Samsung YP-G70 JTAG pinout - GSM-Forum

pitka · 01-14-2012, 20:08

Hi all,

see for YPG70 jtag pinout picture :
Platform : SC5C111AAO-A040 / ARM C111A
Memory : 4Gb

http://http://imageshack.us/photo/my-images/830/g70pinout.jpg/

Riff recently doesnt fully support this device.
See log, memory isnt correctly recognized :

Resurrection sequence started.
Establish communication with the phone...OK
Initializing internal hardware configuration...OK
Uploading resurrector data into memory...OK
Starting communication with resurrector...OK

Detected an Initialized FLASH1 Chip, ID: 0xF000/0xF001

Reading FLASH1 address space from 0x0000000000 to 0x000000DFFF
ERROR: Read Failed with Error Code: 0x27. Terminating at 0x0000000000

When I used I9000 :
Detected dead body ID: 0x1BA00477
and
Following devices are found on the JTAG chain:
Device on TAP #0: ID = 0x1BA00477, IR Length = 0x04 bits
Total IR length: 0x0004 bits

By direct memory access :
Open serial port...OK
Connecting to the RIFF Box...OK
Firmware Version: 1.30, JTAG Manager Version: 1.38
Selected Target: [CORTEX-A8, 2.80V, TAP0]

Connecting to the CORTEX-A8 target...OK
Detected dead body ID: 0x1BA00477 - IGNORED!
Set I/O Voltage reads as 2.79V, TCK Frequency is 10 MHz

Resetting and Halting target...OK

R0 = 0xD0037000 R6 = 0x00000001 R12 = 0xFF000033
R1 = 0x00000064 R7 = 0x00000002 R13 = 0xD0037CD0
R2 = 0x00000000 R8 = 0x00000102 R14 = 0x0000627C
R3 = 0x00000002 R9 = 0x00000000 R15 = 0x0000629C
R4 = 0x00000065 R10 = 0x00000008 CPSR = 0x20000153
R5 = 0x00000000 R11 = 0x00000002

Connecting to the OneNAND Memory based at 0xB0000000...OK
Detected an Initialized FLASH1 Chip, ID: 0xF000/0xF001 (16MB)

As you can see, memory size isnt well detected.

But when I used some random size, sometimes is able to detect but unstable :
Open serial port...OK
Connecting to the RIFF Box...OK
Firmware Version: 1.30, JTAG Manager Version: 1.38
Selected Target: [CORTEX-A8, 2.80V, TAP0]

Connecting to the CORTEX-A8 target...OK
Detected dead body ID: 0x1BA00477 - IGNORED!
Set I/O Voltage reads as 2.79V, TCK Frequency is 10 MHz

Resetting and Halting target...OK

R0 = 0xD0037000 R6 = 0x00000001 R12 = 0xFF000094
R1 = 0x00000126 R7 = 0x00000002 R13 = 0xD0037CD0
R2 = 0x00000000 R8 = 0x00000102 R14 = 0x0000627C
R3 = 0x00000002 R9 = 0x00000000 R15 = 0x0000629C
R4 = 0x00000127 R10 = 0x00000008 CPSR = 0x20000153
R5 = 0x00000000 R11 = 0x00000002

Connecting to the OneNAND Memory based at 0x20000000...OK
Detected an Initialized FLASH1 Chip, ID: 0x885C/0x6351 (512MB)

During read always error :
Reading directly the OneNAND Memory based at 0x20000000...FAILED
ERROR: NAND Read Page (at 0x0000001000) failed to pass the ECC check.

Hope that RIFF will support

pitka · 01-14-2012, 20:13

ImageShack® - Online Photo and Video Hosting

connexion2005 · 01-16-2012, 01:35

This model appears to store all files on the 8GB EMMC chip rather than having a dedicated oneNAND like many Samsung models. It does however appear to initialize some small 16MB zone that could hold bootloader data as well.

pitka · 01-17-2012, 21:02

You are probably right, but it would be great to have possibility to read this 16MB area as well.
I can confirm that eMMC contains bootloader.

**legija** · 01-18-2012, 11:14

Quote:

Originally Posted by pitka

You are probably right, but it would be great to have possibility to read this 16MB area as well.
I can confirm that eMMC contains bootloader.

Hi,
Contact me via Sonork, please. We may need You to perform some tests with us.

minkoi · 03-10-2012, 16:16

please Legija pinout for YP-G70 CB/XEH
thanks.

connexion2005 · 03-10-2012, 17:44

Is it different? Please post picture of your board.

Sent from my Galaxy Nexus using Tapatalk

minkoi · 03-10-2012, 19:07

Quote:

Originally Posted by connexion2005

Is it different? Please post picture of your board.

Sent from my Galaxy Nexus using Tapatalk

yes its different. tomorow i post picture of my board.
regards

minkoi · 03-13-2012, 10:17

Quote:

Originally Posted by minkoi

yes its different. tomorow i post picture of my board.
regards

yes i repair YP-G70 with Riff 100% thanks....
after repar with Riff flash(odin) G70XXKPF-rooted-rj8.tar.md5

elfadelmed · 11-15-2014, 15:41

Please help me for jtag yp-g70 thanks

01-14-2012, 20:08	#1 (permalink)
pitka Junior Member Join Date: Jun 2009 Posts: 34 Member: 1057960 Status: Offline Thanks Meter: 6	Samsung YP-G70 JTAG pinout Hi all, see for YPG70 jtag pinout picture : Platform : SC5C111AAO-A040 / ARM C111A Memory : 4Gb http://http://imageshack.us/photo/my-images/830/g70pinout.jpg/ Riff recently doesnt fully support this device. See log, memory isnt correctly recognized : Resurrection sequence started. Establish communication with the phone...OK Initializing internal hardware configuration...OK Uploading resurrector data into memory...OK Starting communication with resurrector...OK Detected an Initialized FLASH1 Chip, ID: 0xF000/0xF001 Reading FLASH1 address space from 0x0000000000 to 0x000000DFFF ERROR: Read Failed with Error Code: 0x27. Terminating at 0x0000000000 When I used I9000 : Detected dead body ID: 0x1BA00477 and Following devices are found on the JTAG chain: Device on TAP #0: ID = 0x1BA00477, IR Length = 0x04 bits Total IR length: 0x0004 bits By direct memory access : Open serial port...OK Connecting to the RIFF Box...OK Firmware Version: 1.30, JTAG Manager Version: 1.38 Selected Target: [CORTEX-A8, 2.80V, TAP0] Connecting to the CORTEX-A8 target...OK Detected dead body ID: 0x1BA00477 - IGNORED! Set I/O Voltage reads as 2.79V, TCK Frequency is 10 MHz Resetting and Halting target...OK R0 = 0xD0037000 R6 = 0x00000001 R12 = 0xFF000033 R1 = 0x00000064 R7 = 0x00000002 R13 = 0xD0037CD0 R2 = 0x00000000 R8 = 0x00000102 R14 = 0x0000627C R3 = 0x00000002 R9 = 0x00000000 R15 = 0x0000629C R4 = 0x00000065 R10 = 0x00000008 CPSR = 0x20000153 R5 = 0x00000000 R11 = 0x00000002 Connecting to the OneNAND Memory based at 0xB0000000...OK Detected an Initialized FLASH1 Chip, ID: 0xF000/0xF001 (16MB) As you can see, memory size isnt well detected. But when I used some random size, sometimes is able to detect but unstable : Open serial port...OK Connecting to the RIFF Box...OK Firmware Version: 1.30, JTAG Manager Version: 1.38 Selected Target: [CORTEX-A8, 2.80V, TAP0] Connecting to the CORTEX-A8 target...OK Detected dead body ID: 0x1BA00477 - IGNORED! Set I/O Voltage reads as 2.79V, TCK Frequency is 10 MHz Resetting and Halting target...OK R0 = 0xD0037000 R6 = 0x00000001 R12 = 0xFF000094 R1 = 0x00000126 R7 = 0x00000002 R13 = 0xD0037CD0 R2 = 0x00000000 R8 = 0x00000102 R14 = 0x0000627C R3 = 0x00000002 R9 = 0x00000000 R15 = 0x0000629C R4 = 0x00000127 R10 = 0x00000008 CPSR = 0x20000153 R5 = 0x00000000 R11 = 0x00000002 Connecting to the OneNAND Memory based at 0x20000000...OK Detected an Initialized FLASH1 Chip, ID: 0x885C/0x6351 (512MB) During read always error : Reading directly the OneNAND Memory based at 0x20000000...FAILED ERROR: NAND Read Page (at 0x0000001000) failed to pass the ECC check. Hope that RIFF will support

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
needed pinout for carkit(N61xx)	mobileinfo	Nokia Hardware & Hardware Repair	2	07-23-2013 02:41
8810 pinout??	timitiz	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	2	06-11-2012 11:10
Please Help, Pinout of N8810	mobileinfo	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	5	06-30-2010 15:53
8810 pinouts for dejan flasher !?!?!?	makona	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	0	08-03-2001 04:39
8850 pinouts	MDR	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	4	12-30-2000 01:23

01-14-2012, 20:13	#2 (permalink)
pitka Junior Member Join Date: Jun 2009 Posts: 34 Member: 1057960 Status: Offline Thanks Meter: 6	ImageShack® - Online Photo and Video Hosting

01-16-2012, 01:35	#3 (permalink)
connexion2005 Freak Poster Join Date: Jan 2011 Posts: 355 Member: 1501506 Status: Offline Thanks Meter: 47	This model appears to store all files on the 8GB EMMC chip rather than having a dedicated oneNAND like many Samsung models. It does however appear to initialize some small 16MB zone that could hold bootloader data as well.

01-17-2012, 21:02	#4 (permalink)
pitka Junior Member Join Date: Jun 2009 Posts: 34 Member: 1057960 Status: Offline Thanks Meter: 6	You are probably right, but it would be great to have possibility to read this 16MB area as well. I can confirm that eMMC contains bootloader.

03-10-2012, 16:16	#6 (permalink)
minkoi No Life Poster Join Date: Feb 2004 Location: Zenica - BiH Posts: 1,078 Member: 55342 Status: Offline Sonork: 100.1619358 Thanks Meter: 281	please Legija pinout for YP-G70 CB/XEH thanks.

03-10-2012, 17:44	#7 (permalink)
connexion2005 Freak Poster Join Date: Jan 2011 Posts: 355 Member: 1501506 Status: Offline Thanks Meter: 47	Is it different? Please post picture of your board. Sent from my Galaxy Nexus using Tapatalk

11-15-2014, 15:41	#10 (permalink)
elfadelmed Freak Poster Join Date: Sep 2004 Location: Rabat Age: 54 Posts: 193 Member: 80858 Status: Offline Sonork: 100.1601506 Thanks Meter: 8	Please help me for jtag yp-g70 thanks