48US support #282

alienatedsec · 2020-11-25T17:25:33Z

Hi All

I understand there is another project covering models with hi3518e chipset, but I was wondering if there would be a chance to integrate ONVIF and steps that I would need to follow. Unfortunately, the other projects seem to be dead since early last year; hence why my question over here as more activity and commitment has been recognised.

Any help or direction would be appreciated.

roleoroleo · 2020-11-25T18:04:12Z

I can't build a new hack for this model but I could help you to do it, if you want.

alienatedsec · 2020-11-25T19:11:48Z

I can't build a new hack for this model but I could help you to do it, if you want.

If that is an option, I am keen to even contribute in helping the community. Let me know how you want to approach it.

roleoroleo · 2020-11-26T13:54:49Z

First step: clone the repo and rebuild a whole hack.

alienatedsec · 2020-11-26T15:36:43Z

@roleoroleo which stock firmware you want me to use? I would only have the one for hi3518e at the moment.

roleoroleo · 2020-11-26T16:02:04Z

Which hack are you using at the moment?
yi-hack-v4 from TheCrypt0?

Start cloning TheCrypt0 repo and use hi3518e firmware.
I know that v4 hack is compatible with different models: y18, y20, v201, h20, y19 and h30 and probably you don't have stock firmwares for all models.
Start with what you have.

alienatedsec · 2020-11-26T17:39:32Z

@roleoroleo for some reason I am getting this error related to rootfs_y20.

Any ideas?

roleoroleo · 2020-11-26T17:57:25Z

Probably rootfs_y20 is not the correct format.
Try to mount it manually with this script:

#!/bin/bash

## Script to mount jffs2 filesystem using mtd kernel modules.
## EMAC, Inc. 2009

if [[ $# -lt 2 ]]
then
    echo "Usage: $0 FSNAME.JFFS2 MOUNTPOINT [ERASEBLOCK_SIZE]"
    exit 1
fi

if [ "$(whoami)" != "root" ]
then
    echo "$0 must be run as root!"
    exit 1
fi

if [[ ! -e $1 ]]
then
    echo "$1 does not exist"
    exit 1
fi

if [[ ! -d $2 ]]
then
    echo "$2 is not a valid mount point"
    exit 1
fi

if [[ "$3" == "" ]]
then
    esize="128"
else
    esize="$3"
fi

# cleanup if necessary
umount /dev/mtdblock0 &>/dev/null
modprobe -r mtdram &>/dev/null
modprobe -r mtdblock &>/dev/null

modprobe mtdram total_size=32768 erase_size=$esize || exit 1
modprobe mtdblock || exit 1
dd if="$1" of=/dev/mtdblock0 || exit 1
mount -t jffs2 /dev/mtdblock0 $2 || exit 1

echo "Successfully mounted $1 on $2"
exit 0

Command:
mount.jffs2 image.jffs2 mount_dir 64

alienatedsec · 2020-11-26T18:42:57Z

roleoroleo · 2020-11-26T18:53:51Z

I don't know.
Try to restart from the beginning.

alienatedsec · 2020-11-26T18:54:22Z

Does it matter if '/tmp/ssc' is empty?

roleoroleo · 2020-11-26T19:12:05Z

No.
Looking at the script
https://github.com/TheCrypt0/yi-hack-v4/blob/master/scripts/init_sysroot.sh
it looks like there is a 64 byte header before the jffs2 image.

alienatedsec · 2020-11-26T19:52:11Z

I loaded those stock files through 'yi-hack-v4' web interface, and the camera is now running the stock firmware, so both files have to be correct.

I also mounted home_y20 the same way, and I could see some files.

Starting again gives the same results. Any further ideas?

roleoroleo · 2020-11-26T20:24:14Z

Try to run manually all commands inside the script.
Step by step.
We will check where it stops working.

alienatedsec · 2020-12-01T08:57:35Z

Just to update, I still have it on my to-do list, but there was no further progress since.

However, would I need the SDK for hi3518e installed properly in order to successfully mount or even process the init_sysroot.sh?

roleoroleo · 2020-12-01T11:03:42Z

Yes, check this wiki:
https://github.com/TheCrypt0/yi-hack-v4/wiki/Project-Setup-Hints

alienatedsec · 2020-12-01T14:20:41Z

Despite being successful with the SDK, it has the same error when executing the script for rootfs file

roleoroleo · 2020-12-01T19:37:33Z

Decompress manually the file using the script I posted above and copy the file in the sysroot folder.
If the script finds the file in the sysroot folder, it doesn't try to decompress the image.

alienatedsec · 2020-12-01T20:00:34Z

Does it matter if '/tmp/ssc' is empty?

It was empty when I did it (mounted rootfs) the last time.

No.
Looking at the script
https://github.com/TheCrypt0/yi-hack-v4/blob/master/scripts/init_sysroot.sh
it looks like there is a 64 byte header before the jffs2 image.

The content of the mounted folder is empty even if I mount yi-hack-v4 'rootfs_y20' file, but it is ok for 'home_y20'.

Running everything in verbose mode seems to be working great until it mounts the 'rootfs_y20' and tries to copy something which does not exist; hence, the error.

roleoroleo · 2020-12-02T12:04:58Z

Mount with this:
#282 (comment)
and copy the files manually.

alienatedsec · 2020-12-02T12:28:23Z

@roleoroleo Which version of mtd-utils you have?

alienatedsec · 2020-12-02T12:30:46Z

Mount with this:
#282 (comment)
and copy the files manually.

There are no files when rootfs is mounted.

roleoroleo · 2020-12-02T13:35:25Z

1:2.0.0-1 on Debian 9.

Does it matter if '/tmp/ssc' is empty?

Now, I understand the question.

Probably the image is corrupted. Are you sure that the image works when you try to restore the stock firmware.
Maybe home_y20 is processed and applied but sys_y20 isn't.
So, you think you have restored the whole stock firmware but you restored only the home partition.

alienatedsec · 2020-12-02T14:31:53Z

Probably the image is corrupted. Are you sure that the image works when you try to restore the stock firmware.
Maybe home_y20 is processed and applied but sys_y20 isn't.
So, you think you have restored the whole stock firmware but you restored only the home partition.

I have tried to mount plenty of 'rootfs_x20' files found in the universe (google) and all of them mounted with no content. home_x20 are fine but rootfs_x20 are empty.

Sounds like a lame issue, but I tried everything except Debian 9 ;)

roleoroleo · 2020-12-02T18:38:32Z

Did you try to change the eraseblock size?

alienatedsec · 2020-12-03T22:46:42Z

Did you try to change the eraseblock size?

Multiple times.

roleoroleo · 2020-12-04T06:56:39Z

Share with me a link of this file.
I try to decompress it.

alienatedsec · 2020-12-04T09:44:42Z

Thank you @roleoroleo for your help - sounds like I am doing something wrong anyway - LINK

alienatedsec · 2020-12-04T10:27:24Z

The latest Ubuntu version and its mtd-utils have the same problem.

roleoroleo · 2020-12-04T10:40:25Z

With my debian 9 works without problems.
Here it is:
rootfs.tar.gz

alienatedsec · 2020-12-04T13:51:39Z

With my debian 9 works without problems.

Thanks. I will be doing the same on Debian. I started it already wrong as installed Debian 10 instead of 9 as a docker.
I will let you know how it went

alienatedsec · 2021-02-16T11:10:10Z

@roleoroleo Took me a while as wsdd needed the same amendment, also some libraries were missing.

The build is working and so do the camera, but there is no webserver:

The output is as per the below:

Initializing www...

Compiling www...

Compressing CSS files...
Compressing JS files...
Exception in thread "main" java.lang.reflect.InvocationTargetException
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at com.yahoo.platform.yui.compressor.Bootstrap.main(Bootstrap.java:21)
Caused by: java.util.MissingResourceException: Can't find bundle for base name org.mozilla.javascript.resources.Messages, locale en_US
	at java.util.ResourceBundle.throwMissingResourceException(ResourceBundle.java:1581)
	at java.util.ResourceBundle.getBundleImpl(ResourceBundle.java:1396)
	at java.util.ResourceBundle.getBundle(ResourceBundle.java:854)
	at org.mozilla.javascript.ScriptRuntime$DefaultMessageProvider.getMessage(ScriptRuntime.java:3608)
	at org.mozilla.javascript.ScriptRuntime.getMessage(ScriptRuntime.java:3592)
	at org.mozilla.javascript.ScriptRuntime.getMessage0(ScriptRuntime.java:3540)
	at org.mozilla.javascript.Parser.addError(Parser.java:145)
	at org.mozilla.javascript.Parser.reportError(Parser.java:160)
	at org.mozilla.javascript.Parser.statementHelper(Parser.java:1285)
	at org.mozilla.javascript.Parser.statement(Parser.java:726)
	at org.mozilla.javascript.Parser.parseFunctionBody(Parser.java:482)
	at org.mozilla.javascript.Parser.function(Parser.java:611)
	at org.mozilla.javascript.Parser.parseFunctionBody(Parser.java:479)
	at org.mozilla.javascript.Parser.function(Parser.java:611)
	at org.mozilla.javascript.Parser.primaryExpr(Parser.java:2255)
	at org.mozilla.javascript.Parser.memberExpr(Parser.java:1974)
	at org.mozilla.javascript.Parser.unaryExpr(Parser.java:1832)
	at org.mozilla.javascript.Parser.mulExpr(Parser.java:1761)
	at org.mozilla.javascript.Parser.addExpr(Parser.java:1742)
	at org.mozilla.javascript.Parser.shiftExpr(Parser.java:1722)
	at org.mozilla.javascript.Parser.relExpr(Parser.java:1696)
	at org.mozilla.javascript.Parser.eqExpr(Parser.java:1652)
	at org.mozilla.javascript.Parser.bitAndExpr(Parser.java:1641)
	at org.mozilla.javascript.Parser.bitXorExpr(Parser.java:1630)
	at org.mozilla.javascript.Parser.bitOrExpr(Parser.java:1619)
	at org.mozilla.javascript.Parser.andExpr(Parser.java:1607)
	at org.mozilla.javascript.Parser.orExpr(Parser.java:1595)
	at org.mozilla.javascript.Parser.condExpr(Parser.java:1578)
	at org.mozilla.javascript.Parser.assignExpr(Parser.java:1563)
	at org.mozilla.javascript.Parser.expr(Parser.java:1542)
	at org.mozilla.javascript.Parser.primaryExpr(Parser.java:2412)
	at org.mozilla.javascript.Parser.memberExpr(Parser.java:1974)
	at org.mozilla.javascript.Parser.unaryExpr(Parser.java:1832)
	at org.mozilla.javascript.Parser.mulExpr(Parser.java:1761)
	at org.mozilla.javascript.Parser.addExpr(Parser.java:1742)
	at org.mozilla.javascript.Parser.shiftExpr(Parser.java:1722)
	at org.mozilla.javascript.Parser.relExpr(Parser.java:1696)
	at org.mozilla.javascript.Parser.eqExpr(Parser.java:1652)
	at org.mozilla.javascript.Parser.bitAndExpr(Parser.java:1641)
	at org.mozilla.javascript.Parser.bitXorExpr(Parser.java:1630)
	at org.mozilla.javascript.Parser.bitOrExpr(Parser.java:1619)
	at org.mozilla.javascript.Parser.andExpr(Parser.java:1607)
	at org.mozilla.javascript.Parser.orExpr(Parser.java:1595)
	at org.mozilla.javascript.Parser.condExpr(Parser.java:1578)
	at org.mozilla.javascript.Parser.assignExpr(Parser.java:1563)
	at org.mozilla.javascript.Parser.assignExpr(Parser.java:1569)
	at org.mozilla.javascript.Parser.expr(Parser.java:1542)
	at org.mozilla.javascript.Parser.statementHelper(Parser.java:1221)
	at org.mozilla.javascript.Parser.statement(Parser.java:726)
	at org.mozilla.javascript.Parser.parse(Parser.java:420)
	at org.mozilla.javascript.Parser.parse(Parser.java:378)
	at com.yahoo.platform.yui.compressor.JavaScriptCompressor.parse(JavaScriptCompressor.java:312)
	at com.yahoo.platform.yui.compressor.JavaScriptCompressor.<init>(JavaScriptCompressor.java:533)
	at com.yahoo.platform.yui.compressor.YUICompressor.main(YUICompressor.java:131)
	... 5 more

Any ideas for the above?

roleoroleo · 2021-02-16T14:03:05Z

Install the package yui-compressor.
This should be the last.
:)

roleoroleo · 2021-02-16T14:06:23Z

If you don't find it in the standard repo, use this:
yui-compressor_2.4.8-2_all.deb.gz

alienatedsec · 2021-02-16T15:22:33Z

If you don't find it in the standard repo, use this:
yui-compressor_2.4.8-2_all.deb.gz

That fixed the compilation of the www problem.

ONVIF is enabled but not working.

But I think I found an issue. There is a wrong path in install.wsdd.

alienatedsec · 2021-02-16T16:01:09Z

@roleoroleo some libraries are missing

I got it installed in my Debian 9

roleoroleo · 2021-02-16T16:57:07Z

Probably is missing in the cam, not in your host.

alienatedsec · 2021-02-16T17:07:32Z

I checked the lib folder on the cam, and it only has libraries from src/uClib* in the repo

roleoroleo · 2021-02-16T17:29:39Z

I think it should be in /home/lib

roleoroleo · 2021-02-16T17:47:47Z

If it is in /home/lib, probably your LD_LIBARY_PATH is not set correctly.
Enter with ssh, check if libstdc++.so exists and check the value of the env variable LD_LIBRARY_PATH
LD_LIBRARY_PATH must include /home/lib
If not, change the value of the variable and try to run again wsdd.

export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/home/lib

alienatedsec · 2021-02-16T17:51:32Z

it's not there

roleoroleo · 2021-02-16T19:54:19Z

Do you have an original fw image to share with me?

alienatedsec · 2021-02-16T20:14:37Z

I found it on the official YI website
home_y20m.zip

roleoroleo · 2021-02-16T20:30:08Z

I found a restore copy here:
https://app.box.com/s/cibs7n1mgvhqaqjlidtveegu1uajt5yr/folder/32280606850

libstdc++ is absent in the original fw.
You have to copy it from the toolchain (/opt/arm-hisiv300-linux/arm-hisiv300-linux-uclibcgnueabi/lib).
And you have to strip it because is > 5MB.
Or try to use this one (I stripped it for you):
libstdc++.so.6.0.19.gz
Copy it to the lib folder (or another folder in the LD_LIBRARY_PATH) but make sure there is enough space because it is big.
Create symbolic links: libstdc++.so and libstdc++.so.6

alienatedsec · 2021-02-16T20:39:46Z

I already had the same idea but it showed a different error. Let me do it again

roleoroleo · 2021-02-16T21:19:56Z

This error is a problem.
I need to study it.

alienatedsec · 2021-02-16T21:20:24Z

It's working - I previously used the wrong lib file

ONVIF Device Manager recognised the service and port 8080 is opened. There is no stream as RTSP is now corrupted because of this licensing module. I might try to integrate your RTSP service

roleoroleo · 2021-02-16T21:27:01Z

onvif_srvd needs a long command line.
Example:

onvif_srvd --pid_file /var/run/onvif_srvd.pid --model "Yi Hack" --manufacturer Yi --firmware_ver 0.1.0 --hardware_id YOUR_HWID --serial_num YOUR_SERIAL --ifs wlan0 --port 80 --scope onvif://www.onvif.org/Profile/S --name Profile_0 --width 1920 --height 1080 --url rtsp://%s/ch0_0.h264 --snapurl http://%s/cgi-bin/snapshot.sh --typeH264 --name Profile_1 --width 640 --height 360 --url rtsp://%s/ch0_1.h264 --snapurl http://%s/cgi-bin/snapshot.sh --type H264

And wsdd:

wsdd --pid_file /var/run/wsdd.pid --if_name wlan0 --type tdn:NetworkVideoTransmitter --xaddr http://%s --scope "onvif://www.onvif.org/name/Unknown onvif://www.onvif.org/Profile/Streaming"

roleoroleo · 2021-02-16T21:34:31Z

ONVIF Device Manager recognised the service and port 8080 is opened. There is no stream as RTSP is now corrupted because of this licensing module. I might try to integrate your RTSP service

RTSP service is a very difficult task.
But it's possible, I think.
Maybe MStar is not a good point to start. It's better to use sources from Allwinner cams.
Share with me the file fshare_frame_buf and I will check if it's possible to use the same approach used in Allwinner platform.

alienatedsec · 2021-02-16T21:39:47Z

Share with me the file fshare_frame_buf and I will check if it's possible to use the same approach used in Allwinner platform.

Can't find the file. Where is it located?

alienatedsec · 2021-02-16T22:02:28Z

I know the location now (from another thread you mentioned), but I will check if it's there and upload it tomorrow.

alienatedsec · 2021-02-17T08:55:22Z

@roleoroleo There is no file fshare_frame_buf in the /dev/ folder or anywhere on the device. I also searched for anything with fshare, frame and buf.

/dev # ls -lh
total 0
crw-------    1 root     root      218,  62 Jan  1  1970 acodec
crw-------    1 root     root      218,  14 Jan  1  1970 adec
crw-------    1 root     root      218,  13 Jan  1  1970 aenc
crw-------    1 root     root      218,   5 Jan  1  1970 ai
crw-------    1 root     root      218,   6 Jan  1  1970 ao
drwxr-xr-x    3 root     root          60 Jan  1  1970 bus
crw-------    1 root     root      218,  25 Jan  1  1970 chnl
crw-------    1 root     root       10,  56 Jan  1  1970 cipher
crw-------    1 root     root        5,   1 Feb 17 02:12 console
crw-------    1 root     root       10,  59 Jan  1  1970 cpld_periph
crw-------    1 root     root       10,  62 Jan  1  1970 cpu_dma_latency
crw-------    1 root     root       10,  63 Jan  1  1970 cuse
lrwxrwxrwx    1 root     root          13 Jan  1  1970 fd -> /proc/self/fd
crw-------    1 root     root        1,   7 Jan  1  1970 full
crw-rw-rw-    1 root     root       10, 229 Jan  1  1970 fuse
crw-------    1 root     root      218,  22 Jan  1  1970 h264e
crw-------    1 root     root      218,  61 Jan  1  1970 hi_mipi
crw-------    1 root     root       10, 135 Jan  1  1970 hi_rtc
crw-------    1 root     root      218,  63 Jan  1  1970 hi_tde
crw-------    1 root     root       89,   0 Jan  1  1970 i2c-0
crw-------    1 root     root       89,   1 Jan  1  1970 i2c-1
crw-------    1 root     root       89,   2 Jan  1  1970 i2c-2
crw-------    1 root     root      218,  20 Jan  1  1970 isp_dev
crw-------    1 root     root      218,  24 Jan  1  1970 jpege
crw-------    1 root     root        1,  11 Jan  1  1970 kmsg
crw-------    1 root     root      218,  12 Jan  1  1970 logmpp
crw-------    1 root     root        1,   1 Jan  1  1970 mem
brw-------    1 root     root      179,   0 Jan  1  1970 mmcblk0
brw-------    1 root     root      179,   1 Jan  1  1970 mmcblk0p1
crw-------    1 root     root       10,  58 Jan  1  1970 mmz_userdev
drwxrwxrwt    2 root     root         180 Jan  1  1970 mqueue
crw-------    1 root     root       90,   0 Jan  1  1970 mtd0
crw-------    1 root     root       90,   1 Jan  1  1970 mtd0ro
crw-------    1 root     root       90,   2 Jan  1  1970 mtd1
crw-------    1 root     root       90,   3 Jan  1  1970 mtd1ro
crw-------    1 root     root       90,   4 Jan  1  1970 mtd2
crw-------    1 root     root       90,   5 Jan  1  1970 mtd2ro
crw-------    1 root     root       90,   6 Jan  1  1970 mtd3
crw-------    1 root     root       90,   7 Jan  1  1970 mtd3ro
crw-------    1 root     root       90,   8 Jan  1  1970 mtd4
crw-------    1 root     root       90,   9 Jan  1  1970 mtd4ro
crw-------    1 root     root       90,  10 Jan  1  1970 mtd5
crw-------    1 root     root       90,  11 Jan  1  1970 mtd5ro
crw-------    1 root     root       90,  12 Jan  1  1970 mtd6
crw-------    1 root     root       90,  13 Jan  1  1970 mtd6ro
crw-------    1 root     root       90,  14 Jan  1  1970 mtd7
crw-------    1 root     root       90,  15 Jan  1  1970 mtd7ro
brw-------    1 root     root       31,   0 Jan  1  1970 mtdblock0
brw-------    1 root     root       31,   1 Jan  1  1970 mtdblock1
brw-------    1 root     root       31,   2 Jan  1  1970 mtdblock2
brw-------    1 root     root       31,   3 Jan  1  1970 mtdblock3
brw-------    1 root     root       31,   4 Jan  1  1970 mtdblock4
brw-------    1 root     root       31,   5 Jan  1  1970 mtdblock5
brw-------    1 root     root       31,   6 Jan  1  1970 mtdblock6
brw-------    1 root     root       31,   7 Jan  1  1970 mtdblock7
crw-------    1 root     root       10,  61 Jan  1  1970 network_latency
crw-------    1 root     root       10,  60 Jan  1  1970 network_throughput
crw-------    1 root     root        1,   3 Jan  1  1970 null
crw-------    1 root     root       10,  55 Jan  1  1970 pid_list
crw-------    1 root     root        5,   2 Feb 17 08:52 ptmx
drwxr-xr-x    2 root     root           0 Jan  1  1970 pts
brw-------    1 root     root        1,   0 Jan  1  1970 ram0
brw-------    1 root     root        1,   1 Jan  1  1970 ram1
brw-------    1 root     root        1,  10 Jan  1  1970 ram10
brw-------    1 root     root        1,  11 Jan  1  1970 ram11
brw-------    1 root     root        1,  12 Jan  1  1970 ram12
brw-------    1 root     root        1,  13 Jan  1  1970 ram13
brw-------    1 root     root        1,  14 Jan  1  1970 ram14
brw-------    1 root     root        1,  15 Jan  1  1970 ram15
brw-------    1 root     root        1,   2 Jan  1  1970 ram2
brw-------    1 root     root        1,   3 Jan  1  1970 ram3
brw-------    1 root     root        1,   4 Jan  1  1970 ram4
brw-------    1 root     root        1,   5 Jan  1  1970 ram5
brw-------    1 root     root        1,   6 Jan  1  1970 ram6
brw-------    1 root     root        1,   7 Jan  1  1970 ram7
brw-------    1 root     root        1,   8 Jan  1  1970 ram8
brw-------    1 root     root        1,   9 Jan  1  1970 ram9
crw-------    1 root     root        1,   8 Jan  1  1970 random
crw-------    1 root     root      218,  21 Jan  1  1970 rc
crw-------    1 root     root      218,  16 Jan  1  1970 rgn
brw-------    1 root     root      240,   0 Jan  1  1970 romblock0
brw-------    1 root     root      240,   1 Jan  1  1970 romblock1
brw-------    1 root     root      240,   2 Jan  1  1970 romblock2
brw-------    1 root     root      240,   3 Jan  1  1970 romblock3
brw-------    1 root     root      240,   4 Jan  1  1970 romblock4
brw-------    1 root     root      240,   5 Jan  1  1970 romblock5
brw-------    1 root     root      240,   6 Jan  1  1970 romblock6
brw-------    1 root     root      240,   7 Jan  1  1970 romblock7
crw-------    1 root     root       10, 231 Jan  1  1970 snapshot
crw-------    1 root     root       10,  57 Jan  1  1970 ssp
lrwxrwxrwx    1 root     root          15 Jan  1  1970 stderr -> /proc/self/fd/2
lrwxrwxrwx    1 root     root          15 Jan  1  1970 stdin -> /proc/self/fd/0
lrwxrwxrwx    1 root     root          15 Jan  1  1970 stdout -> /proc/self/fd/1
crw-------    1 root     root      218,   8 Jan  1  1970 sys
crw-------    1 root     root        5,   0 Jan  1  1970 tty
crw-------    1 root     root        4,   0 Jan  1  1970 tty0
crw-------    1 root     root        4,   1 Jan  1  1970 tty1
crw-------    1 root     root        4,  10 Jan  1  1970 tty10
crw-------    1 root     root        4,  11 Jan  1  1970 tty11
crw-------    1 root     root        4,  12 Jan  1  1970 tty12
crw-------    1 root     root        4,  13 Jan  1  1970 tty13
crw-------    1 root     root        4,  14 Jan  1  1970 tty14
crw-------    1 root     root        4,  15 Jan  1  1970 tty15
crw-------    1 root     root        4,  16 Jan  1  1970 tty16
crw-------    1 root     root        4,  17 Jan  1  1970 tty17
crw-------    1 root     root        4,  18 Jan  1  1970 tty18
crw-------    1 root     root        4,  19 Jan  1  1970 tty19
crw-------    1 root     root        4,   2 Jan  1  1970 tty2
crw-------    1 root     root        4,  20 Jan  1  1970 tty20
crw-------    1 root     root        4,  21 Jan  1  1970 tty21
crw-------    1 root     root        4,  22 Jan  1  1970 tty22
crw-------    1 root     root        4,  23 Jan  1  1970 tty23
crw-------    1 root     root        4,  24 Jan  1  1970 tty24
crw-------    1 root     root        4,  25 Jan  1  1970 tty25
crw-------    1 root     root        4,  26 Jan  1  1970 tty26
crw-------    1 root     root        4,  27 Jan  1  1970 tty27
crw-------    1 root     root        4,  28 Jan  1  1970 tty28
crw-------    1 root     root        4,  29 Jan  1  1970 tty29
crw-------    1 root     root        4,   3 Jan  1  1970 tty3
crw-------    1 root     root        4,  30 Jan  1  1970 tty30
