Hi,
urjtag has indeed a version (0.10) which recognize BCM6358 but it seems that
this is not enough... Here is what I got:
jtag> cable ea253 parallel 0x378
Initializing parallel port at 0x378
jtag> detect
IR length: 13
Chain length: 2
Device Id: 00100100001100011000000101111111 (0x000000002431817F)
Manufacturer: Broadcom
Unknown part!
Device Id: 00000110001101011000000101111111 (0x000000000635817F)
Manufacturer: Broadcom
Part(1): BCM6358
Stepping: V1
Filename: /usr/share/urjtag/broadcom/bcm6358/bcm6358
chain.c(149) Part 0 without active instruction ######
These lines repeats many times in almost
chain.c(200) Part 0 without active instruction ######
every output: I will suppress them
ImpCode=00000000000000000000000000000000
EJTAG version: <= 2.0
EJTAG Implementation flags: R4k DMA MIPS32
Clear memory protection bit in DCR
Clear Watchdog
Potential flash base address: [0x0], [0x0]
Processor successfully switched in debug mode.
jtag> print
No. Manufacturer Part Stepping Instruction
Register
------------------------------------------------------------------------------------------------------------------
1 Broadcom BCM6358 V1 EJTAG_CONTROL
EJCONTROL
Active bus:
*0: EJTAG compatible bus driver via DMA (JTAG part No. 1)
start: 0x00000000, length: 0x1E000000, data width: 32 bit, (USEG : User
addresses)
start: 0x1E000000, length: 0x02000000, data width: 16 bit, (FLASH :
Addresses in flash (boot=0x1FC000000))
start: 0x20000000, length: 0x60000000, data width: 32 bit, (USEG : User
addresses)
start: 0x80000000, length: 0x20000000, data width: 32 bit, (KSEG0:
Kernel Unmapped Cached)
start: 0xA0000000, length: 0x20000000, data width: 32 bit, (KSEG1:
Kernel Unmapped Uncached)
start: 0xC0000000, length: 0x20000000, data width: 32 bit, (SSEG :
Supervisor Mapped)
start: 0xE0000000, length: 0x20000000, data width: 32 bit, (KSEG3:
Kernel Mapped)
jtag> print chain
No. Manufacturer Part Stepping Instruction
Register
------------------------------------------------------------------------------------------------------------------
0 (none)
(none)
1 Broadcom BCM6358 V1 EJTAG_CONTROL
EJCONTROL
jtag> detectflash 0xBE000000
dev ID=0000 man ID=0000
amd_detect: mid 0, did 0
Flash not found!
To summarize urjtag does not recognize the bcm4318 chip onboard and does not
find any flash. I got 0xBE000000 from the boot log of the original firmware:
<--Snips-->
C0GDTW
WESTELL - ROM Bootloader
(C) Copyright 2006 WESTELL, Inc. All Rights Reserved.
CLEARING SDRAM
...
.............
PASSED
WESTELL - MAIN Bootloader
Reboot command 600000
Device 0 -- FLASH start addr BE000000 Flash end addr BE3FFFFF
Device 1 -- FLASH start addr BE400000 Flash end addr BE5FFFFF
Flash start BE000000 end BE5FFFFF size 00600000
No App Reboot Information found: 1
Linux version 2.6.8.1 (r...@uriel) (gcc version 3.4.4) #1 Tue Apr 22 13:57:08
IST 2008
Westell prom init
get_ethernet_addr: 00:18:3a:af:15:09
Bootloader Watchdog State ON
CPU revision is: 0002a010
Determined physical RAM map:
memory: 01fa0000 @ 00000000 (usable)
On node 0 totalpages: 8096
DMA zone: 8096 pages, LIFO batch:1
Normal zone: 0 pages, LIFO batch:1
HighMem zone: 0 pages, LIFO batch:1
Built 1 zonelists
Kernel command line: root=/dev/mtdblock2 ro bootmode=prod boottype=wdog
memsize=0x2000000 flashsize=0x600002 ethaddr=00:18:3A:AF:15:09
ipaddr=192.168.1.1 wdog=on
<--Snips-->
I tried also detectflash with other values: every time I had the same result.
I am not an expert of the subject so any advice is welcome.
Thanks
S.
* Benjamin Henrion <[email protected]> [2009-07-07 23:33:59]:
> On Tue, Jul 7, 2009 at 11:23 PM, VulK<[email protected]> wrote:
> > Hi,
> > I am trying to take a backup of the firmware of a westell 7500 adsl router
> > via jtag; the board is based on BCM6358 and there are two flash memories:
> > ST M29W320 and ST M29W160.
>
> Urjtag seems to have some working version for BCM6358:
>
> http://www.neufbox4.org/wiki/index.php?title=Interface_JTAG
>
> --
> Benjamin Henrion <bhenrion at ffii.org>
> FFII Brussels - +32-484-566109 - +32-2-4148403
_______________________________________________
openwrt-devel mailing list
[email protected]
https://lists.openwrt.org/mailman/listinfo/openwrt-devel