bcm7325

JTAG on Dish Receivers.
morpheus02
Junior Member
Posts: 2
Joined: Fri Jun 11, 2010 5:06 am

Post by morpheus02 »

connector diagram jtag is standard EJTAG the problem lies in that the boot is disabled, or you can enable the JTAG boundary scan by placing a resistor on pin ce_0 or ce_1 to gnd.
today when I get home place the pin.
merkin
Junior Member
Posts: 246
Joined: Thu Jun 28, 2007 8:49 pm

Post by merkin »

I have tried this in past with similar bcm7413 and bcm7405 and posted the results
With jtag enabled you get "IDCODE"
With ejtag enabled you get FFFFFFFF
With normal mode enabled you get 00000000

According to the datasheets there is a challenge-response mechanism to enable/disable ejtag.
Also have a look stb-linux 2.6.18 for a file called 999-brcmstb-bsp-new-files.patch. It lists all of the registers of bcm7405, and there are some OTP ones, also jtag and ejtag registers which may be useful!

We can get IDCODE in jtag mode, so boundary scan could be used to read flash, but it appears TDI is still disabled even in jtag mode. All tap commands result in 00000000.
p.s. still get IDCODE even though TDI is disabled because IDCODE is loaded to tap upon reset.
usbbdm
Junior Member
Posts: 8979
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

I got one of the box and I find some interesting point. This chip might be possible to be added.
Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests