Author Topic: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...  (Read 92788 times)

0 Members and 3 Guests are viewing this topic.

Offline ivi_yak

  • Contributor
  • Posts: 40
  • Country: 00
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #125 on: February 06, 2019, 08:14:28 pm »
 :-+
eevblog
 

Offline ivi_yak

  • Contributor
  • Posts: 40
  • Country: 00
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #126 on: February 23, 2019, 11:24:59 am »
Thanks Mr. Drieg he fix my dump and scope alive now   :-DMM,
I have bricked Rigol ds1302CA after unsuccessfully fw update.
Using XGecu TL866II Plus http://www.xgecu.com/en/ with TSSOP48 adaptor I got a memory dump of S29GL032A90TFIR40.
Drieg fixed my dump at few days and my scope restored now.

eevblog
 

Offline Bruzzel

  • Newbie
  • Posts: 2
  • Country: de
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #127 on: February 23, 2019, 05:29:08 pm »
I have fix my Rigol DS1042C.
I have unsolder the flash and read it. I found the first part of the firmware file identical at the flash, only the first 20 byte was cut off and the last bytes were different.

I suspect the following: 

The ds1000 firmware starts after 20 byte at the firmware USB file and ends at address 0x1FFFFF.
The ds1000D/E firmware file starts after 21 bytes at the firmware USB file and have double length up to 0x3FFFFF.
 
The DS1042C firmware update is a very stupid program. If it finds a file with the name “DS1000DUpdate.RGL” at the USB stick it cut off the first 20 bytes an write it 1:1 to the flash without any check.
 
Only the bytes after address 0x1FFF00 are not changed because there are individual data about the scope (model, serial no. etc.) and after 0x200000 there are some other calibration data.

The A21 = address input and WE# = Write Enable input are not connected at my Rigol DS1042C with flash S29GL032A.

After cut off the first 20 bytes of the firmware file and program the bytes 0x000000 to 0x1FFF00 to the flash and solder it back to the board the rigol works correct.  :-+

It is not easy to solder a TS048 device!  :--

I have made a firmware update to 3.7.1 and change it to a CA1102C 100Mhz model, see Andreas Schuler's homepage:
http://codenaschen.de/tichyblog/index.php?action=blog&entry=17_Hacking%20Rigol%20DS1022C%20DS1042C%20DS1062C%20DS1102C]
[url]http://codenaschen.de/tichyblog/index.php?action=blog&entry=17_Hacking%20Rigol%20DS1022C%20DS1042C%20DS1062C%20DS1102C
[/url]

Thank you drieg for help!   :-+
 

Offline giov

  • Newbie
  • Posts: 3
  • Country: fr
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #128 on: March 06, 2019, 01:46:04 pm »
Hi,
I was trying to upgrade my DS1102D to last firmware, and after few minutes stuck a 50% I decided to reboot it :bad idea  |O
Now I only got white screen and random keyboard status after each reboot.
I have no idea how to get it alive again : I have no programmer, and I don't know how to use JTAG interface  :-[ .
Can someone help me out ?
 

Offline ivi_yak

  • Contributor
  • Posts: 40
  • Country: 00
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #129 on: March 06, 2019, 04:11:00 pm »
Hi, in this case only reflash memory help
eevblog
 

Offline giov

  • Newbie
  • Posts: 3
  • Country: fr
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #130 on: March 06, 2019, 04:24:58 pm »
OK, How can I reflash ? Do I need a programmer of is it possible via jtag ?
 

Offline ivi_yak

  • Contributor
  • Posts: 40
  • Country: 00
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #131 on: March 06, 2019, 05:03:28 pm »
You need to build jtag chain, basically it's BlackFin and altera and using wiggler cable or j-link get your dump.
eevblog
 

Offline giov

  • Newbie
  • Posts: 3
  • Country: fr
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #132 on: March 06, 2019, 09:07:23 pm »
I have got a pirate's v3 card, and I installed openocd : can I reflash with it ?
 

Offline reza chavoshi

  • Newbie
  • Posts: 1
  • Country: ir
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #133 on: September 30, 2019, 11:47:43 am »
Dear all,
I have faced unsuccessful firmware upgrade (to version:00.04.02.01.00) issue with my rigol DS1052E (My oscilloscope display remains white after booting up and some keys lit up randomly)
As I checked this topic it can be solved by reprogramming the flash IC (part no is: S29GL064N90TF104) with a copy of a healthy dump file.
I have a universal programmer with TSOP48 socket and all I need now is the dump file (copy of hex file stored in the flash chip). :-BROKE
I would be really thankful if any one can send me the file so that I can fix my oscilloscope. |O |O
Many Thanks.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf