[T-Mobile, Samsung Galaxy SIII] metalfingers_:
*bump*

I found that starting the camera produces some rather extensive dmesg output:

<3>[ 1072.801739] store_afe_cal: offset 1089687720 is > mem_len 344064
<6>[ 1072.821150] msm_pcm_routing_process_audio: reg 0 val 0 set 1
<6>[ 1072.821364] msm8960_i2s_startup
<6>[ 1072.826399] msm8660_i2s_hw_params Codec Clock 0xc0c372bc ; Rx Bit Clock c0c37228
<6>[ 1072.826399] tabla_hw_params: DAI-ID 1 rate : 48000
<6>[ 1072.826430] msm_pcm_routing_hw_params : channel = 2
<6>[ 1072.831313] msm_pcm_routing_prepare : be_id = 0
<6>[ 1072.842606] afe_q6_interface_prepare:
<6>[ 1072.854387] msm8960_enable_codec_ext_clk: enable = 1
<6>[ 1072.908866] msm_dai_q6_trigger:port:0 cmd:1 dai_data->status_mask = 0
<6>[ 1072.908866] afe_send_cal
<6>[ 1072.927636] mdp_bus_scale_update_request: handle=-460495872 index=2 ab=1610612736 ib=1744830464
<4>[ 1072.942804] CPU1: Booted secondary processor
<7>[ 1072.947138] [cam_ldo_power_on : 1816] REAR CAMERA POWER ON!!
<7>[ 1072.947138] [s5c73m3] rear camera on 1
<7>[ 1072.947169] [s5c73m3] check GPIO_CAM_FLASH_SW : 1
<7>[ 1072.951747] [s5c73m3] check vddCore : 1150000
<6>[ 1072.952906] CAM_ISP_CORE voltage is enabled to 1150 mV by selector value [38]
<7>[ 1072.954158] [s5c73m3] check GPIO_CAM_A_EN : 1
<7>[ 1072.956111] [s5c73m3] check GPIO_CAM_SENSOR_EN : 1
<7>[ 1072.958461] [cam_ldo_power_on : 1816] REAR CAMERA POWER ON!!
<7>[ 1072.958461] [s5c73m3] rear camera on 2
<7>[ 1072.958492] [s5c73m3] check CAM_AF_EN : 1
<6>[ 1072.960475] mdp_bus_scale_update_request: handle=-460495872 index=1 ab=805306368 ib=872415232
<7>[ 1072.962276] [s5c73m3] check CAM_MIPI_EN : 1
<7>[ 1072.964382] [s5c73m3] check ISP_RESET : 1
<6>[ 1072.981565] TIMERIRQ_START : period=200
<6>[ 1072.981657] Sensors set: 70
<6>[ 1072.984526] <6>MPL-accmpu6050_set_odr:199
<6>[ 1072.984648] <6>MPL-accODR : 5000 (199)mHz
<3>[ 1073.006622] [s5c73m3_sensor_init:3410] Entered
<3>[ 1073.010285] [s5c73m3_sensor_init_probe:3358] Entered
<3>[ 1073.022188] [s5c73m3_check_fw:3124] Enter
<3>[ 1073.064428] [s5c73m3_get_sensor_fw_version : 2768] sensor_fw = ZHFJ02
<3>[ 1073.070318] [s5c73m3_get_phone_fw_version:2844] Entered
<3>[ 1073.086586] [s5c73m3_get_phone_fw_version:2957] can't open ZHFJ02. download from F-ROM
<3>[ 1073.095131] [s5c73m3_reset_module:424] E
<7>[ 1073.098550] [cam_ldo_power_off : 1987] REAR CAMERA POWER OFF!!
<7>[ 1073.115122] [s5c73m3] check GPIO_CAM_FLASH_SW : 0
<7>[ 1073.116740] [cam_ldo_power_on : 1816] REAR CAMERA POWER ON!!
<7>[ 1073.116740] [s5c73m3] rear camera on 1
<7>[ 1073.116770] [s5c73m3] check GPIO_CAM_FLASH_SW : 1
<7>[ 1073.119304] [s5c73m3] check vddCore : 1150000
