Canon 80D

Started by ariznaf, June 02, 2016, 09:27:03 AM

Previous topic - Next topic

0 Members and 2 Guests are viewing this topic.

ricflair4life

I'm going to assume things are going well? Or can someone please explain the success so far? I'm sure I'm not the only person who doesn't understand the technical stuff behind this 🤷🏻‍♀️ Thanks :)

Walter Schulz

Don't hold your breath. My advice (for all not involved in porting (or willing and able to get involved)): If there is no ML for your cam act like there will be no ML for your cam ever.

JosiahD

@alex how is it coming with the 80D?
I have a brand new one and might help if you need it.

a1ex

Short answer: https://wiki.magiclantern.fm/faq#any_progress_on_xyz

Long answer: if you want to help, start by reading this very thread. It covers how to run the proof of concept code on your camera, how to get started with reverse engineering, links to how the firmware works and so on. Continue by trying what you have read (first in the emulator, then on the camera if you trust your code). Feel free to ask when you get stuck (first the search engine, then here in the thread).

Again: I'm not working on this full-time, I don't have this camera and don't want one. I'm here to help, but it's your job to port ML if you want it. I'm just providing tools, proof of concept code and assistance to those of you interested in porting ML on their camera.

201400005064

How can I help sir? I have an 80d and maybe can run some tests.

eduperez

Quote from: JosiahD on May 08, 2018, 03:19:38 PM
@alex how is it coming with the 80D?
I have a brand new one and might help if you need it.

Quote from: 201400005064 on May 15, 2018, 02:55:21 AM
How can I help sir? I have an 80d and maybe can run some tests.

As @a1ex has commented before, you cannot help, but you can ask for help.

ricflair4life

I understand you don't do this full time but all I want to know is the progress so far. Honestly, I don't think I'll be able to program or read any sort of codes anytime soon (or whatever goes into it). Although, I bet there's a lot of work and time needed to accomplish such a task and I appreciate that very much. To me this is all rocket science! 🤦🏻‍♀️ I bet it's like that for a lot of us as well and I'm sure a lot of us keep coming back to the forum to see if any progress has been made lol

kotik

Trying to get a ROM dump of my 80D 1.0.2
No luck, blue or red background and nothing written to the SD card (Sony SDXC 64 GB).
https://ibb.co/magzrT
My first Canon: FTb QL (Quick Loading), my first digital Canon: 20D 2.0.3
The current one: Canon EOS R

Walter Schulz


kotik

An old 2GB SD card did the trick.
Did get three ROM dumps:
ROM1A.BIN, ROM1B.BIN and ROM1C.BIN and their checksums.

Oddly enough ROM1A.BIN and ROM1B.BIN have the same checksum each dump. Even after trying 3 times.

Dump#1/ROM1A.BIN 0e103ef26d93d3ba7f03d5141a3f351c
Dump#1/ROM1B.BIN 0e103ef26d93d3ba7f03d5141a3f351c
iMac-27:~ $
Dump#2/ROM1A.BIN d9bfe2012acae3af0ad7cb77b751d067
Dump#2/ROM1B.BIN d9bfe2012acae3af0ad7cb77b751d067
iMac-27:~ $
Dump#3/ROM1A.BIN 59b7f7756bb6deb90e67c1e4bd0ec167
Dump#3/ROM1B.BIN 59b7f7756bb6deb90e67c1e4bd0ec167


I suppose I can ignore ROM1A or ROM1B?

Not on topic: On my 6D Mark II I got two ROM dumps: ROM0.BIN and ROM1.BIN!
My first Canon: FTb QL (Quick Loading), my first digital Canon: 20D 2.0.3
The current one: Canon EOS R

a1ex

Right, the old dumper saves two files because of the known issues with file I/O routines from Canon bootloaders (just in case one of them ends up wrong). I should update the FIR to the latest codebase, which also saves a copy of the serial flash contents (you will need it for emulation).

