GSM Shop GSM Shop
GSM-Forum  

Welcome to the GSM-Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features.
Only registered members may post questions, contact other members or search our database of over 8 million posts.

Registration is fast, simple and absolutely free so please - Click to REGISTER!

If you have any problems with the registration process or your account login, please contact contact us .

Go Back   GSM-Forum > Other Gsm/Mobile Related Forums > GSM Programming & Reverse Engineering


GSM Programming & Reverse Engineering Here you can post all Kind of GSM Programming and Reverse Engineering tools and Secrets.

Reply
 
LinkBack Thread Tools Display Modes
Old 03-18-2010, 04:32   #31 (permalink)
Junior Member
 
Join Date: Oct 2004
Location: Thailand. Tel.+66868618833
Age: 69
Posts: 23
Member: 85366
Status: Offline
Thanks Meter: 17
Arrow Wiggler


Well, I used to use Wiggler JTAG with OCD Flash Programmer software way back in the years 2004 - 2006. At that time most of the Wiggler interface schematics available on the Web were not correct so I lost much time to build those devices but none of them appeared to work unfortunately.

Then I purchased Banyan-U ARM debugger interface from China (from Mr. Jason) and used it for 5 years as a debugger and flash memory programmer tool.

This is really a great product, I enjoyed using it very much.

I also used DigiView logic analyzer to debug JTAG communications between the target board and the JTAG interface.

It cost me nearly $400.- including the shipping cost. It is working perfectly but now Mr. Jason is no longer updating this excellent product any more. So it has become a bit outdated and I had no choice other than migrating to J-Link.

J-Link is an excellent product I believe, however the new JLink.EXE version 4.12 is not without some bugs. If you feel that something is wrong you have to restart this program and continue your work
Attached Images
File Type: jpg Banyan 001.jpg (79.8 KB, 386 views)
File Type: jpg Banyan 014.jpg (105.6 KB, 327 views)
File Type: jpg Banyan 008.jpg (105.7 KB, 327 views)

Last edited by De Fault; 03-18-2010 at 04:41.
  Reply With Quote
The Following 2 Users Say Thank You to De Fault For This Useful Post:
Old 03-18-2010, 04:51   #32 (permalink)
Junior Member
 
Join Date: Oct 2004
Location: Thailand. Tel.+66868618833
Age: 69
Posts: 23
Member: 85366
Status: Offline
Thanks Meter: 17
Arrow Debugging JTAG communications with logic analyzer

We can debug JTAG communications between the target board and the JTAG interface with the help of a logic analyzer. I am using DigiView logic analyzer.
Attached Images
File Type: jpg DigiView_1.jpg (48.7 KB, 302 views)
  Reply With Quote
The Following User Says Thank You to De Fault For This Useful Post:
Old 01-22-2011, 10:49   #33 (permalink)
No Life Poster
 
king_of_rajasthan's Avatar
 
Join Date: Feb 2006
Location: Rajasthan
Age: 41
Posts: 563
Member: 227647
Status: Offline
Sonork: 100.1603662
Thanks Meter: 311
If you can't find the jtag pinouts for your phone model,you have to find it by yourself.It is also easy,not difficult.
For example:
We know a CPU whose jtag pinouts are like as below.
AA14 - NTRST
P11 - TMS
Y13 - TCK
N11 - RTCK
AD19 - RST_n
AC16 - TDI
Y14 - TDO
OK,you can desolder the CPU from the phone board firstly.Then look for where its AA14,P11,Y13,N11,AD19,AC16,Y14 are connected to by multimeter.You will get the right jtag pinouts for this model in this way.When you find it,you can solder the CPU back to the phone board.
  Reply With Quote
Old 01-22-2011, 10:52   #34 (permalink)
No Life Poster
 
king_of_rajasthan's Avatar
 
Join Date: Feb 2006
Location: Rajasthan
Age: 41
Posts: 563
Member: 227647
Status: Offline
Sonork: 100.1603662
Thanks Meter: 311
Thumbs up

Quote:
Originally Posted by king_of_rajasthan View Post
dear thanks for reply but the most important thing is " i dont wanna buy jtagfinder "

i wanna kno the way by which the jtag finder is working

i wanna know how to calculate by multi-meter


& here is the way ...........



If you can't find the jtag pinouts for your phone model,you have to find it by yourself.It is also easy,not difficult.
For example:
We know a CPU whose jtag pinouts are like as below.
AA14 - NTRST
P11 - TMS
Y13 - TCK
N11 - RTCK
AD19 - RST_n
AC16 - TDI
Y14 - TDO
OK,you can desolder the CPU from the phone board firstly.Then look for where its AA14,P11,Y13,N11,AD19,AC16,Y14 are connected to by multimeter.You will get the right jtag pinouts for this model in this way.When you find it,you can solder the CPU back to the phone board.
  Reply With Quote
Old 01-22-2011, 11:33   #35 (permalink)
Junior Member
 
Join Date: Dec 2004
Age: 40
Posts: 39
Member: 101829
Status: Offline
Thanks Meter: 0
Does someone know which is the good software for J-link to deal with Qualcomm series ( internal and external memory) except PSAS (QMAT)?

I ask for that coz I'm working with MSM6290 but PSAS does not support that kind of CPU.

Thanks in advance.
  Reply With Quote
Old 02-15-2011, 11:52   #36 (permalink)
Product Supporter
 
dr_moosavi's Avatar
 
Join Date: Jul 2008
Location: iran-shiraz
Posts: 730
Member: 814775
Status: Offline
Sonork: 100.1587334
Thanks Meter: 973
Points/Wires Basic Info

  • Points/Wires Basic Info
  • Points/Wires info
  • Name
  • Function
  • Connections

VCC
Power - Supplies VCC (5 V, 10 mA, typically) to the cable.
To target system VCC

GND
Ground - Supplies ground reference to the cable.
To target system ground

TCK
Test Clock - Drives the test logic for all devices on a JTAG chain.
Connect to system TCK pin.

TDO
Test Data Output - data from the target system is read at this pin.
Connect to system TDO pin.

TDI
Test Data Input - this signal is used to transmit serial test instructions and data.
Connect to system TDI pin.

TMS
Test Mode Select - this signal is decoded by the JTAG state machine to control test operations.
Connect to system TMS pin.

Note TRST is an optional pin in the JTAG (IEEE 1149.1) specification, and is not used by XC9500 CPLDs. If any of your non-Xilinx parts have a TRST pin, the pin should be connected to VCC.
  Reply With Quote
The Following User Says Thank You to dr_moosavi For This Useful Post:
Old 02-15-2011, 11:55   #37 (permalink)
Product Supporter
 
dr_moosavi's Avatar
 
Join Date: Jul 2008
Location: iran-shiraz
Posts: 730
Member: 814775
Status: Offline
Sonork: 100.1587334
Thanks Meter: 973
What is PS_HOLD ?

What is PS_HOLD ?

The idea is If you can’t keep phone powered on PS_HOLD will do it for you
PS_HOLD is a Test Point that designed to keep cpu powered up while supplying a battery power .

Some Power Management IC’s are not able to hold dead handsets powered up and it affects operating while JTAGGing them that’s why they have PS_HOLD Points

It is required to make PS_HOLD Connection if it is exist on the pcb just to make sure everything will be stable while you are repairing the phone

There is another way to keep the phone up is : Keep pressing the power button !

How to use :

Dead Qualcomm handsets sometimes require PS_HOLD Connection on the board and purpose of this powering up the phone’s cpu by force

Basic connection is connecting PS_HOLD to VBAT with a resistor .

What is the Value of resistor that you should use :

Since VBAT Source differs on different phones which average is 3.6V to 4.2V
we should use something between 1K and 4.7K

Source : Master Manual in support area!

My question is Can you tell me if something you do not understand , or will that be better if i make PS_HOLD connections with pictures ?

VREF is Voltage displayed top of the software shows some voltage values .
  Reply With Quote
The Following User Says Thank You to dr_moosavi For This Useful Post:
Old 03-11-2011, 22:18   #38 (permalink)
No Life Poster
 
aikonmani's Avatar
 
Join Date: Jul 2006
Location: INDIA,TAMILNADU,PATTUKKOTTAI
Posts: 1,082
Member: 304090
Status: Offline
Thanks Meter: 210
What DCC is

What DCC is....
Digital Command Control ...... READ MORE.....FROM HERE...

DCC Tutorial (Basic System) - DCCWiki
  Reply With Quote
Old 05-20-2011, 19:40   #39 (permalink)
Cheater -Don't Deal with him-
 
::gsmcoder::'s Avatar
 
Join Date: Aug 2005
Location: /%%temp%%.;adb
Posts: 3,652
Member: 172434
Status: Offline
Sonork: 100.161280
Thanks Meter: 577
very good post, currently fighting to get jtag inputs for iphone baseband processor
  Reply With Quote
Old 05-22-2011, 07:59   #40 (permalink)
No Life Poster
 
king_of_rajasthan's Avatar
 
Join Date: Feb 2006
Location: Rajasthan
Age: 41
Posts: 563
Member: 227647
Status: Offline
Sonork: 100.1603662
Thanks Meter: 311
Quote:
Originally Posted by gsmxpert View Post
very good post, currently fighting to get jtag inputs for iphone baseband processor

which cpu is in that phone
please post detail
  Reply With Quote
Old 10-31-2011, 08:47   #41 (permalink)
No Life Poster
 
rogerboogie's Avatar
 
Join Date: Jan 2005
Location: the earth
Age: 41
Posts: 1,037
Member: 103024
Status: Offline
Thanks Meter: 616
Quote:
Originally Posted by king_of_rajasthan View Post
which cpu is in that phone
please post detail
here are some info

a4 cpu inside iphone 4

Apple A4 - Wikipedia, the free encyclopedia

a5 cpu inside iphone 4s & ipad 2

Apple A5 - Wikipedia, the free encyclopedia

also for iphone 4 baseband processor

XMM 6180 - The iPhone Wiki

and iphone 4s baseband processor

MDM6610 - The iPhone Wiki

hope this can help to develop jtag solution
  Reply With Quote
Old 10-11-2012, 16:18   #42 (permalink)
Freak Poster
 
nost's Avatar
 
Join Date: Nov 2005
Location: Colombia
Age: 48
Posts: 392
Member: 197360
Status: Offline
Thanks Meter: 25
boot, dump and firmware

well, another side of the coin, at less in mobile phones are bootloader, dumps and firmwares. teams make work for technicians so easy (i have ort jtag), but do you know tutos about how can we make our full flash, firms and boot-loaders?
  Reply With Quote
Old 11-24-2012, 02:45   #43 (permalink)
Freak Poster
 
Join Date: Jan 2001
Location: Jakarta,DKI,indonesia
Posts: 485
Member: 3179
Status: Offline
Thanks Meter: 142
need help,maybe some one have blackberry firmware dump from jtag,i need it

thanks
  Reply With Quote
Old 12-04-2012, 03:25   #44 (permalink)
No Life Poster
 
Join Date: Oct 2010
Location: Abidjan
Age: 38
Posts: 2,478
Member: 1418143
Status: Offline
Thanks Meter: 353
topic have no to stop .
luck ORT and RIFF come to make things easy for us now .
  Reply With Quote
Old 02-16-2013, 20:39   #45 (permalink)
No Life Poster
 
dicle_gsm's Avatar
 
Join Date: Jul 2007
Location: tr
Posts: 2,219
Member: 539148
Status: Offline
Thanks Meter: 2,174
good info thanks bro ..
  Reply With Quote
Reply

Bookmarks


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
What is the Self Test waqasmalik HWK 2 06-16-2007 16:22
What is version new Test Point SX1? controllerz E-Gold Based Phones 1 07-14-2005 22:46
Reflowing - what it is? (dry joints?) slider27 Hardware Repair by brands 4 06-26-2003 08:25
What is JTAG ??? Mitya Hardware Equipments for GSM 1 01-31-2003 23:52
What is the DSP test for on the B-phreaks stuff? Lonegunman Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) 4 03-11-2002 00:41

 



All times are GMT +1. The time now is 07:12.



Powered by Searchlight © 2024 Axivo Inc.
vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2024 DragonByte Technologies Ltd.
- GSM Hosting Ltd. - 1999-2023 -
Page generated in 0.27596 seconds with 10 queries

SEO by vBSEO