16
Messages
This section allows you to view all Messages made by this member. Note that you can only see Messages made in areas you currently have access to.
Messages - Ramazuri
17
Bus Blaster JTAG debugger / BusBlaster v4.1a can't connect to JTAG
let me explain you my situation first so that you understand what I want to achieve:
I am currently trying to read out the NAND Flash from a chip that I have here. First I tried to use the BusPirate v4 to do so. Unfortunately it didn't work, I had several issues with flashrom and my other attempts to communicate with the SPI NAND Flash didn't work either.
So I searched for an other option and I saw that I can read out my NAND Flash via JTAG as well. Apparently there is a readmem command, so I wanted to try that out (at this point I don't really care much if it takes way longer like that because I am stagnating for weeks at the same point).
I connected my BusBlaster v4.1a with the corresponding pins and my first attempt was with UrJTAG.
This is the result:
Code: [Select]
UrJTAG 0.10 #1502
Copyright (C) 2002, 2003 ETC s.r.o.
Copyright (C) 2007, 2008, 2009 Kolja Waschk and the respective authors
UrJTAG is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
There is absolutely no warranty for UrJTAG.
WARNING: UrJTAG may damage your hardware!
Type "quit" to exit, "help" for help.
jtag> cable jtagkey pid=0x6010 vid=0x0403 interface=0
Connected to libftd2xx driver.
jtag> detect
Warning: TDO seems to be stuck at 1
jtag>
I looked that up, first I thought I may have connected something wrong, unfortunately I found several posts about the exact same problem. I didn't find a solution though.
So I got curious if it's maybe a problem with UrJTAG so I tried out to access JTAG via OpenOCD.
This is what I got:
Code: [Select]
~/openocd/tcl$ openocd -f interface/ftdi/dp_busblaster.cfg -f target/qualcomm_qca4531.cfg
Open On-Chip Debugger 0.10.0+dev-00924-g16496488 (2019-08-22-10:23)
Licensed under GNU GPL v2
For bug reports, read
http://openocd.org/doc/doxygen/bugs.html
Info : If you need SWD support, flash KT-Link buffer from https://github.com/bharrisau/busblaster
and use dp_busblaster_kt-link.cfg instead
adapter speed: 2000 kHz
Info : auto-selecting first available session transport "jtag". To override use 'transport select <transport>'.
qca4531_ddr2_550_550_init
Info : Listening on port 6666 for tcl connections
Info : Listening on port 4444 for telnet connections
Info : clock speed 2000 kHz
Error: JTAG scan chain interrogation failed: all ones
Error: Check JTAG interface, timings, target power, etc.
Error: Trying to use configured scan chain anyway...
Error: qca4531.cpu: IR capture error; saw 0x1f not 0x01
Warn : Bypassing JTAG setup events due to errors
Error: isa info not available, failed to read cp0 config register: 0
Error: The 'mww' command must be used after 'init'.
Error executing event halted on target qca4531.cpu:
Info : Listening on port 3333 for gdb connections
I have no idea if I am doing something really wrong of if the chip or the BBv4.1a is broken or something else.
Does anyone have an idea what I can try out else or what I can do to fix these issues?
18
Bus Pirate Support / Re: What options do I have to read out flash
I am dealing with a GD5F1GQ4RCYIG from GigaDevice.
-Ramazuri
19
Bus Pirate Support / What options do I have to read out flash
I finally managed to connect my NAND Flash with my Bus Pirate v4 and my next and final step that I would like to do is reading out the Flash.
Well, I thought I could just use flashrom to do so but apparently the tool doesn't support the device that I am working with.
I get the following output:
Code: [Select]
Found chip "Generic unknown SPI chip (RDID)" (0 KB, SPI) at physical address 0x0.
===
This flash part has status NOT WORKING for operations: PROBE READ ERASE WRITE
My question is, are there any other tools that I can use to dump the Flash?
I am pretty new to this, this is probably a pretty basic question I guess, the problem is every ressource that I can find involves flashrom to read out the Flash.
20
Bus Pirate Support / Re: Is it possible to use dual/quad spi to read flash?
21
Bus Pirate Support / Is it possible to use dual/quad spi to read flash?
I am wondering about something. I bought a buspirate v4 because I would like to read the content of a NAND Flash that I have.
My idea is to connect the BP to my NAND Flash and then I would like to use flashrom to read out the Flash and store the content in a .bin file.
I found a couple of tutorials and explanations about how to connect the pins and how it works.
After a quick look at the datasheet from the NAND Flash I could verify what I read about the connection. It should looks like this:
BP | NAND Flash
------------------------
CS | CS#
MISO | SO
3v3 | WP#
GND | VSS
3v3 | VCC
3v3 | HOLD#
CLK | SCLK
MOSI | SI
After taking an other look at the datasheet I found out that the NAND Flash supports dual and quad spi and the WP#, SO, SI and the HOLD# Pin have a second function.
WP# can also be used as SIO2, HOLD# can also be used as SIO3.
SI can also be used as SIO0 and SO can also be used as SIO1.
What I am wondering about is, can I connect the pins differently so that I can use dual or quad spi instead of standard spi to read out the flash?
Does flashrom and the BP even support dual and quad spi?
Thanks