2 \author Travis Goodspeed <travis at radiantmachines.com>
3 \brief MSP430 JTAG (16-bit)
11 unsigned int jtag430mode=MSP430X2MODE;
14 void jtag430_setr(u8 reg, u16 val){
15 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
16 jtag_dr_shift16(0x3401);// release low byte
17 jtag_ir_shift8(IR_DATA_16BIT);
19 //0x4030 is "MOV #foo, r0"
20 //Right-most field is register, so 0x4035 loads r5
21 jtag_dr_shift16(0x4030+reg);
24 jtag_dr_shift16(val);// Value for the register
26 jtag_ir_shift8(IR_ADDR_CAPTURE);
28 CLRTCLK ;// Now reg is set to new value.
29 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
30 jtag_dr_shift16(0x2401);// low byte controlled by JTAG
33 //! Set the program counter.
34 void jtag430_setpc(unsigned int adr){
39 void jtag430_haltcpu(){
40 //jtag430_setinstrfetch();
42 jtag_ir_shift8(IR_DATA_16BIT);
43 jtag_dr_shift16(0x3FFF);//JMP $+0
46 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
47 jtag_dr_shift16(0x2409);//set JTAG_HALT bit
52 void jtag430_releasecpu(){
54 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
55 jtag_dr_shift16(0x2401);
56 jtag_ir_shift8(IR_ADDR_CAPTURE);
60 //! Read data from address
61 unsigned int jtag430_readmem(unsigned int adr){
66 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
69 jtag_dr_shift16(0x2409);//word read
71 jtag_dr_shift16(0x2419);//byte read
72 jtag_ir_shift8(IR_ADDR_16BIT);
73 jtag_dr_shiftadr(adr);//address
74 jtag_ir_shift8(IR_DATA_TO_ADDR);
78 toret=jtag_dr_shift16(0x0000);//16 bit return
83 //! Write data to address.
84 void jtag430_writemem(unsigned int adr, unsigned int data){
86 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
88 jtag_dr_shift16(0x2408);//word write
90 jtag_dr_shift16(0x2418);//byte write
91 jtag_ir_shift8(IR_ADDR_16BIT);
92 jtag_dr_shiftadr(adr);
93 jtag_ir_shift8(IR_DATA_TO_ADDR);
94 jtag_dr_shift16(data);
98 //! Write data to flash memory. Must be preconfigured.
99 void jtag430_writeflashword(unsigned int adr, unsigned int data){
102 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
103 jtag_dr_shift16(0x2408);//word write
104 jtag_ir_shift8(IR_ADDR_16BIT);
105 jtag_dr_shiftadr(adr);
106 jtag_ir_shift8(IR_DATA_TO_ADDR);
107 jtag_dr_shift16(data);
110 //Return to read mode.
112 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
113 jtag_dr_shift16(0x2409);
116 jtag430_writemem(adr,data);
118 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
119 jtag_dr_shift16(0x2409);
123 jtag430_tclk_flashpulses(35); //35 standard
126 //! Configure flash, then write a word.
127 void jtag430_writeflash(unsigned int adr, unsigned int data){
130 //FCTL1=0xA540, enabling flash write
131 jtag430_writemem(0x0128, 0xA540);
132 //FCTL2=0xA540, selecting MCLK as source, DIV=1
133 jtag430_writemem(0x012A, 0xA540);
134 //FCTL3=0xA500, should be 0xA540 for Info Seg A on 2xx chips.
135 jtag430_writemem(0x012C, 0xA500); //all but info flash.
137 //Write the word itself.
138 jtag430_writeflashword(adr,data);
140 //FCTL1=0xA500, disabling flash write
141 jtag430_writemem(0x0128, 0xA500);
143 //jtag430_releasecpu();
153 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
154 jtag_dr_shift16(0x2C01); // apply
155 jtag_dr_shift16(0x2401); // remove
161 jtagid = jtag_ir_shift8(IR_ADDR_CAPTURE); // get JTAG identifier
164 jtag430_writemem(0x0120, 0x5A80); // Diabled Watchdog
169 #define ERASE_GLOB 0xA50E
170 #define ERASE_ALLMAIN 0xA50C
171 #define ERASE_MASS 0xA506
172 #define ERASE_MAIN 0xA504
173 #define ERASE_SGMT 0xA502
175 //! Configure flash, then write a word.
176 void jtag430_eraseflash(unsigned int mode, unsigned int adr, unsigned int count,
181 jtag430_writemem(0x0128, mode);
182 //FCTL2=0xA540, selecting MCLK as source, DIV=1
183 jtag430_writemem(0x012A, 0xA540);
184 //FCTL3=0xA500, should be 0xA540 for Info Seg A on 2xx chips.
186 jtag430_writemem(0x012C, 0xA540);
188 jtag430_writemem(0x012C, 0xA500);
190 //Write the erase word.
191 jtag430_writemem(adr, 0x55AA);
192 //Return to read mode.
194 jtag_ir_shift8(IR_CNTRL_SIG_16BIT);
195 jtag_dr_shift16(0x2409);
198 jtag430_tclk_flashpulses(count);
200 //FCTL1=0xA500, disabling flash write
201 jtag430_writemem(0x0128, 0xA500);
203 //jtag430_releasecpu();
207 //! Reset the TAP state machine.
208 void jtag430_resettap(){
216 // Navigate to reset state.
217 // Should be at least six.
230 Sometimes this isn't necessary. */
242 //! Start JTAG, take pins
243 void jtag430_start(){
246 //Known-good starting position.
247 //Might be unnecessary.
254 //Entry sequence from Page 67 of SLAU265A for 4-wire MSP430 JTAG
266 //Perform a reset and disable watchdog.
268 jtag430_writemem(0x120,0x5a80);//disable watchdog
275 debugstr("Exiting JTAG.");
278 //Known-good starting position.
279 //Might be unnecessary.
285 //Entry sequence from Page 67 of SLAU265A for 4-wire MSP430 JTAG
294 //! Set CPU to Instruction Fetch
295 void jtag430_setinstrfetch(){
297 jtag_ir_shift8(IR_CNTRL_SIG_CAPTURE);
299 // Wait until instruction fetch state.
301 if (jtag_dr_shift16(0x0000) & 0x0080)
309 //! Handles classic MSP430 JTAG commands. Forwards others to JTAG.
310 void jtag430handle(unsigned char app,
316 //debugstr("Classic MSP430 handler.");
320 * Sometimes JTAG doesn't init correctly.
321 * This restarts the connection if the masked-rom
322 * chip ID cannot be read. Should print warning
323 * for testing server.
325 while((i=jtag430_readmem(0xff0))==0xFFFF){
336 //TAP setup, fuse check
339 cmddata[0]=jtag_ir_shift8(IR_BYPASS);
347 case JTAG430_HALTCPU:
351 case JTAG430_RELEASECPU:
352 jtag430_releasecpu();
355 case JTAG430_SETINSTRFETCH:
356 jtag430_setinstrfetch();
360 case JTAG430_READMEM:
364 //Fetch large blocks for bulk fetches,
365 //small blocks for individual peeks.
367 len=(cmddataword[2]);//always even.
370 len&=~1;//clear lsbit
372 txhead(app,verb,len);
375 val=jtag430_readmem(at);
379 serial_tx((val&0xFF00)>>8);
382 case JTAG430_WRITEMEM:
385 jtag430_writemem(cmddataword[0],cmddataword[2]);
386 cmddataword[0]=jtag430_readmem(cmddataword[0]);
390 case JTAG430_WRITEFLASH:
392 //debugstr("Poking flash memory.");
393 jtag430_writeflash(cmddataword[0],cmddataword[2]);
395 //Try again if failure.
396 //if(cmddataword[2]!=jtag430_readmem(cmddataword[0]))
397 // jtag430_writeflash(cmddataword[0],cmddataword[2]);
400 cmddataword[0]=jtag430_readmem(cmddataword[0]);
404 case JTAG430_WRITEFLASH:
407 for(i=0;i<(len>>1)-2;i++){
408 //debugstr("Poking flash memory.");
409 jtag430_writeflash(at+(i<<1),cmddataword[i+2]);
410 //Reflash if needed. Try this twice to save grace?
411 if(cmddataword[i]!=jtag430_readmem(at))
412 jtag430_writeflash(at+(i<<1),cmddataword[i+2]);
415 //Return result of first write as a word.
416 cmddataword[0]=jtag430_readmem(cmddataword[0]);
420 case JTAG430_ERASEFLASH:
421 jtag430_eraseflash(ERASE_MASS,0xFFFE,0x3000,0);
424 case JTAG430_ERASEINFO:
425 jtag430_eraseflash(ERASE_MASS,0xFFFE,0x3000,1);
430 jtag430_setpc(cmddataword[0]);
434 jtag430_setr(cmddata[0],cmddataword[1]);
438 //jtag430_getr(cmddata[0]);
439 debugstr("JTAG430_GETREG not yet implemented.");
440 cmddataword[0]=0xDEAD;
443 case JTAG430_COREIP_ID:
444 case JTAG430_DEVICE_ID:
451 jtaghandle(app,verb,len);
453 //jtag430_resettap(); //DO NOT UNCOMMENT