Karma refusing to pair - Reverse engineering investigation

[zhf.electronics]

Have a look at my controller image here

dumpsystemv2501.img

GoPro Karma Controller image 2.50.1

drive.google.com

It should have maps for Canberra Australia in it. If not let me know and I will see what else I have.

Thanks, but this is a dump of the "system" partition.
I assume that the maps are saved in the "data" or "gopro"(less likely) partition

Dump commands:
"data"
update mread store data normal 0x51bf0000 data.img
"gopro"
update mread store gopro normal 0x20000000 gopro.img

 

[zhf.electronics]

nandtest

 

[zhf.electronics]

I think I'll have to leave this forum

 

[zhf.electronics]

Thanks, but this is a dump of the "system" partition.
I assume that the maps are saved in the "data" or "gopro"(less likely) partition

Dump commands:
"data"
update mread store data normal 0x51bf0000 data.img
"gopro"
update mread store gopro normal 0x20000000 gopro.img

 

[bozmanx]

Thanks, but this is a dump of the "system" partition.
I assume that the maps are saved in the "data" or "gopro"(less likely) partition

Dump commands:
"data"
update mread store data normal 0x51bf0000 data.img
"gopro"
update mread store gopro normal 0x20000000 gopro.img

I will look to see if I can dump them later today.

 

[bozmanx]

I will look to see if I can dump them later today.

Im reading them off the controller now and will upload them in about 2 hours. The data one is 1.3gb's. GoPro is still reading.

 

[bozmanx]

Here it is , they are both in the same zip .

gopro_and_data_images.zip

drive.google.com

Let me know if there are issues with the link

 

[Boko]

Thanks, but this is a dump of the "system" partition.
I assume that the maps are saved in the "data" or "gopro"(less likely) partition

Dump commands:
"data"
update mread store data normal 0x51bf0000 data.img
"gopro"
update mread store gopro normal 0x20000000 gopro.img

update mwrite store data normal 0x51bf0000 data.img

The controller that was blacking out after the startup screen has been fixed.
Even the pairing number has been copied

 

[bozmanx]

I will look to see if I can dump them later to

Thanks, but this is a dump of the "system" partition.
I assume that the maps are saved in the "data" or "gopro"(less likely) partition

Dump commands:
"data"
update mread store data normal 0x51bf0000 data.img
"gopro"
update mread store gopro normal 0x20000000 gopro.img

The files are awaiting approval from a mod.

 

[Boko]

Thanks, but this is a dump of the "system" partition.
I assume that the maps are saved in the "data" or "gopro"(less likely) partition

Dump commands:
"data"
update mread store data normal 0x51bf0000 data.img
"gopro"
update mread store gopro normal 0x20000000 gopro.img

update mwrite store data normal 0x51bf0000 data.img

The controller that was blacking out after the startup screen has been fixed.

The controller that was blacking out after the startup screen has been fixed.
Even the pairing number has been copied

A saved map has been copied. However, the new map is about 70% downloaded and a message appears saying that it could not be saved and please check your wifi.

 

[Boko]

The controller that was blacking out after the startup screen has been fixed.
Even the pairing number has been copied

I was able to connect and control both the original controller and the data-copied controller to the drone.

 

[clackey]

I think I'll have to leave this forum

View attachment 756View attachment 755

Yes, we are currently checking all links to outside sources as we've had a flood of spammers recently.

 

[Heiko Klein]

Überblick: GoPro Karma Pairing-Problem beheben

In dieser Anleitung gehen wir auf eine Fehlerbeseitigung & Lösung für das Verbindungsproblem (Kein Pairing) der Gopro Karma ein.

www.drone-zone.de

 

[Heiko Klein]

Überblick: GoPro Karma Pairing-Problem beheben

In dieser Anleitung gehen wir auf eine Fehlerbeseitigung & Lösung für das Verbindungsproblem (Kein Pairing) der Gopro Karma ein.

www.drone-zone.de

Sergey ist die Person, die den eigentlichen Durchbruch geschafft hat - Danke für deine Arbeit

 

[bozmanx]

I was able to connect and control both the original controller and the data-copied controller to the drone.

Which image did you restore ?

 

[account deleted]

 

[bozmanx]

View attachment 761View attachment 760

Nice, is that Jlink commander ? I tried for a couple months with several different software packages (Jlink, OpenOCD, etc). M biggest issue was I could not change the status of em0 and em1 so the processor was constantly in motion.

 

[account deleted]

Nice, is that Jlink commander ? I tried for a couple months with several different software packages (Jlink, OpenOCD, etc). M biggest issue was I could not change the status of em0 and em1 so the processor was constantly in motion.

I think you are looking for the problem in the wrong place. By default, Emu0 and Emu1 are connected via resistors to VCC, which sets to 1:1

If you need it, I can mark on the pcb where they are located(resistors), but unfortunately they do not have contacts(test points).

 

[bozmanx]

I think you are looking for the problem in the wrong place. By default, Emu0 and Emu1 are connected via resistors to VCC, which sets to 1:1

If you need it, I can mark on the pcb where they are located(resistors), but unfortunately they do not have contacts(test points).
View attachment 762

Thanks but if you have created a way of connecting to the JTAG without altering there state then I more that likely wont need it (but it cant hurt to know)

 

[Boko]

Which image did you restore ?

update mwrite store data normal 0x51bf0000 data.img