Broadcom路由DSL猫用的JTAG工具最新版

睡觉讲话

归归，终于花了2个小时爬完所有楼层，目前快1100层
强烈支持，努力学习ing

hugebird

2.04

-  提高 cc spi 控制器写入速度
-  修正jlink检测指令长度的错误
-  变更spi flash检测方法
-  hidbrjtag rom v2.05 - 增加对BRSPI SPI Flash编程器的支持

BRSPI是一个25xx系列SPI flash编程器，作为brjtag辅助工具，可独立应用。
已发布，https://www.chinadsl.net/thread-56772-1-1.html

完整执行包


简易包，只含有exe和v1.06,v2.05两个mcu的rom

hugebird

简化包，楼上那个v2.05 rom没打进去

hugebird

Brjtag 命令使用指南

add1132

过来学习了，现在还没用到过。谢谢。

tom-jerry

回复 hugebird 的帖子

hugebird，您好！关于x8模式，我也遇到不能写入情况。硬件信息：bcm5354，flash：S29GL128P （8bit模式），用选项/showppb得到信息如下，请帮忙分析下是否已经被锁，如何解锁？
[root@my-dev2 brjtag-v1.8c]# ./brjtag -probeonly /wiggler /fc:88 /showppb

===============================================
Broadcom EJTAG Debrick Utility v1.8c-hugebird
===============================================

Probing bus ... Done

Instruction Length set to 8

CPU assumed running under LITTLE endian

CPU Chip ID: 00110101001101010100000101111111 (3535417F)
*** Found a Broadcom manufactured BCM5354 KFBG REV 03 CPU ***

    - EJTAG IMPCODE ....... : 00000000100000010000100100000100 (00810904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS16 MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
*** Manually Selected a Spansion S29GL128N/P Uni  (16MB) from AMD/Spansion



brjtag.c sp_check_ppb() Flash Sector Protection type 1

----enter here.
###### enter here.

Read Lock Register Status: 0111111111111111 (FFFF)

