-
Notifications
You must be signed in to change notification settings - Fork 458
Firmware m0901
Target
Purpose
Versions
Structure
OS and Libraries
Flashing
Interfaces
The firmware programs SoC which handles video encoding and flight control. Location of this chip:
- in WM240, Allwinner H3 SoC; is on WM240 Core Board
- in other products, the location is unknown
The module contains programming of a SoC which handles image sensor and video encoding, but also flight control. Additionally, it uses TrustZone to (semi)securely store cryptographic keys, and is the component which controls firware update process on the drone.
TODO
The IM*H
module within FW update package is always encrypted, with AES, using platform-specific UFIE
key.
Decrypted firmware is a JAR file, which when unzipped reveals typical Android partitions (normal.img
, recovery.img
, system.new.dat
, vendor.new.dat
), an a 2nd stage bootloader (bootarea.img
).
The bootarea.img
has the bootloader encrypted with TBIE
key. Like the whole firmware file, it has IM*H
format.
Boot partitions (normal.img
, recovery.img
) are encrypted with TBIE
key, and have IM*H
format as well.
TODO
TODO
TODO
This page is created by drone enthusiasts for drone enthusiasts.
If you see a mistake, or you know more about specific subject, or you see an area for improvement for the wiki - create an issue in this project and attach your patch (or describe the change you propose).