I have been trying to download homebox firmware via JTAG, but I am getting weird results from some flash addresses. Within two byte interval I am getting two zeroes.
Here is the picture to explain it better.
What could be the problem? I am using urjtag tool. Some adresses like 0x1fc00000 or 0x3fc00000 or 0x5fc00000 I am getting correct data.
Code:
jtag> cable wiggler ppdev /dev/parport0
Initializing ppdev port /dev/parport0
jtag> detect
IR length: 10
Chain length: 2
Device Id: 00000000000000000000000110000011 (0x0000000000000183)
Unknown manufacturer!
Device Id: 00000000000000000000000110000011 (0x0000000000000183)
Unknown manufacturer!
chain.c(149) Part 0 without active instruction
chain.c(200) Part 0 without active instruction
chain.c(149) Part 0 without active instruction
jtag> part 0
jtag> include /home/kala/danube4
jtag> instruction bypass
jtag> part 1
jtag> include /home/kala/danube4
jtag> initbus ejtag
ImpCode=01100000010000010100000000000000 60414000
EJTAG version: 3.1
EJTAG Implementation flags: R4k ASID_8 MIPS16 NoDMA MIPS32
chain.c(149) Part 1 without active instruction
Processor entered Debug Mode.
jtag> print
No. Manufacturer Part Stepping Instruction Register
------------------------------------------------------------------------------------------------------------------
1 EJTAG_DATA EJDATA
Active bus:
*0: EJTAG compatible bus driver via PrAcc (JTAG part No. 1)
start: 0x00000000, length: 0x20000000, data width: 8 bit
start: 0x20000000, length: 0x20000000, data width: 16 bit
start: 0x40000000, length: 0x20000000, data width: 32 bit
jtag> readmem 0x50020000 0x00020000 0x00020000.bin
address: 0x50020000
length: 0x00020000
reading:
addr: 0x50040000
Done.
jtag> readmem 0x50820000 0x7E0000 0x00820000.bin
Ok, I know have other hardware to use so I will finaly be able to send my WiFiBox on a vecation. I'll contact BS in a few days and if he wants to give it a try I'll send it to him within 2weeks.
Though first I'll provide some photos of the WiFiBox and not the homebox as was posted...