Author Topic: Help Reading Flash JTAG Port  (Read 637 times)

0 Members and 1 Guest are viewing this topic.

Offline falcom

  • Contributor
  • Posts: 23
  • Country: us
Help Reading Flash JTAG Port
« on: March 09, 2020, 08:03:18 pm »
I have  a fairly expensive circuit board from a thermal imager. It is a processor board that worked until recently and then suddenly stopped.
It is several thousand $ and a long wait for the manufacturer to replace it.
 I have another working circuit board that has the wrong software/firmware installed.

I want to copy the software /firmware from the non working board and program the working board with it.

The board has a JTAG port and I can read the Xilinx XCR3032XL CPLD using Platform USB Cable and the check sum matches the one printed on the CPLD. The  CPLDs on both boards have matching check sums.  I cannot go any further. (I don't know how)
I am new enough to JTAG to not fully understand it.

The board has:
 NEC VR4131 microprocessor ,
 Intel 28F128J3  Strata flash memory,
Xilinx XCR3032XL ,     
and a Micron MT48LC4M16A2 SDR SDRAM dram.

How should I proceed?

..
If programming is not feasible how about desoldering the BGA chips and soldering them to the working board???


« Last Edit: March 31, 2020, 05:23:08 pm by falcom »
 

Offline falcom

  • Contributor
  • Posts: 23
  • Country: us
Re: Help Reading Flash JTAG Port
« Reply #1 on: March 31, 2020, 05:23:20 pm »
BUMP
 

Offline cruff

  • Contributor
  • Posts: 21
  • Country: us
Re: Help Reading Flash JTAG Port
« Reply #2 on: March 31, 2020, 10:54:20 pm »
Have you searched for a tool that can program the 28F128J3 chip via JTAG? I would expect many tools to be able to read out the contents of the chip for verification.
 

Offline falcom

  • Contributor
  • Posts: 23
  • Country: us
Re: Help Reading Flash JTAG Port
« Reply #3 on: March 31, 2020, 11:19:13 pm »
That's where I am stuck. My web searches have come up empty. is this something the Platform USB cable can do?
 

Online rstofer

  • Super Contributor
  • ***
  • Posts: 7334
  • Country: us
Re: Help Reading Flash JTAG Port
« Reply #4 on: April 01, 2020, 05:33:09 pm »
Have you read the datasheet for the flash?  Among other things, it features code read protection.
If I were building a product, I would absolutely enable protection before I shipped it.
 

Offline falcom

  • Contributor
  • Posts: 23
  • Country: us
Re: Help Reading Flash JTAG Port
« Reply #5 on: April 01, 2020, 06:33:16 pm »
The device is supposedly open architecture. 
 

Offline cruff

  • Contributor
  • Posts: 21
  • Country: us
Re: Help Reading Flash JTAG Port
« Reply #6 on: April 01, 2020, 10:44:28 pm »
It appears that flash ROM does not have a JTAG interface, so you can't use a JTAG probe/software to read out the bits directly.

Is the flash attached directly to the CPU or is it attached via the CPLD? You would either need software running on the CPU to give you the bits, to reprogram the CPLD to do that or use some JTAG software to drive the pins on the CPLD to access the ROM and to return the resulting bits. Is the schematic of the device available?
 

Offline falcom

  • Contributor
  • Posts: 23
  • Country: us
Re: Help Reading Flash JTAG Port
« Reply #7 on: April 01, 2020, 11:04:44 pm »
I do not have the schematic for the device and it is not supported by the manufacturer.
I think the flash is connected to the microprocessor.

 Can I run the processor via JTAG?
« Last Edit: April 02, 2020, 12:07:03 am by falcom »
 

Offline Bassman59

  • Super Contributor
  • ***
  • Posts: 1457
  • Country: us
  • Yes, I do this for a living
Re: Help Reading Flash JTAG Port
« Reply #8 on: April 02, 2020, 11:15:57 pm »
I have  a fairly expensive circuit board from a thermal imager. It is a processor board that worked until recently and then suddenly stopped.
It is several thousand $ and a long wait for the manufacturer to replace it.
 I have another working circuit board that has the wrong software/firmware installed.

I want to copy the software /firmware from the non working board and program the working board with it.

Why do you think the firmware has suddenly gone toes up?
 

Offline cruff

  • Contributor
  • Posts: 21
  • Country: us
Re: Help Reading Flash JTAG Port
« Reply #9 on: April 03, 2020, 12:09:01 am »
Can I run the processor via JTAG?

It depends if the processor has a JTAG interface and if you can tell it to execute code from some memory locations you can load with code via JTAG. It may have an alternative boot mode that would let you download code via another I/O interface. You'll need to read the relevant datasheet.
 

Offline falcom

  • Contributor
  • Posts: 23
  • Country: us
Re: Help Reading Flash JTAG Port
« Reply #10 on: April 03, 2020, 10:18:08 pm »
I had an extra scrap board so I removed the processor so i could access the pins. There is a JTAG interface. It has a 10 pin Hirose connector wired to processor pins.
Power
Ground
JTMS
JTRST
JTCK

BKTGIO#
JTDI/RMODE# (JTDI: Input When JTRST# is inactive this becomes the JTAG data input signal.)
DDIN/GPIO34
DDOUT/DBUS32/GPIO32
I will see what a boundary scan shows.
« Last Edit: April 03, 2020, 11:22:41 pm by falcom »
 

Offline abyrvalg

  • Frequent Contributor
  • **
  • Posts: 385
  • Country: ru
Re: Help Reading Flash JTAG Port
« Reply #11 on: April 05, 2020, 08:24:25 am »
Try OpenOCD configured for MIPS64 on that CPU port.
 

Offline falcom

  • Contributor
  • Posts: 23
  • Country: us
Re: Help Reading Flash JTAG Port
« Reply #12 on: May 07, 2020, 02:24:38 am »
I am afraid that OpenCD is way above my skill level.
I would gladly pay someone to read and program this flash if I was confident of their success.
 

Offline amiq

  • Regular Contributor
  • *
  • Posts: 119
  • Country: scotland
Re: Help Reading Flash JTAG Port
« Reply #13 on: May 07, 2020, 02:49:08 am »
You could give TopJtag Flash Programmer a try.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf