Skip to content

Firmware m0901

mefistotelis edited this page May 15, 2021 · 21 revisions

Table of Contents

Target
Purpose
Versions
Structure
OS and Libraries
Flashing
Interfaces

Target

The firmware programs SoC which handles video encoding and flight control. Location of this chip:

  • in WM240, Allwinner H3 SoC; is on WM240 Core Board
  • in other products, the location is unknown

Purpose

The module contains programming of a SoC which handles image sensor and video encoding, but also flight control. Additionally, it uses TrustZone to (semi)securely store cryptographic keys, and is the component which controls firware update process on the drone.

Versions

TODO

Structure

The IM*H module within FW update package is always encrypted, with AES, using platform-specific UFIE key.

Decrypted firmware is a JAR file, which when unzipped reveals typical Android partitions (normal.img, recovery.img, system.new.dat, vendor.new.dat), an a 2nd stage bootloader (bootarea.img).

The bootarea.img has the bootloader encrypted with TBIE key. Like the whole firmware file, it has IM*H format.

Boot partitions (normal.img, recovery.img) are encrypted with TBIE key, and have IM*H format as well.

OS and Libraries

TODO

Flashing

TODO

Interfaces

TODO

Clone this wiki locally