Example for setting breakpoint for DCT700 3.26.

JTAG on dct2500/dct700
Locked
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Example for setting breakpoint for DCT700 3.26.

Post by usbbdm »

Here is example to set break point on DCT700 3.26.
tap c
tap a ffffffff
(DEBUG ON)
idcode
bl (list break points).
bpx 800CC874 (set break point at address 0x800CC874 which is the after of XC chip access)
g

with cable plug in you will soon see DEBUG ON.
r
You will see PC is 0x800CC874 which means CPU stops at address 0x800CC874. You can then monitor the stack to get the raw data of the XC chip response.
joejoe332006
Junior Member
Posts: 166
Joined: Sat Aug 02, 2008 6:40 pm
Location: USA

Post by joejoe332006 »

cool that sounds great
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

USB JTAG NT 0.27 with hardware breakpoint support.

Post by usbbdm »

Attached is DCT700.xml with hardware breakpoint enabled. Several commands added
bl
bpx
bpm
be
bd
These command are similar to Softice I used before.
bl is list the breakpoints.
bpx is set instruction address to break.
bpm is set data address to break.
be enable the break point.
bd disable break point.

I will start using 0.27 to find how to block software upgrade for DCT700. I might latter enhance these commands (like range support and data compare value support). It all depends on how easy existing 0.27 can help me find the software upgrade.
You do not have the required permissions to view the files attached to this post.
pablo1972
Junior Member
Posts: 63
Joined: Tue Aug 19, 2008 9:34 am

Post by pablo1972 »

usbbdm wrote:Here is example to set break point on DCT700 3.26.
tap c
tap a ffffffff
(DEBUG ON)
idcode
bl (list break points).
bpx 800CC874 (set break point at address 0x800CC874 which is the after of XC chip access)
g

with cable plug in you will soon see DEBUG ON.
r
You will see PC is 0x800CC874 which means CPU stops at address 0x800CC874. You can then monitor the stack to get the raw data of the XC chip response.


Copyright http://www.usbjtag.com 2008,2009,2010
USB JTAG NT 0.27a
-tap c
Eco :00000000
-tap a fffffff
Eco :00C00000
-tap a ffffffff
Eco :08C00440
-detect
IDCODE 41C5501D
Motorola 17500QK
IMPCODE 40404000
EJTAG V1, V2.0
DMA (Acceso Directo De Memoria) No Compartible
Dirección Encontrada= 90000000 CFI MT28W320
-bl
0 bpx=00008202
1 bpx=844c0c0b
2 bpx=00460004
3 bpx=6a01132a
4 bpm=1549b6a5
5 bpm=9ecc6711
-bpx 08c00440
-bl
0 * bpx=08c00440
1 bpx=844c0c0b
2 bpx=00460004
3 bpx=6a01132a
4 bpm=1549b6a5
5 bpm=9ecc6711
-g
-r
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

I have almost done for the firmware update block with help from 0,27a's breakpoint. I just need a few more testing to release 0.54.
I will see if I can do the properly way so the software will auto detect the firmware without release new dll every time the new platform version. This will be a challenge but I will have a try.
There is a significant firmware difference from 3.17 as it starts to supporting another version of XC chip.
pablo1972
Junior Member
Posts: 63
Joined: Tue Aug 19, 2008 9:34 am

Post by pablo1972 »

Dirección Encontrada= 08c00440 CFI Intel032

CFI Intel032 xc chip ??????
xcchips
Junior Member
Posts: 30
Joined: Fri Nov 28, 2008 6:38 am
Location: http://dct700.ya.st/
Contact:

no logre nada con esto

Post by xcchips »

Copyright http://www.usbjtag.com 2008,2009,2010
USB JTAG NT 0.28
-tapc
Bad command or script file name
-tap c
Eco :00000000
-tap a ffffffff
Eco :00C00000
-tap a ffffffff
Eco :08C00440
-detect
IDCODE 41C5501D
Motorola 17500QK
IMPCODE 40404000
EJTAG V1, V2.0
DMA not supoorted
Found Address= 90000000 CFI MT28W320
-bl
0 bpx=70144541
1 bpx=300d32d1
2 bpx=00030d81
3 bpx=d40802a0
4 bpm=00208102
5 bpm=45108056
-bpx 08c00440
-bl
0 * bpx=08c00440
1 bpx=300d32d1
2 bpx=00030d81
3 bpx=d40802a0
4 bpm=00208102
5 bpm=45108056
-g
-r
Register can not be set
xcchips
Junior Member
Posts: 30
Joined: Fri Nov 28, 2008 6:38 am
Location: http://dct700.ya.st/
Contact:

breakpont

Post by xcchips »

pablo tienes el msn para pasarmelo el mio es [email protected] agregame
PAPAUKA
Junior Member
Posts: 105
Joined: Tue Mar 31, 2009 10:25 am

Post by PAPAUKA »

xcchips wrote:Copyright http://www.usbjtag.com 2008,2009,2010
USB JTAG NT 0.28
-tapc
Bad command or script file name
-tap c
Eco :00000000
-tap a ffffffff
Eco :00C00000
-tap a ffffffff
Eco :08C00440
-detect
IDCODE 41C5501D
Motorola 17500QK
IMPCODE 40404000
EJTAG V1, V2.0
DMA not supoorted
Found Address= 90000000 CFI MT28W320
-bl
0 bpx=70144541
1 bpx=300d32d1
2 bpx=00030d81
3 bpx=d40802a0
4 bpm=00208102
5 bpm=45108056
-bpx 08c00440
-bl
0 * bpx=08c00440
1 bpx=300d32d1
2 bpx=00030d81
3 bpx=d40802a0
4 bpm=00208102
5 bpm=45108056
-g
-r
Register can not be set

no works for me


-tap c
Eco :00000000
-tap a ffffffff
Eco :08C00440
-detect
IDCODE 41C5501D
Motorola 17500QK
IMPCODE 40404000
EJTAG V1, V2.0
DMA (Acceso Directo De Memoria) No Compartible
Dirección Encontrada= 90000000 MT28W320
-bl
Bad command
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

jommega wrote:no works for me


-tap c
Eco :00000000
-tap a ffffffff
Eco :08C00440
-detect
IDCODE 41C5501D
Motorola 17500QK
IMPCODE 40404000
EJTAG V1, V2.0
DMA (Acceso Directo De Memoria) No Compartible
Dirección Encontrada= 90000000 MT28W320
-bl
Bad command
You need xml of DCT700 that enables the ICE.
nguyenanhhoang
Junior Member
Posts: 10
Joined: Wed Jun 24, 2009 11:23 am

Post by nguyenanhhoang »

Can I set the PC back to boot address (on-fly) to start to debug?

BTW, what registers which you modify when you do tap c; tap a ffffffff?
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

nguyenanhhoang wrote:Can I set the PC back to boot address (on-fly) to start to debug?

BTW, what registers which you modify when you do tap c; tap a ffffffff?
When do tap it force the reset and to debug on mode. No register changed.

You can do this
tap c
tap a ffffffff
(see debug on)
bpx (address you want to stop)
Locked

Who is online

Users browsing this forum: No registered users and 11 guests