BCM5357 (linksys E1500) zJTAG support

This site is best viewed in a modern browser with JavaScript enabled.

BCM5357 (linksys E1500) zJTAG support

flipy

Currently, Broadcom 5357 is not supported but it is identified.
What steps are needed to include it (and possible the chip alongside) to zJTAG?
Seems that everything is specified in arrays with some properties (initiator handle, little endian or big endian, and so on).
But what else is needed to support it?
Thanks!

flipy

I don't know if it helps, but TJTAG (v3.0.2) currently supports the BCM5357 (and I guess the chip too).

flipy

I've compiled a version of zJTAG under windows which adds a new CPU definition for the BCM5357 (I'd like to be able to run it under linux but...)
However, I may need to define the flash chip onboard, which is W25Q64BVSIG (8Mb) if it's not CFI compatible.
Datasheet can be found in: http://www.winbond.com.tw/NR/rdonlyres/591A37FF-007C-4E99-956C-F7EE4A6D9A8F/0/W25Q64BV.pdf
Running zJTAG gets stuck a long time in "Clearing Watchdog", and then starts probing for flash chips at address 0x1fc00000.
Must say I haven't seen a correct execution of zJTAG, and I may be missing something.

flipy

Well,
I'm running the stock version of zJTAG as the instruction register and LE/BE can be specified from the command line.
There are two problems: it does not detect the flash chip (main problem) and it does not enter debug mode successfully (may not be needed).
Output of zJTAG:

C:\Users\flipy\Downloads\zjtag-1.8\zjtag.source_1.8>zjtag.exe -probeonly /L1:3 /
skipdetect /instrlen:8 /LE
        ==============================================
               zJTAG EJTAG Debrick Utility v1.8 RC3
        ==============================================
Dev 0:
 Flags=0x2
 Type=0x6
 ID=0x4038a98
 LocId=0x2121
 SerialNumber=TMXETXZCA
 Description=TIAO USB Multi-Protocol Adapter A
 ftHandle=0x0
 Set I/O speed to 7500 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Detected IR chain length = 0
There are 1 device(s) in the JTAG chain
 IDCODE for device 1 is 0x2535717F (IR length:0)
Probing bus ... Done
Instruction Length manually set to 8
CPU assumed running under LITTLE endian
CPU Chip ID: 01001100000000000000000000000000 (0x4C000000)
    CPU Manufacturer :AMD(ID=0x000)
    CPU Device ID :C000
    CPU Revision  :4
*** CHIP DETECTION OVERRIDDEN ***
    - EJTAG IMPCODE ....... : 01001100000000000000000000000000 (0x4C000000)
    - EJTAG Version ....... : 2.6
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32
Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenID:DevID = 0000 : 0000)
*** Unknown or NO Flash Chip Detected ***
 *** REQUESTED OPERATION IS COMPLETE ***

If ran with the /noreset switch, zJTAG stops at Processor Entered Debug Mode:

C:\Users\flipy\Downloads\zjtag-1.8\zjtag.source_1.8>zjtag.exe -probeonly /L1:3 /
skipdetect /instrlen:8 /LE /noreset
        ==============================================
               zJTAG EJTAG Debrick Utility v1.8 RC3
        ==============================================
Dev 0:
 Flags=0x2
 Type=0x6
 ID=0x4038a98
 LocId=0x2121
 SerialNumber=TMXETXZCA
 Description=TIAO USB Multi-Protocol Adapter A
 ftHandle=0x0
 Set I/O speed to 7500 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Detected IR chain length = 0
There are 1 device(s) in the JTAG chain
 IDCODE for device 1 is 0x2535717F (IR length:0)
Probing bus ... Done
Instruction Length manually set to 8
CPU assumed running under LITTLE endian
CPU Chip ID: 11011101111110101111110001111110 (0xDDFAFC7E)
    CPU Manufacturer :Unknown(ID=0xC7E)
    CPU Device ID :DFAF
    CPU Revision  :13
*** CHIP DETECTION OVERRIDDEN ***
    - EJTAG IMPCODE ....... : 01001000110110101111111000111111 (0x48DAFE3F)
    - EJTAG Version ....... : 2.6
    - EJTAG DMA Support ... : No
    - EJTAG Implementation flags: R4k ASID_8 NoDMA MIPS64
Issuing Processor / Peripheral Reset ... Skipped
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ...

Any hint?