I bricked my p3s with ftp range mod - let's fix it together

[godtec]

My 4K is flying again !!!!! Thank you all for your knowledge and your efforts. BTW You dont have to disassemble the gimbal on 4k to get to the solder points. The wifi card sits under the sensor panel.

Johan!

Where are these pins exactly? which sensor board are you referring to? I have a P3-4K with the "separate" Radio board.
I want to connect another radio board to the Phantom 3 To/through the UART and use this to connect to the wireless network. (Long Story)
So basically have a remote serial connection to connected board on my P3-4K but using the wireless network as the connection link.

Also Are the pins 3.3 volt or 5 Volt.

Thanks.
MikeK

 

[armour]

Hey! You've connected the Arduino wrongly! That's why! There is hope for your drone once it didn't damage the drone board due to the wrong connection...

Here is what to do, based on your pictures

Remove the jumper cable from the AREF pins (Where did you get instructions to do that???)
Instead: Take the same jumper cable and connect RESET to GND on the left hand input connections.
Now move the orange jumper cable from the left side to a GND input on the right side.

See this youtube link where the guy does it:

Basically that will cause the Arduino to work in TTL 5v which is what you need.
Follow my instructions carefully and good luck!

I already have checked the connection, even I change the jumper cables as well. It connected to my computer before, I thought that editing rcS, rcS_ap, rcS_aphand, and rcS_cli ruined everything. Thanks to everyone here, I have recovered the transmitter, sadly had no luck with the aircraft. I am frustrated and desperate, it has been more than 2 months since I bricked my P3S, and now my aircraft cannot connect with my computer via UART. I was thinking about replacing the gimbal board might solve the problem. Need your advice or anyone here, will replacing gimbal board solve the problem?
Thank you

 

[Yudhistira5]

Hey! You've connected the Arduino wrongly! That's why! There is hope for your drone once it didn't damage the drone board due to the wrong connection...

Here is what to do, based on your pictures

Remove the jumper cable from the AREF pins (Where did you get instructions to do that???)
Instead: Take the same jumper cable and connect RESET to GND on the left hand input connections.
Now move the orange jumper cable from the left side to a GND input on the right side.

See this youtube link where the guy does it:

Basically that will cause the Arduino to work in TTL 5v which is what you need.
Follow my instructions carefully and good luck!

Did I? I followed the instruction from JACKHADRILL that provided the pdf, you may check it, but it worked several times before. If that so, I will try to reconnect. Thank you, bro...

 

[Yudhistira5]

Hey! You've connected the Arduino wrongly! That's why! There is hope for your drone once it didn't damage the drone board due to the wrong connection...

Here is what to do, based on your pictures

Remove the jumper cable from the AREF pins (Where did you get instructions to do that???)
Instead: Take the same jumper cable and connect RESET to GND on the left hand input connections.
Now move the orange jumper cable from the left side to a GND input on the right side.

See this youtube link where the guy does it:

Basically that will cause the Arduino to work in TTL 5v which is what you need.
Follow my instructions carefully and good luck!

Same result, cannot connect

 

[armour]

Ouch indeed, I'm assuming you installed the arduino Windows drivers as well on the computer right?
If that's the case, the board sounds dead and unfortunately you may have to replace the board altogether
Sorry I can't help you further

 

[armour]

Please help a brother out. I've tried every possible TX/RX combo on the P3 4K drone and nothing is working. The RC was easy, even if it was nothing like the pictures on this forum. SIN/SOUT worked in the RC. But on the drone itself I can not get it working at all. The closest I got was something called "app mode" from the signal board. That stopped after some coordinates and got me nowhere. UART_TX and RX from the Wifi board gave nothing. And I could find nothing on the gimbal board, which is not the same design as pictured on this forum. NEED TIPS ON UART POINTS ON 4K DRONE UNIT!

Also, seems like it won't bind to the controller. I press the red light button for 2 sec (and any other possible combo) but it won't link with the RC. Is this brick related?

Like I said, the RC is fine now. But the drone is haywire.

Hi, I dont have a 4k to help you out with the board but I can tell you that when my p3s aircraft was bricked, even after fixing the rc, it would not bind to the aircraft so yes, once your aircraft is bricked you will experience this problem. Can you confirm there is no labels for rx and tx on your aircraft board?? That would really suck indeed.

 

[Vadar]

Man I am close and then this from the Remote Control. I am attaching boot log and error message after trying to load kernel I get this kernel panic message. Did anyone have a fix for this. Firmware version 1.6.8.

U-Boot 1.1.4 (Mar 24 2016 - 12:37:01)

MI124
DRAM:  32 MB
Flash:  8 MB
In:    serial
Out:   serial
Err:   serial
Press ESC to abort autoboot in 1 seconds
ar7240> setenv bootargs board=DJI-WM305 console=ttyS0,115200 root=/dev/mtdblock5 init=/sbin/init mtdparts=athnor0:256k@0k(u-boot),64k@256k(u-bootenv),896k@320k(kernel1),3008k@1216k(rootfs1),896k@42 24k(kernel2),3008k@5120k(rootfs2),64k@8128k(art),390 4k@320k(firmware1),3904k@4224k(firmware2),8192k@0k(all)
ar7240> bootm 0x9f420000
## Booting image at 9f420000 ...
   Image Name:   MIPS OpenWrt Linux-3.10.49
   Created:      2015-08-20   3:19:32 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    905294 Bytes = 884.1 kB
   Load Address: 80060000
   Entry Point:  80060000
   Verifying Checksum at 0x9f420040 ...OK
   Uncompressing Kernel Image ... OK

Starting kernel ...

[    0.000000] Linux version 3.10.49 (yello@ubuntu) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r2635) ) #14 Thu Aug 20 11:19:19 CST 2015
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU revision is: 0001974c (MIPS 74Kc)
[    0.000000] SoC: Atheros AR9342 rev 2
[    0.000000] Clocks: CPU:560.000MHz, DDR:450.000MHz, AHB:225.000MHz, Ref:40.000MHz
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 02000000 @ 00000000 (usable)
[    0.000000] User-defined physical RAM map:
[    0.000000]  memory: 02000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x01ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x01ffffff]
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
[    0.000000] Kernel command line:  board=DJI-WM305 console=ttyS0,115200 root=/dev/mtdblock5 init=/sbin/init mtdparts=athnor0:256k@0k(u-boot),64k@256k(u-bootenv),896k@320k(kernel1),3008k@1216k(rootfs1),896k@42 24k(kernel2),3008k@5120k(rootfs2),64k@8128k(art),390 4k@320k(firmware1),3904k@4224k(firmware2),8192k@0k(all) mem=32M rootfstype=squashfs,jffs2 noinitrd
[    0.000000] PID hash table entries: 128 (order: -3, 512 bytes)
[    0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 29180k/32768k available (2102k kernel code, 3588k reserved, 363k data, 220k init, 0k highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:51
[    0.000000] Calibrating delay loop... 278.93 BogoMIPS (lpj=1394688)
[    0.070000] pid_max: default: 32768 minimum: 301
[    0.070000] Mount-cache hash table entries: 512
[    0.080000] NET: Registered protocol family 16
[    0.080000] MIPS: machine is DJI WM305
[    0.290000] ath_usb_init: id: 1122
[    0.360000] bio: create slab <bio-0> at 0
[    0.360000] Switching to clocksource MIPS
[    0.370000] NET: Registered protocol family 2
[    0.370000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[    0.380000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[    0.390000] TCP: Hash tables configured (established 512 bind 512)
[    0.390000] TCP: reno registered
[    0.390000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.400000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.410000] NET: Registered protocol family 1
[    0.430000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.430000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.440000] msgmni has been set to 56
[    0.450000] io scheduler noop registered
[    0.450000] io scheduler deadline registered (default)
[    0.460000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.480000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
[    0.490000] console [ttyS0] enabled, bootconsole disabled
[    0.490000] console [ttyS0] enabled, bootconsole disabled
[    0.500000] ar934x-hs-uart.0: ttyATH0 at MMIO 0x18500000 (irq = 14) is a AR934X UART
[    0.510000] ath79-spi ath79-spi: master is unqueued, this is deprecated
[    0.520000] m25p80 spi0.0: found s25fl064k, expected m25p80
[    0.520000] m25p80 spi0.0: s25fl064k (8192 Kbytes)
[    0.530000] g_ether gadget: using random self ethernet address
[    0.540000] g_ether gadget: using random host ethernet address
[    0.540000] usb0: MAC 6e:86:ba:9c:4b:3e
[    0.550000] usb0: HOST MAC 4a:67:f5:f7:d8:da
[    0.550000] g_ether gadget: Ethernet Gadget, version: Memorial Day 2008
[    0.560000] g_ether gadget: g_ether ready
[    0.570000] TCP: cubic registered
[    0.570000] NET: Registered protocol family 17
[    0.570000] 8021q: 802.1Q VLAN Support v1.8
[    0.580000] VFS: Cannot open root device "mtdblock5" or unknown-block(0,0): error -6
[    0.590000] Please append a correct "root=" boot option; here are the available partitions:
[    0.600000] 1f00            8192 mtdblock0  (driver?)
[    0.600000] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)

 

[Corvinus]

Figured out how to connect to the 4K drone with tips from Johan and tommekand. It automagically paired afterwards and now working fine in FCC mode after copying original from mtd3 and editing it with vi. Here are pictures of the process and solder points. I followed the steps in 1st post, with the addition of replacing rcS with the one from mtd3 partition that's being mounted. This was my first encounter with TX/RX/GND serial connections to a console, so that part was actually fun to deal with.

Thanks peeps.

 

[Vadar]

Man I am close and then this from the Remote Control. I am attaching boot log and error message after trying to load kernel I get this kernel panic message. Did anyone have a fix for this. Firmware version 1.6.8.

U-Boot 1.1.4 (Mar 24 2016 - 12:37:01)

MI124
DRAM:  32 MB
Flash:  8 MB
In:    serial
Out:   serial
Err:   serial
Press ESC to abort autoboot in 1 seconds
ar7240> setenv bootargs board=DJI-WM305 console=ttyS0,115200 root=/dev/mtdblock5 init=/sbin/init mtdparts=athnor0:256k@0k(u-boot),64k@256k(u-bootenv),896k@320k(kernel1),3008k@1216k(rootfs1),896k@42 24k(kernel2),3008k@5120k(rootfs2),64k@8128k(art),390 4k@320k(firmware1),3904k@4224k(firmware2),8192k@0k(all)
ar7240> bootm 0x9f420000
## Booting image at 9f420000 ...
   Image Name:   MIPS OpenWrt Linux-3.10.49
   Created:      2015-08-20   3:19:32 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    905294 Bytes = 884.1 kB
   Load Address: 80060000
   Entry Point:  80060000
   Verifying Checksum at 0x9f420040 ...OK
   Uncompressing Kernel Image ... OK

Starting kernel ...

[    0.000000] Linux version 3.10.49 (yello@ubuntu) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r2635) ) #14 Thu Aug 20 11:19:19 CST 2015
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU revision is: 0001974c (MIPS 74Kc)
[    0.000000] SoC: Atheros AR9342 rev 2
[    0.000000] Clocks: CPU:560.000MHz, DDR:450.000MHz, AHB:225.000MHz, Ref:40.000MHz
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 02000000 @ 00000000 (usable)
[    0.000000] User-defined physical RAM map:
[    0.000000]  memory: 02000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x01ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x01ffffff]
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
[    0.000000] Kernel command line:  board=DJI-WM305 console=ttyS0,115200 root=/dev/mtdblock5 init=/sbin/init mtdparts=athnor0:256k@0k(u-boot),64k@256k(u-bootenv),896k@320k(kernel1),3008k@1216k(rootfs1),896k@42 24k(kernel2),3008k@5120k(rootfs2),64k@8128k(art),390 4k@320k(firmware1),3904k@4224k(firmware2),8192k@0k(all) mem=32M rootfstype=squashfs,jffs2 noinitrd
[    0.000000] PID hash table entries: 128 (order: -3, 512 bytes)
[    0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 29180k/32768k available (2102k kernel code, 3588k reserved, 363k data, 220k init, 0k highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:51
[    0.000000] Calibrating delay loop... 278.93 BogoMIPS (lpj=1394688)
[    0.070000] pid_max: default: 32768 minimum: 301
[    0.070000] Mount-cache hash table entries: 512
[    0.080000] NET: Registered protocol family 16
[    0.080000] MIPS: machine is DJI WM305
[    0.290000] ath_usb_init: id: 1122
[    0.360000] bio: create slab <bio-0> at 0
[    0.360000] Switching to clocksource MIPS
[    0.370000] NET: Registered protocol family 2
[    0.370000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[    0.380000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[    0.390000] TCP: Hash tables configured (established 512 bind 512)
[    0.390000] TCP: reno registered
[    0.390000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.400000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.410000] NET: Registered protocol family 1
[    0.430000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.430000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.440000] msgmni has been set to 56
[    0.450000] io scheduler noop registered
[    0.450000] io scheduler deadline registered (default)
[    0.460000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.480000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
[    0.490000] console [ttyS0] enabled, bootconsole disabled
[    0.490000] console [ttyS0] enabled, bootconsole disabled
[    0.500000] ar934x-hs-uart.0: ttyATH0 at MMIO 0x18500000 (irq = 14) is a AR934X UART
[    0.510000] ath79-spi ath79-spi: master is unqueued, this is deprecated
[    0.520000] m25p80 spi0.0: found s25fl064k, expected m25p80
[    0.520000] m25p80 spi0.0: s25fl064k (8192 Kbytes)
[    0.530000] g_ether gadget: using random self ethernet address
[    0.540000] g_ether gadget: using random host ethernet address
[    0.540000] usb0: MAC 6e:86:ba:9c:4b:3e
[    0.550000] usb0: HOST MAC 4a:67:f5:f7:d8:da
[    0.550000] g_ether gadget: Ethernet Gadget, version: Memorial Day 2008
[    0.560000] g_ether gadget: g_ether ready
[    0.570000] TCP: cubic registered
[    0.570000] NET: Registered protocol family 17
[    0.570000] 8021q: 802.1Q VLAN Support v1.8
[    0.580000] VFS: Cannot open root device "mtdblock5" or unknown-block(0,0): error -6
[    0.590000] Please append a correct "root=" boot option; here are the available partitions:
[    0.600000] 1f00            8192 mtdblock0  (driver?)
[    0.600000] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)

Ok, so I modified the setenv line to the following:
setenv bootargs board=DJI-WM305 console=ttyS0,115200 root=/dev/mtdblock5 init=/sbin/init mtdparts=ath-nor0:256k@0k(u-boot),64k@256k(u-boot-env),896k@320k(kernel1),3008k@1216k(rootfs1),896k@4224k(kernel2),3008k@5120k(rootfs2),64k@8128k(art),3904k@320k(firmware1),3904k@4224k(firmware2),8192k@0k(all)

I execute bootm 0x9f420000 and low and behold the kernel panic is gone and my wireless connection suddenly appears. I executed these commands:

mkdir /tmp/flash
mount -t jffs2 mtd3 /tmp/flash
cd ./etc/init.d/
vi ./rcS

rcS file looks fine and I add a line at the end and save (see attached). At this point I turn of the remote control and try to reboot but still get same error message and no WiFi. If I go through the whole process again, the rcS file has the change I made in it. The normal boot log keeps referencing to a line in the rcS file that doesn't exist. Premissions on rcS file look fine. What am I missing?

 

[Corvinus]

Ok, so I modified the setenv line to the following:
setenv bootargs board=DJI-WM305 console=ttyS0,115200 root=/dev/mtdblock5 init=/sbin/init mtdparts=ath-nor0:256k@0k(u-boot),64k@256k(u-boot-env),896k@320k(kernel1),3008k@1216k(rootfs1),896k@4224k(kernel2),3008k@5120k(rootfs2),64k@8128k(art),3904k@320k(firmware1),3904k@4224k(firmware2),8192k@0k(all)

I execute bootm 0x9f420000 and low and behold the kernel panic is gone and my wireless connection suddenly appears. I executed these commands:

mkdir /tmp/flash
mount -t jffs2 mtd3 /tmp/flash
cd ./etc/init.d/
vi ./rcS

rcS file looks fine and I add a line at the end and save (see attached). At this point I turn of the remote control and try to reboot but still get same error message and no WiFi. If I go through the whole process again, the rcS file has the change I made in it. The normal boot log keeps referencing to a line in the rcS file that doesn't exist. Premissions on rcS file look fine. What am I missing?

Remember that the rcS in /etc/init.d is the one in the backup filesystem you have booted into, not the one you should change. The one that needs repair is the mounted one in /tmp/flash/etc/init.d/

 

[Vadar]

Remember that the rcS in /etc/init.d is the one in the backup filesystem you have booted into, not the one you should change. The one that needs repair is the mounted one in /tmp/flash/etc/init.d/

Ok, that seems to work and address the error message I was seeing in the default boot process. When I use the bootm process, Wifi comes up, I can connect to my drone through DJI App GO and the transmit power levels seem to be holding on both the RC and drone which was the hole reason I got into this mess in the first place. I can also confirm transmit power levels via Wifi Analyzer:

root@dji:/# iwinfo
wlan0 ESSID: "PHANTOM3_0afe2b"
Access Point: 60:60:1F:0A:FE:2B
Mode: Master Channel: 6 (2.437 GHz)
Tx-Power: 26 dBm Link Quality: 70/70
Signal: -30 dBm Noise: -95 dBm
Bit Rate: 144.4 MBit/s
Encryption: WPA2 PSK (CCMP)
Type: nl80211 HW Mode(s): 802.11abgn
Hardware: unknown [Generic MAC80211]
TX power offset: unknown
Frequency offset: unknown
Supports VAPs: yes PHY name: phy0

wlan0.sta1 ESSID: unknown
Access Point: 00:00:00:00:00:00
Mode: Master (VLAN) Channel: 6 (2.437 GHz)
Tx-Power: 26 dBm Link Quality: 70/70
Signal: -38 dBm Noise: -95 dBm
Bit Rate: 144.4 MBit/s
Encryption: none
Type: nl80211 HW Mode(s): 802.11abgn
Hardware: unknown [Generic MAC80211]
TX power offset: unknown
Frequency offset: unknown
Supports VAPs: yes PHY name: phy0

So almost a happy world except when I try to default reboot, the Wifi still doesn't come up. New default boot process attached.

rU-Boot 1.1.4 (Mar 24 2016 - 12:37:01)

MI124
DRAM:  32 MB
Flash:  8 MB
In:    serial
Out:   serial
Err:   serial
Press ESC to abort autoboot in 1 seconds
## Booting image at 9f050000 ...
   Image Name:   MIPS OpenWrt Linux-3.10.49
   Created:      2016-04-18   4:37:14 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    905321 Bytes = 884.1 kB
   Load Address: 80060000
   Entry Point:  80060000
   Verifying Checksum at 0x9f050040 ...OK
   Uncompressing Kernel Image ... OK

Starting kernel ...

[    0.000000] Linux version 3.10.49 (yello@ubuntu) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r2635) ) #1 Mon Apr 18 12:37:04 CST 2016
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU revision is: 0001974c (MIPS 74Kc)
[    0.000000] SoC: Atheros AR9342 rev 2
[    0.000000] Clocks: CPU:560.000MHz, DDR:450.000MHz, AHB:225.000MHz, Ref:40.000MHz
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 02000000 @ 00000000 (usable)
[    0.000000] User-defined physical RAM map:
[    0.000000]  memory: 02000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x01ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x01ffffff]
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
[    0.000000] Kernel command line:  board=DJI-WM305 console=ttyS0,115200 root=/dev/mtdblock3 init=/sbin/init mtdparts=ath-nor0:256k@0k(u-boot),64k@256k(u-boot-env),896k@320k(kernel1),3008k@1216k(rootfs1),896k@4224k(kernel2),3008k@5120k(rootfs2),64k@8128k(art),3904k@320k(firmware1),3904k@4224k(firmware2),8192k@0k(all) mem=32M rootfstype=squashfs,jffs2 noinitrd
[    0.000000] PID hash table entries: 128 (order: -3, 512 bytes)
[    0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 29180k/32768k available (2102k kernel code, 3588k reserved, 363k data, 220k init, 0k highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:51
[    0.000000] Calibrating delay loop... 278.93 BogoMIPS (lpj=1394688)
[    0.070000] pid_max: default: 32768 minimum: 301
[    0.070000] Mount-cache hash table entries: 512
[    0.080000] NET: Registered protocol family 16
[    0.080000] MIPS: machine is DJI WM305
[    0.290000] ath_usb_init: id: 1122
[    0.360000] bio: create slab <bio-0> at 0
[    0.360000] Switching to clocksource MIPS
[    0.370000] NET: Registered protocol family 2
[    0.370000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[    0.380000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[    0.390000] TCP: Hash tables configured (established 512 bind 512)
[    0.390000] TCP: reno registered
[    0.390000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.400000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.410000] NET: Registered protocol family 1
[    0.430000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.430000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.440000] msgmni has been set to 56
[    0.450000] io scheduler noop registered
[    0.450000] io scheduler deadline registered (default)
[    0.460000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.480000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
[    0.490000] console [ttyS0] enabled, bootconsole disabled
[    0.490000] console [ttyS0] enabled, bootconsole disabled
[    0.500000] ar934x-hs-uart.0: ttyATH0 at MMIO 0x18500000 (irq = 14) is a AR934X UART
[    0.510000] ath79-spi ath79-spi: master is unqueued, this is deprecated
[    0.520000] m25p80 spi0.0: found s25fl064k, expected m25p80
[    0.530000] m25p80 spi0.0: s25fl064k (8192 Kbytes)
[    0.530000] 10 cmdlinepart partitions found on MTD device ath-nor0
[    0.540000] Creating 10 MTD partitions on "ath-nor0":
[    0.540000] 0x000000000000-0x000000040000 : "u-boot"
[    0.550000] 0x000000040000-0x000000050000 : "u-boot-env"
[    0.560000] 0x000000050000-0x000000130000 : "kernel1"
[    0.560000] 0x000000130000-0x000000420000 : "rootfs1"
[    0.570000] 0x000000420000-0x000000500000 : "kernel2"
[    0.580000] 0x000000500000-0x0000007f0000 : "rootfs2"
[    0.580000] 0x0000007f0000-0x000000800000 : "art"
[    0.590000] 0x000000050000-0x000000420000 : "firmware1"
[    0.600000] 0x000000420000-0x0000007f0000 : "firmware2"
[    0.600000] 0x000000000000-0x000000800000 : "all"
[    0.610000] g_ether gadget: using random self ethernet address
[    0.620000] g_ether gadget: using random host ethernet address
[    0.620000] usb0: MAC 7e:83:e7:49:42:86
[    0.630000] usb0: HOST MAC 92:fe:e4:0b:81:04
[    0.630000] g_ether gadget: Ethernet Gadget, version: Memorial Day 2008
[    0.640000] g_ether gadget: g_ether ready
[    0.640000] TCP: cubic registered
[    0.650000] NET: Registered protocol family 17
[    0.650000] 8021q: 802.1Q VLAN Support v1.8
[    1.440000] jffs2: notice: (1) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[    1.450000] VFS: Mounted root (jffs2 filesystem) readonly on device 31:3.
[    1.460000] Freeing unused kernel memory: 220K (802c9000 - 80300000)
init started: BusyBox v1.22.1 (2015-11-16 16:28:58 CST)
starting pid 219, tty '': '/etc/init.d/rcS'
[    2.430000] Loading modules backported from Linux version master-2014-05-22-0-gf2032ea
[    2.440000] Backport generated by backports.git backports-20140320-37-g5c33da0
[    2.670000] cfg80211: Calling CRDA to update world regulatory domain
[    2.700000] cfg80211: World regulatory domain updated:
[    2.710000] cfg80211:  DFS Master region: unset
[    2.710000] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[    2.720000] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[    2.730000] cfg80211:   (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[    2.740000] cfg80211:   (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A)
[    2.750000] cfg80211:   (5170000 KHz - 5250000 KHz @ 160000 KHz), (N/A, 2000 mBm), (N/A)
[    2.750000] cfg80211:   (5250000 KHz - 5330000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s)
[    2.760000] cfg80211:   (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s)
[    2.770000] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[    2.780000] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A)
[    3.590000] cfg80211: Calling CRDA for country: US
[    3.610000] ieee80211 phy0: Atheros AR9340 Rev:0 mem=0xb8100000, irq=47
[    3.630000] cfg80211: Regulatory domain changed to country: US
[    3.640000] cfg80211:  DFS Master region: FCC
[    3.640000] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[    3.650000] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 3000 mBm), (N/A)
[    3.660000] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 1700 mBm), (N/A)
[    3.670000] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2300 mBm), (0 s)
[    3.680000] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 3000 mBm), (N/A)
[    3.690000] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 4000 mBm), (N/A)
Mon Apr 18 04:37:33 UTC 2016
[    4.500000] cfg80211: Calling CRDA for country: GB
[    4.520000] cfg80211: Regulatory domain changed to country: GB
[    4.520000] cfg80211:  DFS Master region: ETSI
[    4.530000] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[    4.540000] cfg80211:   (2402000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 1700 mBm), (N/A)
[    4.540000] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[    4.550000] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2000 mBm), (0 s)
[    4.560000] cfg80211:   (5490000 KHz - 5710000 KHz @ 80000 KHz), (N/A, 2700 mBm), (0 s)
[    4.570000] cfg80211:   (57240000 KHz - 65880000 KHz @ 2160000 KHz), (N/A, 4000 mBm), (N/A)
## Error: "ssid" not defined
## Error: "wifipd" not defined
Successfully initialized wpa_supplicant
[    5.400000] device usb0 entered promiscuous mode
[    5.410000] device wlan0 entered promiscuous mode
starting pid 469, tty '/dev/ttyS0': '/bin/login'
dji login: ## Error: "ssid" not defined
## Error: "wifipd" not defined

process '/bin/login' (pid 469) exited. Scheduling for restart.
starting pid 4105, tty '/dev/ttyS0': '/bin/login'
dji login:

 

[Corvinus]

Ok, that seems to work and address the error message I was seeing in the default boot process. When I use the bootm process, Wifi comes up, I can connect to my drone through DJI App GO and the transmit power levels seem to be holding on both the RC and drone which was the hole reason I got into this mess in the first place. I can also confirm transmit power levels via Wifi Analyzer:

root@dji:/# iwinfo
wlan0 ESSID: "PHANTOM3_0afe2b"
Access Point: 60:60:1F:0A:FE:2B
Mode: Master Channel: 6 (2.437 GHz)
Tx-Power: 26 dBm Link Quality: 70/70
Signal: -30 dBm Noise: -95 dBm
Bit Rate: 144.4 MBit/s
Encryption: WPA2 PSK (CCMP)
Type: nl80211 HW Mode(s): 802.11abgn
Hardware: unknown [Generic MAC80211]
TX power offset: unknown
Frequency offset: unknown
Supports VAPs: yes PHY name: phy0

wlan0.sta1 ESSID: unknown
Access Point: 00:00:00:00:00:00
Mode: Master (VLAN) Channel: 6 (2.437 GHz)
Tx-Power: 26 dBm Link Quality: 70/70
Signal: -38 dBm Noise: -95 dBm
Bit Rate: 144.4 MBit/s
Encryption: none
Type: nl80211 HW Mode(s): 802.11abgn
Hardware: unknown [Generic MAC80211]
TX power offset: unknown
Frequency offset: unknown
Supports VAPs: yes PHY name: phy0

So almost a happy world except when I try to default reboot, the Wifi still doesn't come up. New default boot process attached.

rU-Boot 1.1.4 (Mar 24 2016 - 12:37:01)

MI124
DRAM:  32 MB
Flash:  8 MB
In:    serial
Out:   serial
Err:   serial
Press ESC to abort autoboot in 1 seconds
## Booting image at 9f050000 ...
   Image Name:   MIPS OpenWrt Linux-3.10.49
   Created:      2016-04-18   4:37:14 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    905321 Bytes = 884.1 kB
   Load Address: 80060000
   Entry Point:  80060000
   Verifying Checksum at 0x9f050040 ...OK
   Uncompressing Kernel Image ... OK

Starting kernel ...

[    0.000000] Linux version 3.10.49 (yello@ubuntu) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r2635) ) #1 Mon Apr 18 12:37:04 CST 2016
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU revision is: 0001974c (MIPS 74Kc)
[    0.000000] SoC: Atheros AR9342 rev 2
[    0.000000] Clocks: CPU:560.000MHz, DDR:450.000MHz, AHB:225.000MHz, Ref:40.000MHz
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 02000000 @ 00000000 (usable)
[    0.000000] User-defined physical RAM map:
[    0.000000]  memory: 02000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x01ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x01ffffff]
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
[    0.000000] Kernel command line:  board=DJI-WM305 console=ttyS0,115200 root=/dev/mtdblock3 init=/sbin/init mtdparts=ath-nor0:256k@0k(u-boot),64k@256k(u-boot-env),896k@320k(kernel1),3008k@1216k(rootfs1),896k@4224k(kernel2),3008k@5120k(rootfs2),64k@8128k(art),3904k@320k(firmware1),3904k@4224k(firmware2),8192k@0k(all) mem=32M rootfstype=squashfs,jffs2 noinitrd
[    0.000000] PID hash table entries: 128 (order: -3, 512 bytes)
[    0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 29180k/32768k available (2102k kernel code, 3588k reserved, 363k data, 220k init, 0k highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:51
[    0.000000] Calibrating delay loop... 278.93 BogoMIPS (lpj=1394688)
[    0.070000] pid_max: default: 32768 minimum: 301
[    0.070000] Mount-cache hash table entries: 512
[    0.080000] NET: Registered protocol family 16
[    0.080000] MIPS: machine is DJI WM305
[    0.290000] ath_usb_init: id: 1122
[    0.360000] bio: create slab <bio-0> at 0
[    0.360000] Switching to clocksource MIPS
[    0.370000] NET: Registered protocol family 2
[    0.370000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[    0.380000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[    0.390000] TCP: Hash tables configured (established 512 bind 512)
[    0.390000] TCP: reno registered
[    0.390000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.400000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.410000] NET: Registered protocol family 1
[    0.430000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.430000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.440000] msgmni has been set to 56
[    0.450000] io scheduler noop registered
[    0.450000] io scheduler deadline registered (default)
[    0.460000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.480000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
[    0.490000] console [ttyS0] enabled, bootconsole disabled
[    0.490000] console [ttyS0] enabled, bootconsole disabled
[    0.500000] ar934x-hs-uart.0: ttyATH0 at MMIO 0x18500000 (irq = 14) is a AR934X UART
[    0.510000] ath79-spi ath79-spi: master is unqueued, this is deprecated
[    0.520000] m25p80 spi0.0: found s25fl064k, expected m25p80
[    0.530000] m25p80 spi0.0: s25fl064k (8192 Kbytes)
[    0.530000] 10 cmdlinepart partitions found on MTD device ath-nor0
[    0.540000] Creating 10 MTD partitions on "ath-nor0":
[    0.540000] 0x000000000000-0x000000040000 : "u-boot"
[    0.550000] 0x000000040000-0x000000050000 : "u-boot-env"
[    0.560000] 0x000000050000-0x000000130000 : "kernel1"
[    0.560000] 0x000000130000-0x000000420000 : "rootfs1"
[    0.570000] 0x000000420000-0x000000500000 : "kernel2"
[    0.580000] 0x000000500000-0x0000007f0000 : "rootfs2"
[    0.580000] 0x0000007f0000-0x000000800000 : "art"
[    0.590000] 0x000000050000-0x000000420000 : "firmware1"
[    0.600000] 0x000000420000-0x0000007f0000 : "firmware2"
[    0.600000] 0x000000000000-0x000000800000 : "all"
[    0.610000] g_ether gadget: using random self ethernet address
[    0.620000] g_ether gadget: using random host ethernet address
[    0.620000] usb0: MAC 7e:83:e7:49:42:86
[    0.630000] usb0: HOST MAC 92:fe:e4:0b:81:04
[    0.630000] g_ether gadget: Ethernet Gadget, version: Memorial Day 2008
[    0.640000] g_ether gadget: g_ether ready
[    0.640000] TCP: cubic registered
[    0.650000] NET: Registered protocol family 17
[    0.650000] 8021q: 802.1Q VLAN Support v1.8
[    1.440000] jffs2: notice: (1) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[    1.450000] VFS: Mounted root (jffs2 filesystem) readonly on device 31:3.
[    1.460000] Freeing unused kernel memory: 220K (802c9000 - 80300000)
init started: BusyBox v1.22.1 (2015-11-16 16:28:58 CST)
starting pid 219, tty '': '/etc/init.d/rcS'
[    2.430000] Loading modules backported from Linux version master-2014-05-22-0-gf2032ea
[    2.440000] Backport generated by backports.git backports-20140320-37-g5c33da0
[    2.670000] cfg80211: Calling CRDA to update world regulatory domain
[    2.700000] cfg80211: World regulatory domain updated:
[    2.710000] cfg80211:  DFS Master region: unset
[    2.710000] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[    2.720000] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[    2.730000] cfg80211:   (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[    2.740000] cfg80211:   (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A)
[    2.750000] cfg80211:   (5170000 KHz - 5250000 KHz @ 160000 KHz), (N/A, 2000 mBm), (N/A)
[    2.750000] cfg80211:   (5250000 KHz - 5330000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s)
[    2.760000] cfg80211:   (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s)
[    2.770000] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[    2.780000] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A)
[    3.590000] cfg80211: Calling CRDA for country: US
[    3.610000] ieee80211 phy0: Atheros AR9340 Rev:0 mem=0xb8100000, irq=47
[    3.630000] cfg80211: Regulatory domain changed to country: US
[    3.640000] cfg80211:  DFS Master region: FCC
[    3.640000] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[    3.650000] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 3000 mBm), (N/A)
[    3.660000] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 1700 mBm), (N/A)
[    3.670000] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2300 mBm), (0 s)
[    3.680000] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 3000 mBm), (N/A)
[    3.690000] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 4000 mBm), (N/A)
Mon Apr 18 04:37:33 UTC 2016
[    4.500000] cfg80211: Calling CRDA for country: GB
[    4.520000] cfg80211: Regulatory domain changed to country: GB
[    4.520000] cfg80211:  DFS Master region: ETSI
[    4.530000] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[    4.540000] cfg80211:   (2402000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 1700 mBm), (N/A)
[    4.540000] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[    4.550000] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2000 mBm), (0 s)
[    4.560000] cfg80211:   (5490000 KHz - 5710000 KHz @ 80000 KHz), (N/A, 2700 mBm), (0 s)
[    4.570000] cfg80211:   (57240000 KHz - 65880000 KHz @ 2160000 KHz), (N/A, 4000 mBm), (N/A)
## Error: "ssid" not defined
## Error: "wifipd" not defined
Successfully initialized wpa_supplicant
[    5.400000] device usb0 entered promiscuous mode
[    5.410000] device wlan0 entered promiscuous mode
starting pid 469, tty '/dev/ttyS0': '/bin/login'
dji login: ## Error: "ssid" not defined
## Error: "wifipd" not defined

process '/bin/login' (pid 469) exited. Scheduling for restart.
starting pid 4105, tty '/dev/ttyS0': '/bin/login'
dji login:

If bootm process works fine it seems to indicate a better setup on the backup partition (which it obviously should unless messed too much with), could it be an idea to just copy your /etc/init.d/rcS file over to /tmp/flash/etc/init.d/ and overwrite the one that seemingly doesn't work? Granted that it's the only file you've been messing with. Or else you should copy other files over as well.

 

[Vadar]

That did the trick!

cd /tmp/flash/ && rm -rf ./etc/init.d/rcS && cp -r /etc/init.d/rcS ./etc/init.d/ && chmod +x ./etc/init.d/rcS

Rebooted and everything came up fine and transmit power levels are where I wanted them to be. Did a quick compass calibration and will try a test flight later today when I get everything put back together.

Still scratching my head on one line in the corrupt rcS:

clisrv &

I never touched that line when I bricked the RC. The gold copy rcS had apsrv &. I have no idea how the clisrv & line got inserted.

For clarification, the source where the gold copy rcS was copied from is resident in the firmware, a protected region on the flash, etc.? What location is the RC actually booting off of?

 

[Corvinus]

That did the trick!

cd /tmp/flash/ && rm -rf ./etc/init.d/rcS && cp -r /etc/init.d/rcS ./etc/init.d/ && chmod +x ./etc/init.d/rcS

Rebooted and everything came up fine and transmit power levels are where I wanted them to be. Did a quick compass calibration and will try a test flight later today when I get everything put back together.

Still scratching my head on one line in the corrupt rcS:

clisrv &

I never touched that line when I bricked the RC. The gold copy rcS had apsrv &. I have no idea how the clisrv & line got inserted.

For clarification, the source where the gold copy rcS was copied from is resident in the firmware, a protected region on the flash, etc.? What location is the RC actually booting off of?

I didn't investigate the exactly layout when fixing my own, but from what I've gathered from this thread there are at least 2 partitions, mtdblock3 and mtdblock5. The nr5 seemingly contains a passive backup/recovery image which is why we manually boot from it (root=/dev/mtdblock5) and then mount mtdblock3/mtd3 from there (the default boot partition) to fix it with files from mtd5. I guess it's for some failsafe or reset design that we are manually taking advantage of, since when bricked the auto procedures ain't working/being triggered.

 

[Vadar]

I didn't investigate the exactly layout when fixing my own, but from what I've gathered from this thread there are at least 2 partitions, mtdblock3 and mtdblock5. The nr5 seemingly contains a passive backup/recovery image which is why we manually boot from it (root=/dev/mtdblock5) and then mount mtdblock3/mtd3 from there (the default boot partition) to fix it with files from mtd5. I guess it's for some failsafe or reset design that we are manually taking advantage of, since when bricked the auto procedures ain't working/being triggered.

That makes sense. I did a quick little test flight outside and everything looks solid. I'll try a longer flight later in the week as it's starting to rain where I am at.

 

[Vadar]

Okay, now having lived through this whole process. I put together a pdf guide for others that may be in a similar boat or will soon be...

This is pulled from multiple sources, threads and contributors and validated with my own PS3 Remote Control and Aircraft. Hopefully, others will find this useful and be able to get their precious birds back in the air!

I appreciate any feedback, corrections or enhancements.

How to Unbrick Your PS3 v1.0

 

[jose Martinez]

Hi ALL: I Want put here my BIG THANKS for your help! I'm one of those that open all what have screws, and digitally talking, i like get max power of my toys. Well, doing that, i try to get more power (27Dbi) in PH3S and i do a mistake: When copy rcS file, i forget change file attributes and after that, my remote controller loose wifi Network. Calling to DJI , only answer was: "Need return to USA for do some test", But i'm from Chile, very far from USA. I was starting to cry when i find your solution... And work pretty fine!!!
I'm very happy with that, not just for my drone, be cause all of yours , together, get the solution, when for some companies just talk and need money, others can help people just for free. That's give me new hope about a better world!!!
Please Sorry, by my poor english, my lenguaje is spanish.

 

[FPina]

Hi
Can anyone post detail a step by step guide to unbricking the Drone & RC.
I hav done basically solder it to the WiFi board, but from that step..... i dono how.
All you help is needed. TQ.

Hi finally I recovered my RC and Drone Phantom3 Standard! I made a vídeo tutorial with steps if someone need:
Thanks beshanoe and everybody who help with informations

 

[Indian Pilot]

Hi All, thanks to the excellent instructions on this thread I have been able to fix my RC for my P3S. Unfortunately the same method is not working on the bird. I connect it all up, start putty and turn on the bird but there are no updates on the putty screen. Com port is correct and baud rate is set to 115200. I have checked continuity to ensure there are no shorts. The gimbal powers up and holds steady.

Here are a few pictures to show what i've done. Could anyone offer suggestions please? Also a picture of any alternate contact points for TX and RX points on the gimbal board would be very helpful just in case that is the issue.

Any suggestions on where I can buy a new gimbal/wifi module for the p3S? I can't seem to find any on the web.

 

[Vadar]

Validate you have Gimbal RX0 > USB UART TX and Gimbal TX0 > USB UART RX. The only other gotcha may have to do with voltage. As I recall, I believe the voltage used by the gimbal is 5V versus 3.3V. If your UART doesn't support dual voltage, you may have a problem getting it to work.