<6>[ 1073.133373] CAM_ISP_CORE voltage is enabled to 1150 mV by selector value [38]
<7>[ 1073.135937] [s5c73m3] check GPIO_CAM_A_EN : 1
<7>[ 1073.137890] [s5c73m3] check GPIO_CAM_SENSOR_EN : 1
<7>[ 1073.141431] [cam_ldo_power_on : 1816] REAR CAMERA POWER ON!!
<7>[ 1073.141461] [s5c73m3] rear camera on 2
<7>[ 1073.141461] [s5c73m3] check CAM_AF_EN : 1
<7>[ 1073.148084] [s5c73m3] check CAM_MIPI_EN : 1
<7>[ 1073.152937] [s5c73m3] check ISP_RESET : 1
<3>[ 1073.155562] [s5c73m3_reset_module:441] X
<3>[ 1073.170028] [s5c73m3_get_sensor_fw_binary:2453] Entered
<6>[ 1073.308438] mdp_bus_scale_update_request: handle=-460495872 index=2 ab=1543503872 ib=1677721600
<3>[ 1073.583732] [s5c73m3_get_sensor_fw_binary:2549] sent SPI ready CMD
<3>[ 1074.108438] [s5c73m3_get_sensor_fw_binary:2578] made CSC value by S/W = 0x563c77e
<3>[ 1074.115153] [s5c73m3_get_sensor_fw_binary:2584] Original CRC Int = 0x563c77e
<3>[ 1074.126018] [s5c73m3_get_sensor_fw_binary : 2593] failed to open /data/SlimISP_ZH.bin, err -13
<3>[ 1074.133831] [s5c73m3_get_sensor_fw_binary:2622] Exit
<3>[ 1074.138776] [s5c73m3_get_phone_fw_version : 2962] i2c failed, err -22
<3>[ 1074.146406] [s5c73m3_check_fw : 3137] failed s5c73m3_get_phone_fw_version!!
<3>[ 1074.152601] [s5c73m3_sensor_init_probe : 3376] failed s5c73m3_check_fw!!
<3>[ 1074.159957] [s5c73m3_sensor_init : 3428] s5c73m3_sensor_init failed!
<3>[ 1074.165786] msm_mctl_open_init: isp init failed: -5
<7>[ 1074.178147] [cam_ldo_power_off : 1987] REAR CAMERA POWER OFF!!
<7>[ 1074.188615] [s5c73m3] check GPIO_CAM_FLASH_SW : 0
<3>[ 1074.189714] msm_open_init: HW open failed rc = 0xfffffffb
<7>[ 1074.214527] [cam_ldo_power_on : 1816] REAR CAMERA POWER ON!!
<7>[ 1074.214527] [s5c73m3] rear camera on 1
<7>[ 1074.214558] [s5c73m3] check GPIO_CAM_FLASH_SW : 1
<7>[ 1074.216602] [s5c73m3] check vddCore : 1150000
<6>[ 1074.217854] CAM_ISP_CORE voltage is enabled to 1150 mV by selector value [38]
<7>[ 1074.219105] [s5c73m3] check GPIO_CAM_A_EN : 1
<7>[ 1074.220143] [s5c73m3] check GPIO_CAM_SENSOR_EN : 1
<7>[ 1074.222218] [cam_ldo_power_on : 1816] REAR CAMERA POWER ON!!
<7>[ 1074.222249] [s5c73m3] rear camera on 2
<7>[ 1074.222249] [s5c73m3] check CAM_AF_EN : 1
<7>[ 1074.225759] [s5c73m3] check CAM_MIPI_EN : 1
<7>[ 1074.227803] [s5c73m3] check ISP_RESET : 1
<3>[ 1074.255546] [s5c73m3_sensor_init:3410] Entered
<3>[ 1074.259026] [s5c73m3_sensor_init_probe:3358] Entered
<3>[ 1074.272729] [s5c73m3_check_fw:3124] Enter
<3>[ 1074.284877] [s5c73m3_get_sensor_fw_version : 2768] sensor_fw = ZHFJ02
<3>[ 1074.291255] [s5c73m3_get_phone_fw_version:2844] Entered
<3>[ 1074.295742] [s5c73m3_get_phone_fw_version:2957] can't open ZHFJ02. download from F-ROM
<3>[ 1074.303647] [s5c73m3_reset_module:424] E
<7>[ 1074.307462] [cam_ldo_power_off : 1987] REAR CAMERA POWER OFF!!
<7>[ 1074.317442] [s5c73m3] check GPIO_CAM_FLASH_SW : 0
<7>[ 1074.318479] [cam_ldo_power_on : 1816] REAR CAMERA POWER ON!!
<7>[ 1074.318510] [s5c73m3] rear camera on 1
<7>[ 1074.318510] [s5c73m3] check GPIO_CAM_FLASH_SW : 1
<7>[ 1074.320921] [s5c73m3] check vddCore : 1150000
<6>[ 1074.322050] CAM_ISP_CORE voltage is enabled to 1150 mV by selector value [38]
<7>[ 1074.323271] [s5c73m3] check GPIO_CAM_A_EN : 1
<7>[ 1074.324309] [s5c73m3] check GPIO_CAM_SENSOR_EN : 1
<7>[ 1074.325347] [cam_ldo_power_on : 1816] REAR CAMERA POWER ON!!
<7>[ 1074.325377] [s5c73m3] rear camera on 2
<7>[ 1074.325377] [s5c73m3] check CAM_AF_EN : 1
<7>[ 1074.328856] [s5c73m3] check CAM_MIPI_EN : 1
<7>[ 1074.330932] [s5c73m3] check ISP_RESET : 1
<3>[ 1074.333373] [s5c73m3_reset_module:441] X
<3>[ 1074.336303] [s5c73m3_get_sensor_fw_binary:2453] Entered
<3>[ 1074.759072] [s5c73m3_get_sensor_fw_binary:2549] sent SPI ready CMD
<3>[ 1075.295376] [s5c73m3_get_sensor_fw_binary:2578] made CSC value by S/W = 0x563c77e
<3>[ 1075.302121] [s5c73m3_get_sensor_fw_binary:2584] Original CRC Int = 0x563c77e
<3>[ 1075.309018] [s5c73m3_get_sensor_fw_binary : 2593] failed to open /data/SlimISP_ZH.bin, err -13
<3>[ 1075.317808] [s5c73m3_get_sensor_fw_binary:2622] Exit
<3>[ 1075.322752] [s5c73m3_get_phone_fw_version : 2962] i2c failed, err -22
<3>[ 1075.329314] [s5c73m3_check_fw : 3137] failed s5c73m3_get_phone_fw_version!!
<3>[ 1075.336273] [s5c73m3_sensor_init_probe : 3376] failed s5c73m3_check_fw!!
<3>[ 1075.343384] [s5c73m3_sensor_init : 3428] s5c73m3_sensor_init failed!
<3>[ 1075.349427] msm_mctl_open_init: isp init failed: -5
<7>[ 1075.362185] [cam_ldo_power_off : 1987] REAR CAMERA POWER OFF!!
<7>[ 1075.373355] [s5c73m3] check GPIO_CAM_FLASH_SW : 0
<3>[ 1075.376071] msm_open_init: HW open failed rc = 0xfffffffb
<6>[ 1075.591179] mdp_bus_scale_update_request: handle=-460495872 index=1 ab=805306368 ib=872415232

Per the last couple of lines, I tried copying several of the /system/cameradata/SlimISP_Z*.bin files to /data/SlimISP_ZH.bin. No luck, even the same error code (-EACCES)... and permissions are sufficient for anyone to open the file for reading.

[edit] I also verified (using Skype) that the front camera works. Some interesting information from sysfs:

shell@android:/sys/class/camera # cat rear/rear_camtype
S5C73M3
shell@android:/sys/class/camera # cat rear/rear_camfw ; echo
ZHFJ02 ZCFC13
shell@android:/sys/class/camera # cat front/front_camtype ; echo
SLSI_S5K6A3YX
shell@android:/sys/class/camera # cat front/front_camfw ; echo
S5K6A3 S5K6A3

I'm lost.