zalacznik 1.txt

Ovislink airlive WLA-5000AP v2 jtag - co robię źle?

Witam! Mam takiego Accesspointa z uszkodzonym bootloaderem, więc rs232 i tftp nie da rady. Podłączyłem się przez ejtag, i zgrałem z dobrego cały flash softem urjtag. Teraz chcę wrzucić ten flash do uszkodzonego, i nie zapisuje się pamięć. Odczyt z uszkodzonego działa, i jest w nim cały czas ta sama zła zawartość. LOG moich czynności (moje komentarze od // a po znaku zachęty jtag> moje polecenia: - ZAŁĄCZNIK 1 Po czym odczytuję flash poleceniem readmem 0x5fc00000 0x400000 ar2312-flash.bin i mam dalej starą zawartość. próbowałem także poleceń writemem, oraz eraseflash. Mimo komunikatu "Done" zawartość flash jest niezmieniona (nawet się nie wykasowała). Może jest jakoś zablokowana? (jak odblokować?) Proszę o jakąś podpowiedź. Dzięki!


debian:~# jtag // uruchamiam urjtag

UrJTAG 0.9 #1359
Copyright (C) 2002, 2003 ETC s.r.o.
Copyright (C) 2007, 2008 Kolja Waschk and the respective authors
//[wyci?ty txt]



jtag & gt; help

Command list:

quit exit and terminate this session
help display this help
frequency setup JTAG frequency
cable select JTAG cable
reset reset JTAG chain
discovery discovery of unknown parts in the JTAG chain
idcode Read IDCODEs of all parts in a JTAG chain
detect detect parts on the JTAG chain
signal define new signal for a part
scan read BSR and show changes since last scan
salias define an alias for a signal
bit define new BSR bit
register define new data register for a part
initbus initialize bus driver for active part
print display JTAG chain list/status
part change active part for current JTAG chain
bus change active bus
instruction change active instruction for a part or declare new instruction
shift shift data/instruction registers through JTAG chain
dr display active data register for a part
get get external signal value
test test external signal value
shell shell cmmd
set set external signal value
endian set/print endianess
peek read a single word
poke write a single word
readmem read content of the memory and write it to file
writemem write content of file to the memory
detectflash detect parameters of flash chips attached to a part
flashmem burn flash memory with data from a file
eraseflash erase flash memory by number of blocks
script run command sequence from external file
include include command sequence from external repository
addpart manually adds parts on the JTAG chain
svf execute svf commands from file
bsdl manage BSDL files
debug debug jtag program



jtag & gt; cable DLC5 parallel 0x378 // konfiguracja kabla

Initializing parallel port at 0x378



jtag & gt; detect

IR length: 5
Chain length: 1
Device Id: 00000000000000000000000000000001 (0x0000000000000001)
Unknown manufacturer! //Z tego co wyczyta?em w necie, to normalny komunikat
chain.c(133) Part 0 without active instruction
chain.c(184) Part 0 without active instruction
chain.c(133) Part 0 without active instruction



jtag & gt; include atheros/ar2312/ar2312

ImpCode=01000000010000000100000000000000
EJTAG version: 2.6
EJTAG Implementation flags: R4k ASID_8 NoDMA MIPS32
bus initialization failed! //niby failed a póŸniej detectflash i odczyt z flash dzia?a, i polecenie poni?sze tak?e



jtag & gt; poke 0x58400000 0x000e3ce1 //inicjalizacja kontrolera flash (nie wyœwietla ?adnego komunikatu)



jtag & gt; detectflash 0x3fc00000

Query identification string:
Primary Algorithm Command Set and Control Interface ID Code: 0x0002 (AMD/Fujitsu Standard Command Set)
Alternate Algorithm Command Set and Control Interface ID Code: 0x0000 (null)
Query system interface information:
Vcc Logic Supply Minimum Write/Erase or Write voltage: 2700 mV
Vcc Logic Supply Maximum Write/Erase or Write voltage: 3600 mV
Vpp [Programming] Supply Minimum Write/Erase voltage: 0 mV
Vpp [Programming] Supply Maximum Write/Erase voltage: 0 mV
Typical timeout per single byte/word program: 16 us
Typical timeout for maximum-size multi-byte program: 0 us
Typical timeout per individual block erase: 1024 ms
Typical timeout for full chip erase: 0 ms
Maximum timeout for byte/word program: 512 us
Maximum timeout for multi-byte program: 0 us
Maximum timeout per individual block erase: 16384 ms
Maximum timeout for chip erase: 0 ms
Device geometry definition:
Device Size: 4194304 B (4096 KiB, 4 MiB)
Flash Device Interface Code description: 0x0002 (x8/x16)
Maximum number of bytes in multi-byte program: 1
Number of Erase Block Regions within device: 2
Erase Block Region Information:
Region 0:
Erase Block Size: 8192 B (8 KiB)
Number of Erase Blocks: 8
Region 1:
Erase Block Size: 65536 B (64 KiB)
Number of Erase Blocks: 63
Primary Vendor-Specific Extended Query:
Major version number: 1
Minor version number: 1
Address Sensitive Unlock: Required
Erase Suspend: Read/write
Sector Protect: 1 sectors per group
Sector Temporary Unprotect: Not supported
Sector Protect/Unprotect Scheme: 29BDS640 mode (Software Command Locking)
Simultaneous Operation: Not supported
Burst Mode Type: Supported
Page Mode Type: Not supported
ACC (Acceleration) Supply Minimum: 11500 mV
ACC (Acceleration) Supply Maximum: 12500 mV
Top/Bottom Sector Flag: Bottom boot device



jtag & gt; help flashmem

Usage: flashmem ADDR FILENAME
Usage: flashmem msbin FILENAME
Program FILENAME content to flash memory.

ADDR target address for raw binary image
FILENAME name of the input file
msbin FILENAME is in MS .bin format (for WinCE)
//[wyci?ty zb?dny txt]



jtag & gt; flashmem 0x5fc00000 ar2312-flash.bin

Chip: AMD Flash
Manufacturer: Unknown manufacturer (ID 0x1985) Chip (ID 0x2003)
Protected: 0000
program:
addr: 0x5FC00000
addr: 0x5FC00100
addr: 0x5FC00200
addr: 0x5FC00300
addr: 0x5FC00400

//... i tak dalej, az do

Done.
jtag & gt;


Download file - link to post