TJTAG - EJTAG De-Brick tool - IMPORTANT CHANGE:See 1st Post.

Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Forum Index -> General Questions
Goto page Previous  1, 2, 3 ... 50, 51, 52 ... 82, 83, 84  Next
Author Message
Vaako
DD-WRT User


Joined: 10 Jun 2009
Posts: 333

PostPosted: Wed Jul 08, 2009 17:52    Post subject: Reply with quote
Hi all,

It seems that the tjtag V3.0 RC1 has some problems with recognition of the chip AT49BV322A it could be the different debug routine in tjtagv3 than there is in tjtagv2. (so says Tornado himself)

So this trick does it for me to recognise the AT49BV322A:

Quote:
1. start tjtag v2.1.4 when Probing Flash it hangs for a while and report:
*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***


Quote:
2. Start tjtag v3.0 RC1 and now he detects the AT49BV322A (see below a compleet log example)


You see below that when i run tjtag V3.0 RC1 that he does not recognise the chip, then i run the v2.1.4 and he also does not recognise it becourse he dont now the chip for shure Wink
As i run again V3.0 RC1 then he sees the AT49BV322A chip.
If you run again V3.0 RC1 its not detecting it anymore i have to run V2.1.4 again.

Quote:
C:\jtag>tjtagv3 -probeonly /wiggler

==============================================
EJTAG Debrick Utility v3.0 RC1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000000000000000000000000000001 (00000001)
*** Found a Atheros AR531X/231X CPU chip ***

- EJTAG IMPCODE ....... : 01000000010000000100000000000000 (40404000)
- EJTAG Version ....... : 2.6
- EJTAG DMA Support ... : No
- EJTAG Implementation flags: R4k ASID_8 NoDMA MIPS32

Issuing Processor / Peripheral Reset ... ECR: 0x80000000 Done
Enabling Memory Writes ... Skipped
Halting Processor ...
00000000000100010000000000000000 (00110000)
00000000000000000000000000000000 (00000000)
<Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
Done
Enabling Atheros Flash Read/Write ... DEBUGMODULE: Return from DEBUG!
Done

.RE-Probing Atheros processor....DEBUGMODULE: Return from DEBUG!

Probing Flash at (Flash Window: 0x1fc00000) ...
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
Done

*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***

Resuming Processor ...
DEBUGMODULE: Return from DEBUG!
ECR: 0x0000c000

C:\jtag>tjtagv2 -probeonly /wiggler

==========================================
EJTAG Debrick Utility v2.1.4-Tornado-MOD
==========================================

Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000000000000000000000000000001 (00000001)
*** Found a Atheros AR531X/231X CPU chip ***

- EJTAG IMPCODE ....... : 01000000010000000100000000000000 (40404000)
- EJTAG Version ....... : 2.6
- EJTAG DMA Support ... : No
- EJTAG Implementation flags: R4k ASID_8 NoDMA MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... DoneDone
Enabling Atheros Flash Read/Write ... Done

Probing Flash at (Flash Window: 0x1fc00000) ... Done

*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***


C:\jtag>tjtagv3 -probeonly /wiggler

==============================================
EJTAG Debrick Utility v3.0 RC1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000000000000000000000000000001 (00000001)
*** Found a Atheros AR531X/231X CPU chip ***

- EJTAG IMPCODE ....... : 01000000010000000100000000000000 (40404000)
- EJTAG Version ....... : 2.6
- EJTAG DMA Support ... : No
- EJTAG Implementation flags: R4k ASID_8 NoDMA MIPS32

Issuing Processor / Peripheral Reset ... ECR: 0x4004c008 Done
Enabling Memory Writes ... Skipped
Halting Processor ...
01000000000101010000000000001000 (40150008)
01000000000001000000000000001000 (40040008)
<Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Enabling Atheros Flash Read/Write ... Done

.RE-Probing Atheros processor....
Probing Flash at (Flash Window: 0x1fc00000) ...
Done

Flash Vendor ID: 00000000000000000000000000011111 (0000001F)
Flash Device ID: 00000000000000000000000011001000 (000000C8)
*** Found a AT49BV322A 2Mx16 BotB (4MB) Flash Chip ***

- Flash Chip Window Start .... : 1fc00000
- Flash Chip Window Length ... : 00400000
- Selected Area Start ........ : 00000000
- Selected Area Length ....... : 00000000



*** REQUESTED OPERATION IS COMPLETE ***

Resuming Processor ...
DEBUGMODULE: Return from DEBUG!
ECR: 0x0000c000

C:\jtag>tjtagv3 -probeonly /wiggler

==============================================
EJTAG Debrick Utility v3.0 RC1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000000000000000000000000000001 (00000001)
*** Found a Atheros AR531X/231X CPU chip ***

- EJTAG IMPCODE ....... : 01000000010000000100000000000000 (40404000)
- EJTAG Version ....... : 2.6
- EJTAG DMA Support ... : No
- EJTAG Implementation flags: R4k ASID_8 NoDMA MIPS32

Issuing Processor / Peripheral Reset ... ECR: 0x80000000 Done
Enabling Memory Writes ... Skipped
Halting Processor ...
00000000000100010000000000000000 (00110000)
00000000000000000000000000000000 (00000000)
<Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
Done
Enabling Atheros Flash Read/Write ... DEBUGMODULE: Return from DEBUG!
Done

.RE-Probing Atheros processor....DEBUGMODULE: Return from DEBUG!

Probing Flash at (Flash Window: 0x1fc00000) ...
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
DEBUGMODULE: Return from DEBUG!
Done

*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***

Resuming Processor ...
DEBUGMODULE: Return from DEBUG!
ECR: 0x0000c000

C:\jtag>


But now i have notice that V3.0 RC1 does not program the AT49BV322A Crying or Very sad

Mabe Tornado can slove this?

Any help is welcome!!!

_________________
Regards,
Vaako

1x Netgear R7800 Nighthawk - firmware not decided yet !!!!
1x Netgear R7000 Nighthawk r36410
1x Ubiquiti RouterStation Pro DD-WRT r23204 std (12/24/13)
1x Asus RT-N16 SVN revision 20675 NEWD-2 K2.6
1x Linksys E4200 v3.0 r34777 mega (01/31/18 )
1x Buffalo WZR-HP-G300NH B0 B0 Gargoyle FW
1x Linksys WRT600N v1.1 (Bricked)
1x Linksys WRT54GL v1.1 (DD-WRT 26446)
1x Linksys WRT54GS v2.2 (DD-WRT 26446)
1x Linksys RVS4000 (stock fw)
3x D-Link DWL-7100AP (openWRT)
2x TP-Link TL-WA801ND (Bridge mode) 100mW TX-Power
Asus WL-520GU SVN 16403M NEWD-2 Eko std-nokaid
4x Fonera with Gargoyle FW
Sponsor
mstombs
DD-WRT User


Joined: 31 Oct 2007
Posts: 151

PostPosted: Wed Jul 08, 2009 19:45    Post subject: Reply with quote
jkutianski wrote:
Tornado.

I'm having some troubles to erase the nvram of the DIR-320.
The procesor is reported as "Broadcom BCM5354 KFBG Rev 3" and the Flash is Spansion S29AL032D90TFI03. I forced to /FC:84 (S29GL032M TopB) but the erase stalled at 1fff8000.
The reads work perfect. I made several reads of NVRAM and CFE and mach byte to byte with my previous backups from the web console.


Can you bring me some help?


Not too sure this is relevant, but ...

There are some Spansion flash chips with "Erratum" -they report the wrong info by cfi probe. Here's a link to the patch needed in the mainstream Linux kernel

http://lists.infradead.org/pipermail/linux-mtd/2008-April/021136.html

Not sure if this affects dd-wrt, or JTAG, but over at RouterTech we have come across Aztech ADSL routers with the buggy flash chips - essential to identify/fix for all config flash writes!
Vaako
DD-WRT User


Joined: 10 Jun 2009
Posts: 333

PostPosted: Thu Jul 09, 2009 1:14    Post subject: Reply with quote
@jkutianski

Thx for your awnser.
About your quote, there it says it is possible to backup from the web console.
Can you put me in the right direction on how to do this?

_________________
Regards,
Vaako

1x Netgear R7800 Nighthawk - firmware not decided yet !!!!
1x Netgear R7000 Nighthawk r36410
1x Ubiquiti RouterStation Pro DD-WRT r23204 std (12/24/13)
1x Asus RT-N16 SVN revision 20675 NEWD-2 K2.6
1x Linksys E4200 v3.0 r34777 mega (01/31/18 )
1x Buffalo WZR-HP-G300NH B0 B0 Gargoyle FW
1x Linksys WRT600N v1.1 (Bricked)
1x Linksys WRT54GL v1.1 (DD-WRT 26446)
1x Linksys WRT54GS v2.2 (DD-WRT 26446)
1x Linksys RVS4000 (stock fw)
3x D-Link DWL-7100AP (openWRT)
2x TP-Link TL-WA801ND (Bridge mode) 100mW TX-Power
Asus WL-520GU SVN 16403M NEWD-2 Eko std-nokaid
4x Fonera with Gargoyle FW
jkutianski
DD-WRT User


Joined: 23 Jun 2009
Posts: 58

PostPosted: Thu Jul 09, 2009 2:19    Post subject: Reply with quote
Vaako wrote:
@jkutianski

Thx for your awnser.
About your quote, there it says it is possible to backup from the web console.
Can you put me in the right direction on how to do this?


http://192.168.1.1/backup/cfe.bin

I hope this helps

JP
jkutianski
DD-WRT User


Joined: 23 Jun 2009
Posts: 58

PostPosted: Thu Jul 09, 2009 2:51    Post subject: Reply with quote
Vaako wrote:
Hi all,

It seems that the tjtag V3.0 RC1 has some problems with recognition of the chip AT49BV322A it could be the different debug routine in tjtagv3 than there is in tjtagv2. (so says Tornado himself)


you can add the AT49BV322A in the V2.1.4 source and complile it.

Code:

 { 0x001F, 0x00C8, size4MB, CMD_TYPE_AMD, "AT49BV322A 2Mx16 BotB   (4MB)"   ,8,size8K, 63,size64K,        0,0,        0,0        },
{ 0x001F, 0x00C9, size4MB, CMD_TYPE_AMD, "AT49BV322AT 2Mx16 TopB   (4MB)"   ,63,size64K,        8,size8K,        0,0,        0,0        },


or try with the version V2 forcing, with /FC:18, to manualy detect the flash as AMD 29lv320DB 2Mx16 BotB
jkutianski
DD-WRT User


Joined: 23 Jun 2009
Posts: 58

PostPosted: Thu Jul 09, 2009 3:12    Post subject: Reply with quote
mstombs wrote:
jkutianski wrote:
Tornado.

I'm having some troubles to erase the nvram of the DIR-320.
The procesor is reported as "Broadcom BCM5354 KFBG Rev 3" and the Flash is Spansion S29AL032D90TFI03. I forced to /FC:84 (S29GL032M TopB) but the erase stalled at 1fff8000.
The reads work perfect. I made several reads of NVRAM and CFE and mach byte to byte with my previous backups from the web console.


Can you bring me some help?


Not too sure this is relevant, but ...

There are some Spansion flash chips with "Erratum" -they report the wrong info by cfi probe. Here's a link to the patch needed in the mainstream Linux kernel

http://lists.infradead.org/pipermail/linux-mtd/2008-April/021136.html

Not sure if this affects dd-wrt, or JTAG, but over at RouterTech we have come across Aztech ADSL routers with the buggy flash chips - essential to identify/fix for all config flash writes!


Mmmm... my flash is not detected with the same ID. Now the S29AL032DTFI03 is reported as VendID=0xB800 and DevID=0x3C04.
The EJTAG uses an struct to define the sectors and not taken by CFI, in this case the bug isn't a problem.
I found that TJTAG don't erase the blocks and I suspect that its related to byte/word configuration. The DIR-320 has the pin 47 (nBYTE) connecte to GND in this case the flash are using byte but the TJTAG are using word to erase and write. No?
I'm not an expert and may be I'm wrong.
Next week I will try to solder other flash chip to test if is something related to the flash chip or not.
Thanks for trying to help me.

JP
kingsmill
DD-WRT User


Joined: 20 May 2008
Posts: 79

PostPosted: Thu Jul 09, 2009 21:18    Post subject: Re: Bricked WGR614V8 Reply with quote
Would someone be able to confirm whether tjtagRC-3.0.exe supports the Netgear WGR614v8 router? Any thoughts on the problem I am having?

Thanks,
Geoff.

kingsmill wrote:
I have two Netgear WGR614v8 routers. I installed DD-WRT on one WGR614v8. Everything worked fine for a couple of weeks and then a few weeks later the unit just died. When the unit is turned all LEDS are lit, I am unable to ping the unit and I see no output on the serial port.

I just assumed that the unit just died so I installed DD-WRT on the second WGR614v8. Again, this all worked fine for a while. A couple of days later I tried making a configuration change from the WEB GUI but after hitting save the unit hung. When the unit is turned all LEDS are lit, I am unable to ping the unit and I see no output on the serial port.

Now I have two dead WGR614v8 units with the same symptoms. I connected a JTAG cable but tjtag is unable to determine the type of flash chip. The JTAG cable I am using has the following wiring configuration:-

http://www.myopenrouter.com/forum/thread/10923/Guide-for-Jtag-Cable-and-acces-to-wgr614v8/


1st WGR614v8

C:\tjtagRC-3.0.exe -probeonly /flash_debug /noemw

==============================================
EJTAG Debrick Utility v3.0 RC1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 8

CPU Chip ID: 00010101001101010100000101111111 (1535417F)
*** Found a Broadcom BCM5354 KFBG Rev 1 CPU chip ***

- EJTAG IMPCODE ....... : 00000000100000010000100100000100 (00810904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS16 MIPS32

Issuing Processor / Peripheral Reset ... ECR: 0x00228900 Done
Enabling Memory Writes ... Skipped
Halting Processor ...
00000000001100010000100100000000 (00310900)
00000000001000000000100100000000 (00200900)
<Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Donespi_flash_read 0x1fc00000
spi_flash_mmr 0x00000000
spi_flash_mmr_size 0x00000000
spi_flash_ctl 0x18000040
spi_flash_opcode 0x18000044
spi_flash_data 0x18000048
spi_ctl_start 0x80000000
spi_ctl_busy 0x80000000

Probing Flash at (Flash Window: 0x1fc00000) ...

Debug AMD Vendid : 00000000000000000000000000000000 (00000000)
Debug AMD Devdid : 00000000000000000011110000000000 (00003C00)

Debug SST Vendid : 00000000000000000000000000000000 (00000000)
Debug SST Devdid : 00000000000000000011110000000000 (00003C00)

Debug BSC-SCS Vendid :00111100000000000000000000000000 (3C000000)
Debug BCS-SCS Devdid :00111100000000000000000000000000 (3C000000)
REGREAD32 data 0x00000000 spi_flash_mmr 0x00000000 reg 0x18000040
REG 0x18000044 REGWRITE32 0x0000049f
SPI_FLASH_OPCODE 0x18000044 PTR_OPCODE 0x0000049f
REG 0x18000040 REGWRITE32 0x8000049f
SPI_FLASH_CTL SEND -> 0x18000040 reg 0x8000049f
REGREAD32 data 0x0000049f spi_flash_mmr 0x00000000 reg 0x18000040
REGREAD32 data 0x16161616 spi_flash_mmr 0x00000000 reg 0x18000048

Debug SPI Vendid : 00000000000000000000000000010110 (00000016)
Debug SPI Devdid : 00000000000000000001011000010110 (00001616)
Done

*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***

----------------------------------------------------

2nd WGR614v8

C:\tjtagRC-3.0.exe -probeonly /flash_debug /noemw

==============================================
EJTAG Debrick Utility v3.0 RC1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 8

CPU Chip ID: 00010101001101010100000101111111 (1535417F)
*** Found a Broadcom BCM5354 KFBG Rev 1 CPU chip ***

- EJTAG IMPCODE ....... : 00000000010000001000010010000100 (00408484)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k ASID_8 MIPS32

Issuing Processor / Peripheral Reset ... ECR: 0x00200100 Done
Enabling Memory Writes ... Skipped
Halting Processor ...
00000000000110001000000100000000 (00188100)
00000000000010000000000100000000 (00080100)
<Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Donespi_flash_read 0x1fc00000
spi_flash_mmr 0x00000000
spi_flash_mmr_size 0x00000000
spi_flash_ctl 0x18000040
spi_flash_opcode 0x18000044
spi_flash_data 0x18000048
spi_ctl_start 0x80000000
spi_ctl_busy 0x80000000

Probing Flash at (Flash Window: 0x1fc00000) ...

Debug AMD Vendid : 00000000000000000000000000000000 (00000000)
Debug AMD Devdid : 00000000000000000000000000000000 (00000000)

Debug SST Vendid : 00000000000000000000000000000000 (00000000)
Debug SST Devdid : 00000000000000000000000000000000 (00000000)

Debug BSC-SCS Vendid :00000000000000000000000000000000 (00000000)
Debug BCS-SCS Devdid :00000000000000000000000000000000 (00000000)
REGREAD32 data 0x00000000 spi_flash_mmr 0x00000000 reg 0x18000040
REG 0x18000044 REGWRITE32 0x0000049f
SPI_FLASH_OPCODE 0x18000044 PTR_OPCODE 0x0000049f
REG 0x18000040 REGWRITE32 0x8000049f
SPI_FLASH_CTL SEND -> 0x18000040 reg 0x8000049f
REGREAD32 data 0x01600000 spi_flash_mmr 0x00000000 reg 0x18000040
REGREAD32 data 0x0b000000 spi_flash_mmr 0x00000000 reg 0x18000048

Debug SPI Vendid : 00000000000000000000000000000000 (00000000)
Debug SPI Devdid : 00000000000000000000000000000000 (00000000)
Done

*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***

-----------------------------------------------------

If I run tjtag multiple times then I get different results for the Vendor ID registers.

The Flash chip is a MX25L3205AMC. Is this the same chip configuration as "/fc:21 ............. Macronix MX25L3205D (4MB) Serial"?

Does anyone know if tjtag works with a WGR614v8?
Any thoughts on why tjtag is unable to detect the Flash Chip?

Thanks so much,
Geoff..
DDWRT54G
DD-WRT Novice


Joined: 26 Mar 2009
Posts: 8

PostPosted: Sat Jul 11, 2009 2:41    Post subject: Reply with quote
My friend try to load DD-WRT and messed up.
When he gave it to me it had power light blinking and all Ethernet lights were ON.
I connected JTAG and issued command
-- -erase:wholeflash /noreset
-- -flash:CFE
-- -flash:NVRAM
After that only power LED is blinking, No ping on Ethernet port but when i connect one working ethernet port of other router then it allocates IP and works like a switch fine.
still I cannot access admin page for this router.
Wireless function is down
Also now JTAG connection is lost.
Does anybody knows what happend?

JTAG had cold solder, after fixing that it came alive..


Last edited by DDWRT54G on Sat Jul 11, 2009 22:52; edited 1 time in total
jkutianski
DD-WRT User


Joined: 23 Jun 2009
Posts: 58

PostPosted: Sat Jul 11, 2009 3:17    Post subject: Reply with quote
DDWRT54G wrote:
My friend try to load DD-WRT and messed up.
When he gave it to me it had power light blinking and all Ethernet lights were ON.
I connected JTAG and issued command
-- -erase:wholeflash /noreset
-- -flash:CFE
-- -flash:NVRAM
After that only power LED is blinking, No ping on Ethernet port but when i connect one working ethernet port of other router then it allocates IP and works like a switch fine.
still I cannot access admin page for this router.
Wireless function is down
Also now JTAG connection is lost.
Does anybody knows what happend?


You've to flash the dd-wrt image with the TFTP to get the web console. You deleted with the erase:wholeflash
Some routers like d-link has the 182.168.0.1 address when boots the CFE.
jkutianski
DD-WRT User


Joined: 23 Jun 2009
Posts: 58

PostPosted: Tue Jul 14, 2009 15:32    Post subject: Reply with quote
I change the Spansion S29AL032D on my DIR-320 for a Macronix MX29LV320EBTC, but TJTAG still reports 0xB800, 0x3C04 with the switch /flash_debug.
Really weird!!! :shock:

An with the MX the router is very unestable.
pyro2927
DD-WRT Novice


Joined: 20 Jul 2009
Posts: 4

PostPosted: Mon Jul 20, 2009 21:44    Post subject: TJTAG Not flashing CFE Reply with quote
So I have a WRT54GL and I am able to erase the wholeflash, but whenever I start flashing CFE or Wholeflash it freezes on me. It was working up until earlier today.

Here is some info:
* Broadcom BCM5352 Rev 1 CPU chip
* WRT54GL
* TJTAG v2.1.4
* Am able to -erase:wholeflash, but not -flash:wholeflash

It just stops:
[ 0% Flashed] 1fc02100: 00000000 03fbf821 3c1b8030 277b2100
[ 0% Flashed] 1fc02110: 03fbd823 3c01a000 0361d825 0360f809
[ 0% Flashed] 1fc02120: 00000000 04110001 00000000 00000000
[ 0% Flashed] 1fc02130: 3c1b8030 277b212c 03fbf823 3c1b8030
[ 0% Flashed] 1fc02140: 277b2028 037fd821 3c01a000 0361d825
[ 0% Flashed] 1fc02150: 8f7b000c 04110001 00000000 00000000
[ 0% Flashed] 1fc02160: 03fbf821 3c1b8030 277b215c 03fbd823
[ 0% Flashed] 1fc02170: 3c01a000 0361d825 0360f809 00000000
[ 0% Flashed] 1fc02180: 04110266 00000000 3c044452 3484414d
[ 0% Flashed] 1fc02190: 04110001 00000000 00000000 3c1b8030
[ 0% Flashed] 1fc021a0: 277b2198 03fbf823 3c1b8030 277b2028
[ 0% Flashed] 1fc021b0: 037fd821 8f7b0004 04110001 00000000
[ 0% Flashed] 1fc021c0: 00000000 03fbf821 3c1b8030 277b21c0
[ 0% Flashed] 1fc021d0: 03fbd823 0360f809 00000000 04110001
[ 0% Flashed] 1fc021e0: 00000000 00000000 3c1b8030 277b21e4
[ 0% Flashed] 1fc021f0: 03fbf823 3c1b8030 277b2028 037fd821
[ 0% Flashed] 1fc02200: 8f7b0008 04110001 00000000 00000000
[ 0% Flashed] 1fc02210: 03fbf821 3c1b8030 277b220c 03fbd823
[ 0% Flashed] 1fc02220: 0360f809 00000000 00402021 04110001
[ 0% Flashed] 1fc02230: 00000000 00000000 3c1b8030 277b2234
[ 0% Flashed] 1fc02240: 03fbf823 3c1b8030 277b2028 037fd821
[ 0% Flashed] 1fc02250: 8f7b0020 04110001 00000000 00000000
[ 0% Flashed] 1fc02260: 03fbf821 3c1b8030 277b225c 03fbd823
[ 0% Flashed] 1fc02270: 0360f809 00000000 04110002 0002d282
[ 0% Flashed] 1fc02280: 00000000 3c081fff 3508ffff 011f4024
[ 0% Flashed] 1fc02290: 3c091fc0 0109082a 1420002d 00000000
[ 0% Flashed] 1fc022a0: 00000000

And when I try just CFE it does the same thing, but arround the 4% range.

Any ideas?

Also, I'm looking into getting a new JTAG cable. Any suggestions? The one I have was given to me and is home made.
jkutianski
DD-WRT User


Joined: 23 Jun 2009
Posts: 58

PostPosted: Mon Jul 20, 2009 22:43    Post subject: Re: TJTAG Not flashing CFE Reply with quote
pyro2927 wrote:
So I have a WRT54GL and I am able to erase the wholeflash, but whenever I start flashing CFE or Wholeflash it freezes on me. It was working up until earlier today.

Here is some info:
* Broadcom BCM5352 Rev 1 CPU chip
* WRT54GL
* TJTAG v2.1.4
* Am able to -erase:wholeflash, but not -flash:wholeflash
And when I try just CFE it does the same thing, but arround the 4% range.

Any ideas?

Also, I'm looking into getting a new JTAG cable. Any suggestions? The one I have was given to me and is home made.


Probably you've the v1.1. Try with the EJTAG debrick utility 4.8 http://downloads.openwrt.org/utils/HairyDairyMaid_WRT54G_Debrick_Utility_v48.zip and the HairyDairyMaid cable.


Last edited by jkutianski on Mon Jul 20, 2009 22:51; edited 1 time in total
pyro2927
DD-WRT Novice


Joined: 20 Jul 2009
Posts: 4

PostPosted: Mon Jul 20, 2009 22:45    Post subject: Re: TJTAG Not flashing CFE Reply with quote
jkutianski wrote:
pyro2927 wrote:
So I have a WRT54GL and I am able to erase the wholeflash, but whenever I start flashing CFE or Wholeflash it freezes on me. It was working up until earlier today.

Here is some info:
* Broadcom BCM5352 Rev 1 CPU chip
* WRT54GL
* TJTAG v2.1.4
* Am able to -erase:wholeflash, but not -flash:wholeflash
And when I try just CFE it does the same thing, but arround the 4% range.

Any ideas?

Also, I'm looking into getting a new JTAG cable. Any suggestions? The one I have was given to me and is home made.


try with the EJTAG debrick utility 4.8 http://downloads.openwrt.org/utils/HairyDairyMaid_WRT54G_Debrick_Utility_v48.zip


I tried that one too. Same issue.
jkutianski
DD-WRT User


Joined: 23 Jun 2009
Posts: 58

PostPosted: Mon Jul 20, 2009 22:52    Post subject: Re: TJTAG Not flashing CFE Reply with quote
pyro2927 wrote:

I tried that one too. Same issue.


Don't try flash:wholeflash. You only need the CFE.

erase wholeflash and then flash cfe, then you can use tftp to upload the kernel
pyro2927
DD-WRT Novice


Joined: 20 Jul 2009
Posts: 4

PostPosted: Mon Jul 20, 2009 23:09    Post subject: Re: TJTAG Not flashing CFE Reply with quote
jkutianski wrote:
pyro2927 wrote:

I tried that one too. Same issue.


Don't try flash:wholeflash. You only need the CFE.

erase wholeflash and then flash cfe, then you can use tftp to upload the kernel


Tried that too. With both programs. Neither works. Not CFE, not WHOLEFLASH.
Goto page Previous  1, 2, 3 ... 50, 51, 52 ... 82, 83, 84  Next Display posts from previous:    Page 51 of 84
Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Forum Index -> General Questions All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum