OpenWrt Forum Archive

Topic: Openwrt support for Huawei HG655b

The content of this topic has been archived between 12 Mar 2018 and 5 May 2018. Unfortunately there are posts – most likely complete pages – missing.

Post #276
fratzicu
18 Apr 2015, 16:30

Hi,

I managed to free the jtag holes from soldering material (don't ask me how). Now I have the pinout of the HG655b interface
http://wiki.openwrt.org/toh/huawei/hg655d
and also the pinout of the TIAO device (20 pin JTAG connector)
http://www.tiaowiki.com/w/TIAO_USB_Mult … 27s_Manual.
So what to connect where? I mean what pin from the TIAO USB JTAG 20 pin connector to connect to what pin (hole) of the HG655b JTAG interface? I can't find on google this information, or I don't know how to search.

Regards

Post #277
fratzicu
18 Apr 2015, 18:20

Hi,
Ok, so after studying
http://sysprogs.com/VisualKernel/tutori … jtagsetup/
and
http://infocenter.arm.com/help/index.js … a8650.html
I think I have to connect the wires like this:

20 pin connector of TIAO USB JTAG                 HG655b JTAG interface
nTRST >_>_>_>_>_>_>_>_>_>_>_>_>_>_>TRST
TDI_>_>_>_>_>_>_>_>_>_>_>_>_>_>_>_>TDI
TMS_>_>_>_>_>_>_>_>_>_>_>_>_>_>_>_>TMS
TCK _>_>_>_>_>_>_>_>_>_>_>_>_>__>_>_TCK
TDO_>_>_>_>_>_>_>_>_>_>_>_>_>_>_>_>TDO
GND (pin4)_>_>_>_>_>__>_>_>_>_>_>_>_>GND (from serial port) - no need for this one, actually, but it seems that the connection is best and most stable in detections with all 6 wires connected.

SO I'll give it a try

(Last edited by fratzicu on 28 Apr 2015, 20:41)

Post #278
fratzicu
18 Apr 2015, 18:50

Hi again,
I also connected the GND of the serial port to the 4th pin of the TIAO JTAG and here is the first output:

E:\zjtag>zjtag -probeonly /cable:0

        ==============================================
               zJTAG EJTAG Debrick Utility v1.0
        ==============================================

cableid=0, cabletype=0

 Set I/O speed to 30000 KHz

USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!

Probing bus ... Done

Detected IR chain Length is 31

Warning: detected/set IR Length isn't same as knew!
 (Defined IR length: 5, detected/set: 31)

CPU assumed running under LITTLE endian

CPU Chip ID: 10000000000000000000000000000000 (80000000)
*** Found a AMD manufactured Atheros AR531X/231X REV 08 CPU ***

    - EJTAG IMPCODE ....... : 10000000000000000000000000000000 (80000000)
    - EJTAG Version ....... : Unknown (4 is a reserved value)
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenID:DevID = 0000 : 8000)
*** Unknown or NO Flash Chip Detected ***

 *** REQUESTED OPERATION IS COMPLETE ***

E:\zjtag>
Post #279
fratzicu
18 Apr 2015, 18:56

After powering on the HG655b and lowering the clock speed

E:\zjtag>zjtag -probeonly /L1:2

        ==============================================
               zJTAG EJTAG Debrick Utility v1.0
        ==============================================


 Set I/O speed to 10000 KHz

USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!

Probing bus ... Done

Detected IR chain Length is 5

CPU assumed running under BIG endian

CPU Chip ID: 00000110001101101000000101111111 (0636817F)
*** Found a Broadcom manufactured BCM6368 REV 01 CPU ***

    - EJTAG IMPCODE ....... : 00000000100000011000100100000100 (00818904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS16 MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Detecting Flash Base Address...
DMA Read(x4) Addr = b0001000  Data = (06008000)ERROR ON READ
Read MPI register value : FFFFFFFF
MPI register show Flash Access Base Addr : 1FFFFF00

Probing Flash at Address: 0x1FFFFF00 ...
DMA Read(x2) Addr = 1fffff00  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fffff02  Data = (06008000)ERROR ON READ
Detected Chip ID (VenID:DevID = 00FF : FFFFFFFF)
DMA Read(x2) Addr = 1fffff20  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fffff22  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fffff24  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fffff20  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fffff22  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fffff24  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fffff20  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fffff22  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fffff24  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fffff20  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fffff22  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fffff24  Data = (06008000)ERROR ON READ
*** Unknown or NO Flash Chip Detected ***

 *** REQUESTED OPERATION IS COMPLETE ***

E:\zjtag>
Post #280
fratzicu
18 Apr 2015, 19:02

And then I used the info on the openwrt wiki page to detect the flash chip

E:\zjtag>zjtag -probeonly /L1:2 /window:18000000 /nompi

        ==============================================
               zJTAG EJTAG Debrick Utility v1.0
        ==============================================


 Set I/O speed to 10000 KHz

USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!

Probing bus ... Done

Detected IR chain Length is 5

CPU assumed running under BIG endian

CPU Chip ID: 00000110001101101000000101111111 (0636817F)
*** Found a Broadcom manufactured BCM6368 REV 01 CPU ***

    - EJTAG IMPCODE ....... : 00000000100000011000100100000100 (00818904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS16 MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x18000000 ...
Detected Chip ID (VenID:DevID = 017E : 1000)
*** Found a CFI Compatiable Flash Chip from AMD/Spansion


 *** REQUESTED OPERATION IS COMPLETE ***

E:\zjtag>
Post #281
danitool
18 Apr 2015, 19:05

- to detect flash chip 

zjtag -probeonly /window:18000000 /nompi

- to backup all flash

zjtag -backup:custom /window:18000000 /start:18000000 /length:800000 /nompi
Post #282
fratzicu
18 Apr 2015, 21:05

Hi, I did that, but I cannot backup only cfe or nvram; when I give the command, it doesn't detect the flash anymore

E:\zjtag>zjtag -backup:CFE /L1:2 /window:18000000 /nompi

        ==============================================
               zJTAG EJTAG Debrick Utility v1.0
        ==============================================


 Set I/O speed to 10000 KHz

USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!

Probing bus ... Done

Detected IR chain Length is 5

CPU assumed running under BIG endian

CPU Chip ID: 00000110001101101000000101111111 (0636817F)
*** Found a Broadcom manufactured BCM6368 REV 01 CPU ***

    - EJTAG IMPCODE ....... : 00000000100000011000100100000100 (00818904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS16 MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x1FC00000 ...
DMA Read(x2) Addr = 1fc00000  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fc00002  Data = (06008000)ERROR ON READ
Detected Chip ID (VenID:DevID = 00FF : FFFFFFFF)
DMA Read(x2) Addr = 1fc00020  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fc00022  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fc00024  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fc00020  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fc00022  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fc00024  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fc00020  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fc00022  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fc00024  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fc00020  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fc00022  Data = (06008000)ERROR ON READ
DMA Read(x2) Addr = 1fc00024  Data = (06008000)ERROR ON READ
*** Unknown or NO Flash Chip Detected ***


 *** REQUESTED OPERATION IS COMPLETE ***

If i use /fc:082 to select the flash chip, I save a worthless cfe, here is the CFE.bin output:

 €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €  €
Post #283
fratzicu
19 Apr 2015, 13:52

I opened a brand new device (with original firmware and connected with jtag:

E:\zjtag>zjtag -probeonly /L1:2 /window:18000000 /nompi

        ==============================================
               zJTAG EJTAG Debrick Utility v1.0
        ==============================================


 Set I/O speed to 10000 KHz

USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!

Probing bus ... Done

Detected IR chain Length is 5

CPU assumed running under BIG endian

CPU Chip ID: 00000110001101101000000101111111 (0636817F)
*** Found a Broadcom manufactured BCM6368 REV 01 CPU ***

    - EJTAG IMPCODE ....... : 00000000100000011000100100000100 (00818904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS16 MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x18000000 ...
Detected Chip ID (VenID:DevID = 017E : 1000)
*** Found a CFI Compatiable Flash Chip from AMD/Spansion

 *** REQUESTED OPERATION IS COMPLETE ***
Post #285
fratzicu
19 Apr 2015, 14:39

I started the serial console for the bricked (openwrt - wifi not working)

CFE version 1.0.37-102.6 for BCM96368 (32bit,SP,BE)
Build Date: Wed Mar 23 22:59:09 CST 2011 (lihua@IBM_x3500)
Copyright (C) 2000-2008 Broadcom Corporation.

