iLiad Thoughts how to flash the iLiad ourselves

TadW · 08-17-2006, 05:59 AM

Couldn't we think of booting the iLiad directly via a TFTP-Server addressing the iLiad through its MAC address? Does anyone know if the iLiad has a serial interface?

Also check out this PDF: Running Linux on ARM Platforms

doctorow · 08-17-2006, 06:19 AM

Pretty sure it does. Part of the core bootstrap includes the OpenEmbedded tool setserial.

TadW · 08-17-2006, 06:39 AM

Then it should be relatively easy to boot the iLiad via TFTP, especially since we have the compressed linux image.

deadite66 · 08-17-2006, 10:23 AM

is it possible to redirect (ettercap?) to a custom ids server and download that way?

scotty1024 · 08-17-2006, 02:59 PM

The 91c111 and the PXA-255 support a firmware downloading feature.

The PXA-255 has a well defined JTAG interface for driving it (and downloading firmware) that may be hooked to the USB interface through extended USB registers (a common embedded system hack).

The PXA-255 has a light weight and a full hardware handshake UART for RS-232C.

I don't know which of the above (or some other means) iRex implemented in their design. I'd put my money on the USB JTAG interface though, it is the most straight forward and provides pretty complete hardware debugging support.

One other clue, their developer posting made a reference to a debug environment that was unfamiliar to me. Someone could run that reference down in Google...

TadW · 08-17-2006, 04:05 PM

scotty, can you post us the reference to the debug environment? That's very exciting news if we don't have to open the iLiad in order to access its serial interface.

b_k · 08-17-2006, 04:24 PM

Quote:

Originally Posted by scotty1024

...One other clue, their developer posting made a reference to a debug environment that was unfamiliar to me. Someone could run that reference down in Google...

http://www.lauterbach.de/icd.html
Thats what i found with google "lauterbach debugger" and going through their products listing searching for JTAG.

scotty1024 · 08-17-2006, 05:15 PM

Or possibly this device:
http://www.lauterbach.de/frames.html?bdmarm.html

Thanks for the Google work, I'm guessing my clicking on English only in my preferences kept me from finding it...

scotty1024 · 08-17-2006, 06:03 PM

More on JTAG: http://en.wikipedia.org/wiki/JTAG
More on Philips USB chip said to be in iLiad: http://jp.semiconductors.philips.com...ISP1362-04.pdf

The Philips USB chip has the three test pins... but the above PDF doesn't document how to open up any support the chip might have for USB debug access. iRex may have a hacked Travel Hub that allows yanking a pin to enable/disable JTAG access. This kind of hack allows for easier diagnostics of returned defective units, which is why this kind of support gets my money as it allows all units to be JTAG'd for repair, not just "development" units.

ali · 08-17-2006, 06:05 PM

Quote:

Originally Posted by scotty1024

I'd put my money on the USB JTAG interface though, it is the most straight forward and provides pretty complete hardware debugging support.

At some point, some iRex guy told that a full reflash couldn't be done by the iRex programmers themselves, but only in some hardware repair center. (Anybody can find that or tell me I remember it wrong?) Since then, I'm no longer convinced that the JTAG interface is accessible through the connector.

scotty1024 · 08-17-2006, 11:20 PM

I've been wondering where the boot code lives.

The MSystems device seems to have the kernel and user document filesystems but can't hold the reset, POST, configure and boot loader.

Maybe they were speaking to that?

Antartica · 08-18-2006, 04:04 AM

For thoso who want a gentle introduction to what is a JTAG, and how to use a JTAG from Linux to program a Linux device (an iPAQ in the example), here are some links:

http://web.archive.org/web/200410290...de/jtag-howto/
HP iPaq H5450 JTAG HOWTO

http://openwince.sourceforge.net/jtag/
JTAG Tools (Linux)

http://repair4pda.org/handheld_jtag.html
How to Build a JTAG Interface for PDA or Handheld PC

http://openwince.sourceforge.net/jtag/iPAQ-3600/
How to connect the cables on an iPAQ for JTAG flash programming and a sample work session with Linux JTAG Tools

http://axl.freeyellow.com/iPAQ/image...C5-pp2jtag.pdf
Schematics of a simple DIY JTAG adaptor (parallel port to JTAG), supported by Linux JTAG Tools (it seems to be the one used in the previous example).

Now we only have to know if the pins of the JTAG are in the iliad connector or if it's necessary to open the iliad to reach the nedded points.

