TJTAG - EJTAG De-Brick tool - IMPORTANT CHANGE:See 1st Post.

Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Forum Index -> General Questions
Goto page Previous  1, 2, 3 ... 68, 69, 70 ... 82, 83, 84  Next
Author Message
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Wed Oct 06, 2010 14:15    Post subject: Reply with quote
I'm using the same adapter and code on a RT-N16 and you should not need /no_sysreset see the underscore

Eko, used this version this morning as well except the windows version, do you have the usb power cable plugged in ?

Please double check everything, and or don't touch anything and run the previous version you said works ?

I will have to get the datasheet for that flash, if I don't already have it, and get that fixed for you.

Sorry, can't send the source yet, but soon



root@tornado:/data/src/cycfx2prog-0.41# tjtag3 -probeonly

==============================================
EJTAG Debrick Utility v3.0.2 RC2 Tornado-MOD
==============================================

Intial value of Control register is 0000000C
Intial value of status register is 0000007E
01111110 (0000007E)

Status bit 7 Busy Inverted pin 11 = 1
Status bit 6 *Ack pin 10 = 1
Status bit 5 Paper-out pin 12 = 1
Status bit 4 Select pin 13 = 1
Status bit 3 *Error pin 15 = 1
* means low = true, e.g., *Error

VCC connected
values of Control register after init 0x0000000C
value of status register after init 0x0000007E
system reset complete

Detected IR chain length = 5
Number of device(s) = 1

Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000000000010001100000101111111 (0008C17F)
*** Found a Broadcom BCM4716 Rev 1 CPU in MIPS MODE chip ***

- EJTAG IMPCODE ....... : 01100000010000010100000000000000 (60414000)
- EJTAG Version ....... : 3.1
- EJTAG DMA Support ... : No
- EJTAG Implementation flags: R4k ASID_8 MIPS16 NoDMA MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Init PrAcc ... Done
Clearing Watchdog ... Done


Chip ID 4716
Chip Rev 1
Package Options a
Number of Cores 9
Core Revision 79
Core Type 710
Core Vendor ID 19a10000
Flash Type 700
Flash Type = PFLASH
Dest is bits 0
Dest is bits1 0
Dest is bits 0
Flash is byteswapped 0
Endian Type is LE 0
PLL Type 00000000
Done

Flash Vendor ID: 00000000000000000000000011000010 (000000C2)
Flash Device ID: 00000000011111100010001000000001 (007E2201)
*** Found a Macronix MX29GL256E (32MB) Flash Chip ***

- Flash Chip Window Start .... : 1C000000
- Flash Chip Window Length ... : 02000000
- Selected Area Start ........ : 00000000
- Selected Area Length ....... : 00000000



*** REQUESTED OPERATION IS COMPLETE ***

_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
Sponsor
lijianch
DD-WRT User


Joined: 14 Jul 2007
Posts: 146

PostPosted: Wed Oct 06, 2010 17:40    Post subject: Reply with quote
I did not use the usb cable to avoid the further complication. I use the parallel port.

The previous version works (in terms of detecting the CPU) but it failed to detect the flash chip.

Tornado wrote:
I'm using the same adapter and code on a RT-N16 and you should not need /no_sysreset see the underscore

Eko, used this version this morning as well except the windows version, do you have the usb power cable plugged in ?

Please double check everything, and or don't touch anything and run the previous version you said works ?

I will have to get the datasheet for that flash, if I don't already have it, and get that fixed for you.

Sorry, can't send the source yet, but soon



root@tornado:/data/src/cycfx2prog-0.41# tjtag3 -probeonly

==============================================
EJTAG Debrick Utility v3.0.2 RC2 Tornado-MOD
==============================================

Intial value of Control register is 0000000C
Intial value of status register is 0000007E
01111110 (0000007E)

Status bit 7 Busy Inverted pin 11 = 1
Status bit 6 *Ack pin 10 = 1
Status bit 5 Paper-out pin 12 = 1
Status bit 4 Select pin 13 = 1
Status bit 3 *Error pin 15 = 1
* means low = true, e.g., *Error

VCC connected
values of Control register after init 0x0000000C
value of status register after init 0x0000007E
system reset complete

Detected IR chain length = 5
Number of device(s) = 1

Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000000000010001100000101111111 (0008C17F)
*** Found a Broadcom BCM4716 Rev 1 CPU in MIPS MODE chip ***

- EJTAG IMPCODE ....... : 01100000010000010100000000000000 (60414000)
- EJTAG Version ....... : 3.1
- EJTAG DMA Support ... : No
- EJTAG Implementation flags: R4k ASID_8 MIPS16 NoDMA MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Init PrAcc ... Done
Clearing Watchdog ... Done


Chip ID 4716
Chip Rev 1
Package Options a
Number of Cores 9
Core Revision 79
Core Type 710
Core Vendor ID 19a10000
Flash Type 700
Flash Type = PFLASH
Dest is bits 0
Dest is bits1 0
Dest is bits 0
Flash is byteswapped 0
Endian Type is LE 0
PLL Type 00000000
Done

Flash Vendor ID: 00000000000000000000000011000010 (000000C2)
Flash Device ID: 00000000011111100010001000000001 (007E2201)
*** Found a Macronix MX29GL256E (32MB) Flash Chip ***

- Flash Chip Window Start .... : 1C000000
- Flash Chip Window Length ... : 02000000
- Selected Area Start ........ : 00000000
- Selected Area Length ....... : 00000000



*** REQUESTED OPERATION IS COMPLETE ***
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Wed Oct 06, 2010 17:52    Post subject: Reply with quote
lijianch,

Your not helping me help you solve your problem, If your using the DIYGADGET Universal adapter, the usb plug has to be plugged in to give it power, tha adapter also plugs into the parallel port, At this point I do not know how to help you with 3.0.2 RC2 and the universal adapter, your not giving me any info

_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
BlCa`
DD-WRT User


Joined: 16 Nov 2009
Posts: 135

PostPosted: Wed Oct 06, 2010 18:07    Post subject: Reply with quote
I can say for sure that chip detection works for wrt320n using both windows and linux version of RC2.
And I'm also using TIAO jtag adapter in buffered mode.

Code:
E:\Flash\tjtag-3.0.2-RC2\Windows32>tjtag302rc2.exe -probeonly

==============================================
 EJTAG Debrick Utility v3.0.2 RC2 Tornado-MOD
==============================================

Selected  port  = 0x378

Intial value of Control register is 000000CC
Intial value of status register is  000000FF
11111111 (000000FF)

Status bit 7 Busy Inverted pin 11 = 0
Status bit 6 *Ack          pin 10 = 1
Status bit 5 Paper-out     pin 12 = 1
Status bit 4 Select        pin 13 = 1
Status bit 3 *Error        pin 15 = 1
* means low = true, e.g., *Error

VCC connected
values of Control register after init 0x000000CC
value of status register after init   0x000000FF
system reset complete

Detected IR chain length = 32
Number of device(s) = 1

idcode 0x1471617f 32
Jtag is in LV mode
switching to MIPS mode
Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000000000010001100000101111111 (0008C17F)
*** Found a Broadcom BCM4716 Rev 1 CPU in MIPS MODE chip ***

    - EJTAG IMPCODE ....... : 01100000010000010100000000000000 (60414000)
    - EJTAG Version ....... : 3.1
    - EJTAG DMA Support ... : No
    - EJTAG Implementation flags: R4k ASID_8 MIPS16 NoDMA MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Init PrAcc ... Done
Clearing Watchdog ... Done




Though, mine's a complete brick without CFE (corrupt?) and wont go any further than that (tried /no_sysreset /nobreak /noreset /fc:145 but no go). Then again, I notice that when I run tjtag within 1 sec after powering the router, control/status registers and pin 11 return the same values as your RT-N16.


@lijianch: don't forget to rmmod lp and/or any other module that might be accessing parallel port when you use linux version.
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Wed Oct 06, 2010 18:14    Post subject: Reply with quote
@BlCa`

I don't understand this "Though, mine's a complete brick without CFE (corrupt?) "

WHat do you mean complete brick, If I erase the cfe on my RT-N16, I can detect processor and flash, but I have no lights whats so ever, unless I plug in a hot rj45 cable.

I can however flash a new CFE on it, do you need some help recovering it ?

_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
BlCa`
DD-WRT User


Joined: 16 Nov 2009
Posts: 135

PostPosted: Wed Oct 06, 2010 18:32    Post subject: Reply with quote
I certainly need help if you have any idea.

As I said, it wont go any further than the log above. It just stops there and wait forever.
Any optional switch I try makes no difference: it doesn't detect flash chip (auto or forced). It became like that since I ran -erase;wholeflash with RC1.
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Wed Oct 06, 2010 18:40    Post subject: Reply with quote
Ok, whats ths flash chip in it, and its a 320n right ?
_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
BlCa`
DD-WRT User


Joined: 16 Nov 2009
Posts: 135

PostPosted: Wed Oct 06, 2010 18:49    Post subject: Reply with quote
Yeah a wrt320n. Flash chip is a MX25L6405D-12G, or /fc:145 in RC2.
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Wed Oct 06, 2010 18:55    Post subject: Reply with quote
you do not get a unknown or no flash detected message ? can you send me a probeonly with /flash_debug ?
_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
BlCa`
DD-WRT User


Joined: 16 Nov 2009
Posts: 135

PostPosted: Wed Oct 06, 2010 19:06    Post subject: Reply with quote
No, tjtag stops right as shown in the previous log. There's nothing after and I have to hit ctrl+C to stop tjtag:

Code:

E:\Flash\tjtag-3.0.2-RC2\Windows32>tjtag302rc2.exe -probeonly /flash_debug

==============================================
 EJTAG Debrick Utility v3.0.2 RC2 Tornado-MOD
==============================================

