Помощь в восстановлении камеры 3516с v300

[almix2007]

Прощу помощи в восстановлении IP камеры на чипе hi3516c v300.
При подключении следующая информация:
hi3516cv300 System startup

Uncompress.......Ok


hi3516cv300 System startup


U-Boot 2010.06-svn (Apr 20 2017 - 19:16:36)

Check Flash Memory Controller v100 ... Found
SPI Nor(cs 0) ID: 0xef 0x40 0x17
spi_general_qe_enable(294): Error: Disable Quad failed! reg: 0x42
Block:64KB Chip:8MB Name:"W25Q64FV"
Spi is locked. lock address[0 => 0x800000]
SPI Nor total size: 8MB
MMC:
EMMC/MMC/SD controller initialization.
Card did not respond to voltage select!
No EMMC/MMC/SD device found !
In: serial
Out: serial
Err: serial
Hit any key to stop autoboot: 0
8192 KiB hi_fmc at 0:0 is now current device

srcAddr 0x83000000, dstAddr 0x82000000
created_inode 0x883e0200
find_squashfs_file: name bin, start_block 0, offset 2425, type 1
find_squashfs_file: name boot, start_block 0, offset 2521, type 1
read inode: name boot, sb 0, of 2521, type 1
find_squashfs_file: name uImage, start_block 0, offset 2457, type 2
read inode: name uImage, sb 0, of 2457, type 2
write_file: regular file, blocks 8
len 2024731
### FS load complete: 2024731 bytes loaded to 0x82000000
## Booting kernel from Legacy Image at 82000000 ...
Image Name: Linux-3.18.20
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 2024667 Bytes = 1.9 MiB
Load Address: 80008000
Entry Point: 80008000
Loading Kernel Image ... OK
OK

Starting kernel ...


Восстанавливаю вот по этой инструкции:
http://cs5-2.4pda.to/9880035/%C8%ED%F1% ... 37f6b44886
tftpd пишет, что файлы успешно загружены, но ошибка какая то появляется:

U-Boot 2010.06-svn (Apr 20 2017 - 19:16:36)

Check Flash Memory Controller v100 ... Found
SPI Nor(cs 0) ID: 0xef 0x40 0x17
spi_general_qe_enable(294): Error: Disable Quad failed! reg: 0x42
Block:64KB Chip:8MB Name:"W25Q64FV"
Spi is locked. lock address[0 => 0x800000]
SPI Nor total size: 8MB
MMC:
EMMC/MMC/SD controller initialization.
Card did not respond to voltage select!
No EMMC/MMC/SD device found !
In: serial
Out: serial
Err: serial
Hit any key to stop autoboot: 0
hisilicon # cccc
hisilicon # run du
Hisilicon ETH net controler
MAC: 00-12-17-2B-EE-CA
eth0 : phy status change : LINK=UP : DUPLEX=FULL : SPEED=100M
TFTP from server 192.168.1.107; our IP address is 192.168.1.10
Download Filename 'user-x.cramfs.img'.
Download to address: 0x82000000
Downloading: #################################################
done
Bytes transferred = 3125312 (2fb040 hex)
8192 KiB hi_fmc at 0:0 is now current device

## Checking Image at 0x82000000 ...
hdr->ih_magic=0x56190527
Header CRC Checking ... OK
Image Name: linux
Image Type: ARM Linux Kernel Image (gzip compressed)
Data Size: 3125248 Bytes = 3 MiB
Load Address: 00310000
Entry Point: 00610000
Data CRC Checking ... OK
Programing start at: 0x00310000
Programing end at: 0x00610000

ERROR: The erase area was locked.
SPI flash erase failed
Timeout writing to Flash
hisilicon #
Что не так делаю?

[almix2007]

Причем файл user-x.cramfs.img заливается моментально, а не как по инструкции 10-15 мин.

[dede]

10-15 минут он не должен заливаться - до минуты.

Похоже флеш залочена.
вывод команд:
printenv
help
help sf
sf

[max380]

А как это случилось, что камера умерла? Расскажите предысторию.

[almix2007]

камера работала на улице, просто перестала изображение выводить, пиг есть, больше ничего.

[almix2007]

printenv

hisilicon # printenv
bootargs=init=linuxrc mem=${osmem} console=ttyAMA0,115200 root=/dev/mtdblock1 ro
otfstype=squashfs mtdparts=hi_sfc:0x30000(boot),0x2E0000(romfs),0x300000(user),0
x160000(web),0x40000(custom),0x50000(mtd)
bootcmd=setenv setargs setenv bootargs ${bootargs};run setargs;sf probe 0;sf rea
d 83000000 30000 2E0000;squashfsload;bootm 0x82000000
bootdelay=1
baudrate=115200
ipaddr=192.168.1.10
serverip=192.168.1.107
netmask=255.255.255.0
bootfile="uImage"
da=tftp 0x82000000 u-boot.bin.img;sf probe 0;flwrite
du=tftp 0x82000000 user-x.cramfs.img;sf probe 0;flwrite
dr=tftp 0x82000000 romfs-x.cramfs.img;sf probe 0;flwrite
dw=tftp 0x82000000 web-x.cramfs.img;sf probe 0;flwrite
dl=tftp 0x82000000 logo-x.cramfs.img;sf probe 0;flwrite
dc=tftp 0x82000000 custom-x.cramfs.img;sf probe 0;flwrite
up=tftp 0x82000000 update.img;sf probe 0;flwrite
ua=mw.b 0x82000000 ff 1000000;tftp 0x82000000 upall_verify.img;sf probe 0;flwrit
e
tk=tftp 0x82000000 uImage;setenv setargs setenv bootargs ${bootargs};run setargs
;bootm 0x82000000
dd=mw.b 0x82000000 ff 1000000;tftp 0x82000000 mtd-x.jffs2.img;sf probe 0;flwrite

ethaddr=00:12:17:2b:ee:ca
NID=0x0001
osmem=80M
appVideoStandard=PAL
appSystemLanguage=Russian
stdin=serial
stdout=serial
stderr=serial
verify=n
ver=U-Boot 2010.06-svn (Apr 20 2017 - 19:16:36)

Environment size: 1284/65532 bytes
hisilicon #

[almix2007]

help

? - alias for 'help'
base - print or set address offset
boot - boot default, i.e., run 'bootcmd'
bootd - boot default, i.e., run 'bootcmd'
bootm - boot application image from memory
bootp - boot image via network using BOOTP/TFTP protocol
cmp - memory compare
cp - memory copy
crc32 - checksum calculation
ddr - ddr training function
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls - list files in a directory (default /)
flwrite - SPI flash sub-system
getinfo - print hardware information
go - start application at address 'addr'
help - print command description/usage
lip - lip - set local ip address but not save to flash

loadb - load binary file over serial line (kermit mode)
loady - load binary file over serial line (ymodem mode)
loop - infinite loop on address range
mac - mac - set mac address and save to flash

md - memory display
mii - MII utility commands
mm - memory modify (auto-incrementing address)
mmc - MMC sub system
mmcinfo - mmcinfo <dev num>-- display MMC info
mtest - simple RAM read/write test
mw - memory write (fill)
nm - memory modify (constant address)
ping - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
rarpboot- boot image via network using RARP/TFTP protocol
reset - Perform RESET of the CPU
run - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv - set environment variables
sf - SPI flash sub-system
sip - sip - set server ip address but not save to flash

squashfsload- fsload - load binary file from a filesystem image

tftp - tftp - download or upload image via network using TFTP protocol
version - print monitor version
hisilicon #

[almix2007]

hisilicon # help sf
sf - SPI flash sub-system

[almix2007]

hisilicon # sf
sf - SPI flash sub-system

[dede]

sf protect
sf lock
sf unlock

[max380]

А что на это скажет

Код: Выделить всё

sf probe 0;sf read 0x82000000 0x0 0x800000
tftp 0x82000000 dump.bin 0x800000

Вроде так
Встречал команду для прошивки бута, но она не работает

Код: Выделить всё

protect off all

[almix2007]

isilicon # sf protect
No SPI flash selected. Please run `sf probe'
hisilicon # sf lock
No SPI flash selected. Please run `sf probe'
hisilicon # sf probe
Usage: sf probe [bus:]cs [hz] [mode]
hisilicon # sf unlock
No SPI flash selected. Please run `sf probe'
hisilicon #