Read Globle PPB Lock Status: 0111111111111111 (FFFF)
Read Sector: 1 (addr = 1c000000) with PPB:0111111111111111 (FFFF)
Read Sector: 2 (addr = 1c020000) with PPB:0111111111111111 (FFFF)
Read Sector: 3 (addr = 1c040000) with PPB:0111111111111111 (FFFF)
Read Sector: 4 (addr = 1c060000) with PPB:0001001100111101 (267A)
Read Sector: 5 (addr = 1c080000) with PPB:0101101011010111 (B5AF)
Read Sector: 6 (addr = 1c0a0000) with PPB:0011110010010110 (792C)
Read Sector: 7 (addr = 1c0c0000) with PPB:0110101000110000 (D460)
Read Sector: 8 (addr = 1c0e0000) with PPB:0110101110100111 (D74E)
Read Sector: 9 (addr = 1c100000) with PPB:0000000000011111 (003F)
Read Sector: 10 (addr = 1c120000) with PPB:0101010101111011 (AAF6)
Read Sector: 11 (addr = 1c140000) with PPB:0100000101010101 (82AB)
Read Sector: 12 (addr = 1c160000) with PPB:0111000111011001 (E3B3)
Read Sector: 13 (addr = 1c180000) with PPB:0101111001110010 (BCE4)
Read Sector: 14 (addr = 1c1a0000) with PPB:0001001111110101 (27EB)
Read Sector: 15 (addr = 1c1c0000) with PPB:0011010110100110 (6B4D)
Read Sector: 16 (addr = 1c1e0000) with PPB:0001001100010101 (262B)
Read Sector: 17 (addr = 1c200000) with PPB:0000101100111100 (1679)
Read Sector: 18 (addr = 1c220000) with PPB:0111111100001010 (FE14)
Read Sector: 19 (addr = 1c240000) with PPB:0111110001010000 (F8A1)
Read Sector: 20 (addr = 1c260000) with PPB:0010000101111011 (42F6)
Read Sector: 21 (addr = 1c280000) with PPB:0000011010011001 (0D33)
Read Sector: 22 (addr = 1c2a0000) with PPB:0101011100111101 (AE7B)
Read Sector: 23 (addr = 1c2c0000) with PPB:0110101011011001 (D5B3)
Read Sector: 24 (addr = 1c2e0000) with PPB:0010010010010101 (492B)
Read Sector: 25 (addr = 1c300000) with PPB:0010011100011110 (4E3D)
Read Sector: 26 (addr = 1c320000) with PPB:0101100100000100 (B209)
Read Sector: 27 (addr = 1c340000) with PPB:0001110100111010 (3A75)
Read Sector: 28 (addr = 1c360000) with PPB:0100001011000101 (858A)
Read Sector: 29 (addr = 1c380000) with PPB:0110100010011100 (D138)
Read Sector: 30 (addr = 1c3a0000) with PPB:0101011111101110 (AFDC)
Read Sector: 31 (addr = 1c3c0000) with PPB:0010010110110111 (4B6F)
Read Sector: 32 (addr = 1c3e0000) with PPB:0011010001011101 (68BA)
Read Sector: 33 (addr = 1c400000) with PPB:0000011101100001 (0EC2)
Read Sector: 34 (addr = 1c420000) with PPB:0111100011011010 (F1B4)
Read Sector: 35 (addr = 1c440000) with PPB:0111110111010001 (FBA3)
Read Sector: 36 (addr = 1c460000) with PPB:0010000111111111 (43FF)
Read Sector: 37 (addr = 1c480000) with PPB:0111111111111111 (FFFF)
Read Sector: 38 (addr = 1c4a0000) with PPB:0111111111111111 (FFFF)
Read Sector: 39 (addr = 1c4c0000) with PPB:0111111111111111 (FFFF)
Read Sector: 40 (addr = 1c4e0000) with PPB:0111111111111111 (FFFF)
Read Sector: 41 (addr = 1c500000) with PPB:0111111111111111 (FFFF)
Read Sector: 42 (addr = 1c520000) with PPB:0111111111111111 (FFFF)
Read Sector: 43 (addr = 1c540000) with PPB:0111111111111111 (FFFF)
Read Sector: 44 (addr = 1c560000) with PPB:0111111111111111 (FFFF)
Read Sector: 45 (addr = 1c580000) with PPB:0111111111111111 (FFFF)
Read Sector: 46 (addr = 1c5a0000) with PPB:0111111111111111 (FFFF)
Read Sector: 47 (addr = 1c5c0000) with PPB:0111111111111111 (FFFF)
Read Sector: 48 (addr = 1c5e0000) with PPB:0111111111111111 (FFFF)
Read Sector: 49 (addr = 1c600000) with PPB:0111111111111111 (FFFF)
Read Sector: 50 (addr = 1c620000) with PPB:0111111111111111 (FFFF)
Read Sector: 51 (addr = 1c640000) with PPB:0111111111111111 (FFFF)
Read Sector: 52 (addr = 1c660000) with PPB:0111111111111111 (FFFF)
Read Sector: 53 (addr = 1c680000) with PPB:0111111111111111 (FFFF)
Read Sector: 54 (addr = 1c6a0000) with PPB:0111111111111111 (FFFF)
Read Sector: 55 (addr = 1c6c0000) with PPB:0111111111111111 (FFFF)
Read Sector: 56 (addr = 1c6e0000) with PPB:0111111111111111 (FFFF)
Read Sector: 57 (addr = 1c700000) with PPB:0111111111111111 (FFFF)
Read Sector: 58 (addr = 1c720000) with PPB:0111111111111111 (FFFF)
Read Sector: 59 (addr = 1c740000) with PPB:0111111111111111 (FFFF)
Read Sector: 60 (addr = 1c760000) with PPB:0111111111111111 (FFFF)
Read Sector: 61 (addr = 1c780000) with PPB:0111111111111111 (FFFF)
Read Sector: 62 (addr = 1c7a0000) with PPB:0111111111111111 (FFFF)
Read Sector: 63 (addr = 1c7c0000) with PPB:0111111111111111 (FFFF)
Read Sector: 64 (addr = 1c7e0000) with PPB:0111111111111111 (FFFF)
Read Sector: 65 (addr = 1c800000) with PPB:0111111111111111 (FFFF)
Read Sector: 66 (addr = 1c820000) with PPB:0111111111111111 (FFFF)
Read Sector: 67 (addr = 1c840000) with PPB:0111111111111111 (FFFF)
Read Sector: 68 (addr = 1c860000) with PPB:0111111111111111 (FFFF)
Read Sector: 69 (addr = 1c880000) with PPB:0111111111111111 (FFFF)
Read Sector: 70 (addr = 1c8a0000) with PPB:0111111111111111 (FFFF)
Read Sector: 71 (addr = 1c8c0000) with PPB:0111111111111111 (FFFF)
Read Sector: 72 (addr = 1c8e0000) with PPB:0111111111111111 (FFFF)
Read Sector: 73 (addr = 1c900000) with PPB:0111111111111111 (FFFF)
Read Sector: 74 (addr = 1c920000) with PPB:0111111111111111 (FFFF)
Read Sector: 75 (addr = 1c940000) with PPB:0111111111111111 (FFFF)
Read Sector: 76 (addr = 1c960000) with PPB:0111111111111111 (FFFF)
Read Sector: 77 (addr = 1c980000) with PPB:0111111111111111 (FFFF)
Read Sector: 78 (addr = 1c9a0000) with PPB:0111111111111111 (FFFF)
Read Sector: 79 (addr = 1c9c0000) with PPB:0111111111111111 (FFFF)
Read Sector: 80 (addr = 1c9e0000) with PPB:0111111111111111 (FFFF)
Read Sector: 81 (addr = 1ca00000) with PPB:0111111111111111 (FFFF)
Read Sector: 82 (addr = 1ca20000) with PPB:0111111111111111 (FFFF)
Read Sector: 83 (addr = 1ca40000) with PPB:0111111111111111 (FFFF)
Read Sector: 84 (addr = 1ca60000) with PPB:0111111111111111 (FFFF)
Read Sector: 85 (addr = 1ca80000) with PPB:0111111111111111 (FFFF)
Read Sector: 86 (addr = 1caa0000) with PPB:0111111111111111 (FFFF)
Read Sector: 87 (addr = 1cac0000) with PPB:0111111111111111 (FFFF)
Read Sector: 88 (addr = 1cae0000) with PPB:0111111111111111 (FFFF)
Read Sector: 89 (addr = 1cb00000) with PPB:0111111111111111 (FFFF)
Read Sector: 90 (addr = 1cb20000) with PPB:0111111111111111 (FFFF)
Read Sector: 91 (addr = 1cb40000) with PPB:0111111111111111 (FFFF)
Read Sector: 92 (addr = 1cb60000) with PPB:0111111111111111 (FFFF)
Read Sector: 93 (addr = 1cb80000) with PPB:0111111111111111 (FFFF)
Read Sector: 94 (addr = 1cba0000) with PPB:0111111111111111 (FFFF)
Read Sector: 95 (addr = 1cbc0000) with PPB:0000110011000010 (1985)
Read Sector: 96 (addr = 1cbe0000) with PPB:0000110011000010 (1985)
Read Sector: 97 (addr = 1cc00000) with PPB:0000110011000010 (1985)
Read Sector: 98 (addr = 1cc20000) with PPB:0000110011000010 (1985)
Read Sector: 99 (addr = 1cc40000) with PPB:0000110011000010 (1985)
Read Sector: 100 (addr = 1cc60000) with PPB:0000110011000010 (1985)
Read Sector: 101 (addr = 1cc80000) with PPB:0000110011000010 (1985)
Read Sector: 102 (addr = 1cca0000) with PPB:0000110011000010 (1985)
Read Sector: 103 (addr = 1ccc0000) with PPB:0000110011000010 (1985)
Read Sector: 104 (addr = 1cce0000) with PPB:0000110011000010 (1985)
Read Sector: 105 (addr = 1cd00000) with PPB:0000110011000010 (1985)
Read Sector: 106 (addr = 1cd20000) with PPB:0000110011000010 (1985)
Read Sector: 107 (addr = 1cd40000) with PPB:0000110011000010 (1985)
Read Sector: 108 (addr = 1cd60000) with PPB:0000110011000010 (1985)
Read Sector: 109 (addr = 1cd80000) with PPB:0000110011000010 (1985)
Read Sector: 110 (addr = 1cda0000) with PPB:0000110011000010 (1985)
Read Sector: 111 (addr = 1cdc0000) with PPB:0000110011000010 (1985)
Read Sector: 112 (addr = 1cde0000) with PPB:0000110011000010 (1985)
Read Sector: 113 (addr = 1ce00000) with PPB:0000110011000010 (1985)
Read Sector: 114 (addr = 1ce20000) with PPB:0000110011000010 (1985)
Read Sector: 115 (addr = 1ce40000) with PPB:0000110011000010 (1985)
Read Sector: 116 (addr = 1ce60000) with PPB:0000110011000010 (1985)
Read Sector: 117 (addr = 1ce80000) with PPB:0000110011000010 (1985)
Read Sector: 118 (addr = 1cea0000) with PPB:0000110011000010 (1985)
Read Sector: 119 (addr = 1cec0000) with PPB:0000110011000010 (1985)
Read Sector: 120 (addr = 1cee0000) with PPB:0000110011000010 (1985)
Read Sector: 121 (addr = 1cf00000) with PPB:0000110011000010 (1985)
Read Sector: 122 (addr = 1cf20000) with PPB:0000110011000010 (1985)
Read Sector: 123 (addr = 1cf40000) with PPB:0000110011000010 (1985)
Read Sector: 124 (addr = 1cf60000) with PPB:0000110011000010 (1985)
Read Sector: 125 (addr = 1cf80000) with PPB:0000110011000010 (1985)
Read Sector: 126 (addr = 1cfa0000) with PPB:0000110011000010 (1985)
Read Sector: 127 (addr = 1cfc0000) with PPB:0000000000000000 (0000)
Read Sector: 128 (addr = 1cfe0000) with PPB:0011100000011110 (703C)
----exit here.


*** REQUESTED OPERATION IS COMPLETE ***

hugebird

回复 tom-jerry 的帖子

1.8c 不支持x8位宽，改用最新2.05版的brjtag,加/wx8开关，
先写入cfe，然后通过tftp恢复就行了。
brjtag -flash:cfe /wx8
不要加/fc参数，没必要。
前面大约700多楼的地方有调试5354的过程

如果cfe已经被清空，还可以加/initcpu。
注意一定要 CPU ENTER DEBUG mode，
前面还有命令指南，先看明白，不然白写了，真没啥难度。有可能遇到的问题，这个帖子前面都可以找到答案的

tom-jerry

回复 hugebird 的帖子

感谢hugebird老大的指点。

victor2002

好东西，支持一下H大~~

东华网络

学习中，精彩的帖子