DIGIC 7 has a different ROM layout; there, ROM1 is likely replacing the serial flash present on D6. This is covered in the initial firmware analysis notes from the QEMU guide, and also in the ROM dumper source.

kotik

@a1ex
Thanks for the directions. The last time I worked a lot in assembler was with a 6502 microprocessor together with the 6510 second processor on an Acorn computer (BBC +). I still have a lot to catch up and the tons of ML information are pretty much fragmented on the website.
My first Canon: FTb QL (Quick Loading), my first digital Canon: 20D 2.0.3
The current one: Canon EOS R

kotik

Thanks to the more than excellent work of Danne on the Compiler.app I am able to compile ML on a Mac in a very short time. But the show must go on.

Have done the LED test with the 80D and it works.

As A1ex suggested I needed new ROM dumps with serial flash contents for emulation with the latest portable ROM dumper.

Didn't work with the 2GB SD card.
Made a 259.5MB SD partition, didn't work either!
There is some noise activity, but nothing read to the SD card, 80D works as usual.

iMac-27:~ $ diskutil list
/dev/disk0 (internal):
:
/dev/disk4 (internal, physical):
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:     FDisk_partition_scheme                        *2.0 GB     disk4
   1:                 DOS_FAT_16 EOS_DIGITAL             2.0 GB     disk4s1

iMac-27:~ $ diskutil unmountDisk /dev/disk4
Unmount of all volumes on disk4 was successful
iMac-27:~ $ sudo dd if=/Users/xxxx/Desktop/sd.img of=/dev/disk4
Password:
506880+0 records in
506880+0 records out
259522560 bytes transferred in 128.059448 secs (2026579 bytes/sec)
iMac-27:~ $ sudo diskutil eject /dev/rdisk4
Disk /dev/rdisk4 ejected
iMac-27:~ $ diskutil list

/dev/disk4 (internal, physical):
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:     FDisk_partition_scheme                        *2.0 GB     disk4
   1:                 DOS_FAT_16 EOS_DIGITAL             259.5 MB   disk4s1

My first Canon: FTb QL (Quick Loading), my first digital Canon: 20D 2.0.3
The current one: Canon EOS R

OlRivrRat

                   @Kotik

           As I posted back in Reply #265 > I have an SFDATA.BIN from My 80D if anyone is interested
ORR~DeanB  ~~  80D-ML  &  SL1+ML  &  5D2+ML  &  5DC+ML  &  70D+ML(AliveAgain)

kotik

@OlRivrRat

Did send you a PM.
My first Canon: FTb QL (Quick Loading), my first digital Canon: 20D 2.0.3
The current one: Canon EOS R

OlRivrRat

                    @Alex

   My 80D is (@Least for the moment) again allowing ML Portable Rescue & other ML Stuff

to @Least attempt to do something. So I tried again to run the ROM + SFData Dumper that

You provided back on 28Apr > "autoexec.bin (2018Apr28, 7eaab92)" & it gets as far as

Dumping ROM1...  & then Freezes making Battery Removal required ~ Any THoughts?

                     ORR ~ DeanB
ORR~DeanB  ~~  80D-ML  &  SL1+ML  &  5D2+ML  &  5DC+ML  &  70D+ML(AliveAgain)

a1ex

Asked and answered. The bootloader file write routines are very picky about the filesystem, in particular about its size.

Quote from: a1ex on April 23, 2017, 11:15:34 AM
So far, what worked every single time was formatting the card at a much lower capacity (I've used 256MB successfully in many cases). To do this, you can write the SD image that comes with QEMU to your SD or CF card. This guide is helpful; just don't forget to unzip the SD image. This image contains the portable display test and is bootable (so, you can test it in the camera straight away).

kotik

Just started all over again and now with success.
https://ibb.co/kQKqDJ
Incidentally, the SFDATA.BIN differs from the SFDATA.BIN that I received from OlRivrRat.

UPDATE: No wonder that my SFDATA.BIN is different. Just 8.4MB of 0x00's!
My first Canon: FTb QL (Quick Loading), my first digital Canon: 20D 2.0.3
The current one: Canon EOS R

kotik

Interesting or not?
0fec9480 db "\n********** FACTORY ADJUSTMENT MENU **********\n", 0 ; DATA XREF=sub_fec9368+20
0fec94b0 db "0. Exit from Factory Adjustment\n", 0                  ; DATA XREF=sub_fec9368+28
0fec94d4 db "1. Leak Check\n", 0                                    ; DATA XREF=sub_fec9368+36
0fec94e4 db "2. ASV Display\n", 0                                   ; DATA XREF=sub_fec9368+44
0fec94f4 db "3. RAM Check\n", 0                                     ; DATA XREF=sub_fec9368+52
0fec9504 db "4. ROM Check\n", 0                                  ; DATA XREF=sub_fec9368+60
0fec9514 db "5. ICU Version Check\n", 0                          ; DATA XREF=sub_fec9368+68
0fec952c db "6. Serial Flash Check\n", 0                          ; DATA XREF=sub_fec9368+76
0fec9544 db "9. Input Device Unique\n", 0                        ; DATA XREF=sub_fec9368+84
0fec955c db "A. ALL Check\n", 0                                  ; DATA XREF=sub_fec9368+92
0fec956c db "B. Adjustment Data Display and Change\n", 0          ; DATA XREF=sub_fec9368+100
0fec9594 db "C. Check Flag Display and Initialization\n", 0        ; DATA XREF=sub_fec9368+108
0fec95d0 db "E. HDMI Check\n", 0                                  ; DATA XREF=sub_fec9368+124
0fec95e0 db "F. AUDIO Check\n", 0                                ; DATA XREF=sub_fec9368+132
My first Canon: FTb QL (Quick Loading), my first digital Canon: 20D 2.0.3
The current one: Canon EOS R

OlRivrRat

       @Alex

Have attempted to use " This guide " >

https://thepihut.com/blogs/raspberry-pi-tutorials/17789160-backing-up-and-restoring-your-raspberry-pis-sd-card

with no success ~

Back in Dec17 I was able to get ROM Dumps with My 1GB SD & in Apr18 when I tried to get SFData

with the same 1GB SD it wouldn't work so I tried a 16GB SD & it worked.

Have tried all ways I know to make My 1GB look like a 256MB > again without success.
ORR~DeanB  ~~  80D-ML  &  SL1+ML  &  5D2+ML  &  5DC+ML  &  70D+ML(AliveAgain)

a1ex

Quote from: kotik on May 29, 2018, 01:51:25 PM
UPDATE: No wonder that my SFDATA.BIN is different. Just 8.4MB of 0x00's!

This problem was also present in reply #316 (where the dumper was reported to work); looks like I've missed some hardware initialization (that wasn't required in QEMU, so the tests I've ran didn't scream). And, since nobody bothered to check the files from the latest dumper (posted about 1 month ago, also on the 750D thread), I wasn't even aware of the issue.

Updated the portable ROM dumper; please check whether it actually works and outputs valid files.


Quote from: OlRivrRat on May 29, 2018, 06:36:59 PM
Have attempted to use " This guide " >

https://thepihut.com/blogs/raspberry-pi-tutorials/17789160-backing-up-and-restoring-your-raspberry-pis-sd-card

with no success ~

What files do you have on the card after writing the SD image, and what is their size?

OlRivrRat

Nothing shows up on the SD
ORR~DeanB  ~~  80D-ML  &  SL1+ML  &  5D2+ML  &  5DC+ML  &  70D+ML(AliveAgain)

a1ex

That's not good; you should end up with a small autoexec.bin. That one is present on the QEMU SD image, so you should see it on the physical card after writing (or "restoring", as in the tutorial) the SD image to the card.

OlRivrRat

     Also tried this >

https://support.plex.tv/articles/212523657-how-do-i-create-the-disk-image-for-my-sd-card-or-usb-stick/

My Educated Guess is that there is something about these instructions that I am Misunderstanding .
ORR~DeanB  ~~  80D-ML  &  SL1+ML  &  5D2+ML  &  5DC+ML  &  70D+ML(AliveAgain)

a1ex

The second tutorial should work as well; no idea what's wrong, maybe you can upload some screenshots or maybe even record a video of your screen?