08-17-2006, 05:59 AM	#1
TadW Uebermensch Posts: 2,583 Karma: 1094606 Join Date: Jul 2003 Location: Italy Device: Kindle	Thoughts how to flash the iLiad ourselves Couldn't we think of booting the iLiad directly via a TFTP-Server addressing the iLiad through its MAC address? Does anyone know if the iLiad has a serial interface? Also check out this PDF: Running Linux on ARM Platforms

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
iLiad unable to flash my iLiad	JeroenM	iRex	6	10-28-2010 12:33 PM
Iliad V2 Compact flash	Fermthe	iRex	2	09-28-2008 07:39 AM
Thoughts on iLiad support	henrikb	iRex	1	09-21-2008 08:56 PM
My new iLiad and me - first thoughts.	rachaelandrews	iRex	13	08-15-2008 09:13 AM
How Compact Flash on iLiad accessed?	bard69	iRex	6	07-10-2008 09:57 AM

08-17-2006, 06:19 AM	#2
doctorow Guru Posts: 914 Karma: 3410461 Join Date: May 2004 Device: Kindle Touch	Pretty sure it does. Part of the core bootstrap includes the OpenEmbedded tool setserial.

08-17-2006, 06:39 AM	#3
TadW Uebermensch Posts: 2,583 Karma: 1094606 Join Date: Jul 2003 Location: Italy Device: Kindle	Then it should be relatively easy to boot the iLiad via TFTP, especially since we have the compressed linux image.

08-17-2006, 10:23 AM	#4
deadite66 Groupie Posts: 197 Karma: 16 Join Date: Apr 2006 Device: irex iliad, uk Kindle gen3	is it possible to redirect (ettercap?) to a custom ids server and download that way?

08-17-2006, 02:59 PM	#5
scotty1024 Banned Posts: 1,300 Karma: 1479 Join Date: Jul 2006 Location: Peoples Republic of Washington Device: Reader / iPhone / Librie / Kindle	The 91c111 and the PXA-255 support a firmware downloading feature. The PXA-255 has a well defined JTAG interface for driving it (and downloading firmware) that may be hooked to the USB interface through extended USB registers (a common embedded system hack). The PXA-255 has a light weight and a full hardware handshake UART for RS-232C. I don't know which of the above (or some other means) iRex implemented in their design. I'd put my money on the USB JTAG interface though, it is the most straight forward and provides pretty complete hardware debugging support. One other clue, their developer posting made a reference to a debug environment that was unfamiliar to me. Someone could run that reference down in Google...

08-17-2006, 04:05 PM	#6
TadW Uebermensch Posts: 2,583 Karma: 1094606 Join Date: Jul 2003 Location: Italy Device: Kindle	scotty, can you post us the reference to the debug environment? That's very exciting news if we don't have to open the iLiad in order to access its serial interface.

08-17-2006, 05:15 PM	#8
scotty1024 Banned Posts: 1,300 Karma: 1479 Join Date: Jul 2006 Location: Peoples Republic of Washington Device: Reader / iPhone / Librie / Kindle	Or possibly this device: http://www.lauterbach.de/frames.html?bdmarm.html Thanks for the Google work, I'm guessing my clicking on English only in my preferences kept me from finding it...

08-17-2006, 06:03 PM	#9
scotty1024 Banned Posts: 1,300 Karma: 1479 Join Date: Jul 2006 Location: Peoples Republic of Washington Device: Reader / iPhone / Librie / Kindle	More on JTAG: http://en.wikipedia.org/wiki/JTAG More on Philips USB chip said to be in iLiad: http://jp.semiconductors.philips.com...ISP1362-04.pdf The Philips USB chip has the three test pins... but the above PDF doesn't document how to open up any support the chip might have for USB debug access. iRex may have a hacked Travel Hub that allows yanking a pin to enable/disable JTAG access. This kind of hack allows for easier diagnostics of returned defective units, which is why this kind of support gets my money as it allows all units to be JTAG'd for repair, not just "development" units.

08-17-2006, 11:20 PM	#11
scotty1024 Banned Posts: 1,300 Karma: 1479 Join Date: Jul 2006 Location: Peoples Republic of Washington Device: Reader / iPhone / Librie / Kindle	I've been wondering where the boot code lives. The MSystems device seems to have the kernel and user document filesystems but can't hold the reset, POST, configure and boot loader. Maybe they were speaking to that?

08-18-2006, 04:04 AM	#12
Antartica Evangelist Posts: 423 Karma: 1517132 Join Date: Jun 2006 Location: Madrid, Spain Device: quaderno, remarkable2, yotaphone2, prs950, iliad, onhandpc, newton	For thoso who want a gentle introduction to what is a JTAG, and how to use a JTAG from Linux to program a Linux device (an iPAQ in the example), here are some links: http://web.archive.org/web/200410290...de/jtag-howto/ HP iPaq H5450 JTAG HOWTO http://openwince.sourceforge.net/jtag/ JTAG Tools (Linux) http://repair4pda.org/handheld_jtag.html How to Build a JTAG Interface for PDA or Handheld PC http://openwince.sourceforge.net/jtag/iPAQ-3600/ How to connect the cables on an iPAQ for JTAG flash programming and a sample work session with Linux JTAG Tools http://axl.freeyellow.com/iPAQ/image...C5-pp2jtag.pdf Schematics of a simple DIY JTAG adaptor (parallel port to JTAG), supported by Linux JTAG Tools (it seems to be the one used in the previous example). Now we only have to know if the pins of the JTAG are in the iliad connector or if it's necessary to open the iliad to reach the nedded points.