Author Topic: DG4000 - a firmware investigation  (Read 208638 times)

0 Members and 1 Guest are viewing this topic.

Offline TooOldForThis

  • Regular Contributor
  • *
  • Posts: 57
  • Country: us
  • H: 42.576MHz/Tesla
Re: DG4000 - a firmware investigation
« Reply #225 on: November 04, 2014, 12:50:13 am »
Quote
I tried this "Piranha(DSP)Update_00.01.09.zip" update without luck.
EV,
   You have to rename the file to  "DG4000Update.GEL"   The bootloader only looks for "DG4000Update.GEL" on the USB stick.

The new bootloader loaded in a few minutes.  The new application file took at least 10 minutes to load.  For both files, the DG4000 rebooted  itself after it was done loading the new GEL file.  Don't chicken out part way through the load process.     
 

Offline EV

  • Frequent Contributor
  • **
  • Posts: 525
  • Country: fi
  • Aficionado
Re: DG4000 - a firmware investigation
« Reply #226 on: November 04, 2014, 08:04:07 am »
..   
You have to rename the file to  "DG4000Update.GEL"   The bootloader only looks for "DG4000Update.GEL" on the USB stick.

The new bootloader loaded in a few minutes. 
...

The problem is that I can not load the new bootloader. I tried it again and waited 15 minutes but no luck. Only Mod, Utility and Store buttons are lit. Nothing else happens.

The USB stick is 1 Gb Kingston and it works with the generator.

Here is the system information now:

Software 00.01.08
FPGA 00.01.09
Hardware 01.01
Keyboard 04.01
« Last Edit: November 04, 2014, 08:50:57 am by EV »
 

Offline PA0PBZ

  • Super Contributor
  • ***
  • Posts: 5126
  • Country: nl
Re: DG4000 - a firmware investigation
« Reply #227 on: November 04, 2014, 12:46:31 pm »

The problem is that I can not load the new bootloader. I tried it again and waited 15 minutes but no luck. Only Mod, Utility and Store buttons are lit. Nothing else happens.

Did you rename the DG4000Update_Bootloader.GEL to DG4000Update.GEL?

Keyboard error: Press F1 to continue.
 

Offline EV

  • Frequent Contributor
  • **
  • Posts: 525
  • Country: fi
  • Aficionado
Re: DG4000 - a firmware investigation
« Reply #228 on: November 04, 2014, 02:06:12 pm »
Did you rename the DG4000Update_Bootloader.GEL to DG4000Update.GEL?

Thanks PA0PBZ!
I did not realise that also the bootloader file had to be renamed.  |O

The system information is now:

Software 00.01.09
FPGA 00.01.09
Hardware 01.01
Keyboard 06.01
 

Offline PA0PBZ

  • Super Contributor
  • ***
  • Posts: 5126
  • Country: nl
Re: DG4000 - a firmware investigation
« Reply #229 on: November 04, 2014, 02:18:26 pm »
I did not realise that also the bootloader file had to be renamed.

Don't worry, I only got the idea after reading your post for the third time  ;)
Keyboard error: Press F1 to continue.
 

Offline Orange

  • Frequent Contributor
  • **
  • Posts: 348
  • Country: nl
Re: DG4000 - a firmware investigation
« Reply #230 on: November 04, 2014, 02:45:02 pm »
Did you rename the DG4000Update_Bootloader.GEL to DG4000Update.GEL?

Thanks PA0PBZ!
I did not realise that also the bootloader file had to be renamed.  |O

The system information is now:

Software 00.01.09
FPGA 00.01.09
Hardware 01.01
Keyboard 06.01
Is the calibration still OK after the 1.09 upgrade?
If the calibration is back to defaults, your amplitude and offsets are way out.


I'm asking because if you upgrade the firmware on a DG1022, your calibration is lost, and loads factory defaults. I had this with my DG1022.

Just be aware that upgrading software on RIGOL generators it might loose your calibration!
 

Offline EV

  • Frequent Contributor
  • **
  • Posts: 525
  • Country: fi
  • Aficionado
Re: DG4000 - a firmware investigation
« Reply #231 on: November 04, 2014, 02:59:20 pm »
Just be aware that upgrading software on RIGOL generators it might loose your calibration!

If the calibration will be lost, I have lost it already two times before this update. This was third FW update for my DG4162. There is only manual calbration which is behind password.
 

Offline cybernetTopic starter

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: DG4000 - a firmware investigation
« Reply #232 on: November 05, 2014, 01:12:32 am »
http://bayfiles.net/file/1lrDi/0Wrw06/bfin_rigol_cybernet.rar (for IDA 6.1)

bfin module is (c) Andreas Schuler, rigol ldr contains some of my mods to also read GEL files right away.
PM me if u need the IDA DB with my initial reversing of the .GEN files.

maybe its worth checking new vs old bootloader to prevent rigol from preventing u to downgrade.
the old BL is fully reversed if somebody has questions about it.

unfortunately not much time for rigol stuff lately, but i see its in good hands ;-)
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline PA0PBZ

  • Super Contributor
  • ***
  • Posts: 5126
  • Country: nl
Re: DG4000 - a firmware investigation
« Reply #233 on: November 06, 2014, 02:49:28 pm »
Click the Premium Download button... 8)
Keyboard error: Press F1 to continue.
 

Offline cybernetTopic starter

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: DG4000 - a firmware investigation
« Reply #234 on: November 06, 2014, 04:27:04 pm »
i would expect that ppl who can make use of my shared files are able to download them without infecting their computer with adware - if not, then i suppose it acts as a gatekeeper ;-)
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline PA0PBZ

  • Super Contributor
  • ***
  • Posts: 5126
  • Country: nl
Re: DG4000 - a firmware investigation
« Reply #235 on: November 06, 2014, 06:34:41 pm »
Therefore my personal opinion is that this isn't necessarily a favorable file download service for us to use.

Ted,
I totally agree with you, I just hate these sites tricking you into clicking something that you wouldn't if you knew, like this example or the ones with download buttons all over the place giving you a hard time to find the correct one, or those like a maze just telling you that the file is gone after you have been served ads for like 5 minutes.
But then again, there's something about the given horse etc... so if cybernet decided to use that site I'll thankfully download the file and curse silently :)
Keyboard error: Press F1 to continue.
 

Offline PA0PBZ

  • Super Contributor
  • ***
  • Posts: 5126
  • Country: nl
Re: DG4000 - a firmware investigation
« Reply #236 on: November 06, 2014, 06:38:45 pm »
PM me if u need the IDA DB with my initial reversing of the .GEN files.
...
the old BL is fully reversed if somebody has questions about it.

I did PM but:

Quote
pm deactivated, use the search function ...

So not sure if it ever got there.
I'm interested in what you have, because I can always reinvent the wheel if I ever have enough time...
Keyboard error: Press F1 to continue.
 

Offline cybernetTopic starter

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: DG4000 - a firmware investigation
« Reply #237 on: November 06, 2014, 08:36:42 pm »
will send once im home again, dont have those on may travel laptop  :)
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline PA0PBZ

  • Super Contributor
  • ***
  • Posts: 5126
  • Country: nl
Re: DG4000 - a firmware investigation
« Reply #238 on: November 06, 2014, 08:46:18 pm »
will send once im home again, dont have those on may travel laptop  :)

Thanks! And while you are at it, the IDA rigol loader file you uploaded is a .obj, not a .ldw
Keyboard error: Press F1 to continue.
 

Offline cybernetTopic starter

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: DG4000 - a firmware investigation
« Reply #239 on: November 06, 2014, 10:36:16 pm »
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline PA0PBZ

  • Super Contributor
  • ***
  • Posts: 5126
  • Country: nl
Keyboard error: Press F1 to continue.
 

Offline guarneri0

  • Contributor
  • Posts: 12
Re: DG4000 - a firmware investigation
« Reply #241 on: November 17, 2014, 04:26:51 pm »
Hi,

I have read most of the thread and it appears that the latest 4062 is no longer hackable (as apparently it comes with a version of the firmware that can't be hacked yet.)

Is this still true?  Is there perhaps a more complicated route, but still hack 4062 to go up to ~200Mhz?  I was planning to purchase a 4062 and this is a key factor to consider.

Thanks.
 

Offline PA0PBZ

  • Super Contributor
  • ***
  • Posts: 5126
  • Country: nl
Re: DG4000 - a firmware investigation
« Reply #242 on: November 20, 2014, 06:34:57 pm »
the old BL is fully reversed if somebody has questions about it.

Hi Cyber,

If you have an IDA file for the old BL I'd be more than happy to have a look. The new FW is a dead end, they removed the part that reads the license file and I'm not feeling like putting that back in. So the best route to take is to convince the new BL to accept older FW, but even disassembled the BF code is hard to read. So if I can understand the old one I could probably make something up to fool the new one.
Keyboard error: Press F1 to continue.
 

Offline cybernetTopic starter

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: DG4000 - a firmware investigation
« Reply #243 on: November 20, 2014, 06:39:38 pm »
see pm ;) dont want to give rigol ideas
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline fact

  • Contributor
  • Posts: 35
  • Country: nl
Re: DG4000 - a firmware investigation
« Reply #244 on: November 24, 2014, 05:03:13 pm »
Cyber,

My DG4062 also suffers from a too recent firmware to hack and I'd like to take a peek at your investigations regarding the previous version of the bootloader. Wonder if you could spare me a copy of your work.
 

Offline fact

  • Contributor
  • Posts: 35
  • Country: nl
Re: DG4000 - a firmware investigation
« Reply #245 on: November 29, 2014, 09:45:03 am »
Any progress yet?
 

Offline dudarobe

  • Newbie
  • Posts: 3
Re: DG4000 - a firmware investigation
« Reply #246 on: December 05, 2014, 06:46:17 pm »
Hi, any one know, that dg4100 with:
Software 00.01.07
Hardware 01.03
It can be hacked?

Thanks, Robert
 

Offline Teneyes

  • Frequent Contributor
  • **
  • Posts: 498
  • Country: ca
Re: DG4000 - a firmware investigation
« Reply #247 on: December 05, 2014, 10:12:54 pm »
Hi, any one know, that dg4100 with:
Software 00.01.07.   Hardware 01.03
See  /here
IiIiIiIiIi  --  curiosity killed the cat but, satisfaction brought it back
 

Offline Pasky

  • Regular Contributor
  • *
  • Posts: 149
  • Country: us
Re: DG4000 - a firmware investigation
« Reply #248 on: December 30, 2014, 04:06:10 pm »
Hi, any progress made on this?  Thanks.
 

Offline Pasky

  • Regular Contributor
  • *
  • Posts: 149
  • Country: us
Re: DG4000 - a firmware investigation
« Reply #249 on: December 30, 2014, 11:10:42 pm »
Well, just ordered a DG4062 from Tequipment today.  Hoping the ones in stock have a 01.08 or lower.  If not, I think 60Mhz will satisfy what I need.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf