Dahua IPC-HDB4300C issue

AKalm

Young grasshopper
Dec 2, 2014
79
12
Hi everyone, I'm posting this question because I gave up on trying all firmwares, checking all related forums, etc.
My HDB4300C mini dome camera has stopped working, it became bricked with reboot loop.
Managed to stop it, and found out that when sonia wants to start, it doesn't find any languages so it reboots.
I'm wondering if I'm trying the wrong firmware all the time?
Tried all possible firmwares, but I still can't see any results of it.

Checked the i18n file:
Code:
/usr/data/Strings # ./i18n
./i18n: line 46: AllLanguages: not found
./i18n: line 46: English,: not found
./i18n: line 46: SimpChinese,: not found
./i18n: line 46: TradChinese,: not found
./i18n: line 46: Italian,: not found
./i18n: line 46: Spanish,: not found
./i18n: line 46: Japanese,: not found
./i18n: line 46: Russian,: not found
./i18n: line 46: French,: not found
./i18n: line 46: German,: not found
./i18n: line 46: Portugal,: not found
./i18n: line 46: Turkey,: not found
./i18n: line 46: Poland,: not found
./i18n: line 46: Romanian,: not found
./i18n: line 46: Hungarian,: not found
./i18n: line 46: Finnish,: not found
./i18n: line 46: Estonian,: not found
./i18n: line 46: Korean,: not found
./i18n: line 46: Farsi,: not found
./i18n: line 46: Dansk,: not found
./i18n: line 46: Czechish,: not found
./i18n: line 46: Bulgaria,: not found
./i18n: line 46: Slovakian,: not found
./i18n: line 46: Slovenia,: not found
./i18n: line 46: Croatian,: not found
./i18n: line 46: Dutch,: not found
./i18n: line 46: Greek,: not found
./i18n: line 46: Ukrainian,: not found
./i18n: line 46: Swedish,: not found
./i18n: line 46: Serbian,: not found
./i18n: line 46: Vietnamese,: not found
./i18n: line 46: Lithuanian,: not found
./i18n: line 46: Filipino,: not found
./i18n: line 46: Arabic,: not found
./i18n: line 46: Catalan,: not found
./i18n: line 46: Latvian: not found
./i18n: line 46: ],: not found
./i18n: line 46: DefaultLanguage: not found
./i18n: line 46: DefaultVideoStandard: not found
./i18n: line 46: DevStringFiles: not found
./i18n: line 46: HTMLStringFiles: not found
./i18n: line 46: Languages: not found
./i18n: line 46: VideoStandards: not found
./i18n: line 46: WebStringFiles: not found

Any ideas?
 
Last edited:
Why are you trying to run a text file?

Run sonia and paste the output (last ~50 lines).
 
  • Like
Reactions: nayr
Well, I was just wanted to check if there's a SimpChinese or English language found, so the reboot could be caused by region mismatch that doesn't let sonia start etc..
Pasting, there are a lot more before:#
...
Code:
Fail to get env authcode!
21:49:03|[libpdi] Get authcode error
21:49:03|[libpdi] SeriNumBuf = PZC4CA371W00028
21:49:03|[libpdi]  deviceType:         IPC-HDB4300C
21:49:03|[libpdi]  processorType:      10
21:49:03|[libpdi]  hardwareVersion:    1.00
21:49:03|[libpdi]  appAutoStart:       0
21:49:03|[libpdi]  serialNumber:       PZC4CA371W00028
21:49:03|[libpdi]  deviceClass:        IPC
21:49:03|[libpdi]  noPtz:              1
21:49:03|[libpdi]  noSdCard:           0
21:49:03|[libpdi]  bandWidth:          48
21:49:03|[libpdi] <-------System3_getSystemInfo-------<
21:49:03|[Manager] warn init:82 use default cmos def path!
21:49:03|[Manager] info use default CMOS definition!
21:49:03|[libpdi]  read RTC_SRAM_REBOOT = 1
21:49:03|[libpdi] PDI_getStartUpFlag: 2
21:49:03|[Manager] info CMagicBox::CMagicBox() getStartUpFlag 2
21:49:03|[libDatabase] info CLogSqliteOperate::isSynced insertRet : 1, removeRet : 1, updateRet : 1, line : 1256
21:49:03|[libDatabase] info CLogSqliteOperate::SqliteBackup vacuum use 60ms, iRet : 0, line : 1129
21:49:03|[libDatabase] trace backup_database(): start >>>
21:49:03|[libDatabase] trace match: log.db.%x
21:49:03|[libDatabase] trace log.db.1
21:49:03|[libDatabase] trace remove_database(): min(1), max(1)
21:49:03|[libDatabase] trace remove file: /mnt/mtd/Log/log.db.1
21:49:03|[libDatabase] trace backup_database(): finished successfully! elapsed(10)
21:49:03|[libDatabase] info CLogSqliteOperate::isSynced SqliteBackup use 70, line : 1264
21:49:03|[Manager] warn CMagicBox::setSubModuleInfo fail!
21:49:03|[Manager] info CMagicBox::eek:nConfigAutoMaintain day = [2], hour = [2], min = [0], enable = [true]
21:49:03|[Manager] info CMagicBox::startDstTune readCMOS DstTune flag is 0.
21:49:03|[Manager] warn CMagicBox::CMagicBox() load /var/tmp/pd/ProductDefinition product definition Languages file failed.
21:49:03|trace Create Alarm Module>>>>>>>>>>>>>>>>
21:49:03|[libpdi] dev has no BATTERY_CDEV_NAME
21:49:03|[libpdi] WARN  : Fail to create hbat!
21:49:03|[libpdi] Temp Dev not exists, status = -1
21:49:03|[libpdi] PDI_tempCreate, status = -1
21:49:03|[libInfra] debug ThreadBody Enter name = WatchDog, id = 946, prior = N1, stack = 0x42dd1dcc
Fail to get env peripheral!
21:49:03|trace alarmInputs=[0], alarmpir=[0], Flashlight=[0]
21:49:03|[Manager] warn CCommonConfigManager::getConfig Alarm is Json::nullValue!
21:49:03|warn  Src/Comm/Alarm.cpp:707 not support pir alarm.
21:49:03|[Manager] warn CCommonConfigManager::getConfig AlarmOut is Json::nullValue!
21:49:03|[Manager] error currDevSerial:pZC4CA371W00028
21:49:03|[Manager] error DevInformation'SerialID:pZC4CA371W00028
21:49:03|[Manager] error currDevSerial:pZC4CA371W00028
21:49:03|[Manager] error DevInformation'SerialID:pZC4CA371W00028
21:49:03|[Manager] trace CConsole::registerCmd had been register!!
21:49:04|[Manager] error currDevSerial:pZC4CA371W00028
21:49:04|[Manager] error DevInformation'SerialID:pZC4CA371W00028
21:49:04|[Manager] error currDevSerial:pZC4CA371W00028
21:49:04|[Manager] error DevInformation'SerialID:pZC4CA371W00028
21:49:04|[Manager] trace CConsole::registerCmd had been register!!
21:49:04|[Manager] info CLdapUserManager::initialize() tye login times is 3
21:49:04|[Manager] trace CConsole::registerCmd had been register!!
21:49:04|[Manager] trace CLog::attachFilter
21:49:04|[Manager] warn CMagicBox::getDeviceSubClass DeviceSubClass empty !
21:49:04|[Manager] debug CTelnetConfigHelper::eek:nConfigTelnet(), m_cfgtelnet: null

21:49:04|[Manager] debug ConfigTelnet={
   "Enable" : true
}

21:49:04|[libInfra] debug ThreadBody Enter name = Console, id = 947, prior = N1, stack = 0x42fd1dcc
21:49:04|[Manager] debug setTelnet interface ok!!!!!!!!,110,Src/Helper/TelnetHelper.cpp
21:49:04|[crypt] LANGUAGE: copy_to_user
21:49:04|[libpdi]
21:49:04|[Manager] error Src/Locales.cpp:140 system has no supportLanguages.
====================== assert failed ==========================
Assert(0) failed
File       <---> Src/Locales.cpp
Function   <---> virtual bool Dahua::Manager::CLocales::config(const Json::Value&)
Line       <---> 141
====================== assert failed ==========================
Time : Sat Feb 26 21:49:04 2000

