openipc / burn Goto Github PK

View Code? Open in Web Editor NEW

30.0 6.0 16.0 330 KB

OpenSource tool to unbrick HiSilicon and Goke devices

Home Page: https://openipc.org

License: MIT License

Python 100.00%

burn openipc

burn's Introduction

Burn

Video Tutorials

OpenIPC BURN Utility Playlist

Archive of current bootloaders for devices

Please use only this Archive of current bootloaders for devices !!!

Features of use in MacOS

Attention ! There are some problems with using Burn in MacOS and you can participate in the discussion

Basic usage

usage: burn [-h] -c
                   {hi3516ev200,hi3520dv100,hi3518ev200,hi3516ev100,hi3518ev201,gk7205v300,hi3516ev300,hi3520dv200,hi3516cv500,hi3556v100,hi3516cv200,hi3516cv300,gk7205v200}
                   -f FILE [-p PORT] [-b] [-d]

options:
  -h, --help            show this help message and exit
  -c {hi3516ev200,hi3520dv100,hi3518ev200,hi3516ev100,hi3518ev201,gk7205v300,hi3516ev300,hi3520dv200,hi3516cv500,hi3556v100,hi3516cv200,hi3516cv300,gk7205v200}, --chip {hi3516ev200,hi3520dv100,hi3518ev200,hi3516ev100,hi3518ev201,gk7205v300,hi3516ev300,hi3520dv200,hi3516cv500,hi3556v100,hi3516cv200,hi3516cv300,gk7205v200}
                        Chip model name
  -f FILE, --file FILE  U-Boot binary file to upload
  -p PORT, --port PORT  Serial port device name
  -b, --break           Send Ctrl-C just after upload
  -d, --debug           Set debug mode

If burn complains about missing python modules, you should install the list of modules by running:

pip install -r requirements.txt

HI3516CV300

Download general version of U-Boot.

./burn --chip hi3516cv300 --file=u-boot-hi3516cv300-universal.bin --break; screen -L /dev/ttyUSB0 115200

Hi3516EV300

Download general version of U-Boot.

$ ./burn --chip hi3516ev300 --file=u-boot-hi3516ev300-universal.bin --break; screen -L /dev/ttyUSB0 115200

Unlock flash on gk7205v200 and gk7205v210

$ ./burn --chip gk7205v200 --file=u-boot/gk7205v200.bin --break; screen -L /dev/ttyUSB0 115200
goke # sf probe
@do_spi_flash_probe() flash->erase_size: 65536, flash->sector_size: 0
goke # sf lock 0
unlock all block.

Unlock flash on gk7205v300

$ ./burn --chip gk7205v300 --file=u-boot/gk7205v300.bin --break; screen -L /dev/ttyUSB0 115200
goke # sf probe
@do_spi_flash_probe() flash->erase_size: 65536, flash->sector_size: 0
goke # sf lock 0
unlock all block.

Start kernel from memory

setenv ipaddr 192.168.1.1; setenv serverip 192.168.1.10; mw.b 0x42000000 ff 1000000; tftpboot 0x42000000 uImage.${soc}; bootm 0x42000000

U-Boot continuous integration

Real world example on U-Boot developing for CV300 board:

set -e

# In case of buggy USB UART adapter
sudo usbreset /dev/bus/usb/005/007

# In U-Boot directory:
make ARCH=arm CROSS_COMPILE=arm-hisiv500-linux- -j$(nproc)
cp u-boot.bin full-boot.bin
cp reg_info_hi3516cv300.bin ./hi3516cv300.reg
make CPU=hi3516cv300 ARCH=arm CROSS_COMPILE=arm-hisiv500-linux- mini-boot.bin

#./mkboot.sh reg_info_hi3516cv300.bin u-boot-ok.bin
cp mini-boot.bin ~/git/burn

cd ~/git/burn
# Custom script to power reset camera via network switch
./restart_eth4.sh
./burn --chip hi3516cv300 --file=mini-boot.bin
screen /dev/ttyUSB0 115200

burn's People

Contributors

Stargazers

Watchers

Forkers

ssharshunov hugmatj maks86-drones carbofos widgetii themactep vinibali jeff-cn ulfberth1337 liamdiprose thegroove iw88881111 narpat a-sakharov tuannt1531

burn's Issues

Hi3518ev200 - burn is not detecting it.. or totally dead camera?

Hi!
I replaced the firmware sucessfully with openIPC, but due to some issue with wifi (wrong wlan0 driver) networking was apparently messed up.. so I decide to burn again the full openipc image.
BIG mistake.
Steps done correctly, no issues..reset.. resetting... bum! dead.
Camera IR works but noting of the rest seems alive (also the connection status led). No boot log, nothing.

I decided to try burn. But no way, It say Trying to connect to COM1 (port is ok) and nothing more.
I don't know if it's burn or (I bet on this...) veryhardbricked cam.
Can I trying something more with burn or the only way it's the trash? :(

unlock gk7605v100

Hi,
original u-boot is password locked, so I run u-boot by loading it with burn:
./burn --chip gk7205v300 --file=../u-boot-gk7605v100-universal.bin --break
I get promt:
OpenIPC #
then I can do all commands (unlock, erase and write serial flash) with success:
OpenIPC # sf probe
OpenIPC # sf lock 0
unlock all block.
OpenIPC # sf erase 0x0 0x50000; sf write 0x42000000 0x0 0x50000
Erasing at 0x50000 -- 100% complete.
SF: 327680 bytes @ 0x0 Erased: OK
device 0 offset 0x0, size 0x50000
Writing at 0x50000 -- 100% complete.
SF: 327680 bytes @ 0x0 Written: OK
OpenIPC #
but in flash is still original u-boot (read out and compared).
What I'm doing wrong?
Thanks

unlock hi3516ev200 "failedATA"

This is what happens with a windows laptop FTDI or a raspberrypi3 UART

PS C:\work\burn> C:\Python311\python.exe burn --chip hi3516ev200 --file=u-boot-hi3516ev200-universal.bin -p COM5 --break
Trying open COM5
Welcome to boot-mode

{'name': 'hi3516ev200', 'DDRSTEP0': [4, 224, 45, 229, 36, 0, 159, 229, 36, 16, 159, 229, 0, 16, 128, 229, 32, 0, 159, 229, 32, 16, 159, 229, 4, 16, 128, 228, 0, 224, 128, 229, 4, 240, 157, 228, 239, 190, 173, 222, 239, 190, 173, 222, 239, 190, 173, 222, 60, 1, 2, 18, 120, 86, 52, 18, 64, 1, 2, 18, 117, 106, 105, 122], 'ADDRESS': ['0x04013000', '0x04010500', '0x41000000'], 'FILELEN': ['0x0040', '0x6000'], 'STEPLEN': ['0x0040', '0x0080']}
Sending u-boot-hi3516ev200-universal.bin ...
Send DDRSTEP frame...
Send HEAD frame...
Send TAIL frame...
Send HEAD frame...
Send DATA frame[================================================]24576 of 24576
Send TAIL frame...
Send HEAD frame...
failed
failedATA frame[                                                   ]0 of 234571
failed
failed
failedATA frame[                                                ]3072 of 234571
failed
failed
failedATA frame[=                                               ]6144 of 234571
failed
failed
failedATA frame[=                                               ]9216 of 234571
failed
failed
failedATA frame[==                                             ]12288 of 234571
failed
failed
failedATA frame[===                                            ]15360 of 234571
failed
failed
failedATA frame[===                                            ]18432 of 234571
failed
failed
failedATA frame[====                                           ]21504 of 234571
...

and now with debug:

PS C:\work\burn> C:\Python311\python.exe burn --chip hi3516ev200 --file=u-boot-hi3516ev200-universal.bin -p COM5 --break -d
Trying open COM5
Welcome to boot-mode

{'name': 'hi3516ev200', 'DDRSTEP0': [4, 224, 45, 229, 36, 0, 159, 229, 36, 16, 159, 229, 0, 16, 128, 229, 32, 0, 159, 229, 32, 16, 159, 229, 4, 16, 128, 228, 0, 224, 128, 229, 4, 240, 157, 228, 239, 190, 173, 222, 239, 190, 173, 222, 239, 190, 173, 222, 60, 1, 2, 18, 120, 86, 52, 18, 64, 1, 2, 18, 117, 106, 105, 122], 'ADDRESS': ['0x04013000', '0x04010500', '0x41000000'], 'FILELEN': ['0x0040', '0x6000'], 'STEPLEN': ['0x0040', '0x0080']}
Sending u-boot-hi3516ev200-universal.bin ...
Send DDRSTEP frame...
Send HEAD frame...
len:  14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c  ]
ret ack   :  0x20
len:  14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c  ]
ret ack   :  0x20
len:  14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c  ]
ret ack   :  0x20
len:  14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c  ]
ret ack   :  0x20
len:  14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c  ]
ret ack   :  0xaa
len:  69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20  ... ]
ret ack   :  0xaa
Send TAIL frame...
len:  5 write : [ ed 02 fd ba b0  ]
ret ack   :  0xaa
Send HEAD frame...
len:  14 write : [ fe 00 ff 01 00 00 60 00 04 01 05 00 e5 8c  ]
ret ack   :  0xaa
len:  1029 write : [ da 01 fe 15 05 00 ea fe ff ff ea fe ff ff ea fe ff ff ea fe  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 02 fd 30 c0 0d 12 21 22 88 28 00 00 00 00 fd 00 00 00 34  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 03 fc 6c c0 0d 12 00 ff 00 ff 00 00 00 00 fd 00 00 00 ec  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 06 f9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 07 f8 bd ff ff eb 00 f0 20 e3 04 30 9d e5 00 00 53 e3 f8  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 08 f7 70 20 93 e5 02 17 82 e3 02 27 c2 e3 70 10 83 e5 70  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 09 f6 fc ff ff 1a 02 11 c1 e3 c4 10 83 e5 40 00 92 e5 54  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 0a f5 be fe ff eb 2c 30 95 e5 20 30 13 e2 07 30 85 07 db  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 0b f4 08 30 84 e5 00 30 a0 e3 10 30 84 e5 14 30 84 e5 18  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 0c f3 01 50 85 e2 07 00 55 e3 c4 ff ff da 50 30 94 e5 02  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 0d f2 01 20 a0 03 37 00 50 e3 01 30 a0 83 02 30 a0 93 dc  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 0e f1 00 70 87 e0 04 00 a0 e1 50 fb ff eb 20 30 1b e5 08  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 0f f0 04 00 00 1a 01 00 55 e3 00 10 a0 13 08 00 00 1a 01  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 10 ef 02 50 15 e0 48 20 86 e5 39 00 00 1a 01 27 a0 e3 08  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 11 ee 18 00 a0 e3 10 80 bd e8 80 00 01 12 28 30 9f e5 00  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 12 ed 00 f0 20 e3 04 30 9d e5 01 30 83 e2 04 30 8d e5 f4  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 14 eb 81 39 41 f6 c2 40 16 3a 3d 06 3a 4d 3c c6 be 26 53  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 15 ea 96 a4 33 38 b3 0c 5b 03 5a 4b 3c 5f 54 ea 14 70 8a  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 16 e9 c5 59 f4 c9 90 b3 39 4e 15 f9 32 ca 3b da b1 9f d1  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 17 e8 35 01 5d 59 f7 c9 03 33 c9 2e c6 6c 5c ee e6 08 db  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 18 e7 31 46 dd 40 d4 a8 a8 1b 45 45 8b 65 73 51 a9 62 3b  ... ]
ret ack   :  0xaa
Send TAIL frame...
len:  5 write : [ ed 19 e6 c6 63  ]
ret ack   :  0xaa
Send HEAD frame...
len:  14 write : [ fe 00 ff 01 00 03 94 4b 41 00 00 00 4d 98  ]
ret ack   :  0xaa
len:  1029 write : [ da 01 fe 15 05 00 ea fe ff ff ea fe ff ff ea fe ff ff ea fe  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 02 fd 30 c0 0d 12 21 22 88 28 00 00 00 00 fd 00 00 00 34  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 03 fc 6c c0 0d 12 00 ff 00 ff 00 00 00 00 fd 00 00 00 ec  ... ]
ret ack   :  0xaa
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x0a
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x45
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x30
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x44
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x31
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x0d
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x0a
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x0d
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x0a
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x53
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x79
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x73
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x74
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x65
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x6d
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x20
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x73
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x74
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x61
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x72
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x74
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x75
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x70
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x0d
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x0a
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x0d
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x0a
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x55
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x6e
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x63
len:  1029 write : [ da 04 fb 90 02 0d 12 00 00 11 00 00 00 00 00 fd 00 00 00 a0  ... ]
ret ack   :  0x6f
failed
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x6d
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x70
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x72
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x65
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x73
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x73
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x20
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x4f
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x6b
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x21
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x0d
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x0a
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x0d
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x0a
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x55
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x2d
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x42
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x6f
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x6f
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x74
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x20
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x32
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x30
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x31
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x36
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x2e
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x31
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x31
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x20
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x28
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0x4d
failed
<---------------------------repeats-------------------------------------------------->
ret ack   :  0x61
failed
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :  0x64
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :  0x20
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :  0x70
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :  0x72
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :  0x6f
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :  0x63
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :  0x65
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :  0x73
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :  0x73
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :  0x2e
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :  0x0d
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :  0x0a
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
ret ack   :
len:  1029 write : [ da 13 ec 6c b0 2c 93 74 cf 04 ba aa 73 13 c0 6b 74 6e 00 d8  ... ]
...

the device is now dead and needs a powercycle

MacOS compatibility

loading problem

% /usr/local/bin/python3 ./burn --debug --port /dev/tty.usbserial-1 --chip hi3518ev200 --file=u-boot-hi3518ev200-universal.bin --break      

Trying open /dev/tty.usbserial-1

Welcome to boot-mode

{'name': 'hi3516cv200', 'DDRSTEP0': [4, 224, 45, 229, 36, 0, 159, 229, 36, 16, 159, 229, 0, 16, 128, 229, 32, 0, 159, 229, 32, 16, 159, 229, 4, 16, 128, 228, 0, 224, 128, 229, 4, 240, 157, 228, 239, 190, 173, 222, 239, 190, 173, 222, 239, 190, 173, 222, 60, 1, 5, 32, 120, 86, 52, 18, 64, 1, 5, 32, 117, 106, 105, 122], 'ADDRESS': ['4013000', '4010500', '0x81000000'], 'FILELEN': ['040', '0x3b00'], 'STEPLEN': ['040', '060']}
Sending u-boot-hi3518ev200-universal.bin ...
Send DDRSTEP frame...
Send HEAD frame...
len:    14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c    ]
len:    14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c    ]
len:    14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c    ]
len:    14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c    ]
len:    14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c    ]
len:    14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c    ]
len:    14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c    ]
len:    14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c    ]
len:    14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c    ]
len:    14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c    ]
len:    14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c    ]
len:    14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c    ]
len:    14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c    ]
len:    14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c    ]
len:    14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c    ]
failed
len:    69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20    ... ]
ret ack      :    0x55 
len:    69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20    ... ]
ret ack      :    0x55 
len:    69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20    ... ]
ret ack      :    0x55 
len:    69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20    ... ]
len:    69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20    ... ]
len:    69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20    ... ]
len:    69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20    ... ]
ret ack      :    0x55 
len:    69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20    ... ]
len:    69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20    ... ]
len:    69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20    ... ]
ret ack      :    0x55 
len:    69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20    ... ]
len:    69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20    ... ]
len:    69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20    ... ]
len:    69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20    ... ]
len:    69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20    ... ]
ret ack      :    0x55 
failed
Send TAIL frame...
len:    5 write : [ ed 02 fd ba b0    ]
len:    5 write : [ ed 02 fd ba b0    ]
len:    5 write : [ ed 02 fd ba b0    ]
len:    5 write : [ ed 02 fd ba b0    ]
len:    5 write : [ ed 02 fd ba b0    ]
len:    5 write : [ ed 02 fd ba b0    ]
len:    5 write : [ ed 02 fd ba b0    ]
len:    5 write : [ ed 02 fd ba b0    ]
len:    5 write : [ ed 02 fd ba b0    ]
len:    5 write : [ ed 02 fd ba b0    ]
len:    5 write : [ ed 02 fd ba b0    ]
len:    5 write : [ ed 02 fd ba b0    ]
len:    5 write : [ ed 02 fd ba b0    ]
len:    5 write : [ ed 02 fd ba b0    ]
len:    5 write : [ ed 02 fd ba b0    ]
failed
Send HEAD frame...
len:    14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba    ]
len:    14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba    ]
len:    14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba    ]
len:    14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba    ]
len:    14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba    ]
len:    14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba    ]
len:    14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba    ]
len:    14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba    ]
len:    14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba    ]
len:    14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba    ]
len:    14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba    ]
len:    14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba    ]
len:    14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba    ]
len:    14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba    ]
len:    14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba    ]
failed
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
ret ack      :    0x00 
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
len:    1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14    ... ]
failed
len:    1029 write : [ da 02 fd 70 82 11 20 00 3f 00 00 00 00 00 00 7d 00 00 00 70    ... ]
len:    1029 write : [ da 02 fd 70 82 11 20 00 3f 00 00 00 00 00 00 7d 00 00 00 70    ... ]
len:    1029 write : [ da 02 fd 70 82 11 20 00 3f 00 00 00 00 00 00 7d 00 00 00 70    ... ]
len:    1029 write : [ da 02 fd 70 82 11 20 00 3f 00 00 00 00 00 00 7d 00 00 00 70    ... ]
len:    1029 write : [ da 02 fd 70 82 11 20 00 3f 00 00 00 00 00 00 7d 00 00 00 70    ... ]
len:    1029 write : [ da 02 fd 70 82 11 20 00 3f 00 00 00 00 00 00 7d 00 00 00 70    ... ]
len:    1029 write : [ da 02 fd 70 82 11 20 00 3f 00 00 00 00 00 00 7d 00 00 00 70    ... ]
len:    1029 write : [ da 02 fd 70 82 11 20 00 3f 00 00 00 00 00 00 7d 00 00 00 70    ... ]
len:    1029 write : [ da 02 fd 70 82 11 20 00 3f 00 00 00 00 00 00 7d 00 00 00 70    ... ]
len:    1029 write : [ da 02 fd 70 82 11 20 00 3f 00 00 00 00 00 00 7d 00 00 00 70    ... ]
len:    1029 write : [ da 02 fd 70 82 11 20 00 3f 00 00 00 00 00 00 7d 00 00 00 70    ... ]
len:    1029 write : [ da 02 fd 70 82 11 20 00 3f 00 00 00 00 00 00 7d 00 00 00 70    ... ]
len:    1029 write : [ da 02 fd 70 82 11 20 00 3f 00 00 00 00 00 00 7d 00 00 00 70    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
len:    1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c    ... ]
^Z

