Differences

This shows you the differences between two versions of the page.

toh:huawei:hg655d [2013/04/23 01:18]
linuxinside
toh:huawei:hg655d [2014/04/15 12:49] (current)
danitool
Line 16: Line 16:
| RX  | TCK  | | RX  | TCK  |
-==== Some JTAG attempts ====+==== JTAG ====
-Using the urJtag commands below I was able to identify the processor as an bcm6368 however I did not succede in getting flash memory contents at the suspect locations. Suggestions are welcome.+=== URJTAG ===
-Below is the command file used to identify the chip:+Using the urJtag with an FT2232H I was able to read the flash chip.
-''cable DLC5 parallel 0x378 +urjtag command file used:
-detect+
 +''cable FT2232H vid=xxx pid=xxx
endian big endian big
 +detect
 +
register BR 1 register BR 1
register DIR 32 register DIR 32
Line 48: Line 50:
dr dr
-#initbus ejtag +initbus ejtag
-initbus ejtag_dma +
-''+
-==== Some Serial attempts ====+detectflash 0x38000000
-Serial works at 3.3V 115200N1+readmem 0x38000000 0x020000 hg655d-CFE.bin'' 
 + 
 +=== ZJTAG === 
 + 
 +and using zjtag(i used version 1.5) 
 + 
 +''zjtag -probeonly /window:18000000 /nompi - to detect flash chip 
 +zjtag -backup:custom /window:18000000 /start:18000000 /length:800000 /nompi - to backup all flash'' 
 + 
 +==== Flash layout ==== 
 + 
 +for the HG655b version 
 + 
 +The flash chip has two regions: 
 + 
 +''Region 0:  8 x  8 KB 
 +Region 1: 127 x 64 KB'' 
 + 
 +^Phys.Addr ^Lenght ^Description ^ 
 +| 0x00000000 | 131072 | CFE | 
 +| 0x00020000 | 256 | BCM image tag | 
 +| 0x00020100 | 5062656 | rootfs partition | 
 +| 0x00439100 | 909932 | kernel partition | 
 +| 0x00790000 | 65536 | upnp config XML | 
 +| 0x007a0000 | 65536 | ATP_LOG | 
 +| 0x007b0000 | 65536 | Div tr069 conf? Env …. | 
 +| 0x007c0000 | 65536 | ????? | 
 +| 0x007e0000 | 65536 | ????? | 
 + 
 +==== BCM tag ==== 
 + 
 +''Tag Version -----------> : 7 
 +Signature 1 -----------> : Broadcom Corporatio 
 +Signature 2 -----------> : ver. 2.0 
 +Chip ID ---------------> : 6368 
 +Board ID --------------> : HW65x 
 +Bigendian -------------> : true 
 +Image size ------------> : 005b226c, 5972588 
 +CFE Address -----------> : 00000000, 0 
 +CFE Length ------------> : 00000000, 0 
 +Flash Root Address ----> : bfc20100, 3217162496 
 +Flash Root Length -----> : 004d4000, 5062656 
 +Flash Kernel Address --> : c00f4100, 3222225152 
 +Flash Kernel Length ---> : 000de26c, 909932 
 +Vendor information ----> :  
 +Compile Information ---> : HG655bV100R001C02B0 
 +Image CRC -------------> : f9c4cb2a  [Computed Value: f9c4cb2a] 
 +Header CRC ------------> : ed34bdfb  [Computed Value: ed34bdfb] 
 +Kernel CRC ------------> : 4d04fb6f  [Computed Value: 4d04fb6f] 
 +Rootfs CRC ------------> : 80e314ce  [Computed Value: 80e314ce]'' 
 + 
 +==== Serial ==== 
 + 
 +Serial works at 3.3V 115200N1, see pin assignments above
Login: admin Login: admin
 +
Password: admin Password: admin
Line 101: Line 155:
For some Help with the Tags, please have a look here: [[meta/tags]] For some Help with the Tags, please have a look here: [[meta/tags]]
-{{tag>bcm63xx bcm6368 FastEthernet 4Port 1USB ADSL2+ VDSL2 64RAM 8Flash fxo MIPS MIPS32}}+{{tag>bcm63xx bcm6368 FastEthernet 4Port 1USB ADSL2+ VDSL2 64RAM 8Flash fxo MIPS MIPS32 trng}}

Back to top

toh/huawei/hg655d.1366672695.txt.bz2 · Last modified: 2013/04/23 01:18 (external edit)