Parallel flash device: name AM29LV320MB, id 0x2200, size 8192KB
CPU type 0x2A031: 400MHz, Bus: 160MHz, Ref: 64MHz
CPU running TP0
Total memory: 67108864 bytes (64MB)
Boot Address 0xb8000000


Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Board Id (0-6)                    : HW65x
Number of MAC Addresses (1-32)    : 11
Base MAC Address                  : 02:10:18:01:00:01
PSI Size (1-64) KBytes            : 64
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (2 seconds) ***
Auto run second count down: 0

I started the serial console for the original HG655b (huawei firmware)

CFE version 1.0.37-102.6 for BCM96368 (32bit,SP,BE)
Build Date: Fri Apr 16 15:18:13 CST 2010 (lihua@IBM_x3500)
Copyright (C) 2000-2008 Broadcom Corporation.

Parallel flash device: name AM29LV320MB, id 0x2200, size 8192KB
CPU type 0x2A031: 400MHz, Bus: 160MHz, Ref: 64MHz
CPU running TP0
Total memory: 67108864 bytes (64MB)
Boot Address 0xb8000000


Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Board Id (0-6)                    : HW65x
Number of MAC Addresses (1-32)    : 11
Base MAC Address                  : 02:10:18:01:00:01
PSI Size (1-64) KBytes            : 64
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (2 seconds) ***
Auto run second count down: 1
web info: Waiting for connection on socket 0.
CFE>

so it seems that the CFE is the same version but different build dates
bricked
CFE version 1.0.37-102.6 for BCM96368 (32bit,SP,BE)
Build Date: Wed Mar 23 22:59:09 CST 2011 (lihua@IBM_x3500)
original
CFE version 1.0.37-102.6 for BCM96368 (32bit,SP,BE)
Build Date: Fri Apr 16 15:18:13 CST 2010 (lihua@IBM_x3500)

(Last edited by fratzicu on 19 Apr 2015, 20:14)

Post #287
fratzicu
21 Apr 2015, 15:16

So I've been waiting for your suggestions on what to do next, as I don't lnow why when I give the commands -backup:cfe with the same /L1:2 and /window and /nompi  id doesn't deteect anymore the flash; also, if I manually sefect /fc:082, I have a file full of euros.

Post #288
danitool
21 Apr 2015, 15:33

To backup only CFE you can also use this command

zjtag -backup:custom /window:18000000 /start:18000000 /length:10000 /nompi /BE

Sometimes depending on the CFE initialization, the jtag utility fails to catch the CPU in a sane state for JTAG operation, sometimes you need to be fast to execute the commands after powering up the router, other times you need to wait a bit.

BTW I still don't understand exactly your goal, AFAIK the CFE bootloader doesn't perform any initialization in the wifi nor the pci interface which connects to wifi ().

Regards

Post #289
fratzicu
21 Apr 2015, 17:32

Hi, danitool, my goal is to make the wifi work. But also I would like to know what happened.
Can you tell me:
-The command to backup the calib data
-The command to write the cfe and calib data and whole flash image
Maybe this would help the others in the same situation

Could you say why are those differences in cfe and calib data between the two devices?
And if I should change the mac address to that on the back of the device?
Thank you very much

(Last edited by fratzicu on 21 Apr 2015, 17:38)

Post #290
fratzicu
21 Apr 2015, 17:51

On the openwrt wiki it is said that the msin function of the bootloader is to initialize the hardware
The bootloader's main function is to initialize the hardware, pass an abstraction of the initialized hardware, a hardware description, to and execute the Kernel.
Also, on the cfe wiki page talking about the bcm6368 they say that the data includes a parameter called wlan params which has 256 bytes. That's why I thaught cfe myght have something to do with hardware, but i don't know how it could get corrupted

Post #291
fratzicu
23 Apr 2015, 21:56

Hi, I flashed the unaltered CFe on the so-called bricked device

E:\zjtag>zjtag -flash:custom /L1:2 /window:18000000 /start:18000000 /length:1000
0 /nompi

        ==============================================
               zJTAG EJTAG Debrick Utility v1.0
        ==============================================


 Set I/O speed to 10000 KHz

USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!

Probing bus ... Done

Detected IR chain Length is 5

CPU assumed running under BIG endian

CPU Chip ID: 00000110001101101000000101111111 (0636817F)
*** Found a Broadcom manufactured BCM6368 REV 01 CPU ***

    - EJTAG IMPCODE ....... : 00000000100000011000100100000100 (00818904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS16 MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x18000000 ...
Detected Chip ID (VenID:DevID = 017E : 1000)
*** Found a CFI Compatiable Flash Chip from AMD/Spansion

    - Flash Chip Window Start .... : 18000000
    - Flash Chip Window Length ... : 00800000
    - Selected Area Start ........ : 18000000
    - Selected Area Length ....... : 00010000

*** You Selected to Flash the CUSTOM.BIN ***

=========================
Flashing Routine Started
=========================
Total Blocks to Erase: 8

Erasing block: 1 (addr = 18000000)...Done
Erasing block: 2 (addr = 18002000)...Done
Erasing block: 3 (addr = 18004000)...Done
Erasing block: 4 (addr = 18006000)...Done
Erasing block: 5 (addr = 18008000)...Done
Erasing block: 6 (addr = 1800A000)...Done
Erasing block: 7 (addr = 1800C000)...Done
Erasing block: 8 (addr = 1800E000)...Done

Loading CUSTOM.BIN to Flash Memory...
Done  (CUSTOM.BIN loaded into Flash Memory OK)

=========================
Flashing Routine Complete
=========================
elapsed time: 49 seconds


 *** REQUESTED OPERATION IS COMPLETE **

The wifi still doesn't work.

I've read there is a ticket opened for the chaos calmer trunk
https://dev.openwrt.org/ticket/18280 and other tickets for the ralink chipset

Post #292
andoru
23 Apr 2015, 22:26

Does that log in the ticket look the same to what your bricked device's output? For me it doesn't show those two lines:

[   14.476000] rt2800pci 0000:00:01.0: Direct firmware load failed with error -2
[   14.484000] rt2800pci 0000:00:01.0: Falling back to user helper

The rest are the same as in the ticket.

Post #293
danitool
23 Apr 2015, 22:47

This was reported by another HG556a user.
http://foro.seguridadwireless.net/openw … #msg328608

[   27.872000] phy0 -> rt2800_init_eeprom: Error - Invalid RT chipset 0xffff detected.
[   27.880000] phy0 -> rt2x00lib_probe_dev: Error - Failed to allocate device.

I'm almost sure something at the wifi chip is fried. Might be a good idea to use lower wifi output power, 15dB or less looks a good choice for avoiding this problem. Of course this won't solve the problem if the wifi is already damaged.

Post #294
fratzicu
23 Apr 2015, 23:02

After I flashed the whole original image,, here is the serial output:

NBUFF v1.0 Initialized
Broadcom Packet Flow Cache learning via BLOG enabled.
Created Proc FS /procfs/fcache
Broadcom Packet Flow Cache registered with netdev chain
Constructed Broadcom Packet Flow Cache v2.1 Mar 17 2010 13:26:20
Broadcom Packet CMF (Experimental) Char Driver v0.1 Mar 17 2010 02:52:58 Registered<232>
Broadcom Packet CMF (Experimental) [6368-B2] v0.1 Mar 17 2010 02:52:58 Loaded
bcmxtmcfg: bcmxtmcfg_init entry
adsl: adsl_init entry
KLOB extended to 2 pools
KLOB extended to 3 pools
KLOB extended to 4 pools
KLOB extended to 5 pools
KLOB extended to 6 pools
KLOB extended to 7 pools
KLOB extended to 8 pools
Broadcom Packet CMF (Experimental) SWC RESET.
Broadcom Packet CMF (Experimental) SWC INITIALIZED.
Broadcom Packet CMF (Experimental) Forwarder Net Device 0 v0.1 Mar 17 2010 02:52:58 Registered
Broadcom Packet CMF (Experimental) Forwarder Net Device 0 v0.1 Mar 17 2010 02:52:58 Registered
Broadcom Packet CMF (Experimental) ENABLED.
eth0.5: MAC Address: 5C:4C:A9:A4:D9:28
eth0.4: MAC Address: 5C:4C:A9:A4:D9:28
eth0.3: MAC Address: 5C:4C:A9:A4:D9:28
eth0.2: MAC Address: 5C:4C:A9:A4:D9:28
DSP Driver: DSP init stub
Endpoint: endpoint_init entry
............
PROV(ts: 5 s 977ms):Allocated memory = 13704
Endpoint: endpoint_init COMPLETED
Start mic now ...
load cfm ok.
start log proc...
ifconfig: SIOCSIFNETMASK: Cannot assign requested address
ifconfig: SIOCGIFFLAGS: No such device
wlancmd: wlan driver adapter not found
ifconfig: SIOCGIFFLAGS: No such device
ifconfig: SIOCGIFFLAGS: No such device
wlancmd: wlan driver adapter not found
ifconfig: SIOCGIFFLAGS: No such device
ifconfig: SIOCGIFFLAGS: No such device
wlancmd: wlan driver adapter not found
ifconfig: SIOCGIFFLAGS: No such device
ifconfig: SIOCGIFFLAGS: No such device
wlancmd: wlan driver adapter not found
ifconfig: SIOCGIFFLAGS: No such device
PCI: Enabling device 0000:00:01.0 (0000 -> 0002)
PCI: Setting latency timer of device 0000:00:01.0 to 64


