Fixing the Linux Camera Driver on an AllWinner A13 Tablet (Part 2)

This is a continuation of Part 1 Now we solder some very fine wires to the ends of the 0402 resistors on the camera's I2C bus. You can see an american penny in the image for scale.

Now we can use a multimeter to probe the pins on the A13 to find out which pins the camera's I2C bus are connected to.

Interesting... Probing has not gone as expected and the two locations which I thought were I2C lines do not seem to be directly connected to the pins on the A13 CPU. OK, time to do some systematic checking of the pins. From the configuration file for the tablet, it looks like the following pins should be connected

Pixel Clock  - E00 (114) *
Clock        - E01 (115) *
HSYNC        - E02 (116)
VSYNC        - E03 (117)
D0           - E04 (118) *
D1           - E05 (119) *
D2           - E06 (120) *
D3           - E07 (121) *
D4           - E08 (122) *
D5           - E09 (123) *
D6           - E10 (124) *
D7           - E11 (125) *
RESET        - Power3 (No idea what this means)
POWER_ENABLE - NC
STANDBY      - B10 (10)

As best as I can figure out after probing with a multimeter for two hours, the pins from the camera connector (pin 1 nearest the edge of the pcb) are connected to the following:

#1  - NC      
#2  - POWER    
#3  - [160] PB18 / TWI2_SDA  (I2C Data)
#4  - No Idea 
#5  - [161] PB17 / TWI2_SCK  (I2C Clock)
#6  - No Idea, but has a pullup resistor
#7  - No Idea
#8  - [01] PB10 (Standby)
#9  - No Idea
#10 - (Filter Capacitor)
#11 - (Filter Capacitor)
#12 - [125] D7
#13 - [114] PIXEL CLOCK
#14 - [124] D6
#15 - No Idea
#16 - [123] D5
#17 - [115] CLOCK
#18 - [122] D4
#19 - [118] D0
#20 - [121] D3
#21 - [119] D1
#22 - [120] D2
#23 - GND
#24 - GND

Which means I have soldered wires to the wrong place. It looks like the I2C pullup resistors are actually located very close the the CPU. It's going to be a tight squeeze, but what can you do. Here is a shot of the correct placement of the I2C debug wires on the pullup resistors next to the CPU.

On a side note, I think my tablet may have counterfeit memory chips (not really surprised). I had electrical tape over the memory chips to hold down some wires and when I removed the tape, the markings came off the chips and stuck to the electrical tape.

DISASTER! I seem to have broken something. I suspect when I pulled the tape off the DDR RAM, it broke a solder joint underneath the chip. All I get now is

HELLO! BOOT0 is starting!
boot0 version : 1.3.0
initializing SDRAM Fail.

I think my only choice is to attempt to reflow the memory chip with a heat gun. That's it for now. Check in for Part 3 if I can get it working again.

Fixing the Linux Camera Driver on an AllWinner A13 Tablet (Part 1)

I've been working on getting Linux to be fully functional on an AllWinner A13 tablet. If you haven't heard, AllWinner A10 and A13 CPUs are the greatest thing since sliced bread when it comes to working with cheap hardware. A13 tablets go for $39 wholesale in China, and about $65 shipped to your door in the USA. The open source driver for the A13 camera doesn't seem to work, so I will be trying to find out what the problem is and fix it. The plan is to tap the I2C bus that controls the camera and spy on it with a logic analyzer to see what is going wrong with the driver. This post will just cover figuring out which lines to tap into, and a follow up post will show the actual analysis of the I2C bus. This is a technique I have used successfully to fix the driver for the Goodix GT811 touchscreen.

Generic A13 Tablet

The camera is that little round cutout at the bottom of the tablet shown above. A closeup of the camera can be seen below.

Closeup of the Camera

Amazingly, this camera is held in place by a piece of sticky tape. Yes, sticky tape. Chinese manufacturing at its finest. But it seems to stay in place, so who am I to criticize? First step is to crack open the tablet. These tablets are snap together, so no screws hold the two halves of the tablet together. Below is a picture of the tablet after it has been opened up. The LCD screen is facing down against the table top, and the PCB and battery are mounted to the back of the LCD. The back of the plastic cover can be seen in the top of the picture. I have a lot of debug wires (the blue wires running everywhere) which are attached to the back plastic cover. Not all the sticky tape is from the factory, some is mine because the factory tape loses its grip after repeated removals.

A13 Tablet Guts

Unrelated anecdote (your reading my blog so you have to listen to my ramblings too), many years ago when I was shopping for electronics in shadier parts of Hong Kong, every hawker selling questionable electronics would always claim that even though the brand was something that nobody had ever heard of, they all had "Sony guts" In the picture above, you can see how the camera at the bottom is just held in place with sticky tape. I didn't remove all the tape holding the camera in place because I was worried it would never go back in place again. You can also see the camera connector that I am interested in. Below is a closeup of the camera connector

Close up of the Camera Connector

So from the A13 datasheet, we know the CSI has the following signal lines:

CSI_PCLK - Pixel Clock
CSI_MCLK - Sensor Clock
CSI_HSYNC - Horizontal Sync
CSI_VSYNC - Vertical Sync
CSI_D7:0 - 8 Data lines

We also know that the tablet uses a GalaxyCore GC0308 Camera. From the GC0308 datasheet we see that it uses the following signal lines

AVDD25 - 0.1uF Filtering cap to ground
VREF - 0.1uF Filtering cap to ground
SBDA - I2C Data Line
SBCL - I2C Clock Line
D7:0 - 8 Data Lines
GND - Ground
PWDN - Powerdown signal (active high)
HSYNC - HSYNC output
VSYNC - VSYNC output
DVDD28 - 2.8V input
RESETB - Reset (active low)
INCLK - Input Clock

The 8 data lines are easy to spot with the 4 element resistor arrays protecting the data bus.

The 2 filtering caps for AVDD25 and VREF are also easy to spot.

That just leaves the 2 mystery resistors. It is easy to tell if they are the pullups required for the I2C bus by checking if the side of the resistor not connected to the flex connector are tied together and tied to 3.3V. Then we know for sure they are the pullups for the I2C data and clock lines and we can tap into the I2C signals by soldering some very fine wires to the side of the resistor that is connected to the flex connector.

After checking the voltage at the two resistors, it is confirmed that they are both at 2.8V which means they are indeed the I2C pullup resistors. (I said 3.3V, close enough)

In Part 2, I will solder fine wires to the resistors and we hook the logic analyzer up! Always fun soldering wires to 0402 resistors (Thats 0.04" x 0.02", or about the width of 2 human hairs side by side)