Help with STi5211 processor and Spancion flash memory

This site is best viewed in a modern browser with JavaScript enabled.

Help with STi5211 processor and Spancion flash memory

espinoza

Hi,
Is possible read wholeflash to stb with STi5211_LUC processor and Spancion GL064N90FF1S2 Flash memory with TUMPA???
Check software display
Microsoft Windows XP
(C) Copyright 1985-2001 Microsoft Corp.
C:\Jtag>zjtag -backup:wholeflash
==============================================
TUMPA EJTAG Debrick Utility V0.5
==============================================
Set I/O speed to 30000 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Probing bus ... Done
Detected IR Length is 8
CPU Chip ID: 10000001000000010000000100000001 (81010101)
CPU Manufature:Unknow(100)
CPU Device ID :1010
CPU Revision :8
*** Detected a CPU but not in build-in list ***
*** You can set /skipdetect let operate continue ***
C:\Jtag>zjtag -backup:wholeflash /skipdetect
==============================================
TUMPA EJTAG Debrick Utility V0.5
==============================================
Set I/O speed to 30000 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Probing bus ... Done
Detected IR Length is 8
CPU assumed running under LITTLE endian
CPU Chip ID: 10000001000000010000000100000001 (81010101)
*** CHIP DETECTION OVERRIDDEN ***
- EJTAG IMPCODE ....... : 10000001000000010000000100000001 (81010101)
- EJTAG Version ....... : Unknown (4 is a reserved value)
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k DINTsup MIPS16 MIPS64
Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenID

evID = 0001 : 8101)
*** Unknown or NO Flash Chip Detected ***
*** REQUESTED OPERATION IS COMPLETE ***
My problem now is Unknow flash; how add????

[deleted]

Thank you for your support, I got datasheet for your flash, and I will let you know when version 0.7 is out!

espinoza

Hi Sir,
Any news about version 0.7????
Need datasheet for STi5211 or only pinouts for this processor is ok for me!
BR

[deleted]

After some research Chip ID 100 seems wrong to me. Please use /L1:3 parameter to slow down or try /L1:9 if you still can not get CPU Manufacturer ID: 040.

http://www.tiaowiki.com/w/Debrick_Wireless_Router_Using_TUMPA_and_zJTAG wrote:the most important flag is JTAG clock speed divider
/L1:<divider>
. TUMPA can clock TCK as high as 30Mhz, however most router's CPU cannot handle such high clock speed, thus you will have to slow down the clock to make it work.
This is the formula:
Speed in KHz = 30000 / (divider + 1)
For example, if you give the following option:
/L1:3
The TCK clock speed is 7500KHz or 7.5MHz (30000/(3+1)).

[deleted]

espinoza wrote: Hi Sir,
Any news about version 0.7????
Need datasheet for STi5211 or only pinouts for this processor is ok for me!
BR

Hello,
0.7 needs a little more work. It will be released "when it's done".
I wasn't able to find datasheet for STi5211, but there is data brief available on : http://www.st.com/internet/imag_video/product/211394.jsp
I don't know pin-out for this processor, but this site may be useful: http://www.jtagtest.com/pinouts/
If you still can't find pin-out, please see: http://hackingbtbusinesshub.wordpress.com/2012/01/26/discovering-jtag-pinouts/

[deleted]

Hello,
Version 0.7 (beta) is out with some improvements!
https://sourceforge.net/projects/zjtag/files/v0.7/
Please test it and post your feedback here. Thanks.

espinoza

Hi, thank you for new version. Software can't read flash maybe have wrong pinouts or jtag is disable. Software show same info in ver0.7 and older. Thank you any way!
If STB is powered ON Software not found any processor,
If STB is powered OFF software found processor unknow, if put /L1:x any value not help.
Here log:
C:\Jtag>zjtag -backup:wholeflash
==============================================
zJTAG EJTAG Debrick Utility V0.7
==============================================
Set I/O speed to 30000 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Probing bus ... Done
Detected IR chain Length is 1
CPU Chip ID: 10000011000000110000000100000011 (83030103)
CPU Manufacturer :Unknown(id=102)
CPU Device ID :3030
CPU Revision :8
*** Detected a CPU but not in build-in list ***
*** You can set /skipdetect let operate continue ***
C:\Jtag>zjtag -backup:wholeflash /skipdetect
==============================================
zJTAG EJTAG Debrick Utility V0.7
==============================================
Set I/O speed to 30000 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Probing bus ... Done
Detected IR chain Length is 1
CPU assumed running under LITTLE endian
CPU Chip ID: 10000011000000110000001100000011 (83030303)
*** CHIP DETECTION OVERRIDDEN ***
- EJTAG IMPCODE ....... : 10000011000000110000001100000011 (83030303)
- EJTAG Version ....... : Unknown (4 is a reserved value)
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k DINTsup MIPS16 MIPS64
Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenID

evID = 0001 : 8101)
*** Unknown or NO Flash Chip Detected ***
*** REQUESTED OPERATION IS COMPLETE ***
C:\Jtag>zjtag -backup:wholeflash /skipdetect /l1:3
==============================================
zJTAG EJTAG Debrick Utility V0.7
==============================================
Set I/O speed to 7500 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Probing bus ... Done
Detected IR chain Length is 1
CPU assumed running under LITTLE endian
CPU Chip ID: 11111111111111111111111111111111 (FFFFFFFF)
*** CHIP DETECTION OVERRIDDEN ***
- EJTAG IMPCODE ....... : 11111111111111111111111111111111 (FFFFFFFF)
- EJTAG Version ....... : Unknown (7 is a reserved value)
- EJTAG DMA Support ... : No
- EJTAG Implementation flags: R3k DINTsup ASID_8 ASID_6 MIPS16 NoDMA MIPS64
Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ...

[deleted]

Hi,
Are you sure that it has JTAG interface? In databrief I can see USB 2.0 interface but no JTAG!?

espinoza

Here from databrief show jtag block

And here is MB fron STB

uration
In JTAG use this config
Pin 1: TDI TIAO 5
Pin 3: TCK TIAO 9
Pin 4: TMS TIAO 7
Pin 6: TDO TIAO 13
Pin 8: TRST TIAO 3
Pin 9: GND TIAO GND

[deleted]

Sorry, I was looking application figure. OK, the chip has JTAG. But The chip's JTAG interface may be disabled by manufacturer in the application.
AFAIK device should be powered on first to make connection. and your pin-out may be wrong.