Камера Hi 3518C+IM238 помогите восстановить прошивку плиз!

[kROOT]

при таких экспериментах надо предварительно прошивку программатором снимать
где RX TX можно найти методом тыка. подключаешь, смотришь с терминале, если пошли символы, значит это RX

[sergvl]

при таких экспериментах надо предварительно прошивку программатором снимать
где RX TX можно найти методом тыка. подключаешь, смотришь с терминале, если пошли символы, значит это RX

А можно и светодиодом на минус, если моргает значит ТХ.

[kROOT]

моргать может и на других контактах

[kankan]

Спасибо всем, форум очень ценный с UART разобрался, TX нашёл осциллографом, RX методом тыка.
Но есть несколько но...
У меня есть родная прошивка для шитья её через WEB, её можно использовать для прошивки через tftp или иначе?
Если есть идеи, подкиньте пожалуйста. Хотя бы намекните

[iTuneDVR]

Спасибо всем, форум очень ценный с UART разобрался, TX нашёл осциллографом, RX методом тыка.
Но есть несколько но...
У меня есть родная прошивка для шитья её через WEB, её можно использовать для прошивки через tftp или иначе?
Если есть идеи, подкиньте пожалуйста. Хотя бы намекните

Так а остальным схему нарисовать найденных пинов?
Что за но?
Прошивку в студию!
Да и содержимое u-boot

Код: Выделить всё

help

Код: Выделить всё

prinetnv

пробуй саму tffp, что она просит именно, а там может быть стандартные блоки с препленными заголовками.

[kankan]

Всё в процессе! Разобрался, я вносил изменения в rootfs раздел (общая причина неисправности), поэтому вырезал из родной рабочей прошивки раздел rootfs и через uart по tftp залил его в flash. Камера запускается, но web-ки пока нет, видимо раздел с настройками тоже побит, пока думаю что дальше делать завтра попробую через ODM. После праздников всё обязательно выложу, постараюсь описать что к чему.

[Dim32]

Всем привет!
Похоже у меня схожая проблема, работала камера никому не мешала, периодически время у неё сбивалось, решил я поднять на ней ntp да заодно и telnet. Нашёл прошивку посвежее залил, всё работает. Далее нашёл софт под Ubuntu раскрыл разжал (unpack) прошивку, поставил в загрузку telnetd в etc/init.d/RcS, назад запаковал (pack)

А подредактировать таким же образом файлик etc/inittab в прошиве рега смогешь?

[kankan]

Всем привет! Появилось немного времени.

Код: Выделить всё

U-Boot 2010.06 (Aug 06 2013 - 11:53:06)

DRAM:  256 MiB
NAND:  Special Nand id table Version 1.35
Nand ID: 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
No NAND device found!!!
0 MiB
Check spi flash controller v350... Found
Spi(cs1) ID: 0xEF 0x40 0x18 0x00 0x00 0x00
Spi(cs1): Block:64KB Chip:16MB Name:"W25Q128B"
In:    serial
Out:   serial
Err:   serial
Hit any key to stop autoboot:  0

Код: Выделить всё

hisilicon # help
?       - alias for 'help'
base    - print or set address offset
bootm   - boot application image from memory
bootp   - boot image via network using BOOTP/TFTP protocol
cmp     - memory compare
cp      - memory copy
crc32   - checksum calculation
ext2load- load binary file from a Ext2 filesystem
ext2ls  - list files in a directory (default /)
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls   - list files in a directory (default /)
getinfo - print hardware information
go      - start application at address 'addr'
help    - print command description/usage
loadb   - load binary file over serial line (kermit mode)
loady   - load binary file over serial line (ymodem mode)
loop    - infinite loop on address range
md      - memory display
mii     - MII utility commands
mm      - memory modify (auto-incrementing address)
mtest   - simple RAM read/write test
mw      - memory write (fill)
nand    - NAND sub-system
nboot   - boot from NAND device
nm      - memory modify (constant address)
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
rarpboot- boot image via network using RARP/TFTP protocol
reset   - Perform RESET of the CPU
saveenv - save environment variables to persistent storage
setenv  - set environment variables
sf      - SPI flash sub-system
tftp    - tftp  - download or upload image via network using TFTP protocol
usb     - USB sub-system
usbboot - boot from USB device
version - print monitor version

Код: Выделить всё

hisilicon # printenv
bootdelay=1
baudrate=115200
ethaddr=00:00:23:34:45:66
bootfile="uImage"
bootcmd=sf probe 0;sf read 0x82000000 0x100000 0x300000;bootm 0x82000000
filesize=7FF000
fileaddr=82000000
gatewayip=192.168.1.1
netmask=255.255.255.0
ipaddr=192.168.1.123
serverip=192.168.1.1
bootargs=mem=74M console=ttyAMA0,115200 root=/dev/mtdblock3 rootfstype=cramfs mtdparts=hi_sfc:1M(boot),3M(kernel),512K(dataBlock),11776K(rootfs)
stdin=serial
stdout=serial
stderr=serial
verify=n
ver=U-Boot 2010.06 (Aug 06 2013 - 11:53:06)

Environment size: 504/262140 bytes

Обратил внимание что настройки IP в boot отличаются от настроек по умолчанию через WEB, решил настроить сетку в boot идентично с WEB.
Для этого изменяем переменные среды окружения, и сохраняем их.

Код: Выделить всё

hisilicon # setenv gatewayip 192.168.0.1
hisilicon # setenv ipaddr 192.168.0.123
hisilicon # setenv serverip 192.168.0.1

setenv переменной gatewayip присваиваем значение 192.168.0.1

Проверяем присвоение

Код: Выделить всё

hisilicon # printenv
bootdelay=1
baudrate=115200
ethaddr=00:00:23:34:45:66
bootfile="uImage"
bootcmd=sf probe 0;sf read 0x82000000 0x100000 0x300000;bootm 0x82000000
filesize=7FF000
fileaddr=82000000
netmask=255.255.255.0
bootargs=mem=74M console=ttyAMA0,115200 root=/dev/mtdblock3 rootfstype=cramfs mtdparts=hi_sfc:1M(boot),3M(kernel),512K(dataBlock),11776K(rootfs)
stdin=serial
stdout=serial
stderr=serial
verify=n
ver=U-Boot 2010.06 (Aug 06 2013 - 11:53:06)
gatewayip=192.168.0.1
ipaddr=192.168.0.123
serverip=192.168.0.1

Environment size: 504/262140 bytes

[kankan]

Теперь сохраняем переменные среды окружения в flash память

Код: Выделить всё

hisilicon # saveenv
Saving Environment to SPI Flash...
Erasing SPI flash, offset 0x00080000 size 256K ...done
Writing to SPI flash, offset 0x00080000 size 256K ...done

Делаем рестарт, проверяем что новые настройки после перезагрузки изменились

Код: Выделить всё

hisilicon # reset
resetting ...


U-Boot 2010.06 (Aug 06 2013 - 11:53:06)

DRAM:  256 MiB
NAND:  Special Nand id table Version 1.35
Nand ID: 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
No NAND device found!!!
0 MiB
Check spi flash controller v350... Found
Spi(cs1) ID: 0xEF 0x40 0x18 0x00 0x00 0x00
Spi(cs1): Block:64KB Chip:16MB Name:"W25Q128B"
In:    serial
Out:   serial
Err:   serial
Hit any key to stop autoboot:  0
hisilicon # printenv
bootdelay=1
baudrate=115200
ethaddr=00:00:23:34:45:66
bootfile="uImage"
bootcmd=sf probe 0;sf read 0x82000000 0x100000 0x300000;bootm 0x82000000
filesize=7FF000
fileaddr=82000000
netmask=255.255.255.0
bootargs=mem=74M console=ttyAMA0,115200 root=/dev/mtdblock3 rootfstype=cramfs mtdparts=hi_sfc:1M(boot),3M(kernel),512K(dataBlock),11776K(rootfs)
gatewayip=192.168.0.1
ipaddr=192.168.0.123
serverip=192.168.0.1
stdin=serial
stdout=serial
stderr=serial
verify=n
ver=U-Boot 2010.06 (Aug 06 2013 - 11:53:06)

Environment size: 504/262140 bytes

Ну что пришло время выгрузить всё информацию из flash памяти
смотрим переменную среды окружения bootcmd

Код: Выделить всё

bootcmd=sf probe 0;sf read 0x82000000 0x100000 0x300000;bootm 0x82000000

sf probe 0 - это активация действий с flash
sf read 0x82000000 0x100000 0x300000 - чтение (копирование) области памяти из flash (ПЗУ) в ОЗУ
где:
0x82000000 - начальный адрес сегмента ОЗУ в который будет выполнено копирование
0x100000 - начальный адрес в ПЗУ с которого начинается копируемый блок
0x300000 - длина копируемого блока
Адрес указан в шестнадцатеричной системе исчисления, для перевода проще пользоваться стандартным калькулятором Windows в режиме "программист"

Забегая вперёд объём flash 16 Мбайт = 0x1000000

Активируем flash, копируем всё содержимое в память.

