2 \author Travis Goodspeed <travis at radiantmachines.com>
3 \brief MSP430 JTAG (16-bit)
11 unsigned int jtag430mode=MSP430X2MODE;
14 void jtag430_setr(u8 reg, u16 val){
15 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
16 jtag_dr_shift16(0x3401);// release low byte
17 jtag_ir_shift8(IR_DATA_16BIT);
19 //0x4030 is "MOV #foo, r0"
20 //Right-most field is register, so 0x4035 loads r5
21 jtag_dr_shift16(0x4030+reg);
24 jtag_dr_shift16(val);// Value for the register
26 jtag_ir_shift8(IR_ADDR_CAPTURE);
28 CLRTCLK ;// Now reg is set to new value.
29 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
30 jtag_dr_shift16(0x2401);// low byte controlled by JTAG
33 //! Set the program counter.
34 void jtag430_setpc(unsigned int adr){
39 void jtag430_haltcpu(){
40 //jtag430_setinstrfetch();
42 jtag_ir_shift8(IR_DATA_16BIT);
43 jtag_dr_shift16(0x3FFF);//JMP $+0
46 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
47 jtag_dr_shift16(0x2409);//set JTAG_HALT bit
52 void jtag430_releasecpu(){
54 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
55 jtag_dr_shift16(0x2401);
56 jtag_ir_shift8(IR_ADDR_CAPTURE);
60 //! Read data from address
61 unsigned int jtag430_readmem(unsigned int adr){
66 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
69 jtag_dr_shift16(0x2409);//word read
71 jtag_dr_shift16(0x2419);//byte read
72 jtag_ir_shift8(IR_ADDR_16BIT);
73 jtag_dr_shift16(adr);//address
74 jtag_ir_shift8(IR_DATA_TO_ADDR);
78 toret=jtag_dr_shift16(0x0000);//16 bit return
83 //! Write data to address.
84 void jtag430_writemem(unsigned int adr, unsigned int data){
86 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
88 jtag_dr_shift16(0x2408);//word write
90 jtag_dr_shift16(0x2418);//byte write
91 jtag_ir_shift8(IR_ADDR_16BIT);
93 jtag_ir_shift8(IR_DATA_TO_ADDR);
94 jtag_dr_shift16(data);
98 //! Write data to flash memory. Must be preconfigured.
99 void jtag430_writeflashword(unsigned int adr, unsigned int data){
102 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
103 jtag_dr_shift16(0x2408);//word write
104 jtag_ir_shift8(IR_ADDR_16BIT);
105 jtag_dr_shift16(adr);
106 jtag_ir_shift8(IR_DATA_TO_ADDR);
107 jtag_dr_shift16(data);
110 //Return to read mode.
112 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
113 jtag_dr_shift16(0x2409);
116 jtag430_writemem(adr,data);
118 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
119 jtag_dr_shift16(0x2409);
123 jtag430_tclk_flashpulses(35); //35 standard
126 //! Configure flash, then write a word.
127 void jtag430_writeflash(unsigned int adr, unsigned int data){
130 //FCTL1=0xA540, enabling flash write
131 jtag430_writemem(0x0128, 0xA540);
132 //FCTL2=0xA540, selecting MCLK as source, DIV=1
133 jtag430_writemem(0x012A, 0xA540);
134 //FCTL3=0xA500, should be 0xA540 for Info Seg A on 2xx chips.
135 jtag430_writemem(0x012C, 0xA500); //all but info flash.
137 //Write the word itself.
138 jtag430_writeflashword(adr,data);
140 //FCTL1=0xA500, disabling flash write
141 jtag430_writemem(0x0128, 0xA500);
143 //jtag430_releasecpu();
153 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
154 jtag_dr_shift16(0x2C01); // apply
155 jtag_dr_shift16(0x2401); // remove
161 jtagid = jtag_ir_shift8(IR_ADDR_CAPTURE); // get JTAG identifier
164 jtag430_writemem(0x0120, 0x5A80); // Diabled Watchdog
169 #define ERASE_GLOB 0xA50E
170 #define ERASE_ALLMAIN 0xA50C
171 #define ERASE_MASS 0xA506
172 #define ERASE_MAIN 0xA504
173 #define ERASE_SGMT 0xA502
175 //! Configure flash, then write a word.
176 void jtag430_eraseflash(unsigned int mode, unsigned int adr, unsigned int count){
180 jtag430_writemem(0x0128, mode);
181 //FCTL2=0xA540, selecting MCLK as source, DIV=1
182 jtag430_writemem(0x012A, 0xA540);
183 //FCTL3=0xA500, should be 0xA540 for Info Seg A on 2xx chips.
184 jtag430_writemem(0x012C, 0xA500);
186 //Write the erase word.
187 jtag430_writemem(adr, 0x55AA);
188 //Return to read mode.
190 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
191 jtag_dr_shift16(0x2409);
194 jtag430_tclk_flashpulses(count);
196 //FCTL1=0xA500, disabling flash write
197 jtag430_writemem(0x0128, 0xA500);
199 //jtag430_releasecpu();
203 //! Reset the TAP state machine.
204 void jtag430_resettap(){
212 // Navigate to reset state.
213 // Should be at least six.
226 Sometimes this isn't necessary. */
238 //! Start JTAG, take pins
239 void jtag430_start(){
242 //Known-good starting position.
243 //Might be unnecessary.
249 //Entry sequence from Page 67 of SLAU265A for 4-wire MSP430 JTAG
261 //Perform a reset and disable watchdog.
263 jtag430_writemem(0x120,0x5a80);//disable watchdog
268 //! Start normally, not JTAG.
270 debugstr("Exiting JTAG.");
273 //Known-good starting position.
274 //Might be unnecessary.
280 //Entry sequence from Page 67 of SLAU265A for 4-wire MSP430 JTAG
289 //! Set CPU to Instruction Fetch
290 void jtag430_setinstrfetch(){
292 jtag_ir_shift8(IR_CNTRL_SIG_CAPTURE);
294 // Wait until instruction fetch state.
296 if (jtag_dr_shift16(0x0000) & 0x0080)
304 //! Handles classic MSP430 JTAG commands. Forwards others to JTAG.
305 void jtag430handle(unsigned char app,
311 //debugstr("Classic MSP430 handler.");
315 * Sometimes JTAG doesn't init correctly.
316 * This restarts the connection if the masked-rom
317 * chip ID cannot be read. Should print warning
318 * for testing server.
320 while((i=jtag430_readmem(0xff0))==0xFFFF){
330 //TAP setup, fuse check
333 cmddata[0]=jtag_ir_shift8(IR_BYPASS);
341 case JTAG430_HALTCPU:
345 case JTAG430_RELEASECPU:
346 jtag430_releasecpu();
349 case JTAG430_SETINSTRFETCH:
350 jtag430_setinstrfetch();
354 case JTAG430_READMEM:
358 //Fetch large blocks for bulk fetches,
359 //small blocks for individual peeks.
361 len=(cmddataword[2]);//always even.
364 len&=~1;//clear lsbit
366 txhead(app,verb,len);
369 val=jtag430_readmem(at);
373 serial_tx((val&0xFF00)>>8);
376 case JTAG430_WRITEMEM:
379 jtag430_writemem(cmddataword[0],cmddataword[2]);
380 cmddataword[0]=jtag430_readmem(cmddataword[0]);
384 case JTAG430_WRITEFLASH:
386 //debugstr("Poking flash memory.");
387 jtag430_writeflash(cmddataword[0],cmddataword[2]);
389 //Try again if failure.
390 //if(cmddataword[2]!=jtag430_readmem(cmddataword[0]))
391 // jtag430_writeflash(cmddataword[0],cmddataword[2]);
394 cmddataword[0]=jtag430_readmem(cmddataword[0]);
398 case JTAG430_WRITEFLASH:
401 for(i=0;i<(len>>1)-2;i++){
402 //debugstr("Poking flash memory.");
403 jtag430_writeflash(at+(i<<1),cmddataword[i+2]);
404 //Reflash if needed. Try this twice to save grace?
405 if(cmddataword[i]!=jtag430_readmem(at))
406 jtag430_writeflash(at+(i<<1),cmddataword[i+2]);
409 //Return result of first write as a word.
410 cmddataword[0]=jtag430_readmem(cmddataword[0]);
414 case JTAG430_ERASEFLASH:
415 jtag430_eraseflash(ERASE_MASS,0xFFFE,0x3000);
420 jtag430_setpc(cmddataword[0]);
424 jtag430_setr(cmddata[0],cmddataword[1]);
428 //jtag430_getr(cmddata[0]);
429 debugstr("JTAG430_GETREG not yet implemented.");
430 cmddataword[0]=0xDEAD;
433 case JTAG430_COREIP_ID:
434 case JTAG430_DEVICE_ID:
441 jtaghandle(app,verb,len);
443 //jtag430_resettap(); //DO NOT UNCOMMENT