=========================== TRACE START ===================================
Tid:930, Exception type : Assert failed
PC:[0x0076edb4] (0x0076ed38--0x0076ee6f) Unknown
PC:[0x0053769c] (0x0053756c--0x005379bb) Unknown
PC:[0x005220ec] (0x0052208c--0x005220ef) Unknown
PC:[0x0052234c] (0x005222e4--0x0052237f) Unknown
PC:[0x0001d868] (0x0001d040--0x0001f533) Unknown
PC:[0x4037c834] (0x4037c720--0x4037c940) __libc_start_main + [0x114]
PC:[0x0002a240] (0x0002a214--0x0002a273) Unknown
=========================== TRACE   END ===================================
=========================== New TRACE   START ===================================
=========================== New TRACE   END =====================================
=============== restore handler for signal -1 failed ====================
*** glibc detected *** sonia: free(): invalid pointer: 0x4004d000 ***
======= Backtrace: =========
/lib/libc.so.6(+0x7527c)[0x403da27c]
/lib/libc.so.6(cfree+0x94)[0x403def84]
/lib/libc.so.6(_IO_free_backup_area+0x20)[0x403d6fd8]
/lib/libc.so.6(_IO_file_overflow+0x1e0)[0x403d62e8]
/lib/libc.so.6(_IO_file_xsputn+0x54)[0x403d50ec]
/lib/libc.so.6(_IO_vfprintf+0x154)[0x403a851c]
/lib/libc.so.6(_IO_fprintf+0x20)[0x403b267c]
sonia[0x76edfc]
sonia[0x53769c]
sonia[0x5220ec]
sonia[0x52234c]
sonia[0x1d868]
/lib/libc.so.6(__libc_start_main+0x114)[0x4037c834]
======= Memory map: ========
00008000-00d07000 r-xp 00000000 00:00 0
00d0e000-00dd6000 rwxp 00000000 00:00 0
00dd8000-00dd9000 rwxp 00000000 00:00 0
0191c000-01a1b000 rwxp 00000000 00:00 0          [heap]
40003000-40004000 rwxp 00000000 00:00 0
4001f000-40025000 r-xp 00000000 00:12 142        /usr/lib/libivf.so
40025000-4002d000 ---p 00006000 00:12 142        /usr/lib/libivf.so
4002d000-4002e000 rwxp 00006000 00:12 142        /usr/lib/libivf.so
4002e000-40030000 rwxs c8bfe000 00:05 14         /dev/mem
40030000-40031000 ---p 00000000 00:00 0
40031000-40034000 rwxp 00000000 00:00 0
4003b000-40042000 r-xp 00000000 00:0f 281        /lib/librt-2.13.so
40042000-40049000 ---p 00007000 00:0f 281        /lib/librt-2.13.so
40049000-4004a000 r-xp 00006000 00:0f 281        /lib/librt-2.13.so
4004a000-4004b000 rwxp 00007000 00:0f 281        /lib/librt-2.13.so
4004b000-4004f000 rwxp 00000000 00:00 0
4005a000-4005d000 r-xp 00000000 00:12 109        /usr/lib/libspf.so
4005d000-40064000 ---p 00003000 00:12 109        /usr/lib/libspf.so
40064000-40065000 rwxp 00002000 00:12 109        /usr/lib/libspf.so
40075000-40076000 rwxp 00000000 00:00 0
40077000-40079000 r-xp 00000000 00:12 107        /usr/lib/liblog.so
40079000-40080000 ---p 00002000 00:12 107        /usr/lib/liblog.so
40080000-40081000 rwxp 00001000 00:12 107        /usr/lib/liblog.so
4008d000-400ad000 r-xp 00000000 00:0f 269        /lib/ld-2.13.so
400ad000-400b4000 ---p 00000000 00:00 0
400b4000-400b5000 r-xp 0001f000 00:0f 269        /lib/ld-2.13.so
400b5000-400b6000 rwxp 00020000 00:0f 269        /lib/ld-2.13.so
400b6000-400b9000 r-xp 00000000 00:12 144        /usr/lib/libstp.so
400b9000-400c0000 ---p 00003000 00:12 144        /usr/lib/libstp.so
400c0000-400c1000 rwxp 00002000 00:12 144        /usr/lib/libstp.so
400c4000-400c8000 r-xp 00000000 00:0f 239        /lib/libdl-2.13.so
400c8000-400cf000 ---p 00004000 00:0f 239        /lib/libdl-2.13.so
400cf000-400d0000 r-xp 00003000 00:0f 239        /lib/libdl-2.13.so
400d0000-400d1000 rwxp 00004000 00:0f 239        /lib/libdl-2.13.so
400d2000-400dc000 rwxp 00000000 00:00 0
400e0000-400e1000 rwxp 00000000 00:00 0
400e1000-400f6000 r-xp 00000000 00:0f 252        /lib/libpthread-2.13.so
400f6000-400fd000 ---p 00015000 00:0f 252        /lib/libpthread-2.13.so
400fd000-400fe000 r-xp 00014000 00:0f 252        /lib/libpthread-2.13.so
400fe000-400ff000 rwxp 00015000 00:0f 252        /lib/libpthread-2.13.so
400ff000-40101000 rwxp 00000000 00:00 0
40101000-40176000 r-xp 00000000 00:12 108        /usr/lib/libpdi.so
40176000-4017d000 ---p 00075000 00:12 108        /usr/lib/libpdi.so
4017d000-4017f000 rwxp 00074000 00:12 108        /usr/lib/libpdi.so
4017f000-40183000 rwxp 00000000 00:00 0
40183000-4018d000 r-xp 00000000 00:12 143        /usr/lib/libosa.so
4018d000-40195000 ---p 0000a000 00:12 143        /usr/lib/libosa.so
40195000-40196000 rwxp 0000a000 00:12 143        /usr/lib/libosa.so
40196000-401aa000 r-xp 00000000 00:12 140        /usr/lib/libunwind.so.8
401aa000-401b1000 ---p 00014000 00:12 140        /usr/lib/libunwind.so.8
401b1000-401b2000 rwxp 00013000 00:12 140        /usr/lib/libunwind.so.8
401b2000-401d7000 rwxp 00000000 00:00 0
401d7000-401e0000 r-xp 00000000 00:12 141        /usr/lib/libbinder.so
401e0000-401e7000 ---p 00009000 00:12 141        /usr/lib/libbinder.so
401e7000-401e8000 rwxp 00008000 00:12 141        /usr/lib/libbinder.so
401e8000-402ac000 r-xp 00000000 00:0f 283        /lib/libstdc++.so.6.0.16
402ac000-402b3000 ---p 000c4000 00:0f 283        /lib/libstdc++.so.6.0.16
402b3000-402b7000 r-xp 000c3000 00:0f 283        /lib/libstdc++.so.6.0.16
402b7000-402b9000 rwxp 000c7000 00:0f 283        /lib/libstdc++.so.6.0.16
402b9000-402bf000 rwxp 00000000 00:00 0
402bf000-4035c000 r-xp 00000000 00:0f 285        /lib/libm-2.13.so
4035c000-40363000 ---p 0009d000 00:0f 285        /lib/libm-2.13.so
40363000-40364000 r-xp 0009c000 00:0f 285        /lib/libm-2.13.so
40364000-40365000 rwxp 0009d000 00:0f 285        /lib/libm-2.13.so
40365000-404a2000 r-xp 00000000 00:0f 274        /lib/libc-2.13.so
404a2000-404aa000 ---p 0013d000 00:0f 274        /lib/libc-2.13.so
404aa000-404ac000 r-xp 0013d000 00:0f 274        /lib/libc-2.13.so
404ac000-404ad000 rwxp 0013f000 00:0f 274        /lib/libc-2.13.so
404ad000-404b0000 rwxp 00000000 00:00 0
404b0000-404d0000 r-xp 00000000 00:0f 282        /lib/libgcc_s.so.1
404d0000-404d7000 ---p 00020000 00:0f 282        /lib/libgcc_s.so.1
404d7000-404d8000 rwxp 0001f000 00:0f 282        /lib/libgcc_s.so.1
404d8000-404d9000 rwxp 00000000 00:00 0
404e6000-404e7000 rwxp 00000000 00:00 0
404e7000-40527000 rwxs c8b83000 00:05 305        /dev/logDev
40527000-40568000 rwxp 00000000 00:00 0
40575000-405f5000 rwxs c7401000 00:05 306        /dev/binderSR
40679000-40979000 rwxs c7001000 00:05 306        /dev/binderSR
40979000-4097a000 ---p 00000000 00:00 0
4097a000-40b79000 rwxp 00000000 00:00 0
40b7d000-40b7e000 ---p 00000000 00:00 0
40b7e000-40d7d000 rwxp 00000000 00:00 0
40d7d000-40d7e000 ---p 00000000 00:00 0
40d7e000-40f7d000 rwxp 00000000 00:00 0
40fcf000-40fd0000 ---p 00000000 00:00 0
40fd0000-411cf000 rwxp 00000000 00:00 0
4123a000-4123b000 ---p 00000000 00:00 0
4123b000-4143a000 rwxp 00000000 00:00 0
41453000-41454000 ---p 00000000 00:00 0
41454000-41653000 rwxp 00000000 00:00 0
41714000-41715000 ---p 00000000 00:00 0
41715000-41914000 rwxp 00000000 00:00 0
41926000-41927000 ---p 00000000 00:00 0
41927000-41b26000 rwxp 00000000 00:00 0
41bce000-41bcf000 ---p 00000000 00:00 0
41bcf000-41dce000 rwxp 00000000 00:00 0
41ea0000-41ea1000 ---p 00000000 00:00 0
41ea1000-420a0000 rwxp 00000000 00:00 0
420c0000-420c1000 ---p 00000000 00:00 0
420c1000-422c0000 rwxp 00000000 00:00 0
4232a000-4232b000 ---p 00000000 00:00 0
4232b000-4252a000 rwxp 00000000 00:00 0
42600000-42621000 rwxp 00000000 00:00 0
42621000-42700000 ---p 00000000 00:00 0
42700000-42701000 ---p 00000000 00:00 0
42701000-42900000 rwxp 00000000 00:00 0
429d3000-429d4000 ---p 00000000 00:00 0
429d4000-42bd3000 rwxp 00000000 00:00 0
42bd3000-42bd4000 ---p 00000000 00:00 0
42bd4000-42dd3000 rwxp 00000000 00:00 0
42dd3000-42dd4000 ---p 00000000 00:00 0
42dd4000-42fd3000 rwxp 00000000 00:00 0
bed6e000-bed8f000 rwxp 00000000 00:00 0          [stack]
ffff0000-ffff1000 r-xp 00000000 00:00 0          [vectors]
stack_sig_hook recursive
Aborted
/usr/bin #
 
Last edited:
Your camera is fucked:
21:49:04|[crypt] LANGUAGE: copy_to_user
21:49:04|[libpdi]
21:49:04|[Manager] error Src/Locales.cpp:140 system has no supportLanguages.
====================== assert failed ==========================
Assert(0) failed
File <---> Src/Locales.cpp
Function <---> virtual bool Dahua::Manager::CLocales::config(const Json::Value&)
Line <---> 141
====================== assert failed ==========================
Time : Sat Feb 26 21:49:04 2000

Some cameras have a chip where the region is stored on it. Yours seems to be empty lol.
If you can link me the firmware of the camera I might be able to fix it.

And this has happened out of nowhere?
 
Your camera is fucked:
21:49:04|[crypt] LANGUAGE: copy_to_user
21:49:04|[libpdi]
21:49:04|[Manager] error Src/Locales.cpp:140 system has no supportLanguages.
====================== assert failed ==========================
Assert(0) failed
File <---> Src/Locales.cpp
Function <---> virtual bool Dahua::Manager::CLocales::config(const Json::Value&)
Line <---> 141
====================== assert failed ==========================
Time : Sat Feb 26 21:49:04 2000

Some cameras have a chip where the region is stored on it. Yours seems to be empty lol.
If you can link me the firmware of the camera I might be able to fix it.

And this has happened out of nowhere?

Yep sorry guys, I was looking for the <> icon, didn't find the +, will do like that from now.
I see, well there was one moment where all this could have happened - I've set the camera to DHCP in configtool, and I could have unplugged it too early, before it actually said done/complete. I don't remember if I've waited for that or not.
This old fw will do:
http://headlane.co.uk/new/firm.zip
 
Anyone else any ideas, starting points?
Does anyone have chinese firmware? That's the only one I couldn't find