Firmware update of my IPC-Color4K-T180 from empiretech went terribly wrong. Not sure if this is a buggy firmware update, the firmware was downloaded from empiretech's website V3.140.0000000.32.R.250115, update was done as usual, camera never came back working. When botting ip, it picks up the IP 192.168.1.251 which I think is some sort of obscure recovery method for TFTP, then later it goes to 192.168.1.108. Dahua config tool cannot initialise it, web interface does not respond. I got a serial cable, and used the firmware empiretech sent me on the SD card and ran sdupgrade to flash all files that were supplied. camera came back alive. I was recommended then to flash the firmware from empiretech website once again, then it got bricked again.
I tried to flash is back using the same procedure as before. no luck
It seems the camera get stuck right here when booting:
I tried to flash is back using the same procedure as before. no luck
It seems the camera get stuck right here when booting:
Code:
CPU: 1 PID: 526 Comm: upTool Tainted: G O 4.19.132 #1
Hardware name: CHIPUP MDK-XS7320
[<c0211ef0>] (unwind_backtrace) from [<c020e330>] (show_stack+0x10/0x14)
[<c020e330>] (show_stack) from [<c076e608>] (dump_stack+0x94/0xa8)
[<c076e608>] (dump_stack) from [<c023be80>] (kernel_restart+0xc/0x58)
[<c023be80>] (kernel_restart) from [<c023be28>] (sys_reboot+0x1e0/0x1e8)
[<c023be28>] (sys_reboot) from [<c0201000>] (ret_fast_syscall+0x0/0x54)
Exception stack(0xc64e5fa8 to 0xc64e5ff0)
5fa0: 0001c678 00000000 fee1dead 28121969 01234567 00000000
5fc0: 0001c678 00000000 00012400 00000058 00000000 00000000 b6ff4000 bef5c514
5fe0: b6f0c4c0 bef5c50c 0001c66c b6f0c4e0
reboot: Restarting system
$Tch SpiNand
Load 0x00000080 to 0x00100000,size=30332
Key hash pass!
Imgsign pass
Jmp 0x00100000
Info: write leveling start
Info: write leveling done
Info: dqs gating start
Info: dqs gating done
Info: read train start
Info: bypass read train done
Info: write train start
ddr init done
simple ddr test
swap
ddr_clk: 599500
cpu_clk: 1000000
enc_clk: 400000
DDR32bit done!
B: Dec 25 2024 00:27:50
chip id is 0x0x7FB3804C
mac io keep 3.3v
PreImgHeaderBase = 0x0010FE78
SpiNand : Scan Uimg @0x00100000
use 2 plane to read
Load 0x00100040 to 0x12000000,size=227704
rdbuf 131072 131072
SMC_loadPartition ReadPage ret 0
SMC_init crc done, start_addr 0x00200000 size 0x00001688 crc 0x224AA6B1
SmcReadNandID id = 0x7F7F01C8
SMC_nandInit set ESMT F50L1G1LB, id 0x000000C8 0x00000001
SMC_init done
Jmp 0x12000000
DH-Boot ver001.001.001-svn16508 (Dec 25 2024 - 00:27:18 +0800)
SMC_init nand ESMT F50L1G1LB, id 0xc8 0x1
SMC_init done
NAND Flash Init.
SMC_getNandInfo nand ESMT F50L1G1LB
id=0xc8 1
id_cnt=2
spare_size=64
page_size=2048
page_cnt=64
blk_cnt=1024
plane_cnt=1
bits_per_cell=1
luns_per_target=1
ntargets=1
ecc_bitlen=1
ecc_perlen=512
ecc_addr=0xc0
ecc_bitmask=0x30
ecc_errmask=0x20
rx_width=4
tx_width=1