Recent Posts
Pages: 1 ... 6 7 [8] 9 10
71
Found some interesting info here:
http://hardware.wikinet.org/wiki/BCM7405The BCM7405 contains three 16550A UARTs at the following addresses:
0x10400b00 - 0x10400b3f : UART 1
0x10400b40 - 0x10400b7f : UART 2
0x10400b80 - 0x10400bbf : UART 3
It says this ET9000 device also uses the same Broadcom chip so may be similiar to what is described here:
http://hardware.wikinet.org/wiki/ET9000Boot process
Start executing instructions at 0xbfc00000 (boot flash, contains bootloader based on Broadcom CFE).
Initialize early boot console at UART0.
Basic CPU / system setup.
Start Broadcom CFE.
Search for flash image on external USB drive.
Offer flashing boot flash or NAND flash if flash image was found.
Load kernel in GZ compressed ELF format from NAND partition nandflash0.kernel.
Execute Linux kernel.
Load AES encrypted Broadcom drivers.
Run Enigma2 STB firmware.
72
Been thinking about this the last few days..
The main chip on this is the same as the DM500HD receiver, I'd think both boxes would adhere to the same reference design or be very similar, seeing as most of the components are on a single chip.
Both boxes also appear to be little endian, so in theory it should be possible to use the DM500hd kernel / drivers on this box...
Due to jtag being disabled, I think the process of testing this would be more complicated than normal, not easy, but not impossible...
Any thoughts?
Mick
Have you tried the JTAg are you sure it's disabled? I only ask because there is mention of the JTAG points on another thread but no other info,
So does the CPU have a hypervisor type thing that restrics the code it runs?
Does this hardware run WinCE or embeded linux, If its windows I don't think I want to waste my time on it.
73
Hi peeps, i decided to see if i could gain BTfirmware, by hooking up my box to a work BTBB connection with a Btvision account active on it. Got the box to boot up great, interrupted the BB connection and box promptly sulked. Now my Brother has BTvision black box, with a working BTvision account and his box will boot WITHOUT a bt BB connection. His box is running very different firmware to ours and it is running linux. Now for the nasty Bit, we called BTvision's ''help'' line to explain that we had bought a box on ebay so he could use it as multiroom, (BT dont support this but lots of people do it) so we gave them the box mac code and everything else the tech asked for so we could download the latest firmware for it. Tried to convince the box on more than one occasion to download the latest firmware, and all it does it reload the windows CE. When explained this to the ''vision tech'' his response was, only boxes linked to the account will get the new firmware which allows the box to boot without the BB connection and allows an epg over the air. When asked why, the response we got was ''We know there are lots of unused vision boxes out there, thus having them still locked to our system will mean people will have to come back to BT to get the box to work''
So it seems that to get the latest firmware that allows the box to boot and run without a BB connection to BT, would be to get a box already ''opened'' on the new firmware. The vision tech did say off the record that eventually all the black BTvision boxes would be unlocked as they are going to be un workable when they start streaming everything over fiber, and totally moving over to youview.
74
Last post by is0-mick - 23. Mar 2013, 21:05
I believe the bcm range of chips can have the jtag interface "passworded" so it will only unlock with a certain command / key sequence.
I did have a poke around with a bcm7335, which would only give a response when set to jtag mode, and I got nothing with Ejtag mode. (there are jumpers to select).
Mick
75
Last post by merkin - 16. Mar 2013, 19:18
By spec, if jtag device has IDCODE then its mandatory for the register to be loaded when tap is reset. If no IDCODE than BYPASS register is loaded. This means TDI is not needed to read IDCODE, but other tap commands will not work.
Btw in my previous post I meant to say TDO in ejtag mode .
76
Last post by jane - 16. Mar 2013, 07:19
In jtag mode you can read IDCODE, but nothing else...which leads me to believe TDI is disabled.
In ejtag mode output from TDI is always 1.[/quote
if the JTAG were disabled, I would not EVEN be able to read IDCODE, I think.And what if the Broadcom's CPU only response in a NON standard ways?
77
Last post by merkin - 16. Mar 2013, 01:43
The full datasheet and bcm97405 development board schematics can be found on web.
It can be configured for three different modes via stapping resistors.
In normal mode output from TDO is always 0.
In jtag mode you can read IDCODE, but nothing else...which leads me to believe TDI is disabled.
In ejtag mode output from TDI is always 1.
YMMV, its possible the manufacturer of your device did not disable the debug module, or blow any OTP fuses.
78
Last post by jane - 15. Mar 2013, 18:55
Has anyone tried to use JTAG with Broadcom 7405 or 7401 chips?
79
Last post by merkin - 15. Mar 2013, 05:16
What gpu chipset you use?...I am using gtx460.
smd515 uses 2.7.147.0 mrua, is there chance that compiling sample apps from different mrua(2.7.127.0) will run on smd515?
80
Last post by dobo66 - 13. Mar 2013, 07:53
Success. Linux on the x300t, playing a mp3 file. With sound !!!!
I see you have great siccess with linux.
Cool Job !
Unfortunately I'm not .
I booted diferent distribution of Linux but there isn't any audio or video.
Could you explain where I can get working linux kernel drivers em8xxx.ko, llad.ko for 2.6.15 and coresponding xloads.
My box is kmm8006.
I will be happy for someone to help me get this box running linux.
Pages: 1 ... 6 7 [8] 9 10
