Programming Flash with .mot

whoam — Thu, 28 Sep 2017 12:57:00 GMT

Hi,

I'm trying to get behind the sequence of Flash programming over JTAG. The ECU is a 5775K.

I'm flashing with Lauterbach the following .mot record:

S2 14 F9C000 47524D5354524D0000801511AA5AA555 62

The Signal Analyzer shows the following TDI/TDO Values:

TDI 0x010 --> Access to CPU Scan Register (write)
TD0 0x209
TDI 0x0000040253DD0000FFFFC0000000000000F9C00
TDO 0x0000000270600000FFFFC004000000000000000
TDI 0x311 --> Execute IR an no Register selected
TDO 0x209
TDI 0x211 -->no Register selected
TDO 0x201
TDI 0x27F --> Bypass register
TDO 0x209
TDI 0x210 --> Access CPU scan Register (read)
TDO 0x209
TDI 0x00 (all 192 bits)
TDO 0x0000000270600000FFFFC004000000000000000047524D53

My question is about the bold parts. What command is 53DD0000? Is it e_lwz?

And the part which confuses me the most is the last TDO. The desired address is selected with the 2.TDI and after that the value which should be written to this address is now in TDO. Can anyone explain this to me? If the Data would be in TDI everything would be clear, but this part I don't get..

Maybe someone can help me :smileyhappy:

Thanks in advance

whoam

Re: Programming Flash with .mot

lukaszadrapa — Thu, 05 Oct 2017 04:58:21 GMT

Hi,

what is your goal? If you want to develop own JTAG programmer, take a look at:

https://www.nxp.com/docs/en/application-note/AN4365.pdf

and

Example JTAG access – Addendum to application notes AN3283 and AN4365

It's written for MPC56xx but most of the information is valid also for MPC57xx family.

Regards,

Lukas

topic Re: Programming Flash with .mot in MPC5xxx

Programming Flash with .mot

Re: Programming Flash with .mot