TJTAG - EJTAG De-Brick tool - IMPORTANT CHANGE:See 1st Post.

Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> General Questions
Goto page Previous  1, 2, 3 ... 32, 33, 34 ... 82, 83, 84  Next
Author Message
imran
DD-WRT Novice


Joined: 10 Dec 2008
Posts: 26

PostPosted: Tue Dec 23, 2008 10:15    Post subject: Reply with quote
I am using the JTAG cable as shown below , please let me know if there is any fault in it
Also I am using a 14 pin cable and its oin 13 and 14 are not being used ... can it cause any problem



JTAGunbuffered.png
 Description:
 Filesize:  6.9 KB
 Viewed:  39177 Time(s)

JTAGunbuffered.png



jtagcable.doc
 Description:

Download
 Filename:  jtagcable.doc
 Filesize:  102 KB
 Downloaded:  1253 Time(s)

Sponsor
kisbetu
DD-WRT User


Joined: 10 Dec 2008
Posts: 55

PostPosted: Tue Dec 23, 2008 11:35    Post subject: Reply with quote
Tornado wrote:
did you tie 3v to pin 1 with a 100ohm resister ?


imran wrote:
Yes I have used the resistors as specified in the document in the following link ..

http://wiki.openwrt.org/OpenWrtDocs/Customizing/Hardware/JTAG_Cable?highlight=(JTAG

Please let me know if it is OK ....


Imran!

Tornado asked about a PLUS resistor, connecting JTAG header's pin1 to 3,3V.

Did You connect it?
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Tue Dec 23, 2008 17:10    Post subject: Reply with quote
@imran

You do not want to tie jtag pin 12 to ground, I tie only to pin 6 on the jtag pin on the router

Let me know ?

_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
imran
DD-WRT Novice


Joined: 10 Dec 2008
Posts: 26

PostPosted: Wed Dec 24, 2008 11:07    Post subject: Reply with quote
I have connected all four pins as shown in that picture. Do you mean to say that I need to connect only pin6, all other three pins should be open ?
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Wed Dec 24, 2008 13:45    Post subject: Reply with quote
What Im saying is, is that I only connect pin 18-25 from the parallel port to pin 6 on the target board. You can tie others but you have to make sure they are only ground pins. For Broadcom based boxes you do not want to connect to pin 12 on the jtag connecter as a ground.
_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
Victek
DD-WRT Novice


Joined: 05 Jan 2008
Posts: 7

PostPosted: Fri Dec 26, 2008 22:31    Post subject: Reply with quote
WRT160N V.1.0 jtag v3 working, here is the pinout. ah! /fc:98 in this case, check for different flash memory.

Paralel Port-----------> PCB WRT 160N (JP1)
Pin 2 (TDI) ----------------------.> Pad RH6
Pin 3 (TCK)----------------------.> Pad RH14
Pin 4 (TMS)----------------------.> Pad RH11
Pin 13 (TD0)---------------------,> Pad RH7
Pin 20-25 (GND) ---------------,> Pad RH15

more info an test here: http://www.adslzone.net/postt174111.html

Regards


Last edited by Victek on Mon Dec 29, 2008 18:54; edited 1 time in total
Shawn360
DD-WRT Guru


Joined: 26 Jul 2008
Posts: 1237

PostPosted: Fri Dec 26, 2008 23:35    Post subject: Reply with quote
Victek wrote:
WRT160N jtag v3 working, here is the pinout. ah! /fc:99

Paralel Port-----------> PCB WRT 160N (JP1)
Pin 2 (TDI) ----------------------.> Pad RH6
Pin 3 (TCK)----------------------.> Pad RH14
Pin 4 (TMS)----------------------.> Pad RH11
Pin 13 (TD0)---------------------,> Pad RH7
Pin 20-25 (GND) ---------------,> Pad RH15

more info an test here: http://www.adslzone.net/postt174111.html

Regards

Support for 8bit buses is working at least for WRT160N great.
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Sat Dec 27, 2008 5:00    Post subject: Reply with quote
Shawn, did you test this on the WRT160N ? I was having some problems with 8 bit on Atheros, but I don't have any 8bit bus devices to work with either.
_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
kisbetu
DD-WRT User


Joined: 10 Dec 2008
Posts: 55

PostPosted: Sat Dec 27, 2008 8:26    Post subject: Reply with quote
Hi Tornado!

