找回密码
 注册

QQ登录

只需一步,快速开始

楼主: hugebird

Broadcom路由DSL猫用的JTAG工具最新版

    [复制链接]
发表于 2009-11-9 12:38:25 | 显示全部楼层
谢谢,大了,无法用语言的感觉为大家提供这么好的工具
发表于 2009-11-9 16:24:43 | 显示全部楼层
再次学习,等JTAG线到了就开搞
发表于 2009-11-12 22:44:43 | 显示全部楼层
今天用brjtag 1.8c刷ST M29W128GH  新flash芯片的rg100a,指令如下:


1、输入 brjtag -probeonly /erasechip /fc:94 全片擦除flash芯片数据

2、输入 brjtag -flash:tfe /fc:94  写入hugebird提供的USR9113  M29W128GH 的改版cfe,
   遇到一个问题是写入速度非常非常慢,20多分钟才写入1%并且好像停在那里,很久才动一下,
   显示如下,不知是机器问题还是brjtag程序问题?

===============================================
Broadcom EJTAG Debrick Utility v1.8c-hugebird
===============================================

Probing bus ... Done

Instruction Length set to 5

CPU assumed running under BIG endian

CPU Chip ID: 00000110001101011000000101111111 (0635817F)
*** Found a Broadcom manufactured BCM6358 REV 01 CPU ***

    - EJTAG IMPCODE ....... : 00000000100000011000100100000100 (00818904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS16 MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Detecting Flash Base Address...
Read MPI register value : 1f00008c
MPI register show Flash Access Base Addr : 1f000000
*** Manually Selected a ST M29W128GH Uni          (16MB) from ST/Numonyx

    - Flash Chip Window Start .... : 1F000000
    - Flash Chip Window Length ... : 01000000
    - Selected Area Start ........ : 1F000000
    - Selected Area Length ....... : 00020000

*** You Selected to Flash the TFE.BIN ***

=========================
Flashing Routine Started
=========================
Total Blocks to Erase: 1

Erasing block: 1 (addr = 1f000000)...Done

Loading TFE.BIN to Flash Memory...
   1%   bytes = 2476
 楼主| 发表于 2009-11-13 09:27:39 | 显示全部楼层
今天用brjtag 1.8c刷ST M29W128GH  新flash芯片的rg100a,指令如下:


1、输入 brjtag -probeonly /era ...
spanning 发表于 2009-11-12 14:44


速度慢,一种可能是jtag线,另外就是pc机与jtag线和modem的配合存在问题。
第一种情况仔细查一下并口接地引脚是否都焊好。另外jtag线不能太长。
第2种情况,可以尝试换台电脑,还有就是命令上加些参数:
增加命令时延
  1. brjtag -flash:tfe /ejtag0
复制代码
改用Pracc模式访问
  1. brjtag -flash:tfe /nodma
复制代码
pracc加时延
  1. brjtag -flash:tfe /ejtag0 /nodma
复制代码
取消写入等待。
  1. brjtag -flash:tfe /bypass /ejtag0
复制代码
另外尝试giveio.sys的其它版本。

因为问题的机理不清楚,没有最终解决办法 。另外/fc:xx 不需要加
发表于 2009-11-13 15:15:26 | 显示全部楼层
HUGEBIRD大侠,我也遇到擦很快写较慢的问题,我认为还是giveio.sys还要改进,按说1.8C很先进的,但是写不很正常,问题应该在giveio.sys没有改进上。呵呵,您是行家,你参考。
发表于 2009-11-13 16:22:29 | 显示全部楼层
1、giveio.sys 我用的是一楼的压缩包里面的版本
2、不加 /fc:94 参数,我的机器上无法自动认出ST M29W128GH  新flash芯片
3、JTAG线是在淘宝上买的成品线,双列10PIN ,1和11脚空着  ,6脚取的GND,其它3 5 7 9连接了。

只有先尝试换台电脑看看了,其次就是加参数试试。

昨晚电脑没关机刷了一晚  还是在3% 早上只有停掉了。
 楼主| 发表于 2009-11-13 19:24:50 | 显示全部楼层
1、giveio.sys 我用的是一楼的压缩包里面的版本
2、不加 /fc:94 参数,我的机器上无法自动认出ST M29W128G ...
spanning 发表于 2009-11-13 08:22



贴一下下面命令的显示结果,flash不能自动检测肯定有问题。 如果连flash都检测不到,强刷也没用。/fc:xx命令不是这么用的。
  1. brjtag -probeonly /verbose
复制代码
发表于 2009-11-13 20:31:19 | 显示全部楼层
贴一下下面命令的显示结果,flash不能自动检测肯定有问题。 如果连flash都检测不到,强刷也没用。/f ...
hugebird 发表于 2009-11-13 11:24



运行结果:

E:\RG100A>brjtag -probeonly /verbose

===============================================
Broadcom EJTAG Debrick Utility v1.8c-hugebird
===============================================

