Hello,

I got into my hands a couple of Teacom GW600.
It seems to me a good hardware, and I'd like to play with them.
I have already found the serial console and the USB storage direct access.
JTAG access seems to be more difficult.
I have few experiences with JTAG related stuff, so I'd like to pose some questions.
I'm quite sure to have found TMS, TDI, and TCK; but it seems there's no TDO.
Looking at the PCB, there's no JTAG header, and the PINs I think have found, are on some resistor connected to the 3.3v, which I identified as pullup resistors.
Question is: is it possible the resistors I have found are not pullup resistors, but just resistors which their only mean is bind these pin to high level, and therefore there's no TDO? Is it possible this PCB left TDO floating?
In this case, how can I to access the main flash?

Using OS, mtdblock0 is the only block device I can access, and it seems to me it is only a part of the whole flash memory.
In fact I can not see any place where the linux kernel image is stored. Also the flash chip is 4MB and the mtdblock0 image is just 3.2MB.
Main processor is a BCM6348, which I think have it's own flash memory within the SoC where the CFE Bootloader may be located, but kernel image still have to be somewhere else, and the only place, have to be the 0.8 MB I can't access using mtdblock.
Can someone point me where my thoughts fail or give me any direction on how to proceed?

Thank you fo any help
Regards
AC

(Last edited by acarminati on 26 Sep 2014, 21:08)