Broadcom路由DSL猫用的JTAG工具最新版

wl1203 · 发表于 2009-8-26 10:23:51

brjtag15的源码呢?可否提供

sniper99999 · 发表于 2009-8-26 15:09:27

又扣我猫粮

binyue009 · 发表于 2009-8-26 18:14:12

在这里,没有粮可什么都不能做呀

zqlyn · 发表于 2009-8-29 22:59:44

可惜我没JTAG线。

xjbing · 发表于 2009-8-30 20:42:02

熟悉Broadcom路由器的朋友，应该知道HairyDairyMaid WRT54G DeBrick JTAG工具。此次发布的是个Mod版。主要增加了对Big Endian BCM6338,6348等Broadcom DSL芯片的支持，修正了DMA数据访问和字节颠倒的问题，读写时间大 ...
hugebird 发表于 2008-2-12 21:10

RG100A已经被折腾坏了，只有试试这个了。

ytshenfeng · 发表于 2009-8-30 22:29:21

不错!有空研究一下!

xinjie · 发表于 2009-9-3 19:57:47

1# hugebird

正好可以参考学习一下

hugebird · 发表于 2009-9-4 03:09:56

111# hugebird

Brjtag 1.7j 测试版来了

===============================================
Broadcom EJTAG Debrick Utility v1.7j-hugebird
===============================================
         Supported Chips
         ---------------
         Broadcom BCM4702 Rev 1 CPU
         Broadcom BCM4704 KPBG Rev 9 CPU
         Broadcom BCM4704 Rev 8 CPU
         Broadcom BCM4712 Rev 1 CPU
         Broadcom BCM4712 Rev 2 CPU
         Broadcom BCM4785 Rev 1 CPU
         Broadcom BCM5350 Rev 1 CPU
         Broadcom BCM5352 Rev 1 CPU
         Broadcom BCM5354 KFBG Rev 1 CPU
         Broadcom BCM5354 KFBG Rev 2 CPU
         Broadcom BCM5354 KFBG Rev 3 CPU
         Broadcom BCM5365 Rev 1 CPU
         Broadcom BCM5365 Rev 1 CPU
         Broadcom BCM6345 Rev 1 CPU
         Broadcom BCM6338 Rev 1 CPU
         Broadcom BCM6348 Rev 1 CPU
         Broadcom BCM6358 Rev 1 CPU
         Broadcom BCM6368 Rev 1 CPU
         Broadcom BCM6816 Rev 1 CPU
         TI AR7WRD TNETD7300GDU Rev 1 CPU
         BRECIS MSP2007-CA-A1 CPU
         TI TNETV1060GDW CPU

USAGE: BrJtag [parameter] </noreset> </noemw> </nocwd> </nobreak></revendian>
                  </notimestamp> </dma> </nodma> </noerase></initcpu>
                  </ejtagslow> <pracc0>
                  </bypass></forcealign></showppb></clearppb></erasechip>
                  <window:XXXXXXXX><start:XXXXXXXX> </length:XXXXXXXX>
                  <port:XXX> </instrlen:XX> </fc:XX></skipdetect>
                  </tinycfe></wiggler></verbose>
         Required Parameter
         ------------------
         -backup:cfe
         -backup:tfe
         -backup:nvram
         -backup:kernel
         -backup:ternel
         -backup:wholeflash
         -backup:custom
         -backup:bsp
         -erase:cfe
         -erase:tfe
         -erase:nvram
         -erase:kernel
         -erase:ternel
         -erase:wholeflash
         -erase:custom
         -erase:bsp
         -flash:cfe
         -flash:tfe
         -flash:nvram
         -flash:kernel
         -flash:ternel
         -flash:wholeflash
         -flash:custom
         -flash:bsp
         -probeonly
         Optional Switches
         -----------------
         /noreset ........... prevent Issuing EJTAG CPU reset
         /noemw ............. prevent Enabling Memory Writes
         /nocwd ............. prevent Clearing CPU Watchdog Timer
         /nobreak ........... prevent Issuing Debug Mode JTAGBRK
         /noerase ........... prevent Forced Erase before Flashing
         /notimestamp ....... prevent Timestamping of Backups
         /dma ............... force use of DMA routines
         /nodma ............. force use of PRACC routines (No DMA)
         /ejtag0............. with low speed ejtag access cycle
         /pracc0 ............ with safe PRACC access routine(Areg+DReg)
         /initcpu............ load CPU configuration code
         /revendian.......... reverse chip endian
         /window:XXXXXXXX ... custom flash window base&probe address(in HEX)
         /start:XXXXXXXX .... custom start location (in HEX)
         /length:XXXXXXXX ... custom length (in HEX)
         /verbose............ scrolling display of data
         /skipdetect ........ skip auto detection of CPU Chip ID
         /instrlen:XX ....... set CPU instruction length manually
         /wiggler ........... use wiggler cable
         /bypass ............ unlock Spansion bypass mode & disable polling
         /forcealign......... force erase address align with block boundary
         /erasechip.......... erase whole chip, only work with -probeonly
         /clearppb........... erase Spansion PPB,only work with -probeonly
         /showppb ........... show flash sector protection status
                              only work with -probeonly
         /tinycfe............ one sector tiny CFE support(= TFE or TERNEL)
         /port:XXX........... customize parallel port(default XXX is 378)
                              only work in Windows version

         /fc:XX = Optional (Manual) Flash Chip Selection
         -----------------------------------------------
         /fc:85 ............. ST M29W128GH Uni       (16MB)
         /fc:86 ............. ST M29W128GL Uni       (16MB)
         /fc:87 ............. EON EN29LV320BB 2Mx16 BotB (4MB)
         /fc:88 ............. EON EN29LV320BT 2Mx16 TopB (4MB)
         /fc:89 ............. EON EN29LV640B  4Mx16 BotB (8MB)
         /fc:90 ............. EON EN29LV640T  4Mx16 TopB (8MB)
         /fc:91 ............. EON EN29LV640H/L/U Uni    (8MB)
         /fc:92 ............. EON EN29GL064B  BotB    (8MB)
         /fc:93 ............. EON EN29GL064T  TopB    (8MB)
         /fc:94 ............. EON EN29GL064H/L Uni    (8MB)
         /fc:95 ............. EON EN29GL128 Uni       (16MB)

hugebird · 发表于 2009-9-4 03:16:13

271# hugebird

1.7j 增加了2个开关，

/pracc0 使用HD最初的Pracc代码，速度慢，兼容性好
/ejtag0 jtag读写周期加入20ns延时，确保高主频机器的兼容性

有人要1.5的源码，抱歉我也没有，这只是个中间版本。用1.7j吧

另外ST 和EON的flash ID只是从手册上查到的，没实际测试过，如果检测不到请用下面命令，把结果贴上来

brjtag17j -probeonly /verbose

复制代码

hugebird · 发表于 2009-9-4 03:19:24

271# hugebird

对了，1.7j最大的亮点是它现在可以自动检测63x8系列flash访问的地址。基本适合所有的cfe了，前面天涯遇到的alice CFE 访问地址不要加 /window:1e000000开关了

账号		自动登录	找回密码
密码			立即注册

Broadcom路由DSL猫用的JTAG工具最新版

本帖子中包含更多资源

站长推荐 /1