1 /***************************************************************************
2 * Copyright (C) 2009 by Simon Qian *
3 * SimonQian@SimonQian.com *
5 * This program is free software; you can redistribute it and/or modify *
6 * it under the terms of the GNU General Public License as published by *
7 * the Free Software Foundation; either version 2 of the License, or *
8 * (at your option) any later version. *
10 * This program is distributed in the hope that it will be useful, *
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
13 * GNU General Public License for more details. *
15 * You should have received a copy of the GNU General Public License *
16 * along with this program; if not, write to the *
17 * Free Software Foundation, Inc., *
18 * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
19 ***************************************************************************/
29 /* AVR_JTAG_Instructions */
30 #define AVR_JTAG_INS_LEN 4
31 // Public Instructions:
32 #define AVR_JTAG_INS_EXTEST 0x00
33 #define AVR_JTAG_INS_IDCODE 0x01
34 #define AVR_JTAG_INS_SAMPLE_PRELOAD 0x02
35 #define AVR_JTAG_INS_BYPASS 0x0F
36 // AVR Specified Public Instructions:
37 #define AVR_JTAG_INS_AVR_RESET 0x0C
38 #define AVR_JTAG_INS_PROG_ENABLE 0x04
39 #define AVR_JTAG_INS_PROG_COMMANDS 0x05
40 #define AVR_JTAG_INS_PROG_PAGELOAD 0x06
41 #define AVR_JTAG_INS_PROG_PAGEREAD 0x07
44 #define AVR_JTAG_REG_Bypass_Len 1
45 #define AVR_JTAG_REG_DeviceID_Len 32
47 #define AVR_JTAG_REG_Reset_Len 1
48 #define AVR_JTAG_REG_JTAGID_Len 32
49 #define AVR_JTAG_REG_ProgrammingEnable_Len 16
50 #define AVR_JTAG_REG_ProgrammingCommand_Len 15
51 #define AVR_JTAG_REG_FlashDataByte_Len 16
53 struct avrf_type avft_chips_info
[] =
55 // name, chip_id, flash_page_size, flash_page_num, eeprom_page_size, eeprom_page_num
56 {"atmega128", 0x9702, 256, 512, 8, 512},
59 int avr_jtag_sendinstr(struct jtag_tap
*tap
, uint8_t *ir_in
, uint8_t ir_out
);
60 int avr_jtag_senddat(struct jtag_tap
*tap
, uint32_t *dr_in
, uint32_t dr_out
, int len
);
62 int mcu_write_ir(struct jtag_tap
*tap
, uint8_t *ir_in
, uint8_t *ir_out
, int ir_len
, int rti
);
63 int mcu_write_dr(struct jtag_tap
*tap
, uint8_t *ir_in
, uint8_t *ir_out
, int dr_len
, int rti
);
64 int mcu_write_ir_u8(struct jtag_tap
*tap
, uint8_t *ir_in
, uint8_t ir_out
, int ir_len
, int rti
);
65 int mcu_write_dr_u8(struct jtag_tap
*tap
, uint8_t *ir_in
, uint8_t ir_out
, int dr_len
, int rti
);
66 int mcu_write_ir_u16(struct jtag_tap
*tap
, uint16_t *ir_in
, uint16_t ir_out
, int ir_len
, int rti
);
67 int mcu_write_dr_u16(struct jtag_tap
*tap
, uint16_t *ir_in
, uint16_t ir_out
, int dr_len
, int rti
);
68 int mcu_write_ir_u32(struct jtag_tap
*tap
, uint32_t *ir_in
, uint32_t ir_out
, int ir_len
, int rti
);
69 int mcu_write_dr_u32(struct jtag_tap
*tap
, uint32_t *ir_in
, uint32_t ir_out
, int dr_len
, int rti
);
70 int mcu_execute_queue(void);
72 /* avr program functions */
73 static int avr_jtag_reset(struct avr_common
*avr
, uint32_t reset
)
75 avr_jtag_sendinstr(avr
->jtag_info
.tap
, NULL
, AVR_JTAG_INS_AVR_RESET
);
76 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, reset
,AVR_JTAG_REG_Reset_Len
);
81 static int avr_jtag_read_jtagid(struct avr_common
*avr
, uint32_t *id
)
83 avr_jtag_sendinstr(avr
->jtag_info
.tap
, NULL
, AVR_JTAG_INS_IDCODE
);
84 avr_jtag_senddat(avr
->jtag_info
.tap
, id
, 0, AVR_JTAG_REG_JTAGID_Len
);
89 static int avr_jtagprg_enterprogmode(struct avr_common
*avr
)
91 avr_jtag_reset(avr
, 1);
93 avr_jtag_sendinstr(avr
->jtag_info
.tap
, NULL
, AVR_JTAG_INS_PROG_ENABLE
);
94 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0xA370, AVR_JTAG_REG_ProgrammingEnable_Len
);
99 static int avr_jtagprg_leaveprogmode(struct avr_common
*avr
)
101 avr_jtag_sendinstr(avr
->jtag_info
.tap
, NULL
, AVR_JTAG_INS_PROG_COMMANDS
);
102 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0x2300, AVR_JTAG_REG_ProgrammingCommand_Len
);
103 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0x3300, AVR_JTAG_REG_ProgrammingCommand_Len
);
105 avr_jtag_sendinstr(avr
->jtag_info
.tap
, NULL
, AVR_JTAG_INS_PROG_ENABLE
);
106 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0, AVR_JTAG_REG_ProgrammingEnable_Len
);
108 avr_jtag_reset(avr
, 0);
113 static int avr_jtagprg_chiperase(struct avr_common
*avr
)
117 avr_jtag_sendinstr(avr
->jtag_info
.tap
, NULL
, AVR_JTAG_INS_PROG_COMMANDS
);
118 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0x2380, AVR_JTAG_REG_ProgrammingCommand_Len
);
119 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0x3180, AVR_JTAG_REG_ProgrammingCommand_Len
);
120 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0x3380, AVR_JTAG_REG_ProgrammingCommand_Len
);
121 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0x3380, AVR_JTAG_REG_ProgrammingCommand_Len
);
125 avr_jtag_senddat(avr
->jtag_info
.tap
, &poll_value
, 0x3380, AVR_JTAG_REG_ProgrammingCommand_Len
);
126 if (ERROR_OK
!= mcu_execute_queue())
130 LOG_DEBUG("poll_value = 0x%04" PRIx32
"", poll_value
);
131 } while (!(poll_value
& 0x0200));
136 static int avr_jtagprg_writeflashpage(struct avr_common
*avr
, uint8_t *page_buf
, uint32_t buf_size
, uint32_t addr
, uint32_t page_size
)
138 uint32_t i
, poll_value
;
140 avr_jtag_sendinstr(avr
->jtag_info
.tap
, NULL
, AVR_JTAG_INS_PROG_COMMANDS
);
141 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0x2310, AVR_JTAG_REG_ProgrammingCommand_Len
);
143 // load addr high byte
144 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0x0700 | ((addr
>> 9) & 0xFF), AVR_JTAG_REG_ProgrammingCommand_Len
);
146 // load addr low byte
147 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0x0300 | ((addr
>> 1) & 0xFF), AVR_JTAG_REG_ProgrammingCommand_Len
);
149 avr_jtag_sendinstr(avr
->jtag_info
.tap
, NULL
, AVR_JTAG_INS_PROG_PAGELOAD
);
151 for (i
= 0; i
< page_size
; i
++)
155 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, page_buf
[i
], 8);
159 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0xFF, 8);
163 avr_jtag_sendinstr(avr
->jtag_info
.tap
, NULL
, AVR_JTAG_INS_PROG_COMMANDS
);
165 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0x3700, AVR_JTAG_REG_ProgrammingCommand_Len
);
166 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0x3500, AVR_JTAG_REG_ProgrammingCommand_Len
);
167 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0x3700, AVR_JTAG_REG_ProgrammingCommand_Len
);
168 avr_jtag_senddat(avr
->jtag_info
.tap
, NULL
, 0x3700, AVR_JTAG_REG_ProgrammingCommand_Len
);
172 avr_jtag_senddat(avr
->jtag_info
.tap
, &poll_value
, 0x3700, AVR_JTAG_REG_ProgrammingCommand_Len
);
173 if (ERROR_OK
!= mcu_execute_queue())
177 LOG_DEBUG("poll_value = 0x%04" PRIx32
"", poll_value
);
178 } while (!(poll_value
& 0x0200));
183 FLASH_BANK_COMMAND_HANDLER(avrf_flash_bank_command
)
185 struct avrf_flash_bank
*avrf_info
;
189 LOG_WARNING("incomplete flash_bank avr configuration");
190 return ERROR_FLASH_BANK_INVALID
;
193 avrf_info
= malloc(sizeof(struct avrf_flash_bank
));
194 bank
->driver_priv
= avrf_info
;
196 avrf_info
->probed
= 0;
201 static int avrf_erase(struct flash_bank
*bank
, int first
, int last
)
203 LOG_INFO("%s", __FUNCTION__
);
207 static int avrf_protect(struct flash_bank
*bank
, int set
, int first
, int last
)
209 LOG_INFO("%s", __FUNCTION__
);
213 static int avrf_write(struct flash_bank
*bank
, uint8_t *buffer
, uint32_t offset
, uint32_t count
)
215 struct target
*target
= bank
->target
;
216 struct avr_common
*avr
= target
->arch_info
;
217 uint32_t cur_size
, cur_buffer_size
, page_size
;
219 if (bank
->target
->state
!= TARGET_HALTED
)
221 LOG_ERROR("Target not halted");
222 return ERROR_TARGET_NOT_HALTED
;
225 page_size
= bank
->sectors
[0].size
;
226 if ((offset
% page_size
) != 0)
228 LOG_WARNING("offset 0x%" PRIx32
" breaks required %" PRIu32
"-byte alignment", offset
, page_size
);
229 return ERROR_FLASH_DST_BREAKS_ALIGNMENT
;
232 LOG_DEBUG("offset is 0x%08" PRIx32
"", offset
);
233 LOG_DEBUG("count is %" PRId32
"", count
);
235 if (ERROR_OK
!= avr_jtagprg_enterprogmode(avr
))
243 if (count
> page_size
)
245 cur_buffer_size
= page_size
;
249 cur_buffer_size
= count
;
251 avr_jtagprg_writeflashpage(avr
, buffer
+ cur_size
, cur_buffer_size
, offset
+ cur_size
, page_size
);
252 count
-= cur_buffer_size
;
253 cur_size
+= cur_buffer_size
;
258 return avr_jtagprg_leaveprogmode(avr
);
261 #define EXTRACT_MFG(X) (((X) & 0xffe) >> 1)
262 #define EXTRACT_PART(X) (((X) & 0xffff000) >> 12)
263 #define EXTRACT_VER(X) (((X) & 0xf0000000) >> 28)
264 static int avrf_probe(struct flash_bank
*bank
)
266 struct target
*target
= bank
->target
;
267 struct avrf_flash_bank
*avrf_info
= bank
->driver_priv
;
268 struct avr_common
*avr
= target
->arch_info
;
269 struct avrf_type
*avr_info
= NULL
;
273 if (bank
->target
->state
!= TARGET_HALTED
)
275 LOG_ERROR("Target not halted");
276 return ERROR_TARGET_NOT_HALTED
;
279 avrf_info
->probed
= 0;
281 avr_jtag_read_jtagid(avr
, &device_id
);
282 if (ERROR_OK
!= mcu_execute_queue())
287 LOG_INFO("device id = 0x%08" PRIx32
"", device_id
);
288 if (EXTRACT_MFG(device_id
) != 0x1F)
290 LOG_ERROR("0x%" PRIx32
" is invalid Manufacturer for avr, 0x%X is expected", EXTRACT_MFG(device_id
), 0x1F);
293 for (i
= 0; i
< (int)(sizeof(avft_chips_info
) / sizeof(avft_chips_info
[0])); i
++)
295 if (avft_chips_info
[i
].chip_id
== EXTRACT_PART(device_id
))
297 avr_info
= &avft_chips_info
[i
];
298 LOG_INFO("target device is %s", avr_info
->name
);
303 if (avr_info
!= NULL
)
306 bank
->base
= 0x00000000;
307 bank
->size
= (avr_info
->flash_page_size
* avr_info
->flash_page_num
);
308 bank
->num_sectors
= avr_info
->flash_page_num
;
309 bank
->sectors
= malloc(sizeof(struct flash_sector
) * avr_info
->flash_page_num
);
311 for (i
= 0; i
< avr_info
->flash_page_num
; i
++)
313 bank
->sectors
[i
].offset
= i
* avr_info
->flash_page_size
;
314 bank
->sectors
[i
].size
= avr_info
->flash_page_size
;
315 bank
->sectors
[i
].is_erased
= -1;
316 bank
->sectors
[i
].is_protected
= 1;
319 avrf_info
->probed
= 1;
324 // chip not supported
325 LOG_ERROR("0x%" PRIx32
" is not support for avr", EXTRACT_PART(device_id
));
327 avrf_info
->probed
= 1;
332 static int avrf_auto_probe(struct flash_bank
*bank
)
334 struct avrf_flash_bank
*avrf_info
= bank
->driver_priv
;
335 if (avrf_info
->probed
)
337 return avrf_probe(bank
);
340 static int avrf_protect_check(struct flash_bank
*bank
)
342 LOG_INFO("%s", __FUNCTION__
);
346 static int avrf_info(struct flash_bank
*bank
, char *buf
, int buf_size
)
348 struct target
*target
= bank
->target
;
349 struct avr_common
*avr
= target
->arch_info
;
350 struct avrf_type
*avr_info
= NULL
;
354 if (bank
->target
->state
!= TARGET_HALTED
)
356 LOG_ERROR("Target not halted");
357 return ERROR_TARGET_NOT_HALTED
;
360 avr_jtag_read_jtagid(avr
, &device_id
);
361 if (ERROR_OK
!= mcu_execute_queue())
366 LOG_INFO("device id = 0x%08" PRIx32
"", device_id
);
367 if (EXTRACT_MFG(device_id
) != 0x1F)
369 LOG_ERROR("0x%" PRIx32
" is invalid Manufacturer for avr, 0x%X is expected", EXTRACT_MFG(device_id
), 0x1F);
372 for (i
= 0; i
< (int)(sizeof(avft_chips_info
) / sizeof(avft_chips_info
[0])); i
++)
374 if (avft_chips_info
[i
].chip_id
== EXTRACT_PART(device_id
))
376 avr_info
= &avft_chips_info
[i
];
377 LOG_INFO("target device is %s", avr_info
->name
);
383 if (avr_info
!= NULL
)
386 snprintf(buf
, buf_size
, "%s - Rev: 0x%" PRIx32
"", avr_info
->name
, EXTRACT_VER(device_id
));
391 // chip not supported
392 snprintf(buf
, buf_size
, "Cannot identify target as a avr\n");
393 return ERROR_FLASH_OPERATION_FAILED
;
397 static int avrf_mass_erase(struct flash_bank
*bank
)
399 struct target
*target
= bank
->target
;
400 struct avr_common
*avr
= target
->arch_info
;
402 if (target
->state
!= TARGET_HALTED
)
404 LOG_ERROR("Target not halted");
405 return ERROR_TARGET_NOT_HALTED
;
408 if ((ERROR_OK
!= avr_jtagprg_enterprogmode(avr
))
409 || (ERROR_OK
!= avr_jtagprg_chiperase(avr
))
410 || (ERROR_OK
!= avr_jtagprg_leaveprogmode(avr
)))
418 COMMAND_HANDLER(avrf_handle_mass_erase_command
)
424 command_print(cmd_ctx
, "avr mass_erase <bank>");
428 struct flash_bank
*bank
;
429 int retval
= CALL_COMMAND_HANDLER(flash_command_get_bank_by_num
, 0, &bank
);
430 if (ERROR_OK
!= retval
)
433 if (avrf_mass_erase(bank
) == ERROR_OK
)
435 /* set all sectors as erased */
436 for (i
= 0; i
< bank
->num_sectors
; i
++)
438 bank
->sectors
[i
].is_erased
= 1;
441 command_print(cmd_ctx
, "avr mass erase complete");
445 command_print(cmd_ctx
, "avr mass erase failed");
448 LOG_DEBUG("%s", __FUNCTION__
);
452 static int avrf_register_commands(struct command_context
*cmd_ctx
)
454 struct command
*avr_cmd
= register_command(cmd_ctx
, NULL
, "avr",
455 NULL
, COMMAND_ANY
, "avr flash specific commands");
457 register_command(cmd_ctx
, avr_cmd
, "mass_erase",
458 avrf_handle_mass_erase_command
, COMMAND_EXEC
,
459 "mass erase device");
464 struct flash_driver avr_flash
= {
466 .register_commands
= &avrf_register_commands
,
467 .flash_bank_command
= &avrf_flash_bank_command
,
468 .erase
= &avrf_erase
,
469 .protect
= &avrf_protect
,
470 .write
= &avrf_write
,
471 .probe
= &avrf_probe
,
472 .auto_probe
= &avrf_auto_probe
,
473 .erase_check
= &default_flash_mem_blank_check
,
474 .protect_check
= &avrf_protect_check
,