Some weeks ago I made tests with a 160N, but I had to give it back.
When You published v3-RC1, the guy tried it.

This is the "result":

==============================================
EJTAG Debrick Utility v3.0 RC1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 8

CPU Chip ID: 10010100011100000100000101111111 (9470417F)
*** Found a Broadcom BCM4704 KPBG Rev 9 CPU chip ***

- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... ECR: 0x00248108 Done
Enabling Memory Writes ... Mem 0x0000001a
Done
Halting Processor ...
00000000001000001000000100000000 (00208100)
00000000001000000000000100000000 (00200100)
<Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Probing Flash at (Flash Window: 0x1fc00000) ...
Done

*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***


C:\Documents and Settings\Apa\Release-RC1\Windows>

His flash chip is Eon EN29LV320AB.
As the router is far away from me, I cannot test it anymore.
Shawn360
DD-WRT Guru


Joined: 26 Jul 2008
Posts: 1237

PostPosted: Sat Dec 27, 2008 9:35    Post subject: Reply with quote
@Tornado no I didn't test it on a WRT160N but Victek seems to have got it working on his WRT160N.
http://cdn.adslzone.net/pub/repos/victek/jatg/jtag_top.png
http://cdn.adslzone.net/pub/repos/victek/jatg/jtag_bottom.png
http://cdn.adslzone.net/pub/repos/victek/jatg/pc260003.jpg
http://www.adslzone.net/postt174111.html


@kisbetu You may want to try to manually select your flash chip /fc:98 /nodma
Seems to have work for him http://cdn.adslzone.net/pub/repos/victek/jatg/jtag_top.png
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Sat Dec 27, 2008 9:36    Post subject: Reply with quote
@kisbetu

I have added support for 8bit bus, but like I said, I can't really test it, no 8bit bus routers Sad Eko has tested it a little for me...but its still hard doing testing that way.

_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Sat Dec 27, 2008 10:51    Post subject: Reply with quote
@Shawn360

Ok, but this is reading, not writing, BIG difference

_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
Victek
DD-WRT Novice


Joined: 05 Jan 2008
Posts: 7

PostPosted: Sat Dec 27, 2008 12:01    Post subject: Reply with quote
You're correct I posted the pinout, I can read BUT I can't write.
wpaynter
DD-WRT Novice


Joined: 29 Dec 2008
Posts: 4

PostPosted: Mon Dec 29, 2008 2:45    Post subject: Reply with quote
I have used the jtag pinout provided by Victek and used tjtagv3-RC1 from Tornado and have success backing up a few of the various pieces (CFE,NVRAM) of the firmware of a WRT160N.
Then I tried to erase the nvram and it stopped half way.
The first code block shows the output of that command:
Code:
bt linux-32 # ./tjtag3 -erase:nvram /fc:99

==============================================
 EJTAG Debrick Utility v3.0 RC1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 8

CPU Chip ID: 10010100011100000100000101111111 (9470417F)
*** Found a Broadcom BCM4704 KPBG Rev 9 CPU chip ***

    - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ...  ECR: 0x00248108 Done
Enabling Memory Writes ... Mem 0x0000001a
Done
Halting Processor ...
00000000001000001000000100000000 (00208100)
00000000001000000000000100000000 (00200100)
<Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Manual Flash Selection ... Done

Flash Vendor ID: 00000000000000000000000001111111 (0000007F)
Flash Device ID: 00000000000000000010001011110110 (000022F6)
*** Manually Selected a EON EN29LV320 2Mx16 TopB   (4MB) Flash Chip ***

    - Flash Chip Window Start .... : 1fc00000
    - Flash Chip Window Length ... : 00400000
    - Selected Area Start ........ : 1fff0000
    - Selected Area Length ....... : 00010000

*** You Selected to Erase the NVRAM.BIN ***

=========================
Erasing Routine Started
=========================
Total Blocks to Erase: 8

Erasing block: 64 (addr = 1fff0000)...Done
Erasing block: 65 (addr = 1fff2000)...Done
Erasing block: 66 (addr = 1fff4000)...Done
Erasing block: 67 (addr = 1fff6000)...Done
Erasing block: 68 (addr = 1fff8000)...


It freezes there.
Then I tried to see if I could write to those first blocks that look to be erased. (I filled a NVRAM.BIN file with /dev/urandom and tried to flash it)
The next code block shows the output of that command:
Code:

bt linux-32 # ./tjtag3 -flash:nvram /fc:99 /noerase

==============================================
 EJTAG Debrick Utility v3.0 RC1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 8

CPU Chip ID: 10010100011100000100000101111111 (9470417F)
*** Found a Broadcom BCM4704 KPBG Rev 9 CPU chip ***

    - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ...  ECR: 0x00248108 Done
Enabling Memory Writes ... Mem 0x0000001a
Done
Halting Processor ...
00000000001000001000000100000000 (00208100)
00000000001000000000000100000000 (00200100)
<Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Manual Flash Selection ... Done

Flash Vendor ID: 00000000000000000000000001111111 (0000007F)
Flash Device ID: 00000000000000000010001011110110 (000022F6)
*** Manually Selected a EON EN29LV320 2Mx16 TopB   (4MB) Flash Chip ***

    - Flash Chip Window Start .... : 1fc00000
    - Flash Chip Window Length ... : 00400000
    - Selected Area Start ........ : 1fff0000
    - Selected Area Length ....... : 00010000

*** You Selected to Flash the NVRAM.BIN ***

=========================
Flashing Routine Started
=========================

Loading NVRAM.BIN to Flash Memory...


It freezes there.

I have tried many times and it is a consistent problem.
is there anything I can do to create an error log or something to assist troubleshooting the problem?
Victek
DD-WRT Novice


Joined: 05 Jan 2008
Posts: 7

PostPosted: Mon Dec 29, 2008 3:12    Post subject: Reply with quote
Try /nodma , like this

Quote:


victek@Servidor:/jtag# ./tjtag3 -erase:nvram /fc:99 /nodma

==============================================
EJTAG Debrick Utility v3.0 RC1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 8

CPU Chip ID: 10010100011100000100000101111111 (9470417F)
*** Found a Broadcom BCM4704 KPBG Rev 9 CPU chip ***

- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32
*** DMA Mode Forced Off ***

Issuing Processor / Peripheral Reset ... ECR: 0x00200100 Done
Enabling Memory Writes ... Mem 0x0000001a
Done
Halting Processor ...
00000000001000001000000100000000 (00208100)
00000000001000000000000100000000 (00200100)
<Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Manual Flash Selection ... Done

Flash Vendor ID: 00000000000000000000000001111111 (0000007F)
Flash Device ID: 00000000000000000010001011110110 (000022F6)
*** Manually Selected a EON EN29LV320 2Mx16 TopB (4MB) Flash Chip ***

- Flash Chip Window Start .... : 1fc00000
- Flash Chip Window Length ... : 00400000
- Selected Area Start ........ : 1fff0000
- Selected Area Length ....... : 00010000

*** You Selected to Erase the NVRAM.BIN ***

=========================
Erasing Routine Started
=========================
Total Blocks to Erase: 8

Erasing block: 64 (addr = 1fff0000)...Done
Erasing block: 65 (addr = 1fff2000)...Done
Erasing block: 66 (addr = 1fff4000)...Done
Erasing block: 67 (addr = 1fff6000)...Done
Erasing block: 68 (addr = 1fff8000)...Done
Erasing block: 69 (addr = 1fffa000)...Done
Erasing block: 70 (addr = 1fffc000)...Done
Erasing block: 71 (addr = 1fffe000)...Done
=========================
Erasing Routine Complete
=========================
elapsed time: 1 seconds


*** REQUESTED OPERATION IS COMPLETE ***

victek@Servidor:/jtag#


But I'm not sure we are selecting the proper flash chip.. after my reading to EON datasheet:
http://pdf1.alldatasheet.co.kr/datasheet-pdf/view/207689/EON/EN29LV320AB-70TP.html
I have to select Bottom Boot Sector chip (pls correct me if I'm wrong, read page 4 of the document), so fc:98

Flash ID chip
EN29LV320AB-70TCP
173S21E
0736SDA

Then, memory address changes all over (see page 7).
Goto page Previous  1, 2, 3 ... 32, 33, 34 ... 82, 83, 84  Next Display posts from previous:    Page 33 of 84
Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> General Questions All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum