Products > Test Equipment
Sniffing the Rigol's internal I2C bus
<< < (871/899) > >>
ted572:
DSA800 Boot Loader:    It is customary for electronic equipment manufacturers to store their Boot Loader in ROM, EROM, ERAM, etc;  in a form of Protected Memory.  Not necessarily to prevent hacking, but to safe guard it from corruption.  Because once corrupted (and it has to be retained for the Life Of The Equipment) the unit is dead in its tracks, and re-installation of firmware isn’t generally possible.  So then,  >  Back To The Factory.  That’s why I said the changing the firmware will probably be tricky.  The task of the Boot Loader is primarily to just boot up the system firmware upon equipment power up, to check and control firmware updates, changes, and installation methods.  Not to prevent alterations of installed firmware.  The firmware, its checksum(s), etc, do that job.  So the Boot Loader doesn’t itself prevent someone from hacking the Rigol Options.

We know that the Rigol DP800 Series is an exception to using protected memory for the Boot Loader.  Because Rigol provided a new Boot Loader along with at least one of its firmware updates.

Hopefully someone can figure out how to go back to a earlier Boot Loader in the DSA815.  Although if its protected, and very likely it is, especially in the newer hardware Main Boards, then it may not be easy at all.  It would have been very easy for Rigol to add a Boot ROM in the newer boards (v. 7 and above), and then it would be much more difficult to change, But Not Impossible.
smgvbest:

--- Quote from: ted572 on May 13, 2017, 02:13:48 pm ---DSA800 Boot Loader:    It is customary for electronic equipment manufacturers to store their Boot Loader in ROM, EROM, ERAM, etc;  in a form of Protected Memory.  Not necessarily to prevent hacking, but to safe guard it from corruption.  Because once corrupted (and it has to be retained for the Life Of The Equipment) the unit is dead in its tracks, and re-installation of firmware isn’t generally possible.  So then,  >  Back To The Factory.  That’s why I said the changing the firmware will probably be tricky.  The task of the Boot Loader is primarily to just boot up the system firmware upon equipment power up, to check and control firmware updates, changes, and installation methods.  Not to prevent alterations of installed firmware.  The firmware, its checksum(s), etc, do that job.  So the Boot Loader doesn’t itself prevent someone from hacking the Rigol Options.

We know that the Rigol DP800 Series is an exception to using protected memory for the Boot Loader.  Because Rigol provided a new Boot Loader along with at least one of its firmware updates.

Hopefully someone can figure out how to go back to a earlier Boot Loader in the DSA815.  Although if its protected, and very likely it is, especially in the newer hardware Main Boards, then it may not be easy at all.  It would have been very easy for Rigol to add a Boot ROM in the newer boards (v. 7 and above), and then it would be much more difficult to change, But Not Impossible.

--- End quote ---

granted, however the DSA815 support boot from USB and the blackfin supports uart boot.  so if we have the boot code in LDR format and put that on a USB drive or load via uart to get 1.03 in then could we not backload FW1.0x then?
ted572:

--- Quote from: smgvbest on May 13, 2017, 03:37:22 pm ---granted, however the DSA815 support boot from USB and the blackfin supports uart boot.  so if we have the boot code in LDR format and put that on a USB drive or load via uart to get 1.03 in then could we not backload FW1.0x then?

--- End quote ---
Hi Sandra:  The Blackfin's interface capability can be limited/overridden by the instructions from the Boot Loader. Or purposely left out by the hardware designer for expediency because it wasn't required for the task.  I think that the current .04 Boot Loader most likely preempts doing this, so I think someone will have to directly force a .03 Boot Loader (or equivalent) in place of the .04.
I don't have any vested interest here, because I have the original hardware with all of the permanent Options (so far anyway).  If I had the newer unit I would be charging into this relentlessly with a DSA815 open on my bench, to try to at least understand high level system architecture used.  I did this for my units Front End, LOs, Mixers, and IFs through to the DSP.  https://www.eevblog.com/forum/testgear/spectrum-analyzer-rigol-dsa815/msg1059060/#msg1059060
You may want to consider sketching out your units digital control logic surrounding the firmware and its management.  This should help shed more light on all this.  I believe that all of the involved ICs have vendor P/Ns, and a few may have SMT Codes.  Doing this with Peter's info may help pull it together.
EOT and Cheers, Ted

Edit:  I think that this discussion should moved back here ->  'Re: Spectrum Analyzer - Rigol DSA815'  to get all the interested and knowledgeable parties in this matter involved.

Please go to  'Re: Spectrum Analyzer - Rigol DSA815'  to follow this subject:  https://www.eevblog.com/forum/testgear/spectrum-analyzer-rigol-dsa815/msg1207904/#msg1207904
cybernet:
some ppl asked for it, finally found that stuff again:

DS2000 stuff:

IDA Pro Signatures: http://www.filedropper.com/showdownload.php/ds2000cybernet23072013
LDR Tool: http://www.filedropper.com/geltoolsrctar
Custom LDR binary: http://www.filedropper.com/rigolds2000customlcdtar
UBOOT Custom: http://www.filedropper.com/uboot-201404ds2000tar


DG4000 stuff:

Firmwares, CEN, IDB files: http://www.filedropper.com/dg4000tar_1

DS815 stuff:

DSA815 Dump + IDA: http://www.filedropper.com/dsa815


have fun


RoGeorge:

--- Quote from: cybernet on May 17, 2017, 09:41:46 pm ---...
DG4000 stuff:
Firmwares, CEN, IDB files: http://www.filedropper.com/dg4000tar
...

--- End quote ---

Thank you, but this download didn't worked for me. I tried with 2 different computers, and they both say "unexpected end of archive", "file is broken".

Could you check, please?
Navigation
Message Index
Next page
Previous page
There was an error while thanking
Thanking...

Go to full version
Powered by SMFPacks Advanced Attachments Uploader Mod