TJTAG - EJTAG De-Brick tool - IMPORTANT CHANGE:See 1st Post.

Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> General Questions
Goto page Previous  1, 2, 3, 4, 5 ... 82, 83, 84  Next
Author Message
labrat_x
DD-WRT Novice


Joined: 02 Nov 2007
Posts: 9

PostPosted: Fri Nov 23, 2007 16:34    Post subject: Reply with quote
Where can the CFE be downloaded at?
Sponsor
labrat_x
DD-WRT Novice


Joined: 02 Nov 2007
Posts: 9

PostPosted: Fri Nov 23, 2007 20:53    Post subject: Reply with quote
Tornado wrote:
@labrat_x

Let me check and make sure that FLASH CHIP is defined in the tool


The full serial numbers are...

SAMSUNG K4S641632K-UC75
SPANSION S29AL016D 90 TFI 01
Wingit
DD-WRT Novice


Joined: 25 Sep 2007
Posts: 43
Location: Independence, Louisiana

PostPosted: Sun Nov 25, 2007 8:46    Post subject: Reply with quote
Tornado
Was wondering if the person with the serial consul was able to send you any data for the wrt54gs v7 models yet? I not sure as to what post it was mentioned in.
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Sun Nov 25, 2007 8:52    Post subject: Reply with quote
@labrat_x,

Ok, with this Flash chip also use the /bypass command when flashing it with Tjtag. This chip will be detected as a AMD 29lv160DB or AMD 29lv160DT, because it is already a defined chip and has the same Manufacturer ID and Device ID as the Spansion S29AL016D.

So, what I recommend with this chip is:

Tjtag -flash:cfe /noreset /bypass

@Wingit

No, they have not gotton back to me yet, holiday weekend and ll I suppose.

_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
osgar
DD-WRT Novice


Joined: 27 Nov 2007
Posts: 2

PostPosted: Tue Nov 27, 2007 12:03    Post subject: CFE for bticked WRT54GS v7... Reply with quote
Hello, i've got another bricked WRT54GS v7 with a BCM5354KFBG REV 1 and 28F160, and i've beign trying to recover it from a bad flash using tjtag. Everything goes fine, it detects the chip, it seems it erases de NVRAM, the CFE and the WHOLEFLASH. But when i try to flash the CFE.bin it starts quick but i can´t get it working more than 2% or simetimes 4%.
The CFE.bin i'm using is oen i've created using the Skynet Repairkit, but it is for WRT54GS v5. Should this CFE.bin work? If not, how can i get a proper one?
I've got another original WRT54GS v7. Could i just dump the CFE.bin from it and then put it on the bricked one? Wouldn't it be a MAC conflict if they are in the same network?

Thanks a lot. Great work here!

_________________
INFORMATION IS POWER. SHARE IT!
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Tue Nov 27, 2007 12:14    Post subject: Reply with quote
Oscar,
We are having some problems with your specific flash chip, and are working on a fix for it. You cannot take and original CFE off of a Gv8 or GSv7, becuase they don't have CFE's on them, they have a boot loader from VxWorks - We call a BSP.

_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
natural*engineer
DD-WRT Novice


Joined: 20 Oct 2007
Posts: 37
Location: USA

PostPosted: Tue Nov 27, 2007 22:56    Post subject: WRT54GSv7 Still Bricked Reply with quote
I've continued to try TJTAG with all possible /switches to load both the BSP and a variety of CFE's. I've used several different PC's and three different cables. All "seem" to work in one or more combination of switches with TJTAG. The BCM and the flash are "correctly" detected, and the backups look fine. Still 5 lan lights, no ping.

Hang in there guys -- you will get it! Let me know when you have a new solution to try.
xircommy
DD-WRT Novice


Joined: 06 Oct 2007
Posts: 21

PostPosted: Tue Nov 27, 2007 23:23    Post subject: Reply with quote
@natural*engineer

Long time not see you. You still having problem with your same unit? My one already working with DD-WRT, thank to Tornado. I think you need to go back to original linksys firmware and than flash again to DD-WRT(Just follow this instruction from this post) http://www.dd-wrt.com/phpBB2/viewtopic.php?p=123672#123672

Very Happy Very Happy Very Happy Very Happy Very Happy Very Happy Very Happy Very Happy
natural*engineer
DD-WRT Novice


Joined: 20 Oct 2007
Posts: 37
Location: USA

PostPosted: Tue Nov 27, 2007 23:59    Post subject: WRT54GSv7 Still Bricked Reply with quote
xircommy,

Yes, the GSv7 is still dead. I have several others running, (GV2, GV3, GV4, GV5, and GLV1) no problems, but this box is a problem.

Thanks for the idea- but I tried both the BSP from your post and another one from Tornado. Everything looks like it goes in OK, but I still can not ping or get to the management console. All LAN lights stay lit.

I thought it is possible that the chip is fried, but I can do -erase:wholeflash and then backup:BSP and it is blank.

Then I can -flash:BSP and then the -backup:BSP is correct, so it seems to be working.