Код: Выделить всё

hisilicon # sf probe 0
16384 KiB hi_sfc at 0:0 is now current device
hisilicon # sf read 0x82000000 0x0 0x1000000

Посмотрим содержимое ОЗУ командой dm
Начало сегмента

Код: Выделить всё

hisilicon # md 0x82000000
82000000: ea000418 e59ff014 e59ff014 e59ff014    ................
82000010: e59ff014 e59ff014 e59ff014 e59ff014    ................
82000020: 80801340 808013a0 80801400 80801460    @...........`...
82000030: 808014c0 80801520 80801580 12345678    .... .......xV4.
82000040: 20030000 11000000 00000000 000000fd    ... ............
82000050: 20030004 0068306e 00000000 000000fd    ... n0h.........
82000060: 20030008 12000000 00000000 000000fd    ... ............
82000070: 2003000c 007c2063 00000000 000000fd    ... c |.........
82000080: 20030010 11000000 00000000 000000fd    ... ............
82000090: 20030014 00683064 00000000 000000fd    ... d0h.........
820000a0: 20030020 1b000000 00000000 000000fd     .. ............
820000b0: 20030024 007c40e1 00000000 000000fd    $.. .@|.........
820000c0: 20030028 00000010 00000000 000000fd    (.. ............
820000d0: 200300e8 0000000f 00000000 001d0000    ... ............
820000e0: 20030028 00000000 00000000 00002825    (.. ........%(..
820000f0: 20030028 00000000 00000000 00005005    (.. .........P..

Конец сегмента

Код: Выделить всё

hisilicon # md 0x82ffff80
82ffff80: ffffffff ffffffff ffffffff ffffffff    ................
82ffff90: ffffffff ffffffff ffffffff ffffffff    ................
82ffffa0: ffffffff ffffffff ffffffff ffffffff    ................
82ffffb0: ffffffff ffffffff ffffffff ffffffff    ................
82ffffc0: ffffffff ffffffff ffffffff ffffffff    ................
82ffffd0: ffffffff ffffffff ffffffff ffffffff    ................
82ffffe0: ffffffff ffffffff ffffffff ffffffff    ................
82fffff0: ffffffff ffffffff ffffffff ffffffff    ................
83000000: ffffffff fffffffe ffffffff ffffffff    ................
83000010: ffffffff ffffffff ffffffff ffffffff    ................
83000020: ffffffff ffffffff ffffffff ffffffff    ................
83000030: ffffffff ffffffff ffffffff ffffffff    ................
83000040: ffffffff ffffffff ffffffff ffffffff    ................
83000050: ffffffff ffffffff ffffffff ffffffff    ................
83000060: ffffffff ffffffff ffffffff ffffffff    ................
83000070: ffffffff ffffffff ffffffff ffffffff    ................

[kankan]

Выгружаем содержимое по tftp на комп в виде файла

Код: Выделить всё

hisilicon # tftp 0x82000000 flash_good.img 0x1000000
Hisilicon ETH net controler
MAC:   00-00-23-34-45-66
UP_PORT : phy status change : LINK=DOWN : DUPLEX=FULL : SPEED=100M
UP_PORT : phy status change : LINK=UP : DUPLEX=FULL : SPEED=100M
TFTP to server 192.168.0.1; our IP address is 192.168.0.123
Upload Filename 'flash_good.img'.
Upload from address: 0x82000000, 16.000 MB to be send ...
Uploading: #    [ Connected ]
################################        [ 2.888 MB]
################################        [ 5.752 MB]
################################        [ 8.616 MB]
################################        [11.480 MB]
############################%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#     [14.344 MB]
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
         16.000 MB upload ok.

Я использую tftp сервер Tftpd32 Service Edition v4.52 работает стабильно, простой интерфейс, не забывайте запускать от имени администратора.

Полный дамп 16 Мбайт по адресу https://yadi.sk/d/LdyeNhMMpw6cB
Серийный номер я затёр нолями.

В процессе загрузки появляются следующие строки

Код: Выделить всё

...
Chip:16MB 
Name:"W25Q128B"
spi size: 0x16777216
chip num: 1
4 cmdlinepart partitions found on MTD device hi_sfc
Creating 4 MTD partitions on "hi_sfc":
0x000000000000-0x000000100000 : "boot"
0x000000100000-0x000000400000 : "kernel"
0x000000400000-0x000000480000 : "dataBlock"
0x000000480000-0x000001000000 : "rootfs"
...

Здесь указано распределение адресного пространства по разделам.
boot - загрузчик
kernel - ядро системы
dataBlack - конфигурационные данные (серийный номер здесь)
rootfs - это файловая системы, с которой я и хотел поработать. В ней же и хеш рута.

