Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
docs:techref:hardware:port.jtag [2019/11/09 17:20] – [JTAG automate] hri33docs:techref:hardware:port.jtag [2020/07/09 10:23] (current) – [Hairydairymaid] Add Github for source, remove thecshore cshoredaniel1
Line 36: Line 36:
 {{  :media:doc:hardware:jst-sh-8-labelled.jpg?0x200|}} {{  :media:doc:hardware:jst-sh-8.jpg?0x200|}} Common in Thomson routers, but not elsewhere.  Specifically these are JST-SH-8, 1.0mm pitch.  If you want a tidy connection rather than soldering wires directly to the board, Sparkfun stocks [[https://www.sparkfun.com/products/10853|single cable/socket pairs]] (for their Arduino Mega Pro Mini), and [[http://www.ebay.co.uk/itm/181431004441|bags of 10 cable assemblies and sockets]] are cheap on eBay.  They still need to be hand-soldered as they don't take too kindly to hot air tools. {{  :media:doc:hardware:jst-sh-8-labelled.jpg?0x200|}} {{  :media:doc:hardware:jst-sh-8.jpg?0x200|}} Common in Thomson routers, but not elsewhere.  Specifically these are JST-SH-8, 1.0mm pitch.  If you want a tidy connection rather than soldering wires directly to the board, Sparkfun stocks [[https://www.sparkfun.com/products/10853|single cable/socket pairs]] (for their Arduino Mega Pro Mini), and [[http://www.ebay.co.uk/itm/181431004441|bags of 10 cable assemblies and sockets]] are cheap on eBay.  They still need to be hand-soldered as they don't take too kindly to hot air tools.
  
-|      ? ^  1  ^ +<a2s> 
-|  nTRST ^  2  ^ +         #----# 
-|    TCK ^  3  ^ +         |#--#|  
-|    TMS ^  4  ^ +       ? |#--#| 1 
-|    GND ^  5  ^ +         |    | 
-|    TDO ^  6  ^ +         |#--#| 
-|    TDI ^  7  ^ +   nTRST |#--#| 2 
-|    GND ^  8  ^+         |    | 
 +         |#--#| 
 +     TCK |#--#| 3 
 +         |    | 
 +         |#--#| 
 +     TMS |#--#| 4 
 +         |    | 
 +         |#--#| 
 +     GND |#--#| 5 
 +         |    | 
 +         |#--#| 
 +     TDO |#--#| 6 
 +         |    | 
 +         |#--#| 
 +     TDI |#--#| 7 
 +         |    | 
 +         |#--#| 
 +     GND |#--#| 8 
 +         #----# 
 +</a2s> 
 + 
  
 === 10 Pin Header === === 10 Pin Header ===
 Found in many Huawei routers: Found in many Huawei routers:
  
-|   TCK ^  1  ^  2   | GND     | +<a2s> 
-|   TDO ^  3  ^  4   | VREF    | +        #---------# 
-|   TMS ^  5  ^  6   | nSRST   | +    TCK |#--# #--#| GND 
-|     - ^  7  ^  8   | nTRST   | +      1 |#--# #--#| 2 
-|   TDI ^  9  ^  10  | GND     |+        |         | 
 +    TDO |#--# #--#| VREF 
 +      3 |#--# #--#| 4 
 +        |         | 
 +    TMS |#--# #--#| nSRST 
 +      5 |#--# #--#| 6 
 +        |         | 
 +      - |#--# #--#| nTRST 
 +      7 |#--# #--#| 8 
 +        |         | 
 +    TDI |#--# #--#| GND 
 +      9 |#--# #--#| 10 
 +        #---------# 
 +</a2s>
  
 It matches with the ALTERA ByteBlasterMV 10-pin cable, but without the nSRST, nTRST pins. It matches with the ALTERA ByteBlasterMV 10-pin cable, but without the nSRST, nTRST pins.
Line 59: Line 93:
 Found in Linksys routers such as the WRT54G and WRT54GS, the 12-pin header has the following arrangement of JTAG signals and pins: Found in Linksys routers such as the WRT54G and WRT54GS, the 12-pin header has the following arrangement of JTAG signals and pins:
  
-|   nTRST ^  1   ^  2   | GND   | + 
-|     TDI ^  3   ^  4   | GND   | +<a2s> 
-|     TDO ^  5   ^  6   | GND   | +         #---------# 
-|     TMS ^  7   ^  8   | GND   | +   nTRST |#--# #--#| GND 
-|     TCK ^  9   ^  10  | GND   | +       1 |#--# #--#| 2 
-|   nSRST ^  11  ^  12  | GND   |+         |         | 
 +     TDI |#--# #--#| GND 
 +       3 |#--# #--#| 4 
 +         |         | 
 +     TDO |#--# #--#| GND 
 +       5 |#--# #--#| 6 
 +         |         | 
 +     TMS |#--# #--#| GND 
 +       7 |#--# #--#| 8 
 +         |         | 
 +     TCK |#--# #--#| GND 
 +       9 |#--# #--#| 10 
 +         |         | 
 +   nSRST |#--# #--#| GND 
 +      11 |#--# #--#| 12 
 +         #---------# 
 +</a2s>
  
 Seems, this header is a truncated version of the full EJTAG header. Seems, this header is a truncated version of the full EJTAG header.
Line 71: Line 121:
 This header is fully MIPS EJTAG 2.6 compatible and described in the EJTAG 2.6 standard. Found in Edimax routers (and other brands that are Edimax clones), the 14-pin header has the following arrangement of JTAG signals and pins: This header is fully MIPS EJTAG 2.6 compatible and described in the EJTAG 2.6 standard. Found in Edimax routers (and other brands that are Edimax clones), the 14-pin header has the following arrangement of JTAG signals and pins:
  
-|   nTRST ^  1   ^  2   | GND   | +<a2s> 
-|     TDI ^  3   ^  4   | GND   | +         #---------# 
-|     TDO ^  5   ^  6   | GND   | +   nTRST |#--# #--#| GND 
-|     TMS ^  7   ^  8   | GND   | +       1 |#--# #--#| 2 
-|     TCK ^  9   ^  10  | GND   | +         |         | 
-|   nSRST ^  11  ^  12  | n/a   | +     TDI |#--# #--#| GND 
-|     n/a ^  13  ^  14  | Vcc   |+       3 |#--# #--#| 4 
 +         |         | 
 +     TDO |#--# #--#| GND 
 +       5 |#--# #--#| 6 
 +         |         | 
 +     TMS |#--# #--#| GND 
 +       7 |#--# #--#| 8 
 +         |         | 
 +     TCK |#--# #--#| GND 
 +       9 |#--# #--#| 10 
 +         |         | 
 +   nSRST |#--# #--#| n/a 
 +      11 |#--# #--#| 12 
 +         |         | 
 +     n/a |#--# #--#| Vcc 
 +      13 |#--# #--#| 14 
 +         #---------# 
 +</a2s>
  
 A buffered cable such as the Wiggler requires an external Vcc voltage supply. The 14-pin header conveniently supplies this voltage on pin 14. The typical unbuffered cable, however, does not require an external voltage in order to function. Formally, the pin 14 is called VREF and used to indicate a JTAG signal levels: 5V, 3.3V or 2.5V. On the most devices this pin is tied to the device's Vcc and may be used to power a buffer IC chip (and to generate an appropriate levels as result). Note that the 12-pin JTAG header arrangement does not provide Vcc. A buffered cable such as the Wiggler requires an external Vcc voltage supply. The 14-pin header conveniently supplies this voltage on pin 14. The typical unbuffered cable, however, does not require an external voltage in order to function. Formally, the pin 14 is called VREF and used to indicate a JTAG signal levels: 5V, 3.3V or 2.5V. On the most devices this pin is tied to the device's Vcc and may be used to power a buffer IC chip (and to generate an appropriate levels as result). Note that the 12-pin JTAG header arrangement does not provide Vcc.
Line 84: Line 151:
 === 16 Pin Header === === 16 Pin Header ===
 Usually found in IBM 4XX powerpc platform, this layout is also known as JTAG RISCWATCH Usually found in IBM 4XX powerpc platform, this layout is also known as JTAG RISCWATCH
-|      TDO |  o   ^  1   ^  2   |  nc  | -       | + 
-|      TDI |  i   ^  3   ^  4   |  i   | nTRST   | +<a2s> 
-|   HALTED |  o   ^  5   ^  6   |  p   | VREF    | +         #---------# 
-|      TCK |  i   ^  7   ^  8   |  nc  | -       | +     TDO |#--# #--#| - 
-|      TMS |  i   ^  9   ^  10  |  nc  | -       | +       1 |#--# #--#| 2 
-|     HALT |  i   ^  11  ^  12  |  p   | GND     | +         |         | 
-|    nSRST |  od  ^  13  ^  14  |  k   | KEY     | +     TDI |#--# #--#| nTRST 
-|        - |  nc  ^  15  ^  16  |  p   | GND     |+       3 |#--# #--#| 4 
 +         |         | 
 +  HALTED |#--# #--#| VREF 
 +       5 |#--# #--#| 6 
 +         |         | 
 +     TCK |#--# #--#| -  
 +       7 |#--# #--#| 8 
 +         |         | 
 +     TMS |#--# #--#| -  
 +       9 |#--# #--#| 10 
 +         |         | 
 +    HALT |#--# #--#| GND 
 +      11 |#--# #--#| 12 
 +         |         | 
 +   nSRST |#--# #--#| KEY 
 +      13 |#--# #--#| 14 
 +         |         | 
 +       - |#--# #--#| GND 
 +      15 |#--# #--#| 16 
 +         #---------# 
 +</a2s>
  
 === 20 Pin Header === === 20 Pin Header ===
 Found in Comtrend routers: Found in Comtrend routers:
  
-|   nTRST ^  1   ^  2   | GND   | +<a2s> 
-|     TDI ^  3   ^  4   | GND   | +         #---------# 
-|     TDO ^  5   ^  6   | GND   | +   nTRST |#--# #--#| GND 
-|     TMS ^  7   ^  8   | GND   | +       1 |#--# #--#| 2 
-|     TCK ^  9   ^  10  | GND   | +         |         | 
-|   nSRST ^  11  ^  12  | GND   | +     TDI |#--# #--#| GND 
-|     Vcc ^  13  ^  14  | ?     | +       3 |#--# #--#| 4 
-|     Vcc ^  15  ^  16  | GND   | +         |         | 
-|     Vcc ^  17  ^  18  | GND   | +     TDO |#--# #--#| GND 
-|     Vcc ^  19  ^  20  | GND   |+       5 |#--# #--#| 6 
 +         |         | 
 +     TMS |#--# #--#| GND 
 +       7 |#--# #--#| 8 
 +         |         | 
 +     TCK |#--# #--#| GND 
 +       9 |#--# #--#| 10 
 +         |         | 
 +   nSRST |#--# #--#| GND 
 +      11 |#--# #--#| 12 
 +         |         | 
 +     Vcc |#--# #--#| ? 
 +      13 |#--# #--#| 14 
 +         |         | 
 +     Vcc |#--# #--#| GND 
 +      15 |#--# #--#| 16 
 +         |         | 
 +     Vcc |#--# #--#| GND 
 +      17 |#--# #--#| 18 
 +         |         | 
 +     Vcc |#--# #--#| GND 
 +      19 |#--# #--#| 20 
 +         #---------# 
 +</a2s>
  
 Not fully verified, Vcc at the bottom left are by add smd 0ohm. FIXME Not fully verified, Vcc at the bottom left are by add smd 0ohm. FIXME
Line 120: Line 230:
 ==== Hairydairymaid ==== ==== Hairydairymaid ====
 The most famous software for JTAG is probably the Linksys De-Brick Utility by Hairydairymaid (aka Lightbulb). As of 12 September 2006 the most recent version is v4.8. Virtually everyone who uses this software opts for an unbuffered cable, and the software itself, by default, expects this type of cable to be used. The most famous software for JTAG is probably the Linksys De-Brick Utility by Hairydairymaid (aka Lightbulb). As of 12 September 2006 the most recent version is v4.8. Virtually everyone who uses this software opts for an unbuffered cable, and the software itself, by default, expects this type of cable to be used.
 +
 +There is source code available on GitHub at [[https://github.com/etmatrix/debrick_buspirate]].  The Github repo is likely the most stable source (the cshore site will not be hosting it any longer, as it was only added back for lack of another source).
  
 The utility CAN operate on most any MIPS based cpu supporting EJTAG by using PrAcc routines (non-dma mode) - use the /nodma switch. It is not limited to WRT54G/GS units. The utility CAN operate on most any MIPS based cpu supporting EJTAG by using PrAcc routines (non-dma mode) - use the /nodma switch. It is not limited to WRT54G/GS units.
  • Last modified: 2019/11/09 17:20
  • by hri33