=== pAd = c039f000, size = 448000 ===

<-- RTMPAllocAdapterBlock, Status=0
pAd->CSRBaseAddress =0xb1000000, csr_addr=0xb1000000!
sh: cannot kill pid 318: No such process
device wl0 is not a slave of br0
interface wl0.1 does not exist!
interface wl0.2 does not exist!
interface wl0.3 does not exist!
ifconfig: SIOCGIFFLAGS: No such device
ifconfig: SIOCGIFFLAGS: No such device
ifconfig: SIOCGIFFLAGS: No such device

 begin WlanUpInterfaces...
Post #295
fratzicu
23 Apr 2015, 23:06
andoru wrote:

Does that log in the ticket look the same to what your bricked device's output? For me it doesn't show those two lines:

[   14.476000] rt2800pci 0000:00:01.0: Direct firmware load failed with error -2
[   14.484000] rt2800pci 0000:00:01.0: Falling back to user helper

The rest are the same as in the ticket.

No, it's the same as in your case, I guess. Maybe this saturday I'll find out more. There ar emore tickets that report there is this error and related errors with the new trunk. But it doesn't work also with the original firmware.

(Last edited by fratzicu on 23 Apr 2015, 23:12)

Post #296
fratzicu
23 Apr 2015, 23:10

So it seems working with jtag is not that hard. Just that there is a random chance to work with different clock speeds.
It seems there is no need for the gnd pin. The 5 pins are enough for the connection.\
Regards.

Post #297
01226547766
24 Apr 2015, 07:58

Ouhouuh;h

(Last edited by 01226547766 on 23 Jan 2016, 19:30)

Post #298
fratzicu
24 Apr 2015, 14:59

Hi,
It seems you have the same problem as I and andoru. I still don't know what happned. I'll go tomorrow to another electronist to look at the device. The first one said that the wifi chip is not fried (has the correct voltages,etc), but somehow it is not properly initialised or something like that.
In this thread danitool explained how to restore the wifi calib data, but not all the devices have the same calib data. I saved mine while wifi worked. You just need to read those posts.
For jtag I tried only with nTRST conencted. I'll try without to see if the chip is detected when backing up cfe.

Can you give a download link of this quartus software? and what's with all those links?
Kind regards

(Last edited by fratzicu on 24 Apr 2015, 15:10)

Post #299
fratzicu
25 Apr 2015, 13:34

Hi,
I have some news. I checked again the wifi chip at a friend of mine which is an electronist engineer. He found that the quartz crystal near the wifi chip does not function properly, but he tested it on the goog device so this was not the problem. Although the voltages of the wifi chip are right, it seems the wifi chip is the problem, either it is fried or unsoldered because of overheating. So I'll stop here, as the repair costs of the wifi chip are three times higher than that of the device on the second hand market. I'll still use it as a wired server/router/extender/bridge.
Kind regards

(Last edited by fratzicu on 25 Apr 2015, 13:38)

Post #300
fratzicu
25 Apr 2015, 13:39

Hi, danitool,
Can you give a hint on how to compile a custom cfe?
Thank you and regards.

Sorry, posts 301 to 300 are missing from our archive.