Broadcom路由DSL猫用的JTAG工具最新版

hugebird

tom-jerry 发表于 2011-4-11 13:31
我用的是usb转jtag线，FT2232d芯片，故采用cable：1参数。现将实际出现信息如下文。共采用2种方式，方式1 ...

IR长度，和cpuid都没有检测出来，说明物理连接存在问题，还是查一下接线是否正确。
如果有驱动或者电平转换电路，查一下是否3.3v电源是否加上，驱动使能管脚是否正确设置。看下ft2232的简易指南关于/GG1,/GG2开关的使用方法。

hugebird

billyywei 发表于 2011-4-11 17:42
hugebird 老大，请教：JTAG刷机成功，TTL下刷RG100A-AA电信原版也成功，可以进入WEB登陆界面，但超级密码失 ...

电信的固件我没研究过，psi可以在cfe里面清空，也可以用jtag清NVRAM。
psi清空后，密码和口令应该恢复成默认的吧。

wuxiafan

hugebird 发表于 2011-4-11 19:57
回复 pttt 的帖子

bcm5354有可能flash采用是8位的数据位宽，试一下加/wx8开关，是否可以识别，

请教，我发现一个很奇怪的问题，同样的一片S29 16M flash,用brjtag 1.9h1,在524su-c1能写入但是就是无法启动，在H618B上写入就能启动，CFE就是524su-c1备份的，我觉得是不是524su-c1用的jtag软件有什么区别

tito2008

很好的工具 谢谢啊

billyywei

回复 hugebird 的帖子

hugebird 老大, 问题已解决，只是IE设置有没题，其实刷机已完全成功。多谢回复，别外还得请教一个问题：RG100A-AA 所用FLASH芯片 M29与S29的能否互换？硬件不是很懂，呵呵。

xc7206

hugebird大，我的5354,128N,搞了一晚上也没有刷好，CPU总是进不了BUG状态，看到你的帖子说过OM接地，加电，能说明白点吗？OM是指啥？

xc7206

上面问题已经解决了，可是总是卡死在清除PPB状态，initcpu也不行，郁闷死了

xc7206

   c:\jtag >x -probeonly /wx8 /fc:88 /showppb
===============================================
         Broadcom EJTAG Debrick Utility v2.0.5-hugebird
        ===============================================


Probing bus ... Done

Detected IR Length is 8

CPU assumed running under LITTLE endian

CPU Chip ID: 00110101001101010100000101111111 (3535417F)
*** Found a Broadcom manufactured BCM5354 REV 03 CPU ***

    - EJTAG IMPCODE ....... : 00000000100000010000100100000100 (00810904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS16 MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
*** Manually Selected a Spansion S29GL128N/P Uni  (16MB) from AMD/Spansion



Flash Sector Protection type 1


Read Lock Register Status: 0000000000000000 (0000)

