Samsung NX Opensource files re-uploaded

otto k wrote:

Hi, not all NX cameras run on Linux, my findings are only for NX500 (but do apply to other, but not all, models).

I don't know...but this github on modding the NX500/NX1 is pretty specific...

"This is a repository hosting information for those interested in altering the functionality of their Samsung NX500 and NX1 cameras.

These cameras run a full blown Linux distribution (Tizen) with shell, X, networking stack, debugging and testing tools - the works. This enables us to alter functionality of the cameras and ... well - just play around - it's fun! Seeing xeyes on your camera is such a heart warming experience

https://github.com/ottokiksmaler/nx500_nx1_modding#:~:text=These%20cameras%20run%20a%20full,and%20testing%20tools%20-%20the%20works.

curious...do you have other sources that say it's something else?

ge0rg wrote:

I'd love to be able to unpack that and to understand which OS this tiny beast is running.

I wonder if the firmware has code to unpack itself near the beginning.

foot wrote:

https://github.com/ottokiksmaler/nx500_nx1_modding#:~:text=These%20cameras%20run%20a%20full,and%20testing%20tools%20-%20the%20works.

curious...do you have other sources that say it's something else?

You're replying to Otto.. with a link to Otto's repository?

It's possible to execute scripts on NX mini, for example, but I couldn't get it to do much else than display text on the screen. It doesn't have Linux.

Here you can see some research on what operating systems various Samsung cameras are using: https://github.com/ge0rg/samsung-nx-hacks

I'm not very good at ARM disassembly, and there are no obvious headers in the firmware.

Older models (DV300F, WB2000/WB210F) package an ELF file in the firmware update ZIP,  it's just prepended with a 512 byte header. You can strip that header and use a regular ELF decompiler (I'm looking at the code with Ghidra) for them. There is also a bit of earlier reverse engineering work on them from the ancient past:

https://chdk.setepontos.com/index.php?topic=9465.0

https://web.archive.org/web/20130624174229/http://www.unternet.org/wiki/Firmware/Camera/Samsung_WB2000/FWUP

https://github.com/jam1garner/wb35f-research/

Unfortunately, the NX mini/3x00 bin file neither looks like those ELF files nor like any of the other NX series firmware files. There is no obvious signature at 0x000 or 0x200, so I feel lost.

Maybe I can find a broken/used 3000 and somebody who can desolder and read out BGA, but this is a huge amount of work.

It's possible to execute scripts on NX mini, for example, but I couldn't get it to do much else than display text on the screen. It doesn't have Linux.

How do you do that? I haven't found any traces of any kind of code execution, and just a few vague hints regarding dev/CS modes.

Here you can see some research on what operating systems various Samsung cameras are using: https://github.com/ge0rg/samsung-nx-hacks

I'd love to complete the entries on NX mini and NX 3x00, and I'd also love to understand what makes them tick.

shutterbugnx wrote:

foot wrote:

https://github.com/ottokiksmaler/nx500_nx1_modding#:~:text=These%20cameras%20run%20a%20full,and%20testing%20tools%20-%20the%20works.

curious...do you have other sources that say it's something else?

You're replying to Otto.. with a link to Otto's repository?

Opps! My bad. Didn't know that...

My apologies Otto!!!

It's possible to execute scripts on NX mini, for example, but I couldn't get it to do much else than display text on the screen. It doesn't have Linux.

Here you can see some research on what operating systems various Samsung cameras are using: https://github.com/ge0rg/samsung-nx-hacks

so reading that link, I found:

"These cameras run a full blown Linux distribution (Tizen) with shell, X, networking stack, debugging and testing tools - the works. This enables us to alter functionality of the cameras and ... well - just play around - it's fun! Seeing xeyes on your camera is such a heart warming experience :)"

as I read it, it clearly states that the NX500 uses Linux

I don't know anything about the NX mini

Thank you for your efforts.

So I got a half-broken NX3000, disassembled the body (thanks iFixit!), and removed the paper sticker from the main CPU.

It turns out to be a Milbeaut MB86S22A SoC from Fujitsu/Socionext, and it seems that the company is still operational. I've documented what I found so far at https://github.com/ge0rg/samsung-nx-hacks/wiki/NX3000-Hardware-Information#cpu-details and it seems to be a very deep rabbit hole. The "M-7M" in M7MU stands for Milbeaut 7th generation: https://web.archive.org/web/20140627105054/http://jp.fujitsu.com/group/fsl/en/release/20130904-1.html

Apparently, other vendors also used the SoC, and it's also a secondary chip on the Galaxy K Zoom.

牛逼

freedom21 wrote:

Can you add, manual levels volume, when you connect a mic to the NX30? That is, the ability to disable the AGC - Auto Gain Control? Thanks

This is something that I've been trying to do for a while now.. I've already bricked one of my Nx30 main boards, 2 more to go... oh well.. I wish I was able to mod the NX Mini and NX300 to output clean liveview over the HDMI. Or 2k24p recording on the NX30 🥲.

Anyway, Samsung released the source code for the firmware compiler and the firmware package itself, the problem is that the camera runs a version of Tizen OS, and it runs a program called "di-camera-app-nx30", unfortunately most of the user level functions are all bind to this package, which can not be easily modified.

Maybe someone with a deep knowledge on Linux programming could reverse engineer the package and build a compiler, who knows... All we can do right now is unlock hidden configurations and run side programs, like autobackup or SD encryption.

Have you found any clue in those open source files or service manuals how to get access in developer menu with NX1 in firmware version 1.41?

This is not going to work with the source-code access that we got. As was already pointed out, the `di-camera-app` binary that's doing all the magic camera things, and the respective source code, and the respective documentation of the proprietary CPU registers, are not part of the Open Source packages. All that remains is to do some heavy reverse-engineering of it to identify changes from the previous version, and that requires significant dedication and time!

Artur - Brasil wrote:

Hi, I can't anymore send email with my photos.

The camera shows a strange site in chinese instead of email upload forms...

Any sugestion to fix this?

I recognize that site, it's Naver and the writing is Korean. There's no direct replacement for the emailing functionality as far as I know, but this may be of interest https://github.com/ge0rg/samsung-nx-emailservice

I'm currently doing a bit of firmware archaeology on the NX series, and it doesn't look like there is any sort of filesystem in the NX10/NX11 firmware, it's probably just one application that's loaded directly from the flash.

It seems to be powered by the uITRON real-time OS, but there is not much to be found out about it. NX200 is the first one that seems to use any sort of file system with dedicated files in it, but I haven't identified its format either.

Overview of the different NX camera generations: https://github.com/ge0rg/samsung-nx-hacks#device-support