DD-WRT :: View topic - TJTAG - EJTAG De-Brick tool

TJTAG - EJTAG De-Brick tool - IMPORTANT CHANGE:See 1st Post.

This topic is locked: you cannot edit posts or make replies.

DD-WRT Forum Index -> General Questions

Goto page Previous 1, 2, 3 ... 82, 83, 84

View previous topic :: View next topic

Author

Message

mrc_torres
DD-WRT Novice

Joined: 24 Jan 2009
Posts: 40
Location: Sorocaba, Sao Paulo, Brazil

Posted: Mon Oct 10, 2011 15:46 Post subject:
Now I'm able to access the router via JTAG with another (short) cable, but even recognizing the CPU and flash memory I did not get success in DD-WRT redboot rewrite (the normal, not microredboot). Which parameters on the command line should I use with the DIR-300 A1 to restore redboot from a custom.bin file with ap61.rom inside?

Sponsor

RogFanther
DD-WRT User

Joined: 24 May 2008
Posts: 156

Posted: Mon Oct 10, 2011 20:45 Post subject:
You could try to extract the redboot from the factory firmware file, and reflash that. Then reflash the ap61.ram from the serial interface. Or backup a good redboot from a known working router, and reflash that.

1of16
DD-WRT Novice

Joined: 16 Mar 2011
Posts: 18

Posted: Wed Oct 12, 2011 16:09 Post subject:

just tried to unbrick my WRT54GS v4, but I'm getting an odd error-message:

Code:

==========================================
EJTAG Debrick Utility v2.1.4-Tornado-MOD
==========================================

Probing bus ... Done

Instruction Length set to 0

CPU Chip ID: 00000000000000000000000000000000 (00000000)
*** CHIP DETECTION OVERRIDDEN ***

- EJTAG IMPCODE ....... : 00000000000000000000000000000000 (00000000)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32
*** DMA Mode Forced Off ***

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... DMA Write Addr = ff300000 Data = ERROR ON WRITE
Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done

And then nothing happens and the tjtag process runs at 100% (ubuntu linux 10.04).

any ideas? I don't think, that my jtag-cable is too long, cause I used an old IDE-cable... Wink

[/quote]

RogFanther
DD-WRT User

Joined: 24 May 2008
Posts: 156

Posted: Wed Oct 12, 2011 16:41 Post subject:
What is the complete command line you are using with tjtag? Also, re-check your cable soldering.

1of16
DD-WRT Novice

Joined: 16 Mar 2011
Posts: 18

Posted: Wed Oct 12, 2011 17:33 Post subject:

thanks for your answer!
I tried

Code:

./tjtag -probeonly /skipdetect /nodma
./tjtag -probeonly /skipdetect
./tjtag -probeonly

but in the end its the same result...

I checked my cable twice...but I'll do it again.
Btw. shall I connect the 12th jtag-pin with ground or not? on some schematics its is connected, on some not.

barryware
DD-WRT Guru

Joined: 26 Jan 2008
Posts: 13049
Location: Behind The Reset Button

Posted: Wed Oct 12, 2011 18:12 Post subject:
show output from: ./tjtag -probeonly /noemw /nocwd _________________ [Moderator Deleted]

1of16
DD-WRT Novice

Joined: 16 Mar 2011
Posts: 18

Posted: Thu Oct 13, 2011 12:14 Post subject:

barryware wrote:

show output from:

./tjtag -probeonly /noemw /nocwd

awesome! thank you, now its working !

1of16
DD-WRT Novice

Joined: 16 Mar 2011
Posts: 18

Posted: Thu Oct 13, 2011 13:48 Post subject:
ok...now I'm puzzled: I erased the nvram, the kernel, flashed a new CFE, erased the nvram and the kernel again and the power-led is still blinking continuously, so the WRT54GS v4 is still bricked?! don't know what to do now

RogFanther
DD-WRT User

Joined: 24 May 2008
Posts: 156

Posted: Thu Oct 13, 2011 17:32 Post subject:
read the cfe from the router, and compare it to the file you used to flash. See if they are equal

1of16
DD-WRT Novice

Joined: 16 Mar 2011
Posts: 18

Posted: Mon Oct 17, 2011 16:23 Post subject:
they are equal... is the router bricked beyond repairs?

barryware
DD-WRT Guru

Joined: 26 Jan 2008
Posts: 13049
Location: Behind The Reset Button

Posted: Mon Oct 17, 2011 18:56 Post subject:

1of16 wrote:

ok...now I'm puzzled:

I erased the nvram, the kernel, flashed a new CFE, erased the nvram and the kernel again and the power-led is still blinking continuously, so the WRT54GS v4 is still bricked?!
don't know what to do now Sad

you erased the kernel. The power light will be blinking. if you ping the router, you should get a responce with a ttl=100.

remember to set a static ip on your pc

it is waiting for you to flash firmware (kernel) via tftp.
_________________
[Moderator Deleted] Shocked

1of16
DD-WRT Novice

Joined: 16 Mar 2011
Posts: 18

Posted: Mon Oct 17, 2011 19:23 Post subject:
ok...stupid me...that was it. now the router is working again! thank you all! I'll update the wiki-site for jtag...so others wont do the same stupid mistakes

granacik84
DD-WRT Novice

Joined: 30 Oct 2011
Posts: 3

Posted: Thu Nov 10, 2011 18:17 Post subject: Dir-300 jtag

Hello did anybody help me?

tjtag3 -probeonly
I got:

==============================================
EJTAG Debrick Utility v3.0.1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000000000000000000000000000001 (00000001)
*** Found a Atheros AR531X/231X CPU chip ***

- EJTAG IMPCODE ....... : 00000000000000000100000000000000 (00004000)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : No
- EJTAG Implementation flags: R4k NoDMA MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... ^C

and still freeze
sometime i got:

=============================================
EJTAG Debrick Utility v3.0.1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000000000000000000000000000001 (00000001)
*** Found a Atheros AR531X/231X CPU chip ***

- EJTAG IMPCODE ....... : 00000000000000000000000000000000 (00000000)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done

Enabling Atheros Flash Read/Write ... Done

.RE-Probing Atheros processor....
Probing Flash at (Flash Window: 0x1fc00000) ...
Done

*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***

Resuming Processor ...

with tjtag3 -probeonly /flash_debug

==============================================
EJTAG Debrick Utility v3.0.1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000000000000000000000000000001 (00000001)
*** Found a Atheros AR531X/231X CPU chip ***

- EJTAG IMPCODE ....... : 00000000000000000000000000000000 (00000000)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done
spi_flash_read 0x1fc00000
spi_flash_mmr 0x11300000
spi_flash_mmr_size 0x0000000c
spi_flash_ctl 0x00000000
spi_flash_opcode 0x00000004
spi_flash_data 0x00000008
spi_ctl_start 0x00000100
spi_ctl_busy 0x00010000

Enabling Atheros Flash Read/Write ... Done

.RE-Probing Atheros processor....
Probing Flash at (Flash Window: 0x1fc00000) ...

Debug AMD Vendid : 00000000000000000000000000000001 (00000001)
Debug AMD Devdid : 00000000000000000000000000000000 (00000000)

Debug SST Vendid : 00000000000000000100000000000001 (00004001)
Debug SST Devdid : 00000000000000000000000000000000 (00000000)

Debug BSC-SCS Vendid :00000000000000000000000000100000 (00000020)
Debug BCS-SCS Devdid :00000000000000000000000000000000 (00000000)
REGREAD32 data 0x00000000 spi_flash_mmr 0x11300000 reg 0x00000000
REG 0x00000004 REGWRITE32 0x0000009f
SPI_FLASH_OPCODE 0x00000004 PTR_OPCODE 0x0000009f
REG 0x00000000 REGWRITE32 0x00000131
SPI_FLASH_CTL SEND -> 0x00000000 reg 0x00000131
REGREAD32 data 0x00000011 spi_flash_mmr 0x11300000 reg 0x00000000
REGREAD32 data 0x00000000 spi_flash_mmr 0x11300000 reg 0x00000008

Debug SPI id : 00000000000000000000000000000000 (00000000)

Debug SPI Vendid : 00000000000000000000000000000000 (00000000)
Debug SPI Devdid : 00000000000000000000000000000000 (00000000)
Done

*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***

Resuming Processor ...
thanks for answerd

Tornado
DD-WRT Developer/Maintainer

Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

Posted: Sun Nov 13, 2011 16:45 Post subject: FYI
If you use tjtag in combination with /skip_detect, you must also set the instruction length /instrlen: ? _________________ Want JTAG support - Donate a router or Donate with PayPal ! My preferred parallel jtag adapter: TIAO Parallel adapter Tjtag website - http://tjtag.com Compiling DD-WRT on: AMD Phenom II X6 1090T @ 3926.667 Mhz Aptosid X64 - Debian SID X64 Ubuntu 10.10 X64 - Arch X64

Tornado
DD-WRT Developer/Maintainer

Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

Posted: Sun Nov 13, 2011 17:06 Post subject: FYI - TJTAG

I have decided that after working on Tjtag for almost 6 years, and very few donations, that tjtag will only be available from http://tjtag.com

In order to receive tjtag, I will require a min. $5.00 donation, to help me cover cost. You may contact me with your requests, and for help with processors not in tjtag at my e-mail address tornado@tjtag.com

I'm sorry it has come to this....

Regards,

Tornado
_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64

Goto page Previous 1, 2, 3 ... 82, 83, 84

Display posts from previous:

Page 84 of 84

DD-WRT Forum Index -> General Questions

All times are GMT

Navigation

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum

Log in

TJTAG - EJTAG De-Brick tool - IMPORTANT CHANGE:See 1st Post.

Quick Links

Log in