while on linux the answers 0xaa come (ack):

$ ./burn --debug --chip hi3518ev200 --file=u-boot-hi3518ev200-universal.bin --break
Trying open /dev/ttyUSB0

Welcome to boot-mode

{'name': 'hi3516cv200', 'DDRSTEP0': [4, 224, 45, 229, 36, 0, 159, 229, 36, 16, 159, 229, 0, 16, 128, 229, 32, 0, 159, 229, 32, 16, 159, 229, 4, 16, 128, 228, 0, 224, 128, 229, 4, 240, 157, 228, 239, 190, 173, 222, 239, 190, 173, 222, 239, 190, 173, 222, 60, 1, 5, 32, 120, 86, 52, 18, 64, 1, 5, 32, 117, 106, 105, 122], 'ADDRESS': ['4013000', '4010500', '0x81000000'], 'FILELEN': ['040', '0x3b00'], 'STEPLEN': ['040', '060']}
Sending u-boot-hi3518ev200-universal.bin ...
Send DDRSTEP frame...
Send HEAD frame...
len:  14 write : [ fe 00 ff 01 00 00 00 40 04 01 30 00 51 9c  ]
ret ack   :  0xaa 
len:  69 write : [ da 01 fe 04 e0 2d e5 24 00 9f e5 24 10 9f e5 00 10 80 e5 20  ... ]
ret ack   :  0xaa 
Send TAIL frame...
len:  5 write : [ ed 02 fd ba b0  ]
ret ack   :  0xaa 
Send HEAD frame...
len:  14 write : [ fe 00 ff 01 00 00 3b 00 04 01 05 00 56 ba  ]
ret ack   :  0xaa 
len:  1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 02 fd 70 82 11 20 00 3f 00 00 00 00 00 00 7d 00 00 00 70  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 04 fb 44 00 11 20 00 10 00 01 00 00 00 00 fd 00 00 00 48  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 06 f9 48 00 8d e2 34 50 8d e2 0e 10 a0 e1 0f 00 85 e8 0d  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 07 f8 20 a1 07 00 00 00 05 20 a0 86 01 00 02 00 52 e3 13  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 08 f7 0a 30 a0 e1 07 10 a0 e1 09 00 a0 e1 01 50 85 e2 83  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 09 f6 10 d0 8d e2 f0 8e bd e8 38 20 9d e5 34 10 9d e5 0c  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 0a f5 01 00 7c e3 6a ff ff 1a 09 91 84 e0 14 b0 89 e5 94  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 0b f4 00 00 05 20 50 c0 90 e5 ac c1 a0 e1 06 c0 0c e2 04  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 0c f3 00 00 54 e3 18 00 00 1a 14 10 9d e5 70 30 91 e5 01  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 0d f2 a0 30 81 e5 ea ff ff 0a 8f 3f 81 e2 20 c0 8d e2 00  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 0e f1 1c 11 72 80 02 22 a0 e3 04 10 92 e5 08 30 9f e5 00  ... ]
ret ack   :  0xaa 
len:  773 write : [ da 0f f0 04 30 90 e5 0c 20 90 e5 00 40 a0 e1 02 00 53 e1 09  ... ]
ret ack   :  0xaa 
Send TAIL frame...
len:  5 write : [ ed 10 ef ed d2  ]
ret ack   :  0xaa 
Send HEAD frame...
len:  14 write : [ fe 00 ff 01 00 02 11 1c 81 00 00 00 a3 9a  ]
len:  14 write : [ fe 00 ff 01 00 02 11 1c 81 00 00 00 a3 9a  ]
len:  14 write : [ fe 00 ff 01 00 02 11 1c 81 00 00 00 a3 9a  ]
len:  14 write : [ fe 00 ff 01 00 02 11 1c 81 00 00 00 a3 9a  ]
len:  14 write : [ fe 00 ff 01 00 02 11 1c 81 00 00 00 a3 9a  ]
ret ack   :  0xaa 
len:  1029 write : [ da 01 fe 17 04 00 ea 14 f0 9f e5 14 f0 9f e5 14 f0 9f e5 14  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 02 fd 70 82 11 20 00 3f 00 00 00 00 00 00 7d 00 00 00 70  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 03 fc d8 83 11 20 00 00 00 00 00 00 00 00 fd 00 00 00 1c  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 04 fb 44 00 11 20 00 10 00 01 00 00 00 00 fd 00 00 00 48  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 05 fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 06 f9 48 00 8d e2 34 50 8d e2 0e 10 a0 e1 0f 00 85 e8 0d  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 07 f8 20 a1 07 00 00 00 05 20 a0 86 01 00 02 00 52 e3 13  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 08 f7 0a 30 a0 e1 07 10 a0 e1 09 00 a0 e1 01 50 85 e2 83  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 09 f6 10 d0 8d e2 f0 8e bd e8 38 20 9d e5 34 10 9d e5 0c  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 0a f5 01 00 7c e3 6a ff ff 1a 09 91 84 e0 14 b0 89 e5 94  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 0b f4 00 00 05 20 50 c0 90 e5 ac c1 a0 e1 06 c0 0c e2 04  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 0c f3 00 00 54 e3 18 00 00 1a 14 10 9d e5 70 30 91 e5 01  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 0d f2 a0 30 81 e5 ea ff ff 0a 8f 3f 81 e2 20 c0 8d e2 00  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 0e f1 1c 11 72 80 02 22 a0 e3 04 10 92 e5 08 30 9f e5 00  ... ]
ret ack   :  0xaa 
len:  1029 write : [ da 0f f0 04 30 90 e5 0c 20 90 e5 00 40 a0 e1 02 00 53 e1 09  ... ]
ret ack   :  0xaa

I have tried with different drivers: native and from ftdi232 manufacturer.

Последовательность init-boot

Две камеры: gk7205v200. Обе отвечают по uart.
В скрипт burn добавил вывод последовательности для доступа к boot
def init_bootmode(self):
i = 0
counter = 0
while i < 30:
in_bin = self.s.read(1)
print(in_bin) <-- Вот этот вывод

Вывод первой камеры:

Все ок!

Вывод второй камеры:

Последовательность камера не выдает и соответственно не загружает в память образ. Встречалась ли ранее такая проблема?

unlock gk7205v300

I used burn to flash the full openipc firmware image using the precompiled instructions found on the website. When I enter reset it goes back to the old bootloader which is password locked. The flash does not seem to work no matter what I do. I even tried installing only the openipc u-boot image.

Cannot flash HI3516ERBCV300 (hi3516ev300)

After flashing the precompiled OpenIPC Firmware via preinstalled U-Boot/TFTP, the camera was bricked. I Got only spaces on UART, so i try the burn-Utility.

But it failed on the precompiled-uBoot binaries (u-boot-hi3516ev300-universal.bin).

./burn --chip hi3516ev200 --file=./u-boot/u-boot-hi3516ev300-universal.bin --port /dev/ttyUSB0 ; minicom -b 115200 -D /dev/ttyUSB0
Trying open /dev/ttyUSB0
Welcome to boot-mode

{'name': 'hi3516ev200', 'DDRSTEP0': [4, 224, 45, 229, 36, 0, 159, 229, 36, 16, 159, 229, 0, 16, 128, 229, 32, 0, 159, 229, 32, 16, 159, 229, 4, 16, 128, 228, 0, 224, 128, 229, 4, 240, 157, 228, 239, 190, 173, 222, 239, 190, 173, 222, 239, 190, 173, 222, 60, 1, 2, 18, 120, 86, 52, 18, 64, 1, 2, 18, 117, 106, 105, 122], 'ADDRESS': ['0x04013000', '0x04010500', '0x41000000'], 'FILELEN': ['0x0040', '0x6000'], 'STEPLEN': ['0x0040', '0x0080']}
Sending ./u-boot/u-boot-hi3516ev300-universal.bin ...
Send DDRSTEP frame...
Send HEAD frame...
Send TAIL frame...
Send HEAD frame...
Send DATA frame[====================================================================================]24576 of 24576
Send TAIL frame...
Send HEAD frame...
failed
failedATA frame[                                                                                       ]0 of 236183
failed
failed
failedATA frame[=                                                                                   ]3072 of 236183

Only the Backup-File from the Device doesnt fail, but stuck after reset.

SPI Nor total size: 8MB
NAND:  0 MiB
In:    serial
Out:   serial
Err:   serial
Net:   eth0
Warning: eth0 (eth0) using random MAC address - 22:a4:2a:ba:48:ba

start download process.
* STUCKED HERE *

Tried multiple UART Adapters.
any Ideas? Thanks.

attached the original firmware bootlog:


Time is                          


System startup

Uncompress Ok!

U-Boot 2016.11 (May 31 2019 - 16:25:56 +0800)hi3516ev300

Relocation Offset is: 0775f000
Relocating to 47f5f000, new gd at 47f1eef0, sp at 47f1eed0
SPI Nor:  Check Flash Memory Controller v100 ... Found
SPI Nor ID Table Version 1.0
SPI Nor(cs 0) ID: 0x68 0x40 0x17
Block:64KB Chip:8MB Name:"BY25Q64AS"
SPI Nor total size: 8MB
NAND:  0 MiB
In:    serial
Out:   serial
Err:   serial
Net:   eth0
Hit any key to stop autoboot:  0 
device 0 offset 0x50000, size 0x1d0000

SF: 1900544 bytes @ 0x50000 Read: OK
## Booting kernel from Legacy Image at 42000000 ...
   Image Name:   Linux-4.9.37
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    1899946 Bytes = 1.8 MiB
   Load Address: 40008000
   Entry Point:  40008000
   Loading Kernel Image ... OK

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.9.37 ([email protected]) (gcc version 6.3.0 (HC&C V1R3C00SPC200B005_20190606) ) #1 Fri Jan 17 15:33:20 CST 2020
[    0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c53c7d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] OF: fdt:Machine model: Hisilicon HI3516EV300 DEMO Board
[    0.000000] Memory policy: Data cache writeback
[    0.000000] CPU: All CPU(s) started in SVC mode.
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 11176
[    0.000000] Kernel command line: mem=44M console=ttyAMA0,115200 root=/dev/mtdblock2 rootfstype=squashfs mtdparts=hi_sfc:320K(boot),1856K(kernel),1024K(rootfs),384K(config),4608K(data)
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Memory: 39236K/45056K available (3831K kernel code, 129K rwdata, 996K rodata, 148K init, 178K bss, 5820K reserved, 0K cma-reserved)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xc3000000 - 0xff800000   ( 968 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xc2c00000   (  44 MB)
[    0.000000]     modules : 0xbf000000 - 0xc0000000   (  16 MB)
[    0.000000]       .text : 0xc0008000 - 0xc03c6088   (3833 kB)
[    0.000000]       .init : 0xc04c1000 - 0xc04e6000   ( 148 kB)
[    0.000000]       .data : 0xc04e6000 - 0xc0506460   ( 130 kB)
[    0.000000]        .bss : 0xc0506460 - 0xc0532d18   ( 179 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] Gic dist init...
[    0.000000] arm_arch_timer: Architected cp15 timer(s) running at 50.00MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xb8812736b, max_idle_ns: 440795202655 ns
[    0.000006] sched_clock: 56 bits at 50MHz, resolution 20ns, wraps every 4398046511100ns
[    0.000018] Switching to timer-based delay loop, resolution 20ns
[    0.000132] clocksource: arm,sp804: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 637086815595 ns
[    0.000164] Failed to initialize '/soc/amba/dual_timer@12001000': -22
[    0.000412] Console: colour dummy device 80x30
[    0.000434] Calibrating delay loop (skipped), value calculated using timer frequency.. 100.00 BogoMIPS (lpj=500000)
[    0.000445] pid_max: default: 32768 minimum: 301
[    0.000536] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000547] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.001104] CPU: Testing write buffer coherency: ok
[    0.001326] Setting up static identity map for 0x40008200 - 0x40008258
[    0.005964] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
[    0.006199] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.006224] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.006310] pinctrl core: initialized pinctrl subsystem
[    0.006633] NET: Registered protocol family 16
[    0.006920] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.008050] Serial: AMBA PL011 UART driver
[    0.010097] 12040000.uart: ttyAMA0 at MMIO 0x12040000 (irq = 22, base_baud = 0) is a PL011 rev2
[    0.335566] console [ttyAMA0] enabled
[    0.339911] 12041000.uart: ttyAMA1 at MMIO 0x12041000 (irq = 23, base_baud = 0) is a PL011 rev2
[    0.349231] 12042000.uart: ttyAMA2 at MMIO 0x12042000 (irq = 24, base_baud = 0) is a PL011 rev2
[    0.381182] ssp-pl022 12070000.spi: ARM PL022 driver, device ID: 0x00800022
[    0.388175] ssp-pl022 12070000.spi: mapped registers from 0x12070000 to c3077000
[    0.396678] ssp-pl022 12071000.spi: ARM PL022 driver, device ID: 0x00800022
[    0.403684] ssp-pl022 12071000.spi: mapped registers from 0x12071000 to c307b000
[    0.412718] usbcore: registered new interface driver usbfs
[    0.418276] usbcore: registered new interface driver hub
[    0.423678] usbcore: registered new device driver usb
[    0.431595] clocksource: Switched to clocksource arch_sys_counter
[    0.445150] NET: Registered protocol family 2
[    0.450119] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.457128] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.463494] TCP: Hash tables configured (established 1024 bind 1024)
[    0.469894] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.475746] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.482170] NET: Registered protocol family 1
[    0.491919] RPC: Registered named UNIX socket transport module.
[    0.497840] RPC: Registered udp transport module.
[    0.502561] RPC: Registered tcp transport module.
[    0.507256] RPC: Registered tcp NFSv4.1 backchannel transport module.
[    0.515184] workingset: timestamp_bits=30 max_order=14 bucket_order=0
[    0.530029] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.536238] exFAT: Version 1.2.9
[    0.543707] jffs2: version 2.2 (NAND) (ZLIB) (RTIME) (c) 2001-2006 Red Hat, Inc.
[    0.555619] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 252)
[    0.563043] io scheduler noop registered
[    0.566959] io scheduler deadline registered (default)
[    0.572315] io scheduler cfq registered
[    0.577700] pl061_gpio 120b0000.gpio_chip: PL061 GPIO chip @0x120b0000 registered
[    0.586011] pl061_gpio 120b1000.gpio_chip: PL061 GPIO chip @0x120b1000 registered
[    0.594286] pl061_gpio 120b2000.gpio_chip: PL061 GPIO chip @0x120b2000 registered
[    0.602578] pl061_gpio 120b3000.gpio_chip: PL061 GPIO chip @0x120b3000 registered
[    0.610821] pl061_gpio 120b4000.gpio_chip: PL061 GPIO chip @0x120b4000 registered
[    0.619064] pl061_gpio 120b5000.gpio_chip: PL061 GPIO chip @0x120b5000 registered
[    0.627288] pl061_gpio 120b6000.gpio_chip: PL061 GPIO chip @0x120b6000 registered
[    0.635522] pl061_gpio 120b7000.gpio_chip: PL061 GPIO chip @0x120b7000 registered
[    0.643755] pl061_gpio 120b8000.gpio_chip: PL061 GPIO chip @0x120b8000 registered
[    0.651996] pl061_gpio 120b9000.gpio_chip: PL061 GPIO chip @0x120b9000 registered
[    0.675415] brd: module loaded
[    0.679492] hisi-sfc hisi_spi_nor.0: SPI Nor ID Table Version 1.2
[    0.685643] hisi-sfc hisi_spi_nor.0: The ID: 0x68 isn't in the BP table, Current device can't not protect
[    0.695219] hisi-sfc hisi_spi_nor.0: by25q64as (Chipsize 8 Mbytes, Blocksize 64KiB)
[    0.702892] 5 cmdlinepart partitions found on MTD device hi_sfc
[    0.708806] 5 cmdlinepart partitions found on MTD device hi_sfc
[    0.714734] Creating 5 MTD partitions on "hi_sfc":
[    0.719524] 0x000000000000-0x000000050000 : "boot"
[    0.726202] 0x000000050000-0x000000220000 : "kernel"
[    0.732525] 0x000000220000-0x000000320000 : "rootfs"
[    0.738831] 0x000000320000-0x000000380000 : "config"
[    0.745124] 0x000000380000-0x000000800000 : "data"
[    0.806944] FEPHY:addr=1, la_am=0xc, ldo_am=0x5, r_tuning=0x1b
[    0.812935] libphy: hisi_femac_mii_bus: probed
[    0.818266] libphy: Fixed MDIO Bus: probed
[    0.968222] Generic PHY 10041100.mdio:01: attached PHY driver [Generic PHY] (mii_bus:phy_addr=10041100.mdio:01, irq=-1)
[    0.979011] phy_id=0x20669903, phy_mode=mii
[    0.983208] hisi-femac 10040000.ethernet: using random MAC address f6:1b:6d:53:b7:21
[    0.996047] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    1.001568] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1
[    1.009458] xhci-hcd xhci-hcd.0.auto: hcc params 0x0220fe6c hci version 0x110 quirks 0x20010010
[    1.018210] xhci-hcd xhci-hcd.0.auto: irq 136, io mem 0x10030000
[    1.025696] hub 1-0:1.0: USB hub found
[    1.029681] hub 1-0:1.0: 1 port detected
[    1.034078] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    1.039579] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2
[    1.047321] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    1.056218] hub 2-0:1.0: USB hub found
[    1.060205] hub 2-0:1.0: hub can't support USB3.0
[    1.065253] i2c /dev entries driver
[    1.069243] hibvt-i2c 12060000.i2c: hibvt-i2c0@100000hz registered
[    1.075831] hibvt-i2c 12061000.i2c: hibvt-i2c1@100000hz registered
[    1.082395] hibvt-i2c 12062000.i2c: hibvt-i2c2@100000hz registered
[    1.089132] sdhci: Secure Digital Host Controller Interface driver
[    1.095339] sdhci: Copyright(c) Pierre Ossman
[    1.099689] sdhci-pltfm: SDHCI platform and OF driver helper
[    1.161610] mmc0: SDHCI controller on 10010000.sdhci [10010000.sdhci] using ADMA in legacy mode
[    1.241608] mmc1: SDHCI controller on 10020000.sdhci [10020000.sdhci] using ADMA in legacy mode
[    1.250690] Initializing XFRM netlink socket
[    1.255002] NET: Registered protocol family 17
[    1.259467] NET: Registered protocol family 15
[    1.284971] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[    1.292356] Freeing unused kernel memory: 148K (c04c1000 - c04e6000)
[    1.298702] This architecture does not have kernel memory protection.

            _ _ _ _ _ _ _ _ _ _ _ _
            \  _  _   _  _ _ ___
            / /__/ \ |_/
           / __   /  -  _ ___
          / /  / /  / /
  _ _ _ _/ /  /  \_/  \_ ______
___________\___\__________________

[RCS]: /etc/init.d/S00devs
mount ro fs
mount rw file system
[RCS]: /etc/init.d/S01udev
[RCS]: /etc/init.d/S02moutfs
[    2.475113] random: S02moutfs: uninitialized urandom read (4 bytes read)
mount param fs dir.
param fs mounted.
mount app fs.
app fs mounted.
[RCS]: /etc/init.d/S80network
[RCS]: /etc/init.d/S90decompress
Mount squashfs or nfs files done !
/
[RCS]: /etc/init.d/S91update
ls: /dev/mmcblk*: No such file or directory
rmdir: '/tmp/mmc': No such file or directory
*** Board tools : ver0.0.1_20121120 *** 
[debug]: {source/utils/cmd[    2.785548] hibvt_rtc 120e0000.rtc: IO err.
shell.c:168}cmdstr:himm
0x12010[    2.791655] hibvt_rtc 120e0000.rtc: rtc core: registered 120e0000.rtc as rtc0
[    2.801331] hibvt_rtc 120e0000.rtc: RTC driver for hibvt enabled

[END]
[    2.817408] hi_gpio: loading out-of-tree module taints kernel.

ipc login: [    2.824112] ===kernel=== gpio driver init finished!
*** Board tools : ver0.0.1_20121120 *** 
[debug]: {source/utils/cmdshell.c:168}cmdstr:himm
0x100c0008: 0x00001D00 --> 0x00001D20 
[END]
target gpio:group:0,bit:0
set 1:1
target gpio:group:0,bit:0
write 1:1
*** Board tools : ver0.0.1_20121120 *** 
[debug]: {source/utils/cmdshell.c:168}cmdstr:himm
0x112c0028: 0x00001000 --> 0x00001001 
[END]
*** Board tools : ver0.0.1_20121120 *** 
[debug]: {source/utils/cmdshell.c:168}cmdstr:himm
0x112C002C: 0x00001000 --> 0x00001000 
[END]
target gpio:group:5,bit:5
set 46:1
target gpio:group:5,bit:5
write 46:0
*** Board tools : ver0.0.1_20121120 *** 
[debug]: {source/utils/cmdshell.c:168}cmdstr:himm
0x100c000c: 0x00001000 --> 0x00001002 
[END]
*** Board tools : ver0.0.1_20121120 *** 
[debug]: {source/utils/cmdshell.c:168}cmdstr:himm
0x100c0010: 0x00001000 --> 0x00001002 
[END]
mkdir: can't create directory '/usr/share/udhcpc': File exists
cp: can't stat '/usr/share/udhcpc/default.script': Not a directory
=================== usb up ====================
target gpio:group:0,bit:0
write 1:0
=================== sensor up ===================
target gpio:group:5,bit:5
write 46:1
=================== check sensor type ===================
*** Board tools : ver0.0.1_20121120 *** 
[debug]: {source/utils/cmdshell.c:168}cmdstr:himm
0x112C0030: 0x00001C00 --> 0x00001C01 
[END]
*** Board tools : ver0.0.1_20121120 *** 
[debug]: {source/utils/cm[    3.187701] hibvt-i2c 12060000.i2c: wait idle abort!, RIS: 0x611
dshell.c:168}cmdstr:himm
0x112C0034: 0x00001C00 --> 0x00001C01 
[END]
[    3.207793] hibvt-i2c 12060000.i2c: wait idle abort!, RIS: 0x611
[    3.226638] hibvt-i2c 12060000.i2c: wait idle abort!, RIS: 0x611
[    3.245478] hibvt-i2c 12060000.i2c: wait idle abort!, RIS: 0x611
[    3.264458] hibvt-i2c 12060000.i2c: wait idle abort!, RIS: 0x611
[    3.283185] hibvt-i2c 12060000.i2c: wait idle abort!, RIS: 0x611
[    3.302271] hibvt-i2c 12060000.i2c: wait idle abort!, RIS: 0x611
[    3.320804] hibvt-i2c 12060000.i2c: wait idle abort!, RIS: 0x611
[    3.339698] hibvt-i2c 12060000.i2c: wait idle abort!, RIS: 0x611
[    3.358298] hibvt-i2c 12060000.i2c: wait idle abort!, RIS: 0x611
[    3.377393] hibvt-i2c 12060000.i2c: wait idle abort!, RIS: 0x611
[    3.396030] hibvt-i2c 12060000.i2c: wait idle abort!, RIS: 0x611
Got Sensor Type : K05
=================== check sensor type done  ====================
devid=V6202IR-K05
./load3516ev300 -i -sensor k05
mmz_start: 0x42c00000, mmz_size: 84M
mem=44
os_mem_size=44
REBOOT = 0
[    3.553411] ======online_flag = 0, cmos_yuv_flag = 0, sensor=k05, chip=hi3516ev300, board=demo======
[    3.562572] sysconfig init success!
[    3.573850] Module himedia: init ok
[    3.577341] Hisilicon Media Memory Zone Manager
[    3.582039] hi_osal 1.0 init success!
[    3.621386] register dev
[    3.624235] Hisilicon Watchdog Timer: 0.01 initialized. default_margin=60 sec (nodeamon= 1)
[    3.632600] hiwtdg init ok. ver=Jul 27 2019, 10:12:47.
[    3.677326] hi3516ev200_base: module license 'Proprietary' taints kernel.
[    3.684151] Disabling lock debugging due to kernel taint
[    3.735773] load sys.ko for Hi3516EV200...OK!
[    3.780184] load region.ko for Hi3516EV200...OK!
[    3.847524] load vgs.ko for Hi3516EV200...OK!
[    3.975185] load vi.ko for Hi3516EV200...OK !
[    4.035226] ISP Mod init!
[    4.161971] load vpss.ko for Hi3516EV200...OK!
[    4.172263] load chnl.ko for Hi3516EV200...OK!
[    4.183830] load vedu.ko for Hi3516EV200...OK!
[    4.235180] load rc.ko for Hi3516EV200...OK!
[    4.334541] load venc.ko for Hi3516EV200...OK!
[    4.393641] load h264e.ko for Hi3516EV200...OK!
[    4.463669] load h265e.ko for Hi3516EV200...OK!
[    4.493819] load jpege.ko for Hi3516EV200...OK!
[    4.581834] load ive.ko for Hi3516EV200...OK!
[    4.652710] hisi-femac 10040000.ethernet eth0: Link is Up - 100Mbps/Full - flow control off
insert audio
[    5.162364] load mipi_rx driver successful!
[    5.175666] hi_lsadc init ok. ver=Aug 10 2020, 11:18:36.
*** Board tools : ver0.0.1_20121120 *** 
[debug]: {source/utils/cmdshell.c:168}cmdstr:himm
0x112C0030: 0x00001D01 --> 0x00001C01 
[END]
*** Board tools : ver0.0.1_20121120 *** 
[debug]: {source/utils/cmdshell.c:168}cmdstr:himm
0x112C0034: 0x00001D01 --> 0x00001C01 
[END]
/
=================== check usbdev inserted ===================
[    5.226068] autorun.sh (857): drop_caches: 3
g_dualSupport 0

hi3518e = 0, hi3516a_board = 0, hi3518ev200 = 0, hi3516cv300 = 0, hi3519V101 = 0, hi3516ev200 = 2
gk7102 = 0
gk7101 = 0
hi3516cv100 = 0
hi3516cv500 = 0
mstar = 0
isvptx0 = 0
ICEtype = 0
DeviceTypeOffset = 0

device type is V6202IR-K05
_HisiTypeCheck multiple = 0
_HisiTypeCheck g_Product_Type: 0 g_Product_Ind[    5.364482] hisi-femac 10040000.ethernet eth0: Link is Up - 100Mbps/Full - flow control off
ex: 0 Hisi_Type: 0
shared memory size 16
shared memory id:0
Open hi_i2c error!
check /mnt/flash/data/NetInfo info success .
dhcp enable = 1
dhcp enable
[dhcp]  FunCheckNetstat_link ret ====== 0!
udhcpc: started, v1.26.2
Setting IP address 0.0.0.0 on eth0
udhcpc: sending discover
udhcpc: sending select for 192.168.1.117
udhcpc: lease of 192.168.1.117 obtained, lease time 532
Setting IP address 192.168.1.117 on eth0
Deleting routers
route: SIOCDELRT: No such process
Adding router 192.168.1.1
Recreating /tmp/resolv.conf
 Adding DNS server 192.168.1.1
[Hank_udhcpc_action]  dhcp eth0 success
[Hank_udhcpc_action]  do udhcpc action over!
g_dualSupport 0

hi3518e = 0, hi3516a_board = 0, hi3518ev200 = 0, hi3516cv300 = 0, hi3519V101 = 0, hi3516ev200 = 2
gk7102 = 0
gk7101 = 0
hi3516cv100 = 0
hi3516cv500 = 0
mstar = 0
isvptx0 = 0
ICEtype = 0
DeviceTypeOffset = 0

device type is V6202IR-K05
ipc_dom type = 10, af_flag = 0, ir_out_mode 0 gSelfAlgType = 0 dzoom_enable = 0
get sensor K05
ipc_dom 10, vivpss_scaling_mode -1
SENSOR_TYPE 13, 2592 1944
minor 640 480,  mjpeg
sdk_app : hi3516ev200 = 2, h265[major,minor] = [1,1], ICR_TYPE = 0
AUDIO_CTRL -1, ICR_LED_CTRL -1, ICR_CAMERA_POS 69, ICR_CAMERA_NEG 71
2592x1944
profile[0] 0
profile[1] 0
vb[2] size 7558272 count 2
vb[3] size 7558272 count 3
vb[4] size 460800 count 2
vb[5] size 152064 count 1
vb[6] size 152064 count 1
[SAMPLE_COMM_VI_SetMipiAttr]-1849: ============= MipiDev 0, SetMipiAttr enWDRMode: 0
>> sensor_global_init()
<< sensor_global_init()
>> cmos_get_ae_default()
<< cmos_get_ae_default()
>> cmos_set_wdr_mode(): 0
[Func]:cmos_set_wdr_mode [Line]:971 [Info]:linear mode
<< cmos_set_wdr_mode()
>> cmos_set_image_mode(): u8ImgMode=0
>> cmos_get_isp_default()
<< cmos_get_isp_default()
>> cmos_get_ae_default()
<< cmos_get_ae_default()
>> cmos_fps_set(): f32Fps=15.000000, u8ImgMode=0, enWDRMode=0
<< cmos_fps_set(): f32Fps=15.000000, pstSnsState->u32FLStd=4000
[JXK05] Date: May 19 2020
[JXK05] Time: 22:55:23
>> sensor_init(): bInit=0, u8ImgMode=0
>> sensor_linear_5M15_init()
<< sensor_linear_5M15_init()
<< sensor_init()
mjpeg stVencChnAttr.stVencAttr.u32PicWidth === 2592 1944 
md_size 352x288 
audioEnable=1, audioFormat=1, audioInput=5, audioOutput 7, audioSample 8000
audio_set_enable audioEnable 1, audioFormat 1, audioSample 8000
AAC_MODULES 0
[SAMPLE_COMM_ISP_Thread]-408: ISP Dev 0 running !
md VpssGrp ==== 0,VpssChn ============ 2
>> cmos_fps_set(): f32Fps=15.000000, u8ImgMode=0, enWDRMode=0
<< cmos_fps_set(): f32Fps=15.000000, pstSnsState->u32FLStd=4000
process_client_request start
hisi chip 3516E200
g_dualSupport 0

hi3518e = 0, hi3516a_board = 0, hi3518ev200 = 0, hi3516cv300 = 0, hi3519V101 = 0, hi3516ev200 = 2[    8.371753] random: fast init done

gk7102 = 0
gk7101 = 0
hi3516cv100 = 0
hi3516cv500 = 0
mstar = 0
isvptx0 = 0
ICEtype = 0
DeviceTypeOffset = 0

default max pan 4000, tilt 1000
device type is V6202IR-K05
WIFI OFF

gSelfAlgType= 0 hisi_ir_flag= 0 gOnlyNetCtrl= 0

DeviceModel === IPC-E2B5000-DH
____gHardwareversion: 0
hwclock: RTC_RD_TIME: Device or resource busy
rtc: fail while hi3518_get_chip_time!
hwclock: RTC_RD_TIME: Device or resource busy
rtc: fail while hi3518_get_chip_time!
hwclock: RTC_RD_TIME: Device or resource busy
rtc: fail while hi3518_get_chip_time!

