Canon PowerShot G9: Difference between revisions

(4 intermediate revisions by the same user not shown)

Line 1:

Teardown of the Canon PowerShot G9 point-and-shoot camera.

12.1 MP ~~CMOS~~ with 6x IS optical zoom. Released in Oct 2007, PCB date code 29th week of 2007[[File:Canon-powershot-g9.jpg|none|thumb|Canon PowerShot G9|alt=]]A service manual with assembly diagram, but no schematic, can be found [https://elektrotanya.com/canon_powershot_g9.pdf/download.html on the internet].

12.1 MP, 1/1.7" CCD image sensor with 6x IS optical zoom. Released in Oct 2007, PCB date code 29th week of 2007[[File:Canon-powershot-g9.jpg|none|thumb|Canon PowerShot G9|alt=]]A service manual with assembly diagram, but no schematic, can be found [https://elektrotanya.com/canon_powershot_g9.pdf/download.html on the internet].

Technical details, including firmware dumps, on the [https://chdk.fandom.com/wiki/G9 CHDK Wiki].

==Teardown Pictures==

Line 64:

Line 66:

CN1002 flat flex to jog dial unit, TOP_M FPC

~~[[File:Canon PowerShot G9 debug header.jpg|thumb|CN1003, a candidate for JTAG and/or serial debug]]~~

~~CN1003 unpopulated/undocumented -> JTAG/Serial?~~

*Located near to SD card holder

CN1003 unpopulated/undocumented -> JTAG/Serial? (see below)

*Multiple pads connected to test points

CN1004 USB/digital

Line 190:

Line 189:

Q582 ROHM '''2SK2715''' 10V drive N-Ch MOSFET

[[File:Canon PowerShot G9 debug header.jpg|thumb|Unpopulated connector CN1003, probably for JTAG and UART]]

== Hacking ==

Unpopulated connector CN1003 located on back of main board

<br />

* Candidate for JTAG and/or UART

* Located near to SD card holder

* Multiple pads connected to test points

* Pin-out likely same as documented [https://web.archive.org/web/20200302085303/https://nada-labs.net/2014/finding-jtag-on-a-canon-elph100hs-ixus115/ here].

TX - _ RX

GND - _ 3.3V

SHDN - _ N/C

N/C - _ HALF_BAUD

PD - _ ALT_BOOT

PD - _ /TRST

TDI - _ TMS

TCK - _ TDO

/OFF -

</syntaxhighlight>

@@ Line 1: / Line 1: @@
 Teardown of the Canon PowerShot G9 point-and-shoot camera.
-.1 MP CMOS with 6x IS optical zoom. Released in Oct 2007, PCB date code 29th week of 2007[[File:Canon-powershot-g9.jpg|none|thumb|Canon PowerShot G9|alt=]]A service manual with assembly diagram, but no schematic, can be found [https://elektrotanya.com/canon_powershot_g9.pdf/download.html on the internet].
+.1 MP, 1/1.7" CCD image sensor with 6x IS optical zoom. Released in Oct 2007, PCB date code 29th week of 2007[[File:Canon-powershot-g9.jpg|none|thumb|Canon PowerShot G9|alt=]]A service manual with assembly diagram, but no schematic, can be found [https://elektrotanya.com/canon_powershot_g9.pdf/download.html on the internet].
+Technical details, including firmware dumps, on the [https://chdk.fandom.com/wiki/G9 CHDK Wiki].
 ==Teardown Pictures==
@@ Line 64: / Line 66: @@
 CN1002 flat flex to jog dial unit, TOP_M FPC
-[[File:Canon PowerShot G9 debug header.jpg|thumb|CN1003, a candidate for JTAG and/or serial debug]]
-CN1003 unpopulated/undocumented -> JTAG/Serial?
-*Located near to SD card holder
+CN1003 unpopulated/undocumented -> JTAG/Serial? (see below)
-*Multiple pads connected to test points
 CN1004 USB/digital
@@ Line 190: / Line 189: @@
 Q582 ROHM '''2SK2715''' 10V drive N-Ch MOSFET
+[[File:Canon PowerShot G9 debug header.jpg|thumb|Unpopulated connector CN1003, probably for JTAG and UART]]
+== Hacking ==
+Unpopulated connector CN1003 located on back of main board
-<br />
+* Candidate for JTAG and/or UART
+* Located near to SD card holder
+* Multiple pads connected to test points
+* Pin-out likely same as documented [https://web.archive.org/web/20200302085303/https://nada-labs.net/2014/finding-jtag-on-a-canon-elph100hs-ixus115/ here].
+<syntaxhighlight lang="c">
+      TX  -  _  RX
+     GND  -  _  3.3V
+    SHDN  -  _  N/C
+     N/C  -  _  HALF_BAUD
+      PD  -  _  ALT_BOOT
+      PD  -  _  /TRST
+     TDI  -  _  TMS
+     TCK  -  _  TDO
+    /OFF  -
+</syntaxhighlight>