Hacking the Rigol MSO5000 series oscilloscopes

[NoisyBoy]

I just saw that in the US site as well, Bode Plot is here!

[bmx]

MSO5_FW_V1_1_4_4.zip, hmm, no enhancement on winzip usage 

[mabl]

There has been no changes to license checks etc. so the binary can be patched the usual way  . However you will need a new patch file. If you cannot prepare one yourself, maybe somebody is friendly enough to do one and post it.

[yumcca]

support bode plot ?? where to down?  I search the RIGOL webside they only offer the v00.01.02.00.03

[YZEPT]

The link is labeled incorrectly on the RigolNA site. The new version with Bode plots will download. For whatever reason Rigol are very slack about how they label links.

[ToThePub]

In true Rigol style it's a bit of mess.

If you go here:
https://www.rigolna.com/products/digital-oscilloscopes/MSO5000/

Scroll down, go to the "Downloads" tab, Click the firmware file "MSO5000 scope family latest firmware" and it'll download the correct version.
If you look at the link, you will think it's downloading MSO5_FW_V1_1_4_4.zip
But it'll actually download a file called MSO5_FW_Update.zip which is the latest:
v00.01.03.00.01 2020/04/13
     -Add bode map function

[YZEPT]

I thought I knew how to generate the new hashes but the results prove otherwise
Is there anyone out there that has the knowledge and time to show me and the other script kiddies the correct CRC values to plug into the script so we can patch the newest version MSO5074 firmware Rigol just released? : v00.01.03.00.01
I have tried but I cannot get it to work and I think its to do with how I've gotten lost down this many kilometre deep rabbit hole.

[ForceFed]

Cool. Bode plotting in new firmware, happy I didn't jump ship...

[el_man]

Can someone attach a screenshot of Bode plot function

[MegaVolt]

Can someone attach a screenshot of Bode plot function

https://www.eevblog.com/forum/testgear/rigol-mso-5000-hardwaresoftware-revisions/msg3021120/#msg3021120

[el_man]

Can someone attach a screenshot of Bode plot function

https://www.eevblog.com/forum/testgear/rigol-mso-5000-hardwaresoftware-revisions/msg3021120/#msg3021120

Thanks, Looks good unfortunately... 

[sb42]

Here's a patch for 01.03.00.01.

Before: 2efa4605b83bf1af48bf6736bfae3255
After: 965a689e7e5f29c180db4a2aaf21ce6b

[typoknig]

Here's a patch for 01.03.00.01.

Before: 2efa4605b83bf1af48bf6736bfae3255
After: 965a689e7e5f29c180db4a2aaf21ce6b

Here is another flavor of patch for 01.03.00.01 that will disable the "phone home" firmware upgrade check in addition to enabling options.

[boris.t]

Here's a patch for 01.03.00.01.

Before: 2efa4605b83bf1af48bf6736bfae3255
After: 965a689e7e5f29c180db4a2aaf21ce6b

Here is another flavor of patch for 01.03.00.01 that will disable the "phone home" firmware upgrade check in addition to enabling options.

Thank you! But, can anyone make full instruction for 01.03.00.01?

[typoknig]

Here's a patch for 01.03.00.01.

Before: 2efa4605b83bf1af48bf6736bfae3255
After: 965a689e7e5f29c180db4a2aaf21ce6b

Here is another flavor of patch for 01.03.00.01 that will disable the "phone home" firmware upgrade check in addition to enabling options.

Thank you! But, can anyone make full instruction for 01.03.00.01?

Same as all the other patches. Just read the instructions in the first post on this page:

https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3002776/#msg3002776

[Noy]

Hm,
I think your (typoknig) patch is not working right.

I updated to 1.3 and it was working. Then i sshed in and grabbed appEntry. Checked the md5sums and then i applied your patch on my linux machine. Checked md5sum again. Patched appEntry has correct md5sum. I did chmod +x appEntry and copied back onto the scope.
But now it is not starting up anymore. Think i have to apply the original patch again...

Maybe i have to check again spelling and chmod but i think it was correct..

[typoknig]

Hm,
I think your (typoknig) patch is not working right.

I updated to 1.3 and it was working. Then i sshed in and grabbed appEntry. Checked the md5sums and then i applied your patch on my linux machine. Checked md5sum again. Patched appEntry has correct md5sum. I did chmod +x appEntry and copied back onto the scope.
But now it is not starting up anymore. Think i have to apply the original patch again...

Maybe i have to check again spelling and chmod but i think it was correct..

Using SSH to apply the patch isn't necessary.  Just use the DS5000Update.GEL.doc file from this post.  I have re-attached it here for convenience.

The permissions, owner, and group of appEntry should be 0755, root, and root respectively.  It will look like this when correct:

Code: [Select]

-rwxr-xr-x    1 root     root      22558088 Apr 19 07:00 appEntry


[Cerebus]

... Checked the md5sums and then i applied your patch on my linux machine. Checked md5sum again. Patched appEntry has correct md5sum. I did chmod +x appEntry and copied back onto the scope.
But now it is not starting up anymore. Think i have to apply the original patch again...

That ordering might be your problem, chmod then copying it. Might have lost permissions during the copy, I'd have copied and then chmod'd. Check the md5sum of what you copied onto the scope on the scope and check the permissions as above.

[boris.t]

Hm,
I think your (typoknig) patch is not working right.

I updated to 1.3 and it was working. Then i sshed in and grabbed appEntry. Checked the md5sums and then i applied your patch on my linux machine. Checked md5sum again. Patched appEntry has correct md5sum. I did chmod +x appEntry and copied back onto the scope.
But now it is not starting up anymore. Think i have to apply the original patch again...

Maybe i have to check again spelling and chmod but i think it was correct..

Using SSH to apply the patch isn't necessary.  Just use the DS5000Update.GEL.doc file from this post.  I have re-attached it here for convenience.

The permissions, owner, and group of appEntry should be 0755, root, and root respectively.  It will look like this when correct:

Code: [Select]

-rwxr-xr-x    1 root     root      22558088 Apr 19 07:00 appEntry


Works. Thank you!

[Norbi]

I confirm works, thank you

[Noy]

Thx for the hint with the "autopatcher" ;-)
This time it worked. So must be my fault with chmod before copy or something else...

[Cerebus]

Here's a patch for 01.03.00.01.

Before: 2efa4605b83bf1af48bf6736bfae3255
After: 965a689e7e5f29c180db4a2aaf21ce6b

Here is another flavor of patch for 01.03.00.01 that will disable the "phone home" firmware upgrade check in addition to enabling options.

I've applied this particular version of the patch for 01.03.00.01 and, just to give others comfort, it all seems to be working as intended.

[el_man]

Here's a patch for 01.03.00.01.

Before: 2efa4605b83bf1af48bf6736bfae3255
After: 965a689e7e5f29c180db4a2aaf21ce6b

Here is another flavor of patch for 01.03.00.01 that will disable the "phone home" firmware upgrade check in addition to enabling options.

I've applied this particular version of the patch for 01.03.00.01 and, just to give others comfort, it all seems to be working as intended.

I can confirm this too! 

[sjm]

Here's a patch for 01.03.00.01.

Before: 2efa4605b83bf1af48bf6736bfae3255
After: 965a689e7e5f29c180db4a2aaf21ce6b

Here is another flavor of patch for 01.03.00.01 that will disable the "phone home" firmware upgrade check in addition to enabling options.

I've applied this particular version of the patch for 01.03.00.01 and, just to give others comfort, it all seems to be working as intended.

Yes, I confirm that this worked for me too. Thanks a lot.

I find it a bit strange that the updated firmware seems to be available only on the Rigol NA site, not on intl or EU.

BR, -sjm

[Cerebus]

I find it a bit strange that the updated firmware seems to be available only on the Rigol NA site, not on intl or EU.

No, we've seen this before. New firmware goes up on one of the Rigol sites and the others don't seem to keep in step. It's anybody's guess as to which site the firmware will appear on first, there's been no particular pattern in the past.