Tagged with g - Personal View Talks

Lumix G9 firmware reverse engineering

jverbeek — Fri, 14 Aug 2020 08:31:54 +0000

Hey there, I recently got myself a Lumix G9 and was keen to look into the firmware. I'm hitting a roadblock, but maybe somebody can help me :)

The .bin firmware you can download from Panasonic (https://av.jpn.support.panasonic.com/support/share2/eww/com/dsc/fts/zip/G9___V22.zip) has the "UPD " magic, followed by 8 bytes I couldn't associate, and then what seems like a product identifier "MC471" (MC = mirrorless camera?)

The interesting stuff starts at 0x2EC, where something which looks like a partition table starts. This section is 4884 bytes long (including some padding I believe) and contains 48 partitions which I managed to reverse engineer:

// 92 bytes - index entry of the partition listing struct partitionIndexEntry { char name[12]; // 12 bytes - name of the partition int offsetFile; // 4 bytes - offset in the firmware file int size; // 4 bytes - size of the partition int offsetMemory; // 4 bytes - offset in the memory on the camera int encryption; // 4 bytes - whether the partition is encrypted (0x3) or not (0x2) char checksum[32]; // 32 bytes - SHA-256 checksum of unencrypted partitions? char key[16]; // 16 bytes - encryption key?, if encryption == 0x3 char padding[16]; // 16 bytes - padding };

Reading that in in my custom C tool I've written for this logs out 48 partitions with their offset (in the firmware file, the real data starts at 0x1600) and size. I added automatic dd'ing so I now got 48 .bin files which are the extracted partitions out of the big firmware file. Adding all the sizes of the partitions together is also exactly the size of the original .bin minus the 0x1600/5120 bytes at the beginning which are the headers and partition table. You can download the extracted partition files here: https://drive.google.com/file/d/1P4681aZkRlCUuaiL10nH_En1g70iRLKS/view

Now, they obviously seem to be encrypted, and I haven't been able to figure out how. As you can see I was thinking whether the 16 byte long key in the partition index might be a key, because it's filled with zeros if encryption is 0x2.

This is my progress, I greatly appreciate any hints!

Some inexpensive Waterproof Underwater Housing Case for GX7?

Manu4Vendetta — Tue, 04 Aug 2015 10:40:27 +0000

It is a mystery that manufacturers such as Neewer and Meikon (for poor man) which are available are gear for GM1, GH4, GF's, Sony A6000, A7 and not for the GX7 being this camera of similar dimensions to A6000 and very popular. Or Im making a bad search. Nauticam is not for me, too expensive.

FS: Metabones Nikon to M43 Speedbooster Adaptor

kingmixer — Tue, 12 May 2015 14:05:53 +0000

Metabones Speedbooster for using Nikon mount lenses on any Micro Four Thirds mount camera. Functions perfectly and no defects, there is only some wear on the paint on the bottom side. $300 shipped anywhere in the US.

C-Mount Speed Booster?

Brian202020 — Wed, 29 Oct 2014 07:06:52 +0000

Does anyone know of a way to get a Speed Boosted image from a C-Mount camera? I'd rather use one official Metabones Speed Booster with a second adapter than having it all in one generic Speed Booster adapter, but I'll take all idea's. Metabones currently makes MFT, NEX/E-Mount, and Fuji X Speed Boosters, so ideally I'm looking for one of those mounts to C-Mount. I'm having trouble finding such an adapter. Thanks.

// Phab : La rochelle - quartier de l'encan

etreetsoi — Tue, 21 Oct 2014 01:41:33 +0000

Panasonic GH2 / 1080p Panasonic Lumix G 20mn/f1,7

Contax, Carl Zeiss G series

sicovdplas — Thu, 16 Aug 2012 13:27:09 +0000

Hello fellow personal viewers,

I've got a question, do the fellow filmmakers here have any experience with the G series of Carl Zeiss (Contax Yashica - mount)

I've been working with the normal Contax Carl zeiss series for over a 2 years.

And i was wondering if anyone here ownes any of these G lenses and have any test samples, or comparing samples vs other lenses!

Cheers!