crw-------    1 root     root        4,  31 Jan  1  1970 tty31
crw-------    1 root     root        4,  32 Jan  1  1970 tty32
crw-------    1 root     root        4,  33 Jan  1  1970 tty33
crw-------    1 root     root        4,  34 Jan  1  1970 tty34
crw-------    1 root     root        4,  35 Jan  1  1970 tty35
crw-------    1 root     root        4,  36 Jan  1  1970 tty36
crw-------    1 root     root        4,  37 Jan  1  1970 tty37
crw-------    1 root     root        4,  38 Jan  1  1970 tty38
crw-------    1 root     root        4,  39 Jan  1  1970 tty39
crw-------    1 root     root        4,   4 Jan  1  1970 tty4
crw-------    1 root     root        4,  40 Jan  1  1970 tty40
crw-------    1 root     root        4,  41 Jan  1  1970 tty41
crw-------    1 root     root        4,  42 Jan  1  1970 tty42
crw-------    1 root     root        4,  43 Jan  1  1970 tty43
crw-------    1 root     root        4,  44 Jan  1  1970 tty44
crw-------    1 root     root        4,  45 Jan  1  1970 tty45
crw-------    1 root     root        4,  46 Jan  1  1970 tty46
crw-------    1 root     root        4,  47 Jan  1  1970 tty47
crw-------    1 root     root        4,  48 Jan  1  1970 tty48
crw-------    1 root     root        4,  49 Jan  1  1970 tty49
crw-------    1 root     root        4,   5 Jan  1  1970 tty5
crw-------    1 root     root        4,  50 Jan  1  1970 tty50
crw-------    1 root     root        4,  51 Jan  1  1970 tty51
crw-------    1 root     root        4,  52 Jan  1  1970 tty52
crw-------    1 root     root        4,  53 Jan  1  1970 tty53
crw-------    1 root     root        4,  54 Jan  1  1970 tty54
crw-------    1 root     root        4,  55 Jan  1  1970 tty55
crw-------    1 root     root        4,  56 Jan  1  1970 tty56
crw-------    1 root     root        4,  57 Jan  1  1970 tty57
crw-------    1 root     root        4,  58 Jan  1  1970 tty58
crw-------    1 root     root        4,  59 Jan  1  1970 tty59
crw-------    1 root     root        4,   6 Jan  1  1970 tty6
crw-------    1 root     root        4,  60 Jan  1  1970 tty60
crw-------    1 root     root        4,  61 Jan  1  1970 tty61
crw-------    1 root     root        4,  62 Jan  1  1970 tty62
crw-------    1 root     root        4,  63 Jan  1  1970 tty63
crw-------    1 root     root        4,   7 Jan  1  1970 tty7
crw-------    1 root     root        4,   8 Jan  1  1970 tty8
crw-------    1 root     root        4,   9 Jan  1  1970 tty9
crw-------    1 root     root      204,  64 Jan  1  1970 ttyAMA0
crw-------    1 root     root      204,  65 Jan  1  1970 ttyAMA1
crw-------    1 root     root      204,  66 Jan  1  1970 ttyAMA2
crw--w----    1 root     root      204,  64 Feb 17 08:52 ttyS000
crw-------    1 root     root       10, 223 Jan  1  1970 uinput
crw-------    1 root     root        1,   9 Jan  1  1970 urandom
crw-------    1 root     root      189,   0 Jan  1  1970 usbdev1.1
crw-------    1 root     root      189,   2 Jan  1  1970 usbdev1.3
lrwxrwxrwx    1 root     root          14 Jan  1  1970 usbdev11 -> /dev/usbdev1.3
crw-------    1 root     root      254,   0 Jan  1  1970 usbmon0
crw-------    1 root     root      254,   1 Jan  1  1970 usbmon1
crw-------    1 root     root      218,   9 Jan  1  1970 vb
crw-------    1 root     root        7,   0 Jan  1  1970 vcs
crw-------    1 root     root        7,   1 Jan  1  1970 vcs1
crw-------    1 root     root        7, 128 Jan  1  1970 vcsa
crw-------    1 root     root        7, 129 Jan  1  1970 vcsa1
crw-------    1 root     root      218,   2 Jan  1  1970 venc
crw-------    1 root     root      218,  19 Jan  1  1970 vgs
crw-------    1 root     root      218,   0 Jan  1  1970 vi
crw-------    1 root     root      218,  10 Jan  1  1970 vpss
crw-------    1 root     root       10, 130 Jan  1  1970 watchdog
crw-------    1 root     root        1,   5 Jan  1  1970 zero

roleoroleo · 2021-02-17T09:25:11Z

If I remember correctly, in your model the file is /tmp/view and not fshare_frame_buf.
Read this:
xmflsct/yi-hack-1080p#5

alienatedsec · 2021-02-17T09:30:37Z

@roleoroleo I got the 'view' file.
view.zip

roleoroleo · 2021-02-17T09:41:19Z

Could you send me two copies of the file made 5 seconds apart?

alienatedsec · 2021-02-17T10:04:49Z

I made more just in case

viewfiles.zip

alienatedsec · 2021-02-23T16:08:37Z

Thank you @roleoroleo for your work and support so far. I am closing this issue as I think we got where we wanted to be.

roleoroleo · 2021-02-23T16:19:28Z

It was a pleasure.

Arkady23 · 2021-03-09T14:00:22Z

Please, dear roleoroleo
view from CN17.zip

Repository owner deleted a comment from alienatedsec Feb 17, 2021

alienatedsec closed this as completed Feb 23, 2021

48US support #282

48US support #282

Comments

alienatedsec commented Nov 25, 2020

roleoroleo commented Nov 25, 2020

alienatedsec commented Nov 25, 2020

roleoroleo commented Nov 26, 2020

alienatedsec commented Nov 26, 2020

roleoroleo commented Nov 26, 2020

alienatedsec commented Nov 26, 2020

roleoroleo commented Nov 26, 2020 • edited Loading

alienatedsec commented Nov 26, 2020

roleoroleo commented Nov 26, 2020

alienatedsec commented Nov 26, 2020

roleoroleo commented Nov 26, 2020

alienatedsec commented Nov 26, 2020

roleoroleo commented Nov 26, 2020

alienatedsec commented Dec 1, 2020

roleoroleo commented Dec 1, 2020

alienatedsec commented Dec 1, 2020

roleoroleo commented Dec 1, 2020

alienatedsec commented Dec 1, 2020

roleoroleo commented Dec 2, 2020

alienatedsec commented Dec 2, 2020

alienatedsec commented Dec 2, 2020

roleoroleo commented Dec 2, 2020

alienatedsec commented Dec 2, 2020

roleoroleo commented Dec 2, 2020

alienatedsec commented Dec 3, 2020

roleoroleo commented Dec 4, 2020

alienatedsec commented Dec 4, 2020

alienatedsec commented Dec 4, 2020

roleoroleo commented Dec 4, 2020

alienatedsec commented Dec 4, 2020

alienatedsec commented Feb 16, 2021 • edited Loading

roleoroleo commented Feb 16, 2021 • edited Loading

roleoroleo commented Feb 16, 2021

alienatedsec commented Feb 16, 2021

alienatedsec commented Feb 16, 2021

roleoroleo commented Feb 16, 2021

alienatedsec commented Feb 16, 2021

roleoroleo commented Feb 16, 2021

roleoroleo commented Feb 16, 2021

alienatedsec commented Feb 16, 2021

roleoroleo commented Feb 16, 2021

alienatedsec commented Feb 16, 2021

roleoroleo commented Feb 16, 2021 • edited Loading

alienatedsec commented Feb 16, 2021

roleoroleo commented Feb 16, 2021

alienatedsec commented Feb 16, 2021 • edited Loading

roleoroleo commented Feb 16, 2021 • edited Loading

roleoroleo commented Feb 16, 2021 • edited Loading

alienatedsec commented Feb 16, 2021

alienatedsec commented Feb 16, 2021

alienatedsec commented Feb 17, 2021

roleoroleo commented Feb 17, 2021 • edited Loading

alienatedsec commented Feb 17, 2021

roleoroleo commented Feb 17, 2021

alienatedsec commented Feb 17, 2021

alienatedsec commented Feb 23, 2021

roleoroleo commented Feb 23, 2021

Arkady23 commented Mar 9, 2021

roleoroleo commented Nov 26, 2020 •

edited

Loading

alienatedsec commented Feb 16, 2021 •

edited

Loading

roleoroleo commented Feb 16, 2021 •

edited

Loading

roleoroleo commented Feb 16, 2021 •

edited

Loading

alienatedsec commented Feb 16, 2021 •

edited

Loading

roleoroleo commented Feb 16, 2021 •

edited

Loading

roleoroleo commented Feb 16, 2021 •

edited

Loading

roleoroleo commented Feb 17, 2021 •

edited

Loading