got time from RTC: 0
set pll 3276913
OTP check platform:hi3516ev300 .
OTP check OK !!!
== IR module will not be called in the device. ==
== [    8.980110] group number or bitnum invalid!
prepared zoom lens will not be used ==
== prepared zoom lens will not be used ==

=== get device_type:1, device_af:0, device_ir:0, lens_type:4 sensor_type:1 ===

Alarm_In_Num = 2 , Alarm_Out_Num = 1
ioctl: Operation not permitted
fail to read gpio:group0,bit-2
*** Board tools : ver0.0.1_20121120 *** 
[debug]: {source/utils/cmdshell.c:168}cmdstr:himm
0x112c0038: 0x00001C00 --> 0x00001D00 
[END]
*** Board tools : ver0.0.1_20121120 *** 
[debug]: {source/utils/cmdshell.c:168}cmdstr:himm
0x112c003c: 0x00001C00 --> 0x00001D00 
[END]
*** Board tools : ver0.0.1_20121120 *** 
[debug]: {source/utils/cmdshell.c:168}cmdstr:himm
0x112c0040: 0x00000501 --> 0x00001000 
[END]
output IO 41
input IO 52
input IO 51
hiapp audioEnable 1, audioFormat 1, audioInput 5, audioOutput 7, audioSampleRate 8000
get /mnt/flash/data/SysRebootInfo info failure .
get /mnt/flash/data/AFMoveInfo info failure .
default Zoomspeed 4, iMultiple 0
get /mnt/flash/data/AFMoveInfo info failure .
get /mnt/flash/data/MlsInfo info failure .
Fun:FunInitSystem Line:449 Initialize SysParamInit OK.
!!!!!!ntp timezone change :timezone=15  daylight=0
dhcp flg = 1
dhcp_enable = 1
DHCP enabled~~~~~~~~


++++ mask: 00ffffff ++++



++++ ip: 7501a8c0 ++++
------DDNS_config_params
set_setstat
ntpconfig : ip:time.windows.com
time: 23:59:00
 interval:24
enable:1
Fun:FunInitSystem Line:454 [NetParmInit] is OKOKOL.

****************************************
******Welcome to hankvision ipc webs******
****************************************

Action_Record_Set_ManualEnable : stop
======== we are going to init share buff ========
bufsize[0] 1048576
bufsize[1] 204800
bufsize[2] 1048576
hiapp max frame size [0]:1048576 [1]131072 [2]524288
Fun:FunInitSystem Line:465 [InitShBuf] is OKOKOL.


@@@@@@@@@@RS485 /dev/ttyAMA1 BaudRate=2@@@@@@@@@@@@@@@@@

Set Serial Speed : 9600
Fun:FunInitSystem Line:469 [Init_Usart] is OKOKOL.
NetAccess is 1
=========TH_RecvAN========
alarmserver bind OKOK!!!
======== Detect echo thread start ========
=========== NetReqProc thread start ===========

 video video servport==90
===== Thread_ShareFD thread create =====
eth0 ok, ntp sync now !
        ======== msgmanage thread start ========

        ======== msgmanage thread start ========
hisi test : mw_server pid = 1149

====== we are going to init af params ======
===>>>sdk_app set multiple: 0
===>>>sdk_app set zoom speed: 4
===>>>sdk_app set focus speed: 4

====== we are going to init image ======
to Get DRC attr!!

====== infrared: change to daytime mode. ======


=== awb_mode:0 ===
======>>>hiapp set mode: 1
======>>>MW_INFRARED_OFF icr_control_mode: 2

====== we are going to init encode ======
DevicePixel 5038848, Resolution 33

=========in init_video_params: Stream 0 :resolution h:1944 w:2592

=========in init_video_params: Stream 1 :resolution h:480 w:640

=========in init_video_params: Stream 2 :resolution h:480 w:640
err:can not find right section name
clean up cache!
== app head == symbol:STZ, msg_length 4
== app recv from mw == symbol:, result:-1
err:can not find right section name
clean up cache!
== app head == symbol:SDN, msg_length 4
== app recv from mw == symbol:, result:-1
Time is invalid !
err:can not find right section name
clean up cache!
err:can not find right section name
clean up cache!
== app head == symbol:SOSD, msg_length 156
== app recv from mw == symbol:, result:-1
== app head == symbol:SOSD, msg_length 156
== app recv from mw == symbol:, result:-1
Thread_status_check creat ok!
--------ONIVF-------start---
=================== Thread IR start! ===================
mkdir: can't create directory '/var/tmp': File exists
*** Board tools : ver0.0.1_20121120 *** 
[debug]: {source/utils/cmdshell.c:168}cmdstr:himm
0x120c0020: 0x00001D00 --> 0x00001D02 
[END]
In Func initsocket(): socket OK!!!

---------webs:  listen port=80 ---------
device type is V6202IR-K05
g_dualSupport 0

hi3518e = 0, hi3516a_board = 0, hi3518ev200 = 0, hi3516cv300 = 0, hi3519V101 = 0, hi3516ev200 = 2
gk7102 = 0
gk7101 = 0
hi3516cv100 = 0
hi3516cv500 = 0
mstar = 0
isvptx0 = 0
ICEtype = 0
DeviceTypeOffset = 0



==== >> INIT_PTZPresetList userMode: 1 << ====

TH_AlarmProcess_API creat ok!
_ReadAlarmInCfg fopen /mnt/flash/data/hkalarmincfg failure.
_ReadAlarmInCfgV30 fopen /mnt/flash/data/hkalarmincfgv30 failure.
FunInit_Streaminfo audio is on
FunSetAudioType : PCMA
*INFO*rtsp init main con:3, sub con:5
create hk_search_thread here and gBootTimeString: 2013-08-05 02:00:00
wait
===========>>>>>> HK_NetReq_Thread start <<<<<<===========

FunInitTCPListenPort RtspPort = 554,HttpPort = 8080

        ======== ONVIF msgmanage thread start ========
cnt 4, buff_size 1048576
======>>>change icr_control_mode: 3
senconds = 3
***set c2bwthr = 20****
***set bw2cthr = 70****
[Func]:HI_MPI_ISP_SetMeshShadingGainLutAttr [Line]:3234 [Info]:Invalid block size u32XSum = 600, u32YSum = 450!
mw_api_err-mw_img_set_LSC_api:4697 set table for lsc failed!!
set stream 0 resolution: 2592 1944 to 2592 1944
vbr enRcMode 12, u32MaxBitRate 2560 
u32Gop 30, u32StatTime 6, u32SrcFrmRate 15, fr32DstFrmRate 5

stream 0 , VBR framerate : In 15, Fps 15, gop 30, statTime 2
set stream 1 resolution: 640 480 to 640 480
vbr enRcMode 12, u32MaxBitRate 512 
u32Gop 30, u32StatTime 6, u32SrcFrmRate 15, fr32DstFrmRate 5

stream 1 , VBR framerate : In 15, Fps 15, gop 30, statTime 2
set stream 2 resolution: 2592 1944 to 640 480
[mw_vpssBandvenc_dynamic]--[1152] SAMPLE_COMM_VPSS_Bind_VENC Bind chn 1
mw_table_element_get error 
______sdk_app: enable = 1 sensitivity = 50, thr 220

@@@@@@@@ Init XM_Global_Info @@@@@@@@
+++++++++++++++ddns start++++++++++++++
Time is invalid !
Create thread <cameramode_task> successful !
Start_Record_new !! 
Debug [start_closeli_module,4979]:start_closeli_module ============================
Debug [hk_closeli_cfg_init,4600]:hk_closeli_init info:   HH011901020000207300NO 00:2a:2a:3b:99:8f
Error [hk_closeli_ConfigAudioPush,321]:fopen /mnt/flash/productinfo/audiopush.cfg failed!
Debug [hk_closeli_cfg_init,4602]:pushAudio ===== 1
Debug [hk_closeli_stream_init,4370]:hk_closeli_stream_init ===================
Debug [hk_closeli_P2P_init,4405]:dev net_lint_flag === 2 wifiConnectflag == 0  dev g_4g_connect_flag ==== 0

=========== XM_Thread_NetReq_Process thread start ===========
socket connection successful 20 

 video video servport==34567
======== Search Device thread start ========
!!!!!! thread ntp_start_thread create sucessfully !!!!!!
== app head == symbol:SBRI, msg_length 4
== app recv from mw == symbol:SOSD, result:0
rtp_sink_thrd buff_size = 1048576
new rec module start
ONVIF Starting thread 0 
ONVIF Starting thread 1 
ONVIF Starting thread 2 
ONVIF Starting thread 3 
ONVIF Starting thread 4 
== app head == symbol:SCON, msg_length 4
== app recv from mw == symbol:SBRI, result:0
== app head == symbol:SSAT, msg_length 4
== app recv from mw == symbol:SCON, result:0
== app head == symbol:SSHA, msg_length 4
== app recv from mw == symbol:SSAT, result:0



#####################socfd:6,MjpegSessionID:-1
== app head == symbol:SHUE, msg_length 4
== app recv from mw == symbol:SSHA, result:0
== app head == symbol:SMCTF, msg_length 4
== app recv from mw == symbol:SHUE, result:0
[xml_config_init, 192]
Debug [hk_closeli_set_device_info,3666]:tBuf ======== ifconfig eth0 hw ether 00:2a:2a:3b:99:8f
Debug [hk_closeli_set_device_info,3685]:sdk appVersions  === 1.0.2003 fw_version === 1.4.11.201127
Debug [hk_closeli_set_device_info,3707]:sdk product_module_id  ================ hh_hi3516ev200_8m_000
Debug [hk_closeli_set_device_feature,3725]:set device feature ... 
feature 258
feature 260
feature 259
feature 261
feature 262
feature 512
feature 513
feature 521
feature 523
feature 524
feature 525
feature 520
feature 540
feature 541
feature 514
feature 516
feature 568
feature 570
Debug [hk_closeli_set_callback,3860]:set closeli callback ... 
Debug [hk_closeli_P2P_init,4436]:gCloseli_devinfo.regStatus == 0
Debug [hk_closeli_P2P_init,4527]:hk_closeli_register_device regMode == 2
Debug [hk_closeli_register_device,3889]:mode == 2
Debug [hk_closeli_register_device,3897]:start closelicamera_start_register ret status ====== 0!
dhcp enable = 1
======== Detect echo thread start ========
HankBatchUpdateServer tcp serverIp:192.168.1.117        port:20203
wdt timeout 60
add [syslogd] to watchdog list.
add [sdk_app] to watchdog list.
add [hiapp] to watchdog list.
add [webs] to watchdog list.
mac_str ==== 002a2a3b998f serverIP ==== 192.168.1.117
hello send (1458) 

hello send finished

soap_serve_request----- soap->tag==d:Hello
HI_MPI_VPSS_GetGrpNRSParam return ret = 0xa0078003
set 3dnr param failed ret = 0xa0078003
md module start
DDNS_CloseClient-close client
DDNS_CloseClient-exec_buff:
recv_fd -----nr==288,iov[1].iov_len==4096,
wowo...funfun get a new client
----wowo====funfun....Thread_JPEGMULREQ_Send-1111111111--cmdlinelen==26
alarm_add_motion: START

@@@@@@ Justin test onviftopic = tns1:VideoSource/MotionAlarm @@@@@@

@@@@@@ Justin test onviftopic = tns1:RuleEngine/CellMotionDetector/Motion @@@@@@
el get alarm start, last_alarm_time 1375660815, alarm_status 0x2, tcur 1375660815
alarm start ! last_alarm_time 1375660815, tcur 1375660815
Time is invalid !
alarm_add_motion: STOP
Time is invalid !

@@@@@@ Justin test onviftopic = tns1:VideoSource/MotionAlarm @@@@@@

@@@@@@ Justin test onviftopic = tns1:RuleEngine/CellMotionDetector/Motion @@@@@@
Time is invalid !
Time is invalid !
Setting passed time: 1683568836
cur log num 124
log_notice, message 125 is system start!!

last_alarm_time 1375660821, alarm_hold_time 1, tcur 1683568836
alarm stop ! start time 1375660821, end time 1683568836
Debug [hk_closeli_cc_device_cb,1393]:cmd[52] invalid
ntp_check_time_from ntp6.aliyun.com ERROR

alarm_add_motion: START

@@@@@@ Justin test onviftopic = tns1:VideoSource/MotionAlarm @@@@@@

@@@@@@ Justin test onviftopic = tns1:RuleEngine/CellMotionDetector/Motion @@@@@@
cur log num 125
log_notice, message 126 is Get a motion alarm begin.

el get alarm start, last_alarm_time 1683568857, alarm_status 0x2, tcur 1683568857
alarm start ! last_alarm_time 1683568857, tcur 1683568857
[   54.895535] random: crng init done
flag A ! 
 GET /cgi/modeCallStatus?_=1683569867749 HTTP/1.1
Host: 192.168.1.117
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0
Accept: text/plain, */*; q=0.01
Accept-Language: de,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Authorization: Basic YWRtaW46YWRtaW4=
Connection: keep-alive
Referer: http://192.168.1.117/browse/top/roottop.asp?_=1683568605980
Cookie: dev=215; BSDdev=0; ICEtype=0; SU=admin; langCookie=de; jsLivePresetNo=0; jsLiveAutopanNo=0; jslivePatternNum=0; jsliveTourNum=0; playMode=NaN; jsPresetNum=0; jsAutopanNum=0; jsPatternNum=0


recv_fd -----nr==288,iov[1].iov_len==4096,
wowo...funfun get a new client
----wowo====funfun....Thread_JPEGMULREQ_Send-1111111111--cmdlinelen==26
alarm_add_motion: STOP

@@@@@@ Justin test onviftopic = tns1:VideoSource/MotionAlarm @@@@@@

@@@@@@ Justin test onviftopic = tns1:RuleEngine/CellMotionDetector/Motion @@@@@@
cur log num 126
log_notice, message 127 is Get a motion alarm end.

ntp_check_time_from time.windows.comcn.ntp.org.cn ERROR

last_alarm_time 1683568863, alarm_hold_time 1, tcur 1683568864
alarm stop ! start time 1683568863, end time 1683568864
alarm_add_motion: START

@@@@@@ Justin test onviftopic = tns1:VideoSource/MotionAlarm @@@@@@

@@@@@@ Justin test onviftopic = tns1:RuleEngine/CellMotionDetector/Motion @@@@@@
cur log num 127
log_notice, message 128 is Get a motion alarm begin.

el get alarm start, last_alarm_time 1683568874, alarm_status 0x2, tcur 1683568874
alarm start ! last_alarm_time 1683568874, tcur 1683568874
ntp_check_time_from us.ntp.org.cn ERROR

alarm_add_motion: STOP

@@@@@@ Justin test onviftopic = tns1:VideoSource/MotionAlarm @@@@@@

@@@@@@ Justin test onviftopic = tns1:RuleEngine/CellMotionDetector/Motion @@@@@@
cur log num 128
log_notice, message 129 is Get a motion alarm end.

last_alarm_time 1683568880, alarm_hold_time 1, tcur 1683568881
alarm stop ! start time 1683568880, end time 1683568881

Unlock gk7205v200

Is there special image to unlock gk7205v200?

Want to make full firmware backup before loading OpenIPC on it, but the bootloader is password-protected.