Read Globle PPB Lock Status: 0000000000000000 (0000)
Read Sector: 1 (addr = 1c000000) with PPB:0000000000000000 (0000)
Read Sector: 2 (addr = 1c020000) with PPB:0000000000000000 (0000)
Read Sector: 3 (addr = 1c040000) with PPB:0000000000000000 (0000)
Read Sector: 4 (addr = 1c060000) with PPB:0000000000000000 (0000)
Read Sector: 5 (addr = 1c080000) with PPB:0000000000000000 (0000)
Read Sector: 6 (addr = 1c0a0000) with PPB:0000000000000000 (0000)
Read Sector: 7 (addr = 1c0c0000) with PPB:0000000000000000 (0000)
Read Sector: 8 (addr = 1c0e0000) with PPB:0000000000000000 (0000)
Read Sector: 9 (addr = 1c100000) with PPB:0000000000000000 (0000)
Read Sector: 10 (addr = 1c120000) with PPB:0000000000000000 (0000)
Read Sector: 11 (addr = 1c140000) with PPB:0000000000000000 (0000)
Read Sector: 12 (addr = 1c160000) with PPB:0000000000000000 (0000)
Read Sector: 13 (addr = 1c180000) with PPB:0000000000000000 (0000)
Read Sector: 14 (addr = 1c1a0000) with PPB:0000000000000000 (0000)
Read Sector: 15 (addr = 1c1c0000) with PPB:0000000000000000 (0000)
Read Sector: 16 (addr = 1c1e0000) with PPB:0000000000000000 (0000)
Read Sector: 17 (addr = 1c200000) with PPB:0000000000000000 (0000)
Read Sector: 18 (addr = 1c220000) with PPB:0000000000000000 (0000)
Read Sector: 19 (addr = 1c240000) with PPB:0000000000000000 (0000)
Read Sector: 20 (addr = 1c260000) with PPB:0000000000000000 (0000)
Read Sector: 21 (addr = 1c280000) with PPB:0000000000000000 (0000)
Read Sector: 22 (addr = 1c2a0000) with PPB:0000000000000000 (0000)
Read Sector: 23 (addr = 1c2c0000) with PPB:0000000000000000 (0000)
Read Sector: 24 (addr = 1c2e0000) with PPB:0000000000000000 (0000)
Read Sector: 25 (addr = 1c300000) with PPB:0000000000000000 (0000)
Read Sector: 26 (addr = 1c320000) with PPB:0000000000000000 (0000)
Read Sector: 27 (addr = 1c340000) with PPB:0000000000000000 (0000)
Read Sector: 28 (addr = 1c360000) with PPB:0000000000000000 (0000)
Read Sector: 29 (addr = 1c380000) with PPB:0000000000000000 (0000)
Read Sector: 30 (addr = 1c3a0000) with PPB:0000000000000000 (0000)
Read Sector: 31 (addr = 1c3c0000) with PPB:0000000000000000 (0000)
Read Sector: 32 (addr = 1c3e0000) with PPB:0000000000000000 (0000)
Read Sector: 33 (addr = 1c400000) with PPB:0000000000000000 (0000)
Read Sector: 34 (addr = 1c420000) with PPB:0000000000000000 (0000)
Read Sector: 35 (addr = 1c440000) with PPB:0000000000000000 (0000)
Read Sector: 36 (addr = 1c460000) with PPB:0000000000000000 (0000)
Read Sector: 37 (addr = 1c480000) with PPB:0000000000000000 (0000)
Read Sector: 38 (addr = 1c4a0000) with PPB:0000000000000000 (0000)
Read Sector: 39 (addr = 1c4c0000) with PPB:0000000000000000 (0000)
Read Sector: 40 (addr = 1c4e0000) with PPB:0000000000000000 (0000)
Read Sector: 41 (addr = 1c500000) with PPB:0000000000000000 (0000)
Read Sector: 42 (addr = 1c520000) with PPB:0000000000000000 (0000)
Read Sector: 43 (addr = 1c540000) with PPB:0000000000000000 (0000)
Read Sector: 44 (addr = 1c560000) with PPB:0000000000000000 (0000)
Read Sector: 45 (addr = 1c580000) with PPB:0000000000000000 (0000)
Read Sector: 46 (addr = 1c5a0000) with PPB:0000000000000000 (0000)
Read Sector: 47 (addr = 1c5c0000) with PPB:0000000000000000 (0000)
Read Sector: 48 (addr = 1c5e0000) with PPB:0000000000000000 (0000)
Read Sector: 49 (addr = 1c600000) with PPB:0000000000000000 (0000)
Read Sector: 50 (addr = 1c620000) with PPB:0000000000000000 (0000)
Read Sector: 51 (addr = 1c640000) with PPB:0000000000000000 (0000)
Read Sector: 52 (addr = 1c660000) with PPB:0000000000000000 (0000)
Read Sector: 53 (addr = 1c680000) with PPB:0000000000000000 (0000)
Read Sector: 54 (addr = 1c6a0000) with PPB:0000000000000000 (0000)
Read Sector: 55 (addr = 1c6c0000) with PPB:0000000000000000 (0000)
Read Sector: 56 (addr = 1c6e0000) with PPB:0000000000000000 (0000)
Read Sector: 57 (addr = 1c700000) with PPB:0000000000000000 (0000)
Read Sector: 58 (addr = 1c720000) with PPB:0000000000000000 (0000)
Read Sector: 59 (addr = 1c740000) with PPB:0000000000000000 (0000)
Read Sector: 60 (addr = 1c760000) with PPB:0000000000000000 (0000)
Read Sector: 61 (addr = 1c780000) with PPB:0000000000000000 (0000)
Read Sector: 62 (addr = 1c7a0000) with PPB:0000000000000000 (0000)
Read Sector: 63 (addr = 1c7c0000) with PPB:0000000000000000 (0000)
Read Sector: 64 (addr = 1c7e0000) with PPB:0000000000000000 (0000)
Read Sector: 65 (addr = 1c800000) with PPB:0000000000000000 (0000)
Read Sector: 66 (addr = 1c820000) with PPB:0000000000000000 (0000)
Read Sector: 67 (addr = 1c840000) with PPB:0000000000000000 (0000)
Read Sector: 68 (addr = 1c860000) with PPB:0000000000000000 (0000)
Read Sector: 69 (addr = 1c880000) with PPB:0000000000000000 (0000)
Read Sector: 70 (addr = 1c8a0000) with PPB:0000000000000000 (0000)
Read Sector: 71 (addr = 1c8c0000) with PPB:0000000000000000 (0000)
Read Sector: 72 (addr = 1c8e0000) with PPB:0000000000000000 (0000)
Read Sector: 73 (addr = 1c900000) with PPB:0000000000000000 (0000)
Read Sector: 74 (addr = 1c920000) with PPB:0000000000000000 (0000)
Read Sector: 75 (addr = 1c940000) with PPB:0000000000000000 (0000)
Read Sector: 76 (addr = 1c960000) with PPB:0000000000000000 (0000)
Read Sector: 77 (addr = 1c980000) with PPB:0000000000000000 (0000)
Read Sector: 78 (addr = 1c9a0000) with PPB:0000000000000000 (0000)
Read Sector: 79 (addr = 1c9c0000) with PPB:0000000000000000 (0000)
Read Sector: 80 (addr = 1c9e0000) with PPB:0000000000000000 (0000)
Read Sector: 81 (addr = 1ca00000) with PPB:0000000000000000 (0000)
Read Sector: 82 (addr = 1ca20000) with PPB:0000000000000000 (0000)
Read Sector: 83 (addr = 1ca40000) with PPB:0000000000000000 (0000)
Read Sector: 84 (addr = 1ca60000) with PPB:0000000000000000 (0000)
Read Sector: 85 (addr = 1ca80000) with PPB:0000000000000000 (0000)
Read Sector: 86 (addr = 1caa0000) with PPB:0000000000000000 (0000)
Read Sector: 87 (addr = 1cac0000) with PPB:0000000000000000 (0000)
Read Sector: 88 (addr = 1cae0000) with PPB:0000000000000000 (0000)
Read Sector: 89 (addr = 1cb00000) with PPB:0000000000000000 (0000)
Read Sector: 90 (addr = 1cb20000) with PPB:0000000000000000 (0000)
Read Sector: 91 (addr = 1cb40000) with PPB:0000000000000000 (0000)
Read Sector: 92 (addr = 1cb60000) with PPB:0000000000000000 (0000)
Read Sector: 93 (addr = 1cb80000) with PPB:0000000000000000 (0000)
Read Sector: 94 (addr = 1cba0000) with PPB:0000000000000000 (0000)
Read Sector: 95 (addr = 1cbc0000) with PPB:0000000000000000 (0000)
Read Sector: 96 (addr = 1cbe0000) with PPB:0000000000000000 (0000)
Read Sector: 97 (addr = 1cc00000) with PPB:0000000000000000 (0000)
Read Sector: 98 (addr = 1cc20000) with PPB:0000000000000000 (0000)
Read Sector: 99 (addr = 1cc40000) with PPB:0000000000000000 (0000)
Read Sector: 100 (addr = 1cc60000) with PPB:0000000000000000 (0000)
Read Sector: 101 (addr = 1cc80000) with PPB:0000000000000000 (0000)
Read Sector: 102 (addr = 1cca0000) with PPB:0000000000000000 (0000)
Read Sector: 103 (addr = 1ccc0000) with PPB:0000000000000000 (0000)
Read Sector: 104 (addr = 1cce0000) with PPB:0000000000000000 (0000)
Read Sector: 105 (addr = 1cd00000) with PPB:0000000000000000 (0000)
Read Sector: 106 (addr = 1cd20000) with PPB:0000000000000000 (0000)
Read Sector: 107 (addr = 1cd40000) with PPB:0000000000000000 (0000)
Read Sector: 108 (addr = 1cd60000) with PPB:0000000000000000 (0000)
Read Sector: 109 (addr = 1cd80000) with PPB:0000000000000000 (0000)
Read Sector: 110 (addr = 1cda0000) with PPB:0000000000000000 (0000)
Read Sector: 111 (addr = 1cdc0000) with PPB:0000000000000000 (0000)
Read Sector: 112 (addr = 1cde0000) with PPB:0000000000000000 (0000)
Read Sector: 113 (addr = 1ce00000) with PPB:0000000000000000 (0000)
Read Sector: 114 (addr = 1ce20000) with PPB:0000000000000000 (0000)
Read Sector: 115 (addr = 1ce40000) with PPB:0000000000000000 (0000)
Read Sector: 116 (addr = 1ce60000) with PPB:0000000000000000 (0000)
Read Sector: 117 (addr = 1ce80000) with PPB:0000000000000000 (0000)
Read Sector: 118 (addr = 1cea0000) with PPB:0000000000000000 (0000)
Read Sector: 119 (addr = 1cec0000) with PPB:0000000000000000 (0000)
Read Sector: 120 (addr = 1cee0000) with PPB:0000000000000000 (0000)
Read Sector: 121 (addr = 1cf00000) with PPB:0000000000000000 (0000)
Read Sector: 122 (addr = 1cf20000) with PPB:0000000000000000 (0000)
Read Sector: 123 (addr = 1cf40000) with PPB:0000000000000000 (0000)
Read Sector: 124 (addr = 1cf60000) with PPB:0000000000000000 (0000)
Read Sector: 125 (addr = 1cf80000) with PPB:0000000000000000 (0000)
Read Sector: 126 (addr = 1cfa0000) with PPB:0000000000000000 (0000)
Read Sector: 127 (addr = 1cfc0000) with PPB:0000000000000000 (0000)
Read Sector: 128 (addr = 1cfe0000) with PPB:0000000000000000 (0000)


*** REQUESTED OPERATION IS COMPLETE ***
全是零，郁闷了

xc7206

上面问题解决了，可是总是写不进去，也解锁了，无论是FLASH能否自动检测到，手工加fc:88，也不不行，看命令倒是写进去了，可是备份出来确实全空，CPU处于。调试状态，怎么弄路由灯都是全亮，完全成砖头了，加了initcpu命令了
-probeonly /wx8 /fc:88 /nocfi /clearppb
-probeonly /wx8 /fc:88 /nocfi /showppb
不过在不断的重复showppb命令时，结果会变化
-erase:wholeflash /fc:088 /wx8 /nocfi
或
-probeonly /erasechip /fc:088 /wx8 /nocfi
然后路由重新上电，
-probeonly /wx8 /nocfi /fc:088 /initcpu
-flash:cfe /nocfi /fc:088 /wx8
-backup:cfe /nocfi /fc:088 /wx8
查看cfe.bin结果全是空的
路由重新上电，还是LAN灯全亮，
那位老大能告诉我怎么回事？

如果不加fc:88，老是出来内存出错那个错误就是天涯遇到过那个

pttt

我的机器现在情况类似了,原来还偶尔能进入Debug Mode,现在无论怎么都是:Processor did NOT enter Debug Mode,无语了,5354真麻烦,hugebird 老大说的用/WX8参数也试了,写入过程看似正常,但备份出来的CFE里面其实是空的.求解呀,