Selected  port  = 0x378

Intial value of Control register is 000000CC
Intial value of status register is  0000007F
01111111 (0000007F)

Status bit 7 Busy Inverted pin 11 = 1
Status bit 6 *Ack          pin 10 = 1
Status bit 5 Paper-out     pin 12 = 1
Status bit 4 Select        pin 13 = 1
Status bit 3 *Error        pin 15 = 1
* means low = true, e.g., *Error

VCC connected
values of Control register after init 0x000000CC
value of status register after init   0x0000007F
system reset complete

Detected IR chain length = 32
Number of device(s) = 1

idcode 0x1471617f 32
Jtag is in LV mode
switching to MIPS mode
Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000000000010001100000101111111 (0008C17F)
*** Found a Broadcom BCM4716 Rev 1 CPU in MIPS MODE chip ***

    - EJTAG IMPCODE ....... : 01100000010000010100000000000000 (60414000)
    - EJTAG Version ....... : 3.1
    - EJTAG DMA Support ... : No
    - EJTAG Implementation flags: R4k ASID_8 MIPS16 NoDMA MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Init PrAcc ... Done
Clearing Watchdog ... Done
^C
E:\Flash\tjtag-3.0.2-RC2\Windows32>tjtag302rc2.exe -probeonly /flash_debug /fc:145

==============================================
 EJTAG Debrick Utility v3.0.2 RC2 Tornado-MOD
==============================================

Selected  port  = 0x378

Intial value of Control register is 000000CC
Intial value of status register is  000000FF
11111111 (000000FF)

Status bit 7 Busy Inverted pin 11 = 0
Status bit 6 *Ack          pin 10 = 1
Status bit 5 Paper-out     pin 12 = 1
Status bit 4 Select        pin 13 = 1
Status bit 3 *Error        pin 15 = 1
* means low = true, e.g., *Error

VCC connected
values of Control register after init 0x000000CC
value of status register after init   0x000000FF
system reset complete

Detected IR chain length = 32
Number of device(s) = 1

idcode 0x1471617f 32
Jtag is in LV mode
switching to MIPS mode
Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000000000010001100000101111111 (0008C17F)
*** Found a Broadcom BCM4716 Rev 1 CPU in MIPS MODE chip ***

    - EJTAG IMPCODE ....... : 01100000010000010100000000000000 (60414000)
    - EJTAG Version ....... : 3.1
    - EJTAG DMA Support ... : No
    - EJTAG Implementation flags: R4k ASID_8 MIPS16 NoDMA MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Init PrAcc ... Done
Clearing Watchdog ... Done



With and without /fc:145
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Wed Oct 06, 2010 19:11    Post subject: Reply with quote
ok, I will have to look at this, does not look like its running the flash probe at all, its late here, so I will get back to you tomorrow. I only have the RT-N16, with parallel, I have a router with serial but not a 4716... but I will take a look first thing in the morning. I know we have debrick and flash a cfe to a 320n
_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
BlCa`
DD-WRT User


Joined: 16 Nov 2009
Posts: 135

PostPosted: Wed Oct 06, 2010 19:18    Post subject: Reply with quote
OK, thanks for your help :)

BTW, wholeflash erase took about 2 hours when it happened. LOM told me it's way too long for that unit. Maybe there's no bug but just a toasted router now.
lijianch
DD-WRT User


Joined: 14 Jul 2007
Posts: 146

PostPosted: Wed Oct 06, 2010 20:04    Post subject: Reply with quote
Very sorry about that. I thought the TIAO usb port is only optional. Sorry about that.

I will try it when I get back home.

Tornado wrote:
lijianch,

Your not helping me help you solve your problem, If your using the DIYGADGET Universal adapter, the usb plug has to be plugged in to give it power, tha adapter also plugs into the parallel port, At this point I do not know how to help you with 3.0.2 RC2 and the universal adapter, your not giving me any info
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Wed Oct 06, 2010 21:56    Post subject: Reply with quote
@lijianch

It can be used as a DLC5 and or non-buffered mode without usin g the usb power source, and actually it could be used as a DLC5 type adapter in buffered mode - with usb power supplied

_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
bassmc
DD-WRT Novice


Joined: 19 Sep 2010
Posts: 3

PostPosted: Thu Oct 07, 2010 10:45    Post subject: please add macronix 29lv640mbtc Reply with quote
Hi Tornado,

is it possible to add this line in tjtag302rc2 or release source for free ??

{ 0x00C2, 0x227E, size8MB, CMD_TYPE_AMD, "MX29LV640MBTC-90G 4Mx16 (8MB)" ,256,size32K, 0,0, 0,0, 0,0 },

i have a bintec router ar7
tnetd7300

flash start is 90000000

best regards
bassmc

ps: adapter is tiao universal (works fine)
pinout is standard ejtag2.6
Goto page Previous  1, 2, 3 ... 68, 69, 70 ... 82, 83, 84  Next Display posts from previous:    Page 69 of 84
Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Forum Index -> General Questions All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum