S8000 jtag pinouts - GSM-Forum

ShadowmanX · 10-24-2009, 14:25

Hi all,
Please share somebody samsung GT-S8000 jtag pinouts.. I have found nTRST , RTCK, GND, VREF, TDO, but I can't find other pinouts because S3C6410 CPU has two modes: "JTAG peripherals" and "JTAG ARM1176" and I don't know how to switch CPU PIN "XJDBGSEL" in to state "1" to connect in arm core mode...
maybe some1 has original JTAG adpter from samsung - highres photos of this tool can help also..

I can exchange other models jtag pinouts which i have discovered.. F480, U900, I900 phone and pda...

Br
Shadowman

dopi7 · 11-17-2009, 20:42

Hi ShadowmanX,
did you succeed in finding out the JTAG pinout of S8000? I tried to figure it out by myself but did not get much further than locating possible connection pads on the PCB near the USB connector. (see images http://www.flickr.com/photos/44723902@N02/4112626906/ , http://www.flickr.com/photos/44723902@N02/4111853123 ).
Cheers,
Dopi

hoang · 11-18-2009, 05:00

i have jtag pinout for S8000 both MSM and S3C6410, contact me for exchange!

ShadowmanX · 11-18-2009, 08:52

Quote:

Originally Posted by dopi7

Hi ShadowmanX,
did you succeed in finding out the JTAG pinout of S8000? I tried to figure it out by myself but did not get much further than locating possible connection pads on the PCB near the USB connector. (see images http://www.flickr.com/photos/44723902@N02/4112626906/ , http://www.flickr.com/photos/44723902@N02/4111853123 ).
Cheers,
Dopi

I'm not sure that is jtag pinouts...

dopi7 · 11-18-2009, 10:35

Quote:

Originally Posted by ShadowmanX

I'm not sure that is jtag pinouts...

I might be wrong. The pads I spotted could also be related to some other factory testing. I was just expecting the JTAG connection somewhere on the PCB. The micro USB connector leaves very little room for JTAG.

Where did you find nTRST , RTCK, GND, VREF, TDO?

Cheers,
Dopi

ShadowmanX · 11-18-2009, 11:50

Quote:

Originally Posted by dopi7

I might be wrong. The pads I spotted could also be related to some other factory testing. I was just expecting the JTAG connection somewhere on the PCB. The micro USB connector leaves very little room for JTAG.

Where did you find nTRST , RTCK, GND, VREF, TDO?

Cheers,
Dopi

near vibro soldering pads is not soldered connector 10 pins.. possible that there is ..

hoang · 11-21-2009, 07:14

Quote:

Originally Posted by ShadowmanX

near vibro soldering pads is not soldered connector 10 pins.. possible that there is ..

MSM jtag is in both side near USB port!

ShadowmanX · 11-21-2009, 08:42

Quote:

Originally Posted by hoang

MSM jtag is in both side near USB port!

but there is n othing to do with MSM

if phone dead - must be rewritten S3C6410 *.elf

dopi7 · 11-21-2009, 13:34

Quote:

Originally Posted by ShadowmanX

but there is n othing to do with MSM

if phone dead - must be rewritten S3C6410 *.elf

Does this mean the modem/baseband has a separate flash-rom? Can I change the S3C6410 bootloader without changing the MSM bootloader or are both bootloaders in the same chip just at a different location?

I am just curious because I was thinking about compiling a new bootloader (e.g. u-boot) to boot a different OS. This would be difficult if the S3C6410 bootloader needs to init the MSM, too. If the MSM boots separately there is no need to worry about this ...

Cheers,
Dopi

ShadowmanX · 11-21-2009, 18:35

Quote:

Originally Posted by dopi7

Does this mean the modem/baseband has a separate flash-rom? Can I change the S3C6410 bootloader without changing the MSM bootloader or are both bootloaders in the same chip just at a different location?

I am just curious because I was thinking about compiling a new bootloader (e.g. u-boot) to boot a different OS. This would be difficult if the S3C6410 bootloader needs to init the MSM, too. If the MSM boots separately there is no need to worry about this ...

Cheers,
Dopi

I'm think that MSM works only as baseband processor and it is controled by S3C6410.. I'm not sure.. about two bootloaders: just look in original firmware.. it is different from other MSM based phones..

BOOT in firmware:
boot_loader.mbn for S3C6410
dbl.mbn for MSM6246

dopi7 · 11-22-2009, 13:37

Quote:

Originally Posted by ShadowmanX

I'm think that MSM works only as baseband processor and it is controled by S3C6410.. I'm not sure.. about two bootloaders: just look in original firmware.. it is different from other MSM based phones..

BOOT in firmware:
boot_loader.mbn for S3C6410
dbl.mbn for MSM6246

I think you are right.This is what I found out about the S8000 design, too. For Qualcomm only (MSM/QSC) solutions there could be just a single bootloader. But I am also not 100% sure about this.

One question is still open. Can you flash the MSM bootloader/firmware using the S3C6410 JTAG interface? Does anyone know this?

Cheers,
Dopi

hoang · 11-22-2009, 16:50

Quote:

Originally Posted by ShadowmanX

but there is n othing to do with MSM

if phone dead - must be rewritten S3C6410 *.elf

PDA jtag pinout for S8000 is located at HEA701 conector

1 - Vcc
2 - TCK
3 - nTRST
4 - RTCK
5 - TDI
6 - TDO
7 - TMS
8 - SYSRST

dopi7 · 11-23-2009, 11:19

Quote:

Originally Posted by hoang

PDA jtag pinout for S8000 is located at HEA701 conector

1 - Vcc
2 - TCK
3 - nTRST
4 - RTCK
5 - TDI
6 - TDO
7 - TMS
8 - SYSRST

Thanks for posting this info. How about Pin 9+10? Are both GND?

Cheers,
Dopi

hoang · 11-23-2009, 11:40

Quote:

Originally Posted by dopi7

Thanks for posting this info. How about Pin 9+10? Are both GND?

Cheers,
Dopi

all the rest are GND, easy checking by multi-meter

atomizasser · 11-24-2009, 23:59

Quote:

One question is still open. Can you flash the MSM bootloader/firmware using the S3C6410 JTAG interface? Does anyone know this?

Anyone can resolve this question? Is a million question? heheheh
With JTAG is possible extract all firmware and boot and compile new boot with for example with I8000 firmware?

10-24-2009, 14:25	#1 (permalink)
ShadowmanX Freak Poster Join Date: Jul 2004 Age: 44 Posts: 298 Member: 71526 Status: Offline Thanks Meter: 48	S8000 jtag pinouts Hi all, Please share somebody samsung GT-S8000 jtag pinouts.. I have found nTRST , RTCK, GND, VREF, TDO, but I can't find other pinouts because S3C6410 CPU has two modes: "JTAG peripherals" and "JTAG ARM1176" and I don't know how to switch CPU PIN "XJDBGSEL" in to state "1" to connect in arm core mode... maybe some1 has original JTAG adpter from samsung - highres photos of this tool can help also.. I can exchange other models jtag pinouts which i have discovered.. F480, U900, I900 phone and pda... Br Shadowman

11-17-2009, 20:42	#2 (permalink)
dopi7 Junior Member Join Date: Nov 2009 Location: www.jetdroid.org Posts: 21 Member: 1163371 Status: Offline Thanks Meter: 0	S8000 jtag pinouts Hi ShadowmanX, did you succeed in finding out the JTAG pinout of S8000? I tried to figure it out by myself but did not get much further than locating possible connection pads on the PCB near the USB connector. (see images http://www.flickr.com/photos/44723902@N02/4112626906/ , http://www.flickr.com/photos/44723902@N02/4111853123 ). Cheers, Dopi

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
JTAG pinout HTC Tornado	Quarx2000	HTC & Smartphones ( WM Without Touch)	0	04-20-2008 12:51
Need Jtag Pinouts For Newgen C620.	DUSKnenixs	Various	0	08-18-2007 02:23
I'm Need MYZ-55 correct jtag pinout and testpoint!!	volkangsm2	ARM9 BASED M62 / M62+	2	01-21-2006 17:35
Help me with JTAG pinout	Digirus	Various CDMA/TDMA Cell Phones	0	12-05-2005 09:21
Looking for Audiovox 8910 Jtag pinout	pallab	Various CDMA/TDMA Cell Phones	0	08-11-2005 08:04

11-18-2009, 05:00	#3 (permalink)
hoang No Life Poster Join Date: Mar 2002 Location: AnyClient Age: 44 Posts: 1,981 Member: 10485 Status: Offline Sonork: 100.66876 Thanks Meter: 396	i have jtag pinout for S8000 both MSM and S3C6410, contact me for exchange!