Jamie,
        The 1GB NAND Flash part probably has all the storage for the videos and
the Actual OS code.  the SDRAM part likely provides buffering and
stack/execution space.  Most likely a tight loop and no real OS, a true
traditional RTOS It looks like Zoran provides most of the magic as a set
of libraries.

The coach7 part seems to be obsoleted, but it and the coach8 parts are
MIPS 4KE based.  If we could get a pinout It might be possible to hook a
JTAG probe up and extract the actual code running on the Camera.  I have
a probe that should work if we can get to the pins. 

http://www.zoran.com/COACHTM-8?var_recherche=coach+7#nogo


I found a datasheet for a Coach 5 which based on the same MIPS core, but
it doesn't bring out the JTAG pins.  They have a way to single step, but
thats all.  If we had access to logic analyzer I'd say boot the thing
with the analyzer on the FLASH bus and grab an assembly level view of
the code to see.

The guy at maushammer has some neat tools he's put together, but I
didn't see any actual disassembly of the firmware on his site.

I did grab his download app which goes through a chanllenge and response
routine before accessing the data.  I've attaced the key files here.
This is a good candiadte for the next LUG meeting as his APP is MAC
based and would require some rework to compile on a linux box.  the
command line stuff should be doable, but it'd be nice to test it with
someones MAC next week and then rewrite for PC.

                                -Mike





On Fri, 2006-02-10 at 15:41 -0800, LinuxRocks! wrote:
> so.. the toy i was playing with last night has these chips on it...
> K4D551638F-TC50 
>  
> http://www.samsung.com/Products/Semiconductor/GraphicsMemory/DDRSDRAM/256Mbit/K4D551638F/K4D551638F.htm
>  
>  General Description 
>  FOR 4M x 16Bit x 4 Bank GDDR SDRAM 
>  The K4D551638F is 268,435,456 bits of hyper synchronous data rate 
> Dynamic RAM organized as 4 x 4,194,304 words by 16 bits, fabricated with 
> SAMSUNG's high performance CMOS technology. 
>  Synchronous features with Data Strobe allow extremely high performance 
> up to 1.1GB/s/chip. 
>  I/O transactions are possible on both edges of the clock cycle. 
>  Range of operating frequencies, programmable burst length and 
> programmable latencies allow the device to be useful for a variety of 
> high performance memory system applications. 
>  
> 
> 
> and...
> K9T1G08U0M 
>  128M x 8 Bits NAND Flash Memory 
>  [url] 
>  
> http://www.samsung.com/Products/Semiconductor/NANDFlash/SLC_SmallBlock/1Gbit/K9T1G08U0M/K9T1G08U0M.htm
>  
>  [/url] 
>  General Description 
>  Offered in 128Mx8bits, the K9T1G08U0M is 1Gbit with spare 32Mbit 
> capacity. 
>  The device is offered in 3.3V Vcc. 
>  Its NAND cell provides the most cost-effective solutIon for the solid 
> state mass storage market. 
>  A program operation can be performed in typical 200µs on the 528-bytes 
> and an erase operation can be performed in typical 2ms on a 16K-bytes 
> block. Data in the page can be read out at 50ns cycle time per byte. 
>  The I/O pins serve as the ports for address and data input/output as 
> well as command input. The on-chip write control automates all program 
> and erase functions including pulse repetition, where required, and 
> internal verification and margining of data. Even the write-intensive 
> systems can take advantage of the K9T1G08U0M's extended reliability of 
> 100K program/ erase cycles by providing ECC(Error Correcting Code) with 
> real time mapping-out algorithm. 
>  The K9T1G08U0M is an optimum solution for large nonvolatile storage 
> applications such as solid state file storage and other portable 
> applications requiring non-volatility. 
>  
> It looks like the first chip is the data (256MB 200mhz) and the second 
> is 1GB for the system and firmware. 
> 
> The CPU is a zoran coach-7M
> heres a link to a guy that got into the first cam...
> http://www.maushammer.com/systems/cvscamcorder/usb.html
> and this lovely link...
> http://www.maushammer.com/systems/cvscamcorder/firmware-monitor.html
> 
> Heres a link to the make magazine article:
> http://www.makezine.com/blog/archive/2005/08/how_to_cvs_vide_1.html
> 
> So... I need to look at libusb, any info that can help? bob... didnt you 
> do something with libusb?
> 
> Jamie
> _______________________________________________
> EUGLUG mailing list
> [email protected]
> http://www.euglug.org/mailman/listinfo/euglug
-- 
Mike Cherba
Cavium Networks
883 Brookside Dr
Eugene, OR 97405
phone: (541) 684-3820
Cell:  (541) 914-2188
[EMAIL PROTECTED]
www.caviumnetworks.com

Attachment: cvs-key-files.tgz
Description: application/compressed-tar

_______________________________________________
EUGLUG mailing list
[email protected]
http://www.euglug.org/mailman/listinfo/euglug

Reply via email to