There is another bug in some of the chipsets, I think!
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Wed Nov 28, 2007 5:18    Post subject: Reply with quote
@natural*engineer

Can you do a type of binary diff of the BSP you put on and the one you backup, if using linux vbindiff is a good tool, or you could send them to me.

_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
natural*engineer
DD-WRT Novice


Joined: 20 Oct 2007
Posts: 37
Location: USA

PostPosted: Wed Nov 28, 2007 12:13    Post subject: WRT54GSv7 BSP not Writing Reply with quote
Tornado,

You are right! The BSP did not write to the chip. It looks like it does, but when I actually compare the files, the backup version is all "ffffffff", while the BSP has a variety of other characters.

I have to do the erase and the flash separately or it hangs, and I have to use the /noreset or it hangs.

This was the sequence:
Tjtag -erase:wholeflash /noreset
=====>>>>>>
It looks good, EMW is OK, chip ID is OK, etc
wait for 39 blocks to erase, then 5 minutes, then power cycle, then power off


Tjtag -flash:BSP /noerase /noreset
It looks good, EMW is OK, chip ID is OK, etc
It looks good -- writing lots of characters, quickly
=====>>>>>>>
wait 640 seconds to flash, then 5 min, then power cycle
No ping

Tjtag -backup:BSP /noreset
======>>>>>
It is very fast -- but writing all "ffffffff"
wait 100 seconds for the backup to download

I can send the files, but it looks like either the chip is shot or the EMW is not actually enabling the write.
jvwrt
DD-WRT User


Joined: 17 Nov 2007
Posts: 60

PostPosted: Sat Dec 01, 2007 2:26    Post subject: Tjtag - EJTAG tool with Gv8/GSv7 support Reply with quote
This may be off topic for the broadcom forum, but on topic for an EJTAG tool.

I'm trying to find a flash tool that can work with the Atheros WiSOC, in particular the WRT55AG, which is an AR5312 chipset and in my case (V2), the flash is a Macronix MX 29LV320.

What info would be needed to add the atheros chipset to supported CPUs, and the flash chips as well? I'd be happy to do legwork and research this, and even take a stab at sample code if there is any hope of making it work...
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Sat Dec 01, 2007 6:21    Post subject: Reply with quote
That paticular chip is already defined in wrt54g and Tjtag, what are the pinout for your JTAG on that board ? have you tried Tjtag on that board ? read only ?
_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
jvwrt
DD-WRT User


Joined: 17 Nov 2007
Posts: 60

PostPosted: Sun Dec 02, 2007 1:45    Post subject: Reply with quote
Tornado wrote:
That paticular chip is already defined in wrt54g and Tjtag, what are the pinout for your JTAG on that board ? have you tried Tjtag on that board ? read only ?


I spent a while testing, and never got very far. I have a JTAG setup that has previously worked with a bunch of WRT54G and GS routers, but it doesn't seem to work here.

The 55AG has a 14 pin header, and my JTAG cable doesn't have tRST- so perhaps I don't have a usable setup for the 14 pin flash header, or need to connect one of the rst lines...

So, here's one example run:
Code:

tjtag -backup:wholeflash  /skipdetect /nocwd

=================================================
WRT54G/GS EJTAG Debrick Utility v4.8-Tornado-MOD
=================================================

Probing bus ... Done

Instruction Length set to 0

CPU Chip ID: 11111111111111111111111111111111 (FFFFFFFF)
*** CHIP DETECTION OVERRIDDEN ***

    - EJTAG IMPCODE ....... : 11111111111111111111111111111111 (FFFFFFFF)
    - EJTAG Version ....... : Unknown (7 is a reserved value)
    - EJTAG DMA Support ... : No

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Skipped

Probing Flash at (Flash Window: 0x1fc00000) ...


It hangs at that point for at least 10 minutes (I'm not very patient Smile.

If I try it with a forced /fc:29 to match what I think the flash is, I get:

Code:

tjtag -backup:wholeflash  /skipdetect /nocwd /fc:29

=================================================
WRT54G/GS EJTAG Debrick Utility v4.8-Tornado-MOD
=================================================

Probing bus ... Done

Instruction Length set to 0

CPU Chip ID: 11111111111111111111111111111111 (FFFFFFFF)
*** CHIP DETECTION OVERRIDDEN ***

    - EJTAG IMPCODE ....... : 11111111111111111111111111111111 (FFFFFFFF)
    - EJTAG Version ....... : Unknown (7 is a reserved value)
    - EJTAG DMA Support ... : No

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Skipped

Manual Flash Selection ...


And again it hangs at that point...

Meanwhile, the router itself has booted and appears to be running the whole time...
Eko
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 5771

PostPosted: Sun Dec 02, 2007 6:32    Post subject: Reply with quote
Try to pull up the tRST with 100 ohm too.
Code:
tRST--------|100 ohm|-----VCC
Goto page Previous  1, 2, 3, 4, 5 ... 82, 83, 84  Next Display posts from previous:    Page 4 of 84
Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> General Questions All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum