Intial value of Control register is 0000000C
Intial value of status register is 00000068
01101000 (00000068)
Status bit 7 Busy Inverted pin 11 = 1
Status bit 6 *Ack pin 10 = 1
Status bit 5 Paper-out pin 12 = 1
Status bit 4 Select pin 13 = 0
Status bit 3 *Error pin 15 = 1
* means low = true, e.g., *Error
VCC connected
values of Control register after init 0x0000000C
value of status register after init 0x00000068
system reset complete
Detected IR chain length = 0
Number of device(s) = 0
Probing bus ... Done
Instruction Length set to 5
CPU Chip ID: 11111111111111111111111111111111 (FFFFFFFF)
*** Unknown or NO CPU Chip ID Detected ***
*** Possible Causes:
1) Device is not Connected.
2) Device is not Powered On.
3) Improper JTAG Cable.
4) Unrecognized CPU Chip ID.
I try in v3.0.1 set /fc:xx for all 29lv320 bottom
flash not detected (read all 0x00) (-backup:nvram /fc:40).
You mean you downloaded and upgraded the modem with wrong firmware ?
If yes, and nothing appears in the serial port, for now that cannot be solved without rewriting the flash in an external burner. What people somehow agree is that the wrong firmware causes the processor to lock and not allow memory access.
You mean you downloaded and upgraded the modem with wrong firmware ?
No, I not download firmware.
I make the mistake in choice modem board id.
Code:
CFE> b
Press: <enter> to use current value
'-' to go previous parameter
'.' to clear the current value
'x' to exit this command
Board Id Name (0-11)
96348GW-11 ------- 0
96348GW-12 ------- 1
R ------- 2
R2P-4M-16M ------- 3
WLAN ------- 4
SIP ------- 5
CT5612S-122 ------- 6
D-1P-W ------- 7
D-4P-W ------- 8
D-1P-3P-W ------- 9
VSIP ------- 10
IAD2P ------- 11 : 8 2
My board id is 8, I choice 1 (code below sample from internet).
I think clear nvram change state of modem to configure mode. But tjtag cannot read flash.
Posted: Sun Nov 28, 2010 22:54 Post subject: Adding A SnapGear Router to TJtag
Any chance of getting U to add support, for a SnapGear SG8100 router, to your program, that I just got for Thanksgiving
I had to guess the JTag pin out, It's look's to be standard 20 pin layout and TJTag correctly identifies the routers CPU, so I think (hope) that I have my wiggler connected correctly.
It uses a IXP425 CPU
It uses a Intel StrataFlash JS28F256-P30B95 Chip (H-Flash ID = 0x891C0089) for it's Flash and
uses 2 HY57V561620FTP-H Chips for it's RAM.
Does TJtag ever put the Processor into "Debug Mode" on any router?
I always see the message:
"Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done "
I thought that I would ask U about adding support for this router, before I look at trying to change your SourceCode to support these chips.
I'm currently working on, finding out what addresses, these chips use on this router, so I can try to configure H-JTAG and H-Flasher to try to dump it's OEM firmware and then to load it with newly compiled firmware.
Thanks For All your Hard work on this program.
Tom
Last edited by DSpyder on Fri Dec 03, 2010 9:14; edited 1 time in total
I don't think tjtag supports any arm cpus except to identify them.
I'm in a similar situation to you though, I'm trying to find the flash address on an x-scale platform. I've had much more success with urjtag but still can't access the flash.
Any hints?
Steve
Is it that TJtag is able to go into "Debug Mode" only with some CPUs or
Is it the way that I have my JTag interface board setup and connected to the router's Jtag interface?
Posted: Fri Dec 03, 2010 21:26 Post subject: Re: Processor not entering Debug Mode
DSpyder wrote:
Is it that TJtag is able to go into "Debug Mode" only with some CPUs or
Is it the way that I have my JTag interface board setup and connected to the router's Jtag interface?
From my experience, sometimes bad soldering in the cable can cause it, sometimes the correct pinout for the jtag connection is required, and in a few cases ( DSL-2640U, for example ) corrupt firmware hangs the processor before it can enter debug mode.
Joined: 29 Mar 2009 Posts: 36 Location: Netherlands
Posted: Sun Dec 05, 2010 21:47 Post subject:
Tornado wrote:
@gabber2k
Tjtag 3.0.1 is not capable of flashing your 320n, only 3.0.2 is, and its still a little buggy, I thnk I have found the problem with it and will post another RC3 today. Then you may be able to recover you router.
Hey Tornado, any news about the RC3 version?
I have an WRT320N also, which is bricked for about a year now. I was in touch with BlCa' and performed a erase:wholeflash . Unfortunately, the flash now seems to be zero't and I too can't flash anything in there. It also stops at 'init PrAcc' when using tjtag RC2-1 without /dma. However, with /dma still nothing is written. Am trying to flash back the CFE and it's not 'written' somehow.
I use the universal TJTAG adapter as you advertise with in your signature footer. _________________ It's all about bits and bytes!
Posted: Tue Jan 11, 2011 0:51 Post subject: Linksys WRT54GS v7 Bricked ?
Ok ... So I have a WRT54GS Version 7 I attempted to flash with the DD-WRT firmware close to 18 months ago and I apparently Bricked it and after trying to EJtag it with a Buffered Jtag and not getting it to revive I placed it to the wayside thinking that I would tackle it at a later date. Well that later date has arrived as I came across it last night while cleaning up some of my cluttered Junk. What I am wondering is within the past 18mo if any progress has been made with software that would help me to un-brick this? All I get is Solid lights where the Port Light are located. If anyone can shed some light on this or maybe if one of the Gurus would like this Challenge I would be interested to hear from them
Joined: 26 Jan 2008 Posts: 13049 Location: Behind The Reset Button
Posted: Tue Jan 11, 2011 1:09 Post subject: Re: Linksys WRT54GS v7 Bricked ?
Eaglesoft69 wrote:
Ok ... So I have a WRT54GS Version 7 I attempted to flash with the DD-WRT firmware close to 18 months ago and I apparently Bricked it and after trying to EJtag it with a Buffered Jtag and not getting it to revive I placed it to the wayside thinking that I would tackle it at a later date. Well that later date has arrived as I came across it last night while cleaning up some of my cluttered Junk. What I am wondering is within the past 18mo if any progress has been made with software that would help me to un-brick this? All I get is Solid lights where the Port Light are located. If anyone can shed some light on this or maybe if one of the Gurus would like this Challenge I would be interested to hear from them
Eaglesoft69
If you are having a problem with GS V7, it is not the fault of the jtag software. tjtag 2.1.4 & earlier supported the GS v7 _________________ [Moderator Deleted]