Recovery for xm510A camera module (Xionmaitech

mihaly79

n3wb
Joined
Mar 18, 2020
Messages
3
Reaction score
0
Location
Hungary
Hi for everybody I need some help to recovery a cheapest camera from Xionmaitech xm510a.I buyit the module from Alie.... to refurbish an oldest camera but its comming with a bed or broken firmware he dont want boot its stoping after loading kernel.I have acces to serial console and U-boot but no info about recovery method maybe somebody have an ideea how could I geting to work again.Firmware and tools onthe stock. Thanks a lot. I have experience with PLC programing and industrial embendeed device but with no info I'm out of service.
 

mihaly79

n3wb
Joined
Mar 18, 2020
Messages
3
Reaction score
0
Location
Hungary
Hi yes I tried but I cant get the ip adress on the camera that is my big problem .I think only way is tftp serial combo but I must to now what I doit(example erase memory partion etc etc)
 

alastairstevenson

Staff member
Joined
Oct 28, 2014
Messages
15,929
Reaction score
6,777
Location
Scotland
In the bootloader you can set the IP address to your own choice.
What commands are available in the bootloader?
Use the help command to see them.
List them here and maybe we can suggest what to do.
Use the printenv command to show the environment variables.
List them here.
 

alastairstevenson

Staff member
Joined
Oct 28, 2014
Messages
15,929
Reaction score
6,777
Location
Scotland
I will put a complet serial output and U-boot menu.
You may get sometthing like this - from an XM530 board running Xiongmaitech firmware :
Code:
U-Boot 2014.04 (Mar 15 2019 - 11:11:02)

CPU: XM530
DRAM:  64 MiB
MMC:   arasan: 0
In:    serial
Out:   serial
Err:   serial
Net:   dwmac.10010000
Press Ctrl+C to stop autoboot
U-Boot> <INTERRUPT>
U-Boot> <INTERRUPT>
U-Boot> <INTERRUPT>
U-Boot> printenv
appCloudExAbility=0v4Vrsys2co=
baudrate=115200
bootargs=mem=35M console=ttyAMA0,115200 root=/dev/mtdblock2 rootfstype=cramfs mtdparts=xm_sfc:256K(boot),1536K(kernel),1280K(romfs),4544K(user),256K(custom),320K(mtd)
bootcmd=sf probe 0;sf read 80007fc0 40000 180000;bootm 80007fc0
bootdelay=1
cramfsaddr=0x60040000
da=mw.b 0x81000000 ff 800000;tftp 0x81000000 u-boot.bin.img;sf probe 0;flwrite
dc=mw.b 0x81000000 ff 800000;tftp 0x81000000 custom-x.cramfs.img;sf probe 0;flwrite
dd=mw.b 0x81000000 ff 800000;tftp 0x81000000 mtd-x.jffs2.img;sf probe 0;flwrite
dr=mw.b 0x81000000 ff 800000;tftp 0x81000000 romfs-x.cramfs.img;sf probe 0;flwrite
du=mw.b 0x81000000 ff 800000;tftp 0x81000000 user-x.cramfs.img;sf probe 0;flwrite
dw=mw.b 0x81000000 ff 800000;tftp 0x81000000 web-x.cramfs.img;sf probe 0;flwrite
ethact=dwmac.10010000
ethaddr=00:12:31:29:4f:97
ipaddr=192.168.1.10
netmask=255.255.255.0
serverip=192.168.1.107
stderr=serial
stdin=serial
stdout=serial
tk=mw.b 0x81000000 ff 800000;tftp 0x81000000 uImage; bootm 0x81000000
ua=mw.b 0x81000000 ff 800000;tftp 0x81000000 upall_verify.img;sf probe 0;flwrite
up=mw.b 0x81000000 ff 800000;tftp 0x81000000 update.img;sf probe 0;flwrite
verify=n

Environment size: 1239/65532 bytes
U-Boot>
U-Boot>
U-Boot> help
?       - alias for 'help'
base    - print or set address offset
bdinfo  - print Board Info structure
boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootm   - boot application image from memory
bootp   - boot image via network using BOOTP/TFTP protocol
cmp     - memory compare
coninfo - print console devices and information
cp      - memory copy
cramfsload- load binary file from a filesystem image
cramfsls- list files in a directory (default /)
crc32   - checksum calculation
dhcp    - boot image via network using DHCP/TFTP protocol
echo    - echo args to console
editenv - edit environment variable
env     - environment handling commands
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls   - list files in a directory (default /)
flwrite - SPI flash sub-system
go      - start application at address 'addr'
help    - print command description/usage
imxtract- extract a part of a multi-image
itest   - return true/false on integer compare
loadb   - load binary file over serial line (kermit mode)
loadx   - load binary file over serial line (xmodem mode)
loady   - load binary file over serial line (ymodem mode)
loop    - infinite loop on address range
md      - memory display
mm      - memory modify (auto-incrementing address)
mmc     - MMC sub system
mmcinfo - display MMC info
mw      - memory write (fill)
nfs     - boot image via network using NFS protocol
nm      - memory modify (constant address)
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv  - set environment variables
setexpr - set environment variable as the result of eval expression
sf      - SPI flash sub-system
sleep   - delay execution for some time
source  - run script from memory
tftpboot- boot image via network using TFTP protocol
version - print monitor, compiler and linker version
U-Boot>
In which case there is a good selection of commands to fix up the flash memory.
 

farianj

n3wb
Joined
Sep 7, 2018
Messages
2
Reaction score
0
Location
hwere
You may get sometthing like this - from an XM530 board running Xiongmaitech firmware :
Code:
U-Boot 2014.04 (Mar 15 2019 - 11:11:02)

CPU: XM530
DRAM:  64 MiB
MMC:   arasan: 0
In:    serial
Out:   serial
Err:   serial
Net:   dwmac.10010000
Press Ctrl+C to stop autoboot
U-Boot> <INTERRUPT>
U-Boot> <INTERRUPT>
U-Boot> <INTERRUPT>
U-Boot> printenv
appCloudExAbility=0v4Vrsys2co=
baudrate=115200
bootargs=mem=35M console=ttyAMA0,115200 root=/dev/mtdblock2 rootfstype=cramfs mtdparts=xm_sfc:256K(boot),1536K(kernel),1280K(romfs),4544K(user),256K(custom),320K(mtd)
bootcmd=sf probe 0;sf read 80007fc0 40000 180000;bootm 80007fc0
bootdelay=1
cramfsaddr=0x60040000
da=mw.b 0x81000000 ff 800000;tftp 0x81000000 u-boot.bin.img;sf probe 0;flwrite
dc=mw.b 0x81000000 ff 800000;tftp 0x81000000 custom-x.cramfs.img;sf probe 0;flwrite
dd=mw.b 0x81000000 ff 800000;tftp 0x81000000 mtd-x.jffs2.img;sf probe 0;flwrite
dr=mw.b 0x81000000 ff 800000;tftp 0x81000000 romfs-x.cramfs.img;sf probe 0;flwrite
du=mw.b 0x81000000 ff 800000;tftp 0x81000000 user-x.cramfs.img;sf probe 0;flwrite
dw=mw.b 0x81000000 ff 800000;tftp 0x81000000 web-x.cramfs.img;sf probe 0;flwrite
ethact=dwmac.10010000
ethaddr=00:12:31:29:4f:97
ipaddr=192.168.1.10
netmask=255.255.255.0
serverip=192.168.1.107
stderr=serial
stdin=serial
stdout=serial
tk=mw.b 0x81000000 ff 800000;tftp 0x81000000 uImage; bootm 0x81000000
ua=mw.b 0x81000000 ff 800000;tftp 0x81000000 upall_verify.img;sf probe 0;flwrite
up=mw.b 0x81000000 ff 800000;tftp 0x81000000 update.img;sf probe 0;flwrite
verify=n

Environment size: 1239/65532 bytes
U-Boot>
U-Boot>
U-Boot> help
?       - alias for 'help'
base    - print or set address offset
bdinfo  - print Board Info structure
boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootm   - boot application image from memory
bootp   - boot image via network using BOOTP/TFTP protocol
cmp     - memory compare
coninfo - print console devices and information
cp      - memory copy
cramfsload- load binary file from a filesystem image
cramfsls- list files in a directory (default /)
crc32   - checksum calculation
dhcp    - boot image via network using DHCP/TFTP protocol
echo    - echo args to console
editenv - edit environment variable
env     - environment handling commands
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls   - list files in a directory (default /)
flwrite - SPI flash sub-system
go      - start application at address 'addr'
help    - print command description/usage
imxtract- extract a part of a multi-image
itest   - return true/false on integer compare
loadb   - load binary file over serial line (kermit mode)
loadx   - load binary file over serial line (xmodem mode)
loady   - load binary file over serial line (ymodem mode)
loop    - infinite loop on address range
md      - memory display
mm      - memory modify (auto-incrementing address)
mmc     - MMC sub system
mmcinfo - display MMC info
mw      - memory write (fill)
nfs     - boot image via network using NFS protocol
nm      - memory modify (constant address)
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv  - set environment variables
setexpr - set environment variable as the result of eval expression
sf      - SPI flash sub-system
sleep   - delay execution for some time
source  - run script from memory
tftpboot- boot image via network using TFTP protocol
version - print monitor, compiler and linker version
U-Boot>
In which case there is a good selection of commands to fix up the flash memory.
thats the firmware that i am searching for... the XM530 board running Xiongmaitech firmware
the usuals search didnt got anything.
 

farianj

n3wb
Joined
Sep 7, 2018
Messages
2
Reaction score
0
Location
hwere
well downloaded it ..
should mention that i got to execute tftpboot since its comlpeted bricked.
stuck at kernel not booting up.
flashed the files custom rom and user.
uimage.img renamed to uImage and flashed ?
not going to flash uboot. you never know...
 

moykky

n3wb
Joined
Sep 8, 2020
Messages
12
Reaction score
4
Location
Finland
well downloaded it ..
should mention that i got to execute tftpboot since its comlpeted bricked.
stuck at kernel not booting up.
flashed the files custom rom and user.
uimage.img renamed to uImage and flashed ?
not going to flash uboot. you never know...
Did you get this going?

Do you have bootargs right? I made systemimage with SDK and bootargs was not right, could not mount rootfs.

I think I have same shitty cams as you or atleast very close to same.
Developing xm530ai board cams, you wanna help me?
 

kelu28

n3wb
Joined
Oct 5, 2022
Messages
4
Reaction score
0
Location
France
Same for me ... Brick during update:

U-Boot 2014.04 (Nov 23 2021 - 11:09:23)

CPU: XM530
WDT: 300S
DRAM: 64 MiB
MMC: arasan: 0
In: serial
Out: serial
Err: serial
Net: dwmac.10010000
Press Ctrl+C to stop autoboot
SF: 1572864 bytes @ 0x40000 Read: OK
## Booting kernel from Legacy Image at 80007fc0 ...
Image Name: Linux-3.10.103+
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 1549224 Bytes = 1.5 MiB
Load Address: 80008000
Entry Point: 80008000
XIP Kernel Image ... OK

Starting kernel ...

Uncompressing Linux... done, booting the kernel.

And after restart indefinitely.
On ctrl C ask for a password.... but don't have...

Could you help me?
 

rammbh

n3wb
Joined
Oct 8, 2022
Messages
4
Reaction score
2
Location
brasil
I was able to connect the IPC via raspberry and it is showing this message infinitely:

CPU:

U-Boot 2014.04 (18 de março de 2020 - 19:56:55)

CPU:

U-Boot 2014.04 (18 de março de 2020 - 19:56:55)

CPU:

U-Boot 2014.04 (18 de março de 2020 - 19:56:55)

CPU:
 
Top