Probing bus ... CPU detecting 635817F
CPU detecting 635817F
CPU detecting 635817F
CPU detecting 635817F
CPU detecting 635817F
CPU detecting 635817F
CPU detecting 635817F
CPU detecting 635817F
CPU detecting 635817F
CPU detecting 635817F
CPU detecting 635817F
CPU detecting 635817F
CPU detecting 635817F
Done

Instruction Length set to 5

CPU assumed running under BIG endian

CPU Chip ID: 00000110001101011000000101111111 (0635817F)
*** Found a Broadcom manufactured BCM6358 REV 01 CPU ***

    - EJTAG IMPCODE ....... : 00000000100000011000100100000100 (008189
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS16 MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Detecting Flash Base Address...
Read MPI register value : 1f00008c
MPI register show Flash Access Base Addr : 1f000000

Probing Flash at Address: 0x1F000000 ...
Read raw Chip ID (MfrID:DevID = 0020 : 227E)
Read raw sub dev ID (devid2:devid3 = 2221 : 2201)
Read final Chip ID (VenID:DevID = 207e : 2101)
Detected Chip ID (VenID:DevID = 207E : 2101)


Read Array Starting from offset [0x0010]
Array[0x10] = 0x0000
Array[0x11] = 0x0000
Array[0x12] = 0x0000


Read Array Starting from offset [0x0010]
Array[0x10] = 0x0051
Array[0x11] = 0x0052
Array[0x12] = 0x0059


Read Array Starting from offset [0x0010]
Array[0x10] = 0x0051
Array[0x11] = 0x0052
Array[0x12] = 0x0059
Array[0x13] = 0x0002
Array[0x14] = 0x0000
Array[0x15] = 0x0040
Array[0x16] = 0x0000
Array[0x17] = 0x0000
Array[0x18] = 0x0000
Array[0x19] = 0x0000
Array[0x1A] = 0x0000
Array[0x1B] = 0x0027
Array[0x1C] = 0x0036
Array[0x1D] = 0x00B5
Array[0x1E] = 0x00C5
Array[0x1F] = 0x0004
Array[0x20] = 0x0004
Array[0x21] = 0x0009
Array[0x22] = 0x0010
Array[0x23] = 0x0004
Array[0x24] = 0x0004
Array[0x25] = 0x0003
Array[0x26] = 0x0004
Array[0x27] = 0x0018
Array[0x28] = 0x0002
Array[0x29] = 0x0000
Array[0x2A] = 0x0006
Array[0x2B] = 0x0000
Array[0x2C] = 0x0001
Array[0x2D] = 0x007F
Array[0x2E] = 0x0000
Array[0x2F] = 0x0000
Array[0x30] = 0x0002
Array[0x31] = 0x0000
Array[0x32] = 0x0000
Array[0x33] = 0x0000
Array[0x34] = 0x0000
Array[0x35] = 0x0000
Array[0x36] = 0x0000
Array[0x37] = 0x0000
Array[0x38] = 0x0000
Array[0x39] = 0x0000
Array[0x3A] = 0x0000
Array[0x3B] = 0x0000
Array[0x3C] = 0x0000

Flash CommandSet = 0002


Read Array Starting from offset [0x0040]
Array[0x40] = 0x0050
Array[0x41] = 0x0052
Array[0x42] = 0x0049
Array[0x43] = 0x0031
Array[0x44] = 0x0033
Array[0x45] = 0x000D
Array[0x46] = 0x0002
Array[0x47] = 0x0001
Array[0x48] = 0x0000
Array[0x49] = 0x0008
Array[0x4A] = 0x0000
Array[0x4B] = 0x0000
Array[0x4C] = 0x0002
Array[0x4D] = 0x00B5
Array[0x4E] = 0x00C5
Array[0x4F] = 0x0005

Flash Boot Block Location: Non TOP
Flash total size: 16384KB (16MB)
Flash has total 1 erase block regions
Region[0] sector count: 128,   size:128KB
Complete CFI Query!!

Matching Flash Chip (VenID:DevID = 207E : 2101)

*** Found a CFI Compatiable Flash Chip from ST/Numonyx



*** REQUESTED OPERATION IS COMPLETE ***
 楼主| 发表于 2009-11-13 21:19:28 | 显示全部楼层
Flash total size: 16384KB (16MB)
Matching Flash Chip (VenID:DevID = 207E : 2101)
*** Found a CFI Compatiable Flash Chip from ST/Numonyx

这不是已经自动找到芯片参数了吗,1.8a开始cfi只要能自动检测到参数的芯片都报成CFI兼容,并给出芯片生产厂商。操作只关心芯片参数是否识别正确,芯片代号对操作不能提供任何帮助。

看来刷新慢最好还是换太电脑试试。
发表于 2009-11-13 21:28:46 | 显示全部楼层
谢谢老大,老大太牛了
*滑块验证:
您需要登录后才可以回帖 登录 | 注册

本版积分规则

Archiver|小黑屋|宽带技术网 |网站地图 粤公网安备44152102000001号

GMT+8, 2025-5-3 23:14 , Processed in 0.027148 second(s), 5 queries , Redis On.

Powered by Discuz! X3.5 Licensed

Copyright © 2001-2020, Tencent Cloud.

快速回复 返回顶部 返回列表