回复 hugebird 的帖子
I have updated device and have found new error. After this error device is reboot (blinking red and green led). Maybe it is happening because flash doesn't init?
my device is netgear dg834gt with mx29lv320cbtc-70g (system: Athlon II X2 3,3)
>brjtag -probeonly /cable:3 /nodma
HID-Brjtag MCU ROM version: 1.05 on USBASP hardware!
Probing bus ... Done
Detected IR Length is 5
CPU assumed running under BIG endian
CPU Chip ID: 00000110001101001000000101111111 (0634817F)
*** Found a Broadcom manufactured BCM6348 REV 01 CPU ***
- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32
*** DMA Mode Forced Off ***
Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ...cmd read from usberror! len = -5
Done
Loading CPU Configuration Code ... Skipped
Detecting Flash Base Address... cmd write to usberror! len = -5
0x1FFFFF00
Probing Flash at Address: 0x1FFFFF00 ...
cmd write to usberror! len = -5
...
cmd write to usberror! len = -5
Detected pFlash Chip ID (VenID:DevID = 00FF : FFFFFFFF)
cmd write to usberror! len = -5
....
cmd write to usberror! len = -5
*** Unknown or NO Flash Chip Detected ***
MCU reset error!
*** REQUESTED OPERATION IS COMPLETE ***
MCU reset error!
uzer222 发表于 2011-2-13 02:52 static/image/common/back.gif
回复 hugebird 的帖子
I have updated device and have found new error. After this error device is reb ...
Did you see my reply at 1060#
Your device still can't enter debug mode. you got follow information
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
As 1060# steps, you can operate successfully. this error is not related to jtag sofeware
hugebird 发表于 2011-2-13 01:18 static/image/common/back.gif
回复 thethree 的帖子
手里没有intel芯片的设备，这部分从没测试过。
多谢 hugebird 的回复。
是一点都写不进去.
你能不能出一个 debug 版本，你好分析原因。
用 /LI:5 还是一样：
c:\brjtag.exe -flash:cfe /noemw /cable:1 /L9:1
===============================================
Broadcom EJTAG Debrick Utility v2.0.1-hugebird
===============================================
Set I/O speed to 100 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Probing bus ... Done
Detected IR Length is 8
CPU assumed running under LITTLE endian
CPU Chip ID: 00010100011100010010000101111111 (1471217F)
*** Found a Broadcom manufactured BCM4712 REV 01 CPU ***
- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32
Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Probing Flash at Address: 0x1FC00000 ...
Detected pFlash Chip ID (VenID:DevID = 0089 : 0017)
*** Found a (8MB) Intel 28F640J3 4Mx16 (8MB) Flash Chip from Intel
- Flash Chip Window Start .... : 1C000000
- Flash Chip Window Length ... : 00800000
- Selected Area Start ........ : 1C000000
- Selected Area Length ....... : 00040000
*** You Selected to Flash the CFE.BIN ***
=========================
Flashing Routine Started
=========================
Total Blocks to Erase: 2
Erasing block: 1 (addr = 1C000000)...Done
Erasing block: 2 (addr = 1C020000)...Done
Loading CFE.BIN to Flash Memory...
dma write not correctly !!
10000817 - 00800080
dma write not correctly !!
00000000 - 00800080
0% bytes = 8
dma write not correctly !!
00000000 - 00800080
dma write not correctly !!
00000000 - 00800080
0% bytes = 16
dma write not correctly !!
00000000 - 00800080
dma write not correctly !!
00000000 - 00800080
0% bytes = 24
用 /LI:5 还是一样：
c:\>brjtag.exe -flash:cfe /noemw /cable:1 /L1:5
===============================================
Broadcom EJTAG Debrick Utility v2.0.1-hugebird
===============================================
Set I/O speed to 1000 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Probing bus ... Done
Detected IR Length is 8
CPU assumed running under LITTLE endian
CPU Chip ID: 00010100011100010010000101111111 (1471217F)
*** Found a Broadcom manufactured BCM4712 REV 01 CPU ***
- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32
Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Probing Flash at Address: 0x1FC00000 ...
Detected pFlash Chip ID (VenID:DevID = 0089 : 0017)
*** Found a (8MB) Intel 28F640J3 4Mx16 (8MB) Flash Chip from Intel
- Flash Chip Window Start .... : 1C000000
- Flash Chip Window Length ... : 00800000
- Selected Area Start ........ : 1C000000
- Selected Area Length ....... : 00040000
*** You Selected to Flash the CFE.BIN ***
=========================
Flashing Routine Started
=========================
Total Blocks to Erase: 2
Erasing block: 1 (addr = 1C000000)...Done
Erasing block: 2 (addr = 1C020000)...Done
Loading CFE.BIN to Flash Memory...
dma write not correctly !!
10000817 - 00800080
dma write not correctly !!
00000000 - 00800080
dma write not correctly !!
00000000 - 00800080
dma write not correctly !!
00000000 - 00800080
dma write not correctly !!
00000000 - 00800080
dma write not correctly !!
00000000 - 00800080
dma write not correctly !!
00000000 - 00800080
dma write not correctly !!
00000000 - 00800080
dma write not correctly !!
回复 thethree 的帖子
请用 brjtag -backup:cfe /cable:1来查看是否写入，我估计应该是有数据写入了，只是显示不正确。
可能是数据写完之后没有转换读状态造成的。改了个1.9O1，测试下，如果成功我再合并到2.0.x版本去。
1.9O已经公布源码，如有兴趣自己可调试。实在不行，还是用并口或者改用比较老一点的版本。
1.9O1 测试版
针对ft2232和J-link，intel flash在写入轮训时数据错误
谢谢老大。
不过试了 1.9o1 还是写不进去。
我先运行了 erase, 然后 backup.我用 hex 编辑器看我以前backup 好的 cfe和 erase 后 backup 后的，只有4个字节的不同，其他都一样。正常么？是不是 erase 后都是 0 或者都是 F?
然后我把 CFE.BIN 的 某些字节从00 改成 FF, 然后运行 flash:=========================
Flashing Routine Started
=========================
Total Blocks to Erase: 2
Erasing block: 1 (addr = 1C000000)...Done
Erasing block: 2 (addr = 1C020000)...Done
Loading CFE.BIN to Flash Memory...
0% bytes = 640
dma write not correctly !!
FFFF09A9 - 100009A9
dma write not correctly !!
FFFFFFFF - 00000000
dma write not correctly !!
FFFFFFFF - 00000000
dma write not correctly !!
FFFFFFFF - 00000000
4% bytes = 11200
dma write not correctly !!
3C098030 - 00008030
16% bytes = 43520
dma write not correctly !!
16E2FFE2 - 00A2FFE2
Done(CFE.BIN loaded into Flash Memory OK)
=========================
Flashing Routine Complete
=========================
elapsed time: 41 seconds报错的地方正是我手动 改为 FF 的地方。
再 backup 后用 hex 编辑器看，改成FF 的地方还是 00.
然后用 L1:5 或者 L1:9 降速也不行。
谢谢！
本帖最后由 hugebird 于 2011-2-14 20:19 编辑
thethree 发表于 2011-2-14 19:45 https://www.chinadsl.net/static/image/common/back.gif
谢谢老大。
不过试了 1.9o1 还是写不进去。
我先运行了 erase, 然后 backup.我用 hex 编辑器看我以前ba ...
erase之后，备份应该全是FFFF，可以-erase之后，用-backup，看是否擦除成功了，
查看是否写入，应该是先-flash， 之后用-backup将写入的备份出来，用backup后的文件与cfe.bin进行 fc /b比较。 还有一点就是，-flash之后，不能再进行-flash进行覆盖写入操作，因为写入操作只能将数据从1变成0，只有-erase才能将0变成1.覆盖写入结果是不可靠的。 这个和刻光盘一样，只能在空白盘上刻一次，第2次不能进行覆盖写入，如果要再写入必须用一张新盘，或者是对RW光盘进行全盘擦除再写入。
从用1.9O1显示的结果看，应该有部分写入成功了，比如最后的16e2 ffe2写成了00a2 ffe2，有半字节写入成功了。不应该是你描述的一点没有写入。
如果出现部分写入错误，1.9o1 加/L9：1开关降速以后在试试吧
谢谢老大。
这样看来 erase 就没有成功。
我就是怕看不出来，先做了 erase， 然后backup, 再把backup 好的打开，并不是 FF. 我上的帖子说的：
我先运行了 erase, 然后 backup.我用 hex 编辑器看我以前backup 好的 cfe和 erase 后 backup 后的，只有4个字节的不同，其他都一样。正常么？是不是 erase 后都是 0 或者都是 F?
thethree 发表于 2011-2-15 01:23 static/image/common/back.gif
谢谢老大。
这样看来 erase 就没有成功。
我就是怕看不出来，先做了 erase， 然后backup, 再把backup 好 ...
1.9O2
希望这次改动可以成功，可能是等待时间不够，如果还不成功，转用并口线和其它版本吧。
谢谢H大，下载收藏
谢谢老大
还是不成功。用了L9:1选择安全写入脚本也是一样。erase 完后打开，还是老样子，不是FF.
本本没有并口 :-(
你说的其他版本什么意思？是说 brjtag 的其他版本吗？
还有就是哪里能找到 ejtag dma 的资料？我看到你 1.9o 的源程序不过手里没有 DMA的资料，无从下手。