't register anything. I ordered a BPW21 which should arrive tuesday and I got quite bored yesterday. I decided to desolder it (I wasn't going to use it anyway) and while doing that I saw a pair of old, blown iPod earbuds, so I cut them apart. I put the diode across the mic terminals and I got some nice output :) It wasn't anything compatible with adc, though, as you can see here, so I rewrote that (and dec also, and I rewrote the camera-blinker while I was at it).
The reason that I exceeded 2GB was that my dump was doing a steady 400 bytes per second, so I was looking at roughly 6-7 hours. After about 5 and something, it stopped recording, I processed whatever I had by adc and dec, then dumped the rest from where it stopped and processed that too, giving me this nice file.

Anyway, you mentioned problems with 0xFF810000 on the wiki, what problems exactly? My firmware dump loads at 0xFF810000, generating proper code. My camera also reboots when I branch to that address, so I don't see where you're getting 0xFF800000 from. I think it'll only cause mixed-up code later on in the disassembly.
Logged
*

Offline mlaprise

  • *
  • 23
Re: S5IS Blinking for Beginners?
« Reply #8 on: 06 / January / 2008, 14:34:11 »
Hi,

I'm currently trying to build the tommy2water's S5_Blinker on linux and I have the following error:
/usr/local/lib/gcc/arm-elf/3.4.6/../../../../arm-elf/bin/ld: cannot find -lc

I need to build the glibc library for arm-elf. Someone can tell me witch version use and how to make a arm build ?

Logged
*

Offline GrAnd

  • ****
  • 916
  • [A610, S3IS]
    • CHDK
Re: S5IS Blinking for Beginners?
« Reply #9 on: 06 / January / 2008, 14:50:36 »
Quote from: DataGhost on 05 / January / 2008, 08:29:17
I put the diode across the mic terminals and I got some nice output :) It wasn't anything compatible with adc, though, as you can see here...
The signal on the picture looks like it has main power (50/60Hz) mixed. It can be non-screened cable or ambient light.
Logged
CHDK Developer.
Pages: [1] 2   Go Up
« previous next »
 

Related Topics


SimplePortal © 2008-2014, SimplePortal