Выгружаем по tftp каждый раздел в виде отдельного файла

Код: Выделить всё

hisilicon # tftp 0x82000000 boot_good.img 0x100000
Hisilicon ETH net controler
miiphy_register: non unique device name '0:1'
miiphy_register: non unique device name '0:2'
MAC:   00-00-23-34-45-66
UP_PORT : phy status change : LINK=DOWN : DUPLEX=FULL : SPEED=100M
UP_PORT : phy status change : LINK=UP : DUPLEX=FULL : SPEED=100M
TFTP to server 192.168.0.1; our IP address is 192.168.0.123
Upload Filename 'boot_good.img'.
Upload from address: 0x82000000, 1.000 MB to be send ...
Uploading: #    [ Connected ]
###########
         1.000 MB upload ok.
Unknown command 'ry 'help'
hisilicon # tftp 0x82100000 kernel_good.img 0x300000
Hisilicon ETH net controler
miiphy_register: non unique device name '0:1'
miiphy_register: non unique device name '0:2'
MAC:   00-00-23-34-45-66
UP_PORT : phy status change : LINK=UP : DUPLEX=FULL : SPEED=100M
TFTP to server 192.168.0.1; our IP address is 192.168.0.123
Upload Filename 'kernel_good.img'.
Upload from address: 0x82100000, 3.000 MB to be send ...
Uploading: #    [ Connected ]
################################        [ 2.888 MB]
#
         3.000 MB upload ok.
hisilicon # tftp 0x82400000 dataBlock_good.img 0x80000
Hisilicon ETH net controler
miiphy_register: non unique device name '0:1'
miiphy_register: non unique device name '0:2'
MAC:   00-00-23-34-45-66
UP_PORT : phy status change : LINK=DOWN : DUPLEX=FULL : SPEED=100M
UP_PORT : phy status change : LINK=UP : DUPLEX=FULL : SPEED=100M
TFTP to server 192.168.0.1; our IP address is 192.168.0.123
Upload Filename 'dataBlock_good.img'.
Upload from address: 0x82400000, 0.512 MB to be send ...
Uploading: #    [ Connected ]
#####
         0.512 MB upload ok.
hisilicon # tftp 0x82480000 rootfs_good.img 0xb80000
Hisilicon ETH net controler
miiphy_register: non unique device name '0:1'
miiphy_register: non unique device name '0:2'
MAC:   00-00-23-34-45-66
UP_PORT : phy status change : LINK=DOWN : DUPLEX=FULL : SPEED=100M
UP_PORT : phy status change : LINK=UP : DUPLEX=FULL : SPEED=100M
TFTP to server 192.168.0.1; our IP address is 192.168.0.123
Upload Filename 'rootfs_good.img'.
Upload from address: 0x82480000, 11.512 MB to be send ...
Uploading: #    [ Connected ]
################################        [ 2.888 MB]
#############################%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#    [ 5.752 MB]
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#       [ 8.616 MB]
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#       [11.480 MB]
%%%%%%%%%%%%%%%%%%%%%%
         11.512 MB upload ok.

[kankan]

Теперь рассмотрим процесс заливки раздела rootfs назад во flash.
Что бы всё прошло успешно ОБЯЗАТЕЛЬНО обеспечить стабильное питание, и не перезагрузить камеру до окончание процесса прошивки. Хотя мы не работаем в boot так что в загрузчик вы всё равно попадёт, и сможете повторить этап снова.
Загружаем образ из tftp

Код: Выделить всё

hisilicon # tftp 0x82000000 rootfs_good.img
Hisilicon ETH net controler
miiphy_register: non unique device name '0:1'
miiphy_register: non unique device name '0:2'
MAC:   00-00-23-34-45-66
UP_PORT : phy status change : LINK=DOWN : DUPLEX=FULL : SPEED=100M
UP_PORT : phy status change : LINK=UP : DUPLEX=FULL : SPEED=100M
TFTP from server 192.168.0.1; our IP address is 192.168.0.123
Download Filename 'rootfs_good.img'.
Download to address: 0x82000000
Downloading: #################################################
done
Bytes transferred = 12058624 (b80000 hex)

Теперь активируем flash и стираем область памяти rootfs (готовим для перезаписи)

Код: Выделить всё

hisilicon # sf probe 0
16384 KiB hi_sfc at 0:0 is now current device
hisilicon # sf erase 0x480000 0xb80000
Erasing at 0x1000000 -- 100% complete.

Перемещаем сегмент rootfs из ОЗУ в Flash

Код: Выделить всё

hisilicon # sf write 0x82000000 0x480000 0x7ff000
Writing at 0xc7f000 -- 100% complete.

[kankan]

Продолжу после праздника.
Сейчас камера полностью восстановлена, и работает.
Прога которой я переразбирал rootfs работает не правильно, после добавления файлов в раздел rootfs уменьшается в размере.
Если знаете какими средствами правильно разжать и сжать rootfs напишите пожалуйста.
Мне удалось заменить хеш рут на рут, раздел стал меньше на 104 байта , но я залил его в камеру, она загружалась, пароль подходил, но через минуту она перезагружалась произвольно.
Нужно найти правильный метод модификации rootfs.
Мой файл раздела rootfs - https://yadi.sk/d/WKfH2eizpwBJ8
Если будут вопросы